Shuting Zhao
cdc5190c56
update nirmata/kyverno to kyverno/kyverno
2020-10-07 11:12:31 -07:00
Mohan B E
51ac382c6c
Feature/configmaps var 724 ( #1118 )
...
* added configmap data substitution for foreground mutate and validate
* added configmap data substitution for foreground mutate and validate fmt
* added configmap lookup for background
* added comments to resource cache
* added configmap data lookup in preConditions
* added parse strings in In operator and configmap lookup docs
* added configmap lookup docs
* modified configmap lookup docs
2020-09-22 14:11:49 -07:00
shuting
e0f617b383
810 support cronJob for auto-gen ( #1089 )
...
* add watch policy to clusterrole kyverno:customresources
* - improve auto-gen policy application logic - remove unused code
* move method to common util
* auto-gen rule for cronJob
* update doc
* set CronJob as default auto-gen pod controller
* - update doc; - fix test
* remove unused code
2020-09-01 09:11:20 -07:00
shuting
d6062fdd47
Add go fmt ( #1055 )
...
* remove empty flag
* format code
* revert change in install.yaml
2020-08-14 12:21:06 -07:00
Yuvraj
73840e3c5f
configrable rules added ( #1017 )
...
* configrable rules added
* fix exclude group logic from code
* flag added in yaml
* exclude username added
* exclude username added
* config interface implimented
* configure exclude username
* get role ref
* test case fixed
* panic fix
* move from interface to slice
* exclude added in mutate
* trim strings
* configmap changes added
* kustomize changes for configmap
* k8s resources added
2020-08-07 17:09:24 -07:00
Mohan B E
a14828246d
Feature/api version 852 ( #1028 )
...
* apiVersion support for generate
* added apiVersion to crds
2020-08-07 09:47:33 +05:30
shuting
7ffeb6efca
skip generate violation on pre-exist pod ( #952 )
2020-06-25 09:52:54 -07:00
shuting
06a2b246dd
Background mode only apply to running pods ( #949 )
...
* background mode process Running pod only
* update debug doc
2020-06-25 09:52:27 -07:00
Shuting Zhao
139000fe3f
fix namespace lister
2020-05-26 22:26:07 -07:00
Shuting Zhao
7ea2930fa4
- fix violations re-create on the same resource - skip background processing if a resource is to be deleted
2020-05-26 16:25:11 -07:00
Jim Bugwadia
838d02c475
Bugfix/659 support wildcards for namespaces ( #871 )
...
* - support wildcards for namespaces
* do not annotate resource, unless policy is an autogen policy
* close HTTP body
* improve messages
* remove policy store
Policy store was not fully implemented and simply provided a way
to list all polices and get a policy by name, which can be done via
standard client-go interfaces.
We need to revisit and design a better PolicyStore that provides fast
lookups for matching policies based on names, namespaces, etc.
* handle wildcard namespaces in background processing
* fix unit tests 1) remove platform dependent path usage 2) remove policy store
* add test case for mutate with wildcard namespaces
2020-05-26 10:36:56 -07:00
Shuting Zhao
bc981f9a11
fix 869
2020-05-20 13:42:23 -07:00
Shuting Zhao
b9d38d2fd3
fix error "failed to list resources"
2020-05-18 11:56:17 -07:00
Jim Bugwadia
8c4c98d1a4
Merge pull request #855 from nirmata/bugfix/fixes_791_792_832
...
Bugfix/fixes 791 792 832
2020-05-17 19:30:11 -07:00
Yuvraj
0635df7b11
Bug - annotation inserted to podTemplate by auto-gen should reflect the policy name ( #850 )
...
* Added check for annotation inserted to podTemplate by auto-gen
* skip reporting violation on pod which has annotation pod-policies.kyverno.io/autogen-applied
* Revert Changes
* typo fixed
* Update condition for skiping the pods
2020-05-17 18:51:56 -07:00
Jim Bugwadia
bc37d27de6
remove unnecessary comments and reduce cache resync intervals
2020-05-17 09:51:18 -07:00
shivkumar dudhani
4320111c5c
fix logs api
2020-03-20 11:43:21 -07:00
shivkumar dudhani
e6e5bbb603
Merge branch 'master' into access_check
2020-03-17 17:23:18 -07:00
shivkumar dudhani
1b1ab78f77
logs & access
2020-03-17 11:05:20 -07:00
shravan
592df74c57
527 tested mutate needs further testing
2020-02-22 23:35:02 +05:30
shuting
3343d73b76
linter fix ( #657 )
2020-01-27 08:58:53 -08:00
Shivkumar Dudhani
8c1d79ab28
linter suggestions ( #655 )
...
* cleanup phase 1
* linter fixes phase 2
2020-01-24 12:05:53 -08:00
Shivkumar Dudhani
1171ac691b
cleanup phase 1 ( #653 )
2020-01-24 09:37:12 -08:00
Shuting Zhao
076196688e
skip process existing pod if annotation present
2019-12-26 18:41:14 -08:00
shivkumar dudhani
b5de11fc0e
refactor engine packages for validate & generate
2019-12-12 15:02:59 -08:00
Shuting Zhao
b67577994a
update apiversion to v1 in code
2019-11-13 13:41:08 -08:00
shivkumar dudhani
64eab3d1d6
initial commit
2019-10-18 17:38:46 -07:00
shivkumar dudhani
70ff2fa177
update engineResponse Name
2019-10-08 10:57:24 -07:00
shuting
3d02f81434
Merge pull request #351 from nirmata/348_feature_wildcardsNamespaces
...
support wild cards for namespaces in rule resource description
2019-09-12 23:06:51 -07:00
shivkumar dudhani
44af35d6e4
support wild cards for namespaces in rule resource description
2019-09-12 17:11:55 -07:00
shivkumar dudhani
5dab189743
fix event resource name + add filtered kinds to policy controller & namespace + fix messages
2019-09-12 15:04:35 -07:00
shivkumar dudhani
dee4eef44a
check the exclude conditions with AND
2019-09-03 19:31:42 -07:00
shivkumar dudhani
fa53519e2a
change CRD Name to ClusterPolicy & ClusterPolicyViolations
2019-09-03 14:51:51 -07:00
shivkumar dudhani
5b80da32ba
replace policyInfo with engineResponse
2019-08-26 13:34:42 -07:00
shivkumar dudhani
4f309480af
report stats from existing resources
2019-08-20 16:57:19 -07:00
shivkumar dudhani
9cfdf45bbc
fixes
2019-08-19 11:52:48 -07:00
shivkumar dudhani
44db8b064e
resource description: support list of namespaces
2019-08-17 09:45:57 -07:00
shivkumar dudhani
aed0ed0dc1
clean up
2019-08-14 10:01:47 -07:00
shivkumar dudhani
c04a935300
existing resource reporting
2019-08-13 13:15:04 -07:00
shivkumar dudhani
e7b538be79
add process existing for mutation & validation + come cleanup
2019-08-13 11:32:12 -07:00
shivkumar dudhani
4bf3043a18
check cache drop for process existing
2019-08-13 10:03:00 -07:00
shivkumar dudhani
cc368b6182
existing resource processing v1
2019-08-13 09:37:02 -07:00
