Upgrade kyverno pack to 1.18.2

[svalenciah19]

Upgrade kyverno pack to 1.18.2

[bulwark-sc-ent]

✅ CVE scan completed successfully.

Scan Summary:

• Total images scanned: 6
• Clean images: 0
• Images with CVEs: 6
• Total CVEs found: 131

🔴 Critical CVEs: 1
🟠 High CVEs: 33
🟡 Medium CVEs: 12
🟢 Low CVEs: 85

Images with CVEs:

• reg.kyverno.io/kyverno/background-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
• reg.kyverno.io/kyverno/cleanup-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
• reg.kyverno.io/kyverno/kyverno-cli:v1.18.2: 31 CVEs (Critical: 1, High: 8, Medium: 2, Low: 20)
  Critical CVEs: CVE-2026-45570
• reg.kyverno.io/kyverno/kyverno:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
• reg.kyverno.io/kyverno/kyvernopre:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
• reg.kyverno.io/kyverno/reports-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)

⚠️ Please review the CVE findings above and address critical/high severity issues before merging.

[bulwark-sc-ent]

✅ CVE scan completed successfully.

Scan Summary:

• Total images scanned: 6
• Clean images: 0
• Images with CVEs: 6
• Total CVEs found: 131

🔴 Critical CVEs: 1
🟠 High CVEs: 33
🟡 Medium CVEs: 12
🟢 Low CVEs: 85

Images with CVEs:

• reg.kyverno.io/kyverno/background-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
• reg.kyverno.io/kyverno/cleanup-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
• reg.kyverno.io/kyverno/kyverno-cli:v1.18.2: 31 CVEs (Critical: 1, High: 8, Medium: 2, Low: 20)
  Critical CVEs: CVE-2026-45570
• reg.kyverno.io/kyverno/kyverno:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
• reg.kyverno.io/kyverno/kyvernopre:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)
• reg.kyverno.io/kyverno/reports-controller:v1.18.2: 20 CVEs (Critical: 0, High: 5, Medium: 2, Low: 13)

⚠️ Please review the CVE findings above and address critical/high severity issues before merging.

[vishwanaths]

Pack review — kyverno-1.18.2

Packs Validation: passed (run)
source annotation: community
Pack metadata: name=kyverno version=1.18.2 addonType=system app layer=addon displayName=Kyverno contributor=spectrocloud cloudTypes=["all"]

Compared against packs/kyverno-1.18.1/

Version bump: 1.18.1 -> 1.18.2 (patch).

Summary of differences

• pack.json: version bumped 1.18.1 -> 1.18.2; charts[0] renamed charts/kyverno-3.8.1.tgz -> charts/kyverno-3.8.2.tgz. No other top-level keys changed (name, addonType, layer, displayName, cloudTypes, annotations, constraints unchanged).
• values.yaml: only substantive changes are the six Kyverno image tags bumped v1.18.1 -> v1.18.2 (background-controller, kyvernopre, cleanup-controller, reports-controller, kyverno-cli, kyverno); the remaining ~590 diff lines are indentation and inline-comment reformatting with no default value changes. Registry unchanged (reg.kyverno.io/kyverno/...).
• charts/kyverno/Chart.yaml: chart version and appVersion 3.8.1 / v1.18.1 -> 3.8.2 / v1.18.2; two dependency version fields also bumped 3.8.1 -> 3.8.2.
• charts/kyverno/Chart.lock: dependency version fields (kyverno, crds) 3.8.1 -> 3.8.2; new digest and regenerated timestamp.
• charts/kyverno/charts/crds/Chart.yaml: subchart version 3.8.1 -> 3.8.2.
• charts/kyverno/charts/grafana/Chart.yaml: subchart version 3.8.1 -> 3.8.2.
• Chart tarball: charts/kyverno-3.8.1.tgz (719,178 B) -> charts/kyverno-3.8.2.tgz (719,383 B) (+205 B, +0.03%). Tarball contents not inspected.
• logo.png: unchanged (15,000 B).
• README.md: unchanged.
• Files added: none (other than the new-versioned chart tarball).
• Files removed: none (other than the old-versioned chart tarball).

pack.json diff

@@ -9,11 +9,11 @@
   ],
   "displayName": "Kyverno",
   "charts": [
-    "charts/kyverno-3.8.1.tgz"
+    "charts/kyverno-3.8.2.tgz"
   ],
   "layer": "addon",
   "name": "kyverno",
-  "version": "1.18.1",
+  "version": "1.18.2",
   "constraints": {
     "dependencies": [
       {

values.yaml diff (image tags only — full diff dominated by cosmetic whitespace)

@@ -6,8 +6,8 @@ pack:
     images:
-      - image: reg.kyverno.io/kyverno/background-controller:v1.18.1
-      - image: reg.kyverno.io/kyverno/kyvernopre:v1.18.1
-      - image: reg.kyverno.io/kyverno/cleanup-controller:v1.18.1
-      - image: reg.kyverno.io/kyverno/reports-controller:v1.18.1
-      - image: reg.kyverno.io/kyverno/kyverno-cli:v1.18.1
-      - image: reg.kyverno.io/kyverno/kyverno:v1.18.1
+      - image: reg.kyverno.io/kyverno/background-controller:v1.18.2
+      - image: reg.kyverno.io/kyverno/kyvernopre:v1.18.2
+      - image: reg.kyverno.io/kyverno/cleanup-controller:v1.18.2
+      - image: reg.kyverno.io/kyverno/reports-controller:v1.18.2
+      - image: reg.kyverno.io/kyverno/kyverno-cli:v1.18.2
+      - image: reg.kyverno.io/kyverno/kyverno:v1.18.2

diff truncated — the remaining ~590 lines are pure indentation/inline-comment reformatting; see files tab to verify. git diff --ignore-all-space reduces the substantive change set to the six image tags above.

Chart.yaml diff (kyverno subchart)

 apiVersion: v2
-appVersion: v1.18.1
+appVersion: v1.18.2
 dependencies:
 - condition: crds.install
   name: crds
   repository: ""
-  version: 3.8.1
+  version: 3.8.2
 - condition: crds.install
   name: grafana
   repository: ""
-  version: 3.8.1
+  version: 3.8.2
 type: application
-version: 3.8.1
+version: 3.8.2

Blockers

• None.

Nits / observations

• values.yaml carries a large indentation reformat on top of the intended tag bump (~590 non-semantic lines). Consider whether landing the reformat in a separate commit would make future upgrades easier to review.
• The version bump modifies chart-level Chart.lock/Chart.yaml metadata inside the exploded chart alongside the packaged charts/kyverno-3.8.2.tgz; if the tarball is what actually installs, keeping the on-disk chart tree and the tarball in lockstep is worth a sanity check downstream.

Upcoming CI check (from #308) — this PR would fail

The new validate_chart_values_structure check landing in #308 flags one unknown path under charts.kyverno:

ERROR: path 'templating' present in pack values.yaml but not in chart's values.yaml

values.yaml has a top-level templating: key inside charts.kyverno that does not exist in the bundled charts/kyverno-3.8.2.tgz chart's own values.yaml. Once #308 merges, Packs Validation on this branch will fail until either the key is renamed to the correct chart-schema path or removed if it's dead config.

Review generated by the pack-reviewer Claude Code subagent.