Upgrade kyverno pack to 1.18.1

packs/kyverno-1.18.1/README.md

@@ -0,0 +1,45 @@
+# Kyverno
+
+Kyverno (Greek for “govern”) is a policy engine designed specifically for Kubernetes. Some of its many features include:
+
+    policies as Kubernetes resources (no new language to learn!)
+    validate, mutate, generate, or cleanup (remove) any resource
+    verify container images for software supply chain security
+    inspect image metadata
+    match resources using label selectors and wildcards
+    validate and mutate using overlays (like Kustomize!)
+    synchronize configurations across Namespaces
+    block non-conformant resources using admission controls, or report policy violations
+    self-service reports (no proprietary audit log!)
+    self-service policy exceptions
+    test policies and validate resources using the Kyverno CLI, in your CI/CD pipeline, before applying to your cluster
+    manage policies as code using familiar tools like git and kustomize
+
+Kyverno allows cluster administrators to manage environment specific configurations independently of workload configurations and enforce configuration best practices for their clusters. Kyverno can be used to scan existing workloads for best practices, or can be used to enforce best practices by blocking or mutating API requests.our applications, APIs, or other resources while also offloading network ingress and middleware execution to ngrok's platform.
+
+## Prerequisites
+
+- kubernetes version >= 1.29.0
+
+## Usage
+To use the Kyverno pack, first create a new [add-on cluster profile](https://docs.spectrocloud.com/profiles/cluster-profiles/create-cluster-profiles/create-addon-profile/), search for the **kyverno** Kyverno  pack:
+
+
+A Kyverno policy is a collection of rules. Each rule consists of a [`match`](https://kyverno.io/docs/writing-policies/match-exclude/) declaration, an optional [`exclude`](https://kyverno.io/docs/writing-policies/match-exclude/) declaration, and one of a [`validate`](https://kyverno.io/docs/writing-policies/validate/), [`mutate`](https://kyverno.io/docs/writing-policies/mutate/), [`generate`](https://kyverno.io/docs/writing-policies/generate/), or [`verifyImages`](https://kyverno.io/docs/writing-policies/verify-images) declaration. Each rule can contain only a single `validate`, `mutate`, `generate`, or `verifyImages` child declaration.
+
+<img src="https://kyverno.io/images/Kyverno-Policy-Structure.png" alt="Kyverno Policy" width="65%"/>
+<br/>
+<br/>
+
+Policies can be defined as cluster-wide resources (using the kind `ClusterPolicy`) or namespaced resources (using the kind `Policy`). As expected, namespaced policies will only apply to resources within the namespace in which they are defined while cluster-wide policies are applied to matching resources across all namespaces. Otherwise, there is no difference between the two types.
+
+Additional policy types include [Policy Exceptions](https://kyverno.io/docs/writing-policies/exceptions/) and [Cleanup Policies](https://kyverno.io/docs/writing-policies/cleanup/) which are separate resources and described further in the documentation.
+
+Learn more about [Applying Policies](https://kyverno.io/docs/applying-policies/) and [Writing Policies](https://kyverno.io/docs/writing-policies/) in the upcoming chapters.
+
+
+## References
+
+- [Kyverno Docs](https://kyverno.io/docs/introduction/)
+- [Kyverno](https://kyverno.io/)
+- [Kyverno Github](https://github.com/kyverno/kyverno/)

packs/kyverno-1.18.1/charts/kyverno/Chart.lock

@@ -0,0 +1,18 @@
+dependencies:
+- name: grafana
+  repository: ""
+  version: 3.8.1
+- name: crds
+  repository: ""
+  version: 3.8.1
+- name: kyverno-api
+  repository: https://kyverno.github.io/api
+  version: 0.0.1-alpha.2
+- name: openreports
+  repository: https://openreports.github.io/reports-api
+  version: 0.1.0
+- name: reports-server
+  repository: https://kyverno.github.io/reports-server/
+  version: 0.1.6
+digest: sha256:f09c63f775fb3728813f5301ba3469e931623ab6f924e54066e8d665d2d68e5a
+generated: "2026-05-18T17:16:15.487764+08:00"

packs/kyverno-1.18.1/charts/kyverno/Chart.yaml

@@ -0,0 +1,59 @@
+annotations:
+  artifacthub.io/changes: |
+    - kind: fixed
+      description: Ensure spec.template.metadata isn't null
+    - kind: removed
+      description: Remove the `delete` permission for policyexceptions in the admission controller
+    - kind: changed
+      description: Enable the flag `--generateValidatingAdmissionPolicy` by default in the admission controller.
+    - kind: changed
+      description: Enable the flag `--validatingAdmissionPolicyReports` by default in the reports controller.
+  artifacthub.io/links: |
+    - name: Documentation
+      url: https://kyverno.io/docs
+  artifacthub.io/operator: "false"
+  artifacthub.io/prerelease: "false"
+apiVersion: v2
+appVersion: v1.18.1
+dependencies:
+- condition: grafana.enabled
+  name: grafana
+  repository: ""
+  version: 3.8.1
+- condition: crds.install
+  name: crds
+  repository: ""
+  version: 3.8.1
+- condition: crds.install
+  name: kyverno-api
+  repository: https://kyverno.github.io/api
+  version: 0.0.1-alpha.2
+- condition: openreports.installCrds
+  name: openreports
+  repository: https://openreports.github.io/reports-api
+  version: 0.1.0
+- condition: reportsServer.enabled
+  name: reports-server
+  repository: https://kyverno.github.io/reports-server/
+  version: 0.1.6
+description: Kubernetes Native Policy Management
+home: https://kyverno.io/
+icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
+keywords:
+- kubernetes
+- policy agent
+- policy
+- validating webhook
+- admission controller
+- mutation
+- mutate
+- validate
+- generate
+- supply chain
+- security
+kubeVersion: '>=1.25.0-0'
+name: kyverno
+sources:
+- https://github.com/kyverno/kyverno
+type: application
+version: 3.8.1

packs/kyverno-1.18.1/charts/kyverno/charts/crds/Chart.yaml

@@ -0,0 +1,3 @@
+apiVersion: v2
+name: crds
+version: 3.8.1

packs/kyverno-1.18.1/charts/kyverno/charts/crds/templates/_helpers.tpl

@@ -0,0 +1,16 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{- define "kyverno.crds.labels" -}}
+{{- template "kyverno.labels.merge" (list
+  (include "kyverno.labels.common" .)
+  (include "kyverno.crds.matchLabels" .)
+  (toYaml .Values.customLabels)
+) -}}
+{{- end -}}
+
+{{- define "kyverno.crds.matchLabels" -}}
+{{- template "kyverno.labels.merge" (list
+  (include "kyverno.matchLabels.common" .)
+  (include "kyverno.labels.component" "crds")
+) -}}
+{{- end -}}