1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
kyverno/pkg/engine
shuting ef06833613
feat: support attestations with multiple signatures (#5409)
* add new attribute ".verifyImages.attestations.attestors"

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Update CRDs

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* support multiple subjects for attestations

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* - fix entries check; - refactors code

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix linter

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* - allow both attestors and attestations; - make attestations.attestor optional

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix panic

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove the invalid test

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix empty attestor

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add cleanup steps

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Update api/kyverno/v1/image_verification_types.go

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* update codegen

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-12-01 22:09:44 +00:00
..
anchor add package logger in files (#4766) 2022-10-02 19:45:03 +00:00
common add package logger in files (#4766) 2022-10-02 19:45:03 +00:00
context fix: set operation in context when necessary (#4940) 2022-10-13 19:33:49 +05:30
jmespath Fix: Typo in x509_decode JMESPath function's note (#4773) 2022-10-03 08:26:19 +00:00
jsonutils chore: use builtin slices.Clone (#5510) 2022-11-30 10:38:03 +00:00
mutate fix: fix mutating the "/metadata/serverAddress" section of a keda.s/v1alpha1/ScaledObject object (#5374) 2022-11-28 09:55:42 +00:00
operator chore: enable gofmt and gofumpt linters (#3931) 2022-05-17 06:19:03 +00:00
resources Yaml signing and verification (#4235) 2022-08-30 10:14:54 -07:00
response fix: account for error rules in mutation webhook (#5264) 2022-11-08 12:36:13 +01:00
utils fix: add parsing of json pointers to support special chars (#3578 #3616) (#4767) 2022-11-10 16:03:45 +00:00
validate fix: make reponse order predictable (#5079) 2022-10-20 17:06:46 +05:30
variables fix: add parsing of json pointers to support special chars (#3578 #3616) (#4767) 2022-11-10 16:03:45 +00:00
wildcards chore: add unit tests for pkg/utils/wildcard (#4510) 2022-09-06 08:02:41 +00:00
attestation_test.go add package logger in files (#4766) 2022-10-02 19:45:03 +00:00
background.go fix: set rule response status as skip if precondition failed (#5162) 2022-11-10 15:10:29 +00:00
forceMutate.go add package logger in files (#4766) 2022-10-02 19:45:03 +00:00
forceMutate_test.go refactor: engine context (#3563) 2022-04-09 11:52:50 +00:00
generation.go add package logger in files (#4766) 2022-10-02 19:45:03 +00:00
imageVerify.go feat: support attestations with multiple signatures (#5409) 2022-12-01 22:09:44 +00:00
imageVerify_test.go feat: support attestations with multiple signatures (#5409) 2022-12-01 22:09:44 +00:00
imageVerifyMetadata.go chore: enable gofmt and gofumpt linters (#3931) 2022-05-17 06:19:03 +00:00
imageVerifyValidate.go Fixed issue-3709: Image verify rule gives error for non-existing configmap (#5272) 2022-11-18 08:27:34 +00:00
jsonContext.go feat: propagate context to dynamic client (#5495) 2022-11-29 13:59:40 +00:00
k8smanifest.go feat: propagate context to dynamic client (#5495) 2022-11-29 13:59:40 +00:00
k8smanifest_test.go Yaml signing and verification (#4235) 2022-08-30 10:14:54 -07:00
loadtargets.go feat: propagate context to dynamic client (#5495) 2022-11-29 13:59:40 +00:00
loadtargets_test.go Load mutate.targets via dclient (#3797) 2022-05-06 05:46:36 +00:00
mutation.go [BUG] Fix foreach deletion issue (#5224) 2022-11-04 09:35:25 +00:00
mutation_test.go feat: propagate context to dynamic client (#5495) 2022-11-29 13:59:40 +00:00
policyContext.go Add the metric "kyverno_client_queries_total" (#4359) 2022-08-31 11:33:47 +05:30
utils.go chore: replace utils.ContainsString with builtin slices.Contains (#5496) 2022-11-29 08:04:49 +00:00
utils_test.go fix: consider generateName when matching resources (#4945) 2022-10-13 16:02:01 +00:00
validation.go Fix: handled skip rule processing in anyPattern field (#5191) 2022-11-28 08:01:51 -05:00
validation_test.go Fix: handled skip rule processing in anyPattern field (#5191) 2022-11-28 08:01:51 -05:00