Update charts with latest changes

Author: circleci-wiz

wiz-admission-controller/Chart.yaml

@@ -5,7 +5,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 3.12.0-preview.5
+version: 3.12.0-preview.6
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

wiz-admission-controller/templates/opawebhook.yaml

@@ -51,6 +51,9 @@ webhooks:
   {{- with .Values.opaWebhook.rules }}
   rules:
     {{- toYaml . | nindent 4 }}
+    {{- with $.Values.opaWebhook.additionalRules }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
   {{- end }}
   {{- with .Values.opaWebhook.namespaceSelector }}
   namespaceSelector:
@@ -92,6 +95,9 @@ webhooks:
   {{- with .Values.imageIntegrityWebhook.rules }}
   rules:
     {{- toYaml . | nindent 4 }}
+    {{- with $.Values.imageIntegrityWebhook.additionalRules }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
   {{- end }}
   {{- with .Values.imageIntegrityWebhook.namespaceSelector }}
   namespaceSelector:
@@ -133,6 +139,9 @@ webhooks:
   {{- with .Values.kubernetesAuditLogsWebhook.rules }}
   rules:
     {{- toYaml . | nindent 4 }}
+    {{- with $.Values.kubernetesAuditLogsWebhook.additionalRules }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
   {{- end }}
   {{- with .Values.kubernetesAuditLogsWebhook.namespaceSelector }}
   namespaceSelector:
@@ -174,6 +183,9 @@ webhooks:
   {{- with .Values.debugWebhook.rules }}
   rules:
     {{- toYaml . | nindent 4 }}
+    {{- with $.Values.debugWebhook.additionalRules }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
   {{- end }}
   {{- with .Values.debugWebhook.namespaceSelector }}
   namespaceSelector:

wiz-admission-controller/values.yaml

@@ -165,6 +165,9 @@ opaWebhook:
       - "replicasets"
       - "statefulsets"
       - "daemonsets"
+  # Additional rules to be appended to the default webhook rules.
+  # This allows extending the webhook scope without modifying the default rules.
+  additionalRules: []
   namespaceSelector:  # https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-namespaceselector
     matchExpressions:
     - key: kubernetes.io/metadata.name # Using "kubernetes.io/metadata.name" key to exclude specific namespaces (https://github.com/kubernetes/enhancements/blob/master/keps/sig-api-machinery/2161-apiserver-default-labels/README.md#proposal)
@@ -214,6 +217,9 @@ imageIntegrityWebhook:
       - "replicasets"
       - "statefulsets"
       - "daemonsets"
+  # Additional rules to be appended to the default webhook rules.
+  # This allows extending the webhook scope without modifying the default rules.
+  additionalRules: []
   namespaceSelector:  # https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-namespaceselector
     matchExpressions:
     - key: kubernetes.io/metadata.name # Using "kubernetes.io/metadata.name" key to exclude specific namespaces (https://github.com/kubernetes/enhancements/blob/master/keps/sig-api-machinery/2161-apiserver-default-labels/README.md#proposal)
@@ -297,7 +303,10 @@ kubernetesAuditLogsWebhook:
         - "*"
       resources:
         - "events"
-  namespaceSelector:  # https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-namespaceselector
+  # Additional rules to be appended to the default webhook rules.
+  # This allows extending the webhook scope without modifying the default rules.
+  additionalRules: []
+  namespaceSelector:  # https://kubernetes.io/docs/reference/access-authn-z/extensible-admission-controllers/#matching-requests-namespaceselector
     matchExpressions:
     - key: kubernetes.io/metadata.name # Using "kubernetes.io/metadata.name" key to exclude specific namespaces (https://github.com/kubernetes/enhancements/blob/master/keps/sig-api-machinery/2161-apiserver-default-labels/README.md#proposal)
       operator: NotIn
@@ -463,6 +472,9 @@ debugWebhook:
       - "replicasets"
       - "statefulsets"
       - "daemonsets"
+  # Additional rules to be appended to the default webhook rules.
+  # This allows extending the webhook scope without modifying the default rules.
+  additionalRules: []
   namespaceSelector:  # https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-namespaceselector
     matchExpressions:
     - key: kubernetes.io/metadata.name # Using "kubernetes.io/metadata.name" key to exclude specific namespaces (https://github.com/kubernetes/enhancements/blob/master/keps/sig-api-machinery/2161-apiserver-default-labels/README.md#proposal)

wiz-kubernetes-integration/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: wiz-kubernetes-integration
 description: A Helm chart for Kubernetes
 type: application
-version: 0.2.130
+version: 0.2.131
 appVersion: ""
 #    Dependencies for wiz-kubernetes connector and wiz-admission-controller and wiz-sensor
 dependencies: