Restructure directories for vendir in of kyverno upstream policies.

educates · Jun 8, 2022 · 2e59db2 · 2e59db2
1 parent 4fa7a22
commit 2e59db2
Show file tree

Hide file tree

Showing 24 changed files with 31 additions and 6 deletions.
diff --git a/...w-capabilities/disallow-capabilities.yaml → ...w-capabilities/disallow-capabilities.yaml b/...w-capabilities/disallow-capabilities.yaml → ...w-capabilities/disallow-capabilities.yaml
diff --git a/...-namespaces/disallow-host-namespaces.yaml → ...-namespaces/disallow-host-namespaces.yaml b/...-namespaces/disallow-host-namespaces.yaml → ...-namespaces/disallow-host-namespaces.yaml
diff --git a/...isallow-host-path/disallow-host-path.yaml → ...isallow-host-path/disallow-host-path.yaml b/...isallow-host-path/disallow-host-path.yaml → ...isallow-host-path/disallow-host-path.yaml
diff --git a/...orts-range/disallow-host-ports-range.yaml → ...orts-range/disallow-host-ports-range.yaml b/...orts-range/disallow-host-ports-range.yaml → ...orts-range/disallow-host-ports-range.yaml
diff --git a/...allow-host-ports/disallow-host-ports.yaml → ...allow-host-ports/disallow-host-ports.yaml b/...allow-host-ports/disallow-host-ports.yaml → ...allow-host-ports/disallow-host-ports.yaml
diff --git a/...w-host-process/disallow-host-process.yaml → ...w-host-process/disallow-host-process.yaml b/...w-host-process/disallow-host-process.yaml → ...w-host-process/disallow-host-process.yaml
diff --git a/...iners/disallow-privileged-containers.yaml → ...iners/disallow-privileged-containers.yaml b/...iners/disallow-privileged-containers.yaml → ...iners/disallow-privileged-containers.yaml
diff --git a/...allow-proc-mount/disallow-proc-mount.yaml → ...allow-proc-mount/disallow-proc-mount.yaml b/...allow-proc-mount/disallow-proc-mount.yaml → ...allow-proc-mount/disallow-proc-mount.yaml
diff --git a/...am/disallow-selinux/disallow-selinux.yaml → ...am/disallow-selinux/disallow-selinux.yaml b/...am/disallow-selinux/disallow-selinux.yaml → ...am/disallow-selinux/disallow-selinux.yaml
diff --git a/...-profiles/restrict-apparmor-profiles.yaml → ...-profiles/restrict-apparmor-profiles.yaml b/...-profiles/restrict-apparmor-profiles.yaml → ...-profiles/restrict-apparmor-profiles.yaml
diff --git a/...am/restrict-seccomp/restrict-seccomp.yaml → ...am/restrict-seccomp/restrict-seccomp.yaml b/...am/restrict-seccomp/restrict-seccomp.yaml → ...am/restrict-seccomp/restrict-seccomp.yaml
diff --git a/...am/restrict-sysctls/restrict-sysctls.yaml → ...am/restrict-sysctls/restrict-sysctls.yaml b/...am/restrict-sysctls/restrict-sysctls.yaml → ...am/restrict-sysctls/restrict-sysctls.yaml
diff --git a/...ytt_lib/kyverno-baseline/99-overlays.yaml → ...g/_ytt_lib/kyverno-baseline/overlays.yaml b/...ytt_lib/kyverno-baseline/99-overlays.yaml → ...g/_ytt_lib/kyverno-baseline/overlays.yaml
diff --git a/carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-baseline/resources.yaml b/carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-baseline/resources.yaml
@@ -0,0 +1,4 @@
+#@ load("@ytt:library", "library")
+#@ load("@ytt:template", "template")
+
+--- #@ template.replace(library.get("upstream").eval())
diff --git a/...-strict/disallow-capabilities-strict.yaml → ...-strict/disallow-capabilities-strict.yaml b/...-strict/disallow-capabilities-strict.yaml → ...-strict/disallow-capabilities-strict.yaml
diff --git a/...lation/disallow-privilege-escalation.yaml → ...lation/disallow-privilege-escalation.yaml b/...lation/disallow-privilege-escalation.yaml → ...lation/disallow-privilege-escalation.yaml
diff --git a/...ot-user/require-run-as-non-root-user.yaml → ...ot-user/require-run-as-non-root-user.yaml b/...ot-user/require-run-as-non-root-user.yaml → ...ot-user/require-run-as-non-root-user.yaml
diff --git a/...un-as-nonroot/require-run-as-nonroot.yaml → ...un-as-nonroot/require-run-as-nonroot.yaml b/...un-as-nonroot/require-run-as-nonroot.yaml → ...un-as-nonroot/require-run-as-nonroot.yaml
diff --git a/...ccomp-strict/restrict-seccomp-strict.yaml → ...ccomp-strict/restrict-seccomp-strict.yaml b/...ccomp-strict/restrict-seccomp-strict.yaml → ...ccomp-strict/restrict-seccomp-strict.yaml
diff --git a/...t-volume-types/restrict-volume-types.yaml → ...t-volume-types/restrict-volume-types.yaml b/...t-volume-types/restrict-volume-types.yaml → ...t-volume-types/restrict-volume-types.yaml
diff --git a/...t_lib/kyverno-restricted/99-overlays.yaml → ..._ytt_lib/kyverno-restricted/overlays.yaml b/...t_lib/kyverno-restricted/99-overlays.yaml → ..._ytt_lib/kyverno-restricted/overlays.yaml
diff --git a/carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-restricted/resources.yaml b/carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-restricted/resources.yaml
@@ -0,0 +1,4 @@
+#@ load("@ytt:library", "library")
+#@ load("@ytt:template", "template")
+
+--- #@ template.replace(library.get("upstream").eval())
diff --git a/vendir.lock.yml b/vendir.lock.yml
@@ -1,15 +1,32 @@
 apiVersion: vendir.k14s.io/v1alpha1
 directories:
+- contents:
+  - git:
+      commitTitle: tag v1.6.2 (#3511)...
+      sha: 4b2bf039f6f04cc02cf89dae7e15f8bc17b2ad78
+      tags:
+      - v1.6.2
+    path: .
+  path: carvel-packages/cluster-essentials/bundle/config/_ytt_lib/kyverno/_ytt_lib/upstream
+- contents:
+  - git:
+      commitTitle: Fix next tag to be used when cutting a release on a release branch
+        (#4519)...
+      sha: 0acd27591c1d0245a7eb2b2bf72020e8e295db88
+      tags:
+      - v0.12.1
+    path: .
+  path: carvel-packages/cluster-essentials/bundle/config/_ytt_lib/contour/_ytt_lib/upstream
 - contents:
   - git:
       commitTitle: 'Merge pull request #317 from smcaine/update-check-deprecated-apis...'
       sha: 6abd32f8a03c0f98d8d5e90791e53e00d05a4e3e
     path: .
-  path: carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-restricted/00-upstream
+  path: carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-restricted/_ytt_lib/upstream
 - contents:
   - git:
       commitTitle: 'Merge pull request #317 from smcaine/update-check-deprecated-apis...'
       sha: 6abd32f8a03c0f98d8d5e90791e53e00d05a4e3e
     path: .
-  path: carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-baseline/00-upstream
+  path: carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-baseline/_ytt_lib/upstream
 kind: LockConfig
diff --git a/vendir.yml b/vendir.yml
@@ -25,12 +25,12 @@ directories:
 
       newRootPath: addons/packages/contour/1.20.1/bundle/config
 
-  - path: carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-restricted/00-upstream
+  - path: carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-restricted/_ytt_lib/upstream
     contents:
     - path: "."
       git:
         url: https://github.com/kyverno/policies
-        ref: 6abd32f8a03c0f98d8d5e90791e53e00d05a4e3e
+        ref: origin/release-1.7
 
       excludePaths:
       - "**/kustomization.yaml"
@@ -39,12 +39,12 @@ directories:
 
       newRootPath: pod-security/restricted
 
-  - path: carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-baseline/00-upstream
+  - path: carvel-packages/training-platform/bundle/config/_ytt_lib/kyverno-baseline/_ytt_lib/upstream
     contents:
     - path: "."
       git:
         url: https://github.com/kyverno/policies
-        ref: 6abd32f8a03c0f98d8d5e90791e53e00d05a4e3e
+        ref: origin/release-1.7
 
       excludePaths:
       - "**/kustomization.yaml"