Security

• Dec 3, 2025 Security teleport-kube-agent-app v0.10.7

  Added

  • Add ephemeral-storage requests and limits to satisfy Kyverno policy require-emptydir-requests-and-limits.

  Changed

  • Enable upstream-provided Prometheus PodMonitor to scrape metrics from Teleport Kube Agent pods.
• Nov 20, 2025 Security cloudnative-pg-app v0.0.13

  Changed

  • Update to cloudnative-pg v1.27.1 (chart v0.26.1).

  Fixed

  • Fix chart configuration so renovate picks up new versions.
• Nov 20, 2025 Security teleport-tbot v0.4.0

  Changed

  • Use teleport v18.4.0
• Nov 19, 2025 Security cloudnative-pg-app v0.0.12

  Fixed

  • Fix plugin-barman-cloud name label in cilium network policy.
• Nov 19, 2025 Security cloudnative-pg-app v0.0.11

  Changed

  • Update main cilium network policy to allow egress to cluster and plugin-barman-cloud.
• Nov 14, 2025 Security kyverno-app v0.18.2

  Changed

  • Update flowcontrolschema API versions.
  • Use GVK for specifying Kinds in core-policies.
  • Add runAsGroup to container security contexts.
• Nov 7, 2025 Security external-secrets v0.20.4

  Changed

  • Upgrading to the v0.20.4 version. Included changes:
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.19.0
      • Includes a breaking change because the CRDs are now too big. Apply them with --server-side flag of kubectl apply.
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.19.1
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.19.2
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.0
      • Includes a change in CRDs that make it non-backward compatible with Kubernetes releases older than v1.30.
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.1
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.2
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.3
    • https://github.com/external-secrets/external-secrets/releases/tag/v0.20.4

  Removed

  • Remove PSP support (in CRD installer job, RBAC, values.yaml).
• Oct 28, 2025 Security kyverno-app v0.21.0

  Changed

  • Update kyverno to upstream version v1.15.2.

  Notes

  This release includes an upstream update. Please refer to the following Release Notes from upstream for the latest changes:

  • v1.15.0
  • v1.15.1
  • v1.15.2
• Oct 28, 2025 Security kyverno-app v0.20.1

  Added

  • Add PodLogs for log collection.

  Changed

  • Update chart-operator PolicyException to v2.
• Oct 21, 2025 Security organization-operator v2.1.2

  Changed

  • Updated RBAC rules to include organizations/finalizers for managing .metadata.ownerReferences.blockOwnerDeletion.
  • Disable PodSecurityPolicies by deafult.

• Older entries