Skip to content

Update Helm release gatekeeper to v3.22.0#139

Merged
gillouche merged 1 commit intomainfrom
renovate/gatekeeper-3.x
Mar 11, 2026
Merged

Update Helm release gatekeeper to v3.22.0#139
gillouche merged 1 commit intomainfrom
renovate/gatekeeper-3.x

Conversation

@gillouche
Copy link
Owner

@gillouche gillouche commented Mar 10, 2026

This PR contains the following updates:

Package Update Change
gatekeeper minor 3.21.1 → 3.22.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

open-policy-agent/gatekeeper (gatekeeper)

v3.22.0

Compare Source

🚀 Notable Changes

  • ✅ sync-vap-enforcement-scope now enabled by default: The flag for syncing ValidatingAdmissionPolicy enforcement scope is now true by default, ensuring VAP resources reflect constraint enforcement actions out of the box (#​4332).
  • 🏷️ Namespace support for CEL and Rego engines: CEL expressions can now access namespaceObject and Rego policies can access input.namespace for namespace-scoped policy decisions during both admission and audit (#​4285)
  • ⚡ gator bench — policy performance benchmarking: New CLI command to benchmark Rego and CEL engines with latency percentiles, throughput metrics, memory profiling, concurrent load testing, and baseline comparison for CI/CD regression detection (#​4287)
  • 📋 gator policy — brew-inspired policy management: New CLI for discovering, installing, upgrading, and uninstalling policies from the gatekeeper-library with support for bundles (e.g., pod-security-baseline), enforcement overrides, and dry-run previews (#​4331)
  • 🔇 Disable audit sidecar support: Users who have their own log monitoring (e.g., OTel collector) can now disable the forced fake-reader sidecar when audit file-based logging is enabled (#​4280)
  • 🌐 Out-of-cluster / remote cluster support: New --enable-remote-cluster flag allows Gatekeeper to run outside the target cluster (e.g., nested/hosted control planes), fixing a crash when the Gatekeeper pod doesn't exist in the managed cluster (#​4368)
  • ⏱️ External data provider timeout enforcement: Mutation-path requests to external data providers now enforce the provider's configured timeout (default 5s), preventing unbounded requests that could outlive the webhook timeout and cause resource exhaustion (#​4351)

Features

Bug Fixes

Documentation

Continuous Integration

Chores

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@gillouche gillouche merged commit 80ccc64 into main Mar 11, 2026
1 check passed
@gillouche gillouche deleted the renovate/gatekeeper-3.x branch March 11, 2026 07:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@gillouche @renovate-bot