Security
Changed
- Disable JAMF components on chart templates
Changed
- Update to upstream
Kyverno Policies version 1.12.5. - Don’t push to vsphere-app-collection, capz-app-collection, capa-app-collection or cloud-director-app-collection. We started to consume kyverno-policies from security-bundle.
Changed
- Fix issues with templates
- Change ownership to Team Shield
Changed
- Update
Kyverno to upstream version v1.12.5.
Fixed
- Added small fix on
podSecurityContext for seccompProfile.
Changed
- Split Cilium PolicyExceptions per component.
- Add rules to cilium-agent PolicyException.
- Restrict Policy and ClusterPolicy to kyverno.io/v1 for wildcard policy matching
Removed
- Remove Helm
hooks annotations from default Policies and PolicyExceptions.
Added
- Supports enabling cronjob by setting
cronjob.enabled. Disabled by default.
Removed
- Remove duplicate default identity output entry
Added
- Add cronjob to cleanup leftover teleport-kubeconfigs for deleted clusters.
- Improve README.
Added
- Label to Kubernetes secret created by teleport-tbot.
Changed
- Upgraded to Teleport
version 16