2.2.4

Changelog

• Add runtime security support for 5.8, 5.10 and 5.11 kernels

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.2.4.tar.gz

2.2.3

Changelog

• Fixed issue where container metadata was not available in runtime security events triggered by short-lived containers

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.2.3.tar.gz

2.2.2

Changelog

• Added proxy support
• Fixed an issue where runtime mitigations were not applied when multiple runtime mitigations were requested at the same time
• Added additional runtime detection information to runtime security events

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.2.2.tar.gz

2.2.1

Changelog

• Updated third party license file

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.2.1.tar.gz

2.2.0

Changelog

• Added support for isolate and terminate mitigations after detection of runtime security events
• Updated Trend Micro license agreement
• Fixed runtime event aggregation issue when the same rule is triggered from multiple containers
• Deprecated enableKubeSystem and scout.exclusion.namespaces in values.yaml in favour of cloudOne.exclusion.namespaces to allow for multiple namespaces to be excluded (kube-system by default) from detections

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.2.0.tar.gz

2.1.4

Changelog

• Supported downloading components for runtime security feature.
• Added more Linux kernels support for runtime security feature.

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.1.4.tar.gz

2.1.3

Changelog

• Fixed an issue where runtime security (Scout) cannot recover automatically from connection errors.
• Added runtime security support for the following kernels
  • 5.4.144-69.257.amzn2.x86_64 (Amazon Linux2)
  • 5.4.149-73.259.amzn2.x86_64 (Amazon Linux2)
  • 4.18.0-305.17.1.el8_4.x86_64 (RHCOS)
  • 4.18.0-305.19.1.el8_4.x86_64 (RHCOS)

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.1.3.tar.gz

2.1.2

Changelog

• Fixed an issue where runtime events would appear out of order
• Reduced container image size for runtime component

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.1.2.tar.gz

2.1.1

Changelog

• Fixed an issue with detection of privileged containers on OpenShift
• Reduced noise from falco container logs

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.1.1.tar.gz

2.1.0

Changelog

• Container Security introduces the next iteration of runtime security with a preview of the runtime visibility and control feature. This runtime security feature provides visibility and mitigation of container activity that violates a customizable set of rules. This preview is available with a set of pre-defined rules that provide visibility into MITRE ATT&CK framework tactics for containers as well as container drift detection. The preview is compatible with Kubernetes and supports Amazon EKS, Microsoft Azure AKS, Google GKE, as well as OpenShift.

Upgrade instructions

Sample upgrade command:

helm upgrade \
  --values overrides.yaml \
  --namespace trendmicro-system \
  trendmicro \
  https://github.com/trendmicro/cloudone-container-security-helm/archive/2.1.0.tar.gz