19 Pull requests merged by 8 people

• fix: add metrics-server Helm repo (cherry-pick #11717)

  #11718 merged Dec 5, 2024

• add allowExistingViolations option in policy chart (cherry pick #11656)

  #11720 merged Dec 5, 2024

• chore(deps): bump github/codeql-action from 3.27.5 to 3.27.6

  #11706 merged Dec 5, 2024

• chore(deps): bump kyverno/action-install-chainsaw from 0.2.11 to 0.2.12

  #11715 merged Dec 5, 2024

• fix(readme): add changelog for spec.validate[*].allowExistingViolations field in kyverno chart (cherry-pick #11714)

  #11719 merged Dec 5, 2024

• fix(readme): add changelog for spec.validate[*].allowExistingViolations field in kyverno chart

  #11714 merged Dec 5, 2024

• fix: add metrics-server Helm repo

  #11717 merged Dec 5, 2024

• feat: Show textual diff when generate test fails (cherry-pick #11674)

  #11704 merged Dec 4, 2024

• fix: properly verify precondition in old object validation

  #11644 merged Dec 4, 2024

• feat: Show textual diff when generate test fails

  #11674 merged Dec 4, 2024

• fix: api call chainsaw tests (cherry-pick #11682)

  #11696 merged Dec 3, 2024

• chore(deps): bump sigs.k8s.io/controller-runtime from 0.19.2 to 0.19.3

  #11698 merged Dec 3, 2024

• fix: check the patchedResources in kyverno-test (cherry-pick #11686)

  #11695 merged Dec 3, 2024

• chore(deps): bump ubuntu from 278628f to 80dd3c3 in /.devcontainer

  #11697 merged Dec 3, 2024

• fix: api call chainsaw tests

  #11682 merged Dec 2, 2024

• Fix(doc): correct invalid links in documentation

  #11681 merged Dec 2, 2024

• fix: check the patchedResources in kyverno-test

  #11686 merged Dec 2, 2024

• chore(deps): bump cbrgm/cleanup-stale-branches-action from 1.1.23 to 1.1.24

  #11691 merged Dec 2, 2024

• add allowExistingViolations option in policy chart

  #11656 merged Dec 2, 2024

11 Pull requests opened by 8 people

• Add aggregateClusterRole parameter

  #11688 opened Nov 28, 2024

• VAP params in the CLI

  #11690 opened Dec 1, 2024

• [WIP] fix: reduce memory usage when use k8s resource GlobalContextEntry

  #11694 opened Dec 2, 2024

• fix: properly verify precondition in old object validation (cherry-pick #11644)

  #11705 opened Dec 4, 2024

• Set default grafanaDashboard instanceSelector as empty

  #11708 opened Dec 5, 2024

• Duplicate Test Entry Deduplication

  #11709 opened Dec 5, 2024

• chore(deps): bump golang.org/x/text from 0.20.0 to 0.21.0

  #11710 opened Dec 5, 2024

• chore(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1

  #11711 opened Dec 5, 2024

• chore(deps): bump golang.org/x/crypto from 0.29.0 to 0.30.0

  #11712 opened Dec 5, 2024

• Release v1.13.2-rc.1

  #11713 opened Dec 5, 2024

• chore(deps): bump kyverno/action-install-chainsaw from 0.2.11 to 0.2.12 in /.github/actions/run-tests

  #11716 opened Dec 5, 2024

8 Issues closed by 3 people

• [Bug] annotations update deny rule is not executed

  #11621 closed Dec 4, 2024

• [Feature] Conformance tests for Kyverno upgrade

  #10155 closed Dec 3, 2024

• [Bug] kyverno test cli patchedResources must be patchedResource

  #11629 closed Dec 2, 2024

• [Bug] [CLI] The new field `patchedResources` is not checked

  #11685 closed Dec 2, 2024

• [Bug] Kyverno does not prevent creation of Services with type LoadBalancer

  #10585 closed Dec 1, 2024

• [Feature] Add auto-gen support in generated VAPs from CEL policies

  #10575 closed Dec 1, 2024

• [Bug] PolicyReport Labelling not functional

  #10548 closed Dec 1, 2024

• [Bug] failed calling webhook "mutate.kyverno.svc-fail"

  #9889 closed Nov 30, 2024

9 Issues opened by 9 people

• [Bug] Unable to set proper grafanaDashboard instanceSelector in helm values

  #11707 opened Dec 4, 2024

• [Bug] [CLI] Duplicate Resource/Policy Checking in Kyverno CLI

  #11702 opened Dec 3, 2024

• [Feature] Update Kyverno Policy Schema Validation and Policy Readiness logic

  #11701 opened Dec 3, 2024

• [Feature] kyverno slo metrics for availability

  #11700 opened Dec 3, 2024

• [Bug] Validation failing for clusterpolicy with shallow variable interpolation

  #11699 opened Dec 3, 2024

• [Bug] High memory usage when using k8s resource GlobalContextEntry

  #11693 opened Dec 2, 2024

• [Bug] [CLI] `kyverno apply` does not match PolicyException

  #11692 opened Dec 2, 2024

• [Bug] [CLI] Kyverno apply using kubectl get clusterpolicies -o yaml to check against all cluster policies does not seem to work

  #11689 opened Nov 29, 2024

• [Bug] [CLI] Unexpected behavior for mutate rules

  #11687 opened Nov 28, 2024

34 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Mutate existing CLI support

  #11453 commented on Dec 5, 2024 • 10 new comments

• feat: removed erroneous warning about matching on scale subresource

  #11683 commented on Dec 4, 2024 • 2 new comments

• Do not fail policy restrict-apparmor-profiles for empty annotations

  #11658 commented on Dec 3, 2024 • 0 new comments

• fix(webhook): update policy status after both validating and mutating…

  #11643 commented on Dec 4, 2024 • 0 new comments

• feat: add error log for policy validation

  #11632 commented on Dec 4, 2024 • 0 new comments

• distributed labels in group, version, and resource so it doesn't exceed

  #11620 commented on Dec 5, 2024 • 0 new comments

• feat: update resource filters

  #11609 commented on Nov 30, 2024 • 0 new comments

• Updated the default autogen version to keep up with toggle

  #11562 commented on Dec 3, 2024 • 0 new comments

• test: Added test case for exceptions.go file in engine package

  #11513 commented on Nov 30, 2024 • 0 new comments

• fix: auto-gen can't generate rule for custom resources

  #10836 commented on Dec 5, 2024 • 0 new comments

• [Bug] Error in reports controller "schema not found"

  #7911 commented on Dec 5, 2024 • 0 new comments

• [Feature] Imperative support

  #11626 commented on Dec 5, 2024 • 0 new comments

• [Bug] TLS handshake error

  #10644 commented on Dec 4, 2024 • 0 new comments

• [Bug] backgroundreport for specific namespaces

  #11008 commented on Dec 4, 2024 • 0 new comments

• [Bug] Policies are ignored during admission-controller leader change

  #11560 commented on Dec 4, 2024 • 0 new comments

• [Feature] allow policies for missing GVKs

  #9946 commented on Dec 3, 2024 • 0 new comments

• [Bug] Allow kinds to not exist at the time of policy creation

  #11462 commented on Dec 3, 2024 • 0 new comments

• [Feature] Support TUF configuration for private and public Sigstore instances simultaneously

  #11618 commented on Nov 28, 2024 • 0 new comments

• [Feature] Improvement of OpenSSF Scorecard Score

  #10908 commented on Nov 28, 2024 • 0 new comments

• [Bug] Kyverno is not creating policy reports when existing policy reports are deleted manually

  #10851 commented on Nov 28, 2024 • 0 new comments

• [Feature] Support VAP paramKind/paramRef on CLI test command

  #9431 commented on Nov 28, 2024 • 0 new comments

• [Feature] Adopt security context changes for the pod security rule in Kubernetes 1.30

  #10012 commented on Nov 29, 2024 • 0 new comments

• [Bug] Kubernetes probes for Background and Reports Controllers

  #10559 commented on Nov 29, 2024 • 0 new comments

• [Feature] Helms' CustomLabels added to the pods metadata of jobs and cronjobs k8s ressources

  #10907 commented on Nov 29, 2024 • 0 new comments

• [Tracking] ValidatingAdmissionPolicy GA Support

  #10195 commented on Dec 1, 2024 • 0 new comments

• [Bug] Default value into apiCall context variables does not all the time

  #11677 commented on Dec 1, 2024 • 0 new comments

• [Bug] Kyverno PolicyController throws error when trying to list non-namespace bound resources

  #11628 commented on Dec 2, 2024 • 0 new comments

• [Bug] Issues in kyverno upgrades when installed using ArgoCD

  #11428 commented on Dec 3, 2024 • 0 new comments

• [Bug] Kyverno generates extra webhook rules for generate cluster-policies rules

  #11645 commented on Dec 3, 2024 • 0 new comments

• [Bug] ArgoCD Becomes Unresponsive and Frequently Disconnects from the Cluster When Kyverno is Installed (Same or Different Cluster)

  #11684 commented on Dec 3, 2024 • 0 new comments

• [Feature] Policy Types

  #11635 commented on Dec 3, 2024 • 0 new comments

• [test] Unit test speed improvement

  #11679 commented on Dec 3, 2024 • 0 new comments

• Region missing pod event when using AWS KMS verification

  #9347 commented on Dec 3, 2024 • 0 new comments

• [Feature] Add HorizontalPodAutoscaler to admission-controller chart

  #9891 commented on Dec 3, 2024 • 0 new comments