Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add miscellaneous policies in CEL expressions - Part 3 #1028

Merged

Conversation

Chandan-DK
Copy link
Contributor

@Chandan-DK Chandan-DK commented May 22, 2024

Related Issue(s)

Partially addresses #891

This PR includes the conversion of policies in the following folders:

  • linkerd
  • nginx-ingress
  • openshift
  • psa
  • traefik

Description

Policies converted in this PR:

linkerd

  • prevent-linkerd-pod-injection-override
  • prevent-linkerd-port-skipping
  • require-linkerd-mesh-injection

nginx-ingress

  • disallow-ingress-nginx-custom-snippets
  • restrict-annotations
  • restrict-ingress-paths

openshift

  • check-routes
  • disallow-deprecated-apis
  • disallow-jenkins-pipeline-strategy
  • disallow-security-context-constraint-anyuid
  • enforce-etcd-encryption

psa

  • add-psa-namespace-reporting
  • deny-privileged-profile

traefik

  • disallow-default-tlsoptions

Checklist

  • [] I have read the policy contribution guidelines.
  • [] I have added test manifests and resources covering both positive and negative tests that prove this policy works as intended.
  • [] I have added the artifacthub-pkg.yml file and have verified it is complete and correct.

Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
This is done in order to avoid no such key: metadata error in the
kyverno tests for the cel policy

Signed-off-by: Chandan-DK <chandandk468@gmail.com>
…ar policy

Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
@Chandan-DK Chandan-DK marked this pull request as ready for review May 22, 2024 11:50
@Chandan-DK Chandan-DK mentioned this pull request May 22, 2024
3 tasks
@MariamFahmy98 MariamFahmy98 self-requested a review May 22, 2024 16:43
@MariamFahmy98 MariamFahmy98 self-assigned this May 22, 2024
@MariamFahmy98 MariamFahmy98 merged commit 5bfc1aa into kyverno:main Jul 15, 2024
5 checks passed
@Chandan-DK Chandan-DK deleted the miscellaneous-policies-cel-part-3 branch July 15, 2024 10:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants