-
Notifications
You must be signed in to change notification settings - Fork 227
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: test VAPs generated by pod security cel policies #1006
base: main
Are you sure you want to change the base?
feat: test VAPs generated by pod security cel policies #1006
Commits on May 14, 2024
-
setup vap generation in CI for testing
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Configuration menu - View commit details
-
Copy full SHA for a3a727d - Browse repository at this point
Copy the full SHA a3a727dView commit details -
add vap tests for disallow-capabilities
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Configuration menu - View commit details
-
Copy full SHA for 327fae0 - Browse repository at this point
Copy the full SHA 327fae0View commit details -
add vap tests for disallow-host-namespaces
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Configuration menu - View commit details
-
Copy full SHA for a95d18d - Browse repository at this point
Copy the full SHA a95d18dView commit details
Commits on May 17, 2024
-
add vap tests for rest of baseline policies
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Configuration menu - View commit details
-
Copy full SHA for 5414f2d - Browse repository at this point
Copy the full SHA 5414f2dView commit details -
add vap tests for restricted policies
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Configuration menu - View commit details
-
Copy full SHA for 90eb891 - Browse repository at this point
Copy the full SHA 90eb891View commit details -
Configuration menu - View commit details
-
Copy full SHA for d7e07b0 - Browse repository at this point
Copy the full SHA d7e07b0View commit details -
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Configuration menu - View commit details
-
Copy full SHA for 07320ff - Browse repository at this point
Copy the full SHA 07320ffView commit details
Commits on May 18, 2024
-
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Configuration menu - View commit details
-
Copy full SHA for bbf05f4 - Browse repository at this point
Copy the full SHA bbf05f4View commit details
Commits on Jul 14, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 564217c - Browse repository at this point
Copy the full SHA 564217cView commit details
Commits on Jul 23, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 2ce1dae - Browse repository at this point
Copy the full SHA 2ce1daeView commit details
Commits on Aug 1, 2024
-
Merge branch 'main' into pod-security-cel-test-generated-vaps
Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for 5f89802 - Browse repository at this point
Copy the full SHA 5f89802View commit details -
add composite action for installing crds
Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for 992afa9 - Browse repository at this point
Copy the full SHA 992afa9View commit details -
add composite action to wait for kyverno to become ready
Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for d5224c2 - Browse repository at this point
Copy the full SHA d5224c2View commit details -
add test-file input for run-tests action and reference actions in set…
…up-env Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for 1b0e34b - Browse repository at this point
Copy the full SHA 1b0e34bView commit details -
Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for c7501b2 - Browse repository at this point
Copy the full SHA c7501b2View commit details -
Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for 78c1073 - Browse repository at this point
Copy the full SHA 78c1073View commit details -
Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for a247385 - Browse repository at this point
Copy the full SHA a247385View commit details
Commits on Aug 15, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 978d8df - Browse repository at this point
Copy the full SHA 978d8dfView commit details
Commits on Aug 24, 2024
-
test vaps above kubernetes vesrion 1.28
Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for 1848a6a - Browse repository at this point
Copy the full SHA 1848a6aView commit details -
Configuration menu - View commit details
-
Copy full SHA for 1f579a8 - Browse repository at this point
Copy the full SHA 1f579a8View commit details -
remove applying the ns in chainsaw test as it is not needed
Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for e5b18bc - Browse repository at this point
Copy the full SHA e5b18bcView commit details -
enable templating in disallow-host-process
Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for ac409d9 - Browse repository at this point
Copy the full SHA ac409d9View commit details -
(fix chainsaw test): hostNetwork must be true if any container has ho…
…stProcess set to true and if any container has hostProcess set to true all the containers must have it too (see comment for the error that would be generated otherwise) [spec: Invalid value: "": If pod contains any hostProcess containers then all containers must be HostProcess containers, spec.hostNetwork: Invalid value: false: hostNetwork must be true if pod contains any hostProcess containers] Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for 2a12958 - Browse repository at this point
Copy the full SHA 2a12958View commit details -
use containerPort to avoid this error (Pod "badpod01-new" is invalid:…
… spec.initContainers[0].ports[0].containerPort: Required value) in disallow-host-ports Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for 7f05483 - Browse repository at this point
Copy the full SHA 7f05483View commit details -
skip running vap tests for policies with variables when K8s version i…
…s 1.27 or 1.26 Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for 2d79945 - Browse repository at this point
Copy the full SHA 2d79945View commit details
Commits on Aug 25, 2024
-
disable templating in disallow-host-namespaces
Signed-off-by: Chandan-DK <chandan.dk@nirmata.com>
Configuration menu - View commit details
-
Copy full SHA for 41a39c8 - Browse repository at this point
Copy the full SHA 41a39c8View commit details