chore: update kyverno to 3.7.1 (1.17.1)

apps.yaml

@@ -139,7 +139,7 @@ appsInfo:
     isAlpha: true
   kyverno:
     title: Kyverno
-    appVersion: 1.15.2
+    appVersion: 1.17.1
     repo: https://github.com/kyverno/kyverno
     maintainers: Nirmata
     relatedLinks:

chart/chart-index/Chart.yaml

@@ -68,7 +68,7 @@ dependencies:
     version: 81.6.9
     repository: https://prometheus-community.github.io/helm-charts
   - name: kyverno
-    version: 3.5.2
+    version: 3.7.1
     repository: https://kyverno.github.io/kyverno/
   - name: loki
     version: 6.55.0

charts/kyverno/Chart.lock

@@ -1,12 +1,18 @@
 dependencies:
 - name: grafana
   repository: ""
-  version: 3.5.2
+  version: 3.7.1
 - name: crds
   repository: ""
-  version: 3.5.2
+  version: 3.7.1
+- name: kyverno-api
+  repository: https://kyverno.github.io/api
+  version: 0.0.1-alpha.2
 - name: openreports
   repository: https://openreports.github.io/reports-api
   version: 0.1.0
-digest: sha256:dbf2f3168b202171820ff75ebc672ad3bebf9fb2b6b4eeb50defd40e5dcfddb7
-generated: "2025-09-18T00:07:30.923959+08:00"
+- name: reports-server
+  repository: https://kyverno.github.io/reports-server/
+  version: 0.1.6
+digest: sha256:46ef6df9b71dba9a3aa4d2846e05c9b94b18cabe4297268be86fe743ee3d4b23
+generated: "2026-02-19T10:51:43.088485+01:00"

charts/kyverno/Chart.yaml

@@ -14,26 +14,33 @@ annotations:
   artifacthub.io/operator: "false"
   artifacthub.io/prerelease: "false"
 apiVersion: v2
-appVersion: v1.15.2
+appVersion: v1.17.1
 dependencies:
 - condition: grafana.enabled
   name: grafana
   repository: ""
-  version: 3.5.2
+  version: 3.7.1
 - condition: crds.install
   name: crds
   repository: ""
-  version: 3.5.2
+  version: 3.7.1
+- condition: crds.install
+  name: kyverno-api
+  repository: https://kyverno.github.io/api
+  version: 0.0.1-alpha.2
 - condition: openreports.installCrds
   name: openreports
   repository: https://openreports.github.io/reports-api
   version: 0.1.0
+- condition: reportsServer.enabled
+  name: reports-server
+  repository: https://kyverno.github.io/reports-server/
+  version: 0.1.6
 description: Kubernetes Native Policy Management
 home: https://kyverno.io/
 icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
 keywords:
 - kubernetes
-- nirmata
 - policy agent
 - policy
 - validating webhook
@@ -45,11 +52,8 @@ keywords:
 - supply chain
 - security
 kubeVersion: '>=1.25.0-0'
-maintainers:
-- name: Nirmata
-  url: https://kyverno.io/
 name: kyverno
 sources:
 - https://github.com/kyverno/kyverno
 type: application
-version: 3.5.2
+version: 3.7.1

charts/kyverno/charts/crds/Chart.yaml

@@ -1,4 +1,3 @@
 apiVersion: v2
-description: Kyverno Custom Resource Definitions
 name: crds
-version: 3.5.2
+version: 3.7.1

charts/kyverno/charts/crds/README.md

@@ -1,20 +1,18 @@
 # crds
 
-![Version: 3.5.2](https://img.shields.io/badge/Version-3.5.2-informational?style=flat-square)
-
-Kyverno Custom Resource Definitions
+![Version: 3.7.1](https://img.shields.io/badge/Version-3.7.1-informational?style=flat-square)
 
 ## Values
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
-| annotations | object | `{}` | This field can be overwritten by setting crds.annotations in the parent chart |
-| customLabels | object | `{}` | This field can be overwritten by setting crds.labels in the parent chart |
+| reportsServer.enabled | bool | `false` | Kyverno reports-server is used in your cluster |
 | groups.kyverno | object | `{"cleanuppolicies":true,"clustercleanuppolicies":true,"clusterpolicies":true,"globalcontextentries":true,"policies":true,"policyexceptions":true,"updaterequests":true}` | This field can be overwritten by setting crds.labels in the parent chart |
-| groups.policies | object | `{"deletingpolicies":true,"generatingpolicies":true,"imagevalidatingpolicies":true,"mutatingpolicies":true,"policyexceptions":true,"validatingpolicies":true}` | Install CRDs in group `reports.kyverno.io` |
+| groups.policies | object | `{"deletingpolicies":true,"generatingpolicies":true,"imagevalidatingpolicies":true,"mutatingpolicies":true,"namespaceddeletingpolicies":true,"namespacedgeneratingpolicies":true,"namespacedimagevalidatingpolicies":true,"namespacedvalidatingpolicies":true,"policyexceptions":true,"validatingpolicies":true}` | Install CRDs in group `reports.kyverno.io` |
 | groups.reports | object | `{"clusterephemeralreports":true,"ephemeralreports":true}` | This field can be overwritten by setting crds.labels in the parent chart |
 | groups.wgpolicyk8s | object | `{"clusterpolicyreports":true,"policyreports":true}` | This field can be overwritten by setting crds.labels in the parent chart |
-| reportsServer.enabled | bool | `false` | Kyverno reports-server is used in your cluster |
+| annotations | object | `{}` | This field can be overwritten by setting crds.annotations in the parent chart |
+| customLabels | object | `{}` | This field can be overwritten by setting crds.labels in the parent chart |
 
 ----------------------------------------------
 Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)

charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_cleanuppolicies.yaml

@@ -9,7 +9,7 @@ metadata:
     {{- with .Values.annotations }}
     {{- toYaml . | nindent 4 }}
     {{- end }}
-    controller-gen.kubebuilder.io/version: v0.17.3
+    controller-gen.kubebuilder.io/version: v0.20.0
   name: cleanuppolicies.kyverno.io
 spec:
   group: kyverno.io

charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_clustercleanuppolicies.yaml

@@ -9,7 +9,7 @@ metadata:
     {{- with .Values.annotations }}
     {{- toYaml . | nindent 4 }}
     {{- end }}
-    controller-gen.kubebuilder.io/version: v0.17.3
+    controller-gen.kubebuilder.io/version: v0.20.0
   name: clustercleanuppolicies.kyverno.io
 spec:
   group: kyverno.io

charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_clusterpolicies.yaml

@@ -9,7 +9,7 @@ metadata:
     {{- with .Values.annotations }}
     {{- toYaml . | nindent 4 }}
     {{- end }}
-    controller-gen.kubebuilder.io/version: v0.17.3
+    controller-gen.kubebuilder.io/version: v0.20.0
   name: clusterpolicies.kyverno.io
 spec:
   group: kyverno.io
@@ -4199,7 +4199,7 @@ spec:
                             version:
                               description: |-
                                 Version defines the Pod Security Standard versions that Kubernetes supports.
-                                Allowed values are v1.19, v1.20, v1.21, v1.22, v1.23, v1.24, v1.25, v1.26, v1.27, v1.28, v1.29, latest. Defaults to latest.
+                                Allowed values are v1.19, v1.20, v1.21, v1.22, v1.23, v1.24, v1.25, v1.26, v1.27, v1.28, v1.29, v1.30, v1.31, v1.32, latest. Defaults to latest.
                               enum:
                               - v1.19
                               - v1.20
@@ -4212,6 +4212,9 @@ spec:
                               - v1.27
                               - v1.28
                               - v1.29
+                              - v1.30
+                              - v1.31
+                              - v1.32
                               - latest
                               type: string
                           type: object
@@ -9332,7 +9335,7 @@ spec:
                                 version:
                                   description: |-
                                     Version defines the Pod Security Standard versions that Kubernetes supports.
-                                    Allowed values are v1.19, v1.20, v1.21, v1.22, v1.23, v1.24, v1.25, v1.26, v1.27, v1.28, v1.29, latest. Defaults to latest.
+                                    Allowed values are v1.19, v1.20, v1.21, v1.22, v1.23, v1.24, v1.25, v1.26, v1.27, v1.28, v1.29, v1.30, v1.31, v1.32, latest. Defaults to latest.
                                   enum:
                                   - v1.19
                                   - v1.20
@@ -9345,6 +9348,9 @@ spec:
                                   - v1.27
                                   - v1.28
                                   - v1.29
+                                  - v1.30
+                                  - v1.31
+                                  - v1.32
                                   - latest
                                   type: string
                               type: object
@@ -14236,7 +14242,7 @@ spec:
                             version:
                               description: |-
                                 Version defines the Pod Security Standard versions that Kubernetes supports.
-                                Allowed values are v1.19, v1.20, v1.21, v1.22, v1.23, v1.24, v1.25, v1.26, v1.27, v1.28, v1.29, latest. Defaults to latest.
+                                Allowed values are v1.19, v1.20, v1.21, v1.22, v1.23, v1.24, v1.25, v1.26, v1.27, v1.28, v1.29, v1.30, v1.31, v1.32, latest. Defaults to latest.
                               enum:
                               - v1.19
                               - v1.20
@@ -14249,6 +14255,9 @@ spec:
                               - v1.27
                               - v1.28
                               - v1.29
+                              - v1.30
+                              - v1.31
+                              - v1.32
                               - latest
                               type: string
                           type: object
@@ -19338,7 +19347,7 @@ spec:
                                 version:
                                   description: |-
                                     Version defines the Pod Security Standard versions that Kubernetes supports.
-                                    Allowed values are v1.19, v1.20, v1.21, v1.22, v1.23, v1.24, v1.25, v1.26, v1.27, v1.28, v1.29, latest. Defaults to latest.
+                                    Allowed values are v1.19, v1.20, v1.21, v1.22, v1.23, v1.24, v1.25, v1.26, v1.27, v1.28, v1.29, v1.30, v1.31, v1.32, latest. Defaults to latest.
                                   enum:
                                   - v1.19
                                   - v1.20
@@ -19351,6 +19360,9 @@ spec:
                                   - v1.27
                                   - v1.28
                                   - v1.29
+                                  - v1.30
+                                  - v1.31
+                                  - v1.32
                                   - latest
                                   type: string
                               type: object