agent-platform release v0.4.1
Fixed
- Extended restricted-PSS
securityContextdefaults to the bundled valkey metrics exporter sidecar (valkey.valkey.metrics.exporter.securityContext). 0.4.0 hardened the main valkey container and its init container, but theredis_exportersidecar (containers[1], port 9121) lives under a separate values key and was still rejected by Kyverno’sdisallow-privilege-escalationpolicy.