Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: disable automatic generation of webhooks #117

Merged
merged 41 commits into from
May 27, 2024
Merged

feat: disable automatic generation of webhooks #117

merged 41 commits into from
May 27, 2024

Commits on May 24, 2024

  1. feat: disable automatic generation of webhooks 

    Signed-off-by: Anushka Mittal <[email protected]>
    @anushkamittal2001
    anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    640f9d2 View commit details
    Browse the repository at this point in the history

  2. fix: use nirmata/policies 

    Signed-off-by: Anushka Mittal <[email protected]>
    @anushkamittal2001
    anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    3fc06b9 View commit details
    Browse the repository at this point in the history

  3. fix: sort pod controllers for autogen rule (kyverno#10140) (kyverno#1… 

    …0142)

Signed-off-by: ShutingZhao <[email protected]>
Co-authored-by: shuting <[email protected]>
    @gcp-cherry-pick-bot @realshuting @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    bebae2f View commit details
    Browse the repository at this point in the history

  4. fix: fetch only adopted ephemeral report (kyverno#10148) (kyverno#10150) 

    Signed-off-by: Vishal Choudhary <[email protected]>
Co-authored-by: Vishal Choudhary <[email protected]>
    @gcp-cherry-pick-bot @vishal-chdhry @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    26d7454 View commit details
    Browse the repository at this point in the history

  5. fix: shared policy context needs to be copied (kyverno#10139) (kyvern… 

    …o#10147)

* fix: shared policy context needs to be copied



* test(e2e): concurrent PSS execution



* test(e2e): wait for pss policies to be ready



---------

Signed-off-by: Khaled Emara <[email protected]>
Co-authored-by: Khaled Emara <[email protected]>
Co-authored-by: shuting <[email protected]>
    @gcp-cherry-pick-bot @KhaledEmaraDev
    @realshuting @anushkamittal2001
    3 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    1bce172 View commit details
    Browse the repository at this point in the history

  6. fix: skip rules without operation in resource webhook creation (kyver… 

    …no#10146) (kyverno#10151)

* fix: skip rules without operation in resource webhook creation



* test: add unit test for buildRulesWithOperations



* fix liniting issues



---------

Signed-off-by: Norwin Schnyder <[email protected]>
Co-authored-by: Norwin Schnyder <[email protected]>
Co-authored-by: shuting <[email protected]>
    @gcp-cherry-pick-bot @snorwin
    @realshuting @anushkamittal2001
    3 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    bbc16ff View commit details
    Browse the repository at this point in the history

  7. fix: add error check in jmespath type conversion in context variables (… 

    …kyverno#10152) (kyverno#10153)
    @gcp-cherry-pick-bot @anushkamittal2001
    gcp-cherry-pick-bot[bot] authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    64f82ae View commit details
    Browse the repository at this point in the history

  8. Release v1.12.1-rc.1 (kyverno#10154) 

    * chore: release v1.12.1-rc.1; bump controller-gen

Signed-off-by: ShutingZhao <[email protected]>

* fix: update code-gen docs

Signed-off-by: ShutingZhao <[email protected]>

---------

Signed-off-by: ShutingZhao <[email protected]>
    @realshuting @anushkamittal2001
    realshuting authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    ec7300c View commit details
    Browse the repository at this point in the history

  9. Ensure CA certificate ConfigMaps get defined (kyverno#10156) (kyverno… 

    …#10161)

Fixes kyverno#10141

Signed-off-by: Trey Dockendorf <[email protected]>
Co-authored-by: treydock <[email protected]>
    @gcp-cherry-pick-bot @treydock @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    52acd03 View commit details
    Browse the repository at this point in the history

  10. feat: release-1.12.1 (kyverno#10166) 

    Signed-off-by: ShutingZhao <[email protected]>
    @realshuting @anushkamittal2001
    realshuting authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    caf621c View commit details
    Browse the repository at this point in the history

  11. fix: add pods/ephemeralcontainers to the generated VAPs (kyverno#10162)… 

    … (kyverno#10176)

* fix: add pods/ephemeralcontainers to the generated VAPs



* fix: remove an extra space



---------

Signed-off-by: Mariam Fahmy <[email protected]>
Co-authored-by: Mariam Fahmy <[email protected]>
    @gcp-cherry-pick-bot @MariamFahmy98 @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    f698b8e View commit details
    Browse the repository at this point in the history

  12. fix: add CONNECT operation in the webhook config for pod/exec subreso… 

    …urce (kyverno#9855) (kyverno#10179)

Signed-off-by: Mariam Fahmy <[email protected]>
Co-authored-by: Mariam Fahmy <[email protected]>
    @gcp-cherry-pick-bot @MariamFahmy98 @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    0996b09 View commit details
    Browse the repository at this point in the history

  13. fix: skip generating VAPs for policies that match multiple resources … 

    …with a namespace/object selector (kyverno#10181) (kyverno#10184)

Signed-off-by: Mariam Fahmy <[email protected]>
Co-authored-by: Mariam Fahmy <[email protected]>
    @gcp-cherry-pick-bot @MariamFahmy98 @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    40891b7 View commit details
    Browse the repository at this point in the history

  14. fix(polex): multiple polexes with conditions (kyverno#9994) (kyverno#… 

    …10183)

Signed-off-by: Khaled Emara <[email protected]>
Co-authored-by: Khaled Emara <[email protected]>
Co-authored-by: Mariam Fahmy <[email protected]>
    @gcp-cherry-pick-bot @KhaledEmaraDev
    @MariamFahmy98 @anushkamittal2001
    3 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    29ab9dc View commit details
    Browse the repository at this point in the history

  15. [kyverno helm chart] make webhook pod annotations configurable (kyver… 

    …no#9875) (kyverno#10185)

* make webhook pod annotations configurable



* run make codegen-helm-all



---------

Signed-off-by: André Bauer <[email protected]>
Signed-off-by: ShutingZhao <[email protected]>
Co-authored-by: André Bauer <[email protected]>
    @realshuting @monotek @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    8a67f7c View commit details
    Browse the repository at this point in the history

  16. feat: release chart 3.2.2 (kyverno#10193) 

    Signed-off-by: ShutingZhao <[email protected]>
    @realshuting @anushkamittal2001
    realshuting authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    e6b4973 View commit details
    Browse the repository at this point in the history

  17. feat: make cli results count public (kyverno#10177) (kyverno#10194) 

    Signed-off-by: Charles-Edouard Brétéché <[email protected]>
Co-authored-by: Charles-Edouard Brétéché <[email protected]>
    @gcp-cherry-pick-bot @eddycharly @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    a7da17e View commit details
    Browse the repository at this point in the history

  18. allow kyverno apply command to continue on failure (kyverno#10036) (k… 

    …yverno#10178)

* allow kyverno apply to continue on failure



* allow kyverno apply to continue on failure



---------

Signed-off-by: lanting.chiang <[email protected]>
Co-authored-by: Lanting Chiang <[email protected]>
Co-authored-by: shuting <[email protected]>
    @gcp-cherry-pick-bot @lantingchiang
    @realshuting @anushkamittal2001
    3 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    d3d1620 View commit details
    Browse the repository at this point in the history

  19. kyverno-1.12 CVE fix (kyverno#10225) 

    Signed-off-by: Ved Ratan <[email protected]>
    @VedRatan @anushkamittal2001
    VedRatan authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    fc03e6f View commit details
    Browse the repository at this point in the history

  20. [Bug] [CLI] Level parameter of the apply and test commands does not w… 

    …ork (kyverno#10216) (kyverno#10240)

* added verbosity level



* added else statement to handle the error



* fix: verbosity in cli



---------

Signed-off-by: Suruchi Kumari <[email protected]>
Signed-off-by: GitHub <[email protected]>
Signed-off-by: anushkamittal20 <[email protected]>
Co-authored-by: Anushka Mittal <[email protected]>
Co-authored-by: Suruchi Kumari <[email protected]>
Co-authored-by: shuting <[email protected]>
Co-authored-by: anushkamittal20 <[email protected]>
    @gcp-cherry-pick-bot @anushkamittal2001
    @coder12git @realshuting @anushkamittal20
    5 people committed May 24, 2024
    Configuration menu
    Copy the full SHA
    4d86378 View commit details
    Browse the repository at this point in the history

  21. fix: isolate reports creation context (kyverno#10245) (kyverno#10246) 

    Signed-off-by: ShutingZhao <[email protected]>
Co-authored-by: shuting <[email protected]>
    @gcp-cherry-pick-bot @realshuting @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    c7b5c95 View commit details
    Browse the repository at this point in the history

  22. fix: deepcopy patched resource in foreach mutate (kyverno#10252) (kyv… 

    …erno#10258)

* fix: deepcopy patched resource to avoid indirect reversal of its elements



* fix: copy elements while reversing



* fix: copy resources inside foreach



* add test



* add test



---------

Signed-off-by: Vishal Choudhary <[email protected]>
Signed-off-by: Jim Bugwadia <[email protected]>
Co-authored-by: Vishal Choudhary <[email protected]>
Co-authored-by: Jim Bugwadia <[email protected]>
    @gcp-cherry-pick-bot @vishal-chdhry
    @JimBugwadia @anushkamittal2001
    3 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    ae989cb View commit details
    Browse the repository at this point in the history

  23. truncate event messages to 1024 chars (kyverno#10255) (kyverno#10261) 

    Co-authored-by: Jim Bugwadia <[email protected]>
    @gcp-cherry-pick-bot @JimBugwadia @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    5a9029a View commit details
    Browse the repository at this point in the history

  24. chore: cherry-pick kyverno#10250 (kyverno#10264) 

    Signed-off-by: ShutingZhao <[email protected]>
    @realshuting @anushkamittal2001
    realshuting authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    879005b View commit details
    Browse the repository at this point in the history

  25. fix: add resourceNames field in the generated VAPs (kyverno#10187) (k… 

    …yverno#10265)

Signed-off-by: Mariam Fahmy <[email protected]>
Co-authored-by: Mariam Fahmy <[email protected]>
    @gcp-cherry-pick-bot @MariamFahmy98 @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    381be15 View commit details
    Browse the repository at this point in the history

  26. fix: process the matched resources only for mutate existing policies (k… 

    …yverno#10164) (kyverno#10267)

* fix: process the matched resources only for mutate existing policies



* fix lint issue



* chore: add unit tests



---------

Signed-off-by: Mariam Fahmy <[email protected]>
Co-authored-by: Mariam Fahmy <[email protected]>
Co-authored-by: shuting <[email protected]>
    @gcp-cherry-pick-bot @MariamFahmy98
    @realshuting @anushkamittal2001
    3 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    8bb03c9 View commit details
    Browse the repository at this point in the history

  27. fix flake test in VAPs (kyverno#10269) 

    Signed-off-by: Mariam Fahmy <[email protected]>
    @MariamFahmy98 @anushkamittal2001
    MariamFahmy98 authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    25ae00f View commit details
    Browse the repository at this point in the history

  28. fix: generate VAPs that match all resources when kinds is set to * (k… 

    …yverno#10266)

Signed-off-by: Mariam Fahmy <[email protected]>
    @MariamFahmy98 @anushkamittal2001
    MariamFahmy98 authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    498ad9d View commit details
    Browse the repository at this point in the history

  29. chore: cherry-pick kyverno#10270 (kyverno#10272) 

    Signed-off-by: ShutingZhao <[email protected]>
Co-authored-by: Jim Bugwadia <[email protected]>
    @realshuting @JimBugwadia @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    7075a35 View commit details
    Browse the repository at this point in the history

  30. fix: webhook config set (kyverno#10262) (kyverno#10273) 

    * tests: add unit tests



* fix: merge operations map correctly



---------

Signed-off-by: ShutingZhao <[email protected]>
Co-authored-by: shuting <[email protected]>
    @gcp-cherry-pick-bot @realshuting @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    5d5caa1 View commit details
    Browse the repository at this point in the history

  31. fix: sort webhookconfig.operations (kyverno#10274) (kyverno#10275) 

    Signed-off-by: ShutingZhao <[email protected]>
Co-authored-by: shuting <[email protected]>
    @gcp-cherry-pick-bot @realshuting @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    c85ad7b View commit details
    Browse the repository at this point in the history

  32. fix: add a copy method to the policy context (kyverno#10236) (kyverno… 

    …#10280)

* fix: add a copy method to the policy context



* chore: add a CLI test



* chore: remove mutate changes



---------

Signed-off-by: Mariam Fahmy <[email protected]>
Co-authored-by: Mariam Fahmy <[email protected]>
    @gcp-cherry-pick-bot @MariamFahmy98 @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    9060176 View commit details
    Browse the repository at this point in the history

  33. release v1.12.2-rc.1 (kyverno#10282) 

    Signed-off-by: ShutingZhao <[email protected]>
    @realshuting @anushkamittal2001
    realshuting authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    eee44b7 View commit details
    Browse the repository at this point in the history

  34. fix(anchor): skip anchors don't have priority (kyverno#10206) (kyvern… 

    …o#10284)

* fix(anchor): give priority to skip anchors



* test(anchor): conditional anchor with a failing sibling



* test(anchor): conditional anchor mixed with other results



* fix(anchor): successful anchor with a skip anchor



---------

Signed-off-by: Khaled Emara <[email protected]>
Co-authored-by: Khaled Emara <[email protected]>
Co-authored-by: shuting <[email protected]>
    @gcp-cherry-pick-bot @KhaledEmaraDev
    @realshuting @anushkamittal2001
    3 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    83e65c1 View commit details
    Browse the repository at this point in the history

  35. release v1.12.2-rc.2 (kyverno#10286) 

    Signed-off-by: ShutingZhao <[email protected]>
    @realshuting @anushkamittal2001
    realshuting authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    af7c0ec View commit details
    Browse the repository at this point in the history

  36. release v1.12.2-rc.3 (kyverno#10294) 

    Signed-off-by: ShutingZhao <[email protected]>
    @realshuting @anushkamittal2001
    realshuting authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    72f48ac View commit details
    Browse the repository at this point in the history

  37. chore: make contrinue-on-fail flag available outside package (kyverno… 

    …#10293) (kyverno#10297)

Signed-off-by: anushkamittal20 <[email protected]>
Co-authored-by: Anushka Mittal <[email protected]>
Co-authored-by: anushkamittal20 <[email protected]>
    @gcp-cherry-pick-bot @anushkamittal2001 @anushkamittal20
    3 people committed May 24, 2024
    Configuration menu
    Copy the full SHA
    de4b4f6 View commit details
    Browse the repository at this point in the history

  38. Release v1.12.2 (kyverno#10298) 

    * release v1.12.2

Signed-off-by: ShutingZhao <[email protected]>

* merge release-1.12.

Signed-off-by: ShutingZhao <[email protected]>

---------

Signed-off-by: ShutingZhao <[email protected]>
    @realshuting @anushkamittal2001
    realshuting authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    86053d9 View commit details
    Browse the repository at this point in the history

  39. feat: add support for background scanning of existing resource in ima… 

    …ge verification (kyverno#10287) (kyverno#10311)

* feat: add support for background scanning of existing resource in image verification



* fix: change rule response type to image verify



* chore: fix nilptr reference



---------

Signed-off-by: Vishal Choudhary <[email protected]>
Co-authored-by: Vishal Choudhary <[email protected]>
    @gcp-cherry-pick-bot @vishal-chdhry @anushkamittal2001
    2 people authored and anushkamittal2001 committed May 24, 2024
    Configuration menu
    Copy the full SHA
    e0387f8 View commit details
    Browse the repository at this point in the history

Commits on May 27, 2024

  1. fix: github token 

    Signed-off-by: Anushka Mittal <[email protected]>
    @anushkamittal2001
    anushkamittal2001 committed May 27, 2024
    Configuration menu
    Copy the full SHA
    6dc9e45 View commit details
    Browse the repository at this point in the history

  2. fix: image reference 

    Signed-off-by: Anushka Mittal <[email protected]>
    @anushkamittal2001
    anushkamittal2001 committed May 27, 2024
    Configuration menu
    Copy the full SHA
    850fea6 View commit details
    Browse the repository at this point in the history