diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cda4438..ef140de 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,6 +18,6 @@ jobs:
       registry-server: ghcr.io
       registry-username: ${{ github.actor }}
       image: ${{ github.repository }}
-      version: 1.10.3+kadras.1
+      version: 1.10.4
     secrets:
       pull-request-token: ${{ secrets.GH_ORG_PAT }}
diff --git a/package/config/upstream/install.yaml b/package/config/upstream/install.yaml
index 95badb0..e8c5f8f 100644
--- a/package/config/upstream/install.yaml
+++ b/package/config/upstream/install.yaml
@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -17,7 +17,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -28,7 +28,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -39,7 +39,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -49,7 +49,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -60,7 +60,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 ---
 apiVersion: v1
 kind: ConfigMap
@@ -71,7 +71,7 @@ metadata:
     app.kubernetes.io/component: config
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 data:
   enableDefaultRegistryMutation: "true"
   defaultRegistry: "docker.io"
@@ -199,7 +199,7 @@ metadata:
     app.kubernetes.io/component: config
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 data:
   namespaces: "{\"exclude\":[],\"include\":[]}"
 ---
@@ -212,7 +212,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: admissionreports.kyverno.io
 spec:
   group: kyverno.io
@@ -549,7 +549,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: backgroundscanreports.kyverno.io
 spec:
   group: kyverno.io
@@ -854,7 +854,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: cleanuppolicies.kyverno.io
 spec:
   group: kyverno.io
@@ -1968,7 +1968,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: clusteradmissionreports.kyverno.io
 spec:
   group: kyverno.io
@@ -2306,7 +2306,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: clusterbackgroundscanreports.kyverno.io
 spec:
   group: kyverno.io
@@ -2611,7 +2611,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: clustercleanuppolicies.kyverno.io
 spec:
   group: kyverno.io
@@ -3725,7 +3725,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: clusterpolicies.kyverno.io
 spec:
   group: kyverno.io
@@ -18013,7 +18013,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: policies.kyverno.io
 spec:
   group: kyverno.io
@@ -32304,7 +32304,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: policyexceptions.kyverno.io
 spec:
   group: kyverno.io
@@ -32828,7 +32828,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: updaterequests.kyverno.io
 spec:
   group: kyverno.io
@@ -33233,7 +33233,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: clusterpolicyreports.wgpolicyk8s.io
 spec:
   group: wgpolicyk8s.io
@@ -33600,7 +33600,7 @@ metadata:
     app.kubernetes.io/component: crds
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   name: policyreports.wgpolicyk8s.io
 spec:
   group: wgpolicyk8s.io
@@ -33965,7 +33965,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 aggregationRule:
   clusterRoleSelectors:
     - matchLabels:
@@ -33981,7 +33981,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 rules:
   - apiGroups:
       - admissionregistration.k8s.io
@@ -34077,7 +34077,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 aggregationRule:
   clusterRoleSelectors:
     - matchLabels:
@@ -34093,7 +34093,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 rules:
   - apiGroups:
       - '*'
@@ -34168,7 +34168,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 aggregationRule:
   clusterRoleSelectors:
     - matchLabels:
@@ -34184,7 +34184,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 rules:
   - apiGroups:
       - admissionregistration.k8s.io
@@ -34255,7 +34255,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 rules:
   - apiGroups:
       - kyverno.io
@@ -34275,7 +34275,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 rules:
   - apiGroups:
@@ -34302,7 +34302,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
     rbac.authorization.k8s.io/aggregate-to-view: "true"
 rules:
   - apiGroups:
@@ -34325,7 +34325,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 rules:
   - apiGroups:
@@ -34350,7 +34350,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
     rbac.authorization.k8s.io/aggregate-to-view: "true"
 rules:
   - apiGroups:
@@ -34371,7 +34371,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 rules:
   - apiGroups:
@@ -34398,7 +34398,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
     rbac.authorization.k8s.io/aggregate-to-view: "true"
 rules:
   - apiGroups:
@@ -34421,7 +34421,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 rules:
   - apiGroups:
@@ -34445,7 +34445,7 @@ metadata:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
     rbac.authorization.k8s.io/aggregate-to-view: "true"
 rules:
   - apiGroups:
@@ -34465,7 +34465,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 aggregationRule:
   clusterRoleSelectors:
     - matchLabels:
@@ -34481,7 +34481,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 rules:
   - apiGroups:
       - '*'
@@ -34540,7 +34540,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -34558,7 +34558,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -34576,7 +34576,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -34593,7 +34593,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -34611,7 +34611,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -34630,7 +34630,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 rules:
   - apiGroups:
       - ''
@@ -34682,7 +34682,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   namespace: kyverno
 rules:
   - apiGroups:
@@ -34715,7 +34715,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   namespace: kyverno
 rules:
   - apiGroups:
@@ -34759,7 +34759,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   namespace: kyverno
 rules:
   - apiGroups:
@@ -34793,7 +34793,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
@@ -34811,7 +34811,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   namespace: kyverno
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -34830,7 +34830,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   namespace: kyverno
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -34849,7 +34849,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
   namespace: kyverno
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -34869,7 +34869,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   ports:
   - port: 443
@@ -34891,7 +34891,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   ports:
   - port: 8000
@@ -34913,7 +34913,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   ports:
   - port: 8000
@@ -34935,7 +34935,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   ports:
   - port: 443
@@ -34957,7 +34957,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   ports:
   - port: 8000
@@ -34979,7 +34979,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   ports:
   - port: 8000
@@ -35001,7 +35001,7 @@ metadata:
     app.kubernetes.io/component: admission-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   replicas: 
   strategy:
@@ -35020,7 +35020,7 @@ spec:
         app.kubernetes.io/component: admission-controller
         app.kubernetes.io/instance: kyverno
         app.kubernetes.io/part-of: kyverno
-        app.kubernetes.io/version: v1.10.3
+        app.kubernetes.io/version: v1.10.4
     spec:
       dnsPolicy: ClusterFirst
       affinity:
@@ -35038,7 +35038,7 @@ spec:
       serviceAccountName: kyverno-admission-controller
       initContainers:
         - name: kyverno-pre
-          image: "ghcr.io/kyverno/kyvernopre:v1.10.3"
+          image: "ghcr.io/kyverno/kyvernopre:v1.10.4"
           imagePullPolicy: IfNotPresent
           args:
             - --loggingFormat=text
@@ -35079,7 +35079,7 @@ spec:
             value: kyverno-svc
       containers:
         - name: kyverno
-          image: "ghcr.io/kyverno/kyverno:v1.10.3"
+          image: "ghcr.io/kyverno/kyverno:v1.10.4"
           imagePullPolicy: IfNotPresent
           args:
             - --backgroundServiceAccountName=system:serviceaccount:kyverno:kyverno-background-controller
@@ -35187,7 +35187,7 @@ metadata:
     app.kubernetes.io/component: background-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   replicas: 
   strategy:
@@ -35206,7 +35206,7 @@ spec:
         app.kubernetes.io/component: background-controller
         app.kubernetes.io/instance: kyverno
         app.kubernetes.io/part-of: kyverno
-        app.kubernetes.io/version: v1.10.3
+        app.kubernetes.io/version: v1.10.4
     spec:
       dnsPolicy: ClusterFirst
       affinity:
@@ -35224,7 +35224,7 @@ spec:
       serviceAccountName: kyverno-background-controller
       containers:
         - name: controller
-          image: "ghcr.io/kyverno/background-controller:v1.10.3"
+          image: "ghcr.io/kyverno/background-controller:v1.10.4"
           ports:
           - containerPort: 9443
             name: https
@@ -35280,7 +35280,7 @@ metadata:
     app.kubernetes.io/component: cleanup-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   replicas: 
   strategy:
@@ -35299,7 +35299,7 @@ spec:
         app.kubernetes.io/component: cleanup-controller
         app.kubernetes.io/instance: kyverno
         app.kubernetes.io/part-of: kyverno
-        app.kubernetes.io/version: v1.10.3
+        app.kubernetes.io/version: v1.10.4
     spec:
       dnsPolicy: ClusterFirst
       affinity:
@@ -35317,7 +35317,7 @@ spec:
       serviceAccountName: kyverno-cleanup-controller
       containers:
         - name: controller
-          image: "ghcr.io/kyverno/cleanup-controller:v1.10.3"
+          image: "ghcr.io/kyverno/cleanup-controller:v1.10.4"
           ports:
           - containerPort: 9443
             name: https
@@ -35405,7 +35405,7 @@ metadata:
     app.kubernetes.io/component: reports-controller
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   replicas: 
   strategy:
@@ -35424,7 +35424,7 @@ spec:
         app.kubernetes.io/component: reports-controller
         app.kubernetes.io/instance: kyverno
         app.kubernetes.io/part-of: kyverno
-        app.kubernetes.io/version: v1.10.3
+        app.kubernetes.io/version: v1.10.4
     spec:
       dnsPolicy: ClusterFirst
       affinity:
@@ -35442,7 +35442,7 @@ spec:
       serviceAccountName: kyverno-reports-controller
       containers:
         - name: controller
-          image: "ghcr.io/kyverno/reports-controller:v1.10.3"
+          image: "ghcr.io/kyverno/reports-controller:v1.10.4"
           ports:
           - containerPort: 9443
             name: https
@@ -35515,7 +35515,7 @@ metadata:
     app.kubernetes.io/component: cleanup
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   schedule: "*/10 * * * *"
   concurrencyPolicy: Forbid
@@ -35563,7 +35563,7 @@ metadata:
     app.kubernetes.io/component: cleanup
     app.kubernetes.io/instance: kyverno
     app.kubernetes.io/part-of: kyverno
-    app.kubernetes.io/version: v1.10.3
+    app.kubernetes.io/version: v1.10.4
 spec:
   schedule: "*/10 * * * *"
   concurrencyPolicy: Forbid
diff --git a/package/vendir.lock.yml b/package/vendir.lock.yml
index a3d7901..0cf87e1 100644
--- a/package/vendir.lock.yml
+++ b/package/vendir.lock.yml
@@ -2,8 +2,8 @@ apiVersion: vendir.k14s.io/v1alpha1
 directories:
 - contents:
   - githubRelease:
-      tag: v1.10.3
-      url: https://api.github.com/repos/kyverno/kyverno/releases/116017932
+      tag: v1.10.4
+      url: https://api.github.com/repos/kyverno/kyverno/releases/127541329
     path: .
   path: config/upstream
 kind: LockConfig
diff --git a/package/vendir.yml b/package/vendir.yml
index 7c49c19..79e7285 100755
--- a/package/vendir.yml
+++ b/package/vendir.yml
@@ -4,7 +4,7 @@ directories:
   - githubRelease:
       disableAutoChecksumValidation: true
       slug: kyverno/kyverno
-      tag: v1.10.3
+      tag: v1.10.4
     includePaths:
     - install.yaml
     path: .