1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Cloud Native Policy Management
Find a file
Mariam Fahmy ea748276bb
feat: migrate existing policy exceptions to the new storage version in helm hook (#9412)
* feat: migrate existing policy exceptions to the new storage version in helm

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* fix: add permissions for the admission controller to patch exceptions

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* fix

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* fix codegen

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* move migration hook to a separate directory

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* use cli

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix: update admission controller permissions

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-21 20:13:56 +00:00
.devcontainer feat: add arm64 support in devcontainers (#8675) 2023-10-19 07:47:31 +00:00
.github bump versions; remove ancient (#9458) 2024-01-20 05:45:58 +05:30
.vscode fix launch.json (#9239) 2023-12-21 10:53:16 +00:00
api feat: skip generating VAP when an exception is defined (#9386) 2024-01-18 15:55:27 +00:00
charts feat: migrate existing policy exceptions to the new storage version in helm hook (#9412) 2024-01-21 20:13:56 +00:00
cmd fix: change generic policy to not return any (#9463) 2024-01-20 19:20:22 +02:00
config feat: migrate existing policy exceptions to the new storage version in helm hook (#9412) 2024-01-21 20:13:56 +00:00
data feat: update built-in resource schemas (#7014) 2023-04-27 05:11:31 +00:00
docs feat: add resource migration command (#9296) 2024-01-19 11:47:28 +00:00
ext refactor: move resource loader package to ext (#8780) 2023-10-30 17:27:02 +00:00
hack feat: improve instrumented clients (#7006) 2023-04-25 15:31:09 +00:00
img
litmuschaos [Chore] Bump to Go 1.20 (#6683) 2023-04-03 11:40:47 +00:00
pkg fix: change generic policy to not return any (#9463) 2024-01-20 19:20:22 +02:00
scripts fix: make tuf feature in chart consistent with others (#8542) 2023-09-27 13:03:17 +00:00
test fix PSA chainsaw tests (#9389) 2024-01-18 23:23:52 +00:00
.codeclimate.yml
.directory
.gitignore Unit tests for Pod Security Admission Integrations (#8585) 2023-12-26 22:28:08 +08:00
.golangci.yml chore: increase linter timeout (#7767) 2023-07-06 13:39:52 +00:00
.goreleaser.yml fix: release archive name template (#8475) 2023-09-20 22:35:49 +00:00
.ko.yaml feat: template background controller (#6157) 2023-01-31 17:12:34 +01:00
.krew.yaml
.nancy-ignore fix: nancy ignore list (#9428) 2024-01-17 22:25:57 +00:00
ADOPTERS.md add Censhare to ADOPTERS.md (#9311) 2023-12-30 20:39:02 +00:00
CHANGELOG.md chore: enable policy exceptions by default (#8545) 2023-09-27 17:40:13 +00:00
CODE_OF_CONDUCT.md
CODEOWNERS Adding myself to CODEOWNERS (#7755) 2023-07-05 15:29:57 +02:00
CONTRIBUTING.md Update CONTRIBUTING.md (#8656) 2023-10-15 15:10:16 -04:00
CONTRIBUTORS.md added Amit as a contributor (#9461) 2024-01-20 19:48:13 +00:00
DEVELOPMENT.md Update DEVELOPMENT.md (#9464) 2024-01-21 09:57:20 +00:00
go.mod chore(deps): bump k8s.io/klog/v2 from 2.120.0 to 2.120.1 (#9446) 2024-01-19 10:13:07 +00:00
go.sum chore(deps): bump k8s.io/klog/v2 from 2.120.0 to 2.120.1 (#9446) 2024-01-19 10:13:07 +00:00
GOVERNANCE.md governance added (#6488) 2023-03-10 10:52:50 +00:00
LICENSE
MAINTAINERS.md chore: add myself to the maintainers list (#9130) 2023-12-11 09:09:53 -08:00
Makefile feat: migrate existing policy exceptions to the new storage version in helm hook (#9412) 2024-01-21 20:13:56 +00:00
OWNERS.md
README.md update README for new features and OSS security index card (#9467) 2024-01-21 09:24:56 +00:00
renovate.json
ROADMAP.md Add Roadmap.md and link to active releases / roadap (#6564) 2023-03-14 10:21:17 +00:00
SECURITY-INSIGHTS.yml [Feature] Security Improvements based on CLOMonitor Checks (#9395) 2024-01-19 10:50:17 +00:00
SECURITY.md
sonar-project.properties

Kyverno Tweet

Cloud Native Policy Management 🎉

build releaser Go Report Card License: Apache-2.0 GitHub Repo stars CII Best Practices OpenSSF Scorecard codecov Artifact HUB FOSSA Status

logo

Kyverno is a policy engine designed for Kubernetes platform engineering teams. It enables security, automation, compliance, and governance using policy-as-code. Kyverno can validate, mutate, generate, and cleanup configurations using Kubernetes admission controls, background scans, and source code respository scans. Kyverno policies can be managed as Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.

Open Source Security Index - Fastest Growing Open Source Security Projects

📙 Documentation

Kyverno installation and reference documents are available at kyverno.io.

👉 Quick Start

👉 Installation

👉 Sample Policies

🙋‍♂️ Getting Help

We are here to help!

👉 For feature requests and bugs, file an issue.

👉 For discussions or questions, join the Kyverno Slack channel.

👉 For community meeting access, join the mailing list.

👉 To get updates star this repository.

Contributing

Thanks for your interest in contributing to Kyverno! Here are some steps to help get you started:

✔ Read and agree to the Contribution Guidelines.

✔ Browse through the GitHub discussions.

✔ Read Kyverno design and development details on the GitHub Wiki.

✔ Check out the good first issues list. Add a comment with /assign to request assignment of the issue.

✔ Check out the Kyverno Community page for other ways to get involved.

Software Bill of Materials

All Kyverno images include a Software Bill of Materials (SBOM) in CycloneDX JSON format. SBOMs for Kyverno images are stored in a separate repository at ghcr.io/kyverno/sbom. More information on this is available at Fetching the SBOM for Kyverno.

Contributors

Kyverno is built and maintained by our growing community of contributors!

Made with contributors-img.

License

Copyright 2023, the Kyverno project. All rights reserved. Kyverno is licensed under the Apache License 2.0.

Kyverno is a Cloud Native Computing Foundation (CNCF) Incubating project and was contributed by Nirmata.