mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
Code Activity
3230 commits 16 branches 550 tags 288 MiB
Commit graph

3230 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pooja Singh
1da4f74562
Merge pull request #1817 from NoSkillGirl/validate_policy_in_cli_according_to_crd 
Validate policy in cli according to policy schema
 2021-04-23 15:51:47 +05:30
NoSkillGirl
7a6648c9a1 simplified bool comparison 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-04-23 11:56:15 +05:30
NoSkillGirl
8f9c97411b added test cases 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-04-23 01:15:45 +05:30
NoSkillGirl
b98f1116f3 refactoring code 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-04-23 00:20:50 +05:30
Vyankatesh Kudtarkar
ab8d077384
Fix Dev setup (#1815) 
Co-authored-by: vyankatesh <vyankatesh@neualto.com>
 2021-04-21 12:35:13 -07:00
Simon Metzger
6e76fd68f0
allow fsGroup values greater than zero (#1822) 
change the policy require-non-root-groups to allow fsGroup values greater than zero

Signed-off-by: Metzger, Simon <smnmtzgr@gmail.com>
 2021-04-21 12:12:26 -07:00
NoSkillGirl
fe05f0385d added error handling 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-04-21 10:28:11 +05:30
NoSkillGirl
3362ef95fc added policy crd as go file 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-04-21 10:28:11 +05:30
NoSkillGirl
4cfc21779c added policy validation according to api server 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-04-21 10:28:11 +05:30
treydock
b5fd23588a
Fix Helm charts (#1828) 
* Fix Helm charts to render  correctly

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make Helm chart policies consistent

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-04-20 13:08:30 -07:00
Frank Jogeleit
56183cc73d
Add severity to pod security policies (#1797) 
Signed-off-by: Frank Jogeleit <fj@move-elevator.de>
 2021-04-16 17:41:30 -07:00
Yashvardhan Kukreja
69c3418ca9
added: a pre-flight validation check for ensuring that only 'any'/'all' fields are present under conditions (#1791) 
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-04-16 17:23:01 -07:00
Max Goncharenko
6a0305674a
JMESPath custom functions (#1772) 
* JMESPath: Support regex expressions

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* JMESPath: Add string functions

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* Removed {{$}} variable handling logic

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* Name all functions in snake case; Update error message; Fix {{@}} behavior

Signed-off-by: Max Goncharenko <kacejot@fex.net>
 2021-04-16 16:17:00 -07:00
Shuting Zhao
4a4fdc54ee release v1.3.5 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-16 14:04:00 -07:00
shuting
f93f3344d2
fix result removal for DELETION requests (#1811) 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-16 13:51:35 -07:00
Shuting Zhao
a4b639f754 tag v1.3.5-rc5 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-15 17:35:25 -07:00
shuting
f515bc5dbf
skip rule application if referred path not exist (#1806) 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-15 17:33:34 -07:00
Chip Zoller
e2c522f4c6
fix link to PR doc (#1803) 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-04-15 10:34:02 -07:00
Shuting Zhao
3f18b5f7df tag v1.3.5-rc3 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-14 13:12:12 -07:00
shuting
081244a102
Fix array variables substitution (#1800) 
* fix array variables substitution

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* Add ability to marshal complex vars to string

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* Added tests for variable substitution

Signed-off-by: Max Goncharenko <kacejot@fex.net>

Co-authored-by: Max Goncharenko <kacejot@fex.net>
 2021-04-14 13:09:00 -07:00
Frank Jogeleit
0e3e42ea33
Fix Typo in builder method names (#1798) 
Signed-off-by: Frank Jogeleit <fj@move-elevator.de>
 2021-04-13 16:41:07 -07:00
Max Goncharenko
8050c4e77b
moved variable substitution to higher level to avoid unhandled cases (#1785) 
Signed-off-by: Max Goncharenko <kacejot@fex.net>
 2021-04-13 11:44:43 -07:00
treydock
67973c2776
Add Helm tests to Github Actions (#1793) 
This reverts commit 2749280b6c.

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-04-13 10:39:27 -07:00
shuting
2749280b6c
Revert "Add Helm tests to Github Actions (#1790)" (#1792) 
This reverts commit 9c7f7019f3.
 2021-04-12 21:57:21 -07:00
treydock
9c7f7019f3
Add Helm tests to Github Actions (#1790) 
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-04-12 20:55:13 -07:00
shuting
9dab21619f
Match endpoint to the exact Kyverno Pod's IP (#1787) 
* update log message

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update printer column - validation failure action

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* match endpoint ip with the exact pod ip

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* - add tag "app.kubernetes.io/name"; - reduce throttling requests when deletes webhook configs

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add [SelfSubjectAccessReview,*,*] to resource filters

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-12 20:29:51 -07:00
Chip Zoller
fae48094d8
add PR docs guide (#1788) 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-04-12 18:00:29 -07:00
Bricktop
9a6f7043b0
Add e2e test for mutation (#1761) 
Signed-off-by: MarcelMue <marcel.mueller1@rwth-aachen.de>
Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>
 2021-04-08 16:14:08 -07:00
shuting
f3ca1d78f1
Fix log message (#1779) 
* update log message

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update printer column - validation failure action

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-08 12:10:30 -07:00
Vyankatesh Kudtarkar
e2cd04c91f
Fix #1446 :Failed to mutate policy (#1767) 
* Fix failed to mutate policy

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* fix autogen rule issue

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* fix issue

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* fix issue

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* addPolicy and AddNsPolicy changes

* fix code indentation

* change kind -> policy

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* fix kind for policy

* fix comments

Co-authored-by: vyankatesh <vyankatesh@neualto.com>
 2021-04-07 16:34:45 -07:00
Frank Jogeleit
072d9f7951
Add Support for policies.kyverno.io/severity annotation (#1763) 
Signed-off-by: Frank Jogeleit <fj@move-elevator.de>
 2021-04-07 14:56:27 -07:00
Shuting Zhao
6f41acde03 tag v1.3.5-rc3 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-06 11:13:56 -07:00
Max Goncharenko
01004e1db0
Fix #1754 Invalid variable validation (#1770) 
Signed-off-by: Max Goncharenko <kacejot@fex.net>
 2021-04-06 10:56:06 -07:00
Jim Bugwadia
675c808b2f
Merge pull request #1766 from realshuting/1764_fix_generate 
Remove namespace field on kind Namespace
 2021-04-05 21:27:04 -07:00
Shuting Zhao
741f230272 add unit tests 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-05 14:41:30 -07:00
Shuting Zhao
8affebb680 bump kind to 0.10.0, k8s 1.20.2 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-05 13:58:51 -07:00
Shuting Zhao
4b8b8cbfa6 remove namespace field on kind Namespace 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-05 13:05:47 -07:00
Vyankatesh Kudtarkar
3ab75095b7
remove permission (#1758) 
* remove permission

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* remove duplicate resource

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

Co-authored-by: vyankatesh <vyankatesh@neualto.com>
 2021-04-02 11:22:59 -07:00
Shuting Zhao
a1d9cdd14b tag v1.3.5-rc2 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-01 13:57:33 -07:00
Jim Bugwadia
3cffc3654a
Merge pull request #1762 from realshuting/1757_default_image_info 
Set default image registry and tag if not present
 2021-04-01 13:40:13 -07:00
Jim Bugwadia
fb368ba24b
Merge pull request #1755 from realshuting/1749_fix_concurrent_read_write 
Fix concurrent read/write when loading configmap data
 2021-04-01 13:39:27 -07:00
Shuting Zhao
1cf8efd472 set default image registry and tag if not present 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-01 09:50:34 -07:00
shuting
72fd921cb6
fix exclude logic (#1756) 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-03-31 22:02:36 -07:00
Shuting Zhao
cab81eadda operate on the copy of configmap data 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-03-31 15:22:25 -07:00
Shuting Zhao
b0cee60100 change the order for variable validation: add allowed vars first 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-03-31 14:29:46 -07:00
Shuting Zhao
4d01f76797 - fix variable validation; - update log level 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-03-31 13:24:36 -07:00
treydock
91713ee566
Check webhooks are present during liveness (#1748) 
Fixes #1747

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-03-31 12:44:56 -07:00
treydock
0131f375f1
Register webhooks only once service endpoint is ready (#1741) 
* Register webhooks only once service endpoint is ready

Fixes #1740

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Wait for webhook to become ready in main loop

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Better error handling and logging around checking endpoint

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Log soft failure as info, remove redundant return

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-03-30 13:46:01 -07:00
Yuto Takahashi
e2cb30e752
Allow generatecontroller to handle Roles (#1739) 
* Allow generateoperator to handle Roles

Signed-off-by: Yuto Takahashi <ytaka23dev@gmail.com>

* Restore the releasable manifest

Signed-off-by: Yuto Takahashi <ytaka23dev@gmail.com>
 2021-03-29 22:48:41 -07:00
Pooja Singh
ca5a4e1986
added multiple item logic for clone in generate policy (#1744) 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-03-29 22:36:16 -07:00