chore(deps): update policy-reporter docker tag to v3.10.0 - #178
Open
renovate[bot] wants to merge 1 commit into
Open
chore(deps): update policy-reporter docker tag to v3.10.0#178renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
Helm Template Diff —
|
Owner
Renovate Review:
|
| Check | Result |
|---|---|
| Inputs | Complete — PR body has a real ### Release Notes section (full "What's Changed" list); one matching diff comment present (03-apps-apps-kyverno-policy-reporter). |
| Description vs. diff | Consistent — table says policy-reporter 3.9.1→3.10.0; the only file changed is 03_apps/apps/kyverno/policy-reporter-app.yaml, a single-line helm.version bump 3.9.1→3.10.0. Scope matches exactly, no other files touched. |
| Rendered diff | Full, no truncation (90 changed lines, well under the 1000-line/60000-char caps) — cosmetic-only: app.kubernetes.io/version/helm.sh/chart label bumps, a checksum/secret annotation change (see Details), and one coupled image bump not called out in Renovate's summary table. |
| Changelog vs. config | No overlap — none of the changed items (custom result-ID generator, httproute timeouts, /tmp volume config, cluster-CRD RBAC fix) touch any key this app actually overrides. |
Details:
- The
policy-reporter-uicontainer image moved2.7.0→2.8.1inside the same render, purely as a side effect of the chart bump — Renovate's table only tracks the top-level chart version (3.9.1→3.10.0), so this second image bump isn't visible anywhere except the rendered diff. - The UI's embedded default config (base64 in a Secret) gained a new
crds.cluster: falsedefault key; this is an app-level UI setting name (not a Kubernetes CRD) and isn't referenced by this repo's overrides. ClusterRole/policy-reporter,Role/policy-reporter-secret-reader,Role/policy-reporter-ui-secret-readerand their Bindings are present in the render, but the diff shows no change to anyrules:/roleRef:/subjects:block — only label/version strings changed. The changelog's "fix(helm): RBAC for cluster crd" (fix(helm): RBAC for cluster crd kyverno/policy-reporter#1577) produced no visible permission change here, so this is not treated as an RBAC finding per the pure-label-bump exclusion.- Live overrides (
policy-reporter-values.yaml,-prod,-test) only setui.enabledandui.ingress.*— none of the changed features intersect them.
Why LOW: Minor version, file scope matches the PR description exactly, and the fully-visible rendered diff shows only cosmetic/label changes plus an unused feature addition — no changelog item touches a live override.
Generated by Claude Code
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.9.1→3.10.0Release Notes
kyverno/policy-reporter (policy-reporter)
v3.10.0Compare Source
Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord
What's Changed
New Contributors
Full Changelog: kyverno/policy-reporter@policy-reporter-chart-v3.9.1...policy-reporter-3.10.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.