Commits · main · GitHub Mirror / kyverno / kyverno

01 Jul, 2022 2 commits

fix external.metrics.k8s.io/v1beta1 issue (#4139) · 12693e1a

Vyankatesh Kudtarkar authored Jul 01, 2022

* fix external.metrics.k8s.io/v1beta1 issue

* update find resource discovery method

* revert validate.go

* revert chnages

* update discovery method

* fix error handler issue

* add logger support

12693e1a

fix: add seccompProfile (#4178) · 606b2cb9
Joe Bowbeer authored Jun 30, 2022
```
Signed-off-by: Joe Bowbeer <joe.bowbeer@gmail.com>
```
606b2cb9

30 Jun, 2022 2 commits
- fix: add more verify images e2e test for bool fields (#4172) · 27e57729
  Charles-Edouard Brétéché authored Jun 30, 2022
```
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
```
  27e57729
- delete policy reports on policy deletion (#4174) · 808e6ae8
  Prateek Pandey authored Jun 30, 2022
```
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
```
  808e6ae8
29 Jun, 2022 1 commit
- chore: add myself into owners (#4170) · 89c74320
  Charles-Edouard Brétéché authored Jun 29, 2022
```
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
```
  89c74320
28 Jun, 2022 4 commits

feat: split policy report per policy bases (#4147) · 9226873e

Prateek Pandey authored Jun 28, 2022



* feat: split policy report per policy bases
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* add policy name as a handler key
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* update merge change request logic
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* handle the delete resource update on policy report
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* add splitPolicyReport feature gate
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* delete old reports if splitPolicyReport feature enable
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* use trim policyname as label and create name
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* fix change request result
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

9226873e

Clean up RCRs if the count exceeds the threshold (#4148) · 77fb10a4

shuting authored Jun 28, 2022



* Clean up RCRs if the count exceeds the limit
Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Sets reports to inactive on resourceExhausted error
Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Add a container flag changeRequestLimit
Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Skip generating RCRs if resourceExhausted error occurs
Signed-off-by: ShutingZhao <shuting@nirmata.com>

* set default RCR limit to 1000
Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Update log messages and CHANGELOG.md
Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Address review comments
Signed-off-by: ShutingZhao <shuting@nirmata.com>

* Extract mapper to a separate file
Signed-off-by: ShutingZhao <shuting@nirmata.com>

77fb10a4

Wait for informers' cache to be synced before starting controllers (#4155) · cd2d89bf
shuting authored Jun 28, 2022
```
Signed-off-by: ShutingZhao <shuting@nirmata.com>
```
cd2d89bf
- Disable events generation on DELETE; - Reduce event generation retry from 10 to 3 (#4159) · 47b12665
shuting authored Jun 28, 2022
```
Signed-off-by: ShutingZhao <shuting@nirmata.com>
```
47b12665

27 Jun, 2022 1 commit
- Use kyverno namespace informer to list pods while processing URs (#4156) · 1c329ea6
  shuting authored Jun 27, 2022
```
Signed-off-by: ShutingZhao <shuting@nirmata.com>
```
  1c329ea6
23 Jun, 2022 1 commit

Template updates (#4150) · fbde1fbc

Chip Zoller authored Jun 23, 2022



* add chipzoller to CODEOWNERS
Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update version drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add explanation section
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>

fbde1fbc

22 Jun, 2022 1 commit

release event memory (#4138) · b68f4ba6

Jim Bugwadia authored Jun 22, 2022


Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>

b68f4ba6

21 Jun, 2022 1 commit
- fix: use dev tag for init container local build target (#4142) · a14cab09
  Prateek Pandey authored Jun 21, 2022
```
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
```
  a14cab09
20 Jun, 2022 2 commits
- added resource lists for test cli (#4082) · 16f86209
  Tathagata Paul authored Jun 20, 2022
```
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
```
  16f86209
- update contributing guide (#4119) · f67f145d
  Jim Bugwadia authored Jun 19, 2022
```
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
```
  f67f145d
17 Jun, 2022 1 commit
- sync release versions (#4133) · 008b9ab4
  shuting authored Jun 17, 2022
```
Signed-off-by: ShutingZhao <shuting@nirmata.com>
```
  008b9ab4
16 Jun, 2022 3 commits

bump cosign to 1.9.1 to fix fulcio panic (#4117) · af3da5e1

Furkan Türkal authored Jun 16, 2022


Signed-off-by: Furkan <furkan.turkal@trendyol.com>
Co-authored-by: Batuhan <batuhan.apaydin@trendyol.com>
Co-authored-by: Batuhan <batuhan.apaydin@trendyol.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>

af3da5e1

fix: use policyName key to get the policy name (#4114) · 02b806de

Prateek Pandey authored Jun 16, 2022



In case of namespace policy `ur.spec.policy`
contains namespace/policy-name combinations, hence
can't be used to set the policy name label.
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>

02b806de

fix imageVerify validation checks and conversion logic (#4038) · bc1b051b

Jim Bugwadia authored Jun 15, 2022


Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>

bc1b051b

15 Jun, 2022 2 commits

fix: Stop incorrect any block condition logging (#4107) · 11942560

Andrew Bulford authored Jun 15, 2022



Previously the "no condition passed for 'any' block" would be logged for
all `any` blocks because the log line always occurs, even if conditions
are found.
Co-authored-by: Samuel Torres <samuel.torres@form3.tech>
Signed-off-by: Andrew Bulford <andrew.bulford@form3.tech>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>

11942560

set test.namespace value implict as resource namespace until and unless... · 051b0751

vivek kumar sahu authored Jun 15, 2022


set test.namespace value implict as resource namespace until and unless explict value is added (#4100)
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

051b0751

10 Jun, 2022 1 commit
- remove TUF initialization from main (#4098) · c3be6898
  Jim Bugwadia authored Jun 10, 2022
```
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
```
  c3be6898
09 Jun, 2022 3 commits
- Update CODEOWNERS to include treydock (#4097) · 7f4f6d14
  treydock authored Jun 09, 2022
```
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
```
  7f4f6d14
- feat: add e2e framework and verify image new test (#4094) · e1db7c98
  Charles-Edouard Brétéché authored Jun 09, 2022
```
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
```
  e1db7c98
- add chipzoller to CODEOWNERS (#4096) · 91ce9f9a
  Chip Zoller authored Jun 09, 2022
```
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
```
  91ce9f9a
07 Jun, 2022 4 commits

refactor: generate e2e GeneratePolicyDeletionforCloneTests (#4071) · e3c39f1d

Charles-Edouard Brétéché authored Jun 07, 2022



* refactor: generate e2e GeneratePolicyDeletionforCloneTests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix: unit test
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* chore: remove resourceExpectation type
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

e3c39f1d

Exclude Kyverno namespace by default (#4079) · 660e8f34

treydock authored Jun 07, 2022



* Exclude Kyverno namespace by default
Fixes #4075
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

660e8f34

docs(chart): fix deadlink in NOTES.txt (#4085) · a064a196
Batuhan Apaydın authored Jun 07, 2022
```
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
```
a064a196

Updated jp command flags and also added URL for help. (#4084) · 7e794033

vivek kumar sahu authored Jun 07, 2022



* Updated jp command flags and also added URL for help.
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

* Update cmd/cli/kubectl-kyverno/jp/jp_command.go
Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>

7e794033

06 Jun, 2022 1 commit
- update drop-downs (#4081) · d1f0671f
  Chip Zoller authored Jun 06, 2022
```
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
```
  d1f0671f
03 Jun, 2022 4 commits

refactor: generate e2e tests (#4068) · 0b7b2458

Charles-Edouard Brétéché authored Jun 03, 2022



* refactor: use t.Cleanup in e2e tests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* refactor: generate e2e tests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* helpers
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

0b7b2458

refactor: use t.Cleanup in e2e tests (#4067) · fe3c1262

Charles-Edouard Brétéché authored Jun 03, 2022


Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>

fe3c1262

Remove s390X (#4063) · fac19046
shuting authored Jun 03, 2022
```
Signed-off-by: ShutingZhao <shuting@nirmata.com>
```
fac19046

fix: add missing release notes in helm chart (#4057) · 24cdc59f

Charles-Edouard Brétéché authored Jun 03, 2022


Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>

24cdc59f

02 Jun, 2022 3 commits

fix: bool fields in image verification types (#4053) · 1786cb8b

Charles-Edouard Brétéché authored Jun 02, 2022



* refactor: add policy event listener in ur controller (#4012)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
(cherry picked from commit cd1fa030

)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix: bool fields in image verification types
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

1786cb8b

Print for failed test cases (#4048) · 70175ae5

Prateek Nandle authored Jun 02, 2022


Signed-off-by: Prateeknandle <prateeknandle@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>

70175ae5

Sync v1.7.0 release manifests (#4051) · d30778ea
shuting authored Jun 02, 2022
```
Signed-off-by: ShutingZhao <shuting@nirmata.com>
```
d30778ea

01 Jun, 2022 3 commits

refactor: bump KIND version to use v1.24.0 k8s release (#3877) · 0d440033
Prateek Pandey authored Jun 01, 2022
```
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
```
0d440033

feat: add aggregated cluster role support (#3845) · 9e9e119f

Charles-Edouard Brétéché authored Jun 01, 2022


Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>

9e9e119f

chore(dockerfile): use buildx features for cross-compilation (#4023) · e756ae52

Batuhan Apaydın authored Jun 01, 2022



* chore(dockerfile): use buildx features for cross-compilation
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

* feat(kyverno): main container image
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: shuting <shuting@nirmata.com>

e756ae52