1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-28 10:28:36 +00:00

release v1.5.0-rc1

Signed-off-by: ShutingZhao <shutting06@gmail.com>
This commit is contained in:
ShutingZhao 2021-10-07 16:04:08 -07:00
parent 0153bd7c72
commit eddd258a40
7 changed files with 112 additions and 46 deletions

View file

@ -1,9 +1,75 @@
## v1.5.0-rc1
### Note
- The Helm CRDs was switched back to kyverno chart. To upgrade using Helm, please refer to https://github.com/kyverno/website/pull/304.
- With the change of dynamic webhooks, the readiness of the policy is reflected by `.status.ready`, When ready, it means the policy is ready to serve the admission requests.
### Deprecation
- To add a consistent style in flag names the following flags have been deprecated `webhooktimeout`, `gen-workers`,`disable-metrics`, `background-scan`, `auto-update-webhooks`, `profile-port`, `metrics-port` these will be removed in 1.6.0. The new flags are `webhookTimeout`, `genWorkers`, `disablMetrics`, `backgroundScan`, `autoUpdateWebhooks`,`profilePort`, `metricsPort`.
- To add a consistent style in flag names the following flags have been deprecated `webhooktimeout`, `gen-workers`,`disable-metrics`, `background-scan`, `auto-update-webhooks`, `profile-port`, `metrics-port` these will be removed in 1.6.0. The new flags are `webhookTimeout`, `genWorkers`, `disableMetrics`, `backgroundScan`, `autoUpdateWebhooks`,`profilePort`, `metricsPort` (#1991).
### Features
- Feature/foreach validate #2443
- Feature/foreach mutate #2493
- Feature/cosign attest #2487
- Make webhooks configurable #1981
- FailurePolicy `Ignore` vs `enforcing` policies #893
- Make failurePolicy configurable per Kyverno policy #1995
- Add feature gate flag "auto-update-webhooks" #2321
- Extend the "kyverno test" command to handle mutate policies #1821
### Enhancements
- Integrate Github Action #2349
- Use a custom repository with verifyImages #2294
- Add pod anti-affinity to Kyverno #1966
- Rename 'policies.kyverno.io/patches' to reflect actual functionality #1528
- Add global variables to CLI #1472
- Allow configuration of test image through chart values #2410
- Switch Helm CRDs back to kyverno chart and moving Policies to dedicated chart #2355
- Updating Contribution Markdown #2450
- Validate GVK in `match`/`exclude` block #2389
- Add `PodDisruptionBudget` in Kustomize & Helm #1979
- Upgrade Kyverno managed webhook configurations to v1 #2424
- Allow background scanning if only request.operation is used in preconditions #1883
- Add security vulnerability scan for the kyverno images #1557
- Run vulnerability scan during Kyverno builds #2432
- Sign Kyverno images and generate SBOM #2175
- Make flag name styles consistent #1991
- Improve init container to use DeleteCollection to remove policy reports #2477
- Leader election for initContianer #1965
- Sample policies should have related CLI apply/test #1994
### Bug Fixes
- Autogen-controllers does not work with "any" rules #2337
- Use `patchesJson6902` where path contains a non-zero index number causes validation failure #2100
- CLI apply command - not filtering the resources from cluster #2417
- Kyverno ConfigMap name not consistent in Helm/Docs and install.yaml #2347
- Fixing helm chart documentation inconsistency #2419
- Create/Update policy failing with custom JMESPath #2409
- GenerateRequests are not cleaned up #2332
- NetworkPolicy: from should be an array of objects #2423
- Kyverno misinterprets pod spec environment variable placeholders as references #2413
- CLI | skipped policy message is displayed even if variable is passed #2445
- Update minio to address vulnerabilities #1953
- No warning about background mode when using `any` / `all` in `match` or `exclude` blocks #2300
- Flaky unit test #2406
- Generating a Kyverno Policy throws error "Policy is unstructured" #2155
- Network policy is not getting generated on creation of a pod #2095
- Namespace generate policy fails with `request.operation` precondition #2226
- Fix `any`/`all` matching logic in the background controller #2386
- Run code-generator for 1.5 schema changes #2465
- Generate policies with no Namespace field #2333
- Excluding clusterRoles does not work if nested under any or all #2301
- Fix auto-gen for `validate.foreach` #2464
- "Auto-gen rules for pod controllers" fails when matching kind is "v1/Pod" #2415
- Set Namespace environment variable for initContainer #2499
### Others
- Cannot add label to nodes #2397
- Purge grafana dashboard json from this project #2399
Thanks to all our contributors! 😊
## v1.4.3

View file

@ -1,7 +1,7 @@
apiVersion: v1
name: kyverno-policies
version: v2.1.0
appVersion: v1.4.3
appVersion: v1.5.0-rc1
icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
description: Kubernetes Native Policy Management Policies
keywords:

View file

@ -1,7 +1,7 @@
apiVersion: v1
name: kyverno
version: v2.1.0
appVersion: v1.4.3
appVersion: v1.5.0-rc1
icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
description: Kubernetes Native Policy Management
keywords:

View file

@ -11,7 +11,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: clusterpolicies.kyverno.io
spec:
group: kyverno.io
@ -1306,7 +1306,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: clusterpolicyreports.wgpolicyk8s.io
spec:
group: wgpolicyk8s.io
@ -1799,7 +1799,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: clusterreportchangerequests.kyverno.io
spec:
group: kyverno.io
@ -2292,7 +2292,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: generaterequests.kyverno.io
spec:
group: kyverno.io
@ -2473,7 +2473,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: policies.kyverno.io
spec:
group: kyverno.io
@ -3768,7 +3768,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: policyreports.wgpolicyk8s.io
spec:
group: wgpolicyk8s.io
@ -4261,7 +4261,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: reportchangerequests.kyverno.io
spec:
group: kyverno.io

View file

@ -8,7 +8,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno
---
apiVersion: apiextensions.k8s.io/v1
@ -23,7 +23,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: clusterpolicies.kyverno.io
spec:
group: kyverno.io
@ -2058,7 +2058,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: clusterpolicyreports.wgpolicyk8s.io
spec:
group: wgpolicyk8s.io
@ -2739,7 +2739,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: clusterreportchangerequests.kyverno.io
spec:
group: kyverno.io
@ -3420,7 +3420,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: generaterequests.kyverno.io
spec:
group: kyverno.io
@ -3616,7 +3616,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: policies.kyverno.io
spec:
group: kyverno.io
@ -5653,7 +5653,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: policyreports.wgpolicyk8s.io
spec:
group: wgpolicyk8s.io
@ -6332,7 +6332,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: reportchangerequests.kyverno.io
spec:
group: kyverno.io
@ -7011,7 +7011,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno-service-account
namespace: kyverno
---
@ -7025,7 +7025,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
rbac.authorization.k8s.io/aggregate-to-admin: "true"
name: kyverno:admin-policies
rules:
@ -7047,7 +7047,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
rbac.authorization.k8s.io/aggregate-to-admin: "true"
name: kyverno:admin-policyreport
rules:
@ -7069,7 +7069,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
rbac.authorization.k8s.io/aggregate-to-admin: "true"
name: kyverno:admin-reportchangerequest
rules:
@ -7091,7 +7091,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:customresources
rules:
- apiGroups:
@ -7137,7 +7137,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:generatecontroller
rules:
- apiGroups:
@ -7172,7 +7172,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:leaderelection
rules:
- apiGroups:
@ -7196,7 +7196,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:policycontroller
rules:
- apiGroups:
@ -7219,7 +7219,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:userinfo
rules:
- apiGroups:
@ -7245,7 +7245,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:webhook
rules:
- apiGroups:
@ -7297,7 +7297,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:customresources
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -7318,7 +7318,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:generatecontroller
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -7339,7 +7339,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:leaderelection
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -7360,7 +7360,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:policycontroller
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -7381,7 +7381,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:userinfo
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -7402,7 +7402,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno:webhook
roleRef:
apiGroup: rbac.authorization.k8s.io
@ -7427,7 +7427,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno
namespace: kyverno
---
@ -7444,7 +7444,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno-metrics
namespace: kyverno
---
@ -7458,7 +7458,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno-svc
namespace: kyverno
spec:
@ -7480,7 +7480,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno-svc-metrics
namespace: kyverno
spec:
@ -7502,7 +7502,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno
namespace: kyverno
spec:
@ -7525,7 +7525,7 @@ spec:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
spec:
affinity:
podAntiAffinity:
@ -7554,7 +7554,7 @@ spec:
fieldPath: metadata.namespace
- name: KYVERNO_SVC
value: kyverno-svc
image: ghcr.io/kyverno/kyverno:v1.4.3
image: ghcr.io/kyverno/kyverno:v1.5.0-rc1
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 2
@ -7606,7 +7606,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: ghcr.io/kyverno/kyvernopre:v1.4.3
image: ghcr.io/kyverno/kyvernopre:v1.5.0-rc1
imagePullPolicy: IfNotPresent
name: kyverno-pre
resources:
@ -7638,7 +7638,7 @@ metadata:
app.kubernetes.io/managed-by: Kustomize
app.kubernetes.io/name: kyverno
app.kubernetes.io/part-of: kyverno
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
name: kyverno
namespace: kyverno
spec:

View file

@ -9,6 +9,6 @@ transformers:
images:
- name: ghcr.io/kyverno/kyverno
newTag: v1.4.3
newTag: v1.5.0-rc1
- name: ghcr.io/kyverno/kyvernopre
newTag: v1.4.3
newTag: v1.5.0-rc1

View file

@ -4,7 +4,7 @@ kind: LabelTransformer
metadata:
name: labelTransformer
labels:
app.kubernetes.io/version: v1.4.3
app.kubernetes.io/version: v1.5.0-rc1
fieldSpecs:
- path: metadata/labels
create: true