Feature/secure installation (#466)

* Removed kyverno installation * Removed kyverno installation * add enabledPolicyset field * add kyverno cr * add webhook * update chart.yaml * update chart.yaml
nirmata · Jan 5, 2025 · 36e0877 · 36e0877
1 parent b4b250a
commit 36e0877
Show file tree

Hide file tree

Showing 89 changed files with 119 additions and 50,842 deletions.
diff --git a/charts/enterprise-kyverno-operator-crd/Chart.yaml b/charts/enterprise-kyverno-operator-crd/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: nirmata-kyverno-operator-crd
 description: Helm Chart for Enterprise Kyverno Operator
 type: application
-version: v0.5.0
+version: v0.5.1
 appVersion: v0.3.3
 
 icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png

diff --git a/charts/enterprise-kyverno-operator-crd/templates/security.nirmata.io_kyvernoes.yaml b/charts/enterprise-kyverno-operator-crd/templates/security.nirmata.io_kyvernoes.yaml
@@ -3,22 +3,19 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.10.0
-  labels:
-    app.kubernetes.io/part-of: nirmata-kyverno-operator
-  creationTimestamp: null
+    controller-gen.kubebuilder.io/version: v0.15.0
   name: kyvernoconfigs.security.nirmata.io
 spec:
   group: security.nirmata.io
   names:
     kind: KyvernoConfig
     listKind: KyvernoConfigList
     plural: kyvernoconfigs
-    singular: kyvernoconfig
     shortNames:
     - kycfg
     - kyvernocfg
     - kyvernoconf
+    singular: kyvernoconfig
   scope: Namespaced
   versions:
   - additionalPrinterColumns:
@@ -41,53 +38,27 @@ spec:
     name: v1alpha1
     schema:
       openAPIV3Schema:
-        description: Kyverno is the Schema for the kyvernoconfigs API
+        description: KyvernoConfig is the Schema for the kyvernoconfig API
         properties:
           apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            description: |-
+              APIVersion defines the versioned schema of this representation of an object.
+              Servers should convert recognized schemas to the latest internal value, and
+              may reject unrecognized values.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
             type: string
           kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            description: |-
+              Kind is a string value representing the REST resource this object represents.
+              Servers may infer this from the endpoint the client submits requests to.
+              Cannot be updated.
+              In CamelCase.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
             type: string
           metadata:
             type: object
           spec:
-            description: KyvernoSpec defines the desired state of Kyverno
-            properties:
-              apiKey:
-                type: string
-              helm:
-                additionalProperties:
-                  type: object
-                  x-kubernetes-preserve-unknown-fields: true
-                description: Finer customizations for each component are provided
-                  in a generic object structure, typically matching the value.yaml
-                  of individual components
-                type: object
-              licenseKey:
-                type: string
-              namespace:
-                default: kyverno
-                enum:
-                - kyverno
-                type: string
-              replicas:
-                default: 1
-                format: int32
-                type: integer
-              repository:
-                default: ghcr.io/nirmata
-                type: string
-              secrets:
-                description: Secrets storing licenseKey, apiKey
-                type: string
-              version:
-                default: v1.10.4-n4k.nirmata.1
-                type: string
+            description: KyvernoConfigSpec defines the desired state of Kyverno
             type: object
           status:
             description: KyvernoStatus defines the observed state of Kyverno
@@ -100,37 +71,37 @@ spec:
                     operational state.
                   properties:
                     lastTransitionTime:
-                      description: Last time the condition transitioned from one status
-                        to another. This should be when the underlying condition changed.
-                        If that is not known, then using the time when the API field
-                        changed is acceptable.
+                      description: |-
+                        Last time the condition transitioned from one status to another.
+                        This should be when the underlying condition changed. If that is not known, then using the time when
+                        the API field changed is acceptable.
                       format: date-time
                       type: string
                     message:
-                      description: A human readable message indicating details about
-                        the transition. This field may be empty.
+                      description: |-
+                        A human readable message indicating details about the transition.
+                        This field may be empty.
                       type: string
                     reason:
-                      description: The reason for the condition's last transition
-                        in CamelCase. The specific API may choose whether or not this
-                        field is considered a guaranteed API. This field may not be
-                        empty.
+                      description: |-
+                        The reason for the condition's last transition in CamelCase.
+                        The specific API may choose whether or not this field is considered a guaranteed API.
+                        This field may not be empty.
                       type: string
                     severity:
-                      description: Severity provides an explicit classification of
-                        Reason code, so the users or machines can immediately understand
-                        the current situation and act accordingly. The Severity field
-                        MUST be set only when Status=False.
+                      description: |-
+                        Severity provides an explicit classification of Reason code, so the users or machines can immediately
+                        understand the current situation and act accordingly.
+                        The Severity field MUST be set only when Status=False.
                       type: string
                     status:
                       description: Status of the condition, one of True, False, Unknown.
                       type: string
                     type:
-                      description: Type of condition in CamelCase or in foo.example.com/CamelCase.
-                        Many .condition.type values are consistent across resources
-                        like Available, but because arbitrary conditions can be useful
-                        (see .node.status.conditions), the ability to deconflict is
-                        important.
+                      description: |-
+                        Type of condition in CamelCase or in foo.example.com/CamelCase.
+                        Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+                        can be useful (see .node.status.conditions), the ability to deconflict is important.
                       type: string
                   required:
                   - lastTransitionTime
@@ -147,6 +118,13 @@ spec:
               lastUpdated:
                 format: date-time
                 type: string
+              namespace:
+                type: string
+              replicas:
+                format: int32
+                type: integer
+              version:
+                type: string
             required:
             - isHA
             - isRunning

diff --git a/charts/enterprise-kyverno-operator/Chart.yaml b/charts/enterprise-kyverno-operator/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: nirmata-kyverno-operator
 description: Helm Chart for Enterprise Kyverno Operator
 type: application
-version: v0.5.5-rc2
-appVersion: v0.4.4
+version: v0.5.5-rc3
+appVersion: v0.4.5-rc1
 icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
 keywords:
 - kubernetes