Merge branch 'main' of https://github.com/kyverno/kyverno into main

README.md

@@ -1,6 +1,6 @@
 # Kyverno [![Tweet](https://img.shields.io/twitter/url/http/shields.io.svg?style=social)](https://twitter.com/intent/tweet?text=Kubernetes%20Native%20Policy%20Management.%20No%20new%20language%20required%21&url=https://github.com/kyverno/kyverno/&hashtags=kubernetes,devops)
 
-**Kubernetes Native Policy Management**
+**Kubernetes Native Policy Management 🎉**
 
 ![build](https://github.com/kyverno/kyverno/workflows/build/badge.svg) 
 ![prereleaser](https://github.com/kyverno/kyverno/workflows/prereleaser/badge.svg) 
@@ -11,30 +11,27 @@
 
 <a href="https://kyverno.io" rel="kyverno.io">![logo](img/Kyverno_Horizontal.png)</a>
 
-<p class="callout info" style="font-size: 2000%;">
+<p class="callout info" style="font-size: 100%;">
 Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.
 </p>
 
-## Documentation
+## 📙 Documentation 
 
 Kyverno guides and reference documents are available at: <a href="https://kyverno.io/">kyverno.io</a>. 
 
 Try the [quick start guide](https://kyverno.io/docs/introduction/#quick-start) to install Kyverno and create your first policy.
 
-## Contributing
+## ➕ Contributing
 
 Checkout out the Kyverno <a href="https://kyverno.io/community">Community</a> page for ways to get involved and details on joining our next community meeting.
 
-## Getting Help
+## 🙋‍♂️ Getting Help
+
+* For feature requests and bugs, file an [issue](https://github.com/kyverno/kyverno/issues).
+* For discussions or questions, join the **#kyverno** channel on the [Kubernetes Slack](https://kubernetes.slack.com/)
+* For community meeting access join the [mailing list](https://groups.google.com/g/kyverno).
+* To get updates ⭐️ [star this repository](https://github.com/kyverno/kyverno/stargazers).
 
-- For feature requests and bugs, file an [issue](https://github.com/kyverno/kyverno/issues).
-- For discussions or questions, join the **#kyverno** channel on the [Kubernetes Slack](https://kubernetes.slack.com/) or the [mailing list](https://groups.google.com/g/kyverno).
-
-## Spread The Love
-
-We built Kyverno to make it easy to secure and manage Kubernetes configurations. If you like the project, [let us know](https://github.com/kyverno/kyverno/stargazers)!
-
-[![Stargazers over time](https://starchart.cc/kyverno/kyverno.svg)](https://starchart.cc/kyverno/kyverno)
 
 
 

charts/kyverno/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 name: kyverno
-version: v1.3.6-rc3
-appVersion: v1.3.6-rc3
+version: v1.3.6-rc4
+appVersion: v1.3.6-rc4
 icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
 description: Kubernetes Native Policy Management
 keywords:

charts/kyverno/templates/policies/restricted/require-non-root-groups.yaml

@@ -48,7 +48,7 @@ spec:
         pattern:
           spec:
             =(securityContext):
-              =(supplementalGroups): ["null"]
+              =(supplementalGroups): ">0"
     - name: check-fsGroup
       match:
         resources:

definitions/install.yaml

@@ -2441,7 +2441,7 @@ spec:
               fieldPath: metadata.namespace
         - name: KYVERNO_SVC
           value: kyverno-svc
-        image: ghcr.io/kyverno/kyverno:v1.3.6-rc3
+        image: ghcr.io/kyverno/kyverno:v1.3.6-rc4
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 2
@@ -2483,7 +2483,7 @@ spec:
           readOnlyRootFilesystem: true
           runAsNonRoot: true
       initContainers:
-      - image: ghcr.io/kyverno/kyvernopre:v1.3.6-rc3
+      - image: ghcr.io/kyverno/kyvernopre:v1.3.6-rc4
         imagePullPolicy: IfNotPresent
         name: kyverno-pre
         resources:

definitions/kustomization.yaml

@@ -8,7 +8,7 @@ resources:
 images:
 - name: ghcr.io/kyverno/kyverno
   newName: ghcr.io/kyverno/kyverno
-  newTag: v1.3.6-rc3
+  newTag: v1.3.6-rc4
 - name: ghcr.io/kyverno/kyvernopre
   newName: ghcr.io/kyverno/kyvernopre
-  newTag: v1.3.6-rc3
+  newTag: v1.3.6-rc4

definitions/release/install.yaml

@@ -2441,7 +2441,7 @@ spec:
               fieldPath: metadata.namespace
         - name: KYVERNO_SVC
           value: kyverno-svc
-        image: ghcr.io/kyverno/kyverno:v1.3.6-rc3
+        image: ghcr.io/kyverno/kyverno:v1.3.6-rc4
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 2
@@ -2483,7 +2483,7 @@ spec:
           readOnlyRootFilesystem: true
           runAsNonRoot: true
       initContainers:
-      - image: ghcr.io/kyverno/kyvernopre:v1.3.6-rc3
+      - image: ghcr.io/kyverno/kyvernopre:v1.3.6-rc4
         imagePullPolicy: IfNotPresent
         name: kyverno-pre
         resources: