Security
Changed
- Rework hooks. (#263)
- Migrate
Chart.yaml to API version v2. - Rename labels.
- Add
post-upgrade hook. - Move
ClusterIssuer CRs to helpers. - Remove unneccessary hook weights.
- Refine PSP & RBAC.
- Improve CRD installation job.
- Simplify default issuer installation job.
- Add
values.schema.json for default isser chart.
Added
- Add
podLabels property to allow custom pod labels.
Changed
- Disable reconciliation of CIS benchmark reports by default. These reports are temporarily removed from
trivy-operator, to be reintroduced in the future. Reconciliation of CIS benchmarks produced by starboard is still supported by setting exporter.CISKubeBenchReports.enabled: true in the Helm values.
Changed
- Update to upstream version
0.4.17/app version 0.30.4.
Fixed
- Updated CA certificate parsing to sanitize leading and trailing white spaces and newlines
Added
- Support for Quick Tunnels
Changed
- Upgrade app to version
2022.8.4 - Remove “argo” references from template names
- Do not display
nil value for CA in athena configmap.
Added
- Add environment variable to override the cluster CA cert.
Added
- Implement
install-modules init job to install custom modules on Trivy 0.29.2.
Changed
- Update to upstream version
0.4.16/app version 0.29.2.
Added
- Make
interval and scrapeTimeout configurable in the service monitor via monitoring.serviceMonitor.interval and monitoring.serviceMonitor.scrapeTimeout
