fix(helm): update chart kyverno to 3.1.4

[renovate]

This PR contains the following updates:

Package	Update	Change
kyverno (source)	patch	3.1.3 -> 3.1.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

--- kubernetes/apps/kyverno/kyverno/app Kustomization: flux-system/kyverno HelmRelease: kyverno/kyverno

+++ kubernetes/apps/kyverno/kyverno/app Kustomization: flux-system/kyverno HelmRelease: kyverno/kyverno

@@ -13,13 +13,13 @@

     spec:
       chart: kyverno
       sourceRef:
         kind: HelmRepository
         name: kyverno
         namespace: flux-system
-      version: 3.1.3
+      version: 3.1.4
   install:
     crds: CreateReplace
     remediation:
       retries: 3
   interval: 30m
   uninstall:

[github-actions]

--- HelmRelease: kyverno/kyverno Deployment: kyverno/kyverno-admission-controller

+++ HelmRelease: kyverno/kyverno Deployment: kyverno/kyverno-admission-controller

@@ -42,13 +42,13 @@

                   - admission-controller
               topologyKey: kubernetes.io/hostname
             weight: 1
       serviceAccountName: kyverno-admission-controller
       initContainers:
       - name: kyverno-pre
-        image: ghcr.io/kyverno/kyvernopre:v1.11.3
+        image: ghcr.io/kyverno/kyvernopre:v1.11.4
         imagePullPolicy: IfNotPresent
         args:
         - --loggingFormat=text
         - --v=2
         resources:
           limits:
@@ -85,13 +85,13 @@

         - name: KYVERNO_DEPLOYMENT
           value: kyverno-admission-controller
         - name: KYVERNO_SVC
           value: kyverno-svc
       containers:
       - name: kyverno
-        image: ghcr.io/kyverno/kyverno:v1.11.3
+        image: ghcr.io/kyverno/kyverno:v1.11.4
         imagePullPolicy: IfNotPresent
         args:
         - --caSecretName=kyverno-svc.kyverno.svc.kyverno-tls-ca
         - --tlsSecretName=kyverno-svc.kyverno.svc.kyverno-tls-pair
         - --backgroundServiceAccountName=system:serviceaccount:kyverno:kyverno-background-controller
         - --servicePort=443
--- HelmRelease: kyverno/kyverno Deployment: kyverno/kyverno-background-controller

+++ HelmRelease: kyverno/kyverno Deployment: kyverno/kyverno-background-controller

@@ -42,13 +42,13 @@

                   - background-controller
               topologyKey: kubernetes.io/hostname
             weight: 1
       serviceAccountName: kyverno-background-controller
       containers:
       - name: controller
-        image: ghcr.io/kyverno/background-controller:v1.11.3
+        image: ghcr.io/kyverno/background-controller:v1.11.4
         imagePullPolicy: IfNotPresent
         ports:
         - containerPort: 9443
           name: https
           protocol: TCP
         - containerPort: 8000
--- HelmRelease: kyverno/kyverno Deployment: kyverno/kyverno-cleanup-controller

+++ HelmRelease: kyverno/kyverno Deployment: kyverno/kyverno-cleanup-controller

@@ -42,13 +42,13 @@

                   - cleanup-controller
               topologyKey: kubernetes.io/hostname
             weight: 1
       serviceAccountName: kyverno-cleanup-controller
       containers:
       - name: controller
-        image: ghcr.io/kyverno/cleanup-controller:v1.11.3
+        image: ghcr.io/kyverno/cleanup-controller:v1.11.4
         imagePullPolicy: IfNotPresent
         ports:
         - containerPort: 9443
           name: https
           protocol: TCP
         - containerPort: 8000
--- HelmRelease: kyverno/kyverno Deployment: kyverno/kyverno-reports-controller

+++ HelmRelease: kyverno/kyverno Deployment: kyverno/kyverno-reports-controller

@@ -42,13 +42,13 @@

                   - reports-controller
               topologyKey: kubernetes.io/hostname
             weight: 1
       serviceAccountName: kyverno-reports-controller
       containers:
       - name: controller
-        image: ghcr.io/kyverno/reports-controller:v1.11.3
+        image: ghcr.io/kyverno/reports-controller:v1.11.4
         imagePullPolicy: IfNotPresent
         ports:
         - containerPort: 9443
           name: https
           protocol: TCP
         - containerPort: 8000
--- HelmRelease: kyverno/kyverno CronJob: kyverno/kyverno-cleanup-admission-reports

+++ HelmRelease: kyverno/kyverno CronJob: kyverno/kyverno-cleanup-admission-reports

@@ -19,13 +19,13 @@

       template:
         metadata: null
         spec:
           serviceAccountName: kyverno-cleanup-jobs
           containers:
           - name: cleanup
-            image: bitnami/kubectl:1.26.10
+            image: bitnami/kubectl:1.28.5
             imagePullPolicy: null
             command:
             - /bin/sh
             - -c
             - |
               COUNT=$(kubectl get admissionreports.kyverno.io -A | wc -l)
--- HelmRelease: kyverno/kyverno CronJob: kyverno/kyverno-cleanup-cluster-admission-reports

+++ HelmRelease: kyverno/kyverno CronJob: kyverno/kyverno-cleanup-cluster-admission-reports

@@ -19,13 +19,13 @@

       template:
         metadata: null
         spec:
           serviceAccountName: kyverno-cleanup-jobs
           containers:
           - name: cleanup
-            image: bitnami/kubectl:1.26.4
+            image: bitnami/kubectl:1.28.5
             imagePullPolicy: null
             command:
             - /bin/sh
             - -c
             - |
               COUNT=$(kubectl get clusteradmissionreports.kyverno.io -A | wc -l)
--- HelmRelease: kyverno/kyverno Job: kyverno/kyverno-hook-post-upgrade

+++ HelmRelease: kyverno/kyverno Job: kyverno/kyverno-hook-post-upgrade

@@ -17,13 +17,13 @@

   template:
     spec:
       serviceAccount: kyverno-admission-controller
       restartPolicy: Never
       containers:
       - name: kubectl
-        image: bitnami/kubectl:1.28.4
+        image: bitnami/kubectl:1.28.5
         imagePullPolicy: null
         command:
         - /bin/bash
         - -c
         - "NAMESPACES=$(kubectl get namespaces --no-headers=true | awk '{print $1}')\n\
           \nfor ns in ${NAMESPACES[@]};\ndo\n  COUNT=$(kubectl get policyreports.wgpolicyk8s.io\
--- HelmRelease: kyverno/kyverno Job: kyverno/kyverno-hook-pre-delete

+++ HelmRelease: kyverno/kyverno Job: kyverno/kyverno-hook-pre-delete

@@ -17,13 +17,13 @@

   template:
     spec:
       serviceAccount: kyverno-admission-controller
       restartPolicy: Never
       containers:
       - name: kubectl
-        image: bitnami/kubectl:1.26.4
+        image: bitnami/kubectl:1.28.5
         imagePullPolicy: null
         command:
         - sh
         - -c
         - |-
           kubectl scale -n kyverno deployment -l app.kubernetes.io/part-of=kyverno --replicas=0