release v1.4.3-rc1

CHANGELOG.md

@@ -1,3 +1,51 @@
+## v1.4.3-rc1
+
+### Enhancements 
+- CLI variables should be coming from the resources itself (#1996)
+- Adding `ownerRef` with namespace for Kyverno managed webhook configurations (#2263)
+- Support new policy report CRD #1753, (#2376)
+- Clean up formatting in mutate test file (#2338)
+- Add test case for non zero index patches with patchesJson6902 (#2339)
+- Cleanup Kustomization configurations (#2274)
+- Kyverno CLI `apply` command improvements (#2342, #2331, #2318, #2310, #2296, #2290, #2122, #2120, #2367)
+- Validate `path` element begins with a forward slash in `patchesJson6902` (#2117)
+- Support gvk in CLI for policies applied on cluster (#2363)
+- Update cosign (#2266)
+- Allow users to skip policy validation when mutating resources (#2185)
+- Allow NetworkPolicy customization (#2287)
+- Patch labels to Helm templates (#2262)
+- Support for configurable automatic refresh of metrics and selective exposure of metrics at namespace-level (#2268)
+- Support global anchor behavior in validation and mutation rules (#2201)
+
+
+
+### Bug Fixes
+- Unable to use `GreaterThan` operator with `precondition` (#2211)
+- Fix `precondition` logic for mutating policies (#2271, #2228, #2352)
+- Fix Kyverno Deployment updateStrategy (#1982)
+- Helm chart releases are not gated behind something like a tag (#2264)
+- Add validation for generate loops (#1941)
+- Policy doesn't work when `match.resources.kinds` is set to `Policy/ClusterPolicy` (#2149)
+- Kyverno CLI panics when context is added to rule, but not actually used (#2289)
+- Generate policies with `background:false` and `synchronize:false` are still re-evaluated every 15mins (#2181)
+- Tests applied on excluded resources should succeed (#2295)
+- Kyverno CLI with context variables needs documentation (#2291)
+- Kyverno CLI test requires var resolution for non-applicable resources (#2331)
+- Test command result showing `Notfound` in result (#2296)
+- `any/all` in match block fails in the CLI (#2350)
+- JMESPath `contains` function behavior not consistent in Kyverno vs upstream (#2345)
+- `patchStrategicMerge` fails to mutate if policy written with initContainers object (#1916)
+- Check Any and All ResourceFilters during policy mutation (#2373)
+- Support variable replacement in the key of annotations (#2316)
+- Background scan doesn't work with any/all (#2299)
+
+
+### Others
+- Kyverno gives error when installed with KEDA (#2267)
+- Using Argo to deploy, baseline policies are constantly out-of-sync (#2234)
+- Policy update, flux2-multi-tenancy fails to update kyverno to v1.4.2-rc3 (#2241)
+- Throws a variable substitution error in spite of no variable present in the policy (#2374)
+
 ## v1.4.2
 
 ### Enhancements 

charts/kyverno/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 name: kyverno
-version: v2.0.2
-appVersion: v1.4.2
+version: v2.0.3-rc1
+appVersion: v1.4.3-rc1
 icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
 description: Kubernetes Native Policy Management
 keywords:

definitions/release/kustomization.yaml

@@ -9,6 +9,6 @@ transformers:
 
 images:
 - name: ghcr.io/kyverno/kyverno
-  newTag: v1.4.2
+  newTag: v1.4.3-rc1
 - name: ghcr.io/kyverno/kyvernopre
-  newTag: v1.4.2
+  newTag: v1.4.3-rc1

definitions/release/labels.yaml

@@ -4,7 +4,7 @@ kind: LabelTransformer
 metadata:
   name: labelTransformer
 labels:
-  app.kubernetes.io/version: v1.4.2
+  app.kubernetes.io/version: v1.4.3-rc1
 fieldSpecs:
 - path: metadata/labels
   create: true