1. Docs
  2. Changes and releases
  3. Security

Security

  • Security exception-recommender v0.0.3

    Added

    • Add CiliumNetworkPolicy.
  • Security external-secrets v0.7.0

    Changed

    • Add a switch for PSP CR installation.
  • Security cert-manager-app v3.5.2

    Changed

    • Moved acme-solvers-networkpolicy to the NetworkPolicies Helm chart for better organization and management of network policies.

    Removed

    • Removed acme-solvers-ciliumnetworkpolicy
  • Security cloudflared-app v0.5.1

    Changed

    • Fix EKS compatibility.
  • Security falco-app v0.7.0

    Changed

    • Updated Falco chart version from 3.3.0 to 3.8.1.
    • Updated Falco-exporter chart version from 0.9.6 to 0.9.7
    • Updated Falcosidekick chart version from 0.6.1 to 0.7.5
    • Updated Falco to upstream version 0.36.1.

    Added

    • Added the use of Falcoctl.

    Notes

    Falco made some big changes in the way rules are distributed, categorized, and updated. For more information, check the Falco release notes. This means that we will ship Falco with fewer rules by default, as aligned with upstream. They have done this to give endusers a quieter default set of rules. They will now follow a standard, incubating, sandbox system. Before this update, all these rules were shipped by default. This means, that if CustomRules or macros were based on some rules which are now considered incubating or sandbox rules, they are now broken. This can be fixed by altering the configuration of falcoctl to also download and use the incubating and sandbox rules, or by rewriting your CustomRules. For more information, please check the falco rules page.

  • Security cert-manager-app v3.5.1

    Added

    • Introduced acme-solvers-networkpolicy and acme-solvers-ciliumnetworkpolicy for enhanced network security and control.
  • Security falco-app v0.6.7

    Changed

    • Fixed Kyverno PolicyExceptions.
  • Security rbac-operator v0.40.0

    Changed

    • Restrict access to org-giantswarm namespace
  • Security falco-app v0.6.6

    Changed

    • Implemented the use of the global.podSecurityStandards.enforced toggle.
    • Fixed an issue with the falcoctl image value structure.
  • Security trivy-app v0.9.0

    Changed

    • Bump Trivy to v0.45.1