gatekeeper update to 3.14.0-bb.0

Package Merge Request

Package Changes

Update gatekeeper to v3.14.0, base to 2.1.0

Package MR

big-bang/product/packages/policy!186 (merged)

For Issue

Closes https://repo1.dso.mil/big-bang/product/packages/policy/-/issues/191

Closes big-bang/product/packages/policy#197 (closed)

added botmr gatekeeper statusreview labels

assigned to @staskiewicz.blane

changed the description

added 47 commits

• 479d2947...9dc5b179 - 46 commits from branch master
• 71158746 - Merge remote-tracking branch 'origin/master' into update-policy-tag-3.14.0-bb.0

Compare with previous version

mentioned in merge request !3399 (closed)

changed the description

marked this merge request as ready

changed milestone to %2.15.0

requested review from @michaelmartin

approved this merge request

unapproved this merge request

Thinking we might need a policy fix/exception here:

Running helm tests for kyverno-reporter-kyverno-reporter...
W1113 22:33:46.327710   13125 warnings.go:70] Validation failure actions enforce/audit are deprecated, use Enforce/Audit instead.
Error: warning: Hook test kyverno-reporter/templates/tests/gluon.yaml failed: 1 error occurred:
	* admission webhook "validation.gatekeeper.sh" denied the request: [allowed-host-filesystem] HostPath volume {"hostPath": {"path": "/cypress", "type": ""}, "name": "cypress-artifacts"} is not allowed, pod: kyverno-reporter-cypress-test. Allowed path: []
[volume-types] The volume type hostPath is not allowed, pod: kyverno-reporter-cypress-test. Allowed volume types: ["configMap", "emptyDir", "projected", "secret", "downwardAPI", "persistentVolumeClaim"]

added 3 commits

• 71158746...704c586f - 2 commits from branch master
• 1ee6fa6b - Merge remote-tracking branch 'origin/master' into update-policy-tag-3.14.0-bb.0

Compare with previous version

changed milestone to %2.16.0

requested review from @ryan.j.garcia, @ryan.thompson.44, and @chris.oconnell

@rgsjustins @andrewshoell : You have been tagged in this merge request for the purpose of conducting secondary review.

added 1 commit

• c3158850 - add hostpath exception for kyverno-reporter

Compare with previous version

added 5 commits

• c3158850...303c19fc - 4 commits from branch master
• 257c8e83 - Merge remote-tracking branch 'origin/master' into update-policy-tag-3.14.0-bb.0

Compare with previous version

added 3 commits

• 257c8e83...8d6b62b9 - 2 commits from branch master
• 1dbb78e3 - Merge remote-tracking branch 'origin/master' into update-policy-tag-3.14.0-bb.0

Compare with previous version

added 1 commit

• 628efcfe - need volumeTypes too

Compare with previous version

looks good. Only issue seems to be known issue of these not passing which is a known issue:

- Test vector require-non-root-group-11 (validate): FAIL (Expected allowed, but was blocked)
- Test vector require-non-root-group-12 (validate): FAIL (Expected blocked, but was allowed)

approved this merge request

merged

mentioned in commit daf37e0e

changed milestone to %2.15.0