Security
Changed
- Use local registries for Falco driver loader image.
- Remove update logic used for upstream 0.33.0 upgrade.
Changed
- Update to upstream v1.7.5 policies.
Added
- Added
VerticalPodAutoscaler to falco.
Changed
- Don’t return an error in case credentiald fails during deletion
Added
- Support for running behind a proxy.
HTTP_PROXY,HTTPS_PROXY and NO_PROXY are set as environment variables in deployment/cert-manager-cainjector, deployment/cert-manager-controller and deployment/cert-manager-webhook if defined in values.yaml.
- Support for using
cluster-apps-operator specific cluster.proxy values.
Fixed
- Fix typo in
CiliumNetworkPolicy endpoint selector.
Added
- Added
CiliumNetworkPolicy for the CRD install job.
Changed
- The helm job that installs CRDs is not removed if the job fails.
Added
- Added
CiliumNetworkPolicy for the CRD install job.
Changed
- Note: Due to breaking changes in the official chart, it is not possible to cleanly replace an existing Falco DaemonSet from a previous version with this new version. As a result, when updating to this version, there will be a short Falco downtime while the existing DaemonSet is deleted and replaced.
- Update
falco to upstream version 0.33.0 / chart version 2.2.0. - Update
falco-exporter to upstream version 0.8.0 / chart version 0.9.1. - Update
falcosidekick to upstream version 2.26.0 / chart version 0.5.9.
Changed
- Rename Chart name from
trivy-app to trivy.