shuting
shuting
**The problem I'm trying to solve:** I would love to list PRs by - labels - milestones I'm currently using hub 2.14.2, git 2.30.1. **How I imagine hub could expose...
Currently we have two options to exclude namespace globally, 1. through the ConfigMap arg; 2. through the `resourceFilters`. And I agree, the `resourceFilters` adds additional value to exclude by Kind...
**Is your feature request related to a problem? Please describe.** For the following `patchesJson6902` policy, it would be nice if we can report the syntax error when creates the policy:...
### Problem Statement With 1.7, Kyverno is able to mutate existing resources on policy updates. It would be good to enable such policies to be applied to sub-resources on policy...
Hi @hackerboy01 - As we continue our discussion in this thread, will it work for you as a temporary workaround if we revert these two changes and add back the...
**Is your feature request related to a problem? Please describe.** With the latest change to the Kustomizatoins files, it requires multiple manual steps to update chart versions and tags. It...
### Problem Statement We keep getting questions of how to configure Kyverno settings, especially the memory and cpu settings, on large and active clusters. ### Solution Description See this proposal...
### Problem Statement [Pod Security Admission](https://kubernetes.io/docs/concepts/security/pod-security-admission/) became beta in Kubernetes 1.24. It would be nice if we can integrate this built-in solution with Kyverno to provide native admission enforcement for...
### Problem Statement The Kyverno endpoint can be exposed via the loadbalancer type of service. We can add an example service manifest under https://github.com/kyverno/kyverno/wiki/Profiling-Kyverno-on-Kubernetes#expose-the-endpoint-at-the-local-port. ### Solution Description ```yaml apiVersion: v1...
### Kyverno Version 1.7.0 ### Description Namespaced generate policies are not completely handled by the Generate controller. i.e. here it only registers the event handler for clusterpolicy, not policy: https://github.com/kyverno/kyverno/blob/d8a4c709f8081b28b3311fc4f1039d9b54097e4f/pkg/background/update_request_controller.go#L119-L122...