Skip to content

1.0.24

Latest
Compare
Choose a tag to compare
@github-actions github-actions released this 17 Apr 01:03

Change log

1.0.24

  1. Use runtime-1 as the default cert name
  2. Make changes for Azure deployment

1.0.23

  1. Changes for Azure market place offer

1.0.22

  1. Create inline scan mode; Dont run redis, celery-worker, beat in inline scan mode

1.0.21

  1. Add support for gke autopilot
  2. Move images to global.azure for Azure k8s marketplace
  3. Remove dependency on runner image
  4. Use quay base images
  5. Remove rf-registry image

1.0.20

  1. Make webhooks fail open
  2. Ensure system works in fail open mode for redis
  3. Fix dockerfile issue
  4. Add initial version of rf-cmd

1.0.19

  1. Add fix for handling pods without label
  2. Add rf_username to configmap
  3. Add cluster_name to project dict
  4. Fix inline scan
  5. Add support for istio egress control
  6. Support slim installer fast builds
  7. Integrate clientside hardening tools
  8. Update redis to 7.2 from 6.2
  9. Add Openshift support by adding crio variant

1.0.18

  1. Add celery-beat for scheduling node changes
  2. Reduce CPU and mem consumption
  3. Add redis wait to avoid restarts
  4. Quay.io integration for helm repository, Container registry and Image pull secret

1.0.17

  1. Fix disabling monitoring and scanning using labels
  2. Remove tmp mount path
  3. Document error message timeouts for resock
  4. Make quay as default registry in helm chart
  5. Make TCP-IP as default communication mode
  6. Dont use hostPath in TCP-IP mode
  7. Use static download handler rtmf tar
  8. Create priority classes for daemonsets
  9. Change requests=limits for autopilot

1.0.16

  1. Fix stub type for prodmon hardening
  2. Use repo tags whenever possible for naming
  3. Fix memory/storage leak with upload_image option
  4. Fix prodmon hardening sleep sequence

1.0.15

  1. Add export image option
  2. Add azure storage support
  3. Fix bug related to celery-worker crash during restart
  4. Enable meta-copy by default

1.0.14

  1. Support non_privileged mode
  2. Push rf-monitor-init container in all nodes using daemonset
  3. Support for pulling docker image using image pull secret
  4. Support profiling for read only containers using BPF

1.0.13

  1. Fix install script to make it argument based and fail safe
  2. Support socket override path
  3. Improve scale by making webhook and api-server async
  4. Support namespace mode in installation

1.0.12

  1. Support gcloud Artifact Registry for load_image
  2. Handle read only filesystem gracefully
  3. Dont patch init-containers for readiness probe
  4. Add debug and vebose flags to installer
  5. Support security context difference between pod and container

1.0.11

  1. Support kubernetes environment variable expansion
  2. Handle new line characters in multi-line args in pod manifest

1.0.10

  1. Support for adding labels using -f option in installer
  2. Fix issue with pod as security context to run as non-root
  3. Add instructions as part of the installer

1.0.9

  1. Support deployment mode=namespace for Role only access
  2. Remove cert-manager dependency
  3. Support Rancher deployments
  4. Support Mac installation without docker
  5. Support azure, gcloud and aws for load_image

1.0.8

  1. Use crictl for CRI engines to handle discard_unpacked_layers
  2. Helm chart pull policy issues
  3. Add load_images.sh and improve install.sh for on-prem release
  4. Package cert-manager as helm chart