Merge branch 'main' into update_rbac_subprojects

kyverno · Aug 5, 2024 · 8ccc680 · 8ccc680
2 parents b1d6be5 + 17719ab
commit 8ccc680
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 5 deletions.
diff --git a/content/en/docs/writing-policies/verify-images/sigstore/_index.md b/content/en/docs/writing-policies/verify-images/sigstore/_index.md
@@ -743,14 +743,14 @@ verifyImages:
         rekor:
           ignoreTlog: true
           url: https://rekor.sigstore.dev
-          pubKey: |-
+          pubkey: |-
           -----BEGIN PUBLIC KEY-----
           MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE8nXRh950IZbRj8Ra/N9sbqOPZrfM
           5/KAQN0/KjHcorm/J5yctVd7iEcnessRQjU917hmKO6JWVGHpDguIyakZA==
           -----END PUBLIC KEY-----
         ctlog:
           ignoreSCT: true
-          pubKey: |-
+          pubkey: |-
           -----BEGIN PUBLIC KEY-----
           MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE8nXRh950IZbRj8Ra/N9sbqOPZrfM
           5/KAQN0/KjHcorm/J5yctVd7iEcnessRQjU917hmKO6JWVGHpDguIyakZA==
@@ -759,7 +759,7 @@ verifyImages:
 
 ## Using custom Rekor public key and CTLogs public key
 
-You can also provide the Rekor public key and ctlog public key instead of Rekor url to verify tlog entry and SCT entry. Use `rekor.pubKey` and `ctlog.pubKey` respectively for this.
+You can also provide the Rekor public key and ctlog public key instead of Rekor url to verify tlog entry and SCT entry. Use `rekor.pubkey` and `ctlog.pubkey` respectively for this.
 
 ```yaml
 verifyImages:
@@ -774,13 +774,13 @@ verifyImages:
           5/KAQN0/KjHcorm/J5yctVd7iEcnessRQjU917hmKO6JWVGHpDguIyakZA==
           -----END PUBLIC KEY-----
         rekor:
-          pubKey: |-
+          pubkey: |-
           -----BEGIN PUBLIC KEY-----
           MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEyQfmL5YwHbn9xrrgG3vgbU0KJxMY
           BibYLJ5L4VSMvGxeMLnBGdM48w5IE//6idUPj3rscigFdHs7GDMH4LLAng==
           -----END PUBLIC KEY-----
         ctlog:
-          pubKey: |-
+          pubkey: |-
           -----BEGIN PUBLIC KEY-----
           MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEE8uGVnyDWPPlB7M5KOHRzxzPHtAy
           FdGxexVrR4YqO1pRViKxmD9oMu4I7K/4sM51nbH65ycB2uRiDfIdRoV/+A==

diff --git a/...icies/best-practices/require-pod-requests-limits/require-pod-requests-limits.md b/...icies/best-practices/require-pod-requests-limits/require-pod-requests-limits.md
@@ -50,4 +50,18 @@ spec:
                 cpu: "?*"
               limits:
                 memory: "?*"
+          initContainers:
+          - resources:
+              requests:
+                memory: "?*"
+                cpu: "?*"
+              limits:
+                memory: "?*"
+          ephemeralContainers:
+          - resources:
+              requests:
+                memory: "?*"
+                cpu: "?*"
+              limits:
+                memory: "?*"
 ```
diff --git a/static/images/kyverno-architecture.png b/static/images/kyverno-architecture.png
diff --git a/static/images/kyverno_website_graphics.pptx b/static/images/kyverno_website_graphics.pptx