kyverno/kyverno v1.12.2-rc.1

on GitHub

✨ Added ✨

• Added an option to allow kyverno apply command to continue on failure (#10036)

Helm

• Added an option to configure webhook pod annotations (#9875)

🐛 Fixed 🐛

• Fixed missing CONNECT operation in the webhook config for pod/exec subresource (#9855)
• Fixed an issue to evaluate multiple policyexceptions regardless of condition failures (#9994)
• Fixed the VAPs generation issues for pods/ephemeralcontainers, resourceNames field (#10162, #10187, #10208)
• Fixed the mutate existing policies to be applied on matched resources only (#10164)
• Fixed an issue to skip generating VAPs for policies that match multiple resources with a namespace/object selector (#10181)
• Fixed a CLI issue when the level parameter of the apply and test commands does not work (#10216)
• Fixed CVEs (#10225)
• Fixed an issue when applying multiple validate rules produces the wrong result (#10236)
• Fixed context canceled issue when creating reports (#10245)
• Fixed an issue in foreach mutate policies with Descending order defined causing unexpected patches (#10252)
• Fixed an event generation issue when the size exceeds the limit (#10255)
• Fixed operation-based webhook configuration issue when there are multiple policies matching the same kind (#10262)
• Fixed flake VAPs tests (#10263)
• Fixed a CLI issue when loading policies from the filesystem (#10270)
• Fixed webhook configuration update loop (#10274)

🔧 Others 🔧

• Made CLI results count public (#10177)
• Added a new linter prealloc to enforce slice declarations best practice (#10250)