From 3f18b5f7df3370676f114070a5b44fa7894c4476 Mon Sep 17 00:00:00 2001
From: Shuting Zhao <shutting06@gmail.com>
Date: Wed, 14 Apr 2021 13:12:12 -0700
Subject: [PATCH] tag v1.3.5-rc3

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
---
 charts/kyverno/Chart.yaml        |  4 ++--
 definitions/install.yaml         |  4 ++--
 definitions/kustomization.yaml   |  4 ++--
 definitions/release/install.yaml | 13 +++++++++----
 4 files changed, 15 insertions(+), 10 deletions(-)

diff --git a/charts/kyverno/Chart.yaml b/charts/kyverno/Chart.yaml
index 20a00eb4e3..bb4543cb18 100644
--- a/charts/kyverno/Chart.yaml
+++ b/charts/kyverno/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: kyverno
-version: v1.3.5-rc3
-appVersion: v1.3.5-rc3
+version: v1.3.5-rc4
+appVersion: v1.3.5-rc4
 icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
 description: Kubernetes Native Policy Management
 keywords:
diff --git a/definitions/install.yaml b/definitions/install.yaml
index 9d5c1c9f97..40a29765e2 100644
--- a/definitions/install.yaml
+++ b/definitions/install.yaml
@@ -2441,7 +2441,7 @@ spec:
               fieldPath: metadata.namespace
         - name: KYVERNO_SVC
           value: kyverno-svc
-        image: ghcr.io/kyverno/kyverno:v1.3.5-rc3
+        image: ghcr.io/kyverno/kyverno:v1.3.5-rc4
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 2
@@ -2483,7 +2483,7 @@ spec:
           readOnlyRootFilesystem: true
           runAsNonRoot: true
       initContainers:
-      - image: ghcr.io/kyverno/kyvernopre:v1.3.5-rc3
+      - image: ghcr.io/kyverno/kyvernopre:v1.3.5-rc4
         imagePullPolicy: IfNotPresent
         name: kyverno-pre
         securityContext:
diff --git a/definitions/kustomization.yaml b/definitions/kustomization.yaml
index 06df2b1e12..8a919df3b3 100755
--- a/definitions/kustomization.yaml
+++ b/definitions/kustomization.yaml
@@ -8,7 +8,7 @@ resources:
 images:
 - name: ghcr.io/kyverno/kyverno
   newName: ghcr.io/kyverno/kyverno
-  newTag: v1.3.5-rc3
+  newTag: v1.3.5-rc4
 - name: ghcr.io/kyverno/kyvernopre
   newName: ghcr.io/kyverno/kyvernopre
-  newTag: v1.3.5-rc3
+  newTag: v1.3.5-rc4
diff --git a/definitions/release/install.yaml b/definitions/release/install.yaml
index f9a07e7185..40a29765e2 100755
--- a/definitions/release/install.yaml
+++ b/definitions/release/install.yaml
@@ -1170,7 +1170,7 @@ spec:
       name: Background
       type: string
     - jsonPath: .spec.validationFailureAction
-      name: Validation Failure Action
+      name: Action
       type: string
     name: v1
     schema:
@@ -2386,7 +2386,7 @@ subjects:
 apiVersion: v1
 data:
   excludeGroupRole: system:serviceaccounts:kube-system,system:nodes,system:kube-scheduler
-  resourceFilters: '[Event,*,*][*,kube-system,*][*,kube-public,*][*,kube-node-lease,*][Node,*,*][APIService,*,*][TokenReview,*,*][SubjectAccessReview,*,*][*,kyverno,*][Binding,*,*][ReplicaSet,*,*][ReportChangeRequest,*,*][ClusterReportChangeRequest,*,*][PolicyReport,*,*][ClusterPolicyReport,*,*]'
+  resourceFilters: '[Event,*,*][*,kube-system,*][*,kube-public,*][*,kube-node-lease,*][Node,*,*][APIService,*,*][TokenReview,*,*][SubjectAccessReview,*,*][SelfSubjectAccessReview,*,*][*,kyverno,*][Binding,*,*][ReplicaSet,*,*][ReportChangeRequest,*,*][ClusterReportChangeRequest,*,*][PolicyReport,*,*][ClusterPolicyReport,*,*]'
 kind: ConfigMap
 metadata:
   name: init-config
@@ -2397,6 +2397,7 @@ kind: Service
 metadata:
   labels:
     app: kyverno
+    app.kubernetes.io/name: kyverno
   name: kyverno-svc
   namespace: kyverno
 spec:
@@ -2405,12 +2406,14 @@ spec:
     targetPort: https
   selector:
     app: kyverno
+    app.kubernetes.io/name: kyverno
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   labels:
     app: kyverno
+    app.kubernetes.io/name: kyverno
   name: kyverno
   namespace: kyverno
 spec:
@@ -2418,10 +2421,12 @@ spec:
   selector:
     matchLabels:
       app: kyverno
+      app.kubernetes.io/name: kyverno
   template:
     metadata:
       labels:
         app: kyverno
+        app.kubernetes.io/name: kyverno
     spec:
       containers:
       - args:
@@ -2436,7 +2441,7 @@ spec:
               fieldPath: metadata.namespace
         - name: KYVERNO_SVC
           value: kyverno-svc
-        image: ghcr.io/kyverno/kyverno:v1.3.5-rc3
+        image: ghcr.io/kyverno/kyverno:v1.3.5-rc4
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 2
@@ -2478,7 +2483,7 @@ spec:
           readOnlyRootFilesystem: true
           runAsNonRoot: true
       initContainers:
-      - image: ghcr.io/kyverno/kyvernopre:v1.3.5-rc3
+      - image: ghcr.io/kyverno/kyvernopre:v1.3.5-rc4
         imagePullPolicy: IfNotPresent
         name: kyverno-pre
         securityContext: