Shuting Zhao
|
58bc63e1ad
|
remove policy violation from types.go
|
2020-11-11 15:50:17 -08:00 |
|
Shuting Zhao
|
2292bf860b
|
update policyreport group to wgpolicyk8s.io
|
2020-11-11 15:09:07 -08:00 |
|
shuting
|
5e07ecc5f3
|
Add Policy Report (#1229)
* add report in cli
* policy report crd added
* policy report added
* configmap added
* added jobs
* added jobs
* bug fixed
* added logic for cli
* common function added
* sub command added for policy report
* subcommand added for report
* common package changed
* configmap added
* added logic for kyverno cli
* added logic for jobs
* added logic for jobs
* added logic for jobs
* added logic for cli
* buf fix
* cli changes
* count bug fix
* docs added for command
* go fmt
* refactor codebase
* remove policy controller for policyreport
* policy report removed
* bug fixes
* bug fixes
* added job trigger if needed
* job deletation logic added
* build failed fix
* fixed e2e test
* remove hard coded variables
* packages adde
* improvment added in jobs sheduler
* policy report yaml added
* cronjob added
* small fixes
* remove background sync
* documentation added for report command
* remove extra log
* small improvement
* tested policy report
* revert hardcoded changes
* changes for demo
* demo changes
* resource aggrigation added
* More changes
* More changes
* - resolve PR comments; - refactor jobs controller
* set rbac for jobs
* add clean up in job controller
* add short names
* remove application scope for policyreport
* move job controller to policyreport
* add report logic in command apply
* - update policy report types; - upgrade k8s library; - update code gen
* temporarily comment out code to pass CI build
* generate / update policyreport to cluster
* add unit test for CLI report
* add test for apply - generate policy report
* fix unit test
* - remove job controller; - remove in-memory configmap; - clean up kustomize manifest
* remove dependency
* add reportRequest / clusterReportRequest
* clean up policy report
* generate report request
* update crd clusterReportRequest
* - update json tag of report summary; - update definition manifests; - fix dclient creation
* aggregate reportRequest into policy report
* fix unit tests
* - update report summary to optional; - generate clusterPolicyReport; - remove reportRequests after merged to report
* remove
* generate reportRequest in kyverno namespace
* update resource filter in helm chart
* - rename reportRequest to reportChangeRequest; -rename clusterReportRequest to clusterReportChangeRequest
* generate policy report in background scan
* skip generating report change request if there's entry results
* fix results entry removal when policy / rule gets deleted
* rename apiversion from policy.kubernetes.io to policy.k8s.io
* update summary.* to lower case
* move reportChangeRequest to kyverno.io/v1alpha1
* remove policy report flag
* fix report update
* clean up policy violation CRD
* remove violation CRD from manifest
* clean up policy violation code - remove pvGenerator
* change severity fields to lower case
* update import library
* set report category
Co-authored-by: Yuvraj <yuvraj.yad001@gmail.com>
Co-authored-by: Yuvraj <10830562+evalsocket@users.noreply.github.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
|
2020-11-09 11:26:12 -08:00 |
|
Shuting Zhao
|
cdc5190c56
|
update nirmata/kyverno to kyverno/kyverno
|
2020-10-07 11:12:31 -07:00 |
|
Mohan B E
|
f60deecdce
|
Feature/namespaced policy 280 (#1058)
* namespaced policy crd and cache
* modified main.go
* removed kyverno
* implemented policy violation generator for namespaced policy on audit
* modified cache
* added validation for cluster resource types
* install.yaml
* install.yaml
* removed namespaces from crd and refactored code
* modified NamespacePolicy to Policy
* added ClusterRole aggregate for policies
* modified clusterrole
|
2020-08-19 09:07:23 -07:00 |
|
Yuvraj
|
4fa5a056f3
|
Fix conflict
Signed-off-by: Yuvraj <yuvraj.yad001@gmail.com>
|
2020-03-27 14:10:21 +05:30 |
|
Yuvraj
|
801c7513cb
|
golanfci-lint changes
Signed-off-by: Yuvraj <yuvraj.yad001@gmail.com>
|
2020-03-24 00:35:05 +05:30 |
|
shivkumar dudhani
|
1b1ab78f77
|
logs & access
|
2020-03-17 11:05:20 -07:00 |
|
Shivkumar Dudhani
|
1171ac691b
|
cleanup phase 1 (#653)
|
2020-01-24 09:37:12 -08:00 |
|
Shivkumar Dudhani
|
3cf9141f4d
|
593 feature (#594)
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* add Generate Request CR
* generate Request Generator Initial
* test generate request CR generation
* initial commit gr generator
* generate controller initial framework
* add crd for generate request
* gr cleanup controller initial commit
* cleanup controller initial
* generate mid-commit
* generate rule processing
* create PV on generate error
* embed resource type
* testing phase 1- generate resources with variable substitution
* fix tests
* comment broken test #586
* add printer column for state
* return if existing resource for clone
* set resync time to 2 mins & remove resource version check in update handler for gr
* generate events for reporting
* fix logs
* initial commit
* fix trailing quote in patch
* remove comments
* initial condition (equal & notequal)
* initial support for conditions
* initial support fo conditions in generate
* support precondition checks
* cleanup
* re-evaluate GR on namespace update using dynamic informers
* add status for generated resources
* display loaded variable SA
* support delete cleanup of generate request main resources
* fix log
* remove namespace from SA username
* support multiple variables per statement for scalar values
* fix fail variables
* add check for userInfo
* validation checks for conditions
* update policy
* refactor logs
* code review
* add openapispec for clusterpolicy preconditions
* Update documentation
* CR fixes
* documentation
* CR fixes
* update variable
* fix logs
* update policy
* pre-defined variables (serviceAccountName & serviceAccountNamespace)
* update test
|
2020-01-07 15:13:57 -08:00 |
|
Shivkumar Dudhani
|
ffd2179b03
|
538 (#587)
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* add Generate Request CR
* generate Request Generator Initial
* test generate request CR generation
* initial commit gr generator
* generate controller initial framework
* add crd for generate request
* gr cleanup controller initial commit
* cleanup controller initial
* generate mid-commit
* generate rule processing
* create PV on generate error
* embed resource type
* testing phase 1- generate resources with variable substitution
* fix tests
* comment broken test #586
* add printer column for state
* return if existing resource for clone
* set resync time to 2 mins & remove resource version check in update handler for gr
* generate events for reporting
* fix logs
* cleanup
* CR fixes
* fix logs
|
2020-01-07 10:33:28 -08:00 |
|
Shuting Zhao
|
a107ad7ac8
|
rename namespacedpolicyviolation: update codegen
|
2019-12-11 16:07:39 -08:00 |
|
Shivkumar Dudhani
|
69d4cb0b27
|
remove v1alpha pkgs (#489)
|
2019-11-13 18:58:49 -08:00 |
|
Shuting Zhao
|
b67577994a
|
update apiversion to v1 in code
|
2019-11-13 13:41:08 -08:00 |
|
Shuting Zhao
|
670d665aed
|
cleanup unused code
|
2019-11-13 13:01:08 -08:00 |
|
Shuting Zhao
|
55b0bf0d3a
|
add event handler for NamespacedPolicyViolation
|
2019-11-12 23:43:29 -08:00 |
|
Shuting Zhao
|
3706822df7
|
update crd
|
2019-11-12 19:02:31 -08:00 |
|
Shuting Zhao
|
0badf761a8
|
add namespace cluster policyviolation crd
|
2019-11-12 19:02:31 -08:00 |
|
shivkumar dudhani
|
fa53519e2a
|
change CRD Name to ClusterPolicy & ClusterPolicyViolations
|
2019-09-03 14:51:51 -07:00 |
|
Shuting Zhao
|
e83cb51313
|
update gitignore
|
2019-08-20 10:16:26 -07:00 |
|
shivkumar dudhani
|
8676aef6f1
|
add listers
|
2019-08-19 16:43:15 -07:00 |
|
shivkumar dudhani
|
6580e0e73a
|
remove temp clientNew
|
2019-08-17 09:58:14 -07:00 |
|
shivkumar dudhani
|
aed0ed0dc1
|
clean up
|
2019-08-14 10:01:47 -07:00 |
|
shuting
|
bfc56b935c
|
check in vendor and code generated by code-gen
|
2019-05-22 20:33:19 -07:00 |
|