Security

• Mar 28, 2023 Security kyverno-app v0.14.2

  Changed

  • Don’t push to openstack-app-collection.
  • Rename vmware-app-collection to vsphere-app-collection.
  • Consider PolicyExceptions from all namespaces.
• Mar 28, 2023 Security falco-app v0.5.1

  Added

  • Added Kyverno PolicyExceptions for necessary capabilities normally prohibited by PSS policies.
• Mar 22, 2023 Security kyverno-app v0.14.1

  Changed

  • Update kyverno to upstream version 1.9.2 / chart version 2.7.2.
• Mar 22, 2023 Security cert-manager-app v2.20.3

  Added

  • Add node-role.kubernetes.io/control-plane key to list of tolerations
• Mar 22, 2023 Security external-secrets v0.4.2

  Fixed

  • The VPA for external-secrets erroneously picks up the kubectl pod created by the CRD installer job and changes the resource requirements for it potentially causing OOM kill for it
• Mar 22, 2023 Security organization-operator v1.0.6

  Added

  • Added the use of the runtime/default seccomp profile.

  Fixed

  • Prevented deletion of Organization CR until the organization namespace is deleted successfully
• Mar 22, 2023 Security dex-app v1.34.0

  Added

  • Add circle ci job to push to capz-app-collection on new release.
  • Static client for GitOps Server.
• Mar 17, 2023 Security trivy-app v0.8.0

  Changed

  • Update to upstream version 0.7.0/app version 0.37.2.
• Mar 17, 2023 Security rbac-operator v0.33.0

  Added

  • Added the use of the runtime/default seccomp profile.
  • Added reconciliation of static resources like e.g. ClusterRoles, ClusterRoleBindings, ServiceAccounts in the default namespace, etc.
• Mar 16, 2023 Security cert-manager-app v2.20.2

  Changed

  • Default to new IRSA role for cert-manager-controller that has permissions needed for the DNS01 challenge via AWS Route53

• Newer entries
• Older entries