1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-07 00:17:13 +00:00
Commit graph

53 commits

Author SHA1 Message Date
Shuting Zhao
b9fb926ddb fixes for golint ./... 2020-11-17 13:07:30 -08:00
Shuting Zhao
781fbfb82c Merge branch 'main' into schema_gen
# Conflicts:
#	pkg/generate/cleanup/controller.go
#	pkg/generate/controller.go
2020-11-13 17:46:34 -08:00
Shuting Zhao
2ff9d03b3f - set tag optional in generaterequest; - fix generate controller error log 2020-11-13 17:44:34 -08:00
Jim Bugwadia
74b656768e
1251 fix generate panic (#1252)
* improve error message

* fix panic and add error logs

* update log levels and messages

* fix tests
2020-11-12 16:44:57 -08:00
shuting
5e07ecc5f3
Add Policy Report (#1229)
* add report in cli

* policy report crd added

* policy report added

* configmap added

* added jobs

* added jobs

* bug fixed

* added logic for cli

* common function added

* sub command added for policy report

* subcommand added for report

* common package changed

* configmap added

* added logic for kyverno cli

* added logic for jobs

* added logic for jobs

* added logic for jobs

* added logic for cli

* buf fix

* cli changes

* count bug fix

* docs added for command

* go fmt

* refactor codebase

* remove policy controller for policyreport

* policy report removed

* bug fixes

* bug fixes

* added job trigger if needed

* job deletation logic added

* build failed fix

* fixed e2e test

* remove hard coded variables

* packages adde

* improvment added in jobs sheduler

* policy report yaml added

* cronjob added

* small fixes

* remove background sync

* documentation added for report command

* remove extra log

* small improvement

* tested policy report

* revert hardcoded changes

* changes for demo

* demo changes

* resource aggrigation added

* More changes

* More changes

* - resolve PR comments; - refactor jobs controller

* set rbac for jobs

* add clean up in job controller

* add short names

* remove application scope for policyreport

* move job controller to policyreport

* add report logic in command apply

* - update policy report types;  - upgrade k8s library; - update code gen

* temporarily comment out code to pass CI build

* generate / update policyreport to cluster

* add unit test for CLI report

* add test for apply - generate policy report

* fix unit test

* - remove job controller; - remove in-memory configmap; - clean up kustomize manifest

* remove dependency

* add reportRequest / clusterReportRequest

* clean up policy report

* generate report request

* update crd clusterReportRequest

* - update json tag of report summary; - update definition manifests; -  fix dclient creation

* aggregate reportRequest into policy report

* fix unit tests

* - update report summary to optional; - generate clusterPolicyReport; - remove reportRequests after merged to report

* remove

* generate reportRequest in kyverno namespace

* update resource filter in helm chart

* - rename reportRequest to reportChangeRequest; -rename clusterReportRequest to clusterReportChangeRequest

* generate policy report in background scan

* skip generating report change request if there's entry results

* fix results entry removal when policy / rule gets deleted

* rename apiversion from policy.kubernetes.io to policy.k8s.io

* update summary.* to lower case

* move reportChangeRequest to kyverno.io/v1alpha1

* remove policy report flag

* fix report update

* clean up policy violation CRD

* remove violation CRD from manifest

* clean up policy violation code - remove pvGenerator

* change severity fields to lower case

* update import library

* set report category

Co-authored-by: Yuvraj <yuvraj.yad001@gmail.com>
Co-authored-by: Yuvraj <10830562+evalsocket@users.noreply.github.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2020-11-09 11:26:12 -08:00
Shuting Zhao
cdc5190c56 update nirmata/kyverno to kyverno/kyverno 2020-10-07 11:12:31 -07:00
Mohan B E
51ac382c6c
Feature/configmaps var 724 (#1118)
* added configmap data substitution for foreground mutate and validate

* added configmap data substitution for foreground mutate and validate fmt

* added configmap lookup for background

* added comments to resource cache

* added configmap data lookup in preConditions

* added parse strings in In operator and configmap lookup docs

* added configmap lookup docs

* modified configmap lookup docs
2020-09-22 14:11:49 -07:00
Yuvraj
e5fb55f1c6
Generate policy with backword compatibility (#1125)
* fix generate label issue

* fix generate issue for old namespace

* small fix

* added backword compatibility

* condition changed

* extra code remove
2020-09-18 12:34:43 -07:00
Yuvraj
b7524467a3
Reconcile Generate request on policy update (#1096)
* policy report crd added

* added namespaced rule

* remove extra field from crd

* revert crd change

* remove policy report chnages

* remove policy report chnages

* remove policy report chnages

* remove policy report chnages

* added logic for gr

* revert changes

* fixed generate rules

* fixed generate rules

* fixed generate rules

* fixed generate rules

* remove extra logs

* remove extra logs

* fixed e2e test

* remove extra logs

* crd issue resolved

* added check for sync

* add labels update

* add label update

* added permission to role

* roles added to helm

* roles added to helm
2020-09-03 14:34:23 -07:00
Mohan B E
118b40c644
added invalid field validation for policy (#1094) 2020-09-03 22:14:54 +05:30
Yuvraj
2641120907
Generate policy does not work on namespace update (#1085)
* added logic for handling generate request

* generate rules added

* added label condition for generate

* remove extra logs

* remove extra logs

* buf fixed

* bug fixed

* added logic for delete gr

* log fixed

* documentation changed

* remove best practices changes

* bug fix

* added best pratice
2020-08-31 11:25:13 -07:00
shuting
d6062fdd47
Add go fmt (#1055)
* remove empty flag

* format code

* revert change in install.yaml
2020-08-14 12:21:06 -07:00
Yuvraj
73840e3c5f
configrable rules added (#1017)
* configrable rules added

* fix exclude group logic from code

* flag added in yaml

* exclude username added

* exclude username added

* config interface implimented

* configure exclude username

* get role ref

* test case fixed

* panic fix

* move from interface to slice

* exclude added in mutate

* trim strings

* configmap changes added

* kustomize changes for configmap

* k8s resources added
2020-08-07 17:09:24 -07:00
Mohan B E
a14828246d
Feature/api version 852 (#1028)
* apiVersion support for generate

* added apiVersion to crds
2020-08-07 09:47:33 +05:30
shuting
75a7543c6d
Events fix (#1006)
* remove success event

* remove event success message

* remove events generated on clusterpolicy
2020-07-20 20:30:02 +05:30
evalsocket
3dc72b3b8e add group policy 2020-07-16 05:20:37 -07:00
evalsocket
629267c40a policy group change 2020-07-15 17:19:20 -07:00
evalsocket
37e3c08476 policy name added in labels 2020-07-15 14:30:00 -07:00
shuting
55d5812404
bugfix - delete synchronized resources (#997)
* Delete individual resource when policy deleted

Co-authored-by: evalsocket <yuvraj.yad001@gmail.com>
2020-07-15 23:09:02 +05:30
Yuvraj
4535f43283
Added Synchronize flag in Generate Request (#980)
* fix Synchronize flag issue
2020-07-14 02:12:11 +05:30
evalsocket
67920cf194 bug fixed 2020-07-10 17:44:41 -07:00
evalsocket
98fa10ea59 fix delete logic 2020-07-10 17:21:30 -07:00
evalsocket
04ecfd3998 delete if sync is true 2020-07-10 17:06:16 -07:00
evalsocket
8289450c1c bug fixes 2020-07-10 15:23:07 -07:00
Yuvraj
85d2ac9f84 added validation log 2020-07-09 05:48:35 -07:00
Yuvraj
b708770be1 added label for synchronize 2020-07-08 14:22:32 -07:00
Yuvraj
50b849aead delete generated resource logic added 2020-07-08 08:01:47 -07:00
Yuvraj
01724d63cf
Synchronize data for generated resources (#933)
* Generate request added fro update resource

* synchronize flag added

* documentation added for keeping resource synchronized

Signed-off-by: Yuvraj <yuvraj.yad001@gmail.com>
2020-06-23 07:19:43 +05:30
shuting
fa06cace5f
802 set kind in generate (#846)
* set generate.data.kind from generate.kind

* remove setting generate.data.apiversion
2020-05-16 21:29:23 -07:00
shravan
9c457b9c1a 786 fixed tests 2020-04-09 22:21:59 +05:30
shivkumar dudhani
e6e5bbb603 Merge branch 'master' into access_check 2020-03-17 17:23:18 -07:00
shivkumar dudhani
1b1ab78f77 logs & access 2020-03-17 11:05:20 -07:00
shravan
9656975b5a 527 renamed package and send listner instead of entire sync object 2020-03-07 12:53:37 +05:30
shravan
6206852262 527 redesigned implementation so that package variables are not used across packages 2020-03-04 15:45:20 +05:30
shravan
38b92a0d34 527 making status listner into a buffered channel instead of go routines 2020-03-04 13:35:49 +05:30
shravan
fdb1cc36ac 527 getting generate stats from sync 2020-03-04 13:11:48 +05:30
shivkumar dudhani
4f830acb65 refactor 2020-02-14 12:05:13 -08:00
shivkumar dudhani
5cee543755 refactor variable substitution 2020-02-14 11:59:28 -08:00
shivkumar dudhani
d855247a98 refactor generate to use variable substition at rule level 2020-02-13 13:57:48 -08:00
shivkumar dudhani
34ad3a9a2b generate rule processing refactoring 2020-02-10 12:44:20 -08:00
shivkumar dudhani
69f65c713d temp 2020-02-04 14:35:10 -08:00
shivkumar dudhani
f608d4db18 variable substitution on copy and retry generate resource creation 2020-02-04 12:13:41 -08:00
Jim Bugwadia
a1b49f72a3
fix gofmt and golint issues (#667)
* fix gofmt and golint issues

* add keys to structs

* fix compile error

* fix clusterrolebinding creation

* fix test
2020-02-03 13:38:24 -08:00
Shivkumar Dudhani
2bba55e211
substitute variable values on a copy of policy rule (#669) 2020-02-03 11:59:34 -08:00
Shivkumar Dudhani
8c1d79ab28
linter suggestions (#655)
* cleanup phase 1

* linter fixes phase 2
2020-01-24 12:05:53 -08:00
Shivkumar Dudhani
1171ac691b
cleanup phase 1 (#653) 2020-01-24 09:37:12 -08:00
Shuting Zhao
ac0404bd6c Merge branch 'master' into add_testscenario 2020-01-10 12:00:04 -08:00
Shuting Zhao
434ed20857 report violation in generate when path not present 2020-01-10 11:59:05 -08:00
shivkumar dudhani
3f965a245b add check for clone 2020-01-10 08:01:18 -08:00
Shuting Zhao
2eb0e49306 fix build error 2020-01-09 17:53:27 -08:00