Security

• Dec 22, 2025 Security dex-app v2.1.5

  Added

  • Add muster as a confidential static client for muster OAuth authentication (server-side OAuth proxy).
  • Auto-include muster in dex-k8s-authenticator trustedPeers for seamless token exchange.
• Dec 10, 2025 Security dex-app v2.1.4

  Added

  • Auto-include mcpKubernetes in dex-k8s-authenticator trustedPeers for seamless token exchange.
• Dec 9, 2025 Security dex-app v2.1.3

  Added

  • Add PodLogs for log collection.
  • Add Gateway API HTTPRoute support as an alternative to Ingress.

  Changed

  • Fix support for using a private CA in the ingresses
• Dec 9, 2025 Security kyverno-app v0.22.0

  Changed

  • Update kyverno to upstream version v1.16.1.

  Notes

  This release includes an upstream update. Please refer to the following Release Notes from upstream for the latest changes:

  • v1.16.0
  • v1.16.1
• Dec 3, 2025 Security teleport-kube-agent-app v0.10.7

  Added

  • Add ephemeral-storage requests and limits to satisfy Kyverno policy require-emptydir-requests-and-limits.

  Changed

  • Enable upstream-provided Prometheus PodMonitor to scrape metrics from Teleport Kube Agent pods.
• Nov 20, 2025 Security cloudnative-pg-app v0.0.13

  Changed

  • Update to cloudnative-pg v1.27.1 (chart v0.26.1).

  Fixed

  • Fix chart configuration so renovate picks up new versions.
• Nov 20, 2025 Security teleport-tbot v0.4.0

  Changed

  • Use teleport v18.4.0
• Nov 19, 2025 Security cloudnative-pg-app v0.0.12

  Fixed

  • Fix plugin-barman-cloud name label in cilium network policy.
• Nov 19, 2025 Security cloudnative-pg-app v0.0.11

  Changed

  • Update main cilium network policy to allow egress to cluster and plugin-barman-cloud.
• Nov 14, 2025 Security kyverno-app v0.18.2

  Changed

  • Update flowcontrolschema API versions.
  • Use GVK for specifying Kinds in core-policies.
  • Add runAsGroup to container security contexts.

• Newer entries
• Older entries