diff --git a/charts/kubewarden-controller/Chart.yaml b/charts/kubewarden-controller/Chart.yaml index 3442194b..56a3f322 100644 --- a/charts/kubewarden-controller/Chart.yaml +++ b/charts/kubewarden-controller/Chart.yaml @@ -23,7 +23,7 @@ maintainers: # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 4.0.0 +version: 4.0.1 # This is the version of Kubewarden stack appVersion: v1.20.0 annotations: @@ -35,14 +35,14 @@ annotations: catalog.cattle.io/display-name: Kubewarden # Only for Charts with custom UI catalog.cattle.io/os: linux # this means linux only, other choice here is "windows". For charts that support both, don't add this annotation # optional ones: - catalog.cattle.io/auto-install: kubewarden-crds=1.12.0 + catalog.cattle.io/auto-install: kubewarden-crds=1.12.1 catalog.cattle.io/provides-gvr: "policyservers.policies.kubewarden.io/v1" # Declare that this chart provides a type, which other charts may use in `requires-gvr`. Only add to parent, not CRD chart. # The following two will create a UI warning if the request is not available in cluster # Assume the most standard setup for your chart. These can be strings with amounts, ie 64Mi or 2Gi are both valid. catalog.cattle.io/requests-cpu: "250m" catalog.cattle.io/requests-memory: "50Mi" catalog.cattle.io/rancher-version: ">= 2.6.0-0 <= 2.10.100-0" # Chart will only be available for users in the specified Rancher version(s), here its 2.5.0-2.5.99. This _must_ use build metadata or it won't work correctly for future RC's. - catalog.cattle.io/upstream-version: 4.0.0 + catalog.cattle.io/upstream-version: 4.0.1 # Valid values for the following annotation include: `cluster-tool`, `app` or `cluster-template` # See the Cluster Tools section to learn more about when to set this value to `cluster-tool`. catalog.cattle.io/type: cluster-tool diff --git a/charts/kubewarden-controller/values.yaml b/charts/kubewarden-controller/values.yaml index 2ef965cb..44dfd4e9 100644 --- a/charts/kubewarden-controller/values.yaml +++ b/charts/kubewarden-controller/values.yaml @@ -199,7 +199,7 @@ image: # controller image to be used repository: "kubewarden/kubewarden-controller" # image tag - tag: v1.20.0 + tag: v1.20.1 pullPolicy: IfNotPresent preDeleteJob: image: @@ -242,7 +242,7 @@ auditScanner: # The registry is defined in the common.cattle.systemDefaultRegistry value # kubectl image to be used in the pre-delete helm hook repository: "kubewarden/audit-scanner" - tag: v1.20.0 + tag: v1.20.1 pullPolicy: IfNotPresent cronJob: schedule: "*/60 * * * *" # every 60 minutes diff --git a/charts/kubewarden-crds/Chart.yaml b/charts/kubewarden-crds/Chart.yaml index b0daf24d..8dc4e5c7 100644 --- a/charts/kubewarden-crds/Chart.yaml +++ b/charts/kubewarden-crds/Chart.yaml @@ -22,7 +22,7 @@ keywords: # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 1.12.0 +version: 1.12.1 # This is the version of Kubewarden stack appVersion: v1.20.0 annotations: @@ -33,7 +33,7 @@ annotations: catalog.cattle.io/os: linux # this means linux only, other choice here is "windows". For charts that support both, don't add this annotation # optional ones: catalog.cattle.io/hidden: "true" # Hide specific charts. Only use on CRD charts. - catalog.cattle.io/upstream-version: 1.12.0 + catalog.cattle.io/upstream-version: 1.12.1 # Valid values for the following annotation include: `cluster-tool`, `app` or `cluster-template` # See the Cluster Tools section to learn more about when to set this value to `cluster-tool`. catalog.cattle.io/type: cluster-tool diff --git a/charts/kubewarden-crds/templates/policyservers.yaml b/charts/kubewarden-crds/templates/policyservers.yaml index adb94863..45dec106 100644 --- a/charts/kubewarden-crds/templates/policyservers.yaml +++ b/charts/kubewarden-crds/templates/policyservers.yaml @@ -1437,6 +1437,32 @@ spec: Note that this field cannot be set when spec.os.name is windows. format: int64 type: integer + seLinuxChangePolicy: + description: |- + seLinuxChangePolicy defines how the container's SELinux label is applied to all volumes used by the Pod. + It has no effect on nodes that do not support SELinux or to volumes does not support SELinux. + Valid values are "MountOption" and "Recursive". + + "Recursive" means relabeling of all files on all Pod volumes by the container runtime. + This may be slow for large volumes, but allows mixing privileged and unprivileged Pods sharing the same volume on the same node. + + "MountOption" mounts all eligible Pod volumes with `-o context` mount option. + This requires all Pods that share the same volume to use the same SELinux label. + It is not possible to share the same volume among privileged and unprivileged Pods. + Eligible volumes are in-tree FibreChannel and iSCSI volumes, and all CSI volumes + whose CSI driver announces SELinux support by setting spec.seLinuxMount: true in their + CSIDriver instance. Other volumes are always re-labelled recursively. + "MountOption" value is allowed only when SELinuxMount feature gate is enabled. + + If not specified and SELinuxMount feature gate is enabled, "MountOption" is used. + If not specified and SELinuxMount feature gate is disabled, "MountOption" is used for ReadWriteOncePod volumes + and "Recursive" for all other volumes. + + This field affects only Pods that have SELinux label set, either in PodSecurityContext or in SecurityContext of all containers. + + All Pods that use the same volume should use the same seLinuxChangePolicy, otherwise some pods can get stuck in ContainerCreating state. + Note that this field cannot be set when spec.os.name is windows. + type: string seLinuxOptions: description: |- The SELinux context to be applied to all containers. diff --git a/charts/kubewarden-defaults/Chart.yaml b/charts/kubewarden-defaults/Chart.yaml index 7fc684c8..61fc454a 100644 --- a/charts/kubewarden-defaults/Chart.yaml +++ b/charts/kubewarden-defaults/Chart.yaml @@ -22,7 +22,7 @@ keywords: # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 2.7.0 +version: 2.7.1 # This is the version of Kubewarden stack appVersion: v1.20.0 annotations: @@ -36,7 +36,7 @@ annotations: # optional ones: catalog.cattle.io/hidden: "true" # Hide specific charts. Only use on CRD charts. catalog.cattle.io/upstream-version: 2.7.0 - catalog.cattle.io/auto-install: kubewarden-crds=1.12.0 + catalog.cattle.io/auto-install: kubewarden-crds=1.12.1 # Valid values for the following annotation include: `cluster-tool`, `app` or `cluster-template` # See the Cluster Tools section to learn more about when to set this value to `cluster-tool`. catalog.cattle.io/type: cluster-tool