release v1.3.2-rc3

charts/kyverno/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 name: kyverno
-version: v1.3.2-rc2
+version: v1.3.2-rc3
-appVersion: v1.3.2-rc2
+appVersion: v1.3.2-rc3
 icon: https://github.com/kyverno/kyverno/blob/master/documentation/images/Kyverno_Horizontal.png
 description: Kubernetes Native Policy Management
 keywords:

definitions/install.yaml

@@ -2509,8 +2509,8 @@ spec:
               fieldPath: metadata.namespace
         - name: KYVERNO_SVC
           value: kyverno-svc
-        image: ghcr.io/kyverno/kyverno:v1.3.2-rc2
+        image: ghcr.io/kyverno/kyverno:v1.3.2-rc3
-        imagePullPolicy: Always
+        imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 4
           httpGet:
@@ -2552,8 +2552,8 @@ spec:
           runAsNonRoot: true
           runAsUser: 1000
       initContainers:
-      - image: ghcr.io/kyverno/kyvernopre:v1.3.2-rc2
+      - image: ghcr.io/kyverno/kyvernopre:v1.3.2-rc3
-        imagePullPolicy: Always
+        imagePullPolicy: IfNotPresent
         name: kyverno-pre
         securityContext:
           allowPrivilegeEscalation: false

definitions/kustomization.yaml

@@ -8,7 +8,7 @@ resources:
 images:
 - name: ghcr.io/kyverno/kyverno
   newName: ghcr.io/kyverno/kyverno
-  newTag: v1.3.2-rc2
+  newTag: v1.3.2-rc3
 - name: ghcr.io/kyverno/kyvernopre
   newName: ghcr.io/kyverno/kyvernopre
-  newTag: v1.3.2-rc2
+  newTag: v1.3.2-rc3

definitions/manifest/deployment.yaml

@@ -22,7 +22,7 @@ spec:
       initContainers:
         - name: kyverno-pre
           image: ghcr.io/kyverno/kyvernopre:latest
-          imagePullPolicy: Always
+          imagePullPolicy: IfNotPresent
           securityContext:
             runAsUser: 1000
             runAsNonRoot: true
@@ -35,7 +35,7 @@ spec:
       containers:
         - name: kyverno
           image: ghcr.io/kyverno/kyverno:latest
-          imagePullPolicy: Always
+          imagePullPolicy: IfNotPresent
           args:
           - "--filterK8sResources=[Event,*,*][*,kube-system,*][*,kube-public,*][*,kube-node-lease,*][Node,*,*][APIService,*,*][TokenReview,*,*][SubjectAccessReview,*,*][*,kyverno,*][Binding,*,*][ReplicaSet,*,*][ReportChangeRequest,*,*][ClusterReportChangeRequest,*,*][PolicyReport,*,*][ClusterPolicyReport,*,*]"
           # customize webhook timeout

definitions/release/install.yaml

@@ -2327,6 +2327,7 @@ rules:
   - get
   - list
   - update
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -2508,8 +2509,8 @@ spec:
               fieldPath: metadata.namespace
         - name: KYVERNO_SVC
           value: kyverno-svc
-        image: ghcr.io/kyverno/kyverno:v1.3.2-rc2
+        image: ghcr.io/kyverno/kyverno:v1.3.2-rc3
-        imagePullPolicy: Always
+        imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 4
           httpGet:
@@ -2551,8 +2552,8 @@ spec:
           runAsNonRoot: true
           runAsUser: 1000
       initContainers:
-      - image: ghcr.io/kyverno/kyvernopre:v1.3.2-rc2
+      - image: ghcr.io/kyverno/kyvernopre:v1.3.2-rc3
-        imagePullPolicy: Always
+        imagePullPolicy: IfNotPresent
         name: kyverno-pre
         securityContext:
           allowPrivilegeEscalation: false