2.3.11

Changelog

• Updated module dependencies
• Fixed issue where vulnerabilities did not appear in Vulnerability View
• Made admission webhook timeout configurable

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.3.11.tar.gz

2.3.10

Changelog

• Updated module dependencies
• Fixed issue with scanning images whose image ID does not include image registry and repository

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.3.10.tar.gz

2.3.9

Changelog

• Updated module dependencies
• Fixed an issue where vulnerability scanning would allow more than expected jobs to run
• Built vulnerability scan job with more reliable network stack
• Fixed an issue where Runtime Security would fail in IPv6 clusters

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.3.9.tar.gz

2.3.8

Changelog

• Fixed an issue where scan jobs still fail to pull target private registry image despite an image secret being present.

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.3.8.tar.gz

2.3.7

Changelog

• Fixed an issue where vulerability scanning could fail in some of AKS clusters.
• When image secrets are used to pull target container images, scan jobs can fail because no image pull secret is specified. This release fixed this issue.
• Removed unnecessary permissions from RBAC roles.

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.3.7.tar.gz

2.3.6

Changelog

• Added general availability version of the Runtime Scanning feature. The Runtime Scanning feature will detect vulnerabilities in images that are running in Kubernetes.

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.3.6.tar.gz

2.3.5

Changelog

• Allowed admission webhook timeout to be configured
• Fixed various bugs in logging and terms/thirdparty files.

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.3.5.tar.gz

2.3.4

Changelog

• Support Gardener Kubernetes clusters

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.3.4.tar.gz

2.3.3

Changelog

• Upgrade software library versions

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.3.3.tar.gz

2.3.2

Changelog

• Support Bottlerocket as work nodes in Runtime Security. You will need extra settings in order to protect Bottlerocket nodes as mentioned in the README.

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.3.2.tar.gz