chore: Prepare v3.16.0-beta.0 release

Makefile

@@ -13,7 +13,7 @@ ENABLE_PUBSUB ?= false
 AUDIT_CONNECTION ?= "audit"
 AUDIT_CHANNEL ?= "audit"
 
-VERSION := v3.15.0-beta.0
+VERSION := v3.16.0-beta.0
 
 KIND_VERSION ?= 0.17.0
 # note: k8s version pinned since KIND image availability lags k8s releases

charts/gatekeeper/Chart.yaml

@@ -4,8 +4,8 @@ name: gatekeeper
 icon: https://open-policy-agent.github.io/gatekeeper/website/img/logo.svg
 keywords:
  - open policy agent
-version: 3.15.0-beta.0
+version: 3.16.0-beta.0
 home: https://github.com/open-policy-agent/gatekeeper
 sources:
  - https://github.com/open-policy-agent/gatekeeper.git
-appVersion: v3.15.0-beta.0
+appVersion: v3.16.0-beta.0

charts/gatekeeper/crds/constrainttemplate-customresourcedefinition.yaml

@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
  annotations:
- controller-gen.kubebuilder.io/version: v0.11.3
+ controller-gen.kubebuilder.io/version: v0.10.0
  labels:
  gatekeeper.sh/system: "yes"
  name: constrainttemplates.templates.gatekeeper.sh

charts/gatekeeper/crds/provider-customresourcedefinition.yaml

@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
  annotations:
- controller-gen.kubebuilder.io/version: v0.11.3
+ controller-gen.kubebuilder.io/version: v0.10.0
  labels:
  gatekeeper.sh/system: "yes"
  name: providers.externaldata.gatekeeper.sh

charts/gatekeeper/crds/syncset-customresourcedefinition.yaml

@@ -0,0 +1,52 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.10.0
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: syncsets.syncset.gatekeeper.sh
+spec:
+ group: syncset.gatekeeper.sh
+ names:
+ kind: SyncSet
+ listKind: SyncSetList
+ plural: syncsets
+ singular: syncset
+ preserveUnknownFields: false
+ scope: Cluster
+ versions:
+ - name: v1alpha1
+ schema:
+ openAPIV3Schema:
+ description: SyncSet defines which resources Gatekeeper will cache. The union of all SyncSets plus the syncOnly field of Gatekeeper's Config resource defines the sets of resources that will be synced.
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ properties:
+ name:
+ maxLength: 63
+ type: string
+ type: object
+ spec:
+ properties:
+ gvks:
+ items:
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ type: array
+ type: object
+ type: object
+ served: true
+ storage: true

charts/gatekeeper/templates/gatekeeper-audit-deployment.yaml

@@ -33,7 +33,7 @@ spec:
  {{- toYaml .Values.auditPodAnnotations | trim | nindent 8 }}
  {{- end }}
  labels:
-{{- include "gatekeeper.podLabels" . }}
+{{- include "gatekeeper.podLabels" . | nindent 8 }}
  app: '{{ template "gatekeeper.name" . }}'
  chart: '{{ template "gatekeeper.name" . }}'
  control-plane: audit-controller
@@ -104,6 +104,8 @@ spec:
  fieldPath: metadata.namespace
  - name: CONTAINER_NAME
  value: manager
+ - name: OTEL_RESOURCE_ATTRIBUTES
+ value: k8s.pod.name=$(POD_NAME),k8s.namespace.name=$(NAMESPACE),k8s.container.name=$(CONTAINER_NAME)
  imagePullPolicy: '{{ .Values.image.pullPolicy }}'
  livenessProbe:
  httpGet:

charts/gatekeeper/templates/gatekeeper-controller-manager-deployment.yaml

@@ -32,7 +32,7 @@ spec:
  {{- toYaml .Values.podAnnotations | trim | nindent 8 }}
  {{- end }}
  labels:
-{{- include "gatekeeper.podLabels" . }}
+{{- include "gatekeeper.podLabels" . | nindent 8 }}
  app: '{{ template "gatekeeper.name" . }}'
  chart: '{{ template "gatekeeper.name" . }}'
  control-plane: controller-manager
@@ -117,6 +117,8 @@ spec:
  fieldPath: metadata.namespace
  - name: CONTAINER_NAME
  value: manager
+ - name: OTEL_RESOURCE_ATTRIBUTES
+ value: k8s.pod.name=$(POD_NAME),k8s.namespace.name=$(NAMESPACE),k8s.container.name=$(CONTAINER_NAME)
  imagePullPolicy: '{{ .Values.image.pullPolicy }}'
  livenessProbe:
  httpGet:

charts/gatekeeper/values.yaml

@@ -44,20 +44,20 @@ externaldataProviderResponseCacheTTL: 3m
 image:
  repository: openpolicyagent/gatekeeper
  crdRepository: openpolicyagent/gatekeeper-crds
- release: v3.15.0-beta.0
+ release: v3.16.0-beta.0
  pullPolicy: IfNotPresent
  pullSecrets: []
 preInstall:
  crdRepository:
  image:
  repository: null
- tag: v3.15.0-beta.0
+ tag: v3.16.0-beta.0
 postUpgrade:
  labelNamespace:
  enabled: false
  image:
  repository: openpolicyagent/gatekeeper-crds
- tag: v3.15.0-beta.0
+ tag: v3.16.0-beta.0
  pullPolicy: IfNotPresent
  pullSecrets: []
  extraNamespaces: []
@@ -88,7 +88,7 @@ postInstall:
  extraRules: []
  image:
  repository: openpolicyagent/gatekeeper-crds
- tag: v3.15.0-beta.0
+ tag: v3.16.0-beta.0
  pullPolicy: IfNotPresent
  pullSecrets: []
  extraNamespaces: []
@@ -129,7 +129,7 @@ preUninstall:
  enabled: false
  image:
  repository: openpolicyagent/gatekeeper-crds
- tag: v3.15.0-beta.0
+ tag: v3.16.0-beta.0
  pullPolicy: IfNotPresent
  pullSecrets: []
  priorityClassName: ""
@@ -264,7 +264,7 @@ pdb:
 service: {}
 disabledBuiltins: ["{http.send}"]
 psp:
- enabled: true
+ enabled: false
 upgradeCRDs:
  enabled: true
  extraRules: []

cmd/build/helmify/static/Chart.yaml

@@ -4,8 +4,8 @@ name: gatekeeper
 icon: https://open-policy-agent.github.io/gatekeeper/website/img/logo.svg
 keywords:
  - open policy agent
-version: 3.15.0-beta.0
+version: 3.16.0-beta.0
 home: https://github.com/open-policy-agent/gatekeeper
 sources:
  - https://github.com/open-policy-agent/gatekeeper.git
-appVersion: v3.15.0-beta.0
+appVersion: v3.16.0-beta.0