release v1.3.2-rc3

kyverno · Feb 9, 2021 · db1bfba · db1bfba
1 parent cbe575e
commit db1bfba
Show file tree

Hide file tree

Showing 5 changed files with 15 additions and 14 deletions.
diff --git a/charts/kyverno/Chart.yaml b/charts/kyverno/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: kyverno
-version: v1.3.2-rc2
-appVersion: v1.3.2-rc2
+version: v1.3.2-rc3
+appVersion: v1.3.2-rc3
 icon: https://github.com/kyverno/kyverno/blob/master/documentation/images/Kyverno_Horizontal.png
 description: Kubernetes Native Policy Management
 keywords:

diff --git a/definitions/install.yaml b/definitions/install.yaml
@@ -2509,8 +2509,8 @@ spec:
               fieldPath: metadata.namespace
         - name: KYVERNO_SVC
           value: kyverno-svc
-        image: ghcr.io/kyverno/kyverno:v1.3.2-rc2
-        imagePullPolicy: Always
+        image: ghcr.io/kyverno/kyverno:v1.3.2-rc3
+        imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 4
           httpGet:
@@ -2552,8 +2552,8 @@ spec:
           runAsNonRoot: true
           runAsUser: 1000
       initContainers:
-      - image: ghcr.io/kyverno/kyvernopre:v1.3.2-rc2
-        imagePullPolicy: Always
+      - image: ghcr.io/kyverno/kyvernopre:v1.3.2-rc3
+        imagePullPolicy: IfNotPresent
         name: kyverno-pre
         securityContext:
           allowPrivilegeEscalation: false

diff --git a/definitions/kustomization.yaml b/definitions/kustomization.yaml
@@ -8,7 +8,7 @@ resources:
 images:
 - name: ghcr.io/kyverno/kyverno
   newName: ghcr.io/kyverno/kyverno
-  newTag: v1.3.2-rc2
+  newTag: v1.3.2-rc3
 - name: ghcr.io/kyverno/kyvernopre
   newName: ghcr.io/kyverno/kyvernopre
-  newTag: v1.3.2-rc2
+  newTag: v1.3.2-rc3
diff --git a/definitions/manifest/deployment.yaml b/definitions/manifest/deployment.yaml
@@ -22,7 +22,7 @@ spec:
       initContainers:
         - name: kyverno-pre
           image: ghcr.io/kyverno/kyvernopre:latest
-          imagePullPolicy: Always
+          imagePullPolicy: IfNotPresent
           securityContext:
             runAsUser: 1000
             runAsNonRoot: true
@@ -35,7 +35,7 @@ spec:
       containers:
         - name: kyverno
           image: ghcr.io/kyverno/kyverno:latest
-          imagePullPolicy: Always
+          imagePullPolicy: IfNotPresent
           args:
           - "--filterK8sResources=[Event,*,*][*,kube-system,*][*,kube-public,*][*,kube-node-lease,*][Node,*,*][APIService,*,*][TokenReview,*,*][SubjectAccessReview,*,*][*,kyverno,*][Binding,*,*][ReplicaSet,*,*][ReportChangeRequest,*,*][ClusterReportChangeRequest,*,*][PolicyReport,*,*][ClusterPolicyReport,*,*]"
           # customize webhook timeout

diff --git a/definitions/release/install.yaml b/definitions/release/install.yaml
@@ -2327,6 +2327,7 @@ rules:
   - get
   - list
   - update
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -2508,8 +2509,8 @@ spec:
               fieldPath: metadata.namespace
         - name: KYVERNO_SVC
           value: kyverno-svc
-        image: ghcr.io/kyverno/kyverno:v1.3.2-rc2
-        imagePullPolicy: Always
+        image: ghcr.io/kyverno/kyverno:v1.3.2-rc3
+        imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 4
           httpGet:
@@ -2551,8 +2552,8 @@ spec:
           runAsNonRoot: true
           runAsUser: 1000
       initContainers:
-      - image: ghcr.io/kyverno/kyvernopre:v1.3.2-rc2
-        imagePullPolicy: Always
+      - image: ghcr.io/kyverno/kyvernopre:v1.3.2-rc3
+        imagePullPolicy: IfNotPresent
         name: kyverno-pre
         securityContext:
           allowPrivilegeEscalation: false