1. Docs
  2. Changes and releases
  3. Security

Security

  • Security rbac-operator v0.29.0

    Added

    • Add write-silences for flux automation account in every org-namespace
  • Security dex-app v1.25.1

    Changed

    • Changed YAML multiline from >- to |-

    Added

    • Support gs admin callback URI and gs cli trusted peer in WC templating.
  • Security rbac-operator v0.28.1

    Fixed

    • Remove app-operator-*-chart ClusterRole and ClusterRoleBinding for old app-operator versions.
  • Security rbac-operator v0.28.0

    Added

    • Add new roles and cluster roles to app-operators when a cluster namespace is created and clean them up when the cluster namespace is destroyed

    Removed

    • Remove app-operator-* ClusterRole and ClusterRoleBinding for old app-operator versions.
    • Remove write-flux-resources-customer-sa ClusterRoleBinding.
  • Security dex-app v1.25.0

    Removed

    • Remove Job that allowed recreation of certificate secrets when upgrading and disabled lets encrypt.

    Changed

    • Update Dex to v2.31.1.
    • Increase detail in token refresh logs for debugging purposes.
    • Support GS specific OIDC group prefixing for password connector types (e.g. LDAP)
  • Security rbac-operator v0.27.0

    Added

    • Create flux-crd-controller and flux-namespace-reconciler RoleBindings in cluster namespace.

    Changed

    • Update CI (architext-orb)
  • Security dex-app v1.24.2

    Added

    • Push to OCI registry on build.

    Changed

    • Remove public kubernetes api port in k8s-authenticator configmap template for MCs since the port is already included in the address.
    • Add team annotation
  • Security starboard-exporter v0.4.1

    Added

    • Spread (jitter) re-queueing of reports by +/- 10% by default to help smooth resource utilization.
  • Security starboard-exporter v0.4.0

    Added

    • Reconcile and expose metrics for ConfigAuditReport custom resources. Requires Starboard v0.15.0 or above.
  • Security starboard-app v0.7.1

    Changed

    • Move crds subtree out of upstream chart.
    • Use crd-install pre-install job.
    • Move specs subtree out of upstream chart.
    • Use spec-install post-install job.

This part of our documentation refers to our vintage product. The content may be not valid anymore for our current product. Please check our new documentation hub for the latest state of our docs.