Fixed
- Fix queries in “Container images from docker.io” dashboard to use the
image_speclabel instead ofimage.
Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.
image_spec label instead of image.Falco 0.7.0 is released. It means the underlying component version is higher than 0.36.0. The update contains falcoctl tool which helps to administrate Falco configuration and audit the state of the system. From now on Falco images will not be longer shipped with rules inside the image. Instead, they will use an init container to download the rules from an official repository and will check frequently for updates. As a consequence, the amount of rules Falco installs has drastically been lowered, and the previous ruleset has been divided into several categories, Standard, Incubating, and Sandbox. This reduces the noise in general but in case the previous ruleset is required, it is possible to enable this using the command line tool. For more information about the new situation, check Falco’s new rules repository.helm chart for the ciliumNetworkPoliciesnetpols helm chart to be used only for networkPoliciesstartup-api-check job that waits for the webhookendpoints to become availablehelm chart for the ciliumNetworkPoliciesnetpols helm chart to be used only for networkPoliciesstartup-api-check job that waits for the webhookendpoints to become availablekubectl apply command of the crd-install job to use the --force-conflicts flag.kubectl apply command of the crd-install job to use the --force-conflicts flag.