shuting

### Problem Statement This is a follow-up issue of https://github.com/kyverno/kyverno/issues/3542. As proposed in https://github.com/kyverno/KDP/pull/52, it would be helpful to enable `foreach` support to either create or clone a list of...

Pasting the discussion with @chipzoller, the permutations for `admission` and `mutateExistingOnPolicyUpdate` settings: `admission: false; mutateExistingOnPolicyUpdate: false` - Background scan `admission: true; mutateExistingOnPolicyUpdate: false` - Event on match - Background scan...

[Sample] Mount volumes for ephemeral containers

2

### Problem Statement Add the sample policy to mount volumes and set default security context for ephemeral containers. To break down the following policy: 1. the first rule adds the...

[Enhancement] support HTTP headers in service API calls #11041

2

### Description https://github.com/kyverno/kyverno/pull/11041 ### Slack discussion _No response_

[Enhancement] add documentation for new policy types

4

### Description **ValidatingPolicy:** - [ ] Admission Review process - [ ] Context Lookup - [ ] API server calls - [ ] External data API calls - [ ]...

### Description https://github.com/kyverno/kyverno/pull/10086 ### Slack discussion _No response_

### Description https://github.com/kyverno/kyverno/pull/10933 ### Slack discussion _No response_

[Security Review] Kyverno

8

Project Name: Kyverno Github URL: https://github.com/kyverno/kyverno CNCF project stage and issue (NA if not applicable): Incubation, https://github.com/cncf/toc/pull/784. Security Provider: yes Further comments: Kyverno has added self-assessment [here](https://github.com/cncf/tag-security/blob/main/community/assessments/projects/kyverno/self-assessment.md), and the security...

[Bug] The background controller should remediate missed admission requests events

6

### Kyverno Version 1.10.0 ### Kubernetes Version 1.26.x ### Kubernetes Platform K3d ### Kyverno Rule Type Generate ### Description If the admission controller is down, the background controller should scan...