Releases: kubearmor/KubeArmor
Releases · kubearmor/KubeArmor
v1.5.7
What's Changed
- stable release v1.5.6 by @Aryan-sharma11 in #2047
- Update Helm Chart To v1.5.6 by @github-actions in #2048
- chore: Fix controller-gen version in operator Makefile by @asharma0703 in #2043
- chore : update ubuntu version in CI by @Aryan-sharma11 in #2033
- fix(monitor): fix network event returned values by @rksharma95 in #2042
- feat(presets): identify container processes being part of external execution by @rksharma95 in #1991
- feat(workflow): add semvar check for systemd release by @rootxrishabh in #2026
- fix: context access for github script by @rootxrishabh in #2056
- add workflow dispatch by @Aryan-sharma11 in #2054
- fix: latest ci by @Aryan-sharma11 in #2059
- Remove default value from configuration option by @THE-BRAHMA in #2058
- Add ModelArmor Docs by @HighnessAtharva in #2052
- Add ModelArmor PDFs and Video by @HighnessAtharva in #2065
- feat: adding support for excluding labels in csp and ksp for endpoint matching by @Prateeknandle in #1999
- chore(deps): upgrade dependencies and go version by @rksharma95 in #2068
- chore(deps): pin net pkg to fixed version by @rksharma95 in #2071
- docs(contrib): add onboarding wiki for new KubeArmor contributors by @HighnessAtharva in #2075
New Contributors
- @THE-BRAHMA made their first contribution in #2058
- @HighnessAtharva made their first contribution in #2052
Full Changelog: v1.5.6...v1.5.7
Contributors
asharma0703, Aryan-sharma11, and 5 other contributors
Assets 2
v1.5.6
Changelog
- 2802a72 Merge pull request #2046 from Aryan-sharma11/controller-port
- b3abded update release ci
- bef4701 minor fixes
- 2588fe9 update webhook port in controller
- 6b5efc6 add update port functionality
- d69b15c make kubearmor controller port configurable
- 95fa842 Merge pull request #2040 from rksharma95/remove-default-severity
- 12318c8 remove default severity value assignment
- 6f22c7a Merge pull request #2041 from kubearmor/fix-systemd-release
- 0fd61aa chore: upgrade ci-systemd-release to 22.04
v1.5.5
Changelog
- b6fa41a Merge pull request #2028 from Aryan-sharma11/dep
- d05a68b fix go checks
- 792c940 upgraded dependencies
- 3c18ec1 Merge pull request #2020 from kubearmor/fix-helm-flag
- 5804ca1 fix(deploy/helm):
annotateExistingflag in helm chart - c918ffa Merge pull request #1996 from Aryan-sharma11/pprof
- f6cee99 fix: os.readlink memory overhead
- 2a39edc Merge pull request #2014 from Aryan-sharma11/update-ci
- 9f7172a update stable-release-workflow
- e6aa23d Merge pull request #2012 from rksharma95/update-stable-v1.5.4
- c83d3d1 update stable to v1.5.4
- 136a8a1 Merge pull request #1958 from Manik2708/panic
- 0e4e1e9 [bug] Fixed the panic for uninitialized docker daemon
- db802e0 Merge pull request #1824 from Manik2708/dev-docs
- 9f38ff1 cleanup
- bee47f4 Merge pull request #2007 from Aryan-sharma11/controller
- fad345b chore: conditional deployment for pod refresh controller
v1.5.4
Changelog
- d1eb24e Merge pull request #1995 from rksharma95/feat-env-preset
- af48ead update preset test ksp
- 509afef add protectEnv preset and update presets api specification
- d451e96 Merge pull request #1980 from rootxrishabh/fixDeleteRecommendPolicyLogic
- 5e7ccdc fix(operator): recommended policies deletion logic
- 31c0977 Merge pull request #1993 from nyrahul/eks-auto-mode
- 7b3e17a support for EKS Auto Mode
- 402548f Merge pull request #1990 from nyrahul/main
- 937a297 changed maintainership affiliation
- 01f6823 Merge pull request #1978 from kubearmor/update-helm-v1.5.3
- 54a523e Update Helm Chart To v1.5.3
- 652f96c Merge pull request #1979 from asharma0703/remove-kube-rbac-proxy-annotation-helm
- 6b4666a fix: remove kube-rbac-proxy container annotation from Helm template
- 8ab3a49 Merge pull request #1977 from rksharma95/update-stable-v1.5.3
- c852a30 update stable to v1.5.3
v1.5.3
What's Changed
- chore: Update STABLE-RELEASE to v1.5.2 by @rksharma95 in #1963
- Correct tolerations placement in deployment by @adambethuggin in #1965
- fix: Fix kured for azure-linux by @Aryan-sharma11 in #1953
- chore(CI): add a workflow to push multiubuntu image on any change by @Manik2708 in #1968
- fix(bpflsm): readonly and owneronly behaviour by @daemon1024 in #1578
- chore(k3s): removed the auto-detection of docker runtime from k3s installation script by @Manik2708 in #1976
- fix: remove leftover kube-rbac-proxy container annotation by @asharma0703 in #1974
- fix: handle pod deletion in kubearmor controller by @Aryan-sharma11 in #1952
New Contributors
- @adambethuggin made their first contribution in #1965
- @Manik2708 made their first contribution in #1968
Full Changelog: v1.5.2...v1.5.3
Contributors
asharma0703, adambethuggin, and 4 other contributors
Assets 23
v1.5.2
v1.5.1
Changelog
- a772a15 Merge pull request #1956 from Prateeknandle/nri-flag
- 9871c3f adding NRI flag
- a683113 Merge pull request #1957 from rksharma95/fix-alerts-duplication
- 5882551 bump go version to 1.23.5
- 0edf151 fix duplicate alerts issue
- 9656a7f Merge pull request #1954 from rksharma95/fix-snitch-rolebinding
- f04277c use correct role in snitch rolbinding log error messages as well
- a88b0fa Merge pull request #1951 from tesla59/tesla/update-upload-artifact
- 15467fe ci: update actions/upload-artifact to v4
- 88f54a6 Merge pull request #1947 from rksharma95/fix-latest-release-ci-tag
- 7c9a6b0 use release tag to push kubearmor images
v1.5.0
What's Changed
- chore(controller): deprecate kube-rbac-proxy with controller built-in auth protection by @rksharma95 in #1913
- feat(operator): fetch cluster name from providers by @rootxrishabh in #1881
- feat(deploy) Allow setting additional values in operator chart by @bakito in #1904
- chore : remove kubearmor tests from latest release by @Aryan-sharma11 in #1926
- feat(deployment): Enhance Docker ImagePull Secrets Configuration by @janavenkat in #1754
- fix(build): inject Build Info into systemd package #1928 by @Atharva-Kanherkar in #1937
- fix: typo by @jokestax in #1895
- fix(build): add
go-get-toolfunction in makefile of KubeArmorOperator by @Affan-7 in #1699 - feat: special presets (handle fileless exec) by @daemon1024 in #1743
- feat (proto): include PolicyDataList for ContainerData and HostSecurityPolicies in getProbeData rpc by @tesla59 in #1927
- feat(core): handle sctp protocol and all protocols with raw socket and add protocol:all network rule by @rksharma95 in #1892
- fix(operator): snitch conditional mounts by @rksharma95 in #1936
- docs/FAQ: Talos support & FAQ update by @nyrahul in #1868
- fix(monitor): handle logs with process name empty by @rksharma95 in #1932
- fix(operator): use rbac rules conditionally using flag by @rksharma95 in #1940
- feat(core/containerd): refactor containerd interaction to v2 APIs by @daemon1024 in #1906
- chore: rename hsp by @Aryan-sharma11 in #1942
- fix(core): implement NRI handler by @dqsully in #1674
- chore(dependency): upgrade go dependencies and bump go version to 1.23.0 by @rksharma95 in #1938
New Contributors
- @bakito made their first contribution in #1904
- @janavenkat made their first contribution in #1754
- @Atharva-Kanherkar made their first contribution in #1937
- @jokestax made their first contribution in #1895
- @Affan-7 made their first contribution in #1699
Full Changelog: v1.4.9...v1.5.0
Contributors
bakito, dqsully, and 10 other contributors
Assets 23
v1.4.9
Changelog
- 3dee887 Merge pull request #1924 from kubearmor/fix-operator-bug-dec-24
- 13213a5 fix relay elasticsearch secret bug
- d6a6314 ca support
- e9a601e fix issues
- 1dba939 update operator to support elastic adaptor
- 96b0ad7 Merge pull request #1923 from rksharma95/fix-string-array-cast-issue
- 45be037 fix recommond policy typo
- a484a96 cast arguments data conditionally on type
- 2691fa2 Merge pull request #1862 from tesla59/tesla/non-k8s/dynamic-config
- 435cafc Merge branch 'main' into tesla/non-k8s/dynamic-config
- 6306430 core(unchestratedupdates): dynamically update host visibility
- b93b789 config: remove redundant assignment of DefaultPostureLogs
- 1f884a8 core: update HostSecurity Policy dynamically in unorchaestrated mode
- 0722c24 config: move EnforcerAlerts and DefaultPostureLogs to dynamic config
- db299d2 core: (unorchestratedUpdates) update alert and throttling configs with other dynamic configs
- 6ba254b core: validate posture and visiblity before dynamically loading
- 3880c40 core: update visbility dynamically
- 947b3eb core: move configWatcher to WatchConfigChanges()
- d3d0e70 config: reload global config when config file is updated