Kyverno v1.17.1
security~~****************!
Changes
- CVE-2025-68121 (Cherry-picksecurity
- Changed default value and helm values documentation from integer to duration string (Cherry-pickchanged
- Change indentation of validationActions fields (cherry-pickchanged
- Panic in metrics wrapper when generating response does not provide a result (Cherry-pickfixed
- Init dclient before using it (Cherry-pickfixed
- Eliminate memcache error spam from fake client discovery polling (Cherry-pickfixed
- Restmapper for fakeclient (cherry-pickfixed
- Enable signed timestamp verification when TSA cert chain is provided (Cherry-pickfixed
- Add default message for ValidatingPolicy when message field is empty (Cherry-pickfixed
- Return errors from syncPolicy to enable workqueue retry (Cherry-pickfixed
- Skip side effects on dry-run in gpol/mpol (Cherry-pickfixed
- Unauthorized error when using a private repository (Cherry-pickfixed
13 more lines
- Add missing endpointslices list permission to cleanup controller role (Cherry-pickfixed
- Enqueue exceptions (Cherry-pickfixed
- Nil pointer dereference in Certificates branch of manifest valid… (Cherry-pickfixed
- Fix Empty list in policy exclusion result in excluding all resources (Cherry-pickfixed
- ImageVerify Multi-Signature Annotation Validation Bug (Cherry-pickfixed
- Use Kyverno namespace secrets in reports scanner (Cherry-pickfixed
- Handler crash for nmpol (Cherry-pickfixed
- Race conditions in configuration.IsExcluded() and breaker.ReportsBreaker (Cherry-pickfixed
- Make the mutating policy use its ConditionCompiler to produce the evaluator (Cherry-pickfixed
- Set UseSignedTimestamps when TSACertChain is provided in IVPOL cosign verifier (cherry pickfixed
- Cli: simplify namespaced policy loading in CLI (Cherry-pickother
- Populate registry consistently (Cherry-pickother
- Cherry pick #0ffed6fother
7 maintenance lines (dependency bumps, CI, tests, docs)
- Remove Nirmata refs (Cherry-pickmaintenance
- Fix Chainsaw test for MutatingPolicy add-label-applyconfiguration (Cherry-pickmaintenance
- Bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 (Cherry-pickmaintenance
- Run unit tests in verbose mode (cherry-pickmaintenance
- Bump the kubernetes group across 3 directories with 7 updates (Cherry-pickmaintenance
- V1.17.1-rc.1maintenance
- V1.17.1maintenance
32 lines1 security2 changed19 fixed3 other7 maintenancetyped from the source notes