Security
Added
- Made GraphQL introspection configurable and disabled by default
Changed
- Change ImagePullPolicy from Always to IfNotPresent to reduce image network traffic.
Changed
- Workflows update with
devctl - Implemented fixes on
organization/namespace deletion
Added
- Add custom rule to detect access to root CA key file in control plane nodes
- Added the falco-k8s-metacollector.
- Added team label to the daemonset.
Changed
- Remove API check on PolicyException.
- Updated
Falco chart version from 3.8.1 to 4.6.1. - Updated
Falco-exporter chart version from 0.9.9 to 0.11.0 - Updated
Falcosidekick chart version from 0.7.5 to 0.8.2 - Updated
Falco to upstream version 0.38.1. - Edited Kyverno Policy Exceptions to allow falco-k8s-metacollector.
- Edited the Falco Cilium Network Policy to allow traffing from the falco-k8s-metacollector.
Changed
- Migration to kubebuilder - operation simplification & metric addition