From 9e1ea274e2c0e21759607f2042a9ffe17e35710d Mon Sep 17 00:00:00 2001
From: Thomas Vitale <ThomasVitale@users.noreply.github.com>
Date: Mon, 29 Jul 2024 22:32:18 +0200
Subject: [PATCH] chore: Update to Kyverno 1.12.5

---
 .github/workflows/release.yml        |   2 +-
 package/config/upstream/install.yaml | 187 ++++++++++++++-------------
 package/vendir.lock.yml              |   4 +-
 package/vendir.yml                   |   2 +-
 4 files changed, 99 insertions(+), 96 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d1a98b3..48cf0d1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,6 +18,6 @@ jobs:
       registry-server: ghcr.io
       registry-username: ${{ github.actor }}
       image: ${{ github.repository }}
-      version: 1.12.4
+      version: 1.12.5
     secrets:
       pull-request-token: ${{ secrets.GH_ORG_PAT }}
diff --git a/package/config/upstream/install.yaml b/package/config/upstream/install.yaml
index f634f35..bf9e325 100644
--- a/package/config/upstream/install.yaml
+++ b/package/config/upstream/install.yaml
@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -17,7 +17,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -28,7 +28,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -39,7 +39,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -49,7 +49,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -60,7 +60,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 ---
 apiVersion: v1
 kind: ConfigMap
@@ -71,7 +71,9 @@ metadata:
     app.kubernetes.io/component: config
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
+  annotations:
+    helm.sh/resource-policy: "keep"
 data:
   enableDefaultRegistryMutation: "true"
   defaultRegistry: "docker.io"
@@ -200,7 +202,7 @@ metadata:
     app.kubernetes.io/component: config
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 data:
   namespaces: "{\"exclude\":[],\"include\":[]}"
   bucketBoundaries: "0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10, 15, 20, 25, 30"
@@ -213,8 +215,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: admissionreports.kyverno.io
@@ -880,8 +882,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: backgroundscanreports.kyverno.io
@@ -1465,8 +1467,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: cleanuppolicies.kyverno.io
@@ -5149,8 +5151,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: clusteradmissionreports.kyverno.io
@@ -5818,8 +5820,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: clusterbackgroundscanreports.kyverno.io
@@ -6403,8 +6405,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: clustercleanuppolicies.kyverno.io
@@ -10087,8 +10089,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: clusterpolicies.kyverno.io
@@ -26649,8 +26651,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: globalcontextentries.kyverno.io
@@ -26898,8 +26900,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: policies.kyverno.io
@@ -43463,8 +43465,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: policyexceptions.kyverno.io
@@ -45350,8 +45352,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: updaterequests.kyverno.io
@@ -46137,8 +46139,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: clusterephemeralreports.reports.kyverno.io
@@ -46494,8 +46496,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: ephemeralreports.reports.kyverno.io
@@ -46851,8 +46853,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: clusterpolicyreports.wgpolicyk8s.io
@@ -47233,8 +47235,8 @@ metadata:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: kyverno-crds
-    app.kubernetes.io/version: 3.2.5
-    helm.sh/chart: crds-3.2.5
+    app.kubernetes.io/version: 3.2.6
+    helm.sh/chart: crds-3.2.6
   annotations:
     controller-gen.kubebuilder.io/version: v0.15.0
   name: policyreports.wgpolicyk8s.io
@@ -47614,7 +47616,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 aggregationRule:
   clusterRoleSelectors:
     - matchLabels:
@@ -47630,7 +47632,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 rules:
   - apiGroups:
       - apiextensions.k8s.io
@@ -47769,7 +47771,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 aggregationRule:
   clusterRoleSelectors:
     - matchLabels:
@@ -47785,7 +47787,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 rules:
   - apiGroups:
       - apiextensions.k8s.io
@@ -47883,7 +47885,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 aggregationRule:
   clusterRoleSelectors:
     - matchLabels:
@@ -47899,7 +47901,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 rules:
   - apiGroups:
       - apiextensions.k8s.io
@@ -47986,7 +47988,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 rules:
   - apiGroups:
       - kyverno.io
@@ -48016,7 +48018,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 rules:
   - apiGroups:
@@ -48043,7 +48045,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
     rbac.authorization.k8s.io/aggregate-to-view: "true"
 rules:
   - apiGroups:
@@ -48066,7 +48068,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 rules:
   - apiGroups:
@@ -48091,7 +48093,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
     rbac.authorization.k8s.io/aggregate-to-view: "true"
 rules:
   - apiGroups:
@@ -48112,7 +48114,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 rules:
   - apiGroups:
@@ -48152,7 +48154,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
     rbac.authorization.k8s.io/aggregate-to-view: "true"
 rules:
   - apiGroups:
@@ -48184,7 +48186,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 rules:
   - apiGroups:
@@ -48208,7 +48210,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
     rbac.authorization.k8s.io/aggregate-to-view: "true"
 rules:
   - apiGroups:
@@ -48228,7 +48230,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 aggregationRule:
   clusterRoleSelectors:
     - matchLabels:
@@ -48244,7 +48246,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 rules:
   - apiGroups:
       - apiextensions.k8s.io
@@ -48338,7 +48340,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -48356,7 +48358,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -48374,7 +48376,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -48391,7 +48393,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -48409,7 +48411,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -48428,7 +48430,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 rules:
   - apiGroups:
       - ''
@@ -48480,7 +48482,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
   namespace: kyverno
 rules:
   - apiGroups:
@@ -48528,7 +48530,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
   namespace: kyverno
 rules:
   - apiGroups:
@@ -48587,7 +48589,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
   namespace: kyverno
 rules:
   - apiGroups:
@@ -48628,7 +48630,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
@@ -48646,7 +48648,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
   namespace: kyverno
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -48665,7 +48667,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
   namespace: kyverno
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -48684,7 +48686,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
   namespace: kyverno
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -48704,7 +48706,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   ports:
   - port: 443
@@ -48726,7 +48728,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   ports:
   - port: 8000
@@ -48748,7 +48750,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   ports:
   - port: 8000
@@ -48770,7 +48772,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   ports:
   - port: 443
@@ -48792,7 +48794,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   ports:
   - port: 8000
@@ -48814,7 +48816,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   ports:
   - port: 8000
@@ -48836,7 +48838,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   replicas: 
   revisionHistoryLimit: 10
@@ -48856,7 +48858,7 @@ spec:
         app.kubernetes.io/component: admission-controller
         app.kubernetes.io/instance: kyverno
         app.kubernetes.io/part-of: kyverno
-        app.kubernetes.io/version: v1.12.4
+        app.kubernetes.io/version: v1.12.5
     spec:
       dnsPolicy: ClusterFirst
       affinity:
@@ -48874,7 +48876,7 @@ spec:
       serviceAccountName: kyverno-admission-controller
       initContainers:
         - name: kyverno-pre
-          image: "ghcr.io/kyverno/kyvernopre:v1.12.4"
+          image: "ghcr.io/kyverno/kyvernopre:v1.12.5"
           imagePullPolicy: IfNotPresent
           args:
             - --loggingFormat=text
@@ -48917,7 +48919,7 @@ spec:
             value: kyverno-svc
       containers:
         - name: kyverno
-          image: "ghcr.io/kyverno/kyverno:v1.12.4"
+          image: "ghcr.io/kyverno/kyverno:v1.12.5"
           imagePullPolicy: IfNotPresent
           args:
             - --caSecretName=kyverno-svc.kyverno.svc.kyverno-tls-ca
@@ -48929,6 +48931,7 @@ spec:
             - --otelConfig=prometheus
             - --metricsPort=8000
             - --admissionReports=true
+            - --maxAdmissionReports=1000
             - --autoUpdateWebhooks=true
             - --enableConfigMapCaching=true
             - --enableDeferredLoading=true
@@ -49033,7 +49036,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   replicas: 
   revisionHistoryLimit: 10
@@ -49053,7 +49056,7 @@ spec:
         app.kubernetes.io/component: background-controller
         app.kubernetes.io/instance: kyverno
         app.kubernetes.io/part-of: kyverno
-        app.kubernetes.io/version: v1.12.4
+        app.kubernetes.io/version: v1.12.5
     spec:
       dnsPolicy: ClusterFirst
       affinity:
@@ -49071,7 +49074,7 @@ spec:
       serviceAccountName: kyverno-background-controller
       containers:
         - name: controller
-          image: "ghcr.io/kyverno/background-controller:v1.12.4"
+          image: "ghcr.io/kyverno/background-controller:v1.12.5"
           imagePullPolicy: IfNotPresent
           ports:
           - containerPort: 9443
@@ -49136,7 +49139,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   replicas: 
   revisionHistoryLimit: 10
@@ -49156,7 +49159,7 @@ spec:
         app.kubernetes.io/component: cleanup-controller
         app.kubernetes.io/instance: kyverno
         app.kubernetes.io/part-of: kyverno
-        app.kubernetes.io/version: v1.12.4
+        app.kubernetes.io/version: v1.12.5
     spec:
       dnsPolicy: ClusterFirst
       affinity:
@@ -49174,7 +49177,7 @@ spec:
       serviceAccountName: kyverno-cleanup-controller
       containers:
         - name: controller
-          image: "ghcr.io/kyverno/cleanup-controller:v1.12.4"
+          image: "ghcr.io/kyverno/cleanup-controller:v1.12.5"
           imagePullPolicy: IfNotPresent
           ports:
           - containerPort: 9443
@@ -49274,7 +49277,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   replicas: 
   revisionHistoryLimit: 10
@@ -49294,7 +49297,7 @@ spec:
         app.kubernetes.io/component: reports-controller
         app.kubernetes.io/instance: kyverno
         app.kubernetes.io/part-of: kyverno
-        app.kubernetes.io/version: v1.12.4
+        app.kubernetes.io/version: v1.12.5
     spec:
       dnsPolicy: ClusterFirst
       affinity:
@@ -49312,7 +49315,7 @@ spec:
       serviceAccountName: kyverno-reports-controller
       containers:
         - name: controller
-          image: "ghcr.io/kyverno/reports-controller:v1.12.4"
+          image: "ghcr.io/kyverno/reports-controller:v1.12.5"
           imagePullPolicy: IfNotPresent
           ports:
           - containerPort: 9443
@@ -49396,7 +49399,7 @@ metadata:
     app.kubernetes.io/component: cleanup
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   schedule: "*/10 * * * *"
   concurrencyPolicy: Forbid
@@ -49446,7 +49449,7 @@ metadata:
     app.kubernetes.io/component: cleanup
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   schedule: "*/10 * * * *"
   concurrencyPolicy: Forbid
@@ -49496,7 +49499,7 @@ metadata:
     app.kubernetes.io/component: cleanup
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   schedule: "*/10 * * * *"
   concurrencyPolicy: Forbid
@@ -49546,7 +49549,7 @@ metadata:
     app.kubernetes.io/component: cleanup
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   schedule: "*/10 * * * *"
   concurrencyPolicy: Forbid
@@ -49596,7 +49599,7 @@ metadata:
     app.kubernetes.io/component: cleanup
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.12.4
+    app.kubernetes.io/version: v1.12.5
 spec:
   schedule: "*/10 * * * *"
   concurrencyPolicy: Forbid
diff --git a/package/vendir.lock.yml b/package/vendir.lock.yml
index e83d9df..e353e13 100644
--- a/package/vendir.lock.yml
+++ b/package/vendir.lock.yml
@@ -2,8 +2,8 @@ apiVersion: vendir.k14s.io/v1alpha1
 directories:
 - contents:
   - githubRelease:
-      tag: v1.12.4
-      url: https://api.github.com/repos/kyverno/kyverno/releases/160815099
+      tag: v1.12.5
+      url: https://api.github.com/repos/kyverno/kyverno/releases/165160473
     path: .
   path: config/upstream
 kind: LockConfig
diff --git a/package/vendir.yml b/package/vendir.yml
index 4c2cc58..64d4111 100755
--- a/package/vendir.yml
+++ b/package/vendir.yml
@@ -4,7 +4,7 @@ directories:
   - githubRelease:
       disableAutoChecksumValidation: true
       slug: kyverno/kyverno
-      tag: v1.12.4
+      tag: v1.12.5
     includePaths:
     - install.yaml
     path: .