SKIP UPGRADE Bugs n docs

• Fix various policy bugs
• Updated docs
• Remove dupe policy for hostpath
• Add Kubernetes 1.26 deprecation check

added 1 commit

• 3d9ddd9b - fix: require-requests-equal-limits updated for Kyverno 1.6.0

Compare with previous version

changed title from Bugs n docs to SKIP UPGRADE Bugs n docs

added 1 commit

• 4416a556 - fix: disallow-rbac-on-default-serviceaccounts ignore bindings with no subject

Compare with previous version

added 1 commit

• 7d49cc50 - fix: exclusion on rbac policy

Compare with previous version

Upgrade requires skipping because Kyverno 1.6.0 changed something that broke the RBAC policy in the release. This was fixed, but the old policies will not pass Helm tests with 1.6.0.

added 1 commit

• a370c0a9 - fix(require-non-root-user): allow runAsNonRoot = true or runAsUser > 0

Compare with previous version

added 1 commit

• 83bf6eba - fix: typo in deprecated api message

Compare with previous version

added 1 commit

• f323972d - fix(disallow-tolerations): expanded to pod controllers

Compare with previous version

added 1 commit

• e3cb4801 - feat: add allow list to restrict-host-path-write

Compare with previous version

added 1 commit

• e7459cbd - fix: increase memory for wait-for-ready job

Compare with previous version

added 1 commit

• 42f2169e - fix: updated disallow-subpath-volumes to narrow conditions

Compare with previous version

added 1 commit

• 954dd008 - refactor: disallow-subpath-volumes changed to disallow-shared-subpath-volume-writes

Compare with previous version

added 1 commit

• 8cad1609 - fix(disallow-shared-subpath-volume-writes): read-only condition corrected

Compare with previous version

added 1 commit

• 2e2eefb6 - test: added wait.sh to avoid timeouts

Compare with previous version

added 1 commit

• 64658ec7 - docs: updated changelog

Compare with previous version

added 1 commit

• 260433cd - fix(subpath policy): add detection of volume type

Compare with previous version

added 1 commit

• 9e8617de - fix: disallow-shared-subpath implicit volumes

Compare with previous version

added 1 commit

• 624fc043 - fix(subpath): ignore volume mounts in same container

Compare with previous version

added 1 commit

• e350f65a - test: increase default timeout to 30

Compare with previous version

added 2 commits

• 15780867 - refactor: remove bigbang folder
• e9986c49 - docs: add exceptions

Compare with previous version