1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-04-08 18:15:48 +00:00
Cloud Native Policy Management
Find a file
Ryan White c13aeca7fa
Modify capabilities for compatibility with Pod Security ()
Kyverno manifests are incompatible with the restricted Pod Security
Standards included with Kubernetes 1.22 and 1.23 because the Pod
Security admission controller looks for "ALL" in securityContext.capabilities.drop,
but does not accept "all".

1b741f89aa/policy/check_capabilities_restricted.go (L88)

Signed-off-by: Ryan White <ryan@alzabo.io>
2022-02-22 08:14:17 +00:00
.github Fix Helm releasing to preserve creation timestamps () 2022-02-21 15:50:42 +00:00
api Clean up commented out lines of code () 2022-02-19 09:40:11 +00:00
charts Modify capabilities for compatibility with Pod Security () 2022-02-22 08:14:17 +00:00
cmd Support registry keychain from cloud providers () 2022-01-26 07:28:36 +00:00
config Modify capabilities for compatibility with Pod Security () 2022-02-22 08:14:17 +00:00
data Restructure project to follow standards () 2021-10-29 18:13:20 +02:00
docs [docs]: sync api docs with latest api changes () 2021-12-09 14:44:29 +00:00
img upload logo () 2021-02-08 13:09:37 -08:00
litmuschaos Feature/cosign () 2021-07-09 18:01:46 -07:00
pkg Added kyverno test subcommand for test manifest file () 2022-02-21 05:23:29 +00:00
scripts Update dev image tag in Make targets () 2022-02-03 15:41:58 +08:00
test fix mutate wildcard issue () 2022-02-18 10:32:10 +00:00
.codeclimate.yml remove arm from goreleaser () 2020-06-04 11:45:37 -07:00
.directory Implemented validation across same yaml 2019-06-20 18:21:55 +03:00
.gitignore Add .DS_store to gitignore () 2022-02-18 11:38:04 +00:00
.golangci.yml codeclimate and golangci-lint added 2020-03-24 02:01:50 +05:30
.goreleaser.yml Add arm64 goarch to go releaser () 2022-01-15 15:39:52 -08:00
.krew.yaml Added Mac ARM64 build to Krew config () 2022-01-18 11:32:34 +00:00
ADOPTERS.md Updated the list of adopters () 2022-01-04 01:56:50 +00:00
CHANGELOG.md Updates Changelog to add note for anyPattern issue due to k8s v1.23 () 2022-01-26 03:36:22 +00:00
CODE_OF_CONDUCT.md Fix typos () 2021-12-18 20:03:16 +00:00
CODEOWNERS add prateekpandey14 to codeowners () 2022-02-10 20:43:21 +08:00
CONTRIBUTING.md Fix typos () 2021-12-18 20:03:16 +00:00
go.mod update dependencies () 2022-02-13 11:20:24 +00:00
go.sum update dependencies () 2022-02-13 11:20:24 +00:00
LICENSE Create LICENSE 2019-06-05 23:00:32 -04:00
MAINTAINERS.md Add sam () 2022-02-02 10:28:46 -08:00
Makefile Improve E2E test CI timings () 2022-02-17 17:47:35 -08:00
OWNERS.md add prateekpandey14 to codeowners () 2022-02-10 20:43:21 +08:00
README.md Add openssf badge () 2022-02-17 17:47:14 -08:00
SECURITY.md feat: security.md 2021-09-19 09:50:26 +05:30

Kyverno Tweet

Kubernetes Native Policy Management 🎉

build prereleaser Go Report Card License: Apache-2.0 GitHub Repo stars CII Best Practices

logo

Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.

📙 Documentation

Kyverno installation and reference documents are available at kyverno.io.

👉 Quick Start

👉 Installation

👉 Sample Policies

🙋‍♂️ Getting Help

We are here to help!

👉 For feature requests and bugs, file an issue.

👉 For discussions or questions, join the Kyverno Slack channel.

👉 For community meeting access, join the mailing list.

👉 To get updates star this repository.

Contributing

Thanks for your interest in contributing to Kyverno! Here are some steps to help get you started:

✔ Read and agree to the Contribution Guidelines.

✔ Browse through the GitHub discussions.

✔ Read Kyverno design and development details on the GitHub Wiki.

✔ Check out the good first issues list. Add a comment with /assign to request assignment of the issue.

✔ Check out the Kyverno Community page for other ways to get involved.

Contributors

Kyverno is built and maintained by our growing community of contributors!

Made with contributors-img.