apiVersion: catalog.confighub.com/v1alpha1
kind: SveltosVersionPatchCandidate
metadata:
  name: kyverno-3-8-1-to-3-8-2
spec:
  description: Move every fleet cluster from Kyverno chart 3.8.1 to patch release 3.8.2.
  chart: kyverno/kyverno
  repositoryURL: https://kyverno.github.io/kyverno/
  from:
    chartVersion: "3.8.1"
    appVersion: v1.18.1
    chartDigest: a33f35b83b6991daf6a1b1cf995becbe369747fcd84411d5089d55a40ee4ae0d
  to:
    chartVersion: "3.8.2"
    appVersion: v1.18.2
    chartDigest: f4fc787cf1d6781eefb9e9b45837edcddcfae984c872888289914e97207cc5de
    artifact: https://kyverno.github.io/kyverno/kyverno-3.8.2.tgz
  advisory:
    reference: operator-supplied
    boundary: This pipeline proves governed delivery of the version bump with digest-bound provenance. It does not scan for vulnerabilities and it does not verify any advisory claim.
  waves:
    - wave: 1
      environment: pilot
      profile: clusterprofile-pilot.yaml
      space: sveltos-kyverno-patch-pilot
    - wave: 2
      environment: staging
      profile: clusterprofile-staging.yaml
      space: sveltos-kyverno-patch-staging
    - wave: 3
      environment: prod
      profile: clusterprofile-prod.yaml
      space: sveltos-kyverno-patch-prod