356 commits

Author	SHA1	Message	Date
Shuting Zhao	6c8f4f90da	fix patches annotation	2019-11-11 18:52:26 -08:00
Shuting Zhao	586b197b00	user sharedInformer for rolebindings and clusterrolebindings	2019-11-11 15:43:13 -08:00
Shuting Zhao	03e85c2266	make getRoleRef a separate package	2019-11-11 14:52:09 -08:00
shivkumar dudhani	f788f0e526	introduce policy store	2019-11-11 11:10:25 -08:00
Shuting Zhao	5b0a6d62a4	add unit test	2019-11-11 09:56:53 -08:00
shivkumar dudhani	f11a05a652	create event on webhook status update	2019-11-10 13:30:15 -08:00
Shuting Zhao	6048d59949	change engine interface to take policyContext struct	2019-11-08 18:57:27 -08:00
Shuting Zhao	0e9a952d64	get rbac info for an admission request	2019-11-08 18:56:24 -08:00
Shivkumar Dudhani	687c0c6470	Merge pull request #418 from nirmata/391_feature ... Check if mutating webhook admission control is enabled	2019-11-08 12:55:28 -08:00
Shuting Zhao	e3c9282e6a	fix edit failure blocked by annotation change ... - as we change the patches key in annotation to "policies.kyverno.io/patches" in commit bdb3f40f15	2019-11-07 12:13:34 -08:00
Shuting Zhao	caf7abfecc	Get policy list once in handleAdmissionRequest	2019-11-07 12:13:16 -08:00
Shuting Zhao	8496a483dc	- remove resource info per rule; - add resource info in each failed admission request	2019-11-06 17:14:32 -08:00
shivkumar dudhani	7e7286a9c1	support string - numbers comparison, use validatepattern in generate for subset check	2019-10-31 13:29:03 -07:00
Shivkumar Dudhani	92c96aaf1f	Revert "use validatepattern in generate rule to check for subset existance"	2019-10-31 13:21:38 -07:00
shivkumar dudhani	61c1ea5a49	use validatepattern in generate rule to check for subset existance	2019-10-31 13:04:56 -07:00
shivkumar dudhani	e022084dd0	add checker to verify if mutatingwebhook is enabled or not + refactoring	2019-10-30 13:39:19 -07:00
shivkumar dudhani	c7787eff8d	Merge branch 'master' of github.com:nirmata/kyverno into 391_feature	2019-10-29 12:01:15 -07:00
Shivkumar Dudhani	22e7ab1c49	Merge branch 'master' into 261_dynamic_config	2019-10-25 19:17:15 -05:00
shivkumar dudhani	56adc98b8c	initial commit	2019-10-25 16:55:48 -05:00
Shuting Zhao	3a3efe00f1	- rename to managedResource; - refact code structure	2019-10-24 15:50:11 -07:00
Shuting Zhao	6e69c8b69b	cleanup pv with dependant when blocked admission request pass	2019-10-23 23:18:58 -07:00
Shuting Zhao	e4791e5828	remove unused code	2019-10-21 15:55:20 -07:00
Shuting Zhao	f820cb4c83	implement #387 Generate clusterpolicyviolation when policy action set to "enforce"	2019-10-21 15:55:20 -07:00
Shuting Zhao	32f94bca27	manage policy validation inside engine pkg	2019-10-18 17:45:24 -07:00
shivkumar dudhani	64eab3d1d6	initial commit	2019-10-18 17:38:46 -07:00
Shuting Zhao	7239b4d9b7	Merge commit '37c25daa17ad046f739e74d803cb78d887805bb4' into 346_validate_policy ... # Conflicts: # pkg/api/kyverno/v1alpha1/utils.go	2019-10-18 10:09:44 -07:00
Shuting Zhao	bdb3f40f15	rename mutate annotation to "policies.kyverno.io/patches"	2019-10-11 17:59:50 -07:00
Shuting Zhao	137d596e11	rename EngineResponseNew to EngineResponse accordingly	2019-10-08 16:23:24 -07:00
shuting	5c38c28904	Merge pull request #369 from nirmata/368_bug ... update engineResponse Name	2019-10-08 16:02:07 -07:00
Shuting Zhao	d7080c2d94	fix pr comment	2019-10-08 14:21:47 -07:00
shivkumar dudhani	70ff2fa177	update engineResponse Name	2019-10-08 10:57:24 -07:00
Shuting Zhao	2077409c85	fix 365 annotation_bug	2019-10-07 18:31:14 -07:00
Shuting Zhao	e20d86f45c	remove duplicate code: hasMutate..	2019-10-03 17:00:05 -07:00
Shuting Zhao	8a7250ffef	refactor policy validation, moved to pkg/api/kyverno	2019-09-27 16:31:27 -07:00
Shuting Zhao	76ad9406b1	only allow one type of rule defined in a single rule	2019-09-26 18:02:24 -07:00
shuting	3d02f81434	Merge pull request #351 from nirmata/348_feature_wildcardsNamespaces ... support wild cards for namespaces in rule resource description	2019-09-12 23:06:51 -07:00
shivkumar dudhani	44af35d6e4	support wild cards for namespaces in rule resource description	2019-09-12 17:11:55 -07:00
shivkumar dudhani	5dab189743	fix event resource name + add filtered kinds to policy controller & namespace + fix messages	2019-09-12 15:04:35 -07:00
shivkumar dudhani	2669b0ae6b	set default ValidationFailureAction to 'audit'	2019-09-06 10:18:45 -07:00
shivkumar dudhani	90a7282b97	remove log	2019-09-04 14:09:42 -07:00
Shivkumar Dudhani	b1e5f0a8c7	Merge branch 'master' into refactor_webhookconfigGeneration	2019-09-04 13:50:46 -07:00
Shivkumar Dudhani	bf35d711e6	Merge pull request #330 from nirmata/bug_exclude ... remove exlude kind checks	2019-09-04 13:43:27 -07:00
shivkumar dudhani	c2e822c887	refactor webhook configuration	2019-09-04 13:43:12 -07:00
shivkumar dudhani	b66c1b7f0c	remove exlude kind checks	2019-09-04 10:40:49 -07:00
shivkumar dudhani	b152cdd004	rule to show violation count	2019-09-03 18:31:57 -07:00
shivkumar dudhani	cd6b1d0990	aggregate rule status	2019-09-03 17:43:36 -07:00
shivkumar dudhani	6228b8343e	refactor engine api	2019-09-03 15:48:13 -07:00
shuting	42f10af603	Merge pull request #325 from nirmata/281_rename_policy ... 281 rename policy	2019-09-03 15:21:52 -07:00
shivkumar dudhani	fa53519e2a	change CRD Name to ClusterPolicy & ClusterPolicyViolations	2019-09-03 14:51:51 -07:00
Shuting Zhao	82273bf1cc	Merge commit 'd12841898645ff05baa2340686821cc98eaefdea' into 293_remove_overall_mutation ... # Conflicts: # pkg/policy/apply.go	2019-09-03 09:49:56 -07:00