shuting

[Feature] Use informer to maintain the CRD list

1

**Describe the bug** Currently, Kyverno maintains a [CRD list](https://github.com/nirmata/kyverno/blob/fa39f116f9f6b93f7162b4d2118a7c3dd43fe9f1/pkg/openapi/crdSync.go#L164) in CRDsync controller. Related [discussion](https://github.com/nirmata/kyverno/pull/895#discussion_r433614772). The implementation can be improved by using CRD clientset from the shared informer to update the...

### Kyverno Version 1.6.x ### Description Reported from Jim: >I created a Generate policy with 2 rules, to generate 2 different resources. >However, I saw only 1 GR created for...

[Bug] Refactor policy controller to reconcile policy report only

1

### Kyverno Version 1.7.0 ### Description Currently the policy controller watches policy events and does two things: 1.) reconcile policy reports; 2.) update/delete UR to trigger UR controller reconciliation. This...

Optimize events creation for resources which potentially causes memory increase

2

This issue can be reproduced by steps described in https://github.com/kyverno/kyverno/issues/4072#issuecomment-1184105834. Tested the above changes again for 50mins, the memory shoot up to 300Mi from 100Mi. The # of events was...

### Problem Statement With 1.8.0, Kyverno generates the following report results for PSa policies: ``` results: - message: | Validation rule 'baseline' failed. It violates PodSecurity "baseline:latest": ({Allowed:false ForbiddenReason:seLinuxOptions ForbiddenDetail:pod...

**Is your feature request related to a problem? Please describe.** Currently if variable substitution fails, Kyverno only logs out the error and continues policy/rule application. This is desired behavior as...

Not sure if this is the right place to log the issue. The link on the page `Use Calico instead of Flannel` is broken: https://k3d.io/v5.4.6/usage/advanced/calico/#1-download-and-modify-the-calico-descriptor >1. Download and modify the...

Proposal: Kyverno to Graduation

15

Hello TOC and CNCF community 👋 We are proposing Kyverno to become a CNCF Graduated project ## What is Kyverno? [Kyverno](https://kyverno.io/) is a Kubernetes policy engine that was created to...

[Chainsaw Tests] Add Chainsaw tests for the sample policies

2

### Problem Statement Hi there👋 This is an umbrella issue for adding Chainsaw tests for Kyverno sample policies. You can find references below to write tests: - [Chainsaw doc](https://kyverno.github.io/chainsaw/latest/) -...

The folders are not deleted if running on a multi-node cluster

1

I used this provisioner on a 3 nodes k8s cluster. I ran a daemonset with replica=3 on the cluster with the volumeclaimtemplates declared in the yaml file. Each time I...