Highlights for the week ending June 29 2023

General

kyverno-app version v0.14.9 adds two new parameters in the configuration of the policy-reporter. Now the policy-reporter scrapeTimeout and interval are configurable. This allows more collection time in clusters with many policies.
security-bundle version 1.0.1 is the first release intended to be installed by default on Kubernetes 1.25 and later. It disables PSPs in favor of enforced Kyverno PSS restricted policies. New platform releases are shipped with this new version by default. We will inform you in the platform release notes about the change and steps you need to take to upgrade, as it may require removing or modifying Kyverno or Security Bundle apps prior to upgrade More info about the change can be read here.

Note: For the clusters running Kubernetes v1.24 or earlier you should continue running security-bundle with pre-1.0.0 bundle versions.