Security

• Aug 17, 2022 Security kyverno-app v0.11.0

  Changed

  • Update kyverno to upstream version 1.7.2 / chart version 2.5.2.
  • Use pre-install CRD install Job to remove storage version v1alpha1 for several Kyverno CRDs.
  • Set Kyverno to use the giantswarm-critical PriorityClass.
  • Limit maximum ReportChangeRequests per namespace to 100.
  • Split PolicyReports into one report per policy to support the RCR limiting and avoid cases where a report doesn’t fit into etcd.
• Aug 11, 2022 Security rbac-operator v0.30.2

  Changed

  • Adjusted detection of changes in roles and role bindings to prevent unnecessary updates during reconciliation
• Aug 11, 2022 Security rbac-bootstrap-app v0.2.0

  Added

  • Added an example of direct app deployment to README

  Fixed

  • Fixed rendering helm template with empty users and/or roles
• Aug 9, 2022 Security athena v1.7.2

  Added

  • Add CI job to push to capa-app-collection.
• Aug 9, 2022 Security kyverno-app v0.10.3

  Changed

  • Fix Circle CI job name for pushing to app collection.
• Aug 5, 2022 Security kyverno-policies v0.17.2
• Aug 5, 2022 Security organization-operator v1.0.3

  Changed

  • Update CI (archigtect-orb)
• Aug 3, 2022 Security rbac-operator v0.30.1

  Changed

  • In case an organization can not be fetched, try fetching it via the annotation ui.giantswarm.io/original-organization-name.
• Aug 2, 2022 Security dex-app v1.25.2

  Added

  • Add default value for giantswarm CLIAuth client ID.
• Aug 2, 2022 Security rbac-operator v0.30.0

  Added

  • Reconcile individual clusterRoleBinding for each org namespace to grant and revoke automation access to silences.

• Newer entries
• Older entries