Kyverno - v1.8.2


Notes

  • Multiple imagePullSecrets is not supported, only the first secret will be used if multiple secrets are specified via the --imagePullSecrets container flag.

✨ Added ✨

  • kuttl tests (#5400, #5364, #5339, #5337, #5330, #5326, #5310, #5303, #5293, #5287, #5286, #5285, #5280, #5268, #5260, #5257, #5254, #5253, #5252, #5238, #5229, #5204)
  • Add tempo to argocd lab (#5365)
  • Add performance tests tool (#5241)
  • Add loki to argocd lab (#5231)
  • Add grafana dashboard to helm chart (#5230)
  • Support disabling schema validation on the patched resource (#5197)
  • Add categories support to our CRDs (#5112)
  • Helm chart: add extraCRDAnnotations value and set ArgoCD sync option by default (#4964)
  • Add validation for generate namespace policy (#5346)

⚠️ Changed ⚠️

  • Set rule response status as skip if precondition failed (#5162)
  • Reduce startup probe delay (#5296)

🐛 Fixed 🐛

  • Fix wildcard any/all issue (#5387)
  • Enable policy validation for the verifyImage rule (#5383)
  • The panic when disable metrics is true (#5366)
  • Kyyverno generates empty BackgroundScanReports(#5350)
  • Synchronize source resource's update to clone list resources (#5317)
  • Image verify rule gives error for non-existing configmap (#5272)
  • Fix the invalid kind issue for mutate policies (#5264)
  • Fix policy installation issue for Got empty response for: external.metrics.k8s.io/v1beta1 (#5239)
  • Make zapr compatible with klog's -v argument (#5166)
  • Allow delete of clone target resource with synchronize false (#5161)
  • Fix policy events created for non-applied resources (#5158)
  • Fix mutateExisting failure - reset resource version on update (#5157)
  • Fix mutation policy inconsistent patching for ephemeralContainers (#5121)
  • Fix adding parsing of json pointers to support special chars (#4767)
  • Fix adding policy label to policy reports (#5198, #5194)

Complete List of PRs

Click to expand - #5402 fix: add os.Exit - #5400 Complete all basic kuttl tests for generate rules, clone and no-sync - #5387 [Bug]: Fix wildcard any/all issue - #5383 fix: enable policy validation for the verifyImage rule - #5366 fix: panic when disable metrics is true - #5365 chore: add tempo to argocd lab - #5364 Add more kuttl generate test cases - #5358 fix: set correct logger in profiling server - #5350 fix closed watchers in the resource-report-controller - #5349 chore: enable json logs in argocd lab - #5346 fix: add validation for generate namespace policy - #5339 test: add kuttl debug failure - #5337 test: add rbac kuttl test - #5331 chore: add cli binary to gitignore - #5330 test: add test to check expected webhooks are created - #5328 refactor: optimise and use kuttl TestStep with tests - #5326 add test cases for yaml verification feature - #5319 fix: set logger in metrics server - #5317 fix: synchronize source resource update to clone list resource - #5311 fix: wrong logger used - #5310 tests: add kuttl tests for jmespath special chars - #5303 Update kuttl test scaffolding - #5298 fix: send notification when stoping watching resource in reports system - #5296 fix: reduce startup probe delay - #5293 fix: image extractor kuttl tests - #5291 Add a note to 1.8.2-rc1 release for `ImagePullSecrets` - #5287 fix: kuttl test external-service - #5286 fix: check policy is ready in kuttl tests - #5285 chore: update kuttl - #5280 tests: add kuttl tests for multiple clone generate - #5272 Fixed issue-3709: Image verify rule gives error for non-existing configmap - #5269 fix: keep admission warnings - #5268 fix: add missing test suite to kuttl - #5264 fix: account for error rules in mutation webhook - #5260 chore: remove old conformance tests files - #5257 Kuttl updates - #5254 chore: add kuttl in makefile - #5253 chore: add kuttl autogen tests - #5252 chore: use conditions in kuttl tests to check ready policies - #5245 refactor: admission metrics (counter and latency) - #5244 refactor: move all middlewares in handlers sub package - #5241 chore: add performance tests tool - #5239 Fix policy installation issue for Got empty response for: external.metrics.k8s.io/v1beta1 - #5238 More kuttl tests - #5234 refactor: admission response utils - #5231 chore: add loki to argocd lab - #5230 feat: add grafana dashboard to helm chart - #5229 add remainder of e2e verifyImages tests - #5209 chore: server side apply in argo lab - #5208 fix: too much information for the Policy Rule Execution Latency metric - #5204 add kuttl tests - #5200 fix: early return in policy validation - #5198 feat: add policy label to policy reports - #5197 feat: support disabling schema validation on the patched resource - #5194 fix: deletion of reports not belonging to kyverno - #5190 fix: use pagination to aggregate reports - #5189 Fix issue where CLI test command ignores failures - #5179 fix: check resource version on update notification - #5178 chore: add kind config file - #5177 fix: content type in log - #5176 refactor: health check system - #5166 fix: make zapr compatible with klog's -v argument - #5162 fix: set rule response status as skip if precondition failed - #5161 fix: allow delete of clone target resource with synchronize false - #5158 fix: policy events created for non-applied resources - #5157 fix: mutateExisting failure - reset resource version on update - #5144 fix: configure klog and global logger to use zapr in json mode - #5132 fix finalizers mutation with patchesJson6902 - #5121 fix: mutation policy inconsistent patching for ephemeralContainers - #5112 feat: add categories support to our CRDs - #4996 Fixed issue-4655: verifyImages is executed before mutate - #4964 Helm chart: add extraCRDAnnotations value and set ArgoCD sync option by default - #4899 fixed dryrun option to handle changes caused by mutating policy - #4767 fix: add parsing of json pointers to support special chars (#3578 #3616)

Details

date
Nov. 21, 2022, 9:04 a.m.
name
v1.8.2
type
Patch
👇
Register or login to:
  • 🔍View and search all Kyverno releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or