projectsyn/component-kyverno

Commodore component to manage Kyverno (https://kyverno.io/)

Commodore Component: kyverno

This is a Commodore Component for kyverno.

This repository is part of Project Syn. For documentation on Project Syn and this component, see syn.tools.

Documentation

The rendered documentation for this component is available on the Commodore Components Hub.

Documentation for this component is written using Asciidoc and Antora. It can be found in the docs folder. We use the Divio documentation structure to organize our documentation.

Run the make docs-serve command in the root of the project, and then browse to http://localhost:2020 to see a preview of the current state of the documentation.

After writing the documentation, please use the make docs-vale command and correct any warnings raised by the tool.

Contributing and license

This library is licensed under BSD-3-Clause. For information about how to contribute, see CONTRIBUTING.

component-kyverno's Issues

Update to Kyverno 1.8 to support OpenShift 4.11

Kyverno 1.7 is officially not supported on Kubernetes 1.24 and OpenShift 4.11.

Alternatives

Replace Kyverno with something else.

Add support for image pull secrets

Context

To verify the signature of images which are part of a private registry, the corresponding image pull secret needs to exist in the same namespace (see: https://kyverno.io/docs/writing-policies/verify-images/#using-private-registries).

The necessary additional argument (--imagePullSecrets=name-of-the-secret) can already be configured through the extraArgs parameter.

Alternatives

Manually managing the image pull secrets would be the undesired alternative.

Update Kyverno to v1.5.0

Context

New Kyverno release: https://github.com/kyverno/kyverno/releases/tag/v1.5.0

Alternatives

Dependency Dashboard

This issue provides visibility into Renovate updates and their statuses. Learn more

This repository currently has no open or pending branches.

---

• Check this box to trigger a request for Renovate to run again on this repository