kyverno/kyverno v1.4.3-rc1 on GitHub

v1.4.3-rc1

k8swgpolicy.io/v1alpha1 is not supported, for any external integration of PolicyReport, please pay attention to version upgrade #2376: reprot.results[].status has been changed to report.restults[].result.
There was an issue when upgrading from v1.4.2, the temporary workaround is to delete the Kyverno pod and let Kubernetes bring up a new one.

CLI variables should be coming from the resources itself (#1996)
Adding ownerRef with namespace for Kyverno managed webhook configurations (#2263)
Support new policy report CRD #1753, (#2376)
Clean up formatting in mutate test file (#2338)
Add test case for non zero index patches with patchesJson6902 (#2339)
Cleanup Kustomization configurations (#2274)
Kyverno CLI apply command improvements (#2342, #2331, #2318, #2310, #2296, #2290, #2122, #2120, #2367)
Validate path element begins with a forward slash in patchesJson6902 (#2117)
Support gvk in CLI for policies applied on cluster (#2363)
Update cosign (#2266)
Allow users to skip policy validation when mutating resources (#2185)
Allow NetworkPolicy customization (#2287)
Patch labels to Helm templates (#2262)
Support for configurable automatic refresh of metrics and selective exposure of metrics at namespace-level (#2268)
Support global anchor behavior in validation and mutation rules (#2201)

Unable to use GreaterThan operator with precondition (#2211)
Fix precondition logic for mutating policies (#2271, #2228, #2352)
Fix Kyverno Deployment updateStrategy (#1982)
Helm chart releases are not gated behind something like a tag (#2264)
Add validation for generate loops (#1941)
Policy doesn't work when match.resources.kinds is set to Policy/ClusterPolicy (#2149)
Kyverno CLI panics when context is added to rule, but not actually used (#2289)
Generate policies with background:false and synchronize:false are still re-evaluated every 15mins (#2181)
Tests applied on excluded resources should succeed (#2295)
Kyverno CLI with context variables needs documentation (#2291)
Kyverno CLI test requires var resolution for non-applicable resources (#2331)
Test command result showing Notfound in result (#2296)
any/all in match block fails in the CLI (#2350)
JMESPath contains function behavior not consistent in Kyverno vs upstream (#2345)
patchStrategicMerge fails to mutate if policy written with initContainers object (#1916)
Check Any and All ResourceFilters during policy mutation (#2373)
Support variable replacement in the key of annotations (#2316)
Background scan doesn't work with any/all (#2299)

Kyverno gives error when installed with KEDA (#2267)
Using Argo to deploy, baseline policies are constantly out-of-sync (#2234)
Policy update, flux2-multi-tenancy fails to update kyverno to v1.4.2-rc3 (#2241)
Throws a variable substitution error in spite of no variable present in the policy (#2374)

Thanks to all our contributors! 😊