update chart permissions

Signed-off-by: Frank Jogeleit <frank.jogeleit@lovoo.com>

charts/policy-reporter/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 2.8.1
 - name: ui
   repository: oci://ghcr.io/kyverno/charts/policy-reporter
-  version: 0.0.9
+  version: 0.0.10
 - name: kyverno-plugin
   repository: oci://ghcr.io/kyverno/charts/policy-reporter
   version: 0.0.1
 - name: trivy-plugin
   repository: oci://ghcr.io/kyverno/charts/policy-reporter
   version: 0.0.3
-digest: sha256:b3bc8d733724c5efb671db10706db79dba4ed9e1516682c49fbba1bd7245ff72
-generated: "2024-01-15T11:26:44.624011+01:00"
+digest: sha256:39b27d451372326ba9d749942616f63d9765ea9b3396a840a33a9e9856eb2882
+generated: "2024-01-18T12:40:39.028707+01:00"

charts/policy-reporter/Chart.yaml

@@ -5,7 +5,7 @@ description: |
   It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord
 
 type: application
-version: 3.0.0-alpha.3
+version: 3.0.0-alpha.4
 appVersion: 3.0.0-alpha
 
 icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
@@ -20,7 +20,7 @@ dependencies:
     condition: monitoring.enabled
     version: "2.8.1"
   - name: ui
-    version: "0.0.9"
+    version: "0.0.10"
     repository: "oci://ghcr.io/kyverno/charts/policy-reporter"
     condition: ui.enabled
   - name: kyverno-plugin

charts/policy-reporter/README.md

@@ -3,7 +3,7 @@
 Policy Reporter watches for PolicyReport Resources.
 It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord
 
-![Version: 3.0.0-alpha.3](https://img.shields.io/badge/Version-3.0.0--alpha.3-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 3.0.0-alpha](https://img.shields.io/badge/AppVersion-3.0.0--alpha-informational?style=flat-square)
+![Version: 3.0.0-alpha.4](https://img.shields.io/badge/Version-3.0.0--alpha.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 3.0.0-alpha](https://img.shields.io/badge/AppVersion-3.0.0--alpha-informational?style=flat-square)
 
 ## Documentation
 
@@ -111,6 +111,9 @@ Check the [Documentation](https://kyverno.github.io/policy-reporter/guide/02-get
 | ui.enabled | bool | `false` |  |
 | ui.clusters[0].name | string | `"Default"` |  |
 | ui.clusters[0].secretRef | string | `"policy-report-ui-default-cluster"` |  |
+| ui.sources | list | `[{"excludes":{"namespaceKinds":["Pod","Job","ReplicaSet"]},"name":"kyverno"}]` | source specific configurations |
+| ui.sources[0] | object | `{"excludes":{"namespaceKinds":["Pod","Job","ReplicaSet"]},"name":"kyverno"}` | exclude Pod, Job and Replica resources from kyverno results by default if no kinds are specified |
+| ui.customBoards | list | `[]` | Additional customizable dashboards |
 | kyverno-plugin.enabled | bool | `false` |  |
 | trivy-plugin.enabled | bool | `false` |  |
 | monitoring.enabled | bool | `false` |  |
@@ -345,7 +348,7 @@ Check the [Documentation](https://kyverno.github.io/policy-reporter/guide/02-get
 |  | monitoring | 2.8.1 |
 | oci://ghcr.io/kyverno/charts/policy-reporter | kyverno-plugin | 0.0.1 |
 | oci://ghcr.io/kyverno/charts/policy-reporter | trivy-plugin | 0.0.3 |
-| oci://ghcr.io/kyverno/charts/policy-reporter | ui | 0.0.9 |
+| oci://ghcr.io/kyverno/charts/policy-reporter | ui | 0.0.10 |
 
 ## Maintainers
 

charts/policy-reporter/templates/clusterrole.yaml

@@ -22,4 +22,10 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - ''
+  resources:
+  - namespaces
+  verbs:
+  - list
 {{- end -}}

charts/policy-reporter/values.yaml

@@ -165,6 +165,31 @@ ui:
   clusters:
   - name: Default
     secretRef: policy-report-ui-default-cluster
+  # -- source specific configurations
+  sources:
+    # -- exclude Pod, Job and Replica resources from kyverno results by default if no kinds are specified
+    - name: kyverno
+      excludes:
+        namespaceKinds:
+        - Pod
+        - Job
+        - ReplicaSet
+  # -- Additional customizable dashboards
+  customBoards: []
+  # - name: Team A
+  #   namespaces:
+  #     # -- list of displayed namespaces
+  #     list: []
+  #     # -- selector for displayed namespaces
+  #     selector:
+  #       team: team-a
+  #   sources:
+  #     # -- list of displayed sources
+  #     list: []
+  #   clusterScope:
+  #     # -- disply cluster scoped resources and results
+  #     enabled: false
+
 
 kyverno-plugin:
   enabled: false