Security

• Jan 2, 2024 Security teleport-kube-agent-app v0.7.0

  Added

  • Enable high availability mode and podDisruptionBudget
• Dec 20, 2023 Security dex-app v1.42.4
• Dec 20, 2023 Security external-secrets v0.8.1

  Changed

  • Configure gsoci.azurecr.io as the default container image registry.
• Dec 19, 2023 Security starboard-exporter v0.7.7

  Added

  • Add a scaledObject resource for KEDA support.
• Dec 15, 2023 Security cert-manager-app v2.25.3
• Dec 14, 2023 Security falco-app v0.7.1

  Changed

  • Added SeccompProfile annotation to Falco-exporter PSP.
• Dec 12, 2023 Security starboard-exporter v0.7.6

  Changed

  • Update go to v1.21 and bump dependencies.
• Dec 12, 2023 Security athena v1.12.1

  Changed

  • Configure gsoci.azurecr.io as the default container image registry.
  • Updated github.com/nats-io/nkeys to v0.4.6 to address CVE-2023-46129, resolving the issue of using a hard-coded cryptographic key in the nkeys library.

  Security

  • Resolved a high-severity security vulnerability (CVE-2023-46129) associated with github.com/nats-io/nkeys by updating to version v0.4.6. This update ensures enhanced security in cryptographic key handling.

  Dependencies

  • Updated dependencies to ensure compatibility and security with the latest nkeys version.
• Dec 11, 2023 Security exception-recommender v0.0.7

  Changed

  • Configure gsoci.azurecr.io as the default container image registry.
• Dec 6, 2023 Security kyverno-app v0.16.4

  Added

  • Add missing app.kubernetes.io/ labels to all the pods.
  • Add CiliumNetworkPolicy for individual controllers:
    • kyverno-admission-controller
    • kyverno-background-controller
    • kyverno-reports-controller
    • kyverno-cleanup-controller
    • kyverno-cleanup-jobs
    • kyverno-plugin
    • kyverno-policy-reporter

• Newer entries
• Older entries