Robert Brennan
f753fc91f2
Support multi-resource templates ( #524 )
...
* able to run multi-resource tests
* start passing resource provider through
* working end-to-end
* better support for go templating
* fix tests
* delint
* add test
* add json annotations
* remove panics
* fix annotation
* fix for groupkinds
* add comment
* add docs
* change jsonSchema field to schemaString
* rename check
* add pdb to tests
* add ingress to tests
* update deps
* fix up policy import
* update go
* fix check name
* funk it up
* better docs
2021-05-06 14:01:20 -04:00
Jordan Doig
63fd576d3e
Add support for arbitrary Kinds ( #505 )
...
* Add basic flow
* Add arbitrary validator
* Pipe config through to resource provider
* Set arbitraries on resource provider
* Add arbitrary validation to fullaudit
* Add conf argument
* Fix resource setting from string
* PR updates
* Fix nil map error
* Delete lingering print, add pdb check, start implementing validator test
* move ingress to arbitrary
* fix compile
* refactor a bunch
* add tls tests
* tests passing
* resource provider helper
* refactor tests
* fix exemptions
* fix check test
* fix up resource creation from API
* fix init containers
* fix cronjob test
* fix pod tests
* combine controllers and-noncontrollers in resource provider
* delint
* add ingress backward compat
* fix tests
* reenable test
* rename a fn
* remove unused fn
* remove if
Co-authored-by: Robert Brennan <contact@rbren.io >
2021-03-26 08:29:59 -04:00
skatika
f1957631b5
Remove unsued import
2020-12-22 14:30:09 -05:00
skatika
a4e45a0e95
Merge branch 'master' of github.com:FairwindsOps/polaris into ssk/container-exemptions
...
# Conflicts:
# README.md
# pkg/validator/controller_test.go
# pkg/validator/fullaudit_test.go
2020-12-18 09:57:35 -05:00
skatika
dd2976794a
Implement namespace and container exemptions. Also refactoring according to gofmt
2020-12-18 09:50:04 -05:00
Robert Brennan
7c98598858
Fix test fixtures, add a test for controllers ( #455 )
...
* first pass at fixing test fixtures
* tests mostly working
* add controller test
* remove debug stuff
* delint
* revert test file
* remove extra controllers from fixtures
* delint
* fix messages
2020-12-17 17:32:01 -05:00
skatika
fdd30717e5
Remove unused parameter
2020-12-17 09:54:29 -05:00
skatika
e57668fc75
Fix typos
2020-12-16 17:17:43 -05:00
baderbuddy
b3f1b3b478
Recategorize the results into standard categories. ( #434 )
...
* Initial checkin for recategorizing checks
* Fix tests
* Fix tests
* Update example output
2020-11-04 10:17:37 -05:00
baderbuddy
7c9f01639b
Update dependencies ( #400 )
...
* Start working on updating dependencies:
* Fix webhook
* Rollback jsonschema update
* Checkin new config
* Fix run as root
* Update versions of kind
* Fix typo in kind URL
* Fix kind config
* Add csr permissions
* Fix weird image thing
* Fixed certificates
* Add to logging
* Approve cert manually
* Fix approval
* Add cert script
* Fix deployment
* Add requests/limits
* Wait if certificate doesn't exist yet
* Add check for file size
* Add variable
* Try a different imagE
* Fix command
* Update certificate logic
* Add healthz
* Don't check cert size
* Remove stat
* Fix vet
* Put in change that makes no sense
* Fix cert names
* Roll back
* Try changing config
* Add logging for each request
* Cleanup code some
* Remove bad deployments
* Fix client injection
* Update timeout
* Add logging
* Fixed e2e webhook tests
* Add permissions for approval
* Fix permissions for CSR
* Remove logging code
* Remove refresh certs file
* Fix merge issues
* Update deployments
* Try beta of admission controller config
* Target 1.15 for testing
* Add beta versions of resourceS
* Lower webhook timeout
* Refactor out a method
* Fix up PR issues
* Fix more tabs
* Remove unnecessary messageS
* Fix go.sum
* Fix go.sum
2020-09-11 08:53:14 -04:00
Robert Brennan
2ac6a2b540
Change error to danger ( #299 )
...
* rename 'error' to 'danger'
* update dashboard
* fix docs
* update deploy configs
2020-05-19 08:41:07 -04:00
baderbuddy
d50d9c81f8
Add the capability for controller level checks ( #285 )
...
* Add controller level checks
* Add check for multipleReplicas
* Fixed spec
* Add controller level check
* Move controller schema checks to their own function.
2020-05-18 14:57:35 -04:00
baderbuddy
69621f7034
Improve performance ( #278 )
...
* rename root fs check
* speed up docker build
* refactor webhook to be more generic
* delete controllers pkg
* revert deploy
* fix example config
* remove controllersToScan config
* fix lint error
* fix webhook name
* FileSystem -> Filesystem
* update deps
* skip node owners
* clean up meta tracking
* Cache results of dynamic queries
* Dynamically pick types to list.
* Fix unit tests
* Fix the other tests I missed
* Fix container test
* Fix issues from PR feedback
Co-authored-by: Robert Brennan <bobby.brennan@gmail.com >
Co-authored-by: Robert Brennan <accounts@rbren.io >
2020-05-01 13:29:29 -04:00
Robert Brennan
6792fba91f
Delete controllers package ( #270 )
...
* rename root fs check
* speed up docker build
* refactor webhook to be more generic
* delete controllers pkg
* revert deploy
* fix example config
* remove controllersToScan config
* fix lint error
* fix webhook name
* FileSystem -> Filesystem
* update deps
* skip node owners
* clean up meta tracking
Co-authored-by: Robert Brennan <bobby.brennan@gmail.com >
2020-04-27 10:43:02 -04:00
Bader Boland
a5828a2d3b
Fix tests
2020-03-25 14:23:18 -04:00
Robert Brennan
dfa34e1880
explicitly handle schema validation errors
2020-01-14 14:50:35 +00:00
Robert Brennan
23bf4c81b0
refactor ValidatePod, add NakedPod type
2020-01-14 14:50:34 +00:00
Robert Brennan
51cd3523fc
messages -> results
2020-01-14 14:50:34 +00:00
Robert Brennan
9f7caabef4
change message type to boolean
2020-01-14 14:50:34 +00:00
Robert Brennan
2770be643f
Refactor validation
2020-01-14 14:50:34 +00:00
Robert Brennan
04da47d83e
change input config to simplify things
2020-01-02 17:55:21 +00:00
Robert Brennan
22ab851681
skip health checks for jobs, cronjobs, and initContainers ( #216 )
2019-11-06 13:31:17 -05:00
Robert Brennan
2b15f11d57
Add exemptions to config ( #204 )
...
* first pass at adding exemptions
* Update config.yaml
* make config_test more reliable
* add flag to disallow exemptions in dashboard
* add disallow-exemptions flag to CLI
* add comments
* fix exemptions flag
* fix alert on dashboard
* minor style changes
2019-10-23 17:14:03 -04:00
Robert Brennan
c91a85a08a
add IDs to each check ( #197 )
2019-09-11 14:07:08 -04:00
Bobby Brennan
20bd32afb6
Rename ReactiveOps to Fairwinds ( #180 )
...
* Rename ReactiveOps to Fairwinds
* Rename ReactiveOps to Fairwinds
2019-07-30 15:29:09 -04:00
Will Ledingham
819b77ae1a
Pod tests ( #177 )
...
* add pod test
* add pod test 2
* update tests
* Added pod tests for configured Host IPC, Host PID, and Host Newtowrk.
* Fixed expected vs. actual mixup
2019-07-25 09:31:37 -04:00
Bobby Brennan
ebfb4ea9a1
Add support for stateful sets ( #145 )
2019-06-13 07:59:01 -06:00
Bobby Brennan
9bcb832bbd
rename all the things
2019-05-09 15:59:23 +00:00
Rob Scott
0db0e2947f
some additional cleanup
2019-04-29 10:58:30 -04:00
Bobby Brennan
55363fd7a8
Add categories to dashboard
...
add version, cluster stats to output
add comment
update UI
changes to summary aggregation
add category summaries to dash
2019-04-23 15:07:50 +00:00
Rob Scott
674696c7e1
restructuring config to match up with docs
2019-04-22 12:58:25 -04:00
Bobby Brennan
3ce7e12082
Add version, cluster stats to output and UI ( #61 )
...
* add version, cluster stats to output
* add comment
* fix tests
* add categories to messages
* fix tests
* update UI
* remove empty category totals field
* k8smeta -> metav1
2019-04-22 12:01:18 -04:00
Rob Scott
f5cde2db38
a lot of cleanup and restructuring
2019-03-27 22:57:01 -04:00
Rob Scott
6d49d0e19c
updating logic to work with new config syntax
2019-03-27 22:55:31 -04:00
jessicagreben
97844d552b
fix network mssg wording
2019-02-13 14:51:12 -08:00
jessicagreben
7195793ff5
add network test
2019-02-13 14:33:47 -08:00
