shuting
2f2d6c2e38
Upgrade client libraries to 0.20.2 ( #1547 )
...
* upgrade clients to 0.20.2
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* remove debug log
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* fix unit tests
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* fix e2e test
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-02-07 20:26:56 -08:00
shuting
52d091c5a3
Improve / clean up code ( #1444 )
...
* Remove lock embedded in CRD controller, use concurrent map to store shcemas
* delete rcr info from data store
* skip policy validation on status update
* - remove status check in policy mutation; - fix test
* Remove fqdncn flag
* add flag profiling port
* skip policy mutation & validation on status update
* sync policy status every minute
* update log messages
2021-01-06 16:32:02 -08:00
shuting
35aa3149c8
Remove lock embedded in CRD controller, use concurrent map to store shcemas ( #1441 )
2021-01-04 23:17:17 -08:00
Shuting Zhao
3fc4562e1b
set CRD controller to reconcile every 15 mins
2021-01-03 00:14:27 -08:00
shuting
2fc3b3b998
Fixes 1410 strategic merge patch ( #1414 )
...
* fixes #1410
* fix unit test
* re-initialize worker immediately on failure
2020-12-23 17:48:00 -08:00
shuting
630a9cc94c
Fix Kyverno crash when CRD is not installed ( #1353 )
...
* ignore Kyverno CRDs existence check when server is not available
* clean up cluster / reportChangeRequest
* resolve PR comments
2020-12-03 19:19:36 -08:00
Jim Bugwadia
f6c228339e
add nil checks and refactor schema lookups
2020-11-25 12:08:28 -08:00
NoSkillGirl
5794889752
Merge branch 'main' into policyreport_cli
2020-11-18 14:43:30 +05:30
Shuting Zhao
b9fb926ddb
fixes for golint ./...
2020-11-17 13:07:30 -08:00
shuting
5e07ecc5f3
Add Policy Report ( #1229 )
...
* add report in cli
* policy report crd added
* policy report added
* configmap added
* added jobs
* added jobs
* bug fixed
* added logic for cli
* common function added
* sub command added for policy report
* subcommand added for report
* common package changed
* configmap added
* added logic for kyverno cli
* added logic for jobs
* added logic for jobs
* added logic for jobs
* added logic for cli
* buf fix
* cli changes
* count bug fix
* docs added for command
* go fmt
* refactor codebase
* remove policy controller for policyreport
* policy report removed
* bug fixes
* bug fixes
* added job trigger if needed
* job deletation logic added
* build failed fix
* fixed e2e test
* remove hard coded variables
* packages adde
* improvment added in jobs sheduler
* policy report yaml added
* cronjob added
* small fixes
* remove background sync
* documentation added for report command
* remove extra log
* small improvement
* tested policy report
* revert hardcoded changes
* changes for demo
* demo changes
* resource aggrigation added
* More changes
* More changes
* - resolve PR comments; - refactor jobs controller
* set rbac for jobs
* add clean up in job controller
* add short names
* remove application scope for policyreport
* move job controller to policyreport
* add report logic in command apply
* - update policy report types; - upgrade k8s library; - update code gen
* temporarily comment out code to pass CI build
* generate / update policyreport to cluster
* add unit test for CLI report
* add test for apply - generate policy report
* fix unit test
* - remove job controller; - remove in-memory configmap; - clean up kustomize manifest
* remove dependency
* add reportRequest / clusterReportRequest
* clean up policy report
* generate report request
* update crd clusterReportRequest
* - update json tag of report summary; - update definition manifests; - fix dclient creation
* aggregate reportRequest into policy report
* fix unit tests
* - update report summary to optional; - generate clusterPolicyReport; - remove reportRequests after merged to report
* remove
* generate reportRequest in kyverno namespace
* update resource filter in helm chart
* - rename reportRequest to reportChangeRequest; -rename clusterReportRequest to clusterReportChangeRequest
* generate policy report in background scan
* skip generating report change request if there's entry results
* fix results entry removal when policy / rule gets deleted
* rename apiversion from policy.kubernetes.io to policy.k8s.io
* update summary.* to lower case
* move reportChangeRequest to kyverno.io/v1alpha1
* remove policy report flag
* fix report update
* clean up policy violation CRD
* remove violation CRD from manifest
* clean up policy violation code - remove pvGenerator
* change severity fields to lower case
* update import library
* set report category
Co-authored-by: Yuvraj <yuvraj.yad001@gmail.com>
Co-authored-by: Yuvraj <10830562+evalsocket@users.noreply.github.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2020-11-09 11:26:12 -08:00
NoSkillGirl
0a7be578ea
removing scheme dependencies
2020-11-05 23:14:58 +05:30
Shuting Zhao
c906baa1a7
- update policy report types; - upgrade k8s library; - update code gen
2020-10-15 17:54:58 -07:00
Shuting Zhao
cdc5190c56
update nirmata/kyverno to kyverno/kyverno
2020-10-07 11:12:31 -07:00
NoSkillGirl
4f8a765ce1
fixed return
2020-09-04 19:42:29 +05:30
NoSkillGirl
70108232ec
added return
2020-09-03 09:47:43 +05:30
NoSkillGirl
fcdbc054c9
added validation for openapi_v3
2020-09-02 17:14:29 +05:30
NoSkillGirl
6b6897f6e2
working version of CRD validation for CLI
2020-08-31 18:19:09 +05:30
Mohan B E
6e827f912f
Feature/e2e 575 ( #1018 )
...
* added api templates
* E2E test for generate roles, rolebindings, clusterrole and clusterrolebindings
* table driven e2e tests
* table driven e2e tests and go fmt
* removed unwanted vars
* increased sleep time
* removed role generation clone
* increated sleep time
* added rolebinding clone and retry mechanism for get resources
* modified test for clone
* added namespace to role
* added namespace variable
* added git actions job
* changed build name
* removed docker login
* added role verbs
* removed github actions job and rbac file
* added clusterrole test with clone
* fixed travis issue
2020-08-06 10:46:10 +05:30
Jim Bugwadia
c962971372
Update mutate overlay to handle keys with slashes for labels (like annotations). Added debug V4 logs for mutate flows. ( #972 )
2020-07-04 19:32:11 -07:00
Shuting Zhao
52d45ec3c5
fix resource schema not found error
2020-06-01 19:36:01 -07:00
Jim Bugwadia
5cdcbec3c9
Bugfix/1.1.6 adjust resync and cleanup unused ( #884 )
...
* - support wildcards for namespaces
* do not annotate resource, unless policy is an autogen policy
* close HTTP body
* improve messages
* remove policy store
Policy store was not fully implemented and simply provided a way
to list all polices and get a policy by name, which can be done via
standard client-go interfaces.
We need to revisit and design a better PolicyStore that provides fast
lookups for matching policies based on names, namespaces, etc.
* handle wildcard namespaces in background processing
* fix unit tests 1) remove platform dependent path usage 2) remove policy store
* add test case for mutate with wildcard namespaces
* adjust all resync periods
* remove unused data fields
* add pattern for match
2020-05-27 19:51:34 -07:00
Shuting Zhao
140d638a9b
fix #838 - skip if crd has no schema defined
2020-05-18 21:02:21 -07:00
Shuting Zhao
f97c202d52
extract controller resync period to a constant file
2020-05-18 11:56:17 -07:00
Shuting Zhao
57e9aaea5f
Add crd 1.16+ spec
2020-05-18 11:55:59 -07:00
shravan
c804750f44
800 crd sync panic
2020-04-03 18:29:21 +05:30
shravan
c0dbd1d6e6
783 tested prototype
2020-04-02 12:19:32 +05:30
shravan
e3fcc2c4e5
783 fixing panic
2020-04-02 09:09:49 +05:30
Shuting Zhao
05d5d91afd
fix assign to nil map
2020-04-01 12:41:37 -07:00
shravan
bbeefb955b
778 tested prototype
2020-04-01 19:06:13 +05:30
shravan
20b161a270
765 resolved merge conflicts
2020-03-29 09:09:26 +05:30
shravan
91223deae2
754 resolved merge conflicts
2020-03-28 16:43:19 +05:30
shravan
b5af456f64
Revert "754 merge conflicts"
...
This reverts commit 39f75db435
2020-03-28 16:36:19 +05:30
shravan
39f75db435
754 merge conflicts
2020-03-28 16:30:18 +05:30
shravan
6efe0252a3
765 save commit
2020-03-27 19:06:06 +05:30
shuting
589f8ece47
Merge pull request #750 from nirmata/access_check
...
Access check & logging framework refactor & update code-gen version
2020-03-26 14:51:27 -07:00
Yuvraj
a0e8a6a0d5
revert data loaction
...
Signed-off-by: Yuvraj <yuvraj.yad001@gmail.com>
2020-03-26 19:10:54 +05:30
shravan
63e7533a49
754 ensuring CRD syncs before kyverno starts
2020-03-25 02:20:04 +05:30
shravan
a369675e08
754 removing redundant code
2020-03-25 02:15:56 +05:30
shravan
2e8cb1e482
754 removed uneeded tests
2020-03-25 02:04:43 +05:30
shravan
2443a9997d
754 crds can be immidiatly validate on startup - changed locks so as to not timeout requests
2020-03-25 02:00:30 +05:30
shravan
66c97ef3ba
754 fixing tests
2020-03-24 23:18:46 +05:30
shravan
4cf29adccd
754 works as intended - more changes required related to locks .etc
2020-03-24 23:12:45 +05:30
shravan
2273033c6c
754 fixed apiVersion and metadata issue
2020-03-24 19:08:46 +05:30
Yuvraj
b3ab74d8b6
Update pkg path
...
Signed-off-by: Yuvraj <yuvraj.yad001@gmail.com>
2020-03-24 12:06:35 +05:30
shivkumar dudhani
4320111c5c
fix logs api
2020-03-20 11:43:21 -07:00
shravan
7c5a2aa438
754 save commit
2020-03-19 20:45:30 +05:30
shravan
1fa88e0dd0
536 workin cli
2020-03-06 03:00:18 +05:30
shravan
4831aa86ae
522 dealing with substitute variables
2020-03-06 01:52:03 +05:30
shravan
4db0cf7a87
522 adding force mutate function
2020-03-06 01:09:38 +05:30
shravan
7aa1e1515b
522 supporting crd validation
2020-03-05 22:50:32 +05:30
shravan
b27a62b6bf
522 added service account name in context
2020-03-04 19:38:33 +05:30
shravan
044d55600a
522 fixed tests and added validation of mutated resources
2020-03-04 19:27:08 +05:30
shravan
888d2ae171
522 save commit
2020-03-04 19:16:26 +05:30
shravan
a0f9ad1361
522 save commit
2020-03-04 18:56:59 +05:30
shivkumar dudhani
9b38289a84
remove openapi validation(manual revert)
2020-02-20 15:09:20 -08:00
shravan
74260f39dc
634 resolved merge conflicts
2020-02-19 21:39:01 +05:30
shravan
bc84413f35
644 resolving merge conflicts
2020-02-19 10:44:14 +05:30
shuting
688505221e
Merge pull request #703 from shravanshetty1/536_extend_cli_v2
...
#536 - Extending cli functionality
2020-02-18 09:57:53 -08:00
shravan
236387b7a2
634 fixing tests
2020-02-18 00:57:28 +05:30
shravan
dad2518910
702 prototype commit
2020-02-15 23:24:04 +05:30
shravan
94f8721a6e
536 apply on cluster now supports significantly more resource types
2020-01-25 22:38:54 +05:30
shravan
78cae242c5
522 restructured files
2020-01-25 14:53:12 +05:30
