Security

• Jun 9, 2026 Security falco-app v0.12.1

  Changed

  • Bumped DaemonSet updateStrategy.rollingUpdate.maxUnavailable to 10% so chart upgrades on larger management clusters can finish within the Flux HelmRelease timeout.
• Jun 9, 2026 Security teleport-kube-agent-app v0.11.1

  Changed

  • Values: Tolerate node.cloudprovider.kubernetes.io/uninitialized.
  • Values: Ignore taints regardless of value.
  • Values: Pass HTTP proxy settings to sub-chart.
• Jun 8, 2026 Security trivy-app v0.15.0

  Changed

  • Updated trivy to upstream version v0.70.0.
• Jun 8, 2026 Security falco-app v0.12.0

  Changed

  • Updated falco to upstream version v0.44.0.
  • Updated k8s-metacollector to upstream version v0.1.2.
• Jun 4, 2026 Security cloudnative-pg-app v0.1.0

  Added

  • Add io.giantswarm.application.audience and io.giantswarm.application.managed chart annotations for Backstage visibility.

  Changed

  • Update cloudnative-pg to v1.29.1 (upstream chart v0.28.2).
  • Limit the namespaces watched by the operator to those where we currently expect Giant Swarm postgresql clusters.
  • Migrate chart metadata annotations to OCI-compatible format.
• Jun 1, 2026 Security rbac-bootstrap-app v0.3.0

  Added

  • Add io.giantswarm.application.managed chart annotation for Backstage visibility.
  • Add optional cluster-reader ClusterRole (off by default, enabled via clusterReader.enabled: true) that aggregates into the built-in view ClusterRole and grants read access (get/list/watch) on cluster-scoped resources.

  Changed

  • Migrate chart metadata annotations to OCI-compatible format.
• May 18, 2026 Security teleport-kube-agent-app v0.11.0

  Changed

  • Updated teleport-kube-agent to upstream version v18.7.6.
• May 14, 2026 Security external-secrets v2.4.1

  Changed

  • Updating to the v2.4.1 version.

  BREAKING CHANGES

  • The Alibaba and Device42 providers are gone.
  • The htpasswd function requires three arguments from now on, see https://github.com/Masterminds/sprig/blob/master/docs/crypto.md?plain=1#L50-L56.
• May 8, 2026 Security external-secrets v1.3.2

  Changed

  • Updating to the v1.3.2 version.
• May 4, 2026 Security kyverno-app v0.24.2

  Changed

  • Updated policy-reporter to upstream version v3.7.2.
  • Updated kyverno to upstream version v1.17.2.
  • Enabled HorizontalPodAutoscaler feature for the admission-controller deployment.
  • Add tolerations for CAPI node.cluster.x-k8s.io/uninitialized taint.

• Older entries