kyverno / kyverno

Cloud Native Policy Management

https://kyverno.io

kyverno/kyverno Issues

[Bug] mutate.targets ignored completely
Updated 4 days ago5
[Bug] ClusterPolicy with PolicyException does not apply on subsequent updates
Updated 5 days ago1
[Feature] Remove cleanup cronjobs for updaterequests and ephemeralreports
Updated 5 days ago
[Feature] reduce expected permissions for Generate policies in background controller
Updated 5 days ago1
[Bug] ValidatingWebhookConfiguration generation problem with multiple validate operations rules
Updated 5 days ago3
[Feature] Add `nested_lookup` JMESPath function that supports nested lookups
Updated 5 days ago
[Feature] Filter policies based on `validationFailureAction` field
Updated 6 days ago
[Feature] Move Nancy scan to a periodic job
Updated 6 days ago1
[Bug] Grant proper permissions to the background controller
Closed 6 days ago5
[Feature] Add concurrent verification of images for 1 rule
Updated 7 days ago
[Bug] patchStrategicMerge doesn't properly mutate/patch topologySpreadConstraints
Updated 7 days ago3
[Bug] Separate PolicyExceptions don't work for initContainers
Updated 8 days ago5
mutate.targets and regular mutate rules in same policy file causing issue
Updated 8 days ago1
[Bug] PolicyException causes Kyverno to skip entire workload, not only the excepted parts
Closed 8 days ago15
[Bug] [CLI] Namespace required to generate a clusterpolicy
Updated 8 days ago10
[Bug] [CLI] Verify Image test not working for private registry
Updated 8 days ago5
[Bug] [CLI] `test` and `apply` evaluate JMESPath wrongly
Updated 8 days ago
[Feature] Add full regexp support to sigstore and cosign
Updated 9 days ago
[Feature] Use rancher/kubectl image instead of bitnami/kubectl image
Updated 12 days ago2
[Feature] Apply the reports circuit breaker to the report controller
Updated 13 days ago
[Bug] TLS handshake error
Updated 14 days ago1
[Bug] namespaced generate-policy forbidden to select other namespace as source
Closed 14 days ago2
[Bug] patchStrategicMerge mutation doesn't work after upgrade to v1.12.x anymore
Closed 14 days ago11
[Bug] kyverno-admission-controller panic runtime error for mutate.patchStrategicMerge policy
Updated 14 days ago1
[Feature] command to create an aggregated role
Updated 14 days ago1
[Feature] Option to disable workload image parsing
Updated 15 days ago2
[Feature] Reduce webhook calls for namespaced policies
Updated 16 days ago
[Bug] Can't replicate `deny` rule behaviour in CEL policy
Closed 19 days ago6
[Bug] Additional clusterRole.extraResources are not being binded in the helm chart
Updated 20 days ago
[Bug] PolicyReport Labelling not functional
Updated 21 days ago4
[Bug] Kyverno does not prevent creation of Services with type LoadBalancer
Updated 21 days ago3
[Feature] Add auto-gen support in generated VAPs from CEL policies
Updated 21 days ago1
[Bug] Multiple generate rules in single policy results in duplication of generated resources
Updated 21 days ago
[Bug] CleanupPolicy appends name to last log line
Closed 21 days ago1
[Bug] `synchronize` does not recreate a deleted downstream or delete downstream upon deleted trigger
Closed 22 days ago6
[Bug] VAP feature not working with admissionregistration.k8s.io/v1beta1
Closed 22 days ago3
[Feature] Support MutatingAdmissionPolicies in Kyverno
Updated 23 days ago1
[Bug] Should give meaningful error message when image invalid
Closed 23 days ago4
[Bug] Kubernetes probes for Background and Reports Controllers
Updated a month ago3
Vulnerabilities detected
Closed a month ago1
Upgrade golang-runtime to 1.22.4[Feature]
Updated a month ago10
[Bug] Helm Chart label "app.kubernetes.io/version:" should be set to the appVersion and not Version of the helm chart
Updated a month ago3
[Feature] Add option to disable auth check
Updated a month ago
[Bug] reportsController does not find Policyreports
Updated a month ago3
[Bug] Why did kyverno delete ipv6 address from status Addresses in node
Updated a month ago5
Vulnerabilities detected
Closed a month ago1
Vulnerabilities detected
Closed a month ago2
[Bug] Policy not applying, kyverno-resource-mutating-webhook-cfg is 0
Closed a month ago2
[Bug] [CLI] Pass result in test when it should be skip
Updated a month ago1
Update Grafana Dashboard to use Timeseries instead of Graph(old)
Updated a month ago1