Jim Bugwadia

Allow cloning multiple resources from a namespace

11

Currently we support cloning specific resources from a namespace. Would be good to have a way to copy / clone multiple resources from a namespace in a single rule. This...

SLSA Level 3 compliance for Kyverno

6

**Is your feature request related to a problem? Please describe.** SLSA Level 3 compliance for the Kyverno build process **Describe the solution you'd like** Plan and execute steps to make...

[Feature] switch wildcard / glob implementations

3

### Problem Statement Kyverno currently uses this wildcard library for basic glob support: https://github.com/kyverno/go-wildcard ### Solution Description Consider using a full-featured and well supported globbing library like: https://github.com/gobwas/glob ### Alternatives...

Add request type to match and exclude

20

**Is your feature request related to a problem? Please describe.** To filter request types, currently requires a precondition. This works, but is a bit verbose. **Describe the solution you'd like**...

[Feature] Improve CLI output for `kyverno apply...`

9

### Problem Statement The `kyverno test` command has its output nicely formatted: Whereas the `kyverno apply` command shows its output like this: ### Solution Description Add color and formatting to...

[Feature] YAML signature verification

4

### Problem Statement See: https://github.com/kyverno/KDP/blob/main/proposals/yaml_signing_and_verification.md ### Solution Description See: https://github.com/kyverno/KDP/blob/main/proposals/yaml_signing_and_verification.md Here are the planned tasks to complete the feature: - [ ] Implement `validate.manifest` rule for webhook - [ ]...

Remove deprecated CRD types and apiextensions.JSON

1

### Problem Statement The `apiextensions.JSON` type allows any JSON object to be used in a CRD type. We have used this to allow conversions from deprecated formats, to new formats,...

Custom informer cache to reduce memory usage

5

For performance, and to avoid throttling, its great to use client-go informers. However, the default implementation ends up caching all instances impacting memory usage. Would be great to investigate (lazily)...

Show violations as warnings

6

Kubernetes 1.19 allows returning warnings in API responses: https://kubernetes.io/blog/2020/09/03/warnings/?s=03 Perhaps we can use this to report policy violations?

kube-netc restarts several times

6

from a test system: ``` ubuntu@ip-10-10-129-78:~$ kubectl get pods -A | grep kube-netc default kube-netc-5hrkd 1/1 Running 25 3d7h ubuntu@ip-10-10-129-78:~$ ```` ```` ubuntu@ip-10-10-129-78:~$ kubectl describe pod kube-netc-5hrkd Name: kube-netc-5hrkd Namespace:...