1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
kyverno/cmd/cli/kubectl-kyverno
Sanskar Gurdasani 231e7a681e
Support PolicyExceptions with CLI (#9525)
* loding policyExecptions from  func

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* adding PolicyExceptions in crds

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* adding PolicyExceptions in GetPolicy function

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* adding policyexceptions in Load function

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* resolve error becuase of now Getpolicy return policyexceptions

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* added -exception flag loaded policyexception

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* added policyexceptions in processor and NewEngine

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* Revert "added -exception flag loaded policyexception"

This reverts commit f53b205c08.

* Revert "Added support for PolicyExceptions for apply command "

This reverts commit 82689ea0c1.

* Update cmd/cli/kubectl-kyverno/commands/test/test.go

loading exceptions with policies

Co-authored-by: Mariam Fahmy <mariamfahmy66@gmail.com>
Signed-off-by: Sanskar Gurdasani <92817635+Sanskarzz@users.noreply.github.com>

* updated GetFullPaths function and remove unnecessary code

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* added tests for loading exceptions in GetPolicy function

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* added tests for loading policy exceptions

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* Used selector in List function

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* generated cli crd

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* updated loadpolicy_test tests and corrected kind

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* resolved unit test error in path_test.go file

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* limiting the usage of exceptions to ValidatingAdmissionPolicies

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* remove changes in common code

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* codegen

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
Signed-off-by: Sanskar Gurdasani <92817635+Sanskarzz@users.noreply.github.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Mariam Fahmy <mariamfahmy66@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-31 22:28:14 +00:00
..
_testdata feat: promote policy exceptions to v2 (#9208) 2023-12-19 10:43:39 +00:00
apis Support PolicyExceptions with CLI (#9525) 2024-01-31 22:28:14 +00:00
command
commands Support PolicyExceptions with CLI (#9525) 2024-01-31 22:28:14 +00:00
config/crds Support PolicyExceptions with CLI (#9525) 2024-01-31 22:28:14 +00:00
data Support PolicyExceptions with CLI (#9525) 2024-01-31 22:28:14 +00:00
deprecations feat: add deprecation warnings in the CLI (#9222) 2023-12-20 12:45:26 +00:00
exception Support PolicyExceptions with CLI (#9525) 2024-01-31 22:28:14 +00:00
experimental feat: enable kubectl-validate by default in cli (#9220) 2023-12-20 08:37:26 +00:00
fix fix: use go 1.21 new packages (#8452) 2023-09-19 12:06:53 +00:00
log chore: add cli unit tests (#8365) 2023-09-12 19:46:04 +00:00
output fix(cli): handle excluded resources as pass (#9274) 2023-12-28 07:16:55 +00:00
path refactor: move cli path utils package (#8379) 2023-09-13 15:10:12 +00:00
policy fix: Allow generate cli tests to work with server-side apply policies (#9385) 2024-01-29 11:15:13 +00:00
processor Support PolicyExceptions with CLI (#9525) 2024-01-31 22:28:14 +00:00
report feat: support validatingadmissionpolicybindings in CLI apply command (#9468) 2024-01-23 11:47:38 +00:00
resource refactor: move resource loader package to ext (#8780) 2023-10-30 17:27:02 +00:00
source
store refactor: make CLI store non static (#9200) 2023-12-19 22:45:53 +08:00
test chore: bump cosign to v2.2.1 (#8855) 2023-11-09 12:22:35 +00:00
userinfo feat: fix user infos used in tests (#8429) 2023-09-18 10:51:35 +00:00
utils/common feat: add cli api schemas (#8422) 2023-09-17 23:50:17 +03:00
values feat: add cli api schemas (#8422) 2023-09-17 23:50:17 +03:00
variables feat: add deprecation warnings in the CLI (#9222) 2023-12-20 12:45:26 +00:00
main.go refactor: cli commands tests and error handling (#8367) 2023-09-13 09:53:19 +00:00
README.md [DOC] fixed typo and broken links (#8954) 2023-11-19 13:49:10 +00:00

kubectl-kyverno

logo

This repository contains Kyverno CLI source code.

The CLI can be used as a standalone tool or as a kubectl plugin.

📙 Documentation

👉 Installation

👉 Installation

👉 Reference docs

🔧 GitHub Action

You can install the Kyverno CLI in your GitHub workflows easily using the kyverno-cli-installer GitHub action.

Check the documentation in the GitHub repository or GitHub marketplace.

🙋‍♂️ Help

Use kyverno --help to list supported commands and their corresponding flags:

To enable experimental commands, KYVERNO_EXPERIMENTAL should be configured with true or 1.

Usage:
  kyverno [command]

Available Commands:
  apply       Applies policies on resources.
  completion  Generate the autocompletion script for the specified shell
  create      Provides a command-line interface to help with the creation of various Kyverno resources.
  docs        Generates documentation.
  help        Help about any command
  jp          Provides a command-line interface to JMESPath, enhanced with Kyverno specific custom functions.
  test        Run tests from directory.
  version     Shows current version of kyverno.

Flags:
      --add_dir_header                   If true, adds the file directory to the header of the log messages
      --alsologtostderr                  log to standard error as well as files (no effect when -logtostderr=true)
  -h, --help                             help for kyverno
      --log_backtrace_at traceLocation   when logging hits line file:N, emit a stack trace (default :0)
      --log_dir string                   If non-empty, write log files in this directory (no effect when -logtostderr=true)
      --log_file string                  If non-empty, use this log file (no effect when -logtostderr=true)
      --log_file_max_size uint           Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
      --logtostderr                      log to standard error instead of files (default true)
      --one_output                       If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
      --skip_headers                     If true, avoid header prefixes in the log messages
      --skip_log_headers                 If true, avoid headers when opening log files (no effect when -logtostderr=true)
      --stderrthreshold severity         logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=false) (default 2)
  -v, --v Level                          number for the log level verbosity
      --vmodule moduleSpec               comma-separated list of pattern=N settings for file-filtered logging

To enable experimental commands, KYVERNO_EXPERIMENTAL should be configured with true or 1.

License

Copyright 2023, the Kyverno project. All rights reserved. Kyverno is licensed under the Apache License 2.0.

Kyverno is a Cloud Native Computing Foundation (CNCF) Incubating project and was contributed by Nirmata.