1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Cloud Native Policy Management
Find a file
Vishal Choudhary c630f17ec4
fix: block mutation only when failurePolicy is set to fail (#8952)
* fix: only block mutation when failurePolicy is set
to fail

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* feat: kuttl test

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: add else check

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: update defaulting ns label policy's failure policy to be fail

based on readme, this test has nothing to do with failurePolicy and resource should not be blocked in case of ignore failurePolicy

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: there is another

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: update policy

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* nit

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* feat: add logs

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* Update pkg/webhooks/resource/mutation/mutation.go

Signed-off-by: shuting <shuting@nirmata.com>

---------

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Signed-off-by: shuting <shuting@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: shuting <shutting06@gmail.com>
2023-11-22 17:01:46 +00:00
.devcontainer feat: add arm64 support in devcontainers (#8675) 2023-10-19 07:47:31 +00:00
.github chore: run events test suite using chainsaw (#8951) 2023-11-22 16:58:32 +01:00
.vscode chore: fix vscode launch.json for cli (#8209) 2023-09-01 11:02:48 +00:00
api fix: generate policy fails if triggered resource name exceeds 63 characters limit (#8466) 2023-11-06 10:37:13 +00:00
charts Allow defining ca-certificates bundle for Kyverno deployments (#8969) 2023-11-21 15:47:32 +00:00
cmd fix: remove the additional dash in kyverno create exception (#8983) 2023-11-22 13:37:26 +00:00
config Make server ports configurable, resolves #7279 (#7728) 2023-11-17 14:19:53 +00:00
data feat: update built-in resource schemas (#7014) 2023-04-27 05:11:31 +00:00
docs chore: bump k8s package to 1.29 (#8929) 2023-11-17 15:42:47 +08:00
ext refactor: move resource loader package to ext (#8780) 2023-10-30 17:27:02 +00:00
hack feat: improve instrumented clients (#7006) 2023-04-25 15:31:09 +00:00
img upload logo (#1560) 2021-02-08 13:09:37 -08:00
litmuschaos [Chore] Bump to Go 1.20 (#6683) 2023-04-03 11:40:47 +00:00
pkg fix: block mutation only when failurePolicy is set to fail (#8952) 2023-11-22 17:01:46 +00:00
scripts fix: make tuf feature in chart consistent with others (#8542) 2023-09-27 13:03:17 +00:00
test fix: block mutation only when failurePolicy is set to fail (#8952) 2023-11-22 17:01:46 +00:00
.codeclimate.yml remove arm from goreleaser (#903) 2020-06-04 11:45:37 -07:00
.directory Implemented validation across same yaml 2019-06-20 18:21:55 +03:00
.gitignore fix: makefile build/kind targets and add target to save built images to files (#6416) 2023-02-28 09:33:53 +00:00
.golangci.yml chore: increase linter timeout (#7767) 2023-07-06 13:39:52 +00:00
.goreleaser.yml fix: release archive name template (#8475) 2023-09-20 22:35:49 +00:00
.ko.yaml feat: template background controller (#6157) 2023-01-31 17:12:34 +01:00
.krew.yaml Remove s390X (#4063) 2022-06-03 08:11:12 +00:00
.nancy-ignore fix: nancy ignore list (#8949) 2023-11-18 21:43:03 +00:00
ADOPTERS.md Remove duplicate entries (#8909) 2023-11-15 15:01:06 +00:00
CHANGELOG.md chore: enable policy exceptions by default (#8545) 2023-09-27 17:40:13 +00:00
CODE_OF_CONDUCT.md Fix typos (#2860) 2021-12-18 20:03:16 +00:00
CODEOWNERS Adding myself to CODEOWNERS (#7755) 2023-07-05 15:29:57 +02:00
CONTRIBUTING.md Update CONTRIBUTING.md (#8656) 2023-10-15 15:10:16 -04:00
CONTRIBUTORS.md Adding myself to contributors.md (#7373) 2023-05-31 17:06:37 -07:00
DEVELOPMENT.md adding env to doc (#7813) 2023-07-21 06:46:14 +00:00
go.mod chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 (#8977) 2023-11-22 14:21:41 +00:00
go.sum chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 (#8977) 2023-11-22 14:21:41 +00:00
GOVERNANCE.md governance added (#6488) 2023-03-10 10:52:50 +00:00
LICENSE Create LICENSE 2019-06-05 23:00:32 -04:00
MAINTAINERS.md update (#8041) 2023-08-16 18:00:11 +00:00
Makefile [Helm] AdmissionReport cleanup job tag bump (#8708) 2023-10-23 17:13:07 +08:00
OWNERS.md chore: add myself in approvers (#4990) 2022-10-15 23:55:00 +00:00
README.md bump versions, license (#6714) 2023-03-28 22:17:06 +00:00
renovate.json chore(deps): add renovate.json (#3471) 2022-03-29 16:09:23 +08:00
ROADMAP.md Add Roadmap.md and link to active releases / roadap (#6564) 2023-03-14 10:21:17 +00:00
SECURITY.md feat: security.md 2021-09-19 09:50:26 +05:30
sonar-project.properties Integrate Sonarcloud and Nancy github action (#3491) 2022-09-14 07:25:14 +00:00

Kyverno Tweet

Kubernetes Native Policy Management 🎉

build releaser Go Report Card License: Apache-2.0 GitHub Repo stars CII Best Practices OpenSSF Scorecard codecov Artifact HUB FOSSA Status

logo

Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.

📙 Documentation

Kyverno installation and reference documents are available at kyverno.io.

👉 Quick Start

👉 Installation

👉 Sample Policies

🙋‍♂️ Getting Help

We are here to help!

👉 For feature requests and bugs, file an issue.

👉 For discussions or questions, join the Kyverno Slack channel.

👉 For community meeting access, join the mailing list.

👉 To get updates star this repository.

Contributing

Thanks for your interest in contributing to Kyverno! Here are some steps to help get you started:

✔ Read and agree to the Contribution Guidelines.

✔ Browse through the GitHub discussions.

✔ Read Kyverno design and development details on the GitHub Wiki.

✔ Check out the good first issues list. Add a comment with /assign to request assignment of the issue.

✔ Check out the Kyverno Community page for other ways to get involved.

Software Bill of Materials

All Kyverno images include a Software Bill of Materials (SBOM) in CycloneDX JSON format. SBOMs for Kyverno images are stored in a separate repository at ghcr.io/kyverno/sbom. More information on this is available at Fetching the SBOM for Kyverno.

Contributors

Kyverno is built and maintained by our growing community of contributors!

Made with contributors-img.

License

Copyright 2023, the Kyverno project. All rights reserved. Kyverno is licensed under the Apache License 2.0.

Kyverno is a Cloud Native Computing Foundation (CNCF) Incubating project and was contributed by Nirmata.