Chip Zoller

[Bug] Kyverno processes all Pods in a mutate existing Namespaced Policy

2

### Kyverno Version 1.11.4 ### Kubernetes Version 1.27.x ### Kubernetes Platform K3d ### Kyverno Rule Type Mutate ### Description Kyverno appears to perform some level of processing of all Pods...

Check for enclosed JMESPath statements

31

**Is your feature request related to a problem? Please describe.** Kyverno does not perform proper validation on policies to ensure that opening `{{` also have closing `}}` for JMESPath statements....

### Problem Statement A GCE will fail and go not ready, thereby causing any policies which reference it to go not ready, upon receiving the first failure to perform an...

[Bug] Remove/fix erroneous warning about matching on scale subresource

5

### Kyverno Version 1.11.4 ### Kubernetes Version 1.27.x ### Kubernetes Platform K3d ### Kyverno Rule Type Validate ### Description We have a policy validation check in the webhook which returns...

### Kyverno Version 1.11.4 ### Kubernetes Version 1.27.x ### Kubernetes Platform K3d ### Kyverno Rule Type Mutate ### Description The mutation results are different in a `foreach` loop depending on...

[Feature] Add automated tests for `kyverno apply` command

25

### Problem Statement There are tests today for `kyverno test` but nothing for `kyverno apply`. This allows regressions to occur such as the one with PR #4502. ### Solution Description...

[Feature] Service calls to support custom headers

12

### Problem Statement The new Service call feature in 1.10 doesn't appear to support custom headers. This is required for the use case of calling to the Kubernetes API `SelfSubjectAccessReview`...

[Feature] Per-policy granular background scan interval

1

### Problem Statement As covered in #5642, it seems clear we need to reintroduce periodic background scans. Prior to 1.8, there was a container flag named `backgroundScan` the value of...

[Enhancement] Indicating in a report result the origin, admission or background

14

### Problem Statement Results in policy reports come from two possible sources: admission reviews or background scans. Depending on the policy/rule, it may not be possible to enable both (ex.,...

[Feature] Extend `foreach` to cover generate rules

11

### Problem Statement The `foreach` ability covers validate and mutate rules, but not generate. There are use cases where a single "trigger" resource should result in the creation of multiple...