Mariam Fahmy
fff3ad047e
chore: bump cleanup policies to v2beta1 ( #8594 )
...
* chore: bump cleanup policies to v2beta1
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* chore: remove the support of v2alpha1 cleanup policies
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 19:37:15 +08:00
Mariam Fahmy
8cbe66a06a
feat: generate events for CEL policies that generate VAPs ( #8564 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 10:16:35 +00:00
Vishal Choudhary
5882ed32a3
refactor: common remote authenticator for notary and cosign ( #8494 )
...
* refactor: common remote authenticator for notary and cosign
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* fix: add user agent
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* refactor: move getGCRRemoteOption out of BuildGCRRemoteOption
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-09 09:07:00 +00:00
Mariam Fahmy
adb789247a
refactor: use GetKind() from the cleanup policy interface ( #8565 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 08:06:32 +00:00
Mariam Fahmy
cd986849d5
fix: use v2beta1 of policy exceptions ( #8587 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 15:27:25 +08:00
dependabot[bot]
183175ef8b
chore(deps): bump github.com/onsi/gomega from 1.27.10 to 1.28.0 ( #8557 )
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.27.10 to 1.28.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.27.10...v1.28.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-06 14:35:50 +00:00
dependabot[bot]
1aeff358fc
chore(deps): bump github.com/prometheus/client_golang ( #8553 )
...
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) from 1.16.0 to 1.17.0.
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.17.0/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.16.0...v1.17.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-06 07:55:02 +00:00
dependabot[bot]
388d7bf293
chore(deps): bump go.opentelemetry.io/otel/sdk/metric ( #8556 )
...
Bumps [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go ) from 0.41.0 to 1.19.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/sdk/metric/v0.41.0...v1.19.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk/metric
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-06 06:50:43 +00:00
AdamKorcz
080a96fed4
Refactor fuzzing utils and add 3 fuzzers ( #8555 )
...
* Refactor fuzzing utils and add 3 fuzzers
Signed-off-by: AdamKorcz <adam@adalogics.com>
* Fix lint issues
Signed-off-by: AdamKorcz <adam@adalogics.com>
* use latest go-jmespath
Signed-off-by: AdamKorcz <adam@adalogics.com>
* Check layer size (#8552 )
* fix excessive logs
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* check fetched layer size
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* check sig layer size
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: AdamKorcz <adam@adalogics.com>
* fix lint issues
Signed-off-by: AdamKorcz <adam@adalogics.com>
---------
Signed-off-by: AdamKorcz <adam@adalogics.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2023-10-05 16:33:26 +00:00
Jim Bugwadia
a5028b1f08
Add adopter li ( #8584 )
...
* fix excessive logs
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add LinkedIn to the Kyverno adopters list
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2023-10-05 04:05:19 +00:00
Jim Bugwadia
4762e0807e
Update adopters form ( #8583 )
...
* fix excessive logs
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update form URL
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2023-10-04 18:13:20 +00:00
Jim Bugwadia
2fe07f694e
Check layer size ( #8552 )
...
* fix excessive logs
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* check fetched layer size
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* check sig layer size
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2023-09-28 22:12:13 +05:30
Charles-Edouard Brétéché
27858f634e
chore: bump kubectl-validate ( #8548 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 19:08:03 +00:00
Mariam Fahmy
b80963374f
chore: enable policy exceptions by default ( #8545 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 17:40:13 +00:00
Charles-Edouard Brétéché
482c243517
refactor: remove openapi package ( #8538 )
...
* refactor: openapi package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* kubectl validate
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* rm
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* go mod
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix vscode
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 16:21:47 +00:00
Mariam Fahmy
eedc993ed9
fix: apply exceptions after executing the policy itself ( #8544 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 14:52:39 +00:00
Charles-Edouard Brétéché
4cabc3ce44
fix: make tuf feature in chart consistent with others ( #8542 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 13:03:17 +00:00
Erik Godding Boye
8d2b68dc46
fix(helm): skip deployment replicas validation in non-int value ( #8539 )
...
* fix(helm): skip deployment replicas validation in non-int value
Signed-off-by: Erik Godding Boye <egboye@gmail.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Erik Godding Boye <egboye@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 10:04:16 +00:00
Charles-Edouard Brétéché
20655f5af4
fix: cache error in gh workflows ( #8518 )
...
* fix: cache error in gh workflows
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* setup caches
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 08:24:27 +00:00
Mariam Fahmy
538e8958aa
refactor: get the last execution time from the cleanup policy interface ( #8531 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 08:55:25 +02:00
Charles-Edouard Brétéché
3ae4c50440
fix: remove cronjobs from cleanup controller rbac ( #8529 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-26 14:13:11 +00:00
Charles-Edouard Brétéché
15630ffaaa
fix: creating ClusterAdmissionReports fails for resources with colon in name ( #8530 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-26 11:44:35 +00:00
Mariam Fahmy
7add300ffa
feat: remove the creation of cronjobs in cleanup controller ( #8526 )
...
* feat: remove the creation of cronjobs in cleanup controller
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix: use lastExecutionTime instead of nextExecutionTime
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-26 12:02:17 +02:00
dependabot[bot]
45a45b6c46
chore(deps): bump sigstore/scaffolding ( #8522 )
...
Bumps [sigstore/scaffolding](https://github.com/sigstore/scaffolding ) from d5eada0a29719b385d26831ead049f188bbfd824 to d21c412f3c2f95421413f43741c2e62c19241dfe.
- [Release notes](https://github.com/sigstore/scaffolding/releases )
- [Changelog](https://github.com/sigstore/scaffolding/blob/main/release.md )
- [Commits](d5eada0a29...d21c412f3c
)
---
updated-dependencies:
- dependency-name: sigstore/scaffolding
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-25 08:50:44 +00:00
Vishal Choudhary
e5c004a6b4
fix: only fetch pub keys when tlogs and scts are not ignored ( #8521 )
2023-09-25 08:16:10 +00:00
dependabot[bot]
313c5df2bb
chore(deps): bump actions/checkout from 4.0.0 to 4.1.0 ( #8523 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](3df4ab11eb...8ade135a41
)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-25 07:39:53 +00:00
dependabot[bot]
7c9ba87ee2
chore(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 ( #8507 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.58.1 to 1.58.2.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.1...v1.58.2 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 17:37:19 +00:00
dependabot[bot]
ebb7868d97
chore(deps): bump adRise/update-pr-branch from 0.6.0 to 0.7.0 ( #8506 )
...
Bumps [adRise/update-pr-branch](https://github.com/adrise/update-pr-branch ) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/adrise/update-pr-branch/releases )
- [Commits](437fab6e0a...cd305ecbd7
)
---
updated-dependencies:
- dependency-name: adRise/update-pr-branch
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com>
2023-09-22 14:10:01 +00:00
Charles-Edouard Brétéché
61aa713d27
fix: image cache panic and cleanup ( #8512 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 10:40:16 +00:00
Charles-Edouard Brétéché
21e044eb1a
feat: add cli package to load policy exceptions ( #8508 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 09:53:19 +00:00
Vishal Choudhary
d4d5d751b1
fix: disables TUF by default ( #8509 )
2023-09-22 14:32:57 +05:30
dependabot[bot]
a043325237
chore(deps): bump sigstore/scaffolding ( #8505 )
...
Bumps [sigstore/scaffolding](https://github.com/sigstore/scaffolding ) from b52f64ebe86d2d081b753d7d8549e0b668dcabb7 to d5eada0a29719b385d26831ead049f188bbfd824.
- [Release notes](https://github.com/sigstore/scaffolding/releases )
- [Changelog](https://github.com/sigstore/scaffolding/blob/main/release.md )
- [Commits](b52f64ebe8...d5eada0a29
)
---
updated-dependencies:
- dependency-name: sigstore/scaffolding
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-22 07:30:38 +00:00
Charles-Edouard Brétéché
6cf57ee81f
fix: make sure we don't modify reports not owned by kyverno ( #8502 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 04:01:21 +00:00
Charles-Edouard Brétéché
bc6b6e17b9
fix: return gvk when loading resource ( #8501 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 11:10:15 +08:00
Charles-Edouard Brétéché
3c76cf5118
feat: add resource load funcs in cli ( #8499 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 21:32:30 +00:00
Vishal Choudhary
9c69774a67
feat: add 1.11.0 in GH issue templates ( #8496 )
2023-09-21 15:17:45 +00:00
Charles-Edouard Brétéché
d421c8860b
fix: webhookTimeout flag not clear ( #8493 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 14:40:38 +00:00
Vishal Choudhary
e6bebeae9b
feat: improve assertion and error messages ( #8489 )
2023-09-21 12:39:54 +00:00
Charles-Edouard Brétéché
86b752e2fb
feat: add cli resource loader package ( #8488 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 11:59:45 +00:00
Charles-Edouard Brétéché
4046315dac
feat: add a package to convert unstructured into typed ( #8484 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 09:34:38 +00:00
Charles-Edouard Brétéché
ae1fa9b260
fix: deep copy before validaitng ( #8483 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 09:01:14 +00:00
Charles-Edouard Brétéché
af50fabc6e
chore: fix release ( #8482 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 08:24:45 +00:00
Charles-Edouard Brétéché
f38011cd8e
fix: check subjects func ( #8470 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 03:22:01 +00:00
Charles-Edouard Brétéché
b692e3b817
fix: make free disk space action configurable ( #8478 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 23:13:14 +00:00
Charles-Edouard Brétéché
5eb3ca2d96
fix: release archive name template ( #8475 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 22:35:49 +00:00
Charles-Edouard Brétéché
1a73ca7e9f
fix: publish images workflow ( #8473 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 21:50:00 +00:00
Charles-Edouard Brétéché
da5496bd64
fix: release workflow ( #8471 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 19:46:40 +00:00
Charles-Edouard Brétéché
4925f7a4b3
chore: free disk space before running jobs ( #8468 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 15:49:23 +00:00
Vishal Choudhary
fd01e50280
fix: image verify cache test ( #8462 )
...
* fix: image verify cache test
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: print err message
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: clear mock
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: defer clear mock
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 14:03:58 +02:00
Charles-Edouard Brétéché
69441c6d0f
chore: add a required job to simplify branch protection ( #8464 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 11:19:35 +00:00