Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kyverno for openSUSE:Factory checked in at 2022-10-11 18:02:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kyverno (Old) and /work/SRC/openSUSE:Factory/.kyverno.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kyverno" Tue Oct 11 18:02:49 2022 rev:9 rq:1009366 version:1.8.0 Changes: -------- --- /work/SRC/openSUSE:Factory/kyverno/kyverno.changes 2022-09-27 20:13:55.737826788 +0200 +++ /work/SRC/openSUSE:Factory/.kyverno.new.2275/kyverno.changes 2022-10-11 18:05:20.214064156 +0200 @@ -1,0 +2,403 @@ +Mon Oct 10 11:59:03 UTC 2022 - ka...@b1-systems.de + +- Update to version 1.8.0: + * release: 1.8 (#4851) + * Update PSa images dsecription (#4840) (#4841) + * tag v1.8.0-rc6 (#4839) + * fix extension checks (#4836) (#4837) + * Cherry pick #4814 (#4826) + * update helm doc (#4824) + * fix: validationFailureAction default value (#4822) (#4823) + * Cherry-pick #4815 (#4817) + * tag v1.8.0-rc5 (#4807) + * fix: subject and issuer validation when attestations are present (#4786) (#4805) + * skip succeed rules when building the blocked return message (#4804) (#4806) + * cherry-pick #4738 (#4799) + * cherry-pick #4793 (#4800) + * update cosign (#4797) + * chore: change charts registry url (#4768) (#4780) + * tag v1.8.0-rc4 (#4759) + * fix: watch error in resource controller (#4751) (#4753) + * fix: reports not generated (#4743) (#4744) + * tag v1.8.0-rc3 (#4741) + * fix: containerd dependency vulnerability (#4629) (#4740) + * Add PSa policy validations (#4735) (#4739) + * Added `x509_decode` JMESPath function (#4664) (#4737) + * feat: add matchlabel selector support with multiple clone (#4713) (#4734) + * fix: output make messages to stderr (#4727) + * fix crds yaml conflicts + * feat: reports v2 implementation (#4608) + * docs: add policy cache controller docs (#4714) (#4730) + * chore: update client code generator (#4711) (#4728) + * Support PSa integration by `controlName` only (#4710) (#4725) + * chore: group unit and cli tests targets and separate sections (#4693) (#4723) + * chore: enable overriding images repo (#4694) (#4721) + * chore: refactor manifests related makefile targets (#4706) (#4720) + * fix: change key used in test (#4718) (#4719) + * fix: missing client wrapper (#4703) (#4709) + * refactor: use pod name as leader id (#4680) (#4708) + * fix: split webhook handlers per failure policy (#4650) (#4707) + * fix: shutdown controllers workers gracefully (#4681) (#4704) + * fix: namespaced policy targets namespace validation and scoping them to the policy's namespace (#4671) (#4702) + * refactor: replace signal package by signal.NotifyContext (#4691) (#4701) + * fix: jmespath random error handling (#4697) (#4699) + * chore: simplify go mod (#4692) (#4696) + * fix: bump net standard lib (#4685) (#4690) + * fix: handle auth permission for cloneList validation (#4684) (#4687) + * fix: namespaced policy not validated in engine (#4653) (#4682) + * chore: bump minimum go version (#4677) (#4678) + * Fix issue for wildcard versions (#4670) (#4673) + * chore: publish sbom result to a different repositry from an image (#4665) (#4667) + * refactor: update log based on the policy types (#4646) (#4658) + * feat: add explicit key support to controller utils (#4628) (#4659) + * feat: add feature flag to disable background scan (#4638) (#4660) + * refactor: split policyreport api files (#4641) (#4657) + * fix: missing elements in v2beta1 api (#4654) (#4656) + * refactor: add a couple of constants in api (#4640) (#4652) + * feat: introduce RCR interface (#4642) (#4651) + * fix: incorrect namespace in report controller (#4637) (#4649) + * fix: remove RCR from mutation webhook (#4636) (#4647) + * chore: bump cosign 1.12.0 to fix vulnerabilities (#4631) (#4633) + * feat: add controller utils tools (#4639) (#4645) + * fix: background printer column (#4617) (#4620) + * enhance jmespath random-filter (#4591) (#4619) + * fix: lock in policy report mapper (#4601) (#4611) + * release v1.8.0-rc2 (#4607) + * refactor: simplify RCR creator queue (#4578) (#4606) + * chore: add messages in makefile kind targets (#4588) (#4604) + * refactor: info in policyreport package (#4598) (#4603) + * Fix multiple crd slowness issue (#4275) (#4600) + * update helm releases path (#4596) (#4599) + * enable autogen for validate.podsecurity with no exclude (#4594) (#4595) + * chore: add a codegen-quick makefile target (#4583) (#4587) + * chore: switch to github.com/IGLOU-EU/go-wildcard (#4563) (#4586) + * allow PSa validation with no exceptions (#4558) (#4585) + * fix: typo (#4582) (#4584) + * fix: split policy report flag (#4576) (#4581) + * chore: add toggle package unit tests (#4577) (#4580) + * chore: preserve pr title in cherry picks (#4573) (#4574) + * refactor: move generation handler out of webhooks package (#4570) (#4572) + * refactor: move image verification handler out of webhooks package (#4569) (#4571) + * refactor: move mutation handler out of webhooks package (#4567) (#4568) + * refactor: move validation audit out of webhooks package (#4562) (#4566) + * chore: add kocache (#4482) (#4564) + * refactor: move validation handler out of webhooks package (#4556) (#4561) + * refactor: make webhook metrics helpers static (#4554) (#4555) + * refactor: move webhook events utils in utils package (#4545) (#4548) + * add new patterns for releases (#4551) + * chore: add unit test for updating ur status (#4541) (#4544) + * - tag v1.8.0-rc1; - remove "v" from Helm charts versions (#4538) + * fix: defer ur update until validation passes (#4540) (#4543) + * refactor: introduce ur updater (#4535) (#4539) + * Support V2beta1 Version (#4514) + * refactor: webhook block and unit tests (#4531) + * refactor: webhook propagate start time along handlers (#4529) + * refactor: webhook exclusion and unit tests (#4528) + * feat: allow cloning multiple resource from a namespace (#4384) + * add random filter (#4527) + * chore: add protectManagedResources flag to changelog (#4522) + * refactor: utils for warnings and unit tests (#4523) + * refactor: use generics in client wrappers (#4525) + * refactor: add auth interface and unit tests (#4518) + * fix: api reference docs (#4490) + * refactor: client wrappers (#4519) + * feat: add kyverno managed resources protection (#4414) + * fix: load policy and add tests (#4515) + * chore: test for k8s 1.25 (#4503) + * chore: add unit tests for pkg/utils/json (#4516) + * chore: add unit tests for pkg/utils/yaml (#4512) + * chore: add unit tests for pkg/utils/wildcard (#4510) + * chore: add unit tests for pkg/utils/os (#4509) + * chore: add unit tests for pkg/utils/image (#4508) + * chore: update maintainers (#4511) + * docs: add section for generating helm docs and crds (#4507) + * chore: add wildcard unit test (#4506) + * chore: upgrade golang to 1.18 (#4505) + * docs: add section about switching between docker and ko (#4501) + * Auto-detect Kyverno version in policies chart (#4460) + * chore: refactor helm targets in makefile (#4498) + * feat: support switchin build with docker or ko (#4492) + * fix: incorrect kustomize call in makefile (#4493) + * refactor: verify codegen targets in makefile (#4494) + * fix: fetch history in pre-checks job (#4491) + * Improve printer column name for validationFailureAction (#4488) + * chore: Bump helm-docs version to v1.11.0 (#4489) + * chore: publish helm charts to ghcr.io (#4479) + * chore: bump cache action and improve paths (#4485) + * chore: relax auto update PRs conditions (#4486) + * fix: release workflow (#4483) + * refactor: clean webhooks logs (#4484) + * refactor: webhook policy context creation (#4480) + * docs: add api docs generation (#4476) + * fix: auto update pr workflow (#4478) + * chore: add makefile help comments (#4477) + * refactor: to remove generate cleanup controller (#4041) + * Add PodSecurity description (#4475) + * feat: remove context api call constraints (#4389) + * fix logger format (#4474) + * feat: enable autogen from makefile (#4467) + * chore: speed up local image builds (#4468) + * chore: enable cherry-pick bot (#4470) + * docs: add section for generated code (#4465) + * fix: local image build with docker (#4462) + * fix: warning in all makefile targets (#4464) + * Extend Pod Security Admission (#4364) + * docs: add section for deploying a local build (#4458) + * refactor: make toggles easier to define and use (#4456) + * Add the metric "kyverno_client_queries_total" (#4359) + * skip validate rules if conditional anchor key doesn't exist in the resource (#4451) + * refactor: clearly separate makefile docker targets for build and publish (#4454) + * Yaml signing and verification (#4235) + * docs: add pushing images section (#4452) + * refactor: clearly separate makefile ko targets for build and publish (#4450) + * chore: fix workflows related to ko recent changes (#4441) + * docs: add local image build section (#4449) + * chore: fix workflows related to ko recent changes (#4438) + * Update issue template drop-down version numbers (#4446) + * docs: add section for local builds (#4445) + * [Feature] Add ability to get additional policies from restricted (#4416) + * fix: update go-wildcard to v1.5.0 (#4444) + * docs: add section for dev tools (#4443) + * chore: remove godownloader and install-cli script (#4442) + * Added kubeconfig flag support (#4308) + * fix: ko login (#4427) + * fix: ko login (#4425) + * fix: ko login (#4424) + * fix: ko login (#4423) + * fix: ko login (#4422) + * fix: make ldflags optional in .ko.yaml (#4419) + * refactor: makefile build targets (#4418) + * fix: Add --bare for ko-build-dev targets (#4417) + * Use ko to build images (#4366) + * refactor: makefile (#4403) + * [Feature] Add posibility to set validationFailureAction by Policy (#4400) + * feat: enable autogen internals by default (#4381) + * bump golang 1.18.5 version digest in Dockerfile (#4413) + * bump cosign deps version to 1.11.1 (#4408) + * chore: improve docker image tagging (#4409) + * refactor: introduce wildcard utils package (#4406) + * fix: chart docs for generatecontrollerExtraResources (#4405) + * chore: enable asasalint linter (#4396) + * bump cosign version to 1.11.0 (#4398) + * Sync 1.7.3 Helm versions (#4395) + * fix: goimports check not working in ci job (#4387) + * chore: fix golangcilint timeout (#4388) + * fix: duration metrics precision (#4393) + * chore: add workflow to ensure github actions are pinned to a commit SHA (#4390) + * feat: add raw api call support (#3820) + * chore: update maintainers md (#4380) + * chore: fix fossa ci job (#4382) + * fix: missing aggregated role for UR (#4378) + * fix: exclude autogen rules when autogen internals is enabled (#4370) + * fix: prevent installing helm chart in namespace kube-system (#4368) + * fix: fix the verbosity of reconciling logs in the config controller (#4362) + * Update wgpolicyk8s.io CRDs (#4355) + * Update pr_documentation.md (#4361) + * Added remove-color flag for CLI-test (#4345) + * Added appropriate logging levels to log.Info() calls wherever necessary (#4341) ++++ 206 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/kyverno/kyverno.changes ++++ and /work/SRC/openSUSE:Factory/.kyverno.new.2275/kyverno.changes Old: ---- kyverno-1.7.4.tar.gz New: ---- kyverno-1.8.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kyverno.spec ++++++ --- /var/tmp/diff_new_pack.FLI7j3/_old 2022-10-11 18:05:21.126065631 +0200 +++ /var/tmp/diff_new_pack.FLI7j3/_new 2022-10-11 18:05:21.130065637 +0200 @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: kyverno -Version: 1.7.4 +Version: 1.8.0 Release: 0 Summary: CLI and kubectl plugin for Kyverno License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.FLI7j3/_old 2022-10-11 18:05:21.170065702 +0200 +++ /var/tmp/diff_new_pack.FLI7j3/_new 2022-10-11 18:05:21.174065708 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/kyverno/kyverno</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v1.7.4</param> + <param name="revision">v1.8.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> @@ -17,7 +17,7 @@ <param name="compression">gz</param> </service> <service name="go_modules" mode="disabled"> - <param name="archive">kyverno-1.7.4.tar.gz</param> + <param name="archive">kyverno-1.8.0.tar.gz</param> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.FLI7j3/_old 2022-10-11 18:05:21.198065747 +0200 +++ /var/tmp/diff_new_pack.FLI7j3/_new 2022-10-11 18:05:21.202065753 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/kyverno/kyverno</param> - <param name="changesrevision">d6a72d4412756371b74fa5ef0387b88233a5a19b</param></service></servicedata> + <param name="changesrevision">957a6bc543aa30017b0695eae5a63ded8fe91a32</param></service></servicedata> (No newline at EOF) ++++++ kyverno-1.7.4.tar.gz -> kyverno-1.8.0.tar.gz ++++++ ++++ 162735 lines of diff (skipped) ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/kyverno/vendor.tar.gz /work/SRC/openSUSE:Factory/.kyverno.new.2275/vendor.tar.gz differ: char 5, line 1