Merge branch 'main' into chainsaw

Signed-off-by: Charles-Edouard Brétéché <[email protected]>
kyverno · Dec 3, 2023 · 9ca3a4a · 9ca3a4a
2 parents 628bbe3 + 68f842a
commit 9ca3a4a
Show file tree

Hide file tree

Showing 13 changed files with 17 additions and 18 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -31,7 +31,7 @@ jobs:
           - aws
           - best-practices
           - castai
-          - cert-manager
+          # - cert-manager
           - consul
           - external-secret-operator
           - flux
@@ -59,7 +59,7 @@ jobs:
           # - traefik
           # - velero
     runs-on: ubuntu-latest
-    name: ${{ matrix.k8s-version.name }} - ${{ matrix.tests }}
+    name: kuttl - ${{ matrix.k8s-version.name }} - ${{ matrix.tests }}
     steps:
       - name: Checkout
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
@@ -137,7 +137,7 @@ jobs:
           # - traefik
           # - velero
     runs-on: ubuntu-latest
-    name: ${{ matrix.k8s-version.name }} - ${{ matrix.tests }}
+    name: chainsaw - ${{ matrix.k8s-version.name }} - ${{ matrix.tests }}
     steps:
       - name: Checkout
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
@@ -176,14 +176,12 @@ jobs:
       - name: Install Chainsaw
         uses: kyverno/chainsaw/.github/actions/install@5ca138ff5ad87bfb2c41e52cde8c00154756e4c5 # v0.0.7
         with:
-          release: v0.0.7
+          release: v0.0.8-alpha.1
       - name: Test with Chainsaw
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -e
-          ./.tools/kubectl-kuttl test ./${{ matrix.tests }} --config ./kuttl-test.yaml
-
           chainsaw test --config .chainsaw.yaml --test-dir ./${{ matrix.tests }} --no-color=false
       - name: Debug failure
         if: failure()

diff --git a/.hack/update-artifacthub-pkg.sh b/.hack/update-artifacthub-pkg.sh
@@ -20,6 +20,7 @@ do
     echo "  Digest: $DIGEST"
     $SED -i "s/^digest:.*/digest: $DIGEST/" $FILE
     if ! grep -q "createdAt:" "$FILE"; then
-        echo "createdAt: \"$(date -u +%FT%T)\"" >> $FILE
+        NOW=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+        echo "createdAt: \"${NOW}\"" >> $FILE
     fi
 done
diff --git a/pod-security-cel/baseline/disallow-capabilities/artifacthub-pkg.yml b/pod-security-cel/baseline/disallow-capabilities/artifacthub-pkg.yml
@@ -20,4 +20,4 @@ annotations:
   kyverno/kubernetesVersion: "1.22-1.23"
   kyverno/subject: "Pod"
 digest: 6a0ace9b1f5b3f25b34117db4936ba32c4fcbbdfe3d0dba9e61b6152dede3a53
-createdAt: "2023-12-02T23:26:55"
+createdAt: "2023-12-03T00:22:33Z"
diff --git a/pod-security-cel/baseline/disallow-host-namespaces/artifacthub-pkg.yml b/pod-security-cel/baseline/disallow-host-namespaces/artifacthub-pkg.yml
@@ -20,4 +20,4 @@ annotations:
   kyverno/kubernetesVersion: "1.22-1.23"
   kyverno/subject: "Pod"
 digest: 82a3924f4d25ed9bfc8e49395c7b0e8922f5ad0573830747dd3cf96dfb93ad7a
-createdAt: "2023-12-02T23:26:56"
+createdAt: "2023-12-03T00:22:34Z"
diff --git a/pod-security-cel/baseline/disallow-host-path/artifacthub-pkg.yml b/pod-security-cel/baseline/disallow-host-path/artifacthub-pkg.yml
@@ -20,4 +20,4 @@ annotations:
   kyverno/kubernetesVersion: "1.22-1.23"
   kyverno/subject: "Pod,Volume"
 digest: 8f309db940eca3692840c78e2662ff0c25fa718cf0f468b58cdfd4c3d1011274
-createdAt: "2023-12-02T23:26:56"
+createdAt: "2023-12-03T00:22:34Z"
diff --git a/pod-security-cel/baseline/disallow-host-ports-range/artifacthub-pkg.yml b/pod-security-cel/baseline/disallow-host-ports-range/artifacthub-pkg.yml
@@ -20,4 +20,4 @@ annotations:
   kyverno/kubernetesVersion: "1.22-1.23"
   kyverno/subject: "Pod"
 digest: 5162e3082e39a94078ee5137eb95c0230ab22def7332ff3cae007862f67f5eec
-createdAt: "2023-12-02T23:26:56"
+createdAt: "2023-12-03T00:22:34Z"
diff --git a/pod-security-cel/baseline/disallow-host-ports/artifacthub-pkg.yml b/pod-security-cel/baseline/disallow-host-ports/artifacthub-pkg.yml
@@ -20,4 +20,4 @@ annotations:
   kyverno/kubernetesVersion: "1.22-1.23"
   kyverno/subject: "Pod"
 digest: e5c3baa87ccb5cbbaeb6594e12e4781c8fca0d72a5a513b2a6f8efc80e00b200
-createdAt: "2023-12-02T23:26:56"
+createdAt: "2023-12-03T00:22:34Z"
diff --git a/pod-security-cel/baseline/disallow-host-process/artifacthub-pkg.yml b/pod-security-cel/baseline/disallow-host-process/artifacthub-pkg.yml
@@ -20,4 +20,4 @@ annotations:
   kyverno/kubernetesVersion: "1.22-1.23"
   kyverno/subject: "Pod"
 digest: 33a4b3765e2a54711df4379c41babb8b92f748d784bc79df049fb4fd225633a1
-createdAt: "2023-12-02T23:26:55"
+createdAt: "2023-12-03T00:22:34Z"
diff --git a/pod-security-cel/baseline/disallow-privileged-containers/artifacthub-pkg.yml b/pod-security-cel/baseline/disallow-privileged-containers/artifacthub-pkg.yml
@@ -20,4 +20,4 @@ annotations:
   kyverno/kubernetesVersion: "1.26-1.27"
   kyverno/subject: "Pod"
 digest: 4c48385be967ef691a8d8fc839497328e9b4cfdfdd0fd767949e9f0299ba966e
-createdAt: "2023-12-02T23:26:56"
+createdAt: "2023-12-03T00:22:34Z"
diff --git a/pod-security-cel/baseline/disallow-proc-mount/artifacthub-pkg.yml b/pod-security-cel/baseline/disallow-proc-mount/artifacthub-pkg.yml
@@ -20,4 +20,4 @@ annotations:
   kyverno/kubernetesVersion: "1.26-1.27"
   kyverno/subject: "Pod"
 digest: 48fbac14beda4385f57f55e55b84f99cfed3f8b5e88ab6c60046fdde00bf1273
-createdAt: "2023-12-02T23:26:55"
+createdAt: "2023-12-03T00:22:33Z"
diff --git a/pod-security-cel/baseline/disallow-selinux/artifacthub-pkg.yml b/pod-security-cel/baseline/disallow-selinux/artifacthub-pkg.yml
@@ -20,4 +20,4 @@ annotations:
   kyverno/kubernetesVersion: "1.26-1.27"
   kyverno/subject: "Pod"
 digest: d6379e3637a2df6d05a1613d7a000aff5cf4f6f4cc983395574238cdd225fa39
-createdAt: "2023-12-02T23:26:55"
+createdAt: "2023-12-03T00:22:33Z"
diff --git a/pod-security-cel/baseline/restrict-seccomp/artifacthub-pkg.yml b/pod-security-cel/baseline/restrict-seccomp/artifacthub-pkg.yml
@@ -20,4 +20,4 @@ annotations:
   kyverno/kubernetesVersion: "1.26-1.27"
   kyverno/subject: "Pod"
 digest: 047609777a0e1185127b20051beb2c07c98c8afd584602ecf2d1efd9d830b1c5
-createdAt: "2023-12-02T23:26:56"
+createdAt: "2023-12-03T00:22:34Z"
diff --git a/pod-security-cel/baseline/restrict-sysctls/artifacthub-pkg.yml b/pod-security-cel/baseline/restrict-sysctls/artifacthub-pkg.yml
@@ -20,4 +20,4 @@ annotations:
   kyverno/kubernetesVersion: "1.26-1.27"
   kyverno/subject: "Pod"
 digest: be45deb93071e4e2e062f431d4c14f404e538c12fa6a387beb9f6053d9d4f535
-createdAt: "2023-12-02T23:26:55"
+createdAt: "2023-12-03T00:22:33Z"