Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kyverno for openSUSE:Factory checked in at 2022-06-05 00:45:46 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kyverno (Old) and /work/SRC/openSUSE:Factory/.kyverno.new.1548 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kyverno" Sun Jun 5 00:45:46 2022 rev:4 rq:980801 version:1.7.0 Changes: -------- --- /work/SRC/openSUSE:Factory/kyverno/kyverno.changes 2022-04-01 21:37:10.176797112 +0200 +++ /work/SRC/openSUSE:Factory/.kyverno.new.1548/kyverno.changes 2022-06-05 00:45:50.440384850 +0200 @@ -1,0 +2,398 @@ +Sat Jun 04 18:55:18 UTC 2022 - ka...@b1-systems.de + +- Update to version 1.7.0: + * Tag v1.7.0 (#4050) + * refactor: bump KIND version to use v1.24.0 k8s release (#4049) + * fix policy typo (#4039) (#4045) + * Tag 1.7.0-rc3 (#4036) + * Fix labels with invalid charrs (#4034) (#4035) + * Cherry-pick #4022 (#4033) + * fix vulnerable (#4027) (#4028) + * Request operation value by default to CREATE (#3894) (#4026) + * Release v1.7.0-rc2 (#4021) + * Cherry pick #4007 #4008 (#4020) + * fix: stop mutation policies when autogen internals is enabled (#4004,#4009,#3996) (#4016) + * cherry-pick fix attestation checks https://github.com/kyverno/kyverno/pull/3999 (#4015) + * refactor: add policy event listener in ur controller (#4012) (#4014) + * Support `@` for mutate targets (#3998) (#4010) + * fix: stop mutating cached resource in ur controller (#4003) (#4006) + * fix: move ur controller filtering in reconciler (#3964) (#3994) + * fix: release ur when handler pod is gone (#3993) + * fix: mark ur retry on conflict (#3961) (#3963) + * fix: replica count in helm chart (#3954) (#3962) + * Cherry pick #3953 #3955 (#3960) + * fix: handle UR delete once trigger namespace deleted (#3934) (#3938) + * fix: use patch to update handler status in UR (#3927) + * Cleanup the UR for mutate policies once it's completed (#3923) + * Remove permissions in helm-release workflow (#3901) (#3903) + * Release v1.7.0-rc1 (#3896) + * cherry-pick #3893 (#3895) + * Fix subject match selector issue in cli (#3887) (#3892) + * skip var checks in attestations (#3876) (#3885) + * fix: undo length validation check for generate rule resource name (#3865) (#3872) + * Handle errors properly for mutate and generate on existing resources (#3863) (#3866) + * refactor: remove unused functions (#3844) + * handle subresources (#3841) (#3848) + * feat: trigger generate on existing matched resource (#3819) + * refactor: webhook config package (part 2) (#3833) + * refactor: webhookconfig package (part 1) (#3831) + * fix check and add logs (#3838) + * Allow variables of any kind to be defined (#3828) + * fix: policy deletion in webhookconfig (#3832) + * refactor: imported pkg redeclared and a few other unused func (#3827) + * refactor: shell to prevent globbing and word splitting (#3829) + * CLI should respect scored annotation for warnings (#3821) + * Add an object_from_lists function (#3824) + * Improve logging and error handling in json context (#3825) + * Relax JMESPath variable validation (#3826) + * Load `mutate.targets` via dclient (#3797) + * Cert attestor (#3809) + * handle duplicate images; use container name as key (#3779) + * fix: autogen rules in status (#3728) + * refact: disable leader for update request controller (#3807) + * chore: remove broken .ca from helm chart (#3811) + * fix: remove k8s apiserver from self-generated cert (#3803) + * Policy Validation check for onPolicyUpdate flag (#3814) + * Add `handler` to `UR.status` (#3791) + * fix: remove kubeconfig (#3802) + * fix: cleanup old dependencies from go.sum and go.mod (#3806) + * feat: parse all root CA certs (#3808) + * removed kubeconfig flags (#3744) + * Fix issue with image registry when decoding OCI descriptors with out of spec keys (#3799) + * refactor: move config controller in controllers package (#3790) + * chore: add informer util (#3796) + * chore: remove useless util NewKubeClient (#3795) + * fix: pod stay in terminating when scaling to 0 (#3793) + * Add JMESPath Function `items` (#3777) + * Fix Cli test for image verification (#3760) + * Add rule to PolicyViolation event messages (#3787) + * chore: remove config flags (#3786) + * fix: add missing tombstone calls (#3784) + * refactor: create a package for controllers and move certmanager in it (#3782) + * refactor: policycache package logger (#3783) + * refactor: move ImageExtractorConfigs in api package (#3781) + * refactor: dclient package logger (#3778) + * Fix PR update flow and allow updates from release branches (#3780) + * fix: cert manager duplicate event handler (#3772) + * webhookconfig: if services resource, add services/status as well (#3740) + * refactor: dclient package (#3775) + * refactor: replace clientset by inteface (#3774) + * refactor: cosign package logger (#3773) + * Bump cosign and sigstore version (#3771) + * Auto-update PRs which are enabled for auto-merging (#3766) + * refactor: wait for cache sync (#3765) + * Allow kyverno jp to take yaml files as inputs (#3768) + * Allow non-object type elements for foreach rules (#3763) + * fix: logger call depth (#3759) + * Reduce log verbosity for image extractors (#3764) + * chore: remove unused resourcecache package (#3762) + * refactor: remove unstructured usage from webhookconfig (#3737) + * refactor: use typed informers and add tombstone support to webhookconfig (#3736) + * Remove YAML multiline support in CM values (#3721) + * cleanup event messages and sources (#3741) + * Add tests for required checks for image verify (#3755) + * Add error handling and log for image extractor errors (#3724) + * Fix verify all images (#3748) + * Retry policy creation to avoid flaky CRD readiness (#3752) + * Fix test Summary printing for failure test cases (#3749) + * Enable tests in makefile (#3699) + * refactor: metrics package logger (#3734) + * Use inclusive language (#3738) + * fix: block policy for missing matched kind (#3733) + * fix: missing image verification rules in autogen (#3729) + * Convert GenerateRequest to UpdateRequest for backward compatibility (#3730) + * refactor: autogen package logger (#3727) + * fix: correct tombstone usage (#3718) + * refactor: remove some api unnecessary pointers (4) (#3713) + * Set policy kind to generate events in the webhook (#3726) + * Create UR for both mutate and generate policies (#3717) + * fix: remove supported from autogen status (#3714) + * fix: generated api reference docs (#3711) + * refactor: remove some api unnecessary pointers (3) (#3707) + * Optimize UR listing on policy events (#3712) + * - Create events for imageVerify rules (#3710) + * refactor: remove some api unnecessary pointers (2) (#3705) + * fix: remove unused type TargetMutation (#3706) + * refactor: remove some api unnecessary pointers (#3704) + * add e2e tests for mutate existing policies (#3703) + * Verify digest (#3679) + * fix: kind wash in mutate policy helper (#3698) + * refactor: auth package logger (#3696) + * chore: remove unused custom expansions from client (#3697) + * refactor: client gen code (#3695) + * Fix test command git issue (#3692) + * Enable verifyImages and CLI registry tests (#3684) + * Cherry-pick release-1.6 Helm changes (#3689) + * Show warnings in Helm chart installation; update issue templates (#3673) + * refactor: use typed k8s client in tls package (#3678) + * refactor: config package logger (#3683) + * Fix flaky e2e tests for generate policies (#3681) + * Fix regression in wildcard matches in In/AnyIn operators (#3686) + * feat: remove deprecated flags (#3680) + * Logic of match service account is fixed for namespace (#3662) + * fix test cli CI failures from main (#3682) + * Fix issue pod should not be ready until the policy cache loaded (#3646) + * bug: fix nil pointer when generating events (#3677) + * remove Validate Cmd (#3674) + * Support context variables when using foreach CLI (#3637) + * fix: webhooks are not configured correctly (#3660) + * bump to Go 1.17.9 (#3671) + * fix: api reference docs link (#3664) + * feat: mutate existing resources (#3669) + * fix: pass logger by value (#3666) + * Allow definition of inline variables in context (#3658) + * fix: add char length validation for generate rule resource name (#3640) + * chore: remove e2e tests for kube 1.20 (#3665) + * chore: add support for artifacthub.io/changes in helm charts (#3652) + * fix: policy controller missing GVK (#3659) + * [imageVerify]: adding `digestMutate` to simplify tag-to-digest mutation (#3531) + * Multiple keys (#3636) + * fix: do not remove webhooks during initialization (#3641) + * fix: prevent installing chart with 2 replicas (#3647) + * fix: print helm install warnings (#3648) + * chore: warn if kube version is too old in helm notes (#3650) + * chore: add artifacthub operator and prerelease annotations (#3649) + * refactor: use the typed ns informer in GR controller (#3554) + * refactor: image utils (#3630) + * Remove helm mode setting (#3628) + * refact: remove unused Run function from generate (#3638) + * Fix race condition in pCache (#3632) + * Allow defining imagePullSecrets (#3633) + * Image verify attestors (#3614) + * Allow kyverno-policies to have preconditions defined (#3606) + * updating version in Chart.yaml (#3618) + * Update vulnerable dependencies (#3577) + * Add support for custom image extractors (#3596) + * add-kms-libraries for cosign (#3603) + * refactor cli code from pkg to cmd (#3591) + * fix missing policy.kyverno.io/policy-name label (#3599) + * refactor generate controller (#3589) + * change/suppress warning messages (#3593) + * Feat - add the new CR UpdateRequest for post mutation (#3592) + * Update to cosign 1.7.1 (#3587) + * Update GH workflow config (#3588) + * Update CODEOWNER folders for @samj1912 (#3586) + * Update hash of dependencies instead of mutable version (#3582) + * add support for roles, cluster roles and subjects (#3188) + * fix imageVerify rule conversion (#3583) + * update imageVerify schema (#3574) + * Refactor image extraction to allow extracting custom resources (#3572) + * chore: remove dead code (#3561) + * Add returnType for regexMatch in kyverno jp output (#3575) + * refactor: engine context (#3563) + * Fixes #3555 (#3558) + * update image pull policy for YAML install which uses :latest (#3565) + * add @eddycharly as a maintainer! (#3566) + * chore: add some make help comments (#3560) + * refactor: switch to admission v1 (#3526) + * refactor: make response type (RuleType) typed (#3556) + * refactor: metrics package (#3549) + * refactor: webhooks metrics reporting (#3548) + * test: pass lock by value (#3481) + * refactor: simplify autogen package (#3532) + * refactor: move common utils (#3553) + * refactor: add engine utils sub package (#3552) + * fix: checkEngineResponse in webhooks (#3551) + * Do not generate preconditions not met warning for audit policies (#3487) + * refactor: reduce policy mutations (#3550) ++++ 201 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/kyverno/kyverno.changes ++++ and /work/SRC/openSUSE:Factory/.kyverno.new.1548/kyverno.changes Old: ---- kyverno-1.6.2.tar.gz New: ---- kyverno-1.7.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kyverno.spec ++++++ --- /var/tmp/diff_new_pack.6smElf/_old 2022-06-05 00:45:51.364385633 +0200 +++ /var/tmp/diff_new_pack.6smElf/_new 2022-06-05 00:45:51.368385636 +0200 @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: kyverno -Version: 1.6.2 +Version: 1.7.0 Release: 0 Summary: CLI and kubectl plugin for Kyverno License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.6smElf/_old 2022-06-05 00:45:51.408385670 +0200 +++ /var/tmp/diff_new_pack.6smElf/_new 2022-06-05 00:45:51.412385673 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/kyverno/kyverno</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v1.6.2</param> + <param name="revision">v1.7.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> @@ -17,7 +17,7 @@ <param name="compression">gz</param> </service> <service name="go_modules" mode="disabled"> - <param name="archive">kyverno-1.6.2.tar.gz</param> + <param name="archive">kyverno-1.7.0.tar.gz</param> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.6smElf/_old 2022-06-05 00:45:51.436385694 +0200 +++ /var/tmp/diff_new_pack.6smElf/_new 2022-06-05 00:45:51.436385694 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/kyverno/kyverno</param> - <param name="changesrevision">4b2bf039f6f04cc02cf89dae7e15f8bc17b2ad78</param></service></servicedata> + <param name="changesrevision">704dc46ec30aeb548cd2ad6aa4c02c39829a4823</param></service></servicedata> (No newline at EOF) ++++++ kyverno-1.6.2.tar.gz -> kyverno-1.7.0.tar.gz ++++++ ++++ 87155 lines of diff (skipped) ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/kyverno/vendor.tar.gz /work/SRC/openSUSE:Factory/.kyverno.new.1548/vendor.tar.gz differ: char 5, line 1
