Jordan Doig
9d68ee2359
Merge remote-tracking branch 'origin/master' into jd/out-of-control
2020-12-28 12:40:23 -07:00
skatika
86b3ab5186
Revert nil slice declarations
2020-12-22 14:27:53 -05:00
skatika
dd2976794a
Implement namespace and container exemptions. Also refactoring according to gofmt
2020-12-18 09:50:04 -05:00
skatika
fdd30717e5
Remove unused parameter
2020-12-17 09:54:29 -05:00
skatika
e57668fc75
Fix typos
2020-12-16 17:17:43 -05:00
Jordan Doig
550447234a
ControllerResult to Result
2020-12-16 13:32:08 -07:00
jordandoig
717d9b2630
PodResult to pointer
2020-12-16 12:11:19 -07:00
baderbuddy
7c9f01639b
Update dependencies ( #400 )
...
* Start working on updating dependencies:
* Fix webhook
* Rollback jsonschema update
* Checkin new config
* Fix run as root
* Update versions of kind
* Fix typo in kind URL
* Fix kind config
* Add csr permissions
* Fix weird image thing
* Fixed certificates
* Add to logging
* Approve cert manually
* Fix approval
* Add cert script
* Fix deployment
* Add requests/limits
* Wait if certificate doesn't exist yet
* Add check for file size
* Add variable
* Try a different imagE
* Fix command
* Update certificate logic
* Add healthz
* Don't check cert size
* Remove stat
* Fix vet
* Put in change that makes no sense
* Fix cert names
* Roll back
* Try changing config
* Add logging for each request
* Cleanup code some
* Remove bad deployments
* Fix client injection
* Update timeout
* Add logging
* Fixed e2e webhook tests
* Add permissions for approval
* Fix permissions for CSR
* Remove logging code
* Remove refresh certs file
* Fix merge issues
* Update deployments
* Try beta of admission controller config
* Target 1.15 for testing
* Add beta versions of resourceS
* Lower webhook timeout
* Refactor out a method
* Fix up PR issues
* Fix more tabs
* Remove unnecessary messageS
* Fix go.sum
* Fix go.sum
2020-09-11 08:53:14 -04:00
baderbuddy
d50d9c81f8
Add the capability for controller level checks ( #285 )
...
* Add controller level checks
* Add check for multipleReplicas
* Fixed spec
* Add controller level check
* Move controller schema checks to their own function.
2020-05-18 14:57:35 -04:00
Robert Brennan
6792fba91f
Delete controllers package ( #270 )
...
* rename root fs check
* speed up docker build
* refactor webhook to be more generic
* delete controllers pkg
* revert deploy
* fix example config
* remove controllersToScan config
* fix lint error
* fix webhook name
* FileSystem -> Filesystem
* update deps
* skip node owners
* clean up meta tracking
Co-authored-by: Robert Brennan <bobby.brennan@gmail.com >
2020-04-27 10:43:02 -04:00
Bader Boland
3c46f405a9
Cleanup SupportedControllers
2020-03-25 16:50:12 -04:00
Bader Boland
a5828a2d3b
Fix tests
2020-03-25 14:23:18 -04:00
Bader Boland
5769acf820
deduplicate results right away
2020-03-25 13:25:26 -04:00
Bader Boland
68fe23018a
Feedback from PR
2020-03-23 09:27:36 -04:00
Bader Boland
fb0d7c5d82
Add additional logging
2020-03-17 16:19:58 -04:00
Bader Boland
7fdebfc4db
Fix tests
2020-03-17 09:19:33 -04:00
Bader Boland
bb34be7e02
Dynamically retrieve parents
2020-03-16 16:41:16 -04:00
Bader Boland
31de106ba8
Added check for parent and rollup to parent.
2020-01-31 14:10:53 -05:00
Robert Brennan
dfa34e1880
explicitly handle schema validation errors
2020-01-14 14:50:35 +00:00
Robert Brennan
23bf4c81b0
refactor ValidatePod, add NakedPod type
2020-01-14 14:50:34 +00:00
Robert Brennan
51cd3523fc
messages -> results
2020-01-14 14:50:34 +00:00
Robert Brennan
83a7448c99
add namespaces to controllers
2020-01-14 14:50:34 +00:00
Robert Brennan
d228acfe71
add object meta to controller interface
2020-01-14 14:50:34 +00:00
Robert Brennan
49c540e993
type -> kind
2020-01-14 14:50:34 +00:00
Robert Brennan
2770be643f
Refactor validation
2020-01-14 14:50:34 +00:00
Robert Brennan
d80d326f7c
swap out host_network for a schema-based check
2019-12-23 20:32:38 +00:00
Robert Brennan
67ab987f7e
Add support for annotation-based exemptions ( #227 )
...
* add controllers_to_scan to example config-full
* add support for annotation-based exemptions
* fix lint errors
* add docs
2019-12-06 08:29:30 -05:00
Robert Brennan
22ab851681
skip health checks for jobs, cronjobs, and initContainers ( #216 )
2019-11-06 13:31:17 -05:00
Robert Brennan
2b15f11d57
Add exemptions to config ( #204 )
...
* first pass at adding exemptions
* Update config.yaml
* make config_test more reliable
* add flag to disallow exemptions in dashboard
* add disallow-exemptions flag to CLI
* add comments
* fix exemptions flag
* fix alert on dashboard
* minor style changes
2019-10-23 17:14:03 -04:00
Nick Huanca
75f70352ba
Additional Pod Controller Scans ( #166 )
...
**Changes**
- Refactored the way controllers work to be an interface
- Added configurable controllers to include in scans
- Added daemonsets, jobs and cronjobs in scans
- Added `ReplicationController` type controllers to the supported list
- Adjusted logic for failed YAML parsing to bubble up errors
- Added better logic for calculating summaries on cluster wide results
- Relocated responsibilities for counting types into validators vs spreading it around more packages
- Fixed bug where cronjob parsing was using wrong KIND
- Added fixtures for mocking new controller types
- Added example yamls to test scanning files
- Added functions to NamespacedResult(s) to reduce code complexity deep set iterations
- Refactored how results get added to namespacedresults so adding more later is easier
- Minor signature changes for interface implementing structs for controllers
2019-07-31 15:56:27 -06:00
Bobby Brennan
20bd32afb6
Rename ReactiveOps to Fairwinds ( #180 )
...
* Rename ReactiveOps to Fairwinds
* Rename ReactiveOps to Fairwinds
2019-07-30 15:29:09 -04:00
Bobby Brennan
ebfb4ea9a1
Add support for stateful sets ( #145 )
2019-06-13 07:59:01 -06:00