shuting comments

Results 647 comments of


                                            shuting

[Feature] Use Projected Service Account Token in Kyverno

@vishal-chdhry - any updates on this one? Shall we keep it for 1.11.0?

[Bug] Issues in kyverno upgrades when installed using ArgoCD

Another ArgoCD related https://github.com/kyverno/kyverno/issues/11684.

[Feature] Cache image signature and attestation

@vishal-chdhry - any updates?

feat: add support for sigstore bundle verification

@vishal-chdhry - can you resolve conflicts?

[Feature] To add Karpenter Do Not Disrupt policy for Karpenter 1.x version

Looks like a new sample policy to add, transferring the issue.

[Bug] The background controller should remediate missed admission requests events

> What seems a little inconsistent is that `generateExisting` is required to catch a missed CREATE but not a missed UPDATE or DELETE. It seems like ALL those should be...

[Bug] The background controller should remediate missed admission requests events

Attaching manifests for reproduction: 1. update the background controller env `BACKGROUND_SCAN_INTERVAL=2m` 2. create policy, note this policy doesn't use JMESPath variables which is to narrow down the issue, and generateExisting...

[Bug] The background controller should remediate missed admission requests events

The issue still exists in 1.13.2.

[Bug] Kyverno Golang client always sets SkipBackgroundRequests field of clusterpolicy.rules to True

> Thanks for reporting, if someone wants to fix this https://kubernetes.slack.com/archives/C0EG7JC6T/p1717485413210449 I'd love to give it a shot.

[Bug] Race condition in generate.data + synchronize policies

Hi @MichaelEischer - the force reconciliation (which happens every hour by default) should kick in and remediate this situation. Are you able to verify that?