Security

• Dec 10, 2025 Security dex-app v2.1.4

  Added

  • Auto-include mcpKubernetes in dex-k8s-authenticator trustedPeers for seamless token exchange.
• Dec 9, 2025 Security dex-app v2.1.3

  Added

  • Add PodLogs for log collection.
  • Add Gateway API HTTPRoute support as an alternative to Ingress.

  Changed

  • Fix support for using a private CA in the ingresses
• Dec 9, 2025 Security kyverno-app v0.22.0

  Changed

  • Update kyverno to upstream version v1.16.1.

  Notes

  This release includes an upstream update. Please refer to the following Release Notes from upstream for the latest changes:

  • v1.16.0
  • v1.16.1
• Dec 3, 2025 Security teleport-kube-agent-app v0.10.7

  Added

  • Add ephemeral-storage requests and limits to satisfy Kyverno policy require-emptydir-requests-and-limits.

  Changed

  • Enable upstream-provided Prometheus PodMonitor to scrape metrics from Teleport Kube Agent pods.
• Nov 20, 2025 Security cloudnative-pg-app v0.0.13

  Changed

  • Update to cloudnative-pg v1.27.1 (chart v0.26.1).

  Fixed

  • Fix chart configuration so renovate picks up new versions.
• Nov 20, 2025 Security teleport-tbot v0.4.0

  Changed

  • Use teleport v18.4.0
• Nov 19, 2025 Security cloudnative-pg-app v0.0.12

  Fixed

  • Fix plugin-barman-cloud name label in cilium network policy.
• Nov 19, 2025 Security cloudnative-pg-app v0.0.11

  Changed

  • Update main cilium network policy to allow egress to cluster and plugin-barman-cloud.
• Nov 14, 2025 Security kyverno-app v0.18.2

  Changed

  • Update flowcontrolschema API versions.
  • Use GVK for specifying Kinds in core-policies.
  • Add runAsGroup to container security contexts.
• Nov 7, 2025 Security external-secrets v0.20.4

  Changed

  • Upgrading to the v0.20.4 version. Included changes:
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.19.0
      • Includes a breaking change because the CRDs are now too big. Apply them with --server-side flag of kubectl apply.
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.19.1
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.19.2
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.0
      • Includes a change in CRDs that make it non-backward compatible with Kubernetes releases older than v1.30.
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.1
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.2
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.3
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.4

  Removed

  • Remove PSP support (in CRD installer job, RBAC, values.yaml).

• Newer entries
• Older entries