Security
Changed
- Use in-cluster Trivy by default.
- Scan all namespaces by default.
- Add PodSecurityPolicy.
- Add NetworkPolicy (for operator only).
- Add expanded PSP for enabling CIS benchmarks.
Added
- Initial trivy resources.
- Basic NetworkPolicy resources.
Fixed
- Use
Status() client to patch Organization’s status with a namespace.
Changed
- Add appropriate labels to CRDs.
Changed
- Remove
PodSecurityPolicy from the enabled api-server admission plugins.
Changed
- Don’t return an error in case creation of legacy organization fails.
Changed
- Change dex image to fix refreshing token
Changed
- Make easier the configuration for Workload Clusters.
- Bring the changes needed to run in Kubernetes 1.21.
Fixed
- Removed
encryption-provider-config and audit-policy-file flags until we can confirm the file exists on the machine images