1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
kyverno/pkg/policy
shuting 6249ab70e8
fix: block generate policies when lack of permission to operate downstream resources (#6610)
* debug

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* return on errors only

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update clusterrolebinding

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update clusterrolebinding

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove debug

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix ns

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-22 13:14:57 +00:00
..
common Replaces manually written logic with regex for matching anchor elements (#6133) 2023-01-30 12:17:19 +00:00
generate fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
mutate fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
validate fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
actions.go fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
allowed_vars_test.go #6055 Add JMESPath support to imageExtractors (#6183) 2023-02-08 11:54:59 +00:00
background.go Nested foreach (#5589) 2022-12-12 15:20:20 +00:00
background_test.go refactor: simplify variables regex (#5075) 2022-10-21 11:51:14 +08:00
generate.go fix: apply generate existing when a new rule is added (#6472) 2023-03-06 15:40:49 +00:00
mutate.go fix: delete downstream for a generate rule removal, with data and sync (#6393) 2023-03-01 03:48:18 +00:00
on_update_policy_test.go refactor: simplify variables regex (#5075) 2022-10-21 11:51:14 +08:00
policy_controller.go rename GenerateExistingOnPolicyUpdate to GenerateExisting (#6321) 2023-03-03 09:34:55 +00:00
updaterequest.go fix: delete downstream for a generate rule removal, with data and sync (#6393) 2023-03-01 03:48:18 +00:00
utils.go fix: background scan events (#5807) 2023-01-04 13:15:30 +08:00
utils_test.go tests: add unit tests for utils functions (#3857) 2022-05-10 13:45:48 +00:00
validate.go fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
validate_test.go feat: validate immutable fields for a generate rule - 2 (#6451) 2023-03-10 14:39:44 +00:00