1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-09 17:37:12 +00:00
kyverno/samples/best_practices
Shivkumar Dudhani 3cf9141f4d
593 feature (#594)
* initial commit

* background policy validation

* correct message

* skip non-background policy process for add/update

* add Generate Request CR

* generate Request Generator Initial

* test generate request CR generation

* initial commit gr generator

* generate controller initial framework

* add crd for generate request

* gr cleanup controller initial commit

* cleanup controller initial

* generate mid-commit

* generate rule processing

* create PV on generate error

* embed resource type

* testing phase 1- generate resources with variable substitution

* fix tests

* comment broken test #586

* add printer column for state

* return if existing resource for clone

* set resync time to 2 mins & remove resource version check in update handler for gr

* generate events for reporting

* fix logs

* initial commit

* fix trailing quote in patch

* remove comments

* initial condition (equal & notequal)

* initial support for conditions

* initial support fo conditions in generate

* support precondition checks

* cleanup

* re-evaluate GR on namespace update using dynamic informers

* add status for generated resources

* display loaded variable SA

* support delete cleanup of generate request main resources

* fix log

* remove namespace from SA username

* support multiple variables per statement for scalar values

* fix fail variables

* add check for userInfo

* validation checks for conditions

* update policy

* refactor logs

* code review

* add openapispec for clusterpolicy preconditions

* Update documentation

* CR fixes

* documentation

* CR fixes

* update variable

* fix logs

* update policy

* pre-defined variables (serviceAccountName & serviceAccountNamespace)

* update test
2020-01-07 15:13:57 -08:00
..
add_network_policy.yaml 593 feature (#594) 2020-01-07 15:13:57 -08:00
add_ns_quota.yaml 593 feature (#594) 2020-01-07 15:13:57 -08:00
add_safe_to_evict.yaml update documentation 2019-12-10 09:51:15 -08:00
disallow_bind_mounts.yaml Merge commit '5b8ab3842b43a72cc675b93b8b72e290adfca1d2' into 518_pod_controller 2020-01-02 10:32:17 -08:00
disallow_default_namespace.yaml add missing key in sample meta 2019-11-13 20:06:43 -08:00
disallow_docker_sock_mount.yaml update policy 2019-11-15 21:16:11 -08:00
disallow_helm_tiller.yaml update tests 2019-12-10 10:26:04 -08:00
disallow_host_network_port.yaml update policy name 2019-11-13 23:31:04 -08:00
disallow_host_pid_ipc.yaml update api in samples/ 2019-11-13 13:56:20 -08:00
disallow_latest_tag.yaml update api in samples/ 2019-11-13 13:56:20 -08:00
disallow_new_capabilities.yaml update api in samples/ 2019-11-13 13:56:20 -08:00
disallow_privileged.yaml remove failure action 2019-12-30 13:55:02 -08:00
disallow_root_user.yaml add anchors for omitempty tag 2019-12-30 13:53:51 -08:00
disallow_sysctls.yaml update api in samples/ 2019-11-13 13:56:20 -08:00
require_pod_requests_limits.yaml update api in samples/ 2019-11-13 13:56:20 -08:00
require_probes.yaml update api in samples/ 2019-11-13 13:56:20 -08:00
require_ro_rootfs.yaml update api in samples/ 2019-11-13 13:56:20 -08:00