1. Docs
  2. Changes and releases
  3. Security

Security

  • Security rbac-operator v0.29.0

    Added

    • Add write-silences for flux automation account in every org-namespace
  • Security dex-app v1.25.1

    Changed

    • Changed YAML multiline from >- to |-

    Added

    • Support gs admin callback URI and gs cli trusted peer in WC templating.
  • Security rbac-operator v0.28.1

    Fixed

    • Remove app-operator-*-chart ClusterRole and ClusterRoleBinding for old app-operator versions.
  • Security rbac-operator v0.28.0

    Added

    • Add new roles and cluster roles to app-operators when a cluster namespace is created and clean them up when the cluster namespace is destroyed

    Removed

    • Remove app-operator-* ClusterRole and ClusterRoleBinding for old app-operator versions.
    • Remove write-flux-resources-customer-sa ClusterRoleBinding.
  • Security dex-app v1.25.0

    Removed

    • Remove Job that allowed recreation of certificate secrets when upgrading and disabled lets encrypt.

    Changed

    • Update Dex to v2.31.1.
    • Increase detail in token refresh logs for debugging purposes.
    • Support GS specific OIDC group prefixing for password connector types (e.g. LDAP)
  • Security rbac-operator v0.27.0

    Added

    • Create flux-crd-controller and flux-namespace-reconciler RoleBindings in cluster namespace.

    Changed

    • Update CI (architext-orb)
  • Security dex-app v1.24.2

    Added

    • Push to OCI registry on build.

    Changed

    • Remove public kubernetes api port in k8s-authenticator configmap template for MCs since the port is already included in the address.
    • Add team annotation
  • Security starboard-exporter v0.4.1

    Added

    • Spread (jitter) re-queueing of reports by +/- 10% by default to help smooth resource utilization.
  • Security starboard-exporter v0.4.0

    Added

    • Reconcile and expose metrics for ConfigAuditReport custom resources. Requires Starboard v0.15.0 or above.
  • Security starboard-app v0.7.1

    Changed

    • Move crds subtree out of upstream chart.
    • Use crd-install pre-install job.
    • Move specs subtree out of upstream chart.
    • Use spec-install post-install job.