Security

• Jan 26, 2022 Security rbac-bootstrap-app v0.1.0

  Added

  • Initial version of the RBAC bootstrapping app
• Jan 25, 2022 Security starboard-app v0.5.0

  Changed

  • Update to upstream version 0.14.0 (chart version 0.9.0).
  • Automatically delete VulnerabilityReports after 7 days to trigger re-scan.
  • Only scan the current revision of a ReplicaSet.

  Removed

  • Remove unused envSecret values from values.yaml.
• Jan 24, 2022 Security starboard-exporter v0.2.1

  Added

  • Make pod annotations configurable.
  • Bump golang, prometheus, and starboard versions.
• Jan 19, 2022 Security kyverno-policies v0.14.0

  Added

  • Support all API versions for CAPI resources

  Changed

  • Default Azure subscription ID by getting value directly from organization credentials secret.
• Jan 13, 2022 Security kyverno-policies v0.13.2

  Fixed

  • Fixed block-bulk-certconfigs-delete policy
• Jan 13, 2022 Security kyverno-policies v0.13.1

  Added

  • Add block-bulk-certconfigs-delete policy
• Jan 12, 2022 Security organization-operator v0.10.3

  Changed

  • Don’t return an error in case deletion of legacy organization fails.
• Jan 5, 2022 Security starboard-exporter v0.2.0

  Added

  • Helm, add configurable container securityContext with secure defaults.

  Changed

  • Bump starboard, logr, and controller-runtime dependency versions.
  • Remove unneeded releaseRevision annotation from deployment.

  Fixed

  • Helm, fix incomplete metric name in pods with high/critical CVEs panel
• Jan 5, 2022 Security kyverno-policies v0.13.0

  Added

  • Add policies-openstack for OpenStack-specific policies.
  • Add policy for OpenStack which defaults failureDomain based on MachineDeployment request’s machine-deployment.giantswarm.io/failure-domain label.
• Dec 17, 2021 Security falco-app v0.2.0

  Changed

  • Update to upstream charts: Falco 1.16.2/0.30.0, exporter 0.6.3/0.6.0, sidekick 0.4.4/2.24.0.

• Newer entries
• Older entries