This is a patch release for bug fixes and improvements.
BREAKING CHANGE
- Kyverno uses the custom ClusterRoles during initialization, the pre-installed generate policies may be impacted by this change. Please check configure-kyverno-role for details.
Enhancements
- Change "kinds" in match / exclude block to be optional, #670
- Improve the patch annotations generated by Kyverno, #640
- Kyverno CLI, #536
- Documentation updates, #647
Bug Fixes
- Auto-generated policies for pod controllers support policy UPDATE, #635
- 'kubectl scale' command fails due to validating webhook configuration, #253, #570
- Cannot match or exclude clusterroles, #634
- Filters in Match and Exclude are processed as a logical AND, #644
CRD Changes
- "kinds" is not a required field, commit
- Add "background" to openAPI schema, commit
- Add ClusterRoles "kyverno:*", commit
Best Practice Policies