Security

• Aug 13, 2024 Security organization-operator v2.0.1

  Changed

  • Workflows update with devctl
  • Implemented fixes on organization/namespace deletion
• Aug 13, 2024 Security falco-app v0.9.0

  Added

  • Add custom rule to detect access to root CA key file in control plane nodes
  • Added the falco-k8s-metacollector.
  • Added team label to the daemonset.

  Changed

  • Remove API check on PolicyException.
  • Updated Falco chart version from 3.8.1 to 4.6.1.
  • Updated Falco-exporter chart version from 0.9.9 to 0.11.0
  • Updated Falcosidekick chart version from 0.7.5 to 0.8.2
  • Updated Falco to upstream version 0.38.1.
  • Edited Kyverno Policy Exceptions to allow falco-k8s-metacollector.
  • Edited the Falco Cilium Network Policy to allow traffing from the falco-k8s-metacollector.
• Aug 8, 2024 Security organization-operator v2.0.0

  Changed

  • Migration to kubebuilder - operation simplification & metric addition
• Aug 7, 2024 Security rbac-operator v0.41.1

  Changed

  • Bump architect-orb@5.3.1 to fix CVE-2024-24790.
• Jul 30, 2024 Security cert-manager-app v3.8.1

  Changed

  • Bump architect-orb@5.3.1 to fix CVE-2024-24790.
• Jul 30, 2024 Security athena v1.12.3

  Changed

  • Bump architect-orb@5.3.1 to fix CVE-2024-24790.
• Jul 30, 2024 Security organization-operator v1.6.4

  Changed

  • Bump architect-orb@5.3.1 to fix CVE-2024-24790.
• Jul 25, 2024 Security auth-bundle v0.2.1
• Jul 25, 2024 Security dex-app v1.42.12

  Fixed

  • Bump dex to v2.37.1-gs1 to fix critical CVEs.
• Jul 18, 2024 Security kyverno-app v0.17.15

  Changed

  • Set VPA max 6 CPU / 24Gi memory and adjust default requests/limits for reports-controller.
  • Set VPA max 4 CPU / 8Gi memory and adjust default requests/limits for background-controller.
  • Set starting CPU limit of request+25% for cleanup-controller.

  Removed

  • Disable Kyverno CRDs install Job in favor of kyverno-crds App.

• Newer entries
• Older entries