Security

• Oct 7, 2025 Security dex-app v2.1.2

  Changed

  • Change base image registry to gsoci.azurecr.io
• Oct 7, 2025 Security cert-manager-app v3.9.3

  Changed

  • Fix missing targetPort in cainjector-service
• Oct 3, 2025 Security external-secrets v0.18.3

  Changed

  • Only support Kyverno PolicyException version v2 and remove v2beta1 support.
• Sep 24, 2025 Security rbac-operator v0.42.3

  Fixed

  • Fix missing cluster-wide write permissions for customer admin groups by adding the missing write-all-customer-group ClusterRoleBinding.
• Sep 17, 2025 Security rbac-operator v0.42.2

  Added

  • Extended crossplane-edit ClusterRoleBinding to include automation ServiceAccounts from all organization namespaces.
  • Added dynamic namespace watching to automatically add/remove org automation ServiceAccounts from the crossplane-edit ClusterRoleBinding when org namespaces are created or deleted.
• Sep 4, 2025 Security trivy-app v0.14.1

  Changed

  • Remove empty service port value.
• Sep 3, 2025 Security falco-app v0.11.0

  Changed

  • Update falco to upstream version 0.41.3.
• Sep 3, 2025 Security cert-manager-app v3.9.2

  Changed

  • Add alloy ingress rules for cainjector metrics ingestion.
• Aug 22, 2025 Security rbac-operator v0.42.1

  Added

  • Add empty values placeholder for customer read-all groups.

  Changed

  • Resolve updated code linter findings.
  • Update dependencies and clean up go.mod.
  • Update to go 1.24.
• Aug 21, 2025 Security athena v1.14.0

  Added

  • Make Ingress annotations configurable via values (.Values.ingress.annotations)

  Changed

  • Resolve golangci-lint v2 linter warnings.
  • Enable observability platform log collection.
  • Use alpine base image from gsoci.azurecr.io instead of quay.io.
  • Disable Pod Security Policy (PSP) by default.
  • Update to Go 1.24.
  • Various dependency updates.

• Newer entries
• Older entries