Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generate foreach 1 #5

Closed
wants to merge 2,261 commits into from
Closed

Generate foreach 1 #5

wants to merge 2,261 commits into from

Conversation

realshuting
Copy link
Owner

Explanation

Related issue

Milestone of this PR

What type of PR is this

Proposed Changes

Proof Manifests

Checklist

  • I have read the contributing guidelines.
  • I have read the PR documentation guide and followed the process including adding proof manifests to this PR.
  • This is a bug fix and I have added unit tests that prove my fix is effective.
  • This is a feature and I have added CLI tests that are applicable.
  • My PR needs to be cherry picked to a specific release branch which is .
  • My PR contains new or altered behavior to Kyverno and
    • CLI support should be added and my PR doesn't contain that functionality.
    • I have added or changed the documentation myself in an existing PR and the link is:
    • I have raised an issue in kyverno/website to track the documentation update and the link is:

Further Comments

JimBugwadia and others added 30 commits May 20, 2024 08:16
…est practice (kyverno#10250)

* feat(perf): add new linter prealloc to enforce slice declarations best practice

Signed-off-by: ShutingZhao <[email protected]>

* fix(linter): prealloac slices

Signed-off-by: ShutingZhao <[email protected]>

---------

Signed-off-by: ShutingZhao <[email protected]>
…yverno#10164)

* fix: process the matched resources only for mutate existing policies

Signed-off-by: Mariam Fahmy <[email protected]>

* fix lint issue

Signed-off-by: Mariam Fahmy <[email protected]>

* chore: add unit tests

Signed-off-by: Mariam Fahmy <[email protected]>

---------

Signed-off-by: Mariam Fahmy <[email protected]>
Co-authored-by: shuting <[email protected]>
* feat(helm): GrafanaDashboard configuration

Signed-off-by: Nicolas Lamirault <[email protected]>

* feat(helm): documentation

Signed-off-by: Nicolas Lamirault <[email protected]>

---------

Signed-off-by: Nicolas Lamirault <[email protected]>
* skip invalid policy files

Signed-off-by: Jim Bugwadia <[email protected]>

* fix file-system policy loader

Signed-off-by: Jim Bugwadia <[email protected]>

* propagate policy schema error

Signed-off-by: Jim Bugwadia <[email protected]>

---------

Signed-off-by: Jim Bugwadia <[email protected]>
* tests: add unit tests

Signed-off-by: ShutingZhao <[email protected]>

* fix: merge operations map correctly

Signed-off-by: ShutingZhao <[email protected]>

---------

Signed-off-by: ShutingZhao <[email protected]>
* fix: add a copy method to the policy context

Signed-off-by: Mariam Fahmy <[email protected]>

* chore: add a CLI test

Signed-off-by: Mariam Fahmy <[email protected]>

* chore: remove mutate changes

Signed-off-by: Mariam Fahmy <[email protected]>

---------

Signed-off-by: Mariam Fahmy <[email protected]>
* fix(anchor): give priority to skip anchors

Signed-off-by: Khaled Emara <[email protected]>

* test(anchor): conditional anchor with a failing sibling

Signed-off-by: Khaled Emara <[email protected]>

* test(anchor): conditional anchor mixed with other results

Signed-off-by: Khaled Emara <[email protected]>

* fix(anchor): successful anchor with a skip anchor

Signed-off-by: Khaled Emara <[email protected]>

---------

Signed-off-by: Khaled Emara <[email protected]>
Co-authored-by: shuting <[email protected]>
…yverno#10200)

Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@23faadf...a4f60bb)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…rno#10212)

Bumps [sigs.k8s.io/release-utils](https://github.com/kubernetes-sigs/release-utils) from 0.8.1 to 0.8.2.
- [Release notes](https://github.com/kubernetes-sigs/release-utils/releases)
- [Commits](kubernetes-sigs/release-utils@v0.8.1...v0.8.2)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/release-utils
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2) from 2.2.3 to 2.3.0.
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml)
- [Commits](fluxcd/flux2@5346846...896e0fa)

---
updated-dependencies:
- dependency-name: fluxcd/flux2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…10218)

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.1 to 2.3.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@0864cf1...dc50aa9)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <[email protected]>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.5 to 4.1.6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@44c2b7a...a5ac7e5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
)

* chore: bump tools and add kubernetes v1.30 to conformance

Signed-off-by: Vishal Choudhary <[email protected]>

* chore: codegen and version fixes

Signed-off-by: Vishal Choudhary <[email protected]>

---------

Signed-off-by: Vishal Choudhary <[email protected]>
…#10295)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4.3.1 to 4.4.1.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@5ecb98a...125fc84)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ge verification (kyverno#10287)

* feat: add support for background scanning of existing resource in image verification

Signed-off-by: Vishal Choudhary <[email protected]>

* fix: change rule response type to image verify

Signed-off-by: Vishal Choudhary <[email protected]>

* chore: fix nilptr reference

Signed-off-by: Vishal Choudhary <[email protected]>

---------

Signed-off-by: Vishal Choudhary <[email protected]>
…yverno#10302)

Bumps [sigs.k8s.io/kustomize/kyaml](https://github.com/kubernetes-sigs/kustomize) from 0.17.0 to 0.17.1.
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.17.0...api/v0.17.1)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/kustomize/kyaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…#10307)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.13.4 to 3.25.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@cdcdbb5...9fdb3e4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…verno#10306)

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.20.0 to 0.21.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@b2933f5...fd25fed)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [sonarsource/sonarcloud-github-action](https://github.com/sonarsource/sonarcloud-github-action) from 2.1.1 to 2.2.0.
- [Release notes](https://github.com/sonarsource/sonarcloud-github-action/releases)
- [Commits](SonarSource/sonarcloud-github-action@49e6cd3...4006f66)

---
updated-dependencies:
- dependency-name: sonarsource/sonarcloud-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
)

Bumps [docker/login-action](https://github.com/docker/login-action) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@e92390c...0d4c9c5)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…yverno#10322)

Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.8.3 to 1.8.4.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.8.3...v1.8.4)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <[email protected]>
…o#10323)

Bumps [adRise/update-pr-branch](https://github.com/adrise/update-pr-branch) from 0.7.2 to 0.8.1.
- [Release notes](https://github.com/adrise/update-pr-branch/releases)
- [Commits](adRise/update-pr-branch@1dc4248...5d27394)

---
updated-dependencies:
- dependency-name: adRise/update-pr-branch
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
KhaledEmaraDev and others added 29 commits August 5, 2024 15:46
Signed-off-by: Khaled Emara <[email protected]>
Co-authored-by: Mariam Fahmy <[email protected]>
…rno#10760)

* Remove cleanup cronjobs for updaterequests and ephemeralreports

Signed-off-by: justusbunsi <[email protected]>

* Cleanup Chart readme

Signed-off-by: justusbunsi <[email protected]>

* Run `make codegen-manifest-all`

Signed-off-by: justusbunsi <[email protected]>

---------

Signed-off-by: justusbunsi <[email protected]>
Co-authored-by: Mariam Fahmy <[email protected]>
Co-authored-by: treydock <[email protected]>
* feat: add chainsaw tests for generate policies (part 1)

Signed-off-by: Mariam Fahmy <[email protected]>

* fix chainsaw tests

Signed-off-by: Mariam Fahmy <[email protected]>

* chore: rename deprecated chainsaw tests

Signed-off-by: Mariam Fahmy <[email protected]>

---------

Signed-off-by: Mariam Fahmy <[email protected]>
kyverno#10667)

* fix: return policies with either audit or enforce rules from the cache

Signed-off-by: Mariam Fahmy <[email protected]>

* feat: introduce validationFailureAction under verifyImage rules

Signed-off-by: Mariam Fahmy <[email protected]>

* feat: add chainsaw tests

Signed-off-by: Mariam Fahmy <[email protected]>

* fix

Signed-off-by: Mariam Fahmy <[email protected]>

---------

Signed-off-by: Mariam Fahmy <[email protected]>
Co-authored-by: shuting <[email protected]>
)

Bumps [golang.org/x/text](https://github.com/golang/text) from 0.16.0 to 0.17.0.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.16.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…10804)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.25.0 to 0.26.0.
- [Commits](golang/crypto@v0.25.0...v0.26.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…o#10799)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.15 to 3.26.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@afb54ba...eb055d7)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
)

Bumps [fossas/fossa-action](https://github.com/fossas/fossa-action) from 1.3.3 to 1.4.0.
- [Release notes](https://github.com/fossas/fossa-action/releases)
- [Commits](fossas/fossa-action@47ef11b...09bcf12)

---
updated-dependencies:
- dependency-name: fossas/fossa-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <[email protected]>
Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.20.1 to 0.20.2.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.20.1...v0.20.2)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <[email protected]>
…rno#10813)

Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@59acb62...4959ce0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* feat(mutate): minimize unmarshals

Signed-off-by: Khaled Emara <[email protected]>

* test(mutate): test type assertion

Signed-off-by: Khaled Emara <[email protected]>

* chore(codegen): remove unused import

Signed-off-by: Khaled Emara <[email protected]>

---------

Signed-off-by: Khaled Emara <[email protected]>
* feat(mutate): don't eagerly process img-ver

Signed-off-by: Khaled Emara <[email protected]>

* test(mutate): add mutate with img-ver test

Signed-off-by: Khaled Emara <[email protected]>

---------

Signed-off-by: Khaled Emara <[email protected]>
Co-authored-by: Vishal Choudhary <[email protected]>
Co-authored-by: shuting <[email protected]>
Signed-off-by: Khaled Emara <[email protected]>
Co-authored-by: Mariam Fahmy <[email protected]>
…#10793)

* chore: remove v1beta1 updaterequest definitions

Signed-off-by: ShutingZhao <[email protected]>

* feat: update UR to map a policy instead a rule; adapt UR mapping changes for admission review

Signed-off-by: ShutingZhao <[email protected]>

* feat: update code-gen

Signed-off-by: ShutingZhao <[email protected]>

* fix: linter

Signed-off-by: ShutingZhao <[email protected]>

* fix: remove unused function

Signed-off-by: ShutingZhao <[email protected]>

* fix: add missing files

Signed-off-by: ShutingZhao <[email protected]>

* fix: add missing files

Signed-off-by: ShutingZhao <[email protected]>

* chore: update ur in policy controller

Signed-off-by: ShutingZhao <[email protected]>

* feat: update crds

Signed-off-by: ShutingZhao <[email protected]>

* feat: adapt ur changes in the background controller

Signed-off-by: ShutingZhao <[email protected]>

* fix: linter

Signed-off-by: ShutingZhao <[email protected]>

* fix: more linter

Signed-off-by: ShutingZhao <[email protected]>

* feat: modify mapping relationship for deletion events

Signed-off-by: ShutingZhao <[email protected]>

* feat: remedy missing target for policy application

Signed-off-by: ShutingZhao <[email protected]>

* fix: fetching logic for triggers

Signed-off-by: ShutingZhao <[email protected]>

* fix: clean up targets upon policy deletion

Signed-off-by: ShutingZhao <[email protected]>

* chore: update crds

Signed-off-by: ShutingZhao <[email protected]>

* merge main

Signed-off-by: ShutingZhao <[email protected]>

* merge main

Signed-off-by: ShutingZhao <[email protected]>

* fix: adds delay before assertion

Signed-off-by: ShutingZhao <[email protected]>

* chore: update docs

Signed-off-by: ShutingZhao <[email protected]>

* fix: wrong yaml format

Signed-off-by: ShutingZhao <[email protected]>

* feat: update error handling logic

Signed-off-by: ShutingZhao <[email protected]>

* fix(attempt): enable more debug info

Signed-off-by: ShutingZhao <[email protected]>

* fix(attempt): enable debug log

Signed-off-by: ShutingZhao <[email protected]>

* fix(attempt): enable debug log

Signed-off-by: ShutingZhao <[email protected]>

* fix(attempt): enable debug log

Signed-off-by: ShutingZhao <[email protected]>

* fix: makefile to update ur crds

Signed-off-by: ShutingZhao <[email protected]>

* fix: generate existing

Signed-off-by: ShutingZhao <[email protected]>

* fix: skip empty ur generation

Signed-off-by: ShutingZhao <[email protected]>

* fix: update install.yaml

Signed-off-by: ShutingZhao <[email protected]>

---------

Signed-off-by: ShutingZhao <[email protected]>
…cy_results in grafana dashboard config kyverno#1325 (kyverno#10832)

Signed-off-by: Pradeep Lakshmi Narasimha <[email protected]>
Signed-off-by: Trey Dockendorf <[email protected]>
Co-authored-by: Jim Bugwadia <[email protected]>
…#10839)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.0 to 3.26.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@eb055d7...29d86d2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: ShutingZhao <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.