mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-05 15:37:19 +00:00
Code Activity
4436 commits 16 branches 550 tags 287 MiB
Commit graph

4436 commits

This branch
This branch
All branches
Author SHA1 Message Date
Anutosh Bhat
dafa27e928
Corrected description for UpdateRequest struct (#4215) 
* Corrected description for UpdateRequest struct

Signed-off-by: anutosh491 <andersonbhat491@gmail.com>

* Added changes for docs

Signed-off-by: anutosh491 <andersonbhat491@gmail.com>

* Added diff shown in verify generate tests

Signed-off-by: anutosh491 <andersonbhat491@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-07-19 12:16:50 +00:00
Anutosh Bhat
81c699b4a5
Removed confusing output message for the apply and replaced no of policies by no of policy rules count in the output message (#4229) 
Signed-off-by: anutosh491 <andersonbhat491@gmail.com>
 2022-07-19 16:28:09 +05:30
Vyankatesh Kudtarkar
612b7fdff2
fix kyverno cli policy-report typo (#4224) 
- fix kyverno cli policy report typo 
- add shorthand for policy-report flag

Signed-off-by: Vyankatesh vyankateshkd@gmail.com
 2022-07-18 07:12:19 +00:00
Meha Bhalodiya
06460c0e68
feat: improve flag message for disableMetricsExport (#4194) 
* feat: improve flag message for disableMetricsExport 

Signed-off-by: Meha Bhalodiya <mehabhalodiya@gmail.com>

* update description

Signed-off-by: Meha Bhalodiya <mehabhalodiya@gmail.com>
 2022-07-15 01:07:45 +08:00
vivek kumar sahu
f6c131cfcc
precondition failure will skip rule independent of audit or enforce mode (#4163) 
* precondition fails will skip rule independent of audit or enforce mode

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

* Added cli-test cases

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

* small fix

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-07-14 09:35:27 +05:30
Vyankatesh Kudtarkar
e71493e5cc
Make method public (#4207) 
* npmctl chnages

* revert commit

* remove comment
 2022-07-13 13:37:51 -07:00
Byron Ibarra
f8a79be9a5
Fix UpdateRequest labeling (from pull #4199) (#4212) 
Signed-off-by: Byron Ibarra V <bibarrav@falabella.cl>
 2022-07-13 03:08:15 +05:30
Prateek Pandey
c0cc4b781c
use the unstructured list instead of interface type (#4210) 
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
 2022-07-12 15:07:40 +00:00
Tathagata Paul
3e2894b6fa
feat: Opentelemetry support for metrics and traces (#3910) 
* integrating opentelemetry

Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>

* fix multiple imports

Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>

* fixed cli help statement

Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>

* added init file for metrics

Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-07-11 17:49:47 +00:00
Thomas Hartland
6e9609409b
Use non-blocking channel send for UpdateWebhookChan (#4204) 
If the channel send is blocked then there is already an
update queued, and there is no point waiting to queue
another one.

In profiling, the channel send in monitor.go has been
seen to "leak" goroutines as the channel is not being
read from fast enough, but the root cause is not known.

Signed-off-by: Thomas Hartland <thomas.hartland@diamond.ac.uk>
 2022-07-12 00:21:20 +08:00
Jim Bugwadia
58337716c8
Fix merging JSON patches (#4202) 
* fix merge of image verify and mutate patches

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update json patch merge logic

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2022-07-11 09:26:31 +05:30
Chris Bandy
0712022640
Resolve conflict introduced to contributing page (#4192) 
Sections were added and moved in f67f145d90 and d05a0759ca, resulting in
duplicate headers.

Signed-off-by: Chris Bandy <bandy.chris@gmail.com>
 2022-07-07 18:02:57 +00:00
vivek kumar sahu
a37901425f
return helpful error message on invalid patched resources. (#4129) 
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-07-06 13:24:28 +05:30
Batuhan Apaydın
d05a0759ca
docs(contributing): add how to cherry-pick section (#4127) 
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
 2022-07-05 15:55:55 -07:00
Charles-Edouard Brétéché
24e96884c5
refactor: finish refactoring generate e2e tests (#4090) 
* refactor: generate e2e GeneratePolicyDeletionforCloneTests

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* refactor: generate e2e test GenerateNetworkPolicyOnNamespaceWithoutLabelTests

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* chore: cleanup

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* finish refactoring tests

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* refactor: is not found

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* refactor expectations part 1

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix: repeat update on conflict

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
 2022-07-05 23:34:09 +08:00
Charles-Edouard Brétéché
210a709bb3
feat: policy status for autogen rules (#4173) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-07-03 15:09:18 -07:00
Charles-Edouard Brétéché
b29207f585
fix: use official controller-gen (#4171) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
 2022-07-01 15:25:59 +00:00
Vyankatesh Kudtarkar
12693e1a9c
fix external.metrics.k8s.io/v1beta1 issue (#4139) 
* fix external.metrics.k8s.io/v1beta1 issue

* update find resource discovery method

* revert validate.go

* revert chnages

* update discovery method

* fix error handler issue

* add logger support
 2022-07-01 03:00:05 +00:00
Joe Bowbeer
606b2cb946
fix: add seccompProfile (#4178) 
Signed-off-by: Joe Bowbeer <joe.bowbeer@gmail.com>
 2022-07-01 01:47:19 +00:00
Charles-Edouard Brétéché
27e5772986
fix: add more verify images e2e test for bool fields (#4172) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-06-30 21:36:28 +02:00
Prateek Pandey
808e6ae8b7
delete policy reports on policy deletion (#4174) 
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
 2022-06-30 15:45:02 +00:00
Charles-Edouard Brétéché
89c7432069
chore: add myself into owners (#4170) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-06-29 22:45:16 +02:00
Prateek Pandey
9226873e68
feat: split policy report per policy bases (#4147) 
* feat: split policy report per policy bases

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* add policy name as a handler key

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* update merge change request logic

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* handle the delete resource update on policy report

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* add splitPolicyReport feature gate

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* delete old reports if splitPolicyReport feature enable

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* use trim policyname as label and create name

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* fix change request result

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
 2022-06-28 15:27:57 +00:00
shuting
77fb10a430
Clean up RCRs if the count exceeds the threshold (#4148) 
* Clean up RCRs if the count exceeds the limit

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Sets reports to inactive on resourceExhausted error

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix linter

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Add a container flag changeRequestLimit

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Skip generating RCRs if resourceExhausted error occurs

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* set default RCR limit to 1000

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Update log messages and CHANGELOG.md

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Address review comments

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Extract mapper to a separate file

Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-06-28 06:18:57 +00:00
shuting
cd2d89bf55
Wait for informers' cache to be synced before starting controllers (#4155) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-06-28 04:55:52 +00:00
shuting
47b1266503
- Disable events generation on DELETE; - Reduce event generation retry from 10 to 3 (#4159) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-06-28 11:58:23 +08:00
shuting
1c329ea65f
Use kyverno namespace informer to list pods while processing URs (#4156) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-06-27 12:44:42 +08:00
Chip Zoller
fbde1fbcbe
Template updates (#4150) 
* add chipzoller to CODEOWNERS

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update version drop-downs

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add explanation section

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-06-23 13:33:22 +00:00
Jim Bugwadia
b68f4ba679
release event memory (#4138) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-06-23 00:37:46 +08:00
Prateek Pandey
a14cab0947
fix: use dev tag for init container local build target (#4142) 
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
 2022-06-21 10:30:22 +05:30
Tathagata Paul
16f8620993
added resource lists for test cli (#4082) 
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
 2022-06-20 06:38:13 +00:00
Jim Bugwadia
f67f145d90
update contributing guide (#4119) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2022-06-20 06:13:39 +00:00
shuting
008b9ab48e
sync release versions (#4133) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-06-17 09:30:06 +00:00
Furkan Türkal
af3da5e19a
bump cosign to 1.9.1 to fix fulcio panic (#4117) 
Signed-off-by: Furkan <furkan.turkal@trendyol.com>
Co-authored-by: Batuhan <batuhan.apaydin@trendyol.com>

Co-authored-by: Batuhan <batuhan.apaydin@trendyol.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
 2022-06-16 16:03:22 +00:00
Prateek Pandey
02b806deee
fix: use policyName key to get the policy name (#4114) 
In case of namespace policy `ur.spec.policy`
contains namespace/policy-name combinations, hence
can't be used to set the policy name label.

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-06-16 11:23:37 +00:00
Jim Bugwadia
bc1b051b90
fix imageVerify validation checks and conversion logic (#4038) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-06-15 17:13:36 -07:00
Andrew Bulford
11942560c3
fix: Stop incorrect any block condition logging (#4107) 
Previously the "no condition passed for 'any' block" would be logged for
all `any` blocks because the log line always occurs, even if conditions
are found.

Co-authored-by: Samuel Torres <samuel.torres@form3.tech>
Signed-off-by: Andrew Bulford <andrew.bulford@form3.tech>

Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
 2022-06-15 15:39:24 +00:00
vivek kumar sahu
051b0751e0
set test.namespace value implict as resource namespace until and unless explict value is added (#4100) 
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
 2022-06-15 17:59:13 +05:30
Jim Bugwadia
c3be689851
remove TUF initialization from main (#4098) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2022-06-10 00:52:12 -07:00
treydock
7f4f6d14fd
Update CODEOWNERS to include treydock (#4097) 
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2022-06-09 14:38:50 +00:00
Charles-Edouard Brétéché
e1db7c9814
feat: add e2e framework and verify image new test (#4094) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-06-09 21:58:07 +08:00
Chip Zoller
91ce9f9abd
add chipzoller to CODEOWNERS (#4096) 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-06-09 04:08:10 +00:00
Charles-Edouard Brétéché
e3c39f1da1
refactor: generate e2e GeneratePolicyDeletionforCloneTests (#4071) 
* refactor: generate e2e GeneratePolicyDeletionforCloneTests

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix: unit test

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* chore: remove resourceExpectation type

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-06-07 23:35:44 +08:00
treydock
660e8f34f9
Exclude Kyverno namespace by default (#4079) 
* Exclude Kyverno namespace by default
Fixes #4075

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2022-06-07 12:55:27 +00:00
Batuhan Apaydın
a064a1960e
docs(chart): fix deadlink in NOTES.txt (#4085) 
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
 2022-06-07 08:03:48 +01:00
vivek kumar sahu
7e79403324
Updated jp command flags and also added URL for help. (#4084) 
* Updated jp command flags and also added URL for help.

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

* Update cmd/cli/kubectl-kyverno/jp/jp_command.go

Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
 2022-06-07 06:19:44 +00:00
Chip Zoller
d1f0671fee
update drop-downs (#4081) 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2022-06-06 23:54:35 +08:00
Charles-Edouard Brétéché
0b7b2458eb
refactor: generate e2e tests (#4068) 
* refactor: use t.Cleanup in e2e tests

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* refactor: generate e2e tests

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* helpers

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-06-03 21:08:27 +02:00
Charles-Edouard Brétéché
fe3c12628c
refactor: use t.Cleanup in e2e tests (#4067) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
 2022-06-03 19:08:33 +05:30
shuting
fac190462b
Remove s390X (#4063) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-06-03 08:11:12 +00:00