kubescape-operator-1.25.5

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• Add support for mapping extra CA certificates in Kubescape Helm chart by @slashben in #610
• Add kubescape offline capability by @matthyx in #611
• prepare new release by @matthyx in #612
• kubescape/operator@v0.2.68...v0.2.69
  • acknoledge that imagePullSecrets can contain multiple credentials
• kubescape/http-request@v0.2.9...v0.2.11
  • bump deps for vulnerabilities

Full Changelog: kubescape-operator-1.25.4...kubescape-operator-1.25.5

kubescape-operator-1.25.4

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• Feature/secretless setup by @slashben in #604
• added configmaps to node agent RBAC by @amirmalka in #605
• kubescape/kubescape@v3.0.24...v3.0.25
  • fix empty sarif document in CLI scans
• kubescape/operator@v0.2.66...v0.2.68
  • bump k8s-interface to fix GenerateInstanceID for statefulsets
• host-scanner
  • bump deps for vulns
• kubescape/storage@v0.0.154...v0.0.156
  • add option to return full spec to watch events
• kubescape/node-agent@v0.2.236...v0.2.238
  • fix node-agent on 5.4 kernels

Full Changelog: kubescape-operator-1.25.3...kubescape-operator-1.25.4

kubescape-operator-1.25.3

Kubescape is an E2E Kubernetes cluster security platform

• fix kubescape-volume for non-airgaped deployments
• kubescape/kubevuln@v0.3.57...v0.3.58
  • fix ImageHash in scanCVE when it only contains a hash
• kubescape/storage@v0.0.153...v0.0.154
  • add option to return full specs in GetList

kubescape-operator-1.25.2

Kubescape is an E2E Kubernetes cluster security platform

• fix otel collector port for host-scanner and storage
• add few rule bindings to node-agent
• fix mTLS option for storage
• kubescape/kubescape@v3.0.23...v3.0.24
  • add prerequisites command to CLI
• kubescape/operator@v0.2.65...v0.2.66
  • bump deps for vulns
• kubescape/kubevuln@v0.3.54...v0.3.57
  • bump deps for vulns
  • improve logs
  • fix SBOM version comparison with semver
• host-scanner
  • bump deps for vulns
• kubescape/storage@v0.0.150...v0.0.153
  • improve mTLS support
  • replace golang.org/x/exp/maps with maps from stdlib
• kubescape/node-agent@v0.2.227...v0.2.236
  • bump deps for vulns
  • reduce calls to api-server again
  • fix SetContainerInfo for initcontainers
  • fix object cache when runtime observability is disabled
  • use cri runtime for enrichment to get pod labels

kubescape-operator-1.25.1

Kubescape is an E2E Kubernetes cluster security platform

• kubevuln kubescape/kubevuln@v0.3.52...v0.3.54
  • add option to use default matchers
  • move scanID to annotations
• operator kubescape/operator@v0.2.63...v0.2.65
  • fix panic in cooldownqueue
• storage kubescape/storage@v0.0.148...v0.0.150
  • return metadata for GetList on virtual CRDs
  • avoid double RBAC checks when deployed behind api-server
• node-agent kubescape/node-agent@v0.2.210...v0.2.227
  • fix vulnerabilities
  • replace Kubernetes enricher
  • skip previously running containers for relevancy

kubescape-operator-1.25.0

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• deprecate gateway by @amirmalka in #565
• Fix serviceScanConfig.enabled whitespace by @explsd in #578
• Added node-agent mounts by @afek854 in #579
• fix: annotation for node-agent should use dynamic name by @cyberox in #584
• fix: stop synchronizer from retrying connection on invalid credentials by @amirmalka in #585
• Update E2E tests by @amirmalka in #587
• Update missing tests values by @amirmalka in #589
• added necessary resources to ClusterRole when workload metrics are enabled by @hebestreit in #588
• Ks recurring body configurable by @Bezbran in #590
• enable air-gapped scans by @matthyx in #582
• Prepare new release 1.25.0 by @amirmalka in #586

New Contributors

• @explsd made their first contribution in #578
• @cyberox made their first contribution in #584

Full Changelog: kubescape-operator-1.24.2...kubescape-operator-1.25.0

kubescape-operator-1.24.2

Kubescape is an E2E Kubernetes cluster security platform

Starting with Helm chart version 1.24.x, ApplicationProfiles are used for relevancy instead of filtered SBOMs, requiring new annotations. Upgrading from older versions will delete any existing ApplicationProfiles that lack the required WLID or InstanceID annotations (unless relevancy for vulnerability scanning capability is disabled). Additionally, please note that a workload restart will be required.

What's Changed

• operator

  Full Changelog

  • chore(deps): Bump golang.org/x/crypto from 0.27.0 to 0.31.0 by @dependabot in operator#274
  • bump dependencies to fix vulnerabilities by @matthyx in operator#275
  • fix registry scanning bug for empty repositories by @refaelm92 in operator#276
  • fix: trigger ApplicationProfile scan (relevancy) whenever the ApplicationProfile is ready by @amirmalka in operator#277
  • fix: scan only complete ApplicationProfiles by @amirmalka in operator#278

• kubevuln

  Full Changelog

  • bump vulnerable dependency by @matthyx in kubevuln#263
  • add registry image count attribute by @refaelm92 in kubevuln#264
  • fix: scan only complete ApplicationProfiles, fixed InstanceID and ImageId by @amirmalka in kubevuln#266

• storage

  Full Changelog

  • Bump depencencies by @matthyx in storage#159
  • Cleanup ApplicationProfiles with missing annotations when relevancy is enabled by @amirmalka in storage#182

Full Changelog: kubescape-operator-1.24.1...kubescape-operator-1.24.2

kubescape-operator-1.24.1

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• allow prometheus-exporter to export metrics on workload level by @hebestreit in #573
• fixed copy paste mistake for Prometheus Exporter volumes by @hebestreit in #568
• Fix scans from applicationprofiles by @matthyx in kubescape/kubevuln#262

New Contributors

• @hebestreit made their first contribution in #573

Full Changelog: kubescape-operator-1.24.0...kubescape-operator-1.24.1

kubescape-operator-1.24.0

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• use application profile instead of sbomp for relevancy by @matthyx in #509
• bump pre-release images by @matthyx in #571
• prepare for new release by @matthyx in #572

Full Changelog: kubescape-operator-1.23.5...kubescape-operator-1.24.0

kubescape-operator-1.23.5

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• remove kollector by @matthyx in #559
• update readme and diagrams by @matthyx in #560
• Commenting 2 rules and update unittest by @amitschendel in #564
• bump components for cve, add istio v1beta1 crds by @matthyx in #570

Full Changelog: kubescape-operator-1.23.4...kubescape-operator-1.23.5