1. Docs
  2. Changes and releases
  3. Security

Security

  • Security starboard-exporter v0.5.0

    Announcements

    • Important: the latest tag alias is being removed. Some users have reported issues using the latest tag on our hosted registries (Docker Hub, Quay, etc.). We advise against using latest tags and don’t use them ourselves, so this tag is not kept up to date. Please switch to using a tagged version. We will be removing the latest tag from our public registries in the near future to avoid confusion.

    Added

    • Add missing monitoring options in the Helm chart values.yaml.
    • Support sharding report metrics across multiple instances of the exporter.
    • Set runAsNonRoot and use RuntimeDefault seccomp profile.
    • Make replica count configurable in Helm values.
    • Add configurable tolerations to Helm values.
    • Reconcile and expose metrics for CISKubeBenchReport custom resources.
  • Security cert-manager-app v2.14.0

    Changed

    • Upgrade to upstream image v1.7.2 (#204). This version completely removes cert-manager API versions v1alpha2, v1alpha3, and v1beta1. If you need to upgrade your resources, this document explains the process.
    • Update pytest-helm-charts to version 0.7.0 and adjust dependencies (#239)
    • Update kubectl container version to 1.24.1 (#204)

    Fixed

    • Fixed broken relative URLs in the README
  • Security kyverno-app v0.10.1

    Fixed

    • Update the kyverno CRDS to align with v1.6.2 version.
  • Security athena v1.6.2
  • Security athena v1.6.1

    Fixed

    • Fix templating of provider value when app is installed from the giantswarm catalog.
  • Security athena v1.6.0

    Added

    • Use SVG icon
    • Add instructions on how to install athena in a workload cluster.
    • Push athena to the giantswarm catalog
    • Add labels and annotations to the athena chart.
    • Use app-test-suite to execute smoke tests.
    • Add schema validation for values.yaml.
    • Use app-build-suite to generate application.giantswarm.io/metadata.

    Changed

    • Allow missing firestoreServiceAccountKey.
    • Make changes to helm chart for deployment on workload clusters.
  • Security rbac-operator v0.29.0

    Added

    • Add write-silences for flux automation account in every org-namespace
  • Security dex-app v1.25.1

    Changed

    • Changed YAML multiline from >- to |-

    Added

    • Support gs admin callback URI and gs cli trusted peer in WC templating.
  • Security rbac-operator v0.28.1

    Fixed

    • Remove app-operator-*-chart ClusterRole and ClusterRoleBinding for old app-operator versions.
  • Security rbac-operator v0.28.0

    Added

    • Add new roles and cluster roles to app-operators when a cluster namespace is created and clean them up when the cluster namespace is destroyed

    Removed

    • Remove app-operator-* ClusterRole and ClusterRoleBinding for old app-operator versions.
    • Remove write-flux-resources-customer-sa ClusterRoleBinding.