Commit Graph

134 Commits

Author SHA1 Message Date
Nick Huanca
4c7429efbc #146 Fixing Container Security Context Logic (#149)
* Fixing Container Security Context Logic

Kubernetes rationalizes Container Security Context in conjunction with the
Pod Spec Security Context. In this scenario you can 'leave out' certain
security context settings and rely on the pod spec definition to still
set these settings for you. The RunAsNonRoot setting originally only checked
to see if the value was set at the container level, vs also checking if it
was enabled at the pod level.

I have attached the container's parent pod spec to the container validate
struct in case any other things like this arise in the future.

I have also refactored the logic for validating bool pointers, since these
can be tricky, if you want to avoid dereferences pointer issues.

Changes:
- Added parent pod spec of container to validate certain settings which affect container spec
- Refactored the logic statements for validating bool pointers (used helpers)
- Added tests for this pod.container.securityContext condition
2019-06-18 11:04:38 -06:00
Bobby Brennan
ebfb4ea9a1 Add support for stateful sets (#145) 2019-06-13 07:59:01 -06:00
kimschles
b32a7afa77 update tests 2019-06-11 13:46:12 -06:00
kimschles
30ff6e6667 [WIP] change GetConfigOrDie to GetConfig 2019-06-10 13:34:09 -06:00
Bobby Brennan
538b1fba1c fix padding on top-level header 2019-06-10 14:50:37 +00:00
Bobby Brennan
d569605d0d add tests for creation time 2019-06-10 14:43:21 +00:00
Bobby Brennan
ca4b45451f re-bump output version 2019-06-10 14:43:15 +00:00
Bobby Brennan
1d6248180e add display-name flag 2019-06-10 14:39:24 +00:00
Bobby Brennan
7cfa13f285 Better support for CI/CD use case (#127)
add score to output

add output-format option

update README with more use cases

change YAML marshal strategy

fix webhook install instructions
2019-06-10 10:13:10 -04:00
Bobby Brennan
2494dd097b optionalize base path for dashboard (#134) 2019-06-04 16:44:41 -04:00
Bobby Brennan
12e10f9111 skip resources that are empty strings (#131) 2019-06-04 16:28:58 -04:00
Bobby Brennan
f061e0e012 Fix helm for webhook (#129)
* Log all validation attempts

* add app selector for helm deployments
2019-05-24 10:21:38 -04:00
Rob Scott
9a03f87c0b adding exception for init container resource checks 2019-05-23 16:50:37 +02:00
Rob Scott
f5c7087d6d ensuring that readiness probes in init containers are not validated to fix #112 2019-05-20 21:35:44 +02:00
Rob Scott
9e1c714869 adding all auth providers to fix #114 2019-05-20 20:01:00 +02:00
Bobby Brennan
f29e79841a fix JSON error on details pages (#117)
* fix JSON error on details pages

* test HTTP requests to dashboard as part of CI
2019-05-20 11:04:59 -04:00
Bobby Brennan
cd58867890 save all third-party assets to local files 2019-05-17 16:07:24 +00:00
Bobby Brennan
79f3d2cb74 use packr for config.yaml 2019-05-17 14:34:53 +00:00
Rob Scott
40bb07bb3a improving error handling 2019-05-16 17:07:34 -04:00
Bobby Brennan
250b61f6fd add resources test 2019-05-16 19:28:19 +00:00
Bobby Brennan
792d76783d reposition images 2019-05-15 21:52:15 +00:00
Bobby Brennan
24975bb8a1 update favicons 2019-05-15 21:52:15 +00:00
Bobby Brennan
9d4907b4a4 update logo 2019-05-15 21:52:15 +00:00
Bobby Brennan
374d167318 add score description, simplify chart layout 2019-05-15 19:57:38 +00:00
Rob Scott
287be8e57e a variety of dashboard updates and cleanup 2019-05-14 16:22:39 -04:00
Rob Scott
815c29ce69 moving to expandable category info 2019-05-14 16:22:38 -04:00
Rob Scott
202e633729 some dashboard layout updates 2019-05-14 16:22:38 -04:00
Bobby Brennan
85e27b1b9a Merge branch 'master' into rb/polaris-rename 2019-05-14 13:02:20 -04:00
Bobby Brennan
b79c10e797 fix content type 2019-05-14 15:26:39 +00:00
Rob Scott
02d4444196 updating error message for resource presence checks, updating deployment config to pass with 100% 2019-05-13 22:33:35 -04:00
Bobby Brennan
09f0514326 change readme logo 2019-05-10 20:53:33 +00:00
Bobby Brennan
9bcb832bbd rename all the things 2019-05-09 15:59:23 +00:00
Bobby Brennan
bd2da76c56 Add explanations for each error
first pass

add info links to dashboard
2019-05-08 16:13:29 +00:00
Bobby Brennan
520d6572e4 Add ability to audit a directory of files (#70)
* refactor kubernetes API usage

* add ability to audit directory

* refactor a bit

* fix return statement

* fix main.go

* add ability to audit multiple resources in a single file
2019-05-07 12:42:57 -04:00
Bobby Brennan
807955d970 fix expand toggling 2019-05-07 15:49:08 +00:00
Bobby Brennan
f6d4264b42 Factor dashboard template into parts
factor out dashboard body into separate template

more refactoring

template out header and footer

add comments

add comments

add preamble
2019-05-07 13:28:11 +00:00
Bobby Brennan
244a1dedcd DeploymentResult -> ControllerResult 2019-05-02 19:18:29 +00:00
Bobby Brennan
1282359b04 create DeploymentResult type 2019-05-02 18:07:01 +00:00
Rob Scott
40e1c1f827 adding image pull policy validation 2019-05-01 16:00:59 -04:00
Rob Scott
0db0e2947f some additional cleanup 2019-04-29 10:58:30 -04:00
Rob Scott
4fe39e7b74 improved logging, better webhook output, webhook deploy fixes 2019-04-26 17:35:14 -04:00
Rob Scott
3e1906d3f1 separating webhook and dashboard k8s deploy config, moving assets into dashboard pkg, reworking docker image to actually make use of packr 2019-04-26 14:57:55 -04:00
Bobby Brennan
55363fd7a8 Add categories to dashboard
add version, cluster stats to output

add comment

update UI

changes to summary aggregation

add category summaries to dash
2019-04-23 15:07:50 +00:00
Rob Scott
674696c7e1 restructuring config to match up with docs 2019-04-22 12:58:25 -04:00
Bobby Brennan
3ce7e12082 Add version, cluster stats to output and UI (#61)
* add version, cluster stats to output

* add comment

* fix tests

* add categories to messages

* fix tests

* update UI

* remove empty category totals field

* k8smeta -> metav1
2019-04-22 12:01:18 -04:00
Bobby Brennan
54a4f92695 Pack static assets into packr box for portability
copy config.yaml to docker image

enable external usage of dashboard package

gofmt

fix comment

use packr for assets

add gobuffalo/packr dependency

add dependencies

fix pointer issues

add output-file option
2019-04-18 18:25:16 +00:00
Rob Scott
495a74d23e adding favicon 2019-04-17 13:26:09 -04:00
Rob Scott
0a4050d6b4 more dashboard updates, including concepty of weather 2019-04-17 11:00:11 -04:00
Rob Scott
6f06a5ef27 added weighted score + letter grades + lots of related dashboard updates 2019-04-15 17:59:41 -04:00
Rob Scott
d363eed95f some dashboard cleanup 2019-04-15 11:15:55 -04:00