Security
Changed
- Configure
gsoci.azurecr.io as the default container image registry.
Changed
- Changed conditional for PSPs to
{{- if not .global.podSecurityStandards.enforced }}
Changed
- Remove finalizers from reconcile logic.
- Ignore
skip results.
- changed: deploy auth apps in
auth namespace by default
Changed
- Don’t use
oidc.customer.enabled value since it is redundant.
Changed
- Keep
policy-exceptions namespace when deleting the chart. - Changed cleanup-job template to include
selector.labels.
Added
- Add
Namespace exclusion from Draft generation. - Add
targetWorkloads and targetCategories flags to allow Categories and Workload customization. - Add
cleanup Job when upgrading or deleting exception-recommender.
Changed
- Change
PolicyExceptionDraftSpec to PolicyExceptionSpec. - Append
Kind to PolicyExceptionDraft name.
Added
- Added Policy Exceptions for
azure-cloud-node-manager.
Added
- Add PolicyExceptions for Deployments and CRD install Job.