feat(kyverno): validate XQueueClaim fields via policy and enforce on PR with GitHub Action #11
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Owner
wnqueiroz
commented
Apr 21, 2025
wnqueiroz
commented
- Add Kyverno policy to validate location, message size, and timeout fields
- Include workflow to apply policy on PRs to crossplane/claims
- Add bootstrap script to install and verify Kyverno in the platform cluster
…PR with GitHub Action - Add Kyverno policy to validate location, message size, and timeout fields - Include workflow to apply policy on PRs to crossplane/claims - Add bootstrap script to install and verify Kyverno in the platform cluster
Pinned the Kyverno CLI to a specific version to ensure consistent validation behavior across runs.
Extract Kyverno CLI tarball to /tmp/kyverno-cli instead of current directory to prevent overwrite errors when kyverno folder already exists.
Redirected Kyverno CLI output to `$GITHUB_STEP_SUMMARY` for
…it properly Previously, Kyverno failures were not clearly visible in the PR summary due to missing output redirects and improper exit checks. This change captures the Kyverno exit code explicitly, appends the results to `$GITHUB_STEP_SUMMARY`, and exits with an error when validation fails.
…rrors in workflow summary Redirects stderr to stdout during Kyverno validation to ensure all messages are recorded in result.txt.
…aner CI output Improves readability of validation logs by removing ANSI colors and enabling table output format.
wnqueiroz
force-pushed
the
feature-kyverno
branch
from
cb45738 to
0b55607
Compare
… download Replaces custom install logic with official kyverno/action-install-cli for version v1.13.4.
wnqueiroz
force-pushed
the
feature-kyverno
branch
from
8b83949 to
bf9724e
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.