1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
kyverno/pkg
Khaled Emara fb40aa5f38
feat(audit): use a worker pool for Audit policies (#10048)
* enhancement: split validation logic for enforce and audit policies to return admission response earlier

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: add missing file

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: unit tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: linter issues

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: unit tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: get latest policy object before updating status

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: remove debug code

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: compare before updates

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: initial reconcile

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: updates

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* feat(audit): use a worker pool for Audit policies

Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>

* fix: unit test

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix(attempt): spin up go routine

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* feat: add flags maxAuditWorkers, maxAuditCapacity

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: enable debug log on failure

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: wait group panic

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* load-tests: add stess tests configurations

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* load-tests: disable admissionreports

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: build policy contexts syncronously

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: only run generate and mutate existing go routines when policies are present

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: mutate and verify tests

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: return early if no audit policy

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: run handlegenerate and mutate existing in all cases

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: only test bgapplies in generate test

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: defer wait in tests

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* enhancement: process validate enforce in a go routine

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2024-04-17 15:46:18 +08:00
..
auth feat: support authorizer variable in CEL expressions (#8024) 2023-09-05 10:16:50 +00:00
autogen fix(autogen): only generate rule for request kind (#9984) 2024-04-04 08:09:30 +00:00
background fix(autogen): only generate rule for request kind (#9984) 2024-04-04 08:09:30 +00:00
client feat: add TSA cert chain support in cosign (#9961) 2024-03-30 20:50:07 +00:00
clients feat: add global context crd (#9591) 2024-02-01 10:58:31 +00:00
config feat: add global context entry validation webhook (#9619) 2024-02-02 18:04:50 +01:00
controllers fix: policy status reconciliation (#10032) 2024-04-12 07:08:15 +00:00
cosign feat: add TSA cert chain support in cosign (#9961) 2024-03-30 20:50:07 +00:00
engine fix: policy status reconciliation (#10032) 2024-04-12 07:08:15 +00:00
event fix: re-use the maxQueuedEvents (#10024) 2024-04-10 15:41:22 +08:00
exceptions refactor: exception selector interface (#9907) 2024-03-28 08:03:01 +00:00
globalcontext fix(globalcontext): panics and validation (#9903) 2024-03-14 16:12:39 +00:00
images feat: add TSA cert chain support in cosign (#9961) 2024-03-30 20:50:07 +00:00
imageverifycache feat: update descriptions of image verify cache flags (#8770) 2023-11-02 16:10:17 +00:00
informers fix: factorise confimap informer code (#7667) 2023-06-28 04:43:16 +00:00
leaderelection Remove dependency on github.com/pkg/errors (#6165) 2023-02-01 14:38:04 +08:00
logging fix(globalcontext): panics and validation (#9903) 2024-03-14 16:12:39 +00:00
metrics chore: bump otel deps (#9442) 2024-01-19 09:36:28 +00:00
notary Reduce deps (#8654) 2023-11-09 13:04:24 +00:00
policy fix(autogen): only generate rule for request kind (#9984) 2024-04-04 08:09:30 +00:00
policycache fix(autogen): only generate rule for request kind (#9984) 2024-04-04 08:09:30 +00:00
profiling refactor: introduce cmd internal package (#5404) 2022-11-18 22:21:15 +08:00
pss add control names and images to PSS results (#9869) 2024-03-11 09:32:05 +00:00
registryclient fix: use gcr crane opts while fetching image descriptors (#9838) 2024-03-04 08:14:00 +00:00
tls chore: set cert renewal time to 15 days before expiration (#8567) 2023-12-06 13:37:01 +00:00
toggle fix: display a message when the controller has no permissions for VAPs (#8776) 2023-11-01 21:52:03 +08:00
tracing chore: bump otel deps (#9442) 2024-01-19 09:36:28 +00:00
userinfo refactor: reduce userinfos deps and add unit tests (#6524) 2023-03-10 09:09:19 +00:00
utils fix: policy status reconciliation (#10032) 2024-04-12 07:08:15 +00:00
validatingadmissionpolicy feat: apply VAP bindings in CLI apply command in offline mode (#9751) 2024-02-21 07:52:25 +00:00
validation fix(autogen): only generate rule for request kind (#9984) 2024-04-04 08:09:30 +00:00
version fix: use golang builtin version management (#7654) 2023-06-30 23:27:06 +00:00
webhooks feat(audit): use a worker pool for Audit policies (#10048) 2024-04-17 15:46:18 +08:00