Chip Zoller

[CLI] `test` support for separate `foreach` loops

2

### Kyverno CLI Version 1.7.0 ### Description Per comment [here](https://github.com/kyverno/KDP/pull/21#discussion_r892517601), multiple, separate `foreach` loops do not appear to be supported. ### Steps to reproduce 1. ### Expected behavior Any type...

[Feature] "index locator" JMESPath function

5

### Discussed in https://github.com/kyverno/kyverno/discussions/2822 Originally posted by **chipzoller** December 12, 2021 This is a question for all the Go devs, especially those familiar with how the custom JMESPath functions get...

[Feature] Disable/deactivate a policy or rule

7

### Problem Statement Today in Kyverno, the only way to completely "turn off" a policy/rule is to remove it from the cluster; setting a validate rule to `audit` still means...

[Feature] Preconditions support in mutate existing rules

4

### Problem Statement Mutation for existing resources was introduced in 1.7.0 with no ability to apply finer-grained controls over the target resources (existing resources) to be mutated. Part of the...

[Feature] Resolve context variables as needed

8

### Problem Statement Kyverno resolves all context variables before anything else. This produces two problems, one related to performance and the other related to policy application. 1. All context variables...

[Bug] Warning printed with global anchor mismatch

6

### Kyverno Version 1.7.2 ### Kubernetes Version 1.24.x ### Kubernetes Platform K3d ### Kyverno Rule Type Validate ### Description Using the `latest` tag, after PR #4183 was introduced, creating a...

[Feature] New JMESPath filter `random()`

42

### Problem Statement There have been several requests in the community for a JMESPath filter capable of generating random sequences of characters. This is also a fairly common function found...

### Kyverno Version 1.7.2 ### Kubernetes Version 1.23.x ### Kubernetes Platform K3d ### Kyverno Rule Type Validate ### Description Auto-generation of rules is skipped if `match`/`exclude` contains `resources[].name` (a deprecated...

[Bug] Initial creation of a mutate existing policy ignores exclusions

6

### Kyverno Version 1.7.2 ### Kubernetes Version 1.23.x ### Kubernetes Platform K3d ### Kyverno Rule Type Mutate ### Description When creating a ClusterPolicy that is a mutate existing rule which...

[Bug] No admin-aggregated ClusterRole with UpdateRequest permissions

1

### Kyverno Version Main ### Kubernetes Version 1.24.x ### Kubernetes Platform K3d ### Kyverno Rule Type N/A ### Description In `main`, there is no ClusterRole which aggregates to `admin` (these...