Security
Fixed
- Fix broken links in documentation.
- Don’t remove the
crd-install job when the job fails, so that we can investigate.
- Extend readonly ClusterRole to include pods/log so customers can debug failures on the management clusters.
Added
- Add CI job to push to
openstack-app-collection. - Add CI job to push to
gcp-app-collection. - Configured read header timeout in the http server
Fixed
- Dependency updates for security.
Changed
- Fix schema type for tolerations (#157).
Changed
- Make ServiceMonitor relabelings configurable and drop unhelpful pod, container, and service labels by default.
- Build with
app-build-suite. - Add
app-test-suite basic smoke tests.
Changed
- Push
kyverno to the cloud-director app collection. - Update
kyverno-policy-reporter to upstream version 2.10.1 / chart version 2.13.1.
Changed
- Align
PodSecurityPolicy for CRD & ClusterIssuer install jobs to actual needs. - Fix
PodSecurityPolicy name for CA injector.
Changed
- Change namespace on GCP management clusters to
kyverno.