Releases: 5GSEC/nimbus
Releases · 5GSEC/nimbus
v0.4
What's Changed
- docs: Update user-facing docs by @anurag-rajawat in #219
- docs: Fix broken links by @anurag-rajawat in #229
- chore(deps): Bump github.com/google/cel-go from 0.20.1 to 0.21.0 by @dependabot in #234
- chore(deps): Bump anchore/scan-action from 3 to 4 by @dependabot in #222
- (feat): Add Fluent-bit to K8tls by @JonesJefferson in #233
- feat: provide runtimeclass via intent by @VedRatan in #246
- fix(adapter): Update intentID to assessTLS from ensureTLS by @anurag-rajawat in #247
- fix(charts): Changed to Deployment from DaemonSet for adapters by @anurag-rajawat in #248
- deps: Update deps to fix kyverno critical vulnerability by @anurag-rajawat in #236
- fix: select all resources with the given same label by @VedRatan in #243
- fix: non-dynamic CIDR updation per node while creating netpol by @VedRatan in #257
- fix(adapter): Reduce k8tls adapter permissions by @anurag-rajawat in #249
- fix(CI): Update image tag in helm charts & build and Makefile updates by @anurag-rajawat in #256
- fix(CI): Add branch name in auto-commit job by @anurag-rajawat in #258
- fix(CI): Add step to create PR instead of direct commit by @anurag-rajawat in #260
- fix(CI): Grant contents write permission to job by @anurag-rajawat in #261
- [skip ci] Update Helm Chart To by @github-actions in #262
- fix(CI): Add nimbus-k8tls in release-adapters-image job by @anurag-rajawat in #263
New Contributors
- @JonesJefferson made their first contribution in #233
- @github-actions made their first contribution in #262
Full Changelog: v0.3...v0.4
v0.3
What's Changed
- [feat]: added exploit pfa intent by @VedRatan in #120
- chore(deps): Bump golangci/golangci-lint-action from 3 to 6 by @dependabot in #125
- feat: Feature to select namespaces (match or exclude), resources within a namespace, and nodes in ClusterIntentBinding by @shivaccuknox in #108
- fix: nimbus policy status issue by @shivaccuknox in #180
- refactored privilege pss logic by @VedRatan in #181
- feat(adapter): Add k8tls adapter by @anurag-rajawat in #131
- fix: Modify id of exploit pfa to lower camel case to make it inline with other ids by @shivaccuknox in #189
- (feat): denyExternalNetworkAccess Intent by @VedRatan in #190
- Coco kyverno by @VedRatan in #186
- feat(deployments): Add option to enable auto deployment of adpaters by @anurag-rajawat in #195
- (update): usr/lib removal by @VedRatan in #192
- (bug): make role target update by @VedRatan in #191
- fix(nimbus-k8tls): Remove ownerref from ns by @anurag-rajawat in #197
- (feat): added ns in target spec in mutate rule by @VedRatan in #196
- (chore): Mutate logic update by @VedRatan in #198
- (fix): added roles for nimbus-kyverno by @VedRatan in #199
- (bug): logger panic fix by @VedRatan in #200
- (feat): updated gha to trigger on test update by @VedRatan in #204
- (fix) Using a github app to push helm charts by @shivaccuknox in #201
- fix: release helm chart failing due to invalid token by @shivaccuknox in #209
- (fix): Changed PreventExecFrpolicy from file to process by @VedRatan in #208
- (feat): added status based policy creation logic by @VedRatan in #212
- fix: rename chainsaw tests by @shivaccuknox in #213
- fix: Modifying the trigger for the mutateexisting policy to the Nimbus policy by @shivaccuknox in #216
- docs: updates for release by @shivaccuknox in #217
Full Changelog: v0.2...v0.3
v0.3-alpha.1
fix: rename chainsaw tests (#213) * - Renaming tests - Corrected the status field in show status * - makefile controller-gen paths fixed - crd changes to get the correct status * - Separated the rbac from crd generation so that unnecesary roles are not given to nimbus-operator --------- Co-authored-by: Ved Ratan <82467006+VedRatan@users.noreply.github.com>
v0.2
What's Changed
- (feat):Kyverno Adapter by @VedRatan in #77
- (enhancement): Added relative dependencies for Netpol-Adapter by @VedRatan in #87
- fix(nimbus-netpol): Fix docker-buildx target to point correct context by @anurag-rajawat in #88
- (feat): Added escape_to_host by @VedRatan in #79
- (enhancement): added helm chart by @VedRatan in #92
- fix(adapters): Fix panic due to accessing empty ownerrefs slice by @anurag-rajawat in #99
- (feat): added profile params support and labels support by @VedRatan in #97
- (feat): added e2e tests by @VedRatan in #96
- [test]: added chainsaw tests for nimbus-kyverno-adapter by @VedRatan in #106
- added examples for params in the context of escape-to-host by @VedRatan in #107
- [docs]: added caldera docs by @VedRatan in #117
- updated the caldera dir by @VedRatan in #118
- fix(CI): Optimized workflows to build images based on file changes by @anurag-rajawat in #119
- chore(deps): Bump actions/setup-go from 4 to 5 by @dependabot in #129
- chore(deps): Bump github/codeql-action from 2 to 3 by @dependabot in #130
- chore(deps): Bump apache/skywalking-eyes from a790ab8dd23a7f861c18bd6aaa9b012e3a234bce to 3ea9df11bb3a5a85665377d1fd10c02edecf2c40 by @dependabot in #128
- chore(deps): Bump azure/setup-helm from 3 to 4 by @dependabot in #127
- chore(deps): Bump github.com/google/cel-go from 0.18.2 to 0.20.1 by @dependabot in #126
- fix(CI): Fix image tag by @anurag-rajawat in #134
New Contributors
- @dependabot made their first contribution in #129
Full Changelog: v0.1...v0.2
v0.1
What's Changed
- PR1 by @seungsoo-lee in #1
- docs: updates, restructuring by @nyrahul in #3
- Fix make build by @seungsoo-lee in #4
- Code revision by @seungsoo-lee in #6
- rename k8s resources by @nyrahul in #7
- ci: Add initial workflows by @anurag-rajawat in #8
- chore: Add pull request template by @anurag-rajawat in #9
- fix: golangci-lint violations by @anurag-rajawat in #11
- fix(kubearmor): fix system policy generation by @rajaSahil in #14
- fix(ci): Fix latest release happening on forks by @anurag-rajawat in #17
- fix: implicit memory aliasing violation by @b0m313 in #13
- fix(nimbus): fix api and directory structure by @rajaSahil in #18
- fix(crd): fixes securityintent crd and dockerfile by @rajaSahil in #19
- feat(ci): Add build image job for PR checks by @anurag-rajawat in #20
- fix: add "recursive" field to the securityintent crd by @shivaccuknox in #21
- fix(nimbus): add fromSource field to network policy in SecurityIntent CRD by @shivaccuknox in #22
- FIx implementation bugs by @seungsoo-lee in #26
- fix(ci): Restructured directories to resolve CI failures by @anurag-rajawat in #27
- feat: Add a cleanup script that can delete all resources (running the… by @seungsoo-lee in #32
- feat(core)!: Introduce two new CRDs and update existing ones by @anurag-rajawat in #35
- feat: Add owner reference linkage for adapter policy and strict mode handling by @seungsoo-lee in #37
- feat: Add helm chart for nimbus by @anurag-rajawat in #38
- feat: Add Network Policy adapter by @anurag-rajawat in #39
- feat(ci): Add build-adapters-image job by @anurag-rajawat in #42
- feat: Add helm chart for nimbus-netpol adapter by @anurag-rajawat in #43
- feat(ci): Add release charts job by @anurag-rajawat in #44
- fix(adapter): Add KSP for DNSManipulation by @anurag-rajawat in #46
- docs: Update user-facing docs by @anurag-rajawat in #47
- docs: Update quick-tutorials and examples by @anurag-rajawat in #48
- feat(adapters): Reconcilation for native policies by @anurag-rajawat in #53
- chore(deps): Update 5GSEC/nimbus digest to 624660f in adapters by @anurag-rajawat in #54
- fix: Update rbac and helm charts by @anurag-rajawat in #55
- Feat(core): Support to CEL creation by @seungsoo-lee in #58
- fix(core): Update controllers to update CRDs status by @anurag-rajawat in #56
- fix(adapters): Update adapters to update their policies info by @anurag-rajawat in #64
- feat(deployments): Update helm charts by @anurag-rajawat in #65
- fix(adapters): Update SwDeploymentTools KSP to include apk pkg manager by @anurag-rajawat in #67
- added integration tests by @VedRatan in #66
- Fix #59: Fix CEL bug by @seungsoo-lee in #72
- fix(core): Handle SecurityIntent update and deletion by @anurag-rajawat in #73
- feat: Add various CEL to label conversions by @seungsoo-lee in #78
- fix(adapters): Update NP status on SecurityIntent update and deletion by @anurag-rajawat in #75
New Contributors
- @seungsoo-lee made their first contribution in #1
- @nyrahul made their first contribution in #3
- @anurag-rajawat made their first contribution in #8
- @rajaSahil made their first contribution in #14
- @b0m313 made their first contribution in #13
- @shivaccuknox made their first contribution in #21
- @VedRatan made their first contribution in #66
Full Changelog: https://github.com/5GSEC/nimbus/commits/v0.1