Skip to content

v1.1.0 — Security Hardening

Choose a tag to compare

@ajokunu ajokunu released this 27 Feb 19:53
· 26 commits to main since this release

What's Changed

Security hardening and compliance documentation release.

Added

  • cert-manager ClusterIssuer for automated self-signed certificate generation
  • NetworkPolicies with default-deny ingress across all 5 namespaces
  • TLS 1.2+ enforcement on Traefik with ECDHE cipher suites
  • Compliance documentation: ISO 27001, NIST 800-53, OWASP Top 10 for LLMs
  • Security contexts on all containers
  • MCP server hardening: request timeouts (10s), response truncation (50KB)

Changed

  • Bumped @modelcontextprotocol/sdk to ^1.9.0
  • Credentials moved from env vars to K8s Secrets

Full Changelog: v1.0.0...v1.1.0