Security

• Nov 19, 2025 Security cloudnative-pg-app v0.0.11

  Changed

  • Update main cilium network policy to allow egress to cluster and plugin-barman-cloud.
• Nov 14, 2025 Security kyverno-app v0.18.2

  Changed

  • Update flowcontrolschema API versions.
  • Use GVK for specifying Kinds in core-policies.
  • Add runAsGroup to container security contexts.
• Nov 7, 2025 Security external-secrets v0.20.4

  Changed

  • Upgrading to the v0.20.4 version. Included changes:
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.19.0
      • Includes a breaking change because the CRDs are now too big. Apply them with --server-side flag of kubectl apply.
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.19.1
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.19.2
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.0
      • Includes a change in CRDs that make it non-backward compatible with Kubernetes releases older than v1.30.
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.1
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.2
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.3
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.4

  Removed

  • Remove PSP support (in CRD installer job, RBAC, values.yaml).
• Oct 28, 2025 Security kyverno-app v0.21.0

  Changed

  • Update kyverno to upstream version v1.15.2.

  Notes

  This release includes an upstream update. Please refer to the following Release Notes from upstream for the latest changes:

  • v1.15.0
  • v1.15.1
  • v1.15.2
• Oct 28, 2025 Security kyverno-app v0.20.1

  Added

  • Add PodLogs for log collection.

  Changed

  • Update chart-operator PolicyException to v2.
• Oct 21, 2025 Security organization-operator v2.1.2

  Changed

  • Updated RBAC rules to include organizations/finalizers for managing .metadata.ownerReferences.blockOwnerDeletion.
  • Disable PodSecurityPolicies by deafult.
• Oct 20, 2025 Security cert-manager-app v3.9.4

  Added

  • Add E2E tests using apptest-framework for automated PR testing across multiple providers (CAPA, CAPV, CAPZ, CAPVCD).
    • Basic test suite: Validates fresh installations
    • Upgrade test suite: Tests upgrade scenarios and certificate reconciliation
  • Add certificate issuance integration test to cluster-test-suites.

  Changed

  • Upgrade cert-manager to v1.18.2.
• Oct 10, 2025 Security auth-bundle v0.2.5
  • Update dependency giantswarm/ingress-nginx-app to v4.1.3
  • Update dependency giantswarm/athena to v1.14.1
• Oct 9, 2025 Security athena v1.14.1

  Removed

  • Removed the configuration values letsencrypt, crtPemB64 and keyPemB64. These are not used and private certificates are configured from cert-manager.
• Oct 7, 2025 Security auth-bundle v0.2.4

  Changed

  • Update dex-app to v2.1.2.

• Newer entries
• Older entries