github/polaris
1
0
Fork 0
mirror of https://github.com/FairwindsOps/polaris.git synced 2026-08-23 22:26:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
966 Commits 32 Branches 119 Tags
rb/fix-webhook
Commit Graph
61 Commits
Author SHA1 Message Date
Robert Brennan 8e7100acaf Add debug info to kube resources, better caching strategy (#840) 
* add debug info

* remove extra build step

* try and fix memory usage

* fix pointers

* add more debug logs

* fix up caching for replicasets

* fix import

* replace info with debug

* add logs

* dont cache jobs

* gofmt

* fix import
 2022-09-16 10:07:20 -04:00
Maxime VISONNEAUandRobert Brennan 32c1150b28 config: new flags '--disallow-(config|annotation)-exemptions' (#636) 
This change follows up #635 and lets end-users decide to disallow exemption rules defined as part of the config file or the controller annotations (whether none, any or both). The main use case here is to be able to prevent users with edit privileges over a controller to add a new exemption rule through an annotation which may obfuscate the actual policies we want to enforce.

Signed-off-by: Maxime VISONNEAU <maxime.visonneau@gmail.com>

Co-authored-by: Robert Brennan <accounts@rbren.io>
 2021-09-27 12:56:59 -04:00
Robert Brennan a43a0fe2f5 fix score when onlyOutputFailed is true (#563) 
* fix score when onlyOutputFailed is true

* fix tests

* remove return
 2021-06-21 12:26:44 -04:00
Jordan DoigandRobert Brennan 63fd576d3e Add support for arbitrary Kinds (#505) 
* Add basic flow

* Add arbitrary validator

* Pipe config through to resource provider

* Set arbitraries on resource provider

* Add arbitrary validation to fullaudit

* Add conf argument

* Fix resource setting from string

* PR updates

* Fix nil map error

* Delete lingering print, add pdb check, start implementing validator test

* move ingress to arbitrary

* fix compile

* refactor a bunch

* add tls tests

* tests passing

* resource provider helper

* refactor tests

* fix exemptions

* fix check test

* fix up resource creation from API

* fix init containers

* fix cronjob test

* fix pod tests

* combine controllers and-noncontrollers in resource provider

* delint

* add ingress backward compat

* fix tests

* reenable test

* rename a fn

* remove unused fn

* remove if

Co-authored-by: Robert Brennan <contact@rbren.io>
 2021-03-26 08:29:59 -04:00
MAKOSCAFEE fe0060af77 added test for score 2021-01-29 22:13:01 +03:00
Robert Brennan 6cda7cd7d5 remove details links (#473) 2021-01-15 13:55:59 -05:00
Jordan Doig 9d68ee2359 Merge remote-tracking branch 'origin/master' into jd/out-of-control 2020-12-28 12:40:23 -07:00
skatika dd2976794a Implement namespace and container exemptions. Also refactoring according to gofmt 2020-12-18 09:50:04 -05:00
skatika fdd30717e5 Remove unused parameter 2020-12-17 09:54:29 -05:00
Jordan Doig 550447234a ControllerResult to Result 2020-12-16 13:32:08 -07:00
Robert Brennan 1a8fb44b78 Migrate docs to Vuepress (#442) 
* first pass

* fix up homepage

* more work

* housekeeping

* add script to modify home link

* add check docs

* build docs site

* Create CNAME

* fix path to check-docs

* update from template

* fix logo in readme

* fix link

* remove logspam

* remove old folders

* fix all links

* fix up readme

* change up Insights description

* add customization docs

* phrasing

* title

* titles

* titles

* change webhook docs

* refresh template

* rebuild site

* refresh from template repo

* phrasing

* add tagline

* update readme\, add readme sync script

* fix logo

* rebuild

* fix readme script

* rebuild
 2020-11-30 14:15:29 -05:00
baderbuddy 7c9f01639b Update dependencies (#400) 
* Start working on updating dependencies:

* Fix webhook

* Rollback jsonschema update

* Checkin new config

* Fix run as root

* Update versions of kind

* Fix typo in kind URL

* Fix kind config

* Add csr permissions

* Fix weird image thing

* Fixed certificates

* Add to logging

* Approve cert manually

* Fix approval

* Add cert script

* Fix deployment

* Add requests/limits

* Wait if certificate doesn't exist yet

* Add check for file size

* Add variable

* Try a different imagE

* Fix command

* Update certificate logic

* Add healthz

* Don't check cert size

* Remove stat

* Fix vet

* Put in change that makes no sense

* Fix cert names

* Roll back

* Try changing config

* Add logging for each request

* Cleanup code some

* Remove bad deployments

* Fix client injection

* Update timeout

* Add logging

* Fixed e2e webhook tests

* Add permissions for approval

* Fix permissions for CSR

* Remove logging code

* Remove refresh certs file

* Fix merge issues

* Update deployments

* Try beta of admission controller config

* Target 1.15 for testing

* Add beta versions of resourceS

* Lower webhook timeout

* Refactor out a method

* Fix up PR issues

* Fix more tabs

* Remove unnecessary messageS

* Fix go.sum

* Fix go.sum
 2020-09-11 08:53:14 -04:00
Robert Brennan 47150155a0 add ability to audit a single workload (#368) 
* add ability to audit a single workload

* delint

* fix help text

* update readme
 2020-07-22 13:28:02 -04:00
jordandoig 3061756a55 Filter by namespaces in query, style expandable filter section, check checkboxes on page load 2020-06-03 20:19:18 -06:00
Robert Brennan e129ba6971 fix dashboard after output change 2020-01-14 14:50:34 +00:00
Robert Brennan 2770be643f Refactor validation 2020-01-14 14:50:34 +00:00
Robert Brennan 2b15f11d57 Add exemptions to config (#204) 
* first pass at adding exemptions

* Update config.yaml

* make config_test more reliable

* add flag to disallow exemptions in dashboard

* add disallow-exemptions flag to CLI

* add comments

* fix exemptions flag

* fix alert on dashboard

* minor style changes
 2019-10-23 17:14:03 -04:00
Adam Shannon 150b812371 pkg/dashboard: setup basePath as a path prefix in routing (#201) 2019-10-02 12:17:59 -04:00
Will Ledingham b8422a93b7 Wl/stored audits (#188) 
* added ability to run dashboard from a stored audit result file.

* added ability to run dashboard from a stored audit result file.

* more changes

* debugging

* de

* all working as anticipated locally

* .

* updated way of decoding YAML/JSON files.

* remmoved unneded code

* renamed fn names, moved logic around and cleaned up main.go

* deleted output files from weird places.

* deleted test file
 2019-08-14 17:20:19 -04:00
Nick Huanca 75f70352ba Additional Pod Controller Scans (#166) 
**Changes**

- Refactored the way controllers work to be an interface
- Added configurable controllers to include in scans
- Added daemonsets, jobs and cronjobs in scans
- Added `ReplicationController` type controllers to the supported list
- Adjusted logic for failed YAML parsing to bubble up errors
- Added better logic for calculating summaries on cluster wide results
- Relocated responsibilities for counting types into validators vs spreading it around more packages
- Fixed bug where cronjob parsing was using wrong KIND
- Added fixtures for mocking new controller types
- Added example yamls to test scanning files
- Added functions to NamespacedResult(s) to reduce code complexity deep set iterations
- Refactored how results get added to namespacedresults so adding more later is easier
- Minor signature changes for interface implementing structs for controllers
 2019-07-31 15:56:27 -06:00
Bobby Brennan 20bd32afb6 Rename ReactiveOps to Fairwinds (#180) 
* Rename ReactiveOps to Fairwinds

* Rename ReactiveOps to Fairwinds
 2019-07-30 15:29:09 -04:00
Bobby Brennan ebfb4ea9a1 Add support for stateful sets (#145) 2019-06-13 07:59:01 -06:00
Bobby Brennan 7cfa13f285 Better support for CI/CD use case (#127) 
add score to output

add output-format option

update README with more use cases

change YAML marshal strategy

fix webhook install instructions
 2019-06-10 10:13:10 -04:00
Bobby Brennan 2494dd097b optionalize base path for dashboard (#134) 2019-06-04 16:44:41 -04:00
Rob Scott 287be8e57e a variety of dashboard updates and cleanup 2019-05-14 16:22:39 -04:00
Bobby Brennan b79c10e797 fix content type 2019-05-14 15:26:39 +00:00
Bobby Brennan 9bcb832bbd rename all the things 2019-05-09 15:59:23 +00:00
Bobby Brennan bd2da76c56 Add explanations for each error 
first pass

add info links to dashboard
 2019-05-08 16:13:29 +00:00
Bobby Brennan 520d6572e4 Add ability to audit a directory of files (#70) 
* refactor kubernetes API usage

* add ability to audit directory

* refactor a bit

* fix return statement

* fix main.go

* add ability to audit multiple resources in a single file
 2019-05-07 12:42:57 -04:00
Bobby Brennan f6d4264b42 Factor dashboard template into parts 
factor out dashboard body into separate template

more refactoring

template out header and footer

add comments

add comments

add preamble
 2019-05-07 13:28:11 +00:00
Rob Scott 4fe39e7b74 improved logging, better webhook output, webhook deploy fixes 2019-04-26 17:35:14 -04:00
Rob Scott 3e1906d3f1 separating webhook and dashboard k8s deploy config, moving assets into dashboard pkg, reworking docker image to actually make use of packr 2019-04-26 14:57:55 -04:00
Bobby Brennan 54a4f92695 Pack static assets into packr box for portability 
copy config.yaml to docker image

enable external usage of dashboard package

gofmt

fix comment

use packr for assets

add gobuffalo/packr dependency

add dependencies

fix pointer issues

add output-file option
 2019-04-18 18:25:16 +00:00
Rob Scott 0a4050d6b4 more dashboard updates, including concepty of weather 2019-04-17 11:00:11 -04:00
Rob Scott 6f06a5ef27 added weighted score + letter grades + lots of related dashboard updates 2019-04-15 17:59:41 -04:00
Rob Scott 7263ff7e59 adding debug info for dashboard responses 2019-04-05 16:34:45 -04:00
Rob Scott 5c69b99f4e Merge pull request #46 from reactiveops/bb/refactor-template-js 
refactor templated JS
 2019-04-05 15:09:05 -04:00
Bobby Brennan dab34b9033 refactor templated JS 2019-04-05 18:28:06 +00:00
Bobby Brennan 293d13074c Handle errors in HTML template execution 2019-04-05 12:48:19 +00:00
Bobby Brennan e4dd53d1c0 Add audit mode to CLI 
Add option to send audit results to a remote host

add audit flag to print results to stdout

add comments

make comments more consistent

move audit test

fix fullaudit_test

add test instructions to README

update audit test

simplify stdout output

update comment

fix import

run audit by default
 2019-04-03 18:58:00 +00:00
Rob Scott 4875b72341 a bit of dashboard cleanup 2019-03-27 23:09:25 -04:00
Rob Scott f5cde2db38 a lot of cleanup and restructuring 2019-03-27 22:57:01 -04:00
Rob Scott f07cddce02 fixes for golint errors 2019-03-25 12:33:24 -04:00
Bobby Brennan e5b5a1a24f change error handling 2019-03-15 19:44:12 +00:00
Bobby Brennan 645eea1f22 fix tabs 2019-03-15 19:40:46 +00:00
Bobby Brennan 4548d87042 use font-awesome icons 2019-03-15 14:09:31 +00:00
Bobby Brennan deacad7724 move UI code into pkg/dashboard 2019-03-15 13:25:19 +00:00
jessicagreben e44fa9c712 add a test for dashboard, move stuff around to test easier, add fixtures 2019-02-08 12:50:37 -08:00
jessicagreben bfcda872a9 merge master 2019-02-07 08:57:24 -08:00
Rob Scott 535735fbde fixes for linting, updating CI to fail when linting does 2019-02-07 11:28:30 -05:00