Prepare v3.1.0-beta.12 release (#763)

open-policy-agent · Jul 31, 2020 · 1de87b6 · 1de87b6
1 parent 0afb7e5
commit 1de87b6
Show file tree

Hide file tree

Showing 25 changed files with 101 additions and 225 deletions.
diff --git a/Makefile b/Makefile
@@ -5,7 +5,7 @@ IMG := $(REPOSITORY):latest
 # DEV_TAG will be replaced with short Git SHA on pre-release stage in CI
 DEV_TAG ?= dev
 
-VERSION := v3.1.0-beta.11
+VERSION := v3.1.0-beta.12
 
 USE_LOCAL_IMG ?= false
 KIND_VERSION=0.7.0

diff --git a/charts/gatekeeper/Chart.yaml b/charts/gatekeeper/Chart.yaml
@@ -3,8 +3,8 @@ description: A Helm chart for Gatekeeper
 name: gatekeeper
 keywords:
  - open policy agent
-version: v3.1.0-beta.11
+version: v3.1.0-beta.12
 home: https://github.com/open-policy-agent/gatekeeper
 sources:
  - https://github.com/open-policy-agent/gatekeeper.git
-appVersion: v3.1.0-beta.11
+appVersion: v3.1.0-beta.12
diff --git a/charts/gatekeeper/README.md b/charts/gatekeeper/README.md
@@ -14,7 +14,7 @@
 | logLevel | Minimum log level | `INFO` |
 | image.pullPolicy | The image pull policy | `IfNotPresent` |
 | image.repository | Image repository | `openpolicyagent/gatekeeper` |
-| image.release | The image release tag to use | Current release version: `v3.1.0-beta.11` |
+| image.release | The image release tag to use | Current release version: `v3.1.0-beta.12` |
 | resources | The resource request/limits for the container image | limits: 1 CPU, 512Mi, requests: 100mCPU, 256Mi |
 | nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` |
 | affinity | The node affinity to use for pod scheduling | `{}` |

diff --git a/charts/gatekeeper/gatekeeper-v3.1.0-beta.11.tgz b/charts/gatekeeper/gatekeeper-v3.1.0-beta.11.tgz
diff --git a/charts/gatekeeper/gatekeeper-v3.1.0-beta.12.tgz b/charts/gatekeeper/gatekeeper-v3.1.0-beta.12.tgz
diff --git a/charts/gatekeeper/index.yaml b/charts/gatekeeper/index.yaml
@@ -2,17 +2,17 @@ apiVersion: v1
 entries:
  gatekeeper:
  - apiVersion: v1
- appVersion: v3.1.0-beta.11
- created: "2020-07-24T16:56:23.670543818-07:00"
+ appVersion: v3.1.0-beta.12
+ created: "2020-07-30T14:33:05.2243164-07:00"
  description: A Helm chart for Gatekeeper
- digest: 937aeddadbeac8fa1b71169c4fcde5229fa8445b0caec6339dc7cae2ac10d43f
+ digest: 8c47867d1fcfcd6d017df750ae55cdc37870bc27bb5bdbba9053d5bebc5f2c3f
  home: https://github.com/open-policy-agent/gatekeeper
  keywords:
  - open policy agent
  name: gatekeeper
  sources:
  - https://github.com/open-policy-agent/gatekeeper.git
  urls:
- - https://raw.githubusercontent.com/open-policy-agent/gatekeeper/v3.1.0-beta.11/charts/gatekeeper/gatekeeper-v3.1.0-beta.11.tgz
- version: v3.1.0-beta.11
-generated: "2020-07-24T16:56:23.669766565-07:00"
+ - https://raw.githubusercontent.com/open-policy-agent/gatekeeper/v3.1.0-beta.12/charts/gatekeeper/gatekeeper-v3.1.0-beta.12.tgz
+ version: v3.1.0-beta.12
+generated: "2020-07-30T14:33:05.2234326-07:00"
diff --git a/charts/gatekeeper/templates/config-customresourcedefinition.yaml b/charts/gatekeeper/templates/config-customresourcedefinition.yaml
@@ -28,14 +28,10 @@ spec:
  description: Config is the Schema for the configs API
  properties:
  apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  type: string
  kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  type: string
  metadata:
  type: object
@@ -66,8 +62,7 @@ spec:
  description: Configuration for syncing k8s objects
  properties:
  syncOnly:
- description: If non-empty, only entries on this list will be replicated
- into OPA
+ description: If non-empty, only entries on this list will be replicated into OPA
  items:
  properties:
  group:
@@ -83,13 +78,11 @@ spec:
  description: Configuration for validation
  properties:
  traces:
- description: List of requests to trace. Both "user" and "kinds"
- must be specified
+ description: List of requests to trace. Both "user" and "kinds" must be specified
  items:
  properties:
  dump:
- description: Also dump the state of OPA with the trace. Set
- to `All` to dump everything.
+ description: Also dump the state of OPA with the trace. Set to `All` to dump everything.
  type: string
  kind:
  description: Only trace requests of the following GroupVersionKind

diff --git a/charts/gatekeeper/templates/constraintpodstatus-customresourcedefinition.yaml b/charts/gatekeeper/templates/constraintpodstatus-customresourcedefinition.yaml
@@ -21,35 +21,27 @@ spec:
  scope: Namespaced
  validation:
  openAPIV3Schema:
- description: ConstraintPodStatus is the Schema for the constraintpodstatuses
- API
+ description: ConstraintPodStatus is the Schema for the constraintpodstatuses API
  properties:
  apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  type: string
  kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  type: string
  metadata:
  type: object
  status:
  description: ConstraintPodStatusStatus defines the observed state of ConstraintPodStatus
  properties:
  constraintUID:
- description: Storing the constraint UID allows us to detect drift, such
- as when a constraint has been recreated after its CRD was deleted
- out from under it, interrupting the watch
+ description: Storing the constraint UID allows us to detect drift, such as when a constraint has been recreated after its CRD was deleted out from under it, interrupting the watch
  type: string
  enforced:
  type: boolean
  errors:
  items:
- description: Error represents a single error caught while adding a
- constraint to OPA
+ description: Error represents a single error caught while adding a constraint to OPA
  properties:
  code:
  type: string

diff --git a/charts/gatekeeper/templates/constrainttemplate-customresourcedefinition.yaml b/charts/gatekeeper/templates/constrainttemplate-customresourcedefinition.yaml
@@ -27,14 +27,10 @@ spec:
  openAPIV3Schema:
  properties:
  apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  type: string
  kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  type: string
  metadata:
  type: object

diff --git a/charts/gatekeeper/templates/constrainttemplatepodstatus-customresourcedefinition.yaml b/charts/gatekeeper/templates/constrainttemplatepodstatus-customresourcedefinition.yaml
@@ -21,29 +21,22 @@ spec:
  scope: Namespaced
  validation:
  openAPIV3Schema:
- description: ConstraintTemplatePodStatus is the Schema for the constrainttemplatepodstatuses
- API
+ description: ConstraintTemplatePodStatus is the Schema for the constrainttemplatepodstatuses API
  properties:
  apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  type: string
  kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  type: string
  metadata:
  type: object
  status:
- description: ConstraintTemplatePodStatusStatus defines the observed state
- of ConstraintTemplatePodStatus
+ description: ConstraintTemplatePodStatusStatus defines the observed state of ConstraintTemplatePodStatus
  properties:
  errors:
  items:
- description: CreateCRDError represents a single error caught during
- parsing, compiling, etc.
+ description: CreateCRDError represents a single error caught during parsing, compiling, etc.
  properties:
  code:
  type: string
@@ -57,8 +50,7 @@ spec:
  type: object
  type: array
  id:
- description: 'Important: Run "make" to regenerate code after modifying
- this file'
+ description: 'Important: Run "make" to regenerate code after modifying this file'
  type: string
  observedGeneration:
  format: int64
@@ -68,10 +60,7 @@ spec:
  type: string
  type: array
  templateUID:
- description: UID is a type that holds unique ID values, including UUIDs. Because
- we don't ONLY use UUIDs, this is an alias to string. Being a type
- captures intent and helps make sure that UIDs and names do not get
- conflated.
+ description: UID is a type that holds unique ID values, including UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being a type captures intent and helps make sure that UIDs and names do not get conflated.
  type: string
  type: object
  type: object

diff --git a/...templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml b/...templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml
@@ -21,8 +21,6 @@ webhooks:
  name: validation.gatekeeper.sh
  namespaceSelector:
  matchExpressions:
- - key: control-plane
- operator: DoesNotExist
  - key: admission.gatekeeper.sh/ignore
  operator: DoesNotExist
  rules:

diff --git a/charts/gatekeeper/values.yaml b/charts/gatekeeper/values.yaml
@@ -9,7 +9,7 @@ emitAdmissionEvents: false
 emitAuditEvents: false
 image:
  repository: openpolicyagent/gatekeeper
- release: v3.1.0-beta.11
+ release: v3.1.0-beta.12
  pullPolicy: IfNotPresent
 nodeSelector: { kubernetes.io/os: linux }
 affinity: {}

diff --git a/cmd/build/helmify/static/Chart.yaml b/cmd/build/helmify/static/Chart.yaml
@@ -3,8 +3,8 @@ description: A Helm chart for Gatekeeper
 name: gatekeeper
 keywords:
  - open policy agent
-version: v3.1.0-beta.11
+version: v3.1.0-beta.12
 home: https://github.com/open-policy-agent/gatekeeper
 sources:
  - https://github.com/open-policy-agent/gatekeeper.git
-appVersion: v3.1.0-beta.11
+appVersion: v3.1.0-beta.12
diff --git a/cmd/build/helmify/static/README.md b/cmd/build/helmify/static/README.md
@@ -14,7 +14,7 @@
 | logLevel | Minimum log level | `INFO` |
 | image.pullPolicy | The image pull policy | `IfNotPresent` |
 | image.repository | Image repository | `openpolicyagent/gatekeeper` |
-| image.release | The image release tag to use | Current release version: `v3.1.0-beta.11` |
+| image.release | The image release tag to use | Current release version: `v3.1.0-beta.12` |
 | resources | The resource request/limits for the container image | limits: 1 CPU, 512Mi, requests: 100mCPU, 256Mi |
 | nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` |
 | affinity | The node affinity to use for pod scheduling | `{}` |

diff --git a/cmd/build/helmify/static/values.yaml b/cmd/build/helmify/static/values.yaml
@@ -9,7 +9,7 @@ emitAdmissionEvents: false
 emitAuditEvents: false
 image:
  repository: openpolicyagent/gatekeeper
- release: v3.1.0-beta.11
+ release: v3.1.0-beta.12
  pullPolicy: IfNotPresent
 nodeSelector: { kubernetes.io/os: linux }
 affinity: {}

diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -49,7 +49,7 @@ spec:
  - "--logtostderr"
  - "--exempt-namespace=gatekeeper-system"
  - "--operation=webhook"
- image: openpolicyagent/gatekeeper:v3.1.0-beta.11
+ image: openpolicyagent/gatekeeper:v3.1.0-beta.12
  imagePullPolicy: Always
  name: manager
  ports:
@@ -135,7 +135,7 @@ spec:
  valueFrom:
  fieldRef:
  fieldPath: metadata.name
- image: openpolicyagent/gatekeeper:v3.1.0-beta.11
+ image: openpolicyagent/gatekeeper:v3.1.0-beta.12
  imagePullPolicy: Always
  livenessProbe:
  httpGet: