Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Simplified CEL Expression for disallow-host-process policy #1139

Merged
merged 15 commits into from
Aug 28, 2024
Merged

Simplified CEL Expression for disallow-host-process policy #1139

merged 15 commits into from
Aug 28, 2024

Conversation

epasham
Copy link
Contributor

@epasham epasham commented Aug 27, 2024

Related Issue(s)

Closes #1137

Description

CEL Expression is simplified with optionals

Checklist

  • [] I have read the policy contribution guidelines.
  • [] I have added test manifests and resources covering both positive and negative tests that prove this policy works as intended.
  • [] I have added the artifacthub-pkg.yml file and have verified it is complete and correct.

@ekambaram
disallow-privileged-containers policy is simplified
c874d40 
Signed-off-by: epasham <[email protected]>
@ekambaram
digest value is updated in artifacthub-pkg
2912dc2 
Signed-off-by: epasham <[email protected]>
@ekambaram
disallow-capabilities policy is simplified
1ac9975 
Signed-off-by: epasham <[email protected]>
@ekambaram
digest value is updated
09a6e57 
Signed-off-by: epasham <[email protected]>
@ekambaram
disallow-proc-mount policy is simplified
957c7ac 
Signed-off-by: epasham <[email protected]>
@ekambaram
disallow-host-namespaces policy is simplified
ff14abd 
Signed-off-by: epasham <[email protected]>
@ekambaram
disallow-host-path is updated
1e06a8e 
Signed-off-by: epasham <[email protected]>
@ekambaram
disallow-host-ports-range policy is simplified
2f6b11c 
Signed-off-by: epasham <[email protected]>
@ekambaram
removed duplicate digest
4920e4b 
Signed-off-by: epasham <[email protected]>
@ekambaram
removed duplicate digest from artifact pkg file
c42117c 
Signed-off-by: epasham <[email protected]>
@ekambaram
restrict-seccomp policy is simplified
de7d93c 
Signed-off-by: epasham <[email protected]>
@ekambaram
restrict-sysctls policy is simplified
1defa05 
Signed-off-by: epasham <[email protected]>
@ekambaram
disallow-host-process is simplified
b597d25 
Signed-off-by: epasham <[email protected]>
@ekambaram
Merge remote-tracking branch 'upstream/main' into main
00c4546
@epasham epasham mentioned this pull request Aug 27, 2024
Closed
2 tasks
realshuting
realshuting approved these changes Aug 27, 2024
View reviewed changes
Copy link
Member

@realshuting realshuting left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@JimBugwadia JimBugwadia merged commit c973672 into kyverno:main Aug 28, 2024
225 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@realshuting realshuting realshuting approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

[Sample] disallow-host-process: Simplify CEL expressions using optional
4 participants
@epasham @realshuting @JimBugwadia @ekambaram