Skip to content

Releases: sighupio/module-policy

Release list

Release v1.17.0

Release v1.17.0 Latest
Latest

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 06 Jul 09:23
v1.17.0
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
5ffd2e6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Policy Core Module Release v1.17.0

Welcome to the latest release of Policy module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This is a minor release including the following changes:

  • Add support for Kubernetes 1.35 (removing 1.32 and 1.31)
  • Update Kyverno to version 1.18.1
  • Update Gatekeeper to version 3.22.2
  • Update Gatekeeper Policy Manager to version 1.1.1

Component Images 🚢

Component Supported Version Previous Version
gatekeeper v3.22.2 v3.21.0
gatekeeper-policy-manager v1.1.1 v1.1.0
kyverno v1.18.1 v1.16.0

Please refer the individual release notes to get a detailed information on each release.

Bug Fixes 🐛

  • [#135] Adds name: http to the gatekeeper-policy-manager Service port definition so that the Ingress backend port reference by name resolves correctly when using HAProxy Kubernetes Ingress Controller.

Update Guide 🦮

Process

Gatekeeper

To upgrade this package from v1.16.0 to v1.17.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/gatekeeper | kubectl apply -f -

Kyverno

To upgrade this package from v1.16.0 to v1.17.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/kyverno | kubectl apply -f -
Assets 5
Loading

Preview v1.17.0-rc.1

Preview v1.17.0-rc.1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 02 Jul 13:10
v1.17.0-rc.1
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
6bf7f41
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Policy Core Module Release v1.17.0

Welcome to the latest release of Policy module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This is a minor release including the following changes:

  • Add support for Kubernetes 1.35 (removing 1.32 and 1.31)
  • Update Kyverno to version 1.18.1
  • Update Gatekeeper to version 3.22.2
  • Update Gatekeeper Policy Manager to version 1.1.1

Component Images 🚢

Component Supported Version Previous Version
gatekeeper v3.22.2 v3.21.0
gatekeeper-policy-manager v1.1.1 v1.1.0
kyverno v1.18.1 v1.16.0

Please refer the individual release notes to get a detailed information on each release.

Bug Fixes 🐛

  • [#135] Adds name: http to the gatekeeper-policy-manager Service port definition so that the Ingress backend port reference by name resolves correctly when using HAProxy Kubernetes Ingress Controller.

Update Guide 🦮

Process

Gatekeeper

To upgrade this package from v1.16.0 to v1.17.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/gatekeeper | kubectl apply -f -

Kyverno

To upgrade this package from v1.16.0 to v1.17.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/kyverno | kubectl apply -f -
Loading

Preview v1.17.0-rc.0

Preview v1.17.0-rc.0 Pre-release
Pre-release

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 22 May 13:29
v1.17.0-rc.0
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
259c8fb
This commit was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.

Policy Core Module Release v1.17.0

Welcome to the latest release of Policy module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This is a minor release including the following changes:

  • Add support for Kubernetes 1.35 (removing 1.32 and 1.31)
  • Update Kyverno to version 1.18.1
  • Update Gatekeeper to version 3.22.2
  • Update Gatekeeper Policy Manager to version 1.1.1

Component Images 🚢

Component Supported Version Previous Version
gatekeeper v3.22.2 v3.21.0
gatekeeper-policy-manager v1.1.1 v1.1.0
kyverno v1.18.1 v1.16.0

Please refer the individual release notes to get a detailed information on each release.

Update Guide 🦮

Process

Gatekeeper

To upgrade this package from v1.16.0 to v1.17.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/gatekeeper | kubectl apply -f -

Kyverno

To upgrade this package from v1.16.0 to v1.17.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/kyverno | kubectl apply -f -
Loading

Release v1.16.0

Release v1.16.0

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 19 Feb 17:02
v1.16.0
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
a5e0851
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Policy Core Module Release v1.16.0

Welcome to the latest release of Policy module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This is a minor release including the following changes:

  • Add support for Kubernetes 1.34
  • Update Kyverno to version 1.16.0
  • Update Gatekeeper to version 3.21.0

Component Images 🚢

Component Supported Version Previous Version
gatekeeper v3.21.0 v3.20.1
gatekeeper-policy-manager v1.1.0 No Update
kyverno v1.16.0 v1.15.1

Please refer the individual release notes to get a detailed information on each release.

Update Guide 🦮

Process

Gatekeeper

To upgrade this package from v1.15.1 to v1.16.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/gatekeeper | kubectl apply -f -

Kyverno

To upgrade this package from v1.15.1 to v1.16.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/kyverno | kubectl apply -f -
Loading

Preview v1.16.0-rc.1

Preview v1.16.0-rc.1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 05 Feb 11:31
v1.16.0-rc.1
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
a5e0851
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Policy Core Module Release v1.16.0

Welcome to the latest release of Policy module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This is a minor release including the following changes:

  • Add support for Kubernetes 1.34
  • Update Kyverno to version 1.16.0
  • Update Gatekeeper to version 3.21.0

Component Images 🚢

Component Supported Version Previous Version
gatekeeper v3.21.0 v3.20.1
gatekeeper-policy-manager v1.1.0 No Update
kyverno v1.16.0 v1.15.1

Please refer the individual release notes to get a detailed information on each release.

Update Guide 🦮

Process

Gatekeeper

To upgrade this package from v1.15.1 to v1.16.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/gatekeeper | kubectl apply -f -

Kyverno

To upgrade this package from v1.15.1 to v1.16.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/kyverno | kubectl apply -f -
Loading

Preview v1.16.0-rc.0

Preview v1.16.0-rc.0 Pre-release
Pre-release

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 04 Dec 11:49
v1.16.0-rc.0
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
38b466a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Policy Core Module Release v1.16.0

Welcome to the latest release of Policy module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This is a minor release including the following changes:

  • Add support for Kubernetes 1.34
  • Update Kyverno to version 1.16.0
  • Update Gatekeeper to version 3.21.0

Component Images 🚢

Component Supported Version Previous Version
gatekeeper v3.21.0 v3.20.1
gatekeeper-policy-manager v1.1.0 No Update
kyverno v1.16.0 v1.15.1

Please refer the individual release notes to get a detailed information on each release.

Update Guide 🦮

Process

Gatekeeper

To upgrade this package from v1.15.1 to v1.16.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/gatekeeper | kubectl apply -f -

Kyverno

To upgrade this package from v1.15.1 to v1.16.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/kyverno | kubectl apply -f -
Loading

Release v1.15.0

Release v1.15.0

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 01 Oct 10:56
v1.15.0
8b2ff0a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Policy Core Module Release v1.15.0

Welcome to the latest release of Policy module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This is a minor release including the following changes:

  • Add support for Kubernetes 1.33
  • Update Kyverno to version 1.15.1
  • Update Gatekeeper to version 3.20.1
  • Update gatekeeper-policy-manager to version 1.1.0

Component Images 🚢

Component Supported Version Previous Version
gatekeeper v3.20.1 v3.18.2
gatekeeper-policy-manager v1.1.0 v1.0.13
kyverno v1.15.1 v1.12.6

Please refer the individual release notes to get a detailed information on each release.

Update Guide 🦮

Process

Gatekeeper

To upgrade this package from v1.14.0 to v1.15.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/gatekeeper | kubectl apply -f -

Kyverno

To upgrade this package from v1.14.0 to v1.15.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/kyverno | kubectl apply -f -
Loading

Preview v1.15.0-rc.0

Preview v1.15.0-rc.0 Pre-release
Pre-release

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 09 Sep 13:38
v1.15.0-rc.0
8b2ff0a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Policy Core Module Release v1.15.0

Welcome to the latest release of Policy module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This is a minor release including the following changes:

  • Add support for Kubernetes 1.33
  • Update Kyverno to version 1.15.1
  • Update Gatekeeper to version 3.20.1
  • Update gatekeeper-policy-manager to version 1.1.0

Component Images 🚢

Component Supported Version Previous Version
gatekeeper v3.20.1 v3.18.2
gatekeeper-policy-manager v1.1.0 v1.0.13
kyverno v1.15.1 v1.12.6

Please refer the individual release notes to get a detailed information on each release.

Update Guide 🦮

Process

Gatekeeper

To upgrade this package from v1.14.0 to v1.15.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/gatekeeper | kubectl apply -f -

Kyverno

To upgrade this package from v1.14.0 to v1.15.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/kyverno | kubectl apply -f -
Loading

Release v1.14.0

Release v1.14.0

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 02 Apr 15:05
v1.14.0
f97b216
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Policy Core Module Release v1.14.0

Welcome to the latest release of Policy module of SIGHUP Distribution maintained by team SIGHUP by ReeVo.

This is a minor release including the following changes:

  • Add support for Kubernetes 1.32
  • Drop support for Kubernetes 1.28
  • Update Gatekeeper to version 3.18.2
  • Update Kyverno to version 1.13.4
  • [#114] Add kapp rebaseRule configuration to avoid replacing Gatekeeper's webhook TLS secret content. Notice that this change applies only when using the module trough furyctl apply.

Component Images 🚢

Component Supported Version Previous Version
gatekeeper v3.18.2 v3.17.1
gatekeeper-policy-manager v1.0.13 No update
kyverno v1.13.4 v1.12.6

Please refer the individual release notes to get a detailed information on each release.

Update Guide 🦮

Process

Gatekeeper

To upgrade this package from v1.13.0 to v1.14.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build katalog/gatekeeper | kubectl apply -f -

Kyverno

To upgrade this package from v1.13.0 to v1.14.0, you need to download this new version, then run the katalog/kyverno/upgrade-paths/v1.12.6-v1.13.4/migrate.sh script that will perform the necessary steps for migration.

cd ./katalog/kyverno/upgrade-paths/v1.12.6-v1.13.4
sh ./migrate.sh

Please also pay attention, Kyverno v1.13 includes potentially breaking changes that depend on the target environment:

Removal of wildcard permissions:

  • Prior versions contained wildcard view permissions which allowed Kyverno controllers to view all resources. In v1.13, these were replaced with more granular permissions. This change will not impact policies during admission controls but may impact reports, and may impact users with mutate and generate policies on CRs as the controller may no longer be able to view them.

Default exception settings:

  • In Kyverno v1.12 and previous versions, policy exceptions were enabled by default for all namespaces. The new default in Kyverno v1.13 no longer automatically enables exceptions for all namespaces, instead requires explicit configuration of the namespaces to which exceptions apply, which may need to be added.

For more details check the PR.

Loading

Release v1.13.0

Release v1.13.0

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 05 Nov 09:02
v1.13.0
390b0db
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

OPA Core Module Release 1.13.0

Welcome to the latest release of OPA module of Kubernetes Fury Distribution maintained by team SIGHUP.

This is a minor release including the following changes:

  • Added support for Kubernetes 1.31
  • Added support for Kubernetes 1.30
  • Update Gatekeeper to version 3.17.1
  • Update Gatekeeper Policy Manager to version 1.0.13
  • Update Kyverno to version 1.12.6

Component Images 🚢

Component Supported Version Previous Version
gatekeeper v3.17.1 v3.15.1
gatekeeper-policy-manager v1.0.13 v1.0.10
kyverno v1.12.6 1.11.4

Please refer the individual release notes to get a detailed information on each release.

Update Guide 🦮

Process

To upgrade this core module from v1.12.0 to v1.13.0, you need to download this new version, then apply the kustomize project. No further action is required.

From Kyverno v1.12.0, policies using long-deprecated or invalid operators in conditions (ex., In and NotIn) will be blocked.
Here is the list of valid operators: Kyverno Operators

kustomize build katalog/gatekeeper | kubectl apply -f -
Loading