1. Docs
  2. Changes and releases
  3. Security

Security

  • Security dex-app v1.22.0

    Added

    • Added securityContext attribute to all deployments.
    • Add application.giantswarm.io/values-schema and application.giantswarm.io/readme annotations to Chart.yaml; use app-build-suite to generate application.giantswarm.io/metadata.

    Changed

    • Run two replicas of dex.
    • Update README for clarity.
  • Security rbac-operator v0.22.1
    • Update some role descriptions.
    • Enhance log messages in the bootstrapping part, remove unneeded messages.
  • Security rbac-operator v0.22.0

    Added

    • Add externalresources resource that binds read-default-catalogs and read-releases roles for any subject with org-namespace access.
    • Add creation of read-default-catalogs Role.
    • Add creation of read-releases ClusterRole.
    • Improve logging for the orgpermissions, clusternamespace, and rbac controllers.
  • Security kyverno-app v0.8.1
    • make PDB version conditional based on available API
  • Security rbac-operator v0.21.0

    Added

    • Add cluster-namespace controller which ensures that RBAC resources to access resources in cluster namespaces can be granted to those with access to the clusters organization
    • Add bootstrapping for the read-cluster-apps and write-cluster-apps clusterRoles.
    • Add update option for orgReadClusterRoleBinding resource.

    Changed

    • The write_all_group configuration key is now optional.
  • Security starboard-exporter v0.3.0

    Added

    • Add the image_registry label exposing the image registry.

    Changed

    • Bump golang, prometheus, and starboard dependency versions.
    • Update Grafana dashboard to use plugin version 8.3.2 and the new label.
  • Security athena v1.5.2

    Fixed

    • Fix RBAC rule for fix secret job.
  • Security athena v1.5.1
    • No changes compared to v1.5.0.
  • Security athena v1.5.0

    Changed

    • Updated Ingress resources in helm chart.
    • Add workaround for Chart upgrade not working when not using lets encrypt due to changed secret type.
  • Security starboard-app v0.5.2

    Added

    • Increase trivy scan Job memory limits to 1G.