Repository navigation
v1.1.0 — Security Hardening
What's Changed
Security hardening and compliance documentation release.
Added
- cert-manager ClusterIssuer for automated self-signed certificate generation
- NetworkPolicies with default-deny ingress across all 5 namespaces
- TLS 1.2+ enforcement on Traefik with ECDHE cipher suites
- Compliance documentation: ISO 27001, NIST 800-53, OWASP Top 10 for LLMs
- Security contexts on all containers
- MCP server hardening: request timeouts (10s), response truncation (50KB)
Changed
- Bumped
@modelcontextprotocol/sdkto ^1.9.0 - Credentials moved from env vars to K8s Secrets
Full Changelog: v1.0.0...v1.1.0