Kyverno v1.17.2
security+**************!!!!
Changes
- CVE-2026-24051 (release 1.17)security
- CVE-2026-1229security
- CVE-2026-33186security
- Disable HTTP in namespaced policies by default (CVE-2026-4789)security
- CVE-2026-34986security
- Support subresource (Cherry-pickadded
- Correct verbosity and type for dpol not match logging (Cherry-pickfixed
- Report creation for namespaced policy at admission and background (Cherry-pickfixed
- Handle empty results for target expressions (Cherry-pickfixed
- Check object before usage (Cherry-pickfixed
- CLI resource lookup for ivpol (Cherry-pickfixed
- CVES 2026-15558 for 1.17fixed
17 more lines
- Create correct webhook key for nmpol (Cherry-pickfixed
- Bump go to fix stdlib CVEsfixed
- Respect policy namespace in webhook name generation (Cherry-pickfixed
- Ensure consistent order of webhooks and webhook rules to prevent reconciliation loops (Cherry-pickfixed
- Filter mpols with target constraints at admission time (Cherry-pickfixed
- Handle targets in multiple namespaces correctly (Cherry-pickfixed
- Support resourceNames for TargetMatchConstraints (Cherry-pickfixed
- Polex fetching in background mode (Cherry-pickfixed
- Implement user info handling in MutatingPolicy and ValidatingPolicy policies and add test cases (Cherry-pickfixed
- Use scoped token for request authz (cherry-pick #15779 to release-1.17)fixed
- Prevent forEach mutation panic [release-1.17]fixed
- Set explicit cosign bundle pathfixed
- Release cosign bundle release 1.17fixed
- Cherry pickother
- Cherry pickother
- Wrong lister in GenerateNamespaced breaks sync for all NamespacedGeneratingPolicy on UPDATE (Cherry-pickother
- Restrict configmap access for namespaced policies (Cherry-pickother
7 maintenance lines (dependency bumps, CI, tests, docs)
- Add trivy scan workflowmaintenance
- Backport ci changes from main to release-1.17 branchmaintenance
- Remove unnecessary jobs in conformance tests (Cherry-pickmaintenance
- Add missing scripts for cimaintenance
- Release 1.17.2-rc.1maintenance
- Fix goreleaser for cosign v3maintenance
- Release v1.17.2maintenance
36 lines5 security1 added19 fixed4 other7 maintenancetyped from the source notes