Skip to content

Update Kyverno chart version from 3.2.5 to 3.4.4#333

Merged
evgheni7 merged 1 commit into
web-seven:mainfrom
art10m:main
Oct 1, 2025
Merged

Update Kyverno chart version from 3.2.5 to 3.4.4#333
evgheni7 merged 1 commit into
web-seven:mainfrom
art10m:main

Conversation

@art10m
Copy link
Copy Markdown
Contributor

@art10m art10m commented Oct 1, 2025

Summary

Updated Kyverno chart version from 3.2.5 to 3.4.4 to address Bitnami image registry restrictions while maintaining Kubernetes 1.26 compatibility.

Motivation

Bitnami container images are now only available under the latest tag, causing Kyverno 3.2.5 to fail when pulling images. The updated version uses reg.kyverno.io as the default
registry, resolving this issue.

Changes

  • Updated kyvernoChartVersion in internal/policy/kyverno.go from "3.2.5" to "3.4.4"

Why 3.4.4 Instead of 3.5.2?

  • Includes Bitnami fix: Uses reg.kyverno.io default registry
  • K8s 1.26 compatible: Doesn't require ValidatingAdmissionPolicy CRD (K8s 1.30+ feature)
  • Minimal changes: Closest to 3.2.5 with stable features
  • Latest stable: v1.14.4 patch release in 3.4.x series

Testing

  • ✅ Deployed successfully in KinD cluster (Kubernetes 1.26.3)
  • ✅ TLS certificates auto-generated correctly
  • ✅ Admission controller running (1/1 Ready)
  • ✅ All webhooks registered (5 validating, 3 mutating)
  • ✅ Created local registry with ClusterPolicy working correctly

Breaking Changes

None. Maintains backward compatibility within Kyverno 3.x series.

Updated to address new Bitnami image restrictions where images are now only available under the latest tag. Version 3.4.4 includes the updated image references (reg.kyverno.io) compatible with these restrictions while maintaining compatibility with Kubernetes 1.26 (no ValidatingAdmissionPolicy requirement).
@art10m art10m requested a review from evgheni7 as a code owner October 1, 2025 13:58
@evgheni7 evgheni7 linked an issue Oct 1, 2025 that may be closed by this pull request
1 task
@evgheni7 evgheni7 merged commit daffa7b into web-seven:main Oct 1, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bug(core): Migrate to official Kyverno Helm chart

2 participants