1. Docs
  2. Changes and releases
  3. Security

Security

  • Security cert-manager-app v3.5.3

    Added

    • adds extra helm chart for the ciliumNetworkPolicies

    Changed

    • changes the previous netpols helm chart to be used only for networkPolicies
    • disables the startup-api-check job that waits for the webhookendpoints to become available
  • Security kyverno-app v0.16.2

    Changed

    • Change the kubectl apply command of the crd-install job to use the --force-conflicts flag.
  • Security dex-app v1.42.0

    Added

    • Added deployDexK8SAuthenticator option to disable the deployment of dex-k8s-authenticator.
    • Added ingress.tls.externalSecret.enabled option to disable tls secret creation and allow usage of an external secret.
  • Security exception-recommender v0.0.3

    Added

    • Add CiliumNetworkPolicy.
  • Security external-secrets v0.7.0

    Changed

    • Add a switch for PSP CR installation.
  • Security cert-manager-app v3.5.2

    Changed

    • Moved acme-solvers-networkpolicy to the NetworkPolicies Helm chart for better organization and management of network policies.

    Removed

    • Removed acme-solvers-ciliumnetworkpolicy
  • Security cloudflared-app v0.5.1

    Changed

    • Fix EKS compatibility.
  • Security falco-app v0.7.0

    Added

    • Added the use of Falcoctl.

    Changed

    • Updated Falco chart version from 3.3.0 to 3.8.1.
    • Updated Falco-exporter chart version from 0.9.6 to 0.9.7
    • Updated Falcosidekick chart version from 0.6.1 to 0.7.5
    • Updated Falco to upstream version 0.36.1.

    Notes

    Falco made some big changes in the way rules are distributed, categorized, and updated. For more information, check the Falco release notes. This means that we will ship Falco with fewer rules by default, as aligned with upstream. They have done this to give endusers a quieter default set of rules. They will now follow a standard, incubating, sandbox system. Before this update, all these rules were shipped by default. This means, that if CustomRules or macros were based on some rules which are now considered incubating or sandbox rules, they are now broken. This can be fixed by altering the configuration of falcoctl to also download and use the incubating and sandbox rules, or by rewriting your CustomRules. For more information, please check the falco rules page.

  • Security cert-manager-app v3.5.1

    Added

    • Introduced acme-solvers-networkpolicy and acme-solvers-ciliumnetworkpolicy for enhanced network security and control.
  • Security falco-app v0.6.7

    Changed

    • Fixed Kyverno PolicyExceptions.