2373f428bb
now processing relabeling rules for prometheus
erik2025-01-29 21:08:42 +01:00
2bea96cc57
eliminating duplicate communications. this caused problems with linkerd and helm
erik2025-01-25 14:49:33 +01:00
cd4023f5ce
emojivoto is working.
erik2025-01-25 12:44:01 +01:00
56398027b7
no longer including linkerd ports.
erik2025-01-25 12:04:35 +01:00
108f21ea58
generating policies first version.
erik2025-01-25 12:01:51 +01:00
496e58347c
adde generation of Server resources.
erik2025-01-19 22:18:44 +01:00
f27f3610ab
meshtlsauthentications are now generated.
erik2025-01-19 22:05:14 +01:00
ef99ad61e8
linkerd in progress. Network authentications generated.
erik2025-01-19 19:51:25 +01:00
b41c92112e
renamed pod to application in the templates directory.
erik2025-01-19 19:02:36 +01:00
c696c24e31
detailed the meaning of the new unauthorized flag.
erik2025-01-19 17:17:23 +01:00
c9022a8036
added validation of application names to prevent conflicts at a later stage with genrated resource names.
erik2025-01-19 17:08:12 +01:00
60ebbf0ef4
to generate network policy, 'generate netpol' shoul dbe used now. Also added subcommand for linkerd ('generate linkerd'
erik2025-01-19 16:33:21 +01:00
86572e8063
now checking whether a pod is not part of any application.
erik2025-01-18 11:40:12 +01:00
ee8c0a2204
inferring application ports in case not configure so that they can be used for linkerd authorization.
erik2025-01-17 21:16:41 +01:00
2066aad656
open-> closed check not takingin to account annotation and filtering out cases where the From is already a CIDR.
erik2025-01-17 20:43:55 +01:00
b7a0b6a557
open to closed not report anymore when from is a network.
erik2025-01-16 21:38:48 +01:00
6a2f1b9fee
fine tuning the error messages
erik2025-01-12 23:26:10 +01:00
95e7106dba
now inferring the service accounts from the network policy config.
erik2025-01-12 22:08:33 +01:00
b3c24048d6
minor change in log output (NOTICE prefix)
erik2025-01-12 16:42:11 +01:00
a640b726bf
loop over communication sis now outside loop over namespaces.
erik2025-01-12 16:32:20 +01:00
ea6eb4e9ae
container ports are not checked by the tool with the validation option.
erik2025-01-12 16:30:53 +01:00
ff816a02ae
integrated the parser with the validator to ge tbetter error messages.
erik2025-01-12 14:56:36 +01:00
548260d3ab
added more user-friendly validation messages.
erik2025-01-04 13:54:29 +01:00
a87f43ba54
removed some obsolete files
erik2025-01-04 12:26:29 +01:00
93a743765d
rules appear to be working.
erik2025-01-04 00:16:25 +01:00
144a624985
exiting with an error when a capability cannot be found.
erik2025-01-03 20:40:28 +01:00
852833764c
addes support for matchExpressions
erik2025-01-03 17:59:11 +01:00
8c229f7a93
added playground validator to validate the input more.
erik2025-01-03 13:25:53 +01:00
e576e00456
more fixes for the netpolicy schema.
erik2025-01-03 00:31:03 +01:00
b8dfaa55a4
fixed issues with schema of network policy also fixed encoding of matahLabels. Now using json format so that it also works for empty maps.
erik2025-01-03 00:10:32 +01:00
d85baf3beb
deterministic ordering of output.
erik2025-01-02 23:00:11 +01:00
eba04ec132
Ports specified at communications now override the default ports of the application.
erik2025-01-02 22:49:47 +01:00
01700876cf
now also supporting linkerd and some cleanup
erik2025-01-02 19:30:31 +01:00
c522f16d64
multiple config files to allow spreading of configuration
erik2025-01-02 19:21:04 +01:00
erik