Security

• Nov 2, 2023 Security cert-manager-app v3.5.1

  Added

  • Introduced acme-solvers-networkpolicy and acme-solvers-ciliumnetworkpolicy for enhanced network security and control.
• Oct 31, 2023 Security falco-app v0.6.7

  Changed

  • Fixed Kyverno PolicyExceptions.
• Oct 31, 2023 Security rbac-operator v0.40.0

  Changed

  • Restrict access to org-giantswarm namespace
• Oct 27, 2023 Security falco-app v0.6.6

  Changed

  • Implemented the use of the global.podSecurityStandards.enforced toggle.
  • Fixed an issue with the falcoctl image value structure.
• Oct 27, 2023 Security trivy-app v0.9.0

  Changed

  • Bump Trivy to v0.45.1
• Oct 26, 2023 Security rbac-operator v0.39.0

  Added

  • Add MatchExpressions selector to organization scope for RoleBindingTemplate
• Oct 25, 2023 Security kyverno-app v0.16.1

  Changed

  • Removed unused values and update schema.
• Oct 24, 2023 Security kyverno-app v0.16.0

  Added

  • Added Policy Exceptions for aws-cloud-controller-manager, aws-ebs-csi-driver, azure-cloud-controller-manager and cilium.
  • Add Policy Exception for chart-operator ServiceAccount.
  • Change psp.enabled value to global.podSecurityStandards.enforced
• Oct 17, 2023 Security cloudflared-app v0.5.0

  Added

  • Ability to specify annotations of the Deployment

  Changed

  • Do not install PodSecurityPolicy if api not available.
  • Make deployment PSS compliant.
  • Do not install cleaning hook when Quick Tunnel is enabled.
• Oct 12, 2023 Security cert-manager-app v3.5.0

  Added

  • cert-manager-giantswarm-clusterissuer: Allow setting hostedZoneID for route53 DNS01 challenge.
  • cert-manager-giantswarm-clusterissuer: Make accessKeyID and secretAccessKey optional for route53 DNS01 challenge.

• Newer entries
• Older entries