1. Docs
  2. Changes and releases
  3. Security

Security

  • Security kyverno-app v0.11.4

    Added

    • Push kyverno to the GCP app collection.

    Changed

    • Add Service and Deployment annotations for Giant Swarm platform monitoring.
    • Change target namespace for Giant Swarm management clusters.
    • Build with app-build-suite.
    • Add app-test-suite tests.
  • Security kyverno-app v0.11.3

    Changed

    • Update kyverno to upstream version 1.7.4 / chart version 2.5.4.
    • Update kyverno-policy-reporter to upstream version 2.10.0 / chart version 2.13.0.
  • Security kyverno-app v0.11.2

    Changed

    • Update kyverno to upstream version 1.7.3 / chart version 2.5.3.
  • Security dex-app v1.29.0

    Changed

    • Pull kubernetes CA cert for k8s-authenticator from environment variable.
  • Security dex-app v1.28.0

    Changed

    • Update Dex to v2.34.0
  • Security cert-manager-app v2.17.0

    Changed

    • Rework hooks. (#263)
      • Migrate Chart.yaml to API version v2.
      • Rename labels.
      • Add post-upgrade hook.
      • Move ClusterIssuer CRs to helpers.
      • Remove unneccessary hook weights.
      • Refine PSP & RBAC.
      • Improve CRD installation job.
      • Simplify default issuer installation job.
      • Add values.schema.json for default isser chart.
  • Security starboard-exporter v0.6.0

    Added

    • Add podLabels property to allow custom pod labels.

    Changed

    • Disable reconciliation of CIS benchmark reports by default. These reports are temporarily removed from trivy-operator, to be reintroduced in the future. Reconciliation of CIS benchmarks produced by starboard is still supported by setting exporter.CISKubeBenchReports.enabled: true in the Helm values.
  • Security trivy-app v0.6.0

    Changed

    • Update to upstream version 0.4.17/app version 0.30.4.
  • Security athena v1.7.5

    Fixed

    • Updated CA certificate parsing to sanitize leading and trailing white spaces and newlines
  • Security cloudflared-app v0.4.0

    Added

    • Support for Quick Tunnels

    Changed

    • Upgrade app to version 2022.8.4
    • Remove “argo” references from template names