api

Dec 10, 2024

Changes in this version

type ImageData

+ ManifestList []byte

Oct 29, 2024

Changes in this version

type EngineResponse

+ func (er EngineResponse) EmitsWarning() bool

+ func (er EngineResponse) WithWarning() EngineResponse

type PolicyContext

+ SetOperation func(op kyvernov1.AdmissionOperation) error

type PolicyExceptionSelector

+ Find func(string, string) ([]*kyvernov2.PolicyException, error)

type RemoteClient

+ NameOptions func() []name.Option

type RuleResponse

+ func (r *RuleResponse) Exceptions() []kyvernov2.PolicyException

+ func (r *RuleResponse) GeneratedResources() []*unstructured.Unstructured

+ func (r *RuleResponse) Properties() map[string]string

+ func (r RuleResponse) WithExceptions(exceptions []kyvernov2.PolicyException) *RuleResponse

+ func (r RuleResponse) WithGeneratedResources(resource []*unstructured.Unstructured) *RuleResponse

+ func (r RuleResponse) WithProperties(m map[string]string) *RuleResponse

Oct 22, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Oct 14, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Sep 26, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Sep 12, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Jan 16, 2025 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Sep 27, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Sep 26, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Sep 18, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Sep 16, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Jul 12, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Jul 11, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Jul 9, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Jun 17, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Jun 14, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Jun 11, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

May 31, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

May 30, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

May 23, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

May 23, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

May 22, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

May 21, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

May 3, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

May 1, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Apr 22, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Changes in this version

type GenericPolicy

+ AsKyvernoPolicy func() kyvernov1.PolicyInterface

+ AsValidatingAdmissionPolicy func() *v1alpha1.ValidatingAdmissionPolicy

+ GetAPIVersion func() string

type ImageVerificationMetadata

+ func (ivm *ImageVerificationMetadata) ImageVerificationStatus(image string) ImageVerificationMetadataStatus

+ type ImageVerificationMetadataStatus string

+ const ImageVerificationFail

+ const ImageVerificationPass

+ const ImageVerificationSkip

type KyvernoPolicy

+ func (p *KyvernoPolicy) AsKyvernoPolicy() kyvernov1.PolicyInterface

+ func (p *KyvernoPolicy) AsValidatingAdmissionPolicy() *v1alpha1.ValidatingAdmissionPolicy

+ func (p *KyvernoPolicy) GetAPIVersion() string

type PolicyContext

+ SetResources func(oldResource, newResource unstructured.Unstructured) error

type RemoteClient

+ Options func(context.Context) ([]gcrremote.Option, error)

type RuleResponse

+ func (r *RuleResponse) EmitWarning() bool

+ func (r *RuleResponse) ValidatingAdmissionPolicyBinding() *v1alpha1.ValidatingAdmissionPolicyBinding

+ func (r RuleResponse) WithBinding(binding *v1alpha1.ValidatingAdmissionPolicyBinding) *RuleResponse

+ func (r RuleResponse) WithEmitWarning(emitWarning bool) *RuleResponse

type ValidatingAdmissionPolicy

+ func (p *ValidatingAdmissionPolicy) AsKyvernoPolicy() kyvernov1.PolicyInterface

+ func (p *ValidatingAdmissionPolicy) AsValidatingAdmissionPolicy() *v1alpha1.ValidatingAdmissionPolicy

+ func (p *ValidatingAdmissionPolicy) GetAPIVersion() string

Apr 17, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Apr 4, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Mar 30, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Mar 15, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Mar 8, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Mar 5, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Feb 29, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Feb 28, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Feb 26, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Feb 13, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Feb 5, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

May 9, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Jan 19, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Jan 5, 2024 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Dec 28, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Changes in this version

type PolicyContext

+ OldPolicyContext func() (PolicyContext, error)

Dec 22, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Nov 28, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Nov 10, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Nov 9, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Nov 6, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Nov 6, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Nov 3, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Oct 24, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Oct 20, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Oct 13, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Oct 12, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Sep 27, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Sep 25, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Sep 22, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Sep 20, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Dec 20, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Nov 28, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Nov 3, 2023 GO-2024-3230

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Changes in this version

+ type AuthClient interface

+ CanI func(ctx context.Context, kind, namespace, verb, subresource, user string) (bool, string, error)

+ type Client interface

+ type GenericPolicy interface

+ GetAnnotations func() map[string]string

+ GetKind func() string

+ GetName func() string

+ GetNamespace func() string

+ GetPolicy func() interface{}

+ GetResourceVersion func() string

+ GetType func() PolicyType

+ IsNamespaced func() bool

+ MetaObject func() metav1.Object

+ func NewKyvernoPolicy(pol kyvernov1.PolicyInterface) GenericPolicy

+ func NewValidatingAdmissionPolicy(pol v1alpha1.ValidatingAdmissionPolicy) GenericPolicy

+ type ImageData struct

+ Config []byte

+ Identifier string

+ Image string

+ Manifest []byte

+ Registry string

+ Repository string

+ ResolvedImage string

+ type ImageDataClient interface

+ FetchImageDescriptor func(context.Context, string) (*gcrremote.Descriptor, error)

+ ForRef func(ctx context.Context, ref string) (*ImageData, error)

+ type KeychainClient interface

+ Keychain func() authn.Keychain

+ type KyvernoPolicy struct

+ func (p *KyvernoPolicy) GetAnnotations() map[string]string

+ func (p *KyvernoPolicy) GetKind() string

+ func (p *KyvernoPolicy) GetName() string

+ func (p *KyvernoPolicy) GetNamespace() string

+ func (p *KyvernoPolicy) GetPolicy() interface{}

+ func (p *KyvernoPolicy) GetResourceVersion() string

+ func (p *KyvernoPolicy) GetType() PolicyType

+ func (p *KyvernoPolicy) IsNamespaced() bool

+ func (p *KyvernoPolicy) MetaObject() metav1.Object

+ type PolicyType string

+ const KyvernoPolicyType

+ const ValidatingAdmissionPolicyType

+ type RawClient interface

+ RawAbsPath func(ctx context.Context, path string, method string, dataReader io.Reader) ([]byte, error)

+ type RegistryClient interface

+ type RegistryClientFactory interface

+ GetClient func(ctx context.Context, creds *kyvernov1.ImageRegistryCredentials) (RegistryClient, error)

+ type RemoteClient interface

+ BuildCosignRemoteOption func(context.Context) (cosignremote.Option, error)

+ BuildGCRRemoteOption func(context.Context) ([]gcrremote.Option, error)

+ type Resource struct

+ Group string

+ Resource string

+ SubResource string

+ Unstructured unstructured.Unstructured

+ Version string

+ type ResourceClient interface

+ GetNamespace func(ctx context.Context, name string, opts metav1.GetOptions) (*corev1.Namespace, error)

+ GetResource func(ctx context.Context, apiVersion, kind, namespace, name string, ...) (*unstructured.Unstructured, error)

+ GetResources func(ctx context.Context, group, version, kind, subresource, namespace, name string) ([]Resource, error)

+ IsNamespaced func(group, version, kind string) (bool, error)

+ ListResource func(ctx context.Context, apiVersion string, kind string, namespace string, ...) (*unstructured.UnstructuredList, error)

+ type ValidatingAdmissionPolicy struct

+ func (p *ValidatingAdmissionPolicy) GetAnnotations() map[string]string

+ func (p *ValidatingAdmissionPolicy) GetKind() string

+ func (p *ValidatingAdmissionPolicy) GetName() string

+ func (p *ValidatingAdmissionPolicy) GetNamespace() string

+ func (p *ValidatingAdmissionPolicy) GetPolicy() interface{}

+ func (p *ValidatingAdmissionPolicy) GetResourceVersion() string

+ func (p *ValidatingAdmissionPolicy) GetType() PolicyType

+ func (p *ValidatingAdmissionPolicy) IsNamespaced() bool

+ func (p *ValidatingAdmissionPolicy) MetaObject() metav1.Object

Oct 31, 2023 GO-2023-2340 +1 more

  GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Aug 11, 2023 GO-2023-2340 +1 more

  GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Jul 28, 2023 GO-2023-2340 +1 more

  GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Jul 6, 2023 GO-2023-2340 +1 more

  GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Changes in this version

+ type Initializer = func(jsonContext enginecontext.Interface) error

Jun 29, 2023 GO-2023-2340 +1 more

  GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

May 30, 2023 GO-2023-2340 +1 more

  GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Changes in this version

+ const ImageVerifyAnnotationKey

+ func LoadAPIData(ctx context.Context, jp jmespath.Interface, logger logr.Logger, ...) error

+ func LoadConfigMap(ctx context.Context, logger logr.Logger, entry kyvernov1.ContextEntry, ...) error

+ func LoadImageData(ctx context.Context, jp jmespath.Interface, rclient registryclient.Client, ...) error

+ func LoadVariable(logger logr.Logger, jp jmespath.Interface, entry kyvernov1.ContextEntry, ...) (err error)

+ type ConfigmapResolver = NamespacedResourceResolver[*corev1.ConfigMap]

+ type ContextLoader interface

+ Load func(ctx context.Context, jp jmespath.Interface, client dclient.Interface, ...) error

+ type ContextLoaderFactory = func(policy kyvernov1.PolicyInterface, rule kyvernov1.Rule) ContextLoader

+ func DefaultContextLoaderFactory(cmResolver ConfigmapResolver) ContextLoaderFactory

+ type Engine interface

+ ApplyBackgroundChecks func(ctx context.Context, policyContext PolicyContext) EngineResponse

+ ContextLoader func(policy kyvernov1.PolicyInterface, rule kyvernov1.Rule) EngineContextLoader

+ Generate func(ctx context.Context, policyContext PolicyContext) EngineResponse

+ Mutate func(ctx context.Context, policyContext PolicyContext) EngineResponse

+ Validate func(ctx context.Context, policyContext PolicyContext) EngineResponse

+ VerifyAndPatchImages func(ctx context.Context, policyContext PolicyContext) (EngineResponse, ImageVerificationMetadata)

+ type EngineContextLoader = func(ctx context.Context, contextEntries []kyvernov1.ContextEntry, ...) error

+ type EngineContextLoaderFactory = func(policy kyvernov1.PolicyInterface, rule kyvernov1.Rule) EngineContextLoader

+ type EngineResponse struct

+ PatchedResource unstructured.Unstructured

+ PolicyResponse PolicyResponse

+ Resource unstructured.Unstructured

+ func NewEngineResponse(resource unstructured.Unstructured, policy kyvernov1.PolicyInterface, ...) EngineResponse

+ func NewEngineResponseFromPolicyContext(policyContext PolicyContext) EngineResponse

+ func (er *EngineResponse) NamespaceLabels() map[string]string

+ func (er *EngineResponse) Policy() kyvernov1.PolicyInterface

+ func (er EngineResponse) GetFailedRules() []string

+ func (er EngineResponse) GetFailedRulesWithErrors() []string

+ func (er EngineResponse) GetPatches() [][]byte

+ func (er EngineResponse) GetResourceSpec() ResourceSpec

+ func (er EngineResponse) GetSuccessRules() []string

+ func (er EngineResponse) GetValidationFailureAction() kyvernov1.ValidationFailureAction

+ func (er EngineResponse) IsEmpty() bool

+ func (er EngineResponse) IsError() bool

+ func (er EngineResponse) IsFailed() bool

+ func (er EngineResponse) IsNil() bool

+ func (er EngineResponse) IsOneOf(status ...RuleStatus) bool

+ func (er EngineResponse) IsSkipped() bool

+ func (er EngineResponse) IsSuccessful() bool

+ func (er EngineResponse) WithNamespaceLabels(namespaceLabels map[string]string) EngineResponse

+ func (er EngineResponse) WithPatchedResource(patchedResource unstructured.Unstructured) EngineResponse

+ func (er EngineResponse) WithPolicy(policy kyvernov1.PolicyInterface) EngineResponse

+ func (er EngineResponse) WithPolicyResponse(policyResponse PolicyResponse) EngineResponse

+ func (r EngineResponse) WithStats(stats ExecutionStats) EngineResponse

+ type ExcludeFunc = func(kind, namespace, name string) bool

+ type ExecutionStats struct

+ func NewExecutionStats(startTime, endTime time.Time) ExecutionStats

+ func (s ExecutionStats) ProcessingTime() time.Duration

+ func (s ExecutionStats) Time() time.Time

+ func (s ExecutionStats) Timestamp() int64

+ type ImageVerificationMetadata struct

+ Data map[string]bool

+ func ParseImageMetadata(jsonData string) (*ImageVerificationMetadata, error)

+ func (ivm *ImageVerificationMetadata) Add(image string, verified bool)

+ func (ivm *ImageVerificationMetadata) IsEmpty() bool

+ func (ivm *ImageVerificationMetadata) IsVerified(image string) bool

+ func (ivm *ImageVerificationMetadata) Merge(other ImageVerificationMetadata)

+ func (ivm *ImageVerificationMetadata) Patches(hasAnnotations bool, log logr.Logger) ([][]byte, error)

+ type NamespacedResourceResolver interface

+ Get func(ctx context.Context, namespace string, name string) (T, error)

+ func NewNamespacedResourceResolver(resolvers ...NamespacedResourceResolver[T]) (NamespacedResourceResolver[T], error)

+ type NamespacedResourceSelector interface

+ List func(selector labels.Selector) (ret []T, err error)

+ type PodSecurityChecks struct

+ Checks []pssutils.PSSCheckResult

+ Level api.Level

+ Version string

+ type PolicyContext interface

+ AdmissionInfo func() kyvernov1beta1.RequestInfo

+ AdmissionOperation func() bool

+ Copy func() PolicyContext

+ Element func() unstructured.Unstructured

+ JSONContext func() enginecontext.Interface

+ NamespaceLabels func() map[string]string

+ NewResource func() unstructured.Unstructured

+ OldResource func() unstructured.Unstructured

+ Operation func() kyvernov1.AdmissionOperation

+ Policy func() kyvernov1.PolicyInterface

+ RequestResource func() metav1.GroupVersionResource

+ ResourceKind func() (schema.GroupVersionKind, string)

+ SetElement func(element unstructured.Unstructured)

+ type PolicyExceptionSelector = NamespacedResourceSelector[*kyvernov2alpha1.PolicyException]

+ type PolicyResponse struct

+ Rules []RuleResponse

+ func NewPolicyResponse() PolicyResponse

+ func (pr *PolicyResponse) Add(stats ExecutionStats, responses ...RuleResponse)

+ func (pr *PolicyResponse) RulesAppliedCount() int

+ func (pr *PolicyResponse) RulesErrorCount() int

+ func (pr *PolicyResponse) Stats() PolicyStats

+ type PolicyStats struct

+ func (ps *PolicyStats) RulesAppliedCount() int

+ func (ps *PolicyStats) RulesErrorCount() int

+ type ResourceSpec struct

+ APIVersion string

+ Kind string

+ Name string

+ Namespace string

+ UID string

+ func (rs ResourceSpec) String() string

+ type RuleResponse struct

+ func NewRuleResponse(name string, ruleType RuleType, msg string, status RuleStatus) *RuleResponse

+ func RuleError(name string, ruleType RuleType, msg string, err error) *RuleResponse

+ func RuleFail(name string, ruleType RuleType, msg string) *RuleResponse

+ func RulePass(name string, ruleType RuleType, msg string) *RuleResponse

+ func RuleSkip(name string, ruleType RuleType, msg string) *RuleResponse

+ func RuleWarn(name string, ruleType RuleType, msg string) *RuleResponse

+ func (r *RuleResponse) Exception() *kyvernov2alpha1.PolicyException

+ func (r *RuleResponse) GeneratedResource() unstructured.Unstructured

+ func (r *RuleResponse) HasStatus(status ...RuleStatus) bool

+ func (r *RuleResponse) IsException() bool

+ func (r *RuleResponse) Message() string

+ func (r *RuleResponse) Name() string

+ func (r *RuleResponse) PatchedTarget() (*unstructured.Unstructured, metav1.GroupVersionResource, string)

+ func (r *RuleResponse) Patches() [][]byte

+ func (r *RuleResponse) PodSecurityChecks() *PodSecurityChecks

+ func (r *RuleResponse) RuleType() RuleType

+ func (r *RuleResponse) Stats() ExecutionStats

+ func (r *RuleResponse) Status() RuleStatus

+ func (r *RuleResponse) String() string

+ func (r RuleResponse) WithException(exception *kyvernov2alpha1.PolicyException) *RuleResponse

+ func (r RuleResponse) WithGeneratedResource(resource unstructured.Unstructured) *RuleResponse

+ func (r RuleResponse) WithPatchedTarget(patchedTarget *unstructured.Unstructured, gvr metav1.GroupVersionResource, ...) *RuleResponse

+ func (r RuleResponse) WithPatches(patches ...[]byte) *RuleResponse

+ func (r RuleResponse) WithPodSecurityChecks(checks PodSecurityChecks) *RuleResponse

+ func (r RuleResponse) WithStats(stats ExecutionStats) RuleResponse

+ type RuleStatus string

+ const RuleStatusError

+ const RuleStatusFail

+ const RuleStatusPass

+ const RuleStatusSkip

+ const RuleStatusWarn

+ type RuleType string

+ const Generation

+ const ImageVerify

+ const Mutation

+ const Validation

May 23, 2023 GO-2023-1819 +2 more

  GO-2023-1819: Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno

  GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

May 10, 2023 GO-2023-1819 +2 more

  GO-2023-1819: Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno

  GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Apr 14, 2023 GO-2023-1819 +2 more

  GO-2023-1819: Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno

  GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

Apr 6, 2023 GO-2023-1819 +2 more

  GO-2023-1819: Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno

  GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

  GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno