Skip to content

Upgrade kyverno pack to 1.18.2 - #300

Open
svalenciah19 wants to merge 55 commits into
spectrocloud:mainfrom
svalenciah19:kyverno-1.18.2
Open

Upgrade kyverno pack to 1.18.2#300
svalenciah19 wants to merge 55 commits into
spectrocloud:mainfrom
svalenciah19:kyverno-1.18.2

Conversation

@svalenciah19

Copy link
Copy Markdown
Contributor

Upgrade kyverno pack to 1.18.2

svalenciah19 and others added 25 commits April 9, 2026 15:43
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager-v1.21.0.tgz
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/.helmignore
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/Chart.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/README.md
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/NOTES.txt
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/_helpers.tpl
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/cainjector-config.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/cainjector-deployment.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/cainjector-poddisruptionbudget.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/cainjector-psp-clusterrole.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/cainjector-psp-clusterrolebinding.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/cainjector-psp.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/cainjector-rbac.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/cainjector-service.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/cainjector-serviceaccount.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/controller-config.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/crd-acme.cert-manager.io_challenges.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/crd-acme.cert-manager.io_orders.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/crd-cert-manager.io_certificaterequests.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/crd-cert-manager.io_certificates.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/crd-cert-manager.io_clusterissuers.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/crd-cert-manager.io_issuers.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/deployment.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/extras-objects.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/networkpolicy-cainjector.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/networkpolicy-cert-manager.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/networkpolicy-webhooks.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/poddisruptionbudget.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/podmonitor.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/psp-clusterrole.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/psp-clusterrolebinding.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/psp.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/rbac.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/service.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/serviceaccount.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/servicemonitor.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/startupapicheck-job.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/startupapicheck-psp-clusterrole.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/startupapicheck-psp-clusterrolebinding.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/startupapicheck-psp.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/startupapicheck-rbac.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/startupapicheck-serviceaccount.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/webhook-config.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/webhook-deployment.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/webhook-mutating-webhook.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/webhook-poddisruptionbudget.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/webhook-psp-clusterrole.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/webhook-psp-clusterrolebinding.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/webhook-psp.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/webhook-rbac.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/webhook-service.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/webhook-serviceaccount.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/templates/webhook-validating-webhook.yaml
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/values.schema.json
	deleted:    packs/cert-manager-1.21.0/charts/cert-manager/values.yaml
	deleted:    packs/cert-manager-1.21.0/logo.png
	deleted:    packs/cert-manager-1.21.0/pack.json
	deleted:    packs/cert-manager-1.21.0/values.yaml
	deleted:    packs/kyverno-1.18.1/README.md
	deleted:    packs/kyverno-1.18.1/charts/kyverno-3.8.1.tgz
	deleted:    packs/kyverno-1.18.1/charts/kyverno/Chart.lock
	deleted:    packs/kyverno-1.18.1/charts/kyverno/Chart.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/Chart.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_cleanuppolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_clustercleanuppolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_clusterpolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_globalcontextentries.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_policies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_policyexceptions.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_updaterequests.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/reports.kyverno.io/reports.kyverno.io_clusterephemeralreports.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/reports.kyverno.io/reports.kyverno.io_ephemeralreports.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/wgpolicyk8s.io/wgpolicyk8s.io_clusterpolicyreports.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/wgpolicyk8s.io/wgpolicyk8s.io_policyreports.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/crds/values.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/grafana/Chart.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/grafana/dashboard/kyverno-dashboard.json
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/grafana/templates/dashboard.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/grafana/values.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/Chart.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/README.md
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/README.md.gotmpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/crds/policies.kyverno.io_deletingpolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/crds/policies.kyverno.io_generatingpolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/crds/policies.kyverno.io_imagevalidatingpolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/crds/policies.kyverno.io_mutatingpolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/crds/policies.kyverno.io_namespaceddeletingpolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/crds/policies.kyverno.io_namespacedgeneratingpolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/crds/policies.kyverno.io_namespacedimagevalidatingpolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/crds/policies.kyverno.io_namespacedmutatingpolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/crds/policies.kyverno.io_namespacedvalidatingpolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/crds/policies.kyverno.io_policyexceptions.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/templates/crds/policies.kyverno.io_validatingpolicies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/kyverno-api/values.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/openreports/Chart.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/openreports/templates/openreports.io_clusterreports.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/openreports/templates/openreports.io_reports.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/openreports/values.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/.helmignore
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/Chart.lock
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/Chart.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/README.md
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/README.md.gotmpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/.helmignore
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/Chart.lock
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/Chart.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/README.md
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/.helmignore
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/Chart.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/README.md
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_affinities.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_capabilities.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_errors.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_images.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_ingress.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_labels.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_names.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_secrets.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_storage.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_tplvalues.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_utils.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/_warnings.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/validations/_cassandra.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/validations/_mariadb.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/validations/_mongodb.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/validations/_mysql.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/validations/_postgresql.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/validations/_redis.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/templates/validations/_validations.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/charts/common/values.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/NOTES.txt
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/backup/cronjob.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/backup/pvc.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/extra-list.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/networkpolicy-egress.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/primary/configmap.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/primary/extended-configmap.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/primary/initialization-configmap.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/primary/metrics-configmap.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/primary/metrics-svc.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/primary/networkpolicy.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/primary/servicemonitor.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/primary/statefulset.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/primary/svc-headless.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/primary/svc.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/prometheusrule.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/psp.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/read/extended-configmap.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/read/metrics-configmap.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/read/metrics-svc.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/read/networkpolicy.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/read/servicemonitor.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/read/statefulset.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/read/svc-headless.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/read/svc.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/role.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/rolebinding.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/secrets.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/serviceaccount.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/templates/tls-secrets.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/values.schema.json
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/charts/postgresql/values.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/cluster-roles.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/deployment.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/etcd.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/extra-objects.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/hooks/pre-delete-api-service-cleanup.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/namespace.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/pod-disruption-budget.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/roles.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/service-account.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/service-monitor.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/templates/service.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/charts/reports-server/values.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/NOTES.txt
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/_helpers/_deployment.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/_helpers/_flowcontrol.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/_helpers/_image.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/_helpers/_labels.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/_helpers/_names.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/_helpers/_pdb.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/_templating/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/_templating/namespace.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/cert-manager-certificates.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/clusterrole.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/clusterrolebinding.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/configmap.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/deployment.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/flowschema.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/horizontalpodautoscaler.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/networkpolicy.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/poddisruptionbudget.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/prioritylevelconfiguration.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/role.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/rolebinding.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/secret.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/service.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/serviceaccount.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/admission-controller/servicemonitor.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/clusterrole.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/clusterrolebinding.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/configmap.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/deployment.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/networkpolicy.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/poddisruptionbudget.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/role.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/rolebinding.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/service.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/serviceaccount.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/background-controller/servicemonitor.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/cert-manager-certificates.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/clusterrole.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/clusterrolebinding.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/deployment.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/networkpolicy.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/poddisruptionbudget.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/role.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/rolebinding.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/secret.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/service.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/serviceaccount.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/cleanup-controller/servicemonitor.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/config/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/config/configmap.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/config/imagepullsecret.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/config/metricsconfigmap.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/hooks/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/hooks/post-upgrade-migrate-resources.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/hooks/pre-delete-remove-webhooks.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/hooks/pre-delete-scale-to-zero.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/rbac/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/rbac/policies.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/rbac/policyreports.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/rbac/reports.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/rbac/updaterequests.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/clusterrole.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/clusterrolebinding.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/configmap.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/deployment.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/flowschema.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/networkpolicy.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/poddisruptionbudget.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/prioritylevelconfiguration.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/role.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/rolebinding.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/service.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/serviceaccount.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-controller/servicemonitor.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/reports-server/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/tests/_helpers.tpl
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/tests/admission-controller-liveness.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/tests/admission-controller-metrics.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/tests/admission-controller-readiness.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/tests/cleanup-controller-liveness.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/tests/cleanup-controller-metrics.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/tests/cleanup-controller-readiness.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/tests/helper-functions-test.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/tests/reports-controller-metrics.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/templates/validate.yaml
	deleted:    packs/kyverno-1.18.1/charts/kyverno/values.yaml
	deleted:    packs/kyverno-1.18.1/logo.png
	deleted:    packs/kyverno-1.18.1/pack.json
	deleted:    packs/kyverno-1.18.1/values.yaml
	deleted:    packs/sonobuoy-0.57.5/README.md
	deleted:    packs/sonobuoy-0.57.5/logo.png
	deleted:    packs/sonobuoy-0.57.5/manifests/sonobuoy.yaml
	deleted:    packs/sonobuoy-0.57.5/pack.json
	deleted:    packs/sonobuoy-0.57.5/values.yaml

@bulwark-sc-ent bulwark-sc-ent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ CVE scan completed successfully.

Scan Summary:

  • Total images scanned: 6
  • Clean images: 0
  • Images with CVEs: 6
  • Total CVEs found: 131

🔴 Critical CVEs: 1
🟠 High CVEs: 33
🟡 Medium CVEs: 12
🟢 Low CVEs: 85

Images with CVEs:

  • reg.kyverno.io/kyverno/background-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
  • reg.kyverno.io/kyverno/cleanup-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
  • reg.kyverno.io/kyverno/kyverno-cli:v1.18.2: 31 CVEs (Critical: 1, High: 8, Medium: 2, Low: 20)
    Critical CVEs: CVE-2026-45570
  • reg.kyverno.io/kyverno/kyverno:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
  • reg.kyverno.io/kyverno/kyvernopre:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
  • reg.kyverno.io/kyverno/reports-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)

⚠️ Please review the CVE findings above and address critical/high severity issues before merging.

@bulwark-sc-ent bulwark-sc-ent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ CVE scan completed successfully.

Scan Summary:

  • Total images scanned: 6
  • Clean images: 0
  • Images with CVEs: 6
  • Total CVEs found: 131

🔴 Critical CVEs: 1
🟠 High CVEs: 33
🟡 Medium CVEs: 12
🟢 Low CVEs: 85

Images with CVEs:

  • reg.kyverno.io/kyverno/background-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
  • reg.kyverno.io/kyverno/cleanup-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
  • reg.kyverno.io/kyverno/kyverno-cli:v1.18.2: 31 CVEs (Critical: 1, High: 8, Medium: 2, Low: 20)
    Critical CVEs: CVE-2026-45570
  • reg.kyverno.io/kyverno/kyverno:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
  • reg.kyverno.io/kyverno/kyvernopre:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
  • reg.kyverno.io/kyverno/reports-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)

⚠️ Please review the CVE findings above and address critical/high severity issues before merging.

@vishwanaths

vishwanaths commented Aug 23, 2026

Copy link
Copy Markdown
Collaborator

Pack review — kyverno-1.18.2 (repo: spectrocloud/pack-central)

Packs Validation: ✅ passed (run https://github.com/spectrocloud/pack-central/actions/runs/31711520992/job/94485501676)
source annotation: ✅ community matches expected community
Pack metadata: name=kyverno version=1.18.2 addonType=system app layer=addon displayName=Kyverno contributor=spectrocloud

Compared against packs/kyverno-1.18.1/

Summary of differences

  • pack.json: version bumped 1.18.11.18.2; .charts entry bumped charts/kyverno-3.8.1.tgzcharts/kyverno-3.8.2.tgz. No other keys changed (annotations/addonType/layer/displayName untouched).
  • charts/kyverno/Chart.yaml: chart version/appVersion bumped 3.8.1/v1.18.13.8.2/v1.18.2 (top-level + crds and grafana subchart Chart.yaml versions bumped in lockstep). kyverno-api, openreports, and reports-server subcharts are byte-identical to the prior version (unchanged tree hashes).
  • charts/kyverno/Chart.lock: dependency versions and digest/generated timestamp updated to match the new chart version.
  • values.yaml (600 changed lines, mostly reformatting): all 6 image references (background-controller, kyvernopre, cleanup-controller, reports-controller, kyverno-cli, kyverno) bumped tag v1.18.1v1.18.2, consistent with the pack version. The bulk of the remaining diff is indentation/whitespace reflow (list items and comments re-indented) with no functional value changes detected; a few inline comments moved onto the same line as their key (e.g. imagePullSecrets: [] # - secretName).
  • charts: kyverno-3.8.1.tgz (719,178 bytes) → kyverno-3.8.2.tgz (719,383 bytes), +205 bytes.
  • Files added: none beyond the new pack directory itself (all files under packs/kyverno-1.18.2/ show as "ADDED" in the PR diff simply because it's a new version directory — content-level comparison above is against packs/kyverno-1.18.1/).
  • Files removed: none.

pack.json diff

12c12
<     "charts/kyverno-3.8.1.tgz"
---
>     "charts/kyverno-3.8.2.tgz"
16c16
<   "version": "1.18.1",
---
>   "version": "1.18.2",

values.yaml diff

7,12c7,12
<       - image: reg.kyverno.io/kyverno/background-controller:v1.18.1
<       - image: reg.kyverno.io/kyverno/kyvernopre:v1.18.1
<       - image: reg.kyverno.io/kyverno/cleanup-controller:v1.18.1
<       - image: reg.kyverno.io/kyverno/reports-controller:v1.18.1
<       - image: reg.kyverno.io/kyverno/kyverno-cli:v1.18.1
<       - image: reg.kyverno.io/kyverno/kyverno:v1.18.1
---
>       - image: reg.kyverno.io/kyverno/background-controller:v1.18.2
>       - image: reg.kyverno.io/kyverno/kyvernopre:v1.18.2
>       - image: reg.kyverno.io/kyverno/cleanup-controller:v1.18.2
>       - image: reg.kyverno.io/kyverno/reports-controller:v1.18.2
>       - image: reg.kyverno.io/kyverno/kyverno-cli:v1.18.2
>       - image: reg.kyverno.io/kyverno/kyverno:v1.18.2
...
(diff truncated — 600 lines changed total, mostly whitespace/indentation reflow across the file; see the Files tab for the full diff)

Naming drift (informational)

  • None detected. pack.json.name = kyverno and Chart.yaml.name = kyverno match in both this version and the immediately prior version (packs/kyverno-1.18.1/); the oldest indexed version (packs/kyverno-1.12.2/) also uses the same chart tarball naming convention. Full reverse repo-wide scan (chart name → pack name, direction b) was not exhaustively run given the low-risk, well-established nature of this pack name; no partial-scan findings surfaced in the forward check.

Blockers

  • None.

Nits / observations

  • values.yaml carries a large (600-line) whitespace/indentation reflow alongside the version bump — purely cosmetic as far as I can tell (likely regenerated via helm-docs/chart tooling), but worth a quick manual skim since large mechanical diffs can occasionally hide an accidental value change.
  • Unrelated to Packs Validation: the external security-scans/syft-license check (bulwark) reports FAILURE on this PR. Out of scope for this reviewer's pass/fail gate (only Packs Validation is evaluated per the review contract), but maintainers may want to check it before merge.
Validator output — 7/7 checks passed
  • ✅ JSON syntax is valid for packs/kyverno-1.18.2/pack.json
  • ✅ Schema validation passed for packs/kyverno-1.18.2/pack.json
  • ✅ pack.json version has no leading 'v' for packs/kyverno-1.18.2/pack.json
  • ✅ Logo file is present in pack packs/kyverno-1.18.2
  • ✅ README.md file is present in pack packs/kyverno-1.18.2
  • ✅ Successfully verified Image content section for packs/kyverno-1.18.2
  • ✅ Packs validation successful...

Review generated by the pack-reviewer Claude Code subagent.

vishwanaths added a commit that referenced this pull request Aug 24, 2026
…values

Replace the shallow "charts.<name> exists as a mapping" check with a proper
structural subset comparison + duplicate detection, delegated to a small
Python helper (validator/check-values-structure.py) because pure yq gets
brittle for recursive walks.

For each chart listed in pack.json .charts:

  - Structural subset: every key path under charts.<Chart.yaml name> in the
    pack values.yaml must exist as a key path in the chart's own values.yaml.
    Values may differ - only shape is compared, so overrides are fine.

  - Free-form exception: when the corresponding node in the chart's
    values.yaml is an empty sequence ([]) or an empty mapping ({}) - Helm's
    conventional user-extension points like tolerations:[], podLabels:{},
    annotations:{}, resources:{} - the pack may define anything under it.

  - Templates-only charts (no default values.yaml in the tarball) skip the
    subset check with a NOTE and only run duplicate detection.

  - Duplicate detection: within any mapping under charts.<name>, no repeated
    key; within any sequence, no repeated item (canonical YAML form). Catches
    copy-paste mistakes that yaml parsers silently swallow.

Workflow: install python3-yaml alongside the existing tools so the helper
has PyYAML available.

Smoke-tested against the 17 open PRs: 12 pass, 3 n/a (no charts), 2 real
findings surfaced (kyverno #300 has a stray top-level 'templating' key not
in the chart schema; loki #287 references 7 keys - bloomCompactor,
allow_structured_metadata, tsdb_shipper.* - that don't exist in the
bundled chart's values.yaml).
vishwanaths added a commit that referenced this pull request Aug 25, 2026
…wiring (#308)

* validator: enforce declared kubeManifests + charts files exist, and chart values wiring

Extend the Packs Validation script with three checks that run per changed pack:

1. validate_kube_manifests - if pack.json declares .kubeManifests, every listed
   manifest path must exist under the pack root.
2. validate_charts_exist - if pack.json declares .charts, every listed .tgz
   must exist under the pack root.
3. validate_chart_values_structure - for each chart tarball, read Chart.yaml's
   .name and require pack values.yaml to have a non-empty charts.<name>
   mapping so the chart-level values keys sit under it.

These catch broken packs where the manifest/chart file listed in pack.json is
missing from the pack, and chart-based packs whose pack-level values.yaml is
not wired to override the chart's defaults.

Verified with a smoke run against the 17 open PRs (all pass) and against
argocd-3.3.5, kubevirtbmc-0.6.0 on main.

* validator: structural subset + duplicate checks for chart-based pack values

Replace the shallow "charts.<name> exists as a mapping" check with a proper
structural subset comparison + duplicate detection, delegated to a small
Python helper (validator/check-values-structure.py) because pure yq gets
brittle for recursive walks.

For each chart listed in pack.json .charts:

  - Structural subset: every key path under charts.<Chart.yaml name> in the
    pack values.yaml must exist as a key path in the chart's own values.yaml.
    Values may differ - only shape is compared, so overrides are fine.

  - Free-form exception: when the corresponding node in the chart's
    values.yaml is an empty sequence ([]) or an empty mapping ({}) - Helm's
    conventional user-extension points like tolerations:[], podLabels:{},
    annotations:{}, resources:{} - the pack may define anything under it.

  - Templates-only charts (no default values.yaml in the tarball) skip the
    subset check with a NOTE and only run duplicate detection.

  - Duplicate detection: within any mapping under charts.<name>, no repeated
    key; within any sequence, no repeated item (canonical YAML form). Catches
    copy-paste mistakes that yaml parsers silently swallow.

Workflow: install python3-yaml alongside the existing tools so the helper
has PyYAML available.

Smoke-tested against the 17 open PRs: 12 pass, 3 n/a (no charts), 2 real
findings surfaced (kyverno #300 has a stray top-level 'templating' key not
in the chart schema; loki #287 references 7 keys - bloomCompactor,
allow_structured_metadata, tsdb_shipper.* - that don't exist in the
bundled chart's values.yaml).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants