Releases: CheckPointSW/charts
2.8.0: AC assessment history, improve for 1.19+
- New Image Assurance agent, version 2.0.0: Add support for ACR scanning.
- New Admission Control Policy agent version 1.0.1, Enforcer agent version1.2.2: Collect data on historical API calls for improved verification (validate Admission Control rules based on operation history).
- Address Helm install warnings by removing deprecated Kubernetes objects.
2.8.0-ea: ACR scan support, AC assessment history, improve for 1.19+
IA 2.0.0: add ACR scan support
AC policy 1.0.1, AC enforcer 1.2.2: collect data for verification
AC GSL: build based on newer based image
remove deprecated objects so there will be no warnings
2.7.0: tanzu, crio-o, openshift, fluentbit configuration; update all agents
all: add Tanzu, CRI-O, and OpenShift support (except RP), move fluentbit configuration to secrets
AC enforcer 1.1.0: configure anti-affinity
AC GSL 1.1.0: update base image
Inventory 1.3.1: add telemetry
IA 1.2.0: use shiftleft and SGcli arguments from backend configuration, support CRI-O and OpenShift
RP daemon 0.0.489-1: fix issue on hosts with systemd
FL 0.4.0: remove docker dependency, run in host network, remove vulnerabilities from the base image by building from scratch, add telemetry, support CRI-O and OpenShift
2.5.2: runtime-deamon fix
runtime-daemon 0.0.489-1: fix issue on hosts with systemd
2.6.0-ea: FL remove docker dependency, AC: anti-affinity for replicas, inventory: telemetry, IA: improvements
flow logs 0.2.0: remove docker dependency, run in host network
admission control: configure anti-affinity for replicas to run on different nodes
inventory 1.3.1: add telemetry
image scan 1.1.0: improve scan configuration
2.5.1: inventory: support ingress in K8s 1.22+
2.5.1: inventory: support ingress in K8s 1.22+ (#66)
2.5.0: AC and IA update to 1.*; RP improve telemetry
IA:
- all agents 1.0.0: remove all packages including busybox, improve telemetry
RP:
- policy 0.3.0: report heartbeat and errors using new fluentbit sidecar
- daemon: fix fluentbit configurations
AC:
- policy 1.0.0: improved exclusions
- enforcer 1.1.0: added an ability to create exclusions on Pod for Pod Operations and improved telemetry
- GSL 1.0.0: updated dependent packages
2.4.0: IA memory limit, telemetry fix, update references to CP
IA: change memory limit for imagescan-engine to be max image size + 500MB
telemetry: AC and RP fix agent version
2.3.5: container runtime auto-detection, RP 0.0.489, IA 0.4.2
- container runtime auto-detection
- runtime-daemon 0.0.489: containerd support, reduced agent privileges, deny rules ("kill")
- imagescan 0.4.2: improved support for OCI images, certificate pinning
- (internal) monitoring & logs shipment enhancements
ea 2.0.9: update RP, IA and inventory agents
ea-2.0.9 2.0.9: update RP, IA and inventory agents (#46)