agent-platform release v0.4.1

Fixed

  • Extended restricted-PSS securityContext defaults to the bundled valkey metrics exporter sidecar (valkey.valkey.metrics.exporter.securityContext). 0.4.0 hardened the main valkey container and its init container, but the redis_exporter sidecar (containers[1], port 9121) lives under a separate values key and was still rejected by Kyverno’s disallow-privilege-escalation policy.