Security

• May 31, 2023 Security kyverno-policies v0.19.0

  Changed

  • Enable PSS Restricted policies by default.

  Removed

  • Stop pushing to openstack-app-collection.
• May 16, 2023 Security kyverno-app v0.14.5

  Added

  • Add a webhooks cleanup job for ensuring deletion of Kyverno webhooks on chart uninstall.

  Changed

  • Replace deprecated toleration node-role.kubernetes.io/master with node-role.kubernetes.io/control-plane on CRD install job.
• May 9, 2023 Security trivy-app v0.8.1

  Added

  • Add Cilium Network Policy to trivy.
  • Added Kyverno PolicyException for trivy-app.

  Changed

  • Modified the VerticalPodAutoscaler to make the Container Policies configurable.
  • Moved the VerticalPodAutoscaler.enabled flag to VerticalPodAutoscaler.trivy.enabled to align with other Apps.
• May 9, 2023 Security rbac-operator v0.33.4

  Removed

  • Stop pushing to openstack-app-collection.
• May 5, 2023 Security rbac-operator v0.33.3

  Changed

  • Update dependency gin to v1.9.0

  Fixed

  • Fixed read-all clusterRole to append pods/log policy rule once
  • Fixed reconciling subjects in existing organization namespace role bindings
• May 5, 2023 Security dex-app v1.34.2

  Changed

  • Changed log level to info
• May 4, 2023 Security falco-app v0.5.2

  Changed

  • Changed the default PolicyException namespace to giantswarm.
  • Replace deprecated toleration node-role.kubernetes.io/master with node-role.kubernetes.io/control-plane on falco and falco-exporter Daemonsets.
• May 4, 2023 Security rbac-operator v0.33.2

  Changed

  • Remove shared app collection from circle CI
  • Updated dependencies to the latest versions
• May 3, 2023 Security kyverno-app v0.14.4

  Added

  • Add Kyverno policy controlling PolicyException namespaces.
  • Set a default namespace of policy-exceptions for customer PolicyException resources.
• May 3, 2023 Security dex-app v1.34.1

  Changed

  • Remove shared app collection from circle CI
  • Define pod disruption budget as percentage

• Newer entries
• Older entries