NoSkillGirl
b61412ca7a
minor validation changes
2020-08-31 18:18:10 +05:30
NoSkillGirl
afb6ad714c
small issue while resolving conflicts
2020-08-31 18:16:53 +05:30
NoSkillGirl
70b13d06dc
validation of policy against crd
2020-08-31 18:15:39 +05:30
Yuvraj
22437289f5
added logic for jobs
2020-08-31 00:26:30 +05:30
Yuvraj
ea3e4241ed
added logic for jobs
2020-08-31 00:06:21 +05:30
Yuvraj
d0d555688f
added logic for jobs
2020-08-30 23:57:30 +05:30
Yuvraj
59dce68379
added logic for kyverno cli
2020-08-30 04:13:22 +05:30
Mohan B E
a827f88dc7
resolved conditional anchor issue and added validation to pattern labels ( #1060 )
...
* resolved conditional anchor issue and added validation to pattern labels
* restored IsConditionAnchor
* added annotation and anypattern validation
* added conditional anchor key checker
* reverted docs
* fixed tests
* modified validation
* modified validate condition check
2020-08-28 18:22:22 -07:00
Yuvraj
a01bfc7f15
configmap added
2020-08-29 04:31:40 +05:30
Yuvraj
3ebf9d43fc
common package changed
2020-08-28 23:19:22 +05:30
Yuvraj
d3bba37e08
subcommand added for report
2020-08-28 20:18:14 +05:30
Yuvraj
2dbacdea9a
sub command added for policy report
2020-08-28 17:26:41 +05:30
Yuvraj
fb6c4c3699
common function added
2020-08-28 16:41:16 +05:30
Yuvraj
9fb2b8dbb1
added logic for cli
2020-08-28 16:14:46 +05:30
Yuvraj
b59a4edfcd
bug fixed
2020-08-27 20:25:23 +05:30
Yuvraj
b9123cd3f4
added jobs
2020-08-27 13:19:41 +05:30
Yuvraj
e9d2ba4e04
added jobs
2020-08-27 03:08:03 +05:30
Yuvraj
2a9477ba06
configmap added
2020-08-27 01:18:18 +05:30
Michael Barrientos
b067f41d02
Replace Policy CRD AnyValue fields with empty dict ( #1086 )
...
/kind cleanup
\## Proposed change
This implements the same change as #1047 , except for the new Policy CRD instead of the ClusterPolicy CRD, which apparently did not get those updates before merging.
When deploying Kyverno using Argo CD, we get a persistent false diff for the Policy custom resource definition (the definition itself, not instances of Policy), because Kubernetes converts the invalid AnyValue: {} property types to just an empty dict {}. Since the Kubernetes server makes this change to {} unilaterally after applying, when a diffing tool like Argo CD compares it against the YAML manifest, each such instance of AnyValue appears as a diff.
I know that since AnyValue is not part of the official OpenAPI V3 schema, and that when you run kubectl get crd policies.kyverno.io -o yaml the status message shows Kubernetes complaining about "Required value: must not be empty for specified object fields" for all of these fields. In theory the correct solution would be to somehow provide a full schema, but I know this can be tricky for these data/anyPattern/patches types, but at the minimum, I would like to get Argo CD to believe that there are no changes that need to be applied.
Since these fields are already silently turned into {} by Kubernetes, this should have no functionality change on existing code/deployments.
2020-08-26 11:11:36 -07:00
Yuvraj
251521a77a
policy report added
2020-08-26 18:50:38 +05:30
Yuvraj
b648c2edd6
Events take several minutes to show on the resource ( #1083 )
...
* git action added
* changed retry method
* remove time method
* increase worker for event generator
2020-08-26 14:28:34 +05:30
Yuvraj
875f9716e8
policy report crd added
2020-08-26 00:03:39 +05:30
Yuvraj
91c45b408b
add report in cli
2020-08-25 22:44:29 +05:30
shuting
513f5ec898
add watch policy to clusterrole kyverno:customresources ( #1084 )
2020-08-24 12:27:16 -07:00
Pooja Singh
8105e4cad8
Allowing only few variables in the policies ( #1063 )
...
* Checking for non whitelisted variables in the policy
* method name change
* small issue while rebasing
2020-08-23 15:11:03 -07:00
Pooja Singh
1b69ca26db
Merge pull request #1030 from NoSkillGirl/feature/add_cli_variables
...
Feature/add cli variables
2020-08-22 01:48:40 +05:30
NoSkillGirl
067d51cb28
resolving issues after rebase
2020-08-22 01:21:29 +05:30
Mohan B E
3feb41e5f3
wildcard for numeric values ( #1074 )
...
* wildcard for numeric values
* changed error message
2020-08-21 12:48:05 -07:00
NoSkillGirl
b3a13cd36b
updated readme - apply example
2020-08-22 01:07:04 +05:30
NoSkillGirl
492b0636c2
updated readme
2020-08-22 01:07:04 +05:30
NoSkillGirl
3a3311835c
added error handling
2020-08-22 01:07:04 +05:30
NoSkillGirl
df154537f1
Added provision to pass cli values from a file
2020-08-22 01:07:04 +05:30
NoSkillGirl
e18deb94f2
updated readme
2020-08-22 01:07:04 +05:30
NoSkillGirl
0927e7a732
added validation for set flag
2020-08-22 01:07:03 +05:30
NoSkillGirl
11e73381cf
removed comments
2020-08-22 01:07:03 +05:30
NoSkillGirl
afe98bb93c
Added set flag
2020-08-22 01:07:03 +05:30
Yuvraj
1b7a295860
git action added ( #1078 )
2020-08-21 12:24:02 -07:00
Shuting Zhao
1371da939b
tag v1.1.10
2020-08-21 11:12:55 -07:00
Pooja Singh
2717a03ab2
Not checking for cluster resources for CLI in policy validate ( #1076 )
2020-08-21 23:07:54 +05:30
Mohan B E
4c7ae3f5f7
added helm chart icon ( #1077 )
2020-08-21 09:46:04 -07:00
Yuvraj
06148a58c5
cli docker images added ( #1073 )
...
* cli docker images added
* cli docker images added
2020-08-21 09:45:04 -07:00
Jim Bugwadia
feef1400e3
Merge pull request #1072 from realshuting/bugfix
...
return early in CLI if generated patches from policy mutation is nil
2020-08-19 15:19:12 -07:00
Shuting Zhao
0aeb9f667a
return early in LCI if generated patches from policy mutation is nil
2020-08-19 15:11:21 -07:00
Jim Bugwadia
3fb1c8e87e
add validateFailureAction to all policies ( #1068 )
2020-08-19 14:04:58 -07:00
Mohan B E
f60deecdce
Feature/namespaced policy 280 ( #1058 )
...
* namespaced policy crd and cache
* modified main.go
* removed kyverno
* implemented policy violation generator for namespaced policy on audit
* modified cache
* added validation for cluster resource types
* install.yaml
* install.yaml
* removed namespaces from crd and refactored code
* modified NamespacePolicy to Policy
* added ClusterRole aggregate for policies
* modified clusterrole
2020-08-19 09:07:23 -07:00
Jim Bugwadia
64d1ee7a9d
Merge pull request #1067 from nirmata/bugfix/fix_disallow_add_capabilities
...
fix policy
2020-08-19 08:59:07 -07:00
Yuvraj
3799b52fc8
[BUG] filterK8Resources is not correctly configured using ConfigMap ( #1059 )
...
* configmap issue fixed
* fixed e2e test
* helm template file added
* remove extra check
* string empty check removed
2020-08-19 13:46:08 +05:30
Jim Bugwadia
66b660d717
fix policy
2020-08-19 01:08:53 -07:00
Jim Bugwadia
dbd35831c1
Merge pull request #1064 from nirmata/bugfix/improve_cli_reports
...
Bugfix/improve cli reports
2020-08-18 22:27:53 -07:00
Jim Bugwadia
e6a3aea88a
fix print
2020-08-18 21:56:43 -07:00
