Kyverno Release 0.9.0

Features:

• Support anchor with a value of a map(#307)

Fixes:

• Graceful shutdown of webhook(#317,#318)
• Cleanup generated webhookConfigurations on shutdown

Kyverno Release 0.8.0

Note:

• If Kyverno is installed before this release, it is recommended to update CRD manifest as policyViolation is now a separate CRD, or to re-install Kyverno using install.yaml.

Features:

• PolicyViolation is created as a separate CRD
• Successful mutation info is added to the resource as annotation
• Policy statistics are recorded in the status field of the policy
  • averageGenerationRulesExecutionTime
  • averageMutationRulesExecutionTime
  • averageValidationRulesExecutionTime
  • resourcesBlockedCount
  • rulesAppliedCount
  • violationCount
• Namespace selector now allows multiple namespaces
• Add anyPattern in the validate rule to support OR across a policy
• Dynamically register/deregister webhook configuration

Kyverno Release 0.7.1

This is the patch release for 0.7.0, include necessary bug fixes.

Kyverno Release 0.7.0

• add exclude field to filter out the resources
• bug fix

Kyverno Release 0.6.0

• support full lifecycle of violations: resource create/update/delete, policy create/update/delete
• add annotations on the resource

Kyverno Release 0.5.0

• refactor result struct returned by policy engine
• report events & violations for existing resources
• report events on resource creation/update
• implement feature "add value if not exist"

Kyverno Release 0.4.0

• support debug mode
• a framework to automate tests for the policy engine

Kyverno Release 0.3.0

Kyverno Release 0.3.0

Kyverno Release 0.2.0

Merge pull request #116 from nirmata/wildcard_operator_fix

Wildcard operator fix

Release 0.1.0

Merge pull request #104 from nirmata/policies-update

added workarounds to make examples valid