chore: Prepare v3.16.0-beta.1 release (#3306)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: sozercan <852750+sozercan@users.noreply.github.com>
open-policy-agent · Mar 19, 2024 · c68a029 · c68a029
1 parent 041fb26
commit c68a029
Show file tree

Hide file tree

Showing 17 changed files with 84 additions and 52 deletions.
diff --git a/Makefile b/Makefile
@@ -14,7 +14,7 @@ AUDIT_CONNECTION ?= "audit"
 AUDIT_CHANNEL ?= "audit"
 LOG_LEVEL ?= "INFO"
 
-VERSION := v3.16.0-beta.0
+VERSION := v3.16.0-beta.1
 
 KIND_VERSION ?= 0.17.0
 # note: k8s version pinned since KIND image availability lags k8s releases

diff --git a/charts/gatekeeper/Chart.yaml b/charts/gatekeeper/Chart.yaml
@@ -4,8 +4,8 @@ name: gatekeeper
 icon: https://open-policy-agent.github.io/gatekeeper/website/img/logo.svg
 keywords:
   - open policy agent
-version: 3.16.0-beta.0
+version: 3.16.0-beta.1
 home: https://github.com/open-policy-agent/gatekeeper
 sources:
   - https://github.com/open-policy-agent/gatekeeper.git
-appVersion: v3.16.0-beta.0
+appVersion: v3.16.0-beta.1
diff --git a/charts/gatekeeper/README.md b/charts/gatekeeper/README.md
diff --git a/charts/gatekeeper/crds/constraintpodstatus-customresourcedefinition.yaml b/charts/gatekeeper/crds/constraintpodstatus-customresourcedefinition.yaml
@@ -39,7 +39,7 @@ spec:
                 type: boolean
               errors:
                 items:
-                  description: Error represents a single error caught while adding a constraint to OPA.
+                  description: Error represents a single error caught while adding a constraint to engine.
                   properties:
                     code:
                       type: string

diff --git a/charts/gatekeeper/templates/gatekeeper-audit-deployment.yaml b/charts/gatekeeper/templates/gatekeeper-audit-deployment.yaml
@@ -1,3 +1,4 @@
+{{- if not .Values.disableAudit }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -33,7 +34,8 @@ spec:
         {{- toYaml .Values.auditPodAnnotations | trim | nindent 8 }}
         {{- end }}
       labels:
-{{- include "gatekeeper.podLabels" . | nindent 8 }}
+        {{- include "gatekeeper.podLabels" . | nindent 8 }}
+        {{- include "gatekeeper.commonLabels" . | nindent 8 }}
         app: '{{ template "gatekeeper.name" . }}'
         chart: '{{ template "gatekeeper.name" . }}'
         control-plane: audit-controller
@@ -166,3 +168,4 @@ spec:
       - emptyDir: {}
       {{- end }}
         name: tmp-volume
+{{- end }}
diff --git a/charts/gatekeeper/templates/gatekeeper-controller-manager-deployment.yaml b/charts/gatekeeper/templates/gatekeeper-controller-manager-deployment.yaml
@@ -32,7 +32,8 @@ spec:
         {{- toYaml .Values.podAnnotations | trim | nindent 8 }}
         {{- end }}
       labels:
-{{- include "gatekeeper.podLabels" . | nindent 8 }}
+        {{- include "gatekeeper.podLabels" . | nindent 8 }}
+        {{- include "gatekeeper.commonLabels" . | nindent 8 }}
         app: '{{ template "gatekeeper.name" . }}'
         chart: '{{ template "gatekeeper.name" . }}'
         control-plane: controller-manager

diff --git a/charts/gatekeeper/templates/gatekeeper-manager-role-clusterrole.yaml b/charts/gatekeeper/templates/gatekeeper-manager-role-clusterrole.yaml
@@ -38,6 +38,19 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - validatingadmissionpolicies
+  - validatingadmissionpolicybindings
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - apiextensions.k8s.io
   resources:

diff --git a/charts/gatekeeper/values.yaml b/charts/gatekeeper/values.yaml
@@ -5,6 +5,7 @@ metricsBackends: ["prometheus"]
 auditMatchKindOnly: false
 constraintViolationsLimit: 20
 auditFromCache: false
+disableAudit: false
 disableMutation: false
 disableValidatingWebhook: false
 validatingWebhookName: gatekeeper-validating-webhook-configuration
@@ -44,20 +45,20 @@ externaldataProviderResponseCacheTTL: 3m
 image:
   repository: openpolicyagent/gatekeeper
   crdRepository: openpolicyagent/gatekeeper-crds
-  release: v3.16.0-beta.0
+  release: v3.16.0-beta.1
   pullPolicy: IfNotPresent
   pullSecrets: []
 preInstall:
   crdRepository:
     image:
       repository: null
-      tag: v3.16.0-beta.0
+      tag: v3.16.0-beta.1
 postUpgrade:
   labelNamespace:
     enabled: false
     image:
       repository: openpolicyagent/gatekeeper-crds
-      tag: v3.16.0-beta.0
+      tag: v3.16.0-beta.1
       pullPolicy: IfNotPresent
       pullSecrets: []
     extraNamespaces: []
@@ -88,7 +89,7 @@ postInstall:
     extraRules: []
     image:
       repository: openpolicyagent/gatekeeper-crds
-      tag: v3.16.0-beta.0
+      tag: v3.16.0-beta.1
       pullPolicy: IfNotPresent
       pullSecrets: []
     extraNamespaces: []
@@ -129,7 +130,7 @@ preUninstall:
     enabled: false
     image:
       repository: openpolicyagent/gatekeeper-crds
-      tag: v3.16.0-beta.0
+      tag: v3.16.0-beta.1
       pullPolicy: IfNotPresent
       pullSecrets: []
     priorityClassName: ""

diff --git a/cmd/build/helmify/static/Chart.yaml b/cmd/build/helmify/static/Chart.yaml
@@ -4,8 +4,8 @@ name: gatekeeper
 icon: https://open-policy-agent.github.io/gatekeeper/website/img/logo.svg
 keywords:
   - open policy agent
-version: 3.16.0-beta.0
+version: 3.16.0-beta.1
 home: https://github.com/open-policy-agent/gatekeeper
 sources:
   - https://github.com/open-policy-agent/gatekeeper.git
-appVersion: v3.16.0-beta.0
+appVersion: v3.16.0-beta.1
diff --git a/cmd/build/helmify/static/README.md b/cmd/build/helmify/static/README.md
diff --git a/cmd/build/helmify/static/values.yaml b/cmd/build/helmify/static/values.yaml
@@ -45,20 +45,20 @@ externaldataProviderResponseCacheTTL: 3m
 image:
   repository: openpolicyagent/gatekeeper
   crdRepository: openpolicyagent/gatekeeper-crds
-  release: v3.16.0-beta.0
+  release: v3.16.0-beta.1
   pullPolicy: IfNotPresent
   pullSecrets: []
 preInstall:
   crdRepository:
     image:
       repository: null
-      tag: v3.16.0-beta.0
+      tag: v3.16.0-beta.1
 postUpgrade:
   labelNamespace:
     enabled: false
     image:
       repository: openpolicyagent/gatekeeper-crds
-      tag: v3.16.0-beta.0
+      tag: v3.16.0-beta.1
       pullPolicy: IfNotPresent
       pullSecrets: []
     extraNamespaces: []
@@ -89,7 +89,7 @@ postInstall:
     extraRules: []
     image:
       repository: openpolicyagent/gatekeeper-crds
-      tag: v3.16.0-beta.0
+      tag: v3.16.0-beta.1
       pullPolicy: IfNotPresent
       pullSecrets: []
     extraNamespaces: []
@@ -130,7 +130,7 @@ preUninstall:
     enabled: false
     image:
       repository: openpolicyagent/gatekeeper-crds
-      tag: v3.16.0-beta.0
+      tag: v3.16.0-beta.1
       pullPolicy: IfNotPresent
       pullSecrets: []
     priorityClassName: ""

diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -56,7 +56,7 @@ spec:
             - "--operation=webhook"
             - "--operation=mutation-webhook"
             - "--disable-opa-builtin={http.send}"
-          image: openpolicyagent/gatekeeper:v3.16.0-beta.0
+          image: openpolicyagent/gatekeeper:v3.16.0-beta.1
           imagePullPolicy: Always
           name: manager
           ports:
@@ -150,7 +150,7 @@ spec:
             - --disable-cert-rotation
           command:
             - /manager
-          image: openpolicyagent/gatekeeper:v3.16.0-beta.0
+          image: openpolicyagent/gatekeeper:v3.16.0-beta.1
           env:
             # used by Gatekeeper
             - name: POD_NAMESPACE

diff --git a/deploy/gatekeeper.yaml b/deploy/gatekeeper.yaml
@@ -1829,7 +1829,7 @@ spec:
                 type: boolean
               errors:
                 items:
-                  description: Error represents a single error caught while adding a constraint to OPA.
+                  description: Error represents a single error caught while adding a constraint to engine.
                   properties:
                     code:
                       type: string
@@ -3496,6 +3496,19 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - validatingadmissionpolicies
+  - validatingadmissionpolicybindings
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - apiextensions.k8s.io
   resources:
@@ -3749,7 +3762,7 @@ spec:
           value: manager
         - name: OTEL_RESOURCE_ATTRIBUTES
           value: k8s.pod.name=$(POD_NAME),k8s.namespace.name=$(NAMESPACE),k8s.container.name=$(CONTAINER_NAME)
-        image: openpolicyagent/gatekeeper:v3.16.0-beta.0
+        image: openpolicyagent/gatekeeper:v3.16.0-beta.1
         imagePullPolicy: Always
         livenessProbe:
           httpGet:
@@ -3868,7 +3881,7 @@ spec:
           value: manager
         - name: OTEL_RESOURCE_ATTRIBUTES
           value: k8s.pod.name=$(POD_NAME),k8s.namespace.name=$(NAMESPACE),k8s.container.name=$(CONTAINER_NAME)
-        image: openpolicyagent/gatekeeper:v3.16.0-beta.0
+        image: openpolicyagent/gatekeeper:v3.16.0-beta.1
         imagePullPolicy: Always
         livenessProbe:
           httpGet:

diff --git a/manifest_staging/charts/gatekeeper/Chart.yaml b/manifest_staging/charts/gatekeeper/Chart.yaml
@@ -4,8 +4,8 @@ name: gatekeeper
 icon: https://open-policy-agent.github.io/gatekeeper/website/img/logo.svg
 keywords:
   - open policy agent
-version: 3.16.0-beta.0
+version: 3.16.0-beta.1
 home: https://github.com/open-policy-agent/gatekeeper
 sources:
   - https://github.com/open-policy-agent/gatekeeper.git
-appVersion: v3.16.0-beta.0
+appVersion: v3.16.0-beta.1