Release 1.5.2-rc3 (#2785)

* switched to default serve mux (#2592)

Signed-off-by: Siddharth Lal <siddharthlal25@gmail.com>

* publish image on new tags

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* release v1.5.2-rc3

Signed-off-by: ShutingZhao <shutting06@gmail.com>

Co-authored-by: Siddharth Lal <siddharthlal25@gmail.com>

.github/workflows/image.yaml

@@ -4,6 +4,8 @@ on:
     branches:
       - 'main'
       - 'release*'
+    tags:
+      - 'v*'
 jobs:
   push-init-kyverno:
     runs-on: ubuntu-latest

CHANGELOG.md

@@ -1,3 +1,10 @@
+## v1.5.2-rc3
+
+### Bug Fixes
+- kyverno initContainer fail to start when external.metrics.k8s.io/v1beta1 return empty array for resources #1490
+- Installing kyverno as helm dependency fails when trying to use CustomResourceDefinition #2783
+- Fix profiling issue #2529
+
 ## v1.5.2-rc2
 
 ### Bug Fixes

charts/kyverno-policies/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 name: kyverno-policies
-version: v2.1.4-rc2
+version: v2.1.4-rc3
-appVersion: v1.5.2-rc2
+appVersion: v1.5.2-rc3
 icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
 description: Kubernetes Native Policy Management Policies
 keywords:

charts/kyverno/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 name: kyverno
-version: v2.1.4-rc2
+version: v2.1.4-rc3
-appVersion: v1.5.2-rc2
+appVersion: v1.5.2-rc3
 icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
 description: Kubernetes Native Policy Management
 keywords:

charts/kyverno/templates/crds.yaml

@@ -12,7 +12,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: clusterpolicies.kyverno.io
 spec:
   group: kyverno.io
@@ -1313,7 +1313,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: clusterpolicyreports.wgpolicyk8s.io
 spec:
   group: wgpolicyk8s.io
@@ -1806,7 +1806,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: clusterreportchangerequests.kyverno.io
 spec:
   group: kyverno.io
@@ -2299,7 +2299,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: generaterequests.kyverno.io
 spec:
   group: kyverno.io
@@ -2480,7 +2480,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: policies.kyverno.io
 spec:
   group: kyverno.io
@@ -3781,7 +3781,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: policyreports.wgpolicyk8s.io
 spec:
   group: wgpolicyk8s.io
@@ -4274,7 +4274,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: reportchangerequests.kyverno.io
 spec:
   group: kyverno.io

cmd/kyverno/main.go

@@ -111,16 +111,14 @@ func main() {
 		os.Exit(1)
 	}
 
-	var profilingServerMux *http.ServeMux
 	var metricsServerMux *http.ServeMux
 	var promConfig *metrics.PromConfig
 
 	if profile {
-		profilingServerMux = http.NewServeMux()
 		addr := ":" + profilePort
 		setupLog.Info("Enable profiling, see details at https://github.com/kyverno/kyverno/wiki/Profiling-Kyverno-on-Kubernetes", "port", profilePort)
 		go func() {
-			if err := http.ListenAndServe(addr, profilingServerMux); err != nil {
+			if err := http.ListenAndServe(addr, nil); err != nil {
 				setupLog.Error(err, "Failed to enable profiling")
 				os.Exit(1)
 			}

definitions/install.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno
 ---
 apiVersion: apiextensions.k8s.io/v1
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: clusterpolicies.kyverno.io
 spec:
   group: kyverno.io
@@ -2074,7 +2074,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: clusterpolicyreports.wgpolicyk8s.io
 spec:
   group: wgpolicyk8s.io
@@ -2755,7 +2755,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: clusterreportchangerequests.kyverno.io
 spec:
   group: kyverno.io
@@ -3436,7 +3436,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: generaterequests.kyverno.io
 spec:
   group: kyverno.io
@@ -3632,7 +3632,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: policies.kyverno.io
 spec:
   group: kyverno.io
@@ -5685,7 +5685,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: policyreports.wgpolicyk8s.io
 spec:
   group: wgpolicyk8s.io
@@ -6364,7 +6364,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: reportchangerequests.kyverno.io
 spec:
   group: kyverno.io
@@ -7043,7 +7043,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno-service-account
   namespace: kyverno
 ---
@@ -7057,7 +7057,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
   name: kyverno:admin-policies
 rules:
@@ -7079,7 +7079,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
   name: kyverno:admin-policyreport
 rules:
@@ -7101,7 +7101,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
   name: kyverno:admin-reportchangerequest
 rules:
@@ -7123,7 +7123,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:customresources
 rules:
 - apiGroups:
@@ -7169,7 +7169,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:generatecontroller
 rules:
 - apiGroups:
@@ -7204,7 +7204,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:leaderelection
 rules:
 - apiGroups:
@@ -7228,7 +7228,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:policycontroller
 rules:
 - apiGroups:
@@ -7251,7 +7251,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:userinfo
 rules:
 - apiGroups:
@@ -7278,7 +7278,7 @@ metadata:
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/ownerreference: "true"
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:webhook
 rules:
 - apiGroups:
@@ -7330,7 +7330,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:customresources
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7351,7 +7351,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:generatecontroller
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7372,7 +7372,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:leaderelection
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7393,7 +7393,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:policycontroller
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7414,7 +7414,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:userinfo
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7435,7 +7435,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:webhook
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7460,7 +7460,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno
   namespace: kyverno
 ---
@@ -7477,7 +7477,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno-metrics
   namespace: kyverno
 ---
@@ -7491,7 +7491,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno-svc
   namespace: kyverno
 spec:
@@ -7513,7 +7513,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno-svc-metrics
   namespace: kyverno
 spec:
@@ -7535,7 +7535,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno
   namespace: kyverno
 spec:
@@ -7558,7 +7558,7 @@ spec:
         app.kubernetes.io/managed-by: Kustomize
         app.kubernetes.io/name: kyverno
         app.kubernetes.io/part-of: kyverno
-        app.kubernetes.io/version: v1.5.2-rc2
+        app.kubernetes.io/version: v1.5.2-rc3
     spec:
       affinity:
         podAntiAffinity:
@@ -7587,7 +7587,7 @@ spec:
               fieldPath: metadata.namespace
         - name: KYVERNO_SVC
           value: kyverno-svc
-        image: ghcr.io/kyverno/kyverno:v1.5.2-rc2
+        image: ghcr.io/kyverno/kyverno:v1.5.2-rc3
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 2
@@ -7639,7 +7639,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/kyverno/kyvernopre:v1.5.2-rc2
+        image: ghcr.io/kyverno/kyvernopre:v1.5.2-rc3
         imagePullPolicy: IfNotPresent
         name: kyverno-pre
         resources:
@@ -7671,7 +7671,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno
   namespace: kyverno
 spec:

definitions/release/install.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno
 ---
 apiVersion: apiextensions.k8s.io/v1
@@ -23,7 +23,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: clusterpolicies.kyverno.io
 spec:
   group: kyverno.io
@@ -2074,7 +2074,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: clusterpolicyreports.wgpolicyk8s.io
 spec:
   group: wgpolicyk8s.io
@@ -2755,7 +2755,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: clusterreportchangerequests.kyverno.io
 spec:
   group: kyverno.io
@@ -3436,7 +3436,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: generaterequests.kyverno.io
 spec:
   group: kyverno.io
@@ -3632,7 +3632,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: policies.kyverno.io
 spec:
   group: kyverno.io
@@ -5685,7 +5685,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: policyreports.wgpolicyk8s.io
 spec:
   group: wgpolicyk8s.io
@@ -6364,7 +6364,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: reportchangerequests.kyverno.io
 spec:
   group: kyverno.io
@@ -7043,7 +7043,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno-service-account
   namespace: kyverno
 ---
@@ -7057,7 +7057,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
   name: kyverno:admin-policies
 rules:
@@ -7079,7 +7079,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
   name: kyverno:admin-policyreport
 rules:
@@ -7101,7 +7101,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
   name: kyverno:admin-reportchangerequest
 rules:
@@ -7123,7 +7123,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:customresources
 rules:
 - apiGroups:
@@ -7169,7 +7169,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:generatecontroller
 rules:
 - apiGroups:
@@ -7204,7 +7204,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:leaderelection
 rules:
 - apiGroups:
@@ -7228,7 +7228,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:policycontroller
 rules:
 - apiGroups:
@@ -7251,7 +7251,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:userinfo
 rules:
 - apiGroups:
@@ -7278,7 +7278,7 @@ metadata:
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/ownerreference: "true"
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:webhook
 rules:
 - apiGroups:
@@ -7330,7 +7330,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:customresources
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7351,7 +7351,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:generatecontroller
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7372,7 +7372,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:leaderelection
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7393,7 +7393,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:policycontroller
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7414,7 +7414,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:userinfo
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7435,7 +7435,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno:webhook
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -7460,7 +7460,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno
   namespace: kyverno
 ---
@@ -7477,7 +7477,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno-metrics
   namespace: kyverno
 ---
@@ -7491,7 +7491,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno-svc
   namespace: kyverno
 spec:
@@ -7513,7 +7513,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno-svc-metrics
   namespace: kyverno
 spec:
@@ -7535,7 +7535,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno
   namespace: kyverno
 spec:
@@ -7558,7 +7558,7 @@ spec:
         app.kubernetes.io/managed-by: Kustomize
         app.kubernetes.io/name: kyverno
         app.kubernetes.io/part-of: kyverno
-        app.kubernetes.io/version: v1.5.2-rc2
+        app.kubernetes.io/version: v1.5.2-rc3
     spec:
       affinity:
         podAntiAffinity:
@@ -7587,7 +7587,7 @@ spec:
               fieldPath: metadata.namespace
         - name: KYVERNO_SVC
           value: kyverno-svc
-        image: ghcr.io/kyverno/kyverno:v1.5.2-rc2
+        image: ghcr.io/kyverno/kyverno:v1.5.2-rc3
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 2
@@ -7639,7 +7639,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/kyverno/kyvernopre:v1.5.2-rc2
+        image: ghcr.io/kyverno/kyvernopre:v1.5.2-rc3
         imagePullPolicy: IfNotPresent
         name: kyverno-pre
         resources:
@@ -7671,7 +7671,7 @@ metadata:
     app.kubernetes.io/managed-by: Kustomize
     app.kubernetes.io/name: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.5.2-rc2
+    app.kubernetes.io/version: v1.5.2-rc3
   name: kyverno
   namespace: kyverno
 spec:

definitions/release/kustomization.yaml

@@ -9,6 +9,6 @@ transformers:
 
 images:
 - name: ghcr.io/kyverno/kyverno
-  newTag: v1.5.2-rc2
+  newTag: v1.5.2-rc3
 - name: ghcr.io/kyverno/kyvernopre
-  newTag: v1.5.2-rc2
+  newTag: v1.5.2-rc3

definitions/release/labels.yaml

@@ -4,7 +4,7 @@ kind: LabelTransformer
 metadata:
   name: labelTransformer
 labels:
-  app.kubernetes.io/version: v1.5.2-rc2
+  app.kubernetes.io/version: v1.5.2-rc3
 fieldSpecs:
 - path: metadata/labels
   create: true