Liang Deng
f40501a4c9
chore: bump kube deps to 1.32.3 ( #12437 )
...
Signed-off-by: Liang Deng <ytdengliang@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-18 22:44:44 +01:00
Frank Jogeleit
b1ef884c82
fix: engine response for ivpol background scanning ( #12436 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-18 18:20:41 +00:00
dependabot[bot]
aee3159aa9
chore(deps): bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 ( #12430 )
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.5.1 to 6.5.2.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](4696ba8bab...55c2c1448f
2025-03-18 16:12:22 +00:00
Frank Jogeleit
843da25193
fix: set correct policy for ivpols ( #12434 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-18 13:21:34 +00:00
Frank Jogeleit
fea8b37971
fix: check if response includes a policy for ivpol ( #12433 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-18 12:43:10 +00:00
Frank Jogeleit
f869638edf
Implement Reporting and Background scan for ImageVerificationPolicy ( #12432 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-18 11:39:00 +00:00
shuting
c0ab93b95b
fix: autogen status for ivpol ( #12431 )
...
* feat: enable mutating webhook for ivpol
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: add objects to payload
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add chainsaw test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add update codegen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: propagate policy response to admission reponse
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update chainsaw tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: ivpol autogen meta
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-18 10:40:21 +00:00
Charles-Edouard Brétéché
c0d7332d14
feat: simplify resource cel lib ( #12427 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-18 08:58:59 +00:00
Charles-Edouard Brétéché
6c8446b831
feat: simplify resource cel lib ( #12426 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-17 16:31:01 +00:00
Charles-Edouard Brétéché
e785ee4882
feat: add globalcontext CEL lib ( #12425 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-17 16:53:32 +01:00
Mohd Kamaal
be974e7d93
chainsaw test to check messageExpression interpolation ( #12415 )
...
Signed-off-by: Mohd Kamaal <mohdkamaal2019@gmail.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-17 14:06:12 +00:00
shuting
4f9b07070a
feat: enable mutating webhook for ivpol ( #12423 )
...
* feat: enable mutating webhook for ivpol
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: add objects to payload
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add chainsaw test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add update codegen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: propagate policy response to admission reponse
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update chainsaw tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-17 12:31:37 +00:00
momantech
1982ebca47
chore: make function comment match function name ( #12417 )
...
Signed-off-by: momantech <cuimoman@qq.com>
2025-03-17 11:31:55 +00:00
dependabot[bot]
d701ab49cf
chore(deps): bump docker/login-action from 3.3.0 to 3.4.0 ( #12422 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](9780b0c442...74a5d14239
2025-03-17 07:49:42 +00:00
shuting
5c5a5fc0b0
feat: reconcile ivpol.status ( #12392 )
...
* feat: update ivpol.status api
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: fix unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update codegen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update codegen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: reconcile ivpol.status
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: linter issues
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: autogen fields replacement
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update ivpol autogen rules
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: invoke ivpol webhook handler
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: shuting <shuting@nirmata.com>
2025-03-15 05:29:19 +05:30
Charles-Edouard Brétéché
af550f54d5
feat: add cel user lib ( #12414 )
...
* feat: add cel user lib
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* unit test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-14 13:51:25 +01:00
CortNick
a2ed5014e3
Update ADOPTERS.md ( #12411 )
...
X3M Ads has completed the Adopters form and this PR is to add the company and the use case that they shared with us to the official list of Kyverno OSS Adopters.
Signed-off-by: CortNick <104345443+CortNick@users.noreply.github.com>
2025-03-14 10:05:24 +00:00
Charles-Edouard Brétéché
ff7f57713e
feat: add user info in cel engine ( #12410 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-14 09:35:44 +00:00
Vishal Choudhary
e190f84845
feat: webhook integration image verification policies ( #12403 )
...
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-03-14 08:37:42 +00:00
Charles-Edouard Brétéché
400b0b82dd
feat: support vps in cli test command ( #12384 )
...
* feat: support vps in cli test command
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* context in test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-14 08:14:49 +00:00
dependabot[bot]
1bd7cad835
chore(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 ( #12406 )
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.29.0 to 0.30.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](18f2510ee3...6c175e9c40
2025-03-14 07:55:52 +00:00
dependabot[bot]
b15b048322
chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure ( #12401 )
...
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/azure](https://github.com/sigstore/sigstore ) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.9.0...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/azure
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-13 16:12:12 +00:00
Mohd Kamaal
19b816ba70
solves the cronjob autogen nested path issue ( #12383 )
...
* solves the cronjob autogen nested path issue
Signed-off-by: Mohd Kamaal <mohdkamaal2019@gmail.com>
* format the file using linter
Signed-off-by: Mohd Kamaal <mohdkamaal2019@gmail.com>
* autogen path change in validating-polcies
Signed-off-by: Mohd Kamaal <mohdcode@MBA.local>
---------
Signed-off-by: Mohd Kamaal <mohdkamaal2019@gmail.com>
Signed-off-by: Mohd Kamaal <mohdcode@MBA.local>
Co-authored-by: Mohd Kamaal <mohdcode@MBA.local>
2025-03-13 14:22:51 +00:00
dependabot[bot]
7e3dfd934e
chore(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 ( #12402 )
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.5.0 to 6.5.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](2226d7cb06...4696ba8bab
2025-03-13 10:08:54 +00:00
Vishal Choudhary
d56e6037a4
fix: image parse func and add chainsaw tests ( #12396 )
...
* fix: image parse func and add chainsaw tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2025-03-13 07:01:40 +00:00
Frank Jogeleit
6fdbdbce28
Fix: data access in audit annotations ( #12394 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-12 16:44:50 +00:00
Vishal Choudhary
98ecf30a62
fix: add missing context type and http type in ivpols ( #12393 )
...
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2025-03-12 14:47:21 +00:00
shuting
91e6ae14fe
feat: register webhook for ivpol ( #12391 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-12 16:04:11 +05:30
Frank Jogeleit
f59cae97f2
Fix: data access in message expressions ( #12390 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-12 09:32:29 +00:00
dependabot[bot]
978056218a
chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault ( #12388 )
...
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore ) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.9.0...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-12 08:25:03 +00:00
dependabot[bot]
e18f9cf377
chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws ( #12389 )
...
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore ) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.9.0...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-12 08:41:38 +01:00
Charles-Edouard Brétéché
9f70209361
feat: mock list resources in context ( #12380 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-11 17:21:30 +00:00
Aditya Kumar
4dc9296eb1
Minor fixes in Contributing and Development docs ( #12377 )
...
Signed-off-by: Aditya Kumar <aditya.kumar60@infosys.com>
2025-03-11 15:51:12 +00:00
Frank Jogeleit
1a7c581220
fix: providing the http provider in the compiler ( #12379 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-11 15:00:20 +00:00
Charles-Edouard Brétéché
0d43a2d997
feat: make image ref parsing a static function ( #12374 )
...
* feat: make image ref parsing a static function
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* typo
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-11 14:19:36 +00:00
shuting
b5b1287282
chore: improve error handling ( #12376 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-11 13:52:04 +01:00
dependabot[bot]
aea1ea8c3d
chore(deps): bump fluxcd/flux2 from 2.4.0 to 2.5.1 ( #12359 )
...
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2 ) from 2.4.0 to 2.5.1.
- [Release notes](https://github.com/fluxcd/flux2/releases )
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml )
- [Commits](5350425cdc...8d5f40dca5
2025-03-11 10:57:31 +00:00
dependabot[bot]
248ac53f17
chore(deps): bump github.com/sigstore/sigstore from 1.9.0 to 1.9.1 ( #12370 )
...
Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore ) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.9.0...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-11 10:32:06 +00:00
dependabot[bot]
2274ecbbc7
chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp ( #12371 )
...
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore ) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.9.0...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-11 09:38:52 +00:00
Vishal Choudhary
d812982b2e
feat: webhook handlers for image verification ( #12318 )
...
* feat: webhook support for image verification
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add validation
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: add tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: ci
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: codegen
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: trim prefix
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: only use matched policies
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: conflicts
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: remove commented code
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-03-11 07:38:11 +00:00
dependabot[bot]
a0b1431f41
chore(deps): bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 ( #12347 )
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 6.1.0 to 6.2.1.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](9ed2f89a66...90a3faa9d0
2025-03-10 22:24:16 +00:00
dependabot[bot]
4fd4e702ff
chore(deps): bump actions/setup-python from 5.3.0 to 5.4.0 ( #12362 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](0b93645e9f...42375524e2
2025-03-10 21:53:19 +00:00
dependabot[bot]
25c38af5cd
chore(deps): bump actions/cache in /.github/actions/setup-caches ( #12364 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4.2.0 to 4.2.2.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](1bd1e32a3b...d4323d4df1
2025-03-10 21:16:15 +00:00
Charles-Edouard Brétéché
c655ba72c2
fix: use pointer in context config map getter ( #12365 )
2025-03-10 14:31:34 +00:00
dependabot[bot]
456218952b
chore(deps): bump actions/setup-go in /.github/actions/setup-build-env ( #12363 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](3041bf56c9...f111f3307d
2025-03-10 13:57:12 +00:00
Charles-Edouard Brétéché
1c3bddf8ca
feat: support mock in CLI for VPs ( #12344 )
...
* feat: support mock in CLI for VPs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* implement get cm mock
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* move into cel package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-10 13:28:44 +00:00
dependabot[bot]
0e76c0ed4b
chore(deps): bump sonarsource/sonarcloud-github-action ( #12358 )
...
Bumps [sonarsource/sonarcloud-github-action](https://github.com/sonarsource/sonarcloud-github-action ) from 4.0.0 to 5.0.0.
- [Release notes](https://github.com/sonarsource/sonarcloud-github-action/releases )
- [Commits](02ef91109b...ffc3010689
2025-03-10 12:30:49 +00:00
dependabot[bot]
fc41d23439
chore(deps): bump actions/download-artifact from 4.1.8 to 4.1.9 ( #12360 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.1.8 to 4.1.9.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](fa0a91b85d...cc20338598
2025-03-10 11:51:38 +00:00
dependabot[bot]
92bd61456d
chore(deps): bump actions/download-artifact ( #12361 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.1.8 to 4.1.9.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](fa0a91b85d...cc20338598
2025-03-10 11:28:38 +00:00
dependabot[bot]
b70ff28fd5
chore(deps): bump gomodules.xyz/jsonpatch/v2 from 2.4.0 to 2.5.0 ( #12354 )
...
Bumps [gomodules.xyz/jsonpatch/v2](https://github.com/gomodules/jsonpatch ) from 2.4.0 to 2.5.0.
- [Release notes](https://github.com/gomodules/jsonpatch/releases )
- [Changelog](https://github.com/gomodules/jsonpatch/blob/release-2.0/CHANGELOG.md )
- [Commits](https://github.com/gomodules/jsonpatch/compare/v2.4.0...v2.5.0 )
---
updated-dependencies:
- dependency-name: gomodules.xyz/jsonpatch/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 10:58:42 +00:00
