Features
- Introduce an AdmissionPolicy CRD that allows users to create Namespaced policies
- Introduce monitor mode. Requests that go through the policy in monitor mode will be accepted, as if the policy didn't exist. The policy result is traced in the policy-server
Upgrade steps
This is a list of steps to perform the upgrade to the v3.5.7 release.
- Delete all existing webhooks created by kubewarden
kubectl delete validatingwebhookconfigurations.admissionregistration.k8s.io -l kubewarden
kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io -l kubewarden
Important! Once you delete all the webhooks all requests will be accepted, as if there were no policies, until the migration is done.
- Upgrade kubewarden-crds
helm upgrade kubewarden-crds --version 0.1.2 kubewarden/kubewarden-controller
helm upgrade kubewarden-controller --version 3.5.7 kubewarden/kubewarden-controller