Kubewarden 1.11-rc1

Update charts, images and policies.

Author: chimera-kube-bot

charts/kubewarden-controller/Chart.yaml

@@ -23,9 +23,9 @@ maintainers:
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 2.0.8
+version: 2.0.9-rc1
 # This is the version of Kubewarden stack
-appVersion: v1.10.0
+appVersion: v1.11.0-rc1
 annotations:
   # required ones:
   catalog.cattle.io/certified: rancher # Any application we are adding as a helm chart
@@ -42,7 +42,7 @@ annotations:
   catalog.cattle.io/requests-cpu: "250m"
   catalog.cattle.io/requests-memory: "50Mi"
   catalog.cattle.io/rancher-version: ">= 2.6.0-0 <= 2.8.100-0" # Chart will only be available for users in the specified Rancher version(s), here its 2.5.0-2.5.99. This _must_ use build metadata or it won't work correctly for future RC's.
-  catalog.cattle.io/upstream-version: 2.0.8
+  catalog.cattle.io/upstream-version: 2.0.9-rc1
   # Valid values for the following annotation include: `cluster-tool`, `app` or `cluster-template`
   # See the Cluster Tools section to learn more about when to set this value to `cluster-tool`.
   catalog.cattle.io/type: cluster-tool

charts/kubewarden-controller/values.yaml

@@ -1,5 +1,4 @@
 # This file was autogenerated.
-
 # Common settings across multiple charts. These settings will be used
 # by more than one chart and they ideally need to match during the
 # installation of the charts consuming this values.
@@ -155,7 +154,7 @@ auditScanner:
     # The registry is defined in the common.cattle.systemDefaultRegistry value
     # kubectl image to be used in the pre-delete helm hook
     repository: "kubewarden/audit-scanner"
-    tag: v1.10.0
+    tag: v1.11.0-rc1
     pullPolicy: IfNotPresent
   cronJob:
     schedule: "*/60 * * * *" # every 60 minutes

charts/kubewarden-defaults/Chart.yaml

@@ -22,9 +22,9 @@ keywords:
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.9.3
+version: 1.9.4-rc1
 # This is the version of Kubewarden stack
-appVersion: v1.10.0
+appVersion: v1.11.0-rc1
 annotations:
   # required ones:
   catalog.cattle.io/certified: rancher # Any application we are adding as a helm chart
@@ -35,7 +35,7 @@ annotations:
   catalog.cattle.io/os: linux # this means linux only, other choice here is "windows". For charts that support both, don't add this annotation
   # optional ones:
   catalog.cattle.io/hidden: "true" # Hide specific charts. Only use on CRD charts.
-  catalog.cattle.io/upstream-version: 1.9.3
+  catalog.cattle.io/upstream-version: 1.9.4-rc1
   catalog.cattle.io/auto-install: kubewarden-crds=1.4.5
   # Valid values for the following annotation include: `cluster-tool`, `app` or `cluster-template`
   # See the Cluster Tools section to learn more about when to set this value to `cluster-tool`.

charts/kubewarden-defaults/values.yaml

@@ -1,5 +1,4 @@
 # This file was autogenerated.
-
 # Common settings across multiple charts. These settings will be used
 # by more than one chart and they ideally need to match during the
 # installation of the charts consuming this values.
@@ -61,7 +60,7 @@ policyServer:
   image:
     # The registry is defined in the global.cattle.systemDefaultRegistry value
     repository: "kubewarden/policy-server"
-    tag: v1.10.0
+    tag: v1.11.0-rc1
   serviceAccountName: policy-server
   # verificationConfig: your_configmap
   # Configmap containing a Sigstore verification configuration under a key
@@ -88,15 +87,13 @@ policyServer:
   #
   # Example of usage:
   # imagePullSecret: "mysecret"
-  imagePullSecret:
-  # insecureSources stores a list of allowed insecure registries.
+  imagePullSecret: null # insecureSources stores a list of allowed insecure registries.
   #
   # Example of usage:
   #insecureSources:
   #  - "source1"
   #  - "source2"
-  insecureSources:
-  # sourceAuthorities is a list of the URIs and their PEM encoded certificates
+  insecureSources: null # sourceAuthorities is a list of the URIs and their PEM encoded certificates
   # used to authenticate them
   #
   # Example of usage:
@@ -130,10 +127,10 @@ recommendedPolicies:
     module: "kubewarden/policies/host-namespaces-psp:v0.1.6"
     name: "no-host-namespace-sharing"
   podPrivilegedPolicy:
-    module: "kubewarden/policies/pod-privileged:v0.3.1"
+    module: "kubewarden/policies/pod-privileged:v0.3.2"
     name: "no-privileged-pod"
   userGroupPolicy:
-    module: "kubewarden/policies/user-group-psp:v0.4.9"
+    module: "kubewarden/policies/user-group-psp:v0.5.0"
     name: "do-not-run-as-root"
   hostPathsPolicy:
     module: "kubewarden/policies/hostpaths-psp:v0.1.10"