kubescape-operator-1.29.11

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• host-scanner daemonset installation failure fix by @mandronic in #756
• allow disable of operator by @vgw-chriskruger in #759
• fix: add capabilities.continuousScan by @sule26 in #703
• kubescape/kubescape@v3.0.44...v3.0.45
  • Bump github.com/nwaples/rardecode/v2 from 2.1.1 to 2.2.0 by @dependabot[bot] in kubescape/kubescape#1881
  • fixed "404" URL issue for command $kubescape scan. by @Mujib-Ahasan in kubescape/kubescape#1884
  • host-scanner daemonset installation failure fix by @mandronic in kubescape/kubescape#1886
  • fix: --format sarif logs as expected by @Mujib-Ahasan in kubescape/kubescape#1887
  • Bump github.com/containerd/containerd/v2 from 2.0.5 to 2.0.7 by @dependabot[bot] in kubescape/kubescape#1888
  • Bump github.com/containerd/containerd from 1.7.28 to 1.7.29 by @dependabot[bot] in kubescape/kubescape#1889
  • Bump github.com/opencontainers/selinux from 1.12.0 to 1.13.0 by @dependabot[bot] in kubescape/kubescape#1890
• kubescape/operator@v0.2.109...v0.2.113
  • add a mock exporter when httpexporter isn't configured by @matthyx in kubescape/operator#335
  • Update dependencies and Go version in go.mod and go.sum by @jnathangreeg in kubescape/operator#336
  • chore(deps): Bump github.com/containerd/containerd from 1.7.28 to 1.7.29 by @dependabot[bot] in kubescape/operator#337
  • chore(deps): Bump github.com/opencontainers/selinux from 1.12.0 to 1.13.0 by @dependabot[bot] in kubescape/operator#338
• kubescape/kubevuln@v0.3.93...v0.3.97
  • Bump github.com/nwaples/rardecode/v2 from 2.1.1 to 2.2.0 by @dependabot[bot] in kubescape/kubevuln#311
  • bump go to 1.24.9 by @matthyx in kubescape/kubevuln#312
  • Bump github.com/containerd/containerd from 1.7.28 to 1.7.29 by @dependabot[bot] in kubescape/kubevuln#313
  • add qemu and buildx setups to offline db workflow by @matthyx in kubescape/kubevuln#314
  • Bump github.com/opencontainers/selinux from 1.12.0 to 1.13.0 by @dependabot[bot] in kubescape/kubevuln#315
• kubescape/storage@v0.0.221...v0.0.224
  • bump go to 1.24.9 by @matthyx in kubescape/storage#260
  • chore(deps): Bump github.com/containerd/containerd from 1.7.27 to 1.7.29 in /tests/integration-test-suite by @dependabot[bot] in kubescape/storage#261
  • chore(deps): Bump github.com/opencontainers/selinux from 1.12.0 to 1.13.0 in /tests/integration-test-suite by @dependabot[bot] in kubescape/storage#263
• kubescape/node-agent@v0.2.394...v0.2.398
  • Bump github.com/nwaples/rardecode/v2 from 2.1.0 to 2.2.0 by @dependabot[bot] in kubescape/node-agent#655
  • allow specifying wl profiles in labels by @matthyx in kubescape/node-agent#612
  • Bump github.com/containerd/containerd from 1.7.28 to 1.7.29 by @dependabot[bot] in kubescape/node-agent#657
  • Bump github.com/opencontainers/selinux from 1.12.0 to 1.13.0 by @dependabot[bot] in kubescape/node-agent#658
• kubescape/synchronizer@v0.0.116...v0.0.118
  • Bump github.com/containerd/containerd from 1.7.27 to 1.7.29 by @dependabot[bot] in kubescape/synchronizer#125
  • Bump github.com/ulikunitz/xz from v0.5.14 to v0.5.15 by @matthyx in kubescape/synchronizer#126
• kubescape/http-request@v0.2.14...v0.2.15
  • bump go to 1.24.9 by @matthyx in kubescape/http-request#19
• kubescape/prometheus-exporter@v0.2.8...v0.2.10
  • Bump github.com/containerd/containerd from 1.7.27 to 1.7.29 by @dependabot[bot] in kubescape/prometheus-exporter#37
  • Bump github.com/ulikunitz/xz from v0.5.14 to v0.5.15 by @matthyx in kubescape/prometheus-exporter#38

New Contributors

• @mandronic made their first contribution in #756
• @vgw-chriskruger made their first contribution in #759
• @sule26 made their first contribution in #703

Full Changelog: kubescape-operator-1.29.10...kubescape-operator-1.29.11

kubescape-operator-1.29.10

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• kubescape/kubescape@v3.0.41...v3.0.42
  • fix: improve error handling in hostscanner pod validation by @matthyx in kubescape/kubescape#1880
• kubescape/storage@v0.0.220...v0.0.221
  • bump k8s version by @matthyx in kubescape/storage#259

Full Changelog: kubescape-operator-1.29.9...kubescape-operator-1.29.10

kubescape-operator-1.29.9

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• trigger scans on ContainerProfiles rather than ApplicationProfiles
• excludeLabels supports multiple values for a single label key
• kubescape/operator@v0.2.108...v0.2.109
  • trigger AP scan on ContainerProfiles by @matthyx in kubescape/operator#333
• kubescape/kubevuln@v0.3.92...v0.3.93
  • trigger AP scan on ContainerProfiles by @matthyx in kubescape/kubevuln#310
• kubescape/node-agent@v0.2.393...v0.2.394
  • change excludeLabels to be a map[string][]string by @matthyx in kubescape/node-agent#651

Full Changelog: kubescape-operator-1.29.8...kubescape-operator-1.29.9

kubescape-operator-1.29.8

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• bump kubevuln to fix relevancy by @matthyx in #748
• kubescape/kubevuln@v0.3.91...v0.3.92
  • fix distro in packages before matching vulns by @matthyx in kubescape/kubevuln#309

Full Changelog: kubescape-operator-1.29.7...kubescape-operator-1.29.8

kubescape-operator-1.29.7

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• update grype and syft versions by @matthyx in #743
• kubescape/kubescape@v3.0.40...v3.0.41
  • fix post-release workflow by @amirmalka in kubescape/kubescape#1873
  • Fixed issue #1800 : Added parameterNotFoundAction in spec.paramRef while creating policy binding by @cx-anjali-deore in kubescape/kubescape#1876
  • fix: Don't run scan in installation script by @kkrypt0nn in kubescape/kubescape#1875
  • migrate to grype v0.99.1 by @matthyx in kubescape/kubescape#1877
• kubescape/operator@v0.2.103...v0.2.108
  • make first tick immediately in rules updater loop by @matthyx in kubescape/operator#328
  • simplify list and watch operations for scalability by @matthyx in kubescape/operator#329
  • also skip the list pods when we don't need it by @matthyx in kubescape/operator#330
  • stop filtering AP on completion status by @matthyx in kubescape/operator#331
  • add an option to only scan AP with matching pods by @matthyx in kubescape/operator#332
• kubescape/kubevuln@v0.3.86...v0.3.91
  • fix VEX name (should use filtered CVE one) by @matthyx in kubescape/kubevuln#304
  • bump k8s-interface by @matthyx in kubescape/kubevuln#306
  • add a config toggle for partialRelevancy by @matthyx in kubescape/kubevuln#307
  • migrate to grype v0.99.1 by @matthyx in kubescape/kubevuln#305
  • fix SBOM generation (bad context) by @matthyx in kubescape/kubevuln#308
• kubescape/storage@v0.0.212...v0.0.220
  • use native listers to make discovery more efficient by @matthyx in kubescape/storage#249
  • fetch resources and cleanup per namespace by @matthyx in kubescape/storage#251
  • use ns list for cleanup from SQLite rather than cluster by @matthyx in kubescape/storage#252
  • improve network policy generation by handling duplicate ports and policy references by @jnathangreeg in kubescape/storage#255
  • fixing the nn annotations check by @jnathangreeg in kubescape/storage#256
  • migrate to grype v0.99.1 by @matthyx in kubescape/storage#257
• kubescape/node-agent@v0.2.390...v0.2.393
  • fix: handle exit signals and log appropriate messages by @matthyx in kubescape/node-agent#646
  • Initial implementation of the FIM module by @slashben in kubescape/node-agent#638
  • migrate to grype v0.99.1 by @matthyx in kubescape/node-agent#649
• requires a new tag for Grype offline DB quay.io/kubescape/grype-offline-db:v6-latest

Full Changelog: kubescape-operator-1.29.6...kubescape-operator-1.29.7

kubescape-operator-0.29.6

Kubescape is an E2E Kubernetes cluster security platform

kubescape-operator-1.29.6

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• update operator to add rulesUpdateConfig
• add missing securityContext for initContainers
• kubescape/kubescape@v3.0.39...v3.0.40
  • Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @dependabot[bot] in kubescape/kubescape#1868
  • Issue 1817 fix: Show container name in Assisted remediation by @cx-anjali-deore in kubescape/kubescape#1867
  • fix(imagescan): use all targets in exceptions by @htsr in kubescape/kubescape#1869
  • replace olekukonko/tablewriter with jedib0t/go-pretty by @matthyx in kubescape/kubescape#1866
  • feat: add default matchers option to image scanning by @aadarsh-nagrath in kubescape/kubescape#1857
• kubescape/operator@v0.2.101...v0.2.103
  • added rule updater by @afek854 in kubescape/operator#324
  • chore(deps): Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @dependabot[bot] in kubescape/operator#327
• kubescape/kubevuln@v0.3.85...v0.3.86
  • Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @dependabot[bot] in kubescape/kubevuln#302
• kubescape/storage@v0.0.210...v0.0.212
  • chore(deps): Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @dependabot[bot] in kubescape/storage#247
  • bump xz and mapstructure in test-suite by @matthyx in kubescape/storage#248
• kubescape/node-agent@v0.2.386...v0.2.390
  • Removing unused pkg by @amitschendel in kubescape/node-agent#643
  • Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @dependabot[bot] in kubescape/node-agent#644
  • fix: handle nil case in layer size calculation and add unit tests by @matthyx in kubescape/node-agent#645
• kubescape/synchronizer@v0.0.115...v0.0.116
  • Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @dependabot[bot] in kubescape/synchronizer#123

Full Changelog: kubescape-operator-1.29.5...kubescape-operator-1.29.6

kubescape-operator-1.29.5

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• restore missing subresources in operatorcommand CRD by @matthyx in #738

Full Changelog: kubescape-operator-1.29.4...kubescape-operator-1.29.5

kubescape-operator-1.29.4

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• disable service-discovery initcontainers if not needed by @matthyx in #737

Full Changelog: kubescape-operator-1.29.3...kubescape-operator-1.29.4

kubescape-operator-1.29.3

Kubescape is an E2E Kubernetes cluster security platform

What's Changed

• bump kubescape, prepare new release by @matthyx in #735
• kubescape/kubescape@v3.0.38...v3.0.39
  • Issue 1284 fix: new approach implemented by @yehudahtor in kubescape/kubescape#1863
  • Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 in /httphandler by @dependabot[bot] in kubescape/kubescape#1864
  • don't read services from configmap, use file kubescape/kubescape@79207f6

Full Changelog: kubescape-operator-1.29.2...kubescape-operator-1.29.3