kyverno 3.9.0 추가 — 자체 빌드 이미지 사용, 3.4.1 정리 (#57)

* kyverno 3.9.0(appVersion v1.19.0) 차트 추가 — 자체 빌드 이미지 사용 업스트림 이미지가 CVE 스캔 불가능한 베이스를 써서 자체 빌드로 대체한다(빌드 정의·근거는 hardened-containers). custom-values.yaml이 docker.io/paasup/* 7개 이미지를 가리키도록 고정했다. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * kyverno 3.4.1 삭제 3.9.0 추가 후 정리 --------- Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-27 14:46:42 +09:00
parent 9557f1fccb
commit a79e959c60
230 changed files with 53042 additions and 5345 deletions
@@ -0,0 +1,62 @@
+annotations:
+  artifacthub.io/changes: |
+    - kind: fixed
+      description: Ensure spec.template.metadata isn't null
+    - kind: removed
+      description: Remove the `delete` permission for policyexceptions in the admission controller
+    - kind: changed
+      description: Enable the flag `--generateValidatingAdmissionPolicy` by default in the admission controller.
+    - kind: changed
+      description: Enable the flag `--validatingAdmissionPolicyReports` by default in the reports controller.
+    - kind: added
+      description: Add support for configuring container lifecycle hooks (e.g. a preStop sleep) on the admission, background, cleanup and reports controllers.
+  artifacthub.io/license: Apache-2.0
+  artifacthub.io/links: |
+    - name: Documentation
+      url: https://kyverno.io/docs
+  artifacthub.io/operator: "false"
+  artifacthub.io/prerelease: "false"
+apiVersion: v2
+appVersion: v1.19.0
+dependencies:
+- condition: grafana.enabled
+  name: grafana
+  repository: ""
+  version: 3.9.0
+- condition: crds.install
+  name: crds
+  repository: ""
+  version: 3.9.0
+- condition: crds.install
+  name: kyverno-api
+  repository: https://kyverno.github.io/api
+  version: 0.0.1-alpha.4
+- condition: openreports.installCrds
+  name: openreports
+  repository: https://openreports.github.io/reports-api
+  version: 0.1.0
+- condition: reportsServer.enabled
+  name: reports-server
+  repository: https://kyverno.github.io/reports-server/
+  version: 0.1.6
+description: Kubernetes Native Policy Management
+home: https://kyverno.io/
+icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
+keywords:
+- kubernetes
+- policy agent
+- policy
+- validating webhook
+- admission controller
+- mutation
+- mutate
+- validate
+- generate
+- supply chain
+- security
+kubeVersion: '>=1.25.0-0'
+name: kyverno
+sources:
+- https://github.com/kyverno/kyverno
+type: application
+version: 3.9.0