mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-09 09:26:54 +00:00
Code Activity
4190 commits 17 branches 550 tags 290 MiB
Commit graph

2401 commits

Author SHA1 Message Date
Pooja Singh
5195bc5bf2
added skip status for generate (#2657) 2021-11-08 20:11:29 -08:00
Danny__Wei
84c44c0827
obtain webhook config name dynamically (#2698) 2021-11-08 20:09:19 -08:00
shuting
0f0c070072
Fix memory issue - RCR conversion (#2678) 2021-11-08 15:53:21 -08:00
Pooja Singh
0e8341166d
ignoring generate kinds from mutate webhook (#2656) 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-11-06 23:06:00 +05:30
Pritish Samal
4810dda3e9
fix typo in comments (#2685) 
Signed-off-by: CIPHERTron <pritish.samal918@gmail.com>
 2021-11-06 16:05:31 +01:00
Jim Bugwadia
50cb1859c3
add keyless verification (#2677) 
* add keyless verification

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* run make fmt

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix linter warning

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* wrap error with details

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-04 23:26:22 -07:00
Jim Bugwadia
e5e849acfe
Fix image var in cmdline (#2673) 
* add image substitution

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* rm foreach test

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add error checks

Signed-off-by: ShutingZhao <shutting06@gmail.com>

Co-authored-by: ShutingZhao <shutting06@gmail.com>
 2021-11-03 14:06:47 -07:00
Jim Bugwadia
5c16ee738a
redo variable validation (#2647) 
* redo variable validation

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* handle quotes for JMESPath - escaping

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix tests and linter issues

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix fmt

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-03 11:16:55 -07:00
Yulia Nedyalkova
40d30df726
Fix bug in event creation for failed policies (#2652) 
Signed-off-by: yulianedyalkova <julianedialkova@gmail.com>
 2021-11-03 11:55:58 +01:00
Batuhan Apaydın
4eab46fb7d
feat: support other key methods (#2607) 
* feat: support other key methods

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Furkan Turkal <furkan.turkal@trendyol.com>
Co-authored-by: Erkan Zileli <erkan.zileli@trendyol.com>

* feat: support fetch attestations from repository

Signed-off-by: Furkan <furkan.turkal@trendyol.com>
Co-authored-by: Batuhan <batuhan.apaydin@trendyol.com>
Signed-off-by: Furkan <furkan.turkal@trendyol.com>

* fix: parameter type

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

* fix error check

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Furkan Turkal <furkan.turkal@trendyol.com>
Co-authored-by: Erkan Zileli <erkan.zileli@trendyol.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-03 00:45:35 -07:00
Vyankatesh Kudtarkar
6eb7cf57f7
bug fix : Kyverno policies block uninstall of Kyverno (#2659) 
* bug fix uninstall kyverno  issue

* rename the methods
 2021-11-02 23:44:32 -07:00
Jim Bugwadia
e701b7aceb
re-apply policies to managed pods (#2648) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-01 11:08:24 -07:00
Jim Bugwadia
de9fb567f0
Merge pull request #2643 from yashvardhan-kukreja/issue-2629/metrics-result-fix-up 
Fix: RuleResult label to be correctly populated while registering respective metrics
 2021-10-31 02:19:51 -07:00
Bricktop
f42144b929
Improve consistency in jmesPath functions test file (#2640) 
Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>
 2021-10-29 14:45:03 -07:00
Jim Bugwadia
675b3608a4
Merge pull request #2630 from JimBugwadia/handle_cosign_payload_variations 
handle Cosign payload variations
 2021-10-29 14:36:29 -07:00
Yashvardhan Kukreja
43d4b549ab
Fix: RuleResult label to be correctly populated while registering respective metrics 
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-10-30 02:56:04 +05:30
Jim Bugwadia
4019d6b8b2 merge main and fmt 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-29 09:18:47 -07:00
Jose Armesto
831a9826d1
Restructure project to follow standards (#2632) 
Signed-off-by: Jose Armesto <github@armesto.net>
 2021-10-29 18:13:20 +02:00
Marcus Noble
1966c82c6d
Fix various go lint issues (#2639) 
* Fix various go lint issues

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>

* Fix if mistake

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>

* Simplified returns

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-29 17:06:03 +02:00
Lukasz Jakimczuk
40b579ccd7
Improving readability (#2638) 
Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>
 2021-10-29 14:48:22 +02:00
Marcus Noble
373420aa6d
Fix go vet errors (#2637) 
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-29 14:09:11 +02:00
Lukasz Jakimczuk
ca975b8e99
*Range Operators (#2622) 
* Range operator: first iteration

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Changing hyphen to colon

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Accounting for negative numbers

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* View on the second version

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Adding tests to the operator

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Renoving negative support

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Adding comment

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Signing

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Going for the regexp version of operator

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Adding negative range operator

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>
 2021-10-29 13:48:23 +02:00
Marcus Noble
a923dce631
Cleanup imports (#2635) 
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-29 12:24:26 +02:00
Marcus Noble
9932525c3c
Tidy up some of the apply command output code (#2633) 
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-29 12:16:13 +02:00
Pooja Singh
adf39ed6fb
Move generate process in validating webhook (#2615) 
* moved generate process in validating webhook

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* moving handle generate source resource update logic

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-29 11:39:01 +02:00
Pooja Singh
f67ab9162b
added optional parameter check (#2616) 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-29 11:24:39 +02:00
Marcus Noble
604c0408c6
Refactored operator tests to use test cases (#2620) 
Identified several situations where operators didn't return the expected result (mainly around different types) so fixed those to make all tests cases pass.

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-29 10:54:51 +02:00
Liu Shaohui
c90df17356
Fix: kyverno-pre panic when checking kubernetes version (#2614) 
Signed-off-by: Shaohui Liu <liushaohui@xiaomi.com>
 2021-10-28 23:04:03 -07:00
Kumar Mallikarjuna
f74f7c841a
Change split return from []string to []interface{} (#2604) 
Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2021-10-28 22:56:18 -07:00
shuting
ddab7a3a66
add "images." to allowed variables (#2628) 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-28 16:30:17 -07:00
Jim Bugwadia
f35bbe77b7 handle Cosign payload variations 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-28 15:48:35 -07:00
Jim Bugwadia
3a166f1faf handle Critical and critical in Cosign response payload 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-28 10:58:55 -07:00
shuting
4835157cc4
fix policy report reconciliation on resource/policy deletion (#2610) 2021-10-27 22:59:59 -07:00
Sunghoon Kang
e401d57b35
Check client if nil before loading resource list (#2562) 
Unlike loading resource, current implementation doesn't check if
client is nil or not when loading resource list.

This commit checks if client is nil or not before loading resource
list.

Signed-off-by: Sunghoon Kang <hoon@linecorp.com>
 2021-10-26 17:30:19 -07:00
Anushka Mittal
08a3087100
New operators (#2543) 
* added anyin operator

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* allin, anynotin, allnotin added

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* added operator handler info

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* fixes typos and variable names

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* reusing code from in.go in new operators

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* Added more test cases for new operators

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* updated openapiv3schema

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* matching logic

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* added deprecated tag for In and NotIn

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
 2021-10-26 17:29:42 -07:00
Jim Bugwadia
9e9af4872e
Merge pull request #2600 from JimBugwadia/image_verify_variable_substitution 
add variable substitution for imageVerify and allow PEM in ConfigMaps
 2021-10-26 14:53:14 -07:00
Jim Bugwadia
5e33c62d4c fmt 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-26 14:24:41 -07:00
Jim Bugwadia
84c7d9d2a0 fix tests 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-26 14:24:24 -07:00
Jim Bugwadia
a9b96ff882 fmt 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-26 13:25:41 -07:00
Jim Bugwadia
85c346c0a6 skip var substitution in attestations 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-26 13:22:00 -07:00
Jim Bugwadia
219a4d9950 add back context check 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-26 11:00:14 -07:00
Jim Bugwadia
836d88191d make fmt 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-26 10:49:51 -07:00
Jim Bugwadia
ef9e9ec9ac add variable substitutoion for imageVerify and allow PEM in ConfigMaps 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-26 10:41:27 -07:00
Pooja Singh
9252470d47
Fix | GenerateRequests Status Failed, but resource is created! (#2566) 
* compare generated resource before updating

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* create resource if not found during update

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-25 16:28:11 -07:00
Marcus Noble
913bbd567a
Handle durations with standard comparison operators (#2569) 
* Handle durations with standard comparison operators

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>

* Fix error strings

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>

* Added CLI tests for duration operations

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>

* Added tests with different units

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-22 12:41:25 -07:00
Pooja Singh
afe102d41b
Fix for - Kyverno CLI permitting namespaces field in a Policy resource (#2199) 
* bug fixed

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added test case

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* updated error message

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* removed comments

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added check for any/all tags

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* corrected exclude logic

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-21 13:18:22 -07:00
Kumar Mallikarjuna
085e46f7c4
Merge pull request #2560 from AverageMarcus/compare_quantities 
Added support for comparing resource quantities
 2021-10-21 12:17:08 +05:30
Kumar Mallikarjuna
b1c40e172d
Escape variables (#2563) 
* Escape variables

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Escape variables test - nested

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Fixed missing changes

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2021-10-20 17:10:24 -07:00
Vyankatesh Kudtarkar
27cac66b87 fix comment 2021-10-19 22:08:55 +05:30
Marcus Noble
509f561d67
Added support for comparing resource quantities 
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-19 15:22:26 +01:00