Mohan B E
f60deecdce
Feature/namespaced policy 280 ( #1058 )
...
* namespaced policy crd and cache
* modified main.go
* removed kyverno
* implemented policy violation generator for namespaced policy on audit
* modified cache
* added validation for cluster resource types
* install.yaml
* install.yaml
* removed namespaces from crd and refactored code
* modified NamespacePolicy to Policy
* added ClusterRole aggregate for policies
* modified clusterrole
2020-08-19 09:07:23 -07:00
Mohan B E
a14828246d
Feature/api version 852 ( #1028 )
...
* apiVersion support for generate
* added apiVersion to crds
2020-08-07 09:47:33 +05:30
Pooja Singh
ac5d69895a
removing hardcoded namespace from the code ( #955 )
...
* removing hardcoded namespace from the code
* Added to helm chart
* removing hard-coded namespace and deployment name from config, generate, checker
* added namespace to configMap, service, serviceAccount
* updated installation documentation
passing `KYVERNO_NAMESPACE` while running in debug mode.
* Update installation.md
removing `kyverno` only namespace note
2020-07-01 14:50:49 -07:00
Jim Bugwadia
b763c33a29
fix mock discover client
2020-05-17 17:58:57 -07:00
Jim Bugwadia
304c75403e
- skip resource schema validation when no mutate rules are applied
...
- cleanup webhook registration logic and logs
2020-05-17 14:37:05 -07:00
Jim Bugwadia
b463dbf6a8
- allow fetching resource from dynamic client
...
-
2020-05-17 09:54:13 -07:00
shuting
6f039147c8
fix 843 ( #844 )
2020-05-14 12:32:11 -07:00
shravan
c0dbd1d6e6
783 tested prototype
2020-04-02 12:19:32 +05:30
shivkumar dudhani
e6e5bbb603
Merge branch 'master' into access_check
2020-03-17 17:23:18 -07:00
shivkumar dudhani
1b1ab78f77
logs & access
2020-03-17 11:05:20 -07:00
shravan
7aa1e1515b
522 supporting crd validation
2020-03-05 22:50:32 +05:30
shravan
a0f9ad1361
522 save commit
2020-03-04 18:56:59 +05:30
shivkumar dudhani
9ab92ecc0a
fix build errors- fakeclient implementation
2020-02-14 18:20:12 -08:00
shivkumar dudhani
2687ffcbee
add kubernetes server version check
2020-02-14 18:12:28 -08:00
Jim Bugwadia
a1b49f72a3
fix gofmt and golint issues ( #667 )
...
* fix gofmt and golint issues
* add keys to structs
* fix compile error
* fix clusterrolebinding creation
* fix test
2020-02-03 13:38:24 -08:00
shuting
3343d73b76
linter fix ( #657 )
2020-01-27 08:58:53 -08:00
Shivkumar Dudhani
f4406bbefc
linter fixes ( #656 )
...
* cleanup phase 1
* linter fixes phase 2
* linter fixes
* linter fixes
2020-01-24 16:27:51 -08:00
Shivkumar Dudhani
8c1d79ab28
linter suggestions ( #655 )
...
* cleanup phase 1
* linter fixes phase 2
2020-01-24 12:05:53 -08:00
Shivkumar Dudhani
1171ac691b
cleanup phase 1 ( #653 )
2020-01-24 09:37:12 -08:00
shuting
0f398e631d
Merge pull request #599 from nirmata/542_feature
...
flag to use FQDN as CommonName in CSR
2020-01-10 18:38:18 -08:00
shivkumar dudhani
1e5f871665
lowercase the cmdline arg
2020-01-08 16:40:19 -08:00
Shivkumar Dudhani
3cf9141f4d
593 feature ( #594 )
...
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* add Generate Request CR
* generate Request Generator Initial
* test generate request CR generation
* initial commit gr generator
* generate controller initial framework
* add crd for generate request
* gr cleanup controller initial commit
* cleanup controller initial
* generate mid-commit
* generate rule processing
* create PV on generate error
* embed resource type
* testing phase 1- generate resources with variable substitution
* fix tests
* comment broken test #586
* add printer column for state
* return if existing resource for clone
* set resync time to 2 mins & remove resource version check in update handler for gr
* generate events for reporting
* fix logs
* initial commit
* fix trailing quote in patch
* remove comments
* initial condition (equal & notequal)
* initial support for conditions
* initial support fo conditions in generate
* support precondition checks
* cleanup
* re-evaluate GR on namespace update using dynamic informers
* add status for generated resources
* display loaded variable SA
* support delete cleanup of generate request main resources
* fix log
* remove namespace from SA username
* support multiple variables per statement for scalar values
* fix fail variables
* add check for userInfo
* validation checks for conditions
* update policy
* refactor logs
* code review
* add openapispec for clusterpolicy preconditions
* Update documentation
* CR fixes
* documentation
* CR fixes
* update variable
* fix logs
* update policy
* pre-defined variables (serviceAccountName & serviceAccountNamespace)
* update test
2020-01-07 15:13:57 -08:00
Shivkumar Dudhani
ffd2179b03
538 ( #587 )
...
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* add Generate Request CR
* generate Request Generator Initial
* test generate request CR generation
* initial commit gr generator
* generate controller initial framework
* add crd for generate request
* gr cleanup controller initial commit
* cleanup controller initial
* generate mid-commit
* generate rule processing
* create PV on generate error
* embed resource type
* testing phase 1- generate resources with variable substitution
* fix tests
* comment broken test #586
* add printer column for state
* return if existing resource for clone
* set resync time to 2 mins & remove resource version check in update handler for gr
* generate events for reporting
* fix logs
* cleanup
* CR fixes
* fix logs
2020-01-07 10:33:28 -08:00
shivkumar dudhani
38dcb2e94f
flag to use FQDN as CommonName in CSR
2020-01-06 16:12:53 -08:00
Shivkumar Dudhani
39e08aa1fc
76 cache invalidate ( #557 )
...
* invalidate local cache of registererd resources
* update client in initContainer
* update message
2019-12-16 12:55:44 -08:00
shivkumar dudhani
4f174779dc
remove typed client ref
2019-12-05 11:52:13 -08:00
shivkumar dudhani
0d4bbb5a38
refactor
2019-11-19 10:13:03 -08:00
Shivkumar Dudhani
61b202c64a
420 init container ( #501 )
...
* init container to cleanup stale webhook configurations if any.
* remove test code
* use internal pkg for os signals
* move webhook cleanup before http.server shutown.
* update make file and remove init
* update CI script
2019-11-18 11:41:37 -08:00
Shuting Zhao
b67577994a
update apiversion to v1 in code
2019-11-13 13:41:08 -08:00
Shuting Zhao
6e69c8b69b
cleanup pv with dependant when blocked admission request pass
2019-10-23 23:18:58 -07:00
shivkumar dudhani
fa53519e2a
change CRD Name to ClusterPolicy & ClusterPolicyViolations
2019-09-03 14:51:51 -07:00
Shuting Zhao
dcc851dee2
fix pr comments
2019-08-20 17:01:47 -07:00
Shuting Zhao
0157d80b2c
add check for registerinig webhookconfiguration in policy controller
2019-08-19 19:26:51 -07:00
shivkumar dudhani
aed0ed0dc1
clean up
2019-08-14 10:01:47 -07:00
shivkumar dudhani
3dda879e51
policyviolation, policy controller reconciliation
2019-08-07 16:14:33 -07:00
shivkumar dudhani
bbed451039
cleanup
2019-07-20 01:11:25 -07:00
shivkumar dudhani
bd9e8585c7
annotations v1
2019-07-17 15:04:02 -07:00
shivkumar dudhani
942f0f5ac3
get resource using kind & add cache invalidate mechanism and retry
2019-07-08 15:34:21 -07:00
shivkumar dudhani
444549d9b7
ctr get policy->client notfrom plister(kind empty)
2019-06-28 17:22:00 -07:00
Shuting Zhao
b4f24371c3
fix rest unit test, tests in engine are left
2019-06-27 19:14:00 -07:00
Shuting Zhao
9bdc0b17f6
rename kyverno-deployment in pkg/config/config.go
2019-06-27 13:38:51 -07:00
shivkumar dudhani
42d24f6cc7
create events for processExisting
2019-06-26 12:19:11 -07:00
shivkumar dudhani
e74ae16f5b
initial process existing
2019-06-25 22:53:18 -07:00
shivdudhani
8c32f7e71d
expose Kind to Resource api from client
2019-06-20 16:52:09 -07:00
shivdudhani
853815720d
replace utilruntime.HandleError with glog.Error
2019-06-20 11:20:09 -07:00
Shivkumar Dudhani
589298114e
Merge branch 'master' into 152_automate_testing
2019-06-19 15:04:34 -07:00
shivdudhani
096ea1b7cf
add false for dryrun after api change
2019-06-19 14:40:34 -07:00
Shivkumar Dudhani
86281d587e
Merge pull request #175 from nirmata/client_test
...
Client test
2019-06-19 14:22:12 -07:00
shivdudhani
dfeaf41845
support dryRun parameter in client api
2019-06-18 13:52:12 -07:00
shivdudhani
860d2f8df1
enable test
2019-06-17 18:35:40 -07:00
