38ca9e702e
* fix: do not remove webhooks during initialization (#3641) * Do not remove webhooks during initialization During initialization the Kyverno leader Pod deletes all the existing webhooks and recreates them. There is a small time window were the cluster is not protected by the webhooks, allowing a user to apply resources without any verfication. This commit updates the leader registration logic to not remove and recreate the webhooks but, in the case that the webhooks already exist, update them. Signed-off-by: Ioannis Bouloumpasis <buluba@arrikto.com> * Fix linter errors Signed-off-by: Ioannis Bouloumpasis <buluba@arrikto.com> * Use the Lister to get webhook configurations Signed-off-by: Ioannis Bouloumpasis <buluba@arrikto.com> Signed-off-by: ShutingZhao <shuting@nirmata.com> * Tag v1.6.3 Signed-off-by: ShutingZhao <shuting@nirmata.com> Co-authored-by: Ioannis Bouloumpasis <buluba89@gmail.com> |
||
---|---|---|
.github | ||
api | ||
charts | ||
cmd | ||
config | ||
data | ||
docs | ||
img | ||
litmuschaos | ||
pkg | ||
scripts | ||
test | ||
.codeclimate.yml | ||
.directory | ||
.gitignore | ||
.golangci.yml | ||
.goreleaser.yml | ||
.krew.yaml | ||
ADOPTERS.md | ||
CHANGELOG.md | ||
CODE_OF_CONDUCT.md | ||
CODEOWNERS | ||
CONTRIBUTING.md | ||
go.mod | ||
go.sum | ||
LICENSE | ||
MAINTAINERS.md | ||
Makefile | ||
OWNERS.md | ||
README.md | ||
SECURITY.md |
Kyverno
Kubernetes Native Policy Management 🎉
Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.
📙 Documentation
Kyverno installation and reference documents are available at kyverno.io.
🙋♂️ Getting Help
We are here to help!
👉 For feature requests and bugs, file an issue.
👉 For discussions or questions, join the Kyverno Slack channel.
👉 For community meeting access, join the mailing list.
👉 To get updates ⭐️ star this repository.
➕ Contributing
Thanks for your interest in contributing to Kyverno! Here are some steps to help get you started:
✔ Read and agree to the Contribution Guidelines.
✔ Browse through the GitHub discussions.
✔ Read Kyverno design and development details on the GitHub Wiki.
✔ Check out the good first issues list. Add a comment with /assign
to request assignment of the issue.
✔ Check out the Kyverno Community page for other ways to get involved.
Contributors
Kyverno is built and maintained by our growing community of contributors!
Made with contributors-img.