[realshuting]

Summary

• add targetMatchConditions to MutatingPolicySpec
• document trigger and target evaluation ordering, including variable visibility
• document target subresource routing
• regenerate deepcopy code, CRDs, Helm CRDs, and API reference docs

This is the API portion of kyverno/kyverno#16612. The Kyverno implementation will consume this field after the API dependency is updated.

Validation

• go test ./api/policies.kyverno.io/v1alpha1 ./api/policies.kyverno.io/v1beta1
• verified make codegen is idempotent

[Copilot]

Pull request overview

This PR extends Kyverno’s mutating policy API to support additional, post-resolution filtering of mutation targets via a new targetMatchConditions field, and updates the generated CRDs/Helm templates/docs to describe the evaluation order and target routing behavior.

Changes:

• Add targetMatchConditions to MutatingPolicySpec and regenerate deepcopy code.
• Update CRD schemas (standalone + aggregated) and Helm CRD templates to include the new field and updated descriptions.
• Update generated CRD HTML/reference docs to reflect trigger vs target evaluation ordering and subresource routing (e.g., pods/resize).

Reviewed changes

Copilot reviewed 8 out of 9 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
docs/user/crd/kyverno_cel_policies.v1alpha1.html	Generated CRD docs updated to include targetMatchConditions and revised evaluation/routing text.
docs/user/crd/index.html	Generated consolidated CRD index updated for the new field and revised descriptions across versions.
config/crds/policies.kyverno.io_namespacedmutatingpolicies.yaml	Namespaced MutatingPolicy CRD schema updated with targetMatchConditions and revised descriptions.
config/crds/policies.kyverno.io_mutatingpolicies.yaml	Cluster MutatingPolicy CRD schema updated with targetMatchConditions and revised descriptions.
config/crds.yaml	Aggregated CRDs bundle updated to include the new schema and docstrings.
charts/kyverno-api/templates/crds/policies.kyverno.io_namespacedmutatingpolicies.yaml	Helm-packaged Namespaced MutatingPolicy CRD updated to match new schema/docs.
charts/kyverno-api/templates/crds/policies.kyverno.io_mutatingpolicies.yaml	Helm-packaged MutatingPolicy CRD updated to match new schema/docs.
api/policies.kyverno.io/v1alpha1/zz_generated.deepcopy.go	Regenerated deepcopy logic to copy TargetMatchConditions.
api/policies.kyverno.io/v1alpha1/mutating_policy.go	API type docs updated; new TargetMatchConditions field added with merge/list markers.

Files not reviewed (1)

• api/policies.kyverno.io/v1alpha1/zz_generated.deepcopy.go: Generated file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.