kyvernoPolicies update to 3.3.4-bb.1

Package Merge Request

Package Changes

https://repo1.dso.mil/big-bang/product/packages/kyverno-policies/-/blob/3.3.4-bb.1/CHANGELOG.md Adds default security context that does not run as root.

Package MR

big-bang/product/packages/kyverno-policies!219 (merged)

Policy exceptions for add-defaultsecuritycontext policy were copied from require-non-rootgroup policy in Bigbang

For Issue

Closes (big-bang/product/packages/kyverno-policies#141 (closed))

Upgrade Notices

BigBang users should be aware that a new mutating kyverno policy has been added. This policy will effect ALL pods not specifically excluded and will mutate the securityContext of ALL non-excluded pods to match the following non-root user securitycontext: '{"fsGroup":65534,"runAsGroup":65534,"runAsNonRoot":true,"runAsUser":65534}' . Default exclusions were added mirroring the existing policy require-non-root-user. To add additional exclusions go to bigbang/chart/templates/kyverno-policies/values.yaml and under add-default-securitycontext: look for exclude: then add the exception.

added botmr kyvernoPolicies statusdoing labels

assigned to @jasdeep.s.basra

changed the description

requested review from @chris.oconnell, @michaelmartin, and @andrewshoell

added 1 commit

• b2ee50fe - Copied policy exceptions from require-non-root-group to new policy add-defaultusercontext

Compare with previous version

added debug label

removed debug label

removed statusdoing label

added statusreview label

marked this merge request as ready

changed the description

marked this merge request as draft

added all-packages label

removed statusreview label

added debug label

added statusdoing label

added 8 commits

• d98604e2 - gitlab update to 8.6.2-bb.0
• c0042acb - elasticsearchKibana update to 1.24.0-bb.0
• 90e946dd - add in 2.41 Release and stand down
• 6f4689b1 - externalSecrets update to 0.11.0-bb.1
• b387b47b - Gateway tls bug
• 69156ca2 - elasticsearchKibana update to 1.24.0-bb.1
• 4c3ec3ee - Update Default Mattermost Values
• db030b19 - update labels for flux renovate issue

Compare with previous version

added 18 commits

• db030b19...98eae109 - 16 commits from branch master
• 34b6a818 - Updated kyvernoPolicies git tag
• d31c5d7f - Copied policy exceptions from require-non-root-group to new policy add-defaultusercontext

Compare with previous version

removed all-packages label

added all-packages label