1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
Commit graph

7708 commits

Author SHA1 Message Date
gcp-cherry-pick-bot[bot]
dbfee2e9e0
feature: Added test.imagePullSecrets config in values.yaml (#11180) (#11195) (#11196)
Signed-off-by: Pradeep Lakshmi Narasimha <pradeep.vaishnav4@gmail.com>
Co-authored-by: Pradeep Lakshmi Narasimha <pradeep.vaishnav4@gmail.com>
2024-09-19 13:21:45 +00:00
gcp-cherry-pick-bot[bot]
8631d7d7fc
fix: remove unused functions (#11190) (#11192)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-09-18 11:42:11 +00:00
gcp-cherry-pick-bot[bot]
dc8552f5e2
chore: add more chainsaw tests for generate.foreach (#11140) (#11193)
* chore: rename tests



* tests: add cpol-data-sync-update-policy



* tests: add cpol-data-sync-update-target



* tests: add cpol-clone-sync-update-source



* tests: add cpol-clone-sync-update-target



* tests: add cpol-clone-list-sync-update-source



* tests: rename vars in cpol-clone-list-sync-update-source



* tests: add cpol-clone-list-sync-update-target



* tests: add test/conformance/chainsaw/generate/foreach/existing/cpol-data-sync-create



* tests: add cpol-clone-list-sync-create



---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-09-18 11:19:05 +00:00
gcp-cherry-pick-bot[bot]
1ef1ed66b9
chore(deps): bump sigs.k8s.io/controller-tools in /hack/controller-gen (#11187) (#11189)
Bumps [sigs.k8s.io/controller-tools](https://github.com/kubernetes-sigs/controller-tools) from 0.16.1 to 0.16.3.
- [Release notes](https://github.com/kubernetes-sigs/controller-tools/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-tools/blob/main/envtest-releases.yaml)
- [Commits](https://github.com/kubernetes-sigs/controller-tools/compare/v0.16.1...v0.16.3)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-tools
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-18 10:52:41 +00:00
gcp-cherry-pick-bot[bot]
0dc3924ef9
chore(deps): bump github.com/prometheus/client_golang (#11186) (#11188)
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.3 to 1.20.4.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.3...v1.20.4)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-18 18:28:07 +08:00
gcp-cherry-pick-bot[bot]
40f3d47f5f
fix(chart,kyverno): update dashboard to support Grafana 11 (#11070) (#11183)
Signed-off-by: Sebastian Gaiser <sebastiangaiser@users.noreply.github.com>
Co-authored-by: Sebastian Gaiser <sebastiangaiser@users.noreply.github.com>
2024-09-17 11:52:51 +00:00
gcp-cherry-pick-bot[bot]
f13a6dece6
chore(deps): bump the kubernetes group across 2 directories with 1 update (#11179) (#11182)
Bumps the kubernetes group with 1 update in the /hack/chainsaw-matrix directory: [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver).
Bumps the kubernetes group with 1 update in the /hack/controller-gen directory: [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver).


Updates `k8s.io/apiextensions-apiserver` from 0.31.0 to 0.31.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.31.0...v0.31.1)

Updates `k8s.io/apiextensions-apiserver` from 0.31.0 to 0.31.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.31.0...v0.31.1)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-17 10:59:11 +00:00
gcp-cherry-pick-bot[bot]
c2924f063a
chore(deps): bump ubuntu from 8a37d68 to dfc1087 in /.devcontainer (#11166) (#11181)
Bumps ubuntu from `8a37d68` to `dfc1087`.

---
updated-dependencies:
- dependency-name: ubuntu
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-17 10:34:18 +00:00
gcp-cherry-pick-bot[bot]
1e46816e00
chore: bump chainsaw (#11161) (#11177)
* chore: bump chainsaw



* more template use



* v0.2.10



* go mod



---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-17 10:09:15 +00:00
gcp-cherry-pick-bot[bot]
91bfa942d3
feat: add helm upgrade tests (#11163) (#11175)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-17 09:19:04 +00:00
gcp-cherry-pick-bot[bot]
044eb71621
chore(deps): bump the otel group across 1 directory with 7 updates (#11170) (#11174)
Bumps the otel group with 3 updates in the /hack/chainsaw-matrix directory: [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib), [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go).


Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.53.0 to 0.55.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.53.0...zpages/v0.55.0)

Updates `go.opentelemetry.io/otel` from 1.28.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.30.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.28.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.30.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.28.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.30.0)

Updates `go.opentelemetry.io/otel/metric` from 1.28.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.30.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.28.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.30.0)

Updates `go.opentelemetry.io/otel/trace` from 1.28.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.30.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: otel
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-17 08:05:28 +00:00
gcp-cherry-pick-bot[bot]
e846b93200
chore: update dependabot gomod config (#11164) (#11168)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-17 07:40:55 +00:00
gcp-cherry-pick-bot[bot]
eeedaaea72
fix: Added missing label info in the cleanup metrics (#10321) (#11147) (#11159)
Signed-off-by: Pradeep Lakshmi Narasimha <pradeep.vaishnav4@gmail.com>
Co-authored-by: Pradeep Lakshmi Narasimha <pradeep.vaishnav4@gmail.com>
2024-09-16 09:26:48 +00:00
gcp-cherry-pick-bot[bot]
019b0335ac
chore(deps): bump github.com/fluxcd/pkg/oci from 0.41.0 to 0.41.1 (#11153) (#11157)
Bumps [github.com/fluxcd/pkg/oci](https://github.com/fluxcd/pkg) from 0.41.0 to 0.41.1.
- [Commits](https://github.com/fluxcd/pkg/compare/oci/v0.41.0...oci/v0.41.1)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/pkg/oci
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-16 08:54:23 +00:00
gcp-cherry-pick-bot[bot]
c3cc23fb35
chore(deps): bump github.com/cyphar/filepath-securejoin (#11152) (#11155)
Bumps [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) from 0.3.1 to 0.3.2.
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/cyphar/filepath-securejoin/compare/v0.3.1...v0.3.2)

---
updated-dependencies:
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-16 08:26:13 +00:00
gcp-cherry-pick-bot[bot]
273272aede
fix: Updated Go version to v1.23.1 to address CVE-2024-34156 (#11112) (#11141)
Signed-off-by: Pradeep Lakshmi Narasimha <pradeep.vaishnav4@gmail.com>
Co-authored-by: Pradeep Lakshmi Narasimha <pradeep.vaishnav4@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-09-13 12:33:29 +00:00
gcp-cherry-pick-bot[bot]
61c6e839bf
fix: go releaser config (#11135) (#11136)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-13 06:41:25 +00:00
shuting
8ae9919f26
release v1.13.0-beta.1 (#11114)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-12 15:47:30 +00:00
gcp-cherry-pick-bot[bot]
e94690aa3c
chore(deps): bump k8s.io/apiextensions-apiserver in the kubernetes group (#11130) (#11132)
Bumps the kubernetes group with 1 update: [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver).


Updates `k8s.io/apiextensions-apiserver` from 0.31.0 to 0.31.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.31.0...v0.31.1)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-09-12 15:06:23 +00:00
gcp-cherry-pick-bot[bot]
8e9df1841b
chore: add dependabot groups for k8s and otel (#11116) (#11129)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-12 14:18:44 +00:00
gcp-cherry-pick-bot[bot]
458b84e366
fix: expect base64 string in raw tuf root (#11117) (#11128)
* fix: expect base64 string in raw tuf root



* fix: add tests



* fix: rename kyverno yaml file



---------

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-09-12 13:31:35 +00:00
gcp-cherry-pick-bot[bot]
a7fb4bbf4c
chore(deps): bump k8s.io/kube-aggregator from 0.31.0 to 0.31.1 (#11111) (#11127)
Bumps [k8s.io/kube-aggregator](https://github.com/kubernetes/kube-aggregator) from 0.31.0 to 0.31.1.
- [Commits](https://github.com/kubernetes/kube-aggregator/compare/v0.31.0...v0.31.1)

---
updated-dependencies:
- dependency-name: k8s.io/kube-aggregator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-12 12:49:30 +00:00
gcp-cherry-pick-bot[bot]
ead0e3c944
chore(deps): bump k8s.io/cli-runtime from 0.31.0 to 0.31.1 (#11107) (#11125)
Bumps [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) from 0.31.0 to 0.31.1.
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.31.0...v0.31.1)

---
updated-dependencies:
- dependency-name: k8s.io/cli-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-12 12:20:11 +00:00
gcp-cherry-pick-bot[bot]
bd53ec5788
chore(deps): bump google.golang.org/grpc from 1.66.1 to 1.66.2 (#11109) (#11124)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.66.1 to 1.66.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.66.1...v1.66.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-12 11:51:33 +00:00
gcp-cherry-pick-bot[bot]
302be5e4ff
chore(deps): bump k8s.io/api from 0.31.0 to 0.31.1 (#11108) (#11118)
Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.31.0 to 0.31.1.
- [Commits](https://github.com/kubernetes/api/compare/v0.31.0...v0.31.1)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-12 10:55:26 +00:00
gcp-cherry-pick-bot[bot]
224ff03f3b
chore: fix sonar exclusions (#11119) (#11120)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-12 09:46:36 +00:00
shuting
85e6c7461f
Generate Policy Exceptions (#9987) (#11115)
* add control names and images to PSS results



* remove init



* fix tets



* add --generate-exceptions flag



* use controlsJSON



* suppress message `Applying....`



* generate CLI docs and fix lint issues



* revert changes in launch.json



* gen CLI docs



* handle auto-gen rules



* handle auto-gen rules for CronJob



* handle auto-gen rules for CronJob



---------

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Frank Jogeleit <frank.jogeleit@web.de>
2024-09-12 09:04:41 +00:00
gcp-cherry-pick-bot[bot]
cf2361b350
chore(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp (#11110) (#11113)
Bumps [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.54.0 to 0.55.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.54.0...zpages/v0.55.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-12 08:07:35 +00:00
gcp-cherry-pick-bot[bot]
9c02dc8e2f
fix broken oss-fuzz build (#11101) (#11102)
Signed-off-by: Adam Korczynski <adam@adalogics.com>
Co-authored-by: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com>
2024-09-12 07:06:00 +00:00
gcp-cherry-pick-bot[bot]
aa2a88e8aa
feat: add flag to pass tuf root directly (#11103) (#11106)
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2024-09-12 05:08:03 +00:00
gcp-cherry-pick-bot[bot]
0959cb68f1
feat: use pointer in rule (validate field) (#11095) (#11099)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-11 09:38:20 +00:00
gcp-cherry-pick-bot[bot]
632e3f5a4d
chore: bump otel libs (#11096) (#11098)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-11 08:42:15 +00:00
gcp-cherry-pick-bot[bot]
bfeed0323a
chore(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2 (#11093) (#11097)
Bumps [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/sigstore/sigstore-go/releases)
- [Commits](https://github.com/sigstore/sigstore-go/compare/v0.6.1...v0.6.2)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-11 08:17:47 +00:00
gcp-cherry-pick-bot[bot]
e31f9a0dca
fix: make webhook cleanup setup optional and add cleanup ci test (#11077) (#11094)
* fix: make webhook cleanup setup optional and add cleanup ci test



* fix: add logging



* fix: add validating webhook count check



---------

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-09-11 07:36:46 +00:00
gcp-cherry-pick-bot[bot]
45ca6ea581
feat: use pointer in rule (mutation field) (#11078) (#11086)
* feat: use pointer in rule (mutation field)



* fix



---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-11 04:03:19 +00:00
gcp-cherry-pick-bot[bot]
2bd252322f
chore: fix sonar exclusions (take 2) (#11074) (#11084)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com>
2024-09-10 17:06:52 +00:00
gcp-cherry-pick-bot[bot]
aa8adbbd54
fix: policy report generation for namespaced policies in CLI (#10923) (#11075)
* fix policy report generation for namespaced policies



* fix



---------

Signed-off-by: asr2003 <162500856+asr2003@users.noreply.github.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: asr2003 <162500856+asr2003@users.noreply.github.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-10 16:44:12 +00:00
gcp-cherry-pick-bot[bot]
a9387bdaee
chore(deps): bump google.golang.org/grpc from 1.66.0 to 1.66.1 (#11062) (#11079)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.66.0 to 1.66.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.66.0...v1.66.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-10 16:15:02 +00:00
gcp-cherry-pick-bot[bot]
52a1582247
chore: reduce jobs run on push (#11080) (#11083)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-10 15:35:50 +00:00
gcp-cherry-pick-bot[bot]
db0c827ce2
feat: use pointer in rule (generate field) (#11076) (#11081)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-10 14:53:04 +00:00
gcp-cherry-pick-bot[bot]
9c333e1a14
chore: fix sonar exclusions (#11072) (#11073)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-10 13:16:04 +00:00
gcp-cherry-pick-bot[bot]
7ee6137a73
feat: use pointer in rule (exclude field) (#11050) (#11071)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-10 11:50:49 +00:00
gcp-cherry-pick-bot[bot]
677a20a601
chore: remove MarcelMue (#11066) (#11069)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-09-10 10:54:59 +00:00
gcp-cherry-pick-bot[bot]
245b19c145
fix: avoid generating empty urs (#11065) (#11068)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-09-10 10:24:00 +00:00
gcp-cherry-pick-bot[bot]
843a4fe6b4
chore(deps): bump sigstore/scaffolding from 0.7.8 to 0.7.9 (#11061) (#11063)
Bumps [sigstore/scaffolding](https://github.com/sigstore/scaffolding) from 0.7.8 to 0.7.9.
- [Release notes](https://github.com/sigstore/scaffolding/releases)
- [Changelog](https://github.com/sigstore/scaffolding/blob/main/release.md)
- [Commits](16ae89aa23...8a33f8e915)

---
updated-dependencies:
- dependency-name: sigstore/scaffolding
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-10 07:16:03 +00:00
gcp-cherry-pick-bot[bot]
07970aafac
support HTTP headers in service API calls (#11041) (#11057)
* support HTTP headers in service API calls



* generate CRDs



* fix chunked tests



* fix POST call



---------

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-09 21:27:21 +00:00
gcp-cherry-pick-bot[bot]
2303007660
fix: make match field required in rule API (#11048) (#11056)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-09 17:06:30 +00:00
gcp-cherry-pick-bot[bot]
98f1a43492
bug: print failure message when rule fails in kyverno apply (#9166) (#11051)
* bug: print failure message when rule fails in kyverno apply



* print the policy and failing resource just once



* remove unused argument resPath in addGenerateResponse method



* remove print statement for error rule status



* add missing print statements for mutation in kyverno cli



* remove unused import



* remove violation print statements for validations



* print failed validations



* TODO



* move printing logic of mutate rules to command.go



---------

Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Chandan-DK <chandandk468@gmail.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-09 15:51:18 +00:00
gcp-cherry-pick-bot[bot]
e73216c615
feat: use pointer in rule (#11037) (#11049)
* feat: use pointer in rule



* fix unit tests



* fix policy controller



---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-09 21:51:50 +08:00
Charles-Edouard Brétéché
16d59407d1
chore: verify chainsaw with cosign (#11044)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-09 12:08:41 +00:00