KubeArmor Versions Save

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).

v1.3.5

3 weeks ago

What's Changed

chore(CI): automate marketplace release by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1718
fix(CI): fix marketplace ci by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1734
docs: updating kubearmor use-cases by @nyrahul in https://github.com/kubearmor/KubeArmor/pull/1722
fix(CI): fix marketplace helm chart publish job by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1737
feat : try restarting ka service in case it fails by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1738
fix: systemd directive RestartSec by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1740
feat:added signed releases by @KrishAryan in https://github.com/kubearmor/KubeArmor/pull/1739

New Contributors

@KrishAryan made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1739

Full Changelog: https://github.com/kubearmor/KubeArmor/compare/v1.3.4...v1.3.5

v1.3.4

3 weeks ago

What's Changed

Update STABLE-RELEASE to v1.3.2 by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1690
[skip ci] Update Helm Chart To v1.3.2 by @github-actions in https://github.com/kubearmor/KubeArmor/pull/1691
fix:Update Controller Makefile to include Helm CRD and update CRDs by @sratslla in https://github.com/kubearmor/KubeArmor/pull/1694
feat(core): add label/regex matching in non-k8s by @DelusionalOptimist in https://github.com/kubearmor/KubeArmor/pull/1704
fix(workflow):OSSF run analysis version bumped to v2.3.1 by @rootxrishabh in https://github.com/kubearmor/KubeArmor/pull/1707
fix(grpc): extend grpc maxrecvmsg size for cri handlers by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1709
fix(enforcer): suppress permission denied alerts for any non bpflsm enforcer by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1708
fix(CI): snyk/govuln failures by updating to go 1.21.9 and other dep udpates by @DelusionalOptimist in https://github.com/kubearmor/KubeArmor/pull/1713
Add objectfile for system_monitor in release packages by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1711
refactor(chore): fix typo in group owner by @Ankurk99 in https://github.com/kubearmor/KubeArmor/pull/1719
feat(gRPC): add tls configurations to the operator and helm by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1695
fix(ci): check for controller readiness after restart by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1726

Full Changelog: https://github.com/kubearmor/KubeArmor/compare/v1.3.2...v1.3.4

v1.3.3

4 weeks ago

What's Changed

Update STABLE-RELEASE to v1.3.2 by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1690
[skip ci] Update Helm Chart To v1.3.2 by @github-actions in https://github.com/kubearmor/KubeArmor/pull/1691
fix:Update Controller Makefile to include Helm CRD and update CRDs by @sratslla in https://github.com/kubearmor/KubeArmor/pull/1694
feat(core): add label/regex matching in non-k8s by @DelusionalOptimist in https://github.com/kubearmor/KubeArmor/pull/1704
fix(workflow):OSSF run analysis version bumped to v2.3.1 by @rootxrishabh in https://github.com/kubearmor/KubeArmor/pull/1707
fix(grpc): extend grpc maxrecvmsg size for cri handlers by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1709
fix(enforcer): suppress permission denied alerts for any non bpflsm enforcer by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1708
fix(CI): snyk/govuln failures by updating to go 1.21.9 and other dep udpates by @DelusionalOptimist in https://github.com/kubearmor/KubeArmor/pull/1713
Add objectfile for system_monitor in release packages by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1711
refactor(chore): fix typo in group owner by @Ankurk99 in https://github.com/kubearmor/KubeArmor/pull/1719
feat(gRPC): add tls configurations to the operator and helm by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1695

Full Changelog: https://github.com/kubearmor/KubeArmor/compare/v1.3.2...v1.3.3

v1.3.2

2 months ago

What's Changed

fix(core): fix panic in container IP detection by @DelusionalOptimist in https://github.com/kubearmor/KubeArmor/pull/1677
fix(bpflsm/alert): missing procname in proc alerts by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1679
fix(core): filter watched nodes and pods server-side by @dqsully in https://github.com/kubearmor/KubeArmor/pull/1676
fix(operator): update kubearmor-scc to allow using custom seccomprofile on OpenShift by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1684
chore(helm): use version tag for operator image by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1687
fix(enforcer/bpflsm): panic during bpflsm cleanup by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1686
fix(seccomp): Seccomp default to false and ARM related changes by @PrimalPimmy in https://github.com/kubearmor/KubeArmor/pull/1681
fix(snitch) : check Apparmor Fs & available lsms to set enforcer by @Prateeknandle in https://github.com/kubearmor/KubeArmor/pull/1689
fix(contribution): Update Kubernetes apt repository used in contribution guide by @AbdelrahmanElawady in https://github.com/kubearmor/KubeArmor/pull/1685
feat: Added column in ksp and hsp -owide by @sratslla in https://github.com/kubearmor/KubeArmor/pull/1683

New Contributors

@AbdelrahmanElawady made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1685
@sratslla made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1683

Full Changelog: https://github.com/kubearmor/KubeArmor/compare/v1.3.1...v1.3.2

v1.3.1

2 months ago

What's Changed

Update STABLE-RELEASE to 1.2.1 by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1621
[skip ci] Update Helm Chart To v1.2.1 by @github-actions in https://github.com/kubearmor/KubeArmor/pull/1622
Add CodeQL for SAST by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1623
feat: Add capabilities support for BPFLSM by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1543
fix : Missing process name in bpflsm alerts by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1628
fix : adding header for signal_struct by @Prateeknandle in https://github.com/kubearmor/KubeArmor/pull/1637
fix(core): Issues with host policy application by @DelusionalOptimist in https://github.com/kubearmor/KubeArmor/pull/1640
fix(CI): Change latest release CI to containerd runtime by @PrimalPimmy in https://github.com/kubearmor/KubeArmor/pull/1632
fix(core): annotation logic for static pods by @Shreyas220 in https://github.com/kubearmor/KubeArmor/pull/1641
fix(audit) : readOnly audit alerts by @Prateeknandle in https://github.com/kubearmor/KubeArmor/pull/1626
chore(deps): update apache/skywalking-eyes digest to ed436a5 by @renovate in https://github.com/kubearmor/KubeArmor/pull/1597
Use larger runners to speed up cross platform builds by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1647
feat(gRPC): Implement m-TLS Support using self-signed certificate by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1526
Update the Go version to 1.21 by @MeenuyD in https://github.com/kubearmor/KubeArmor/pull/1642
chore(tests): change logic to get target alert for syscall test suite by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1649
fix(core): ignore duplicate ADDED pod watch events by @dqsully in https://github.com/kubearmor/KubeArmor/pull/1553
docs: support for Alibaba Cloud by @nyrahul in https://github.com/kubearmor/KubeArmor/pull/1651
fix: updater to install bpf-lsm in appropriate grub config on latest RHEL env by @nyrahul in https://github.com/kubearmor/KubeArmor/pull/1654
fix(core): update container maps with secpol when containers are detected later than k8s event by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1660
fix(cert): read ca crt file only with externalcertloader by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1656
updated go version to 1.21.8 by @VedRatan in https://github.com/kubearmor/KubeArmor/pull/1663
Add execname support by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1664
fix(core): fix a couple race conditions by @dqsully in https://github.com/kubearmor/KubeArmor/pull/1655
fix : owner info available for every log by @Prateeknandle in https://github.com/kubearmor/KubeArmor/pull/1648
fix(operator): add OwnerReference for controller by @rootxrishabh in https://github.com/kubearmor/KubeArmor/pull/1659
fix(monitor): use bpf map of type hash for visibility map by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1666
fix : lenient white list policies by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1665
feat(core): Seccomp Profile for Kubearmor by @PrimalPimmy in https://github.com/kubearmor/KubeArmor/pull/1661
Add Maintainers to MAINTAINERS.md by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1671
chore(controller): update kube-rbac-proxy image by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1670
Update ci-systemd-release.yml by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1672

New Contributors

@dqsully made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1553

Full Changelog: https://github.com/kubearmor/KubeArmor/compare/v1.2.1...v1.3.1

v1.2.1

3 months ago

What's Changed

update stable version to 1.2.0 by @Shreyas220 in https://github.com/kubearmor/KubeArmor/pull/1593
[skip ci] Update Helm Chart To v1.2.0 by @github-actions in https://github.com/kubearmor/KubeArmor/pull/1594
Update imports by @rootxrishabh in https://github.com/kubearmor/KubeArmor/pull/1595
docs(URL): Slack Invite URL update in SECURITY.md and README.md file by @Aditya-150 in https://github.com/kubearmor/KubeArmor/pull/1599
(docs): Updated getting started guide for file visibility by @PrimalPimmy in https://github.com/kubearmor/KubeArmor/pull/1604
Duplicate imports removed by @rootxrishabh in https://github.com/kubearmor/KubeArmor/pull/1602
chore: update vagrant setup scripts + sync packages by @DelusionalOptimist in https://github.com/kubearmor/KubeArmor/pull/1612
Fix : Pods not being annotated with kubearmor-policy=enabled by Kubearmor controller by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1610
fix(crd): add omitempty in spec for crds by @rajaSahil in https://github.com/kubearmor/KubeArmor/pull/1547
fix(monitor):handling cwd & tty for older kernel version by @Prateeknandle in https://github.com/kubearmor/KubeArmor/pull/1608
execute govulncheck in CI by @kranurag7 in https://github.com/kubearmor/KubeArmor/pull/1585
docs: AnyLog as adopter by @nyrahul in https://github.com/kubearmor/KubeArmor/pull/1618
feat: lenient apparmor profiles by @PrimalPimmy in https://github.com/kubearmor/KubeArmor/pull/1583
fix: No Source and resource telemetry by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1619

New Contributors

@Aditya-150 made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1599

Full Changelog: https://github.com/kubearmor/KubeArmor/compare/v1.2.0...v1.2.1

v1.2.0

3 months ago

What's Changed

Update STABLE-RELEASE to v1.1.2 by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1574
[skip ci] Update Helm Chart To v1.1.2 by @github-actions in https://github.com/kubearmor/KubeArmor/pull/1575
docs (maintainer's list): update maintainer's org by @Ankurk99 in https://github.com/kubearmor/KubeArmor/pull/1571
Remove residual printk logging by @shikharish in https://github.com/kubearmor/KubeArmor/pull/1572
Enhancement: Implement RBAC policy and Service Account for relay service by @Utkar5hM in https://github.com/kubearmor/KubeArmor/pull/1544
docs: Added guide for the error which occurs during installation of Kubearmor by @VedRatan in https://github.com/kubearmor/KubeArmor/pull/1511
docs: update maintainers affiliation by @nyrahul in https://github.com/kubearmor/KubeArmor/pull/1576
feat(monitor): add tty information to kernel events by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1579
Update ADOPTERS.md by @zsmav in https://github.com/kubearmor/KubeArmor/pull/1581
docs: KubeArmor integrated with Open Horizon by @nyrahul in https://github.com/kubearmor/KubeArmor/pull/1582
feat(*): extended VM support by @DelusionalOptimist in https://github.com/kubearmor/KubeArmor/pull/1448
fix(monitor): Missing Source in Telemetry by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1587

New Contributors

@shikharish made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1572
@Utkar5hM made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1544
@zsmav made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1581

Full Changelog: https://github.com/kubearmor/KubeArmor/compare/v1.1.2...v1.2.0

v1.1.2

4 months ago

What's Changed

Update STABLE-RELEASE to v1.1.1 by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1549
[skip ci] Update Helm Chart To v1.1.1 by @github-actions in https://github.com/kubearmor/KubeArmor/pull/1550
chore(CI): manual helm stable release trigger by @DelusionalOptimist in https://github.com/kubearmor/KubeArmor/pull/1552
workflow(github-action): workflow change to update stable init image by @nyrahul in https://github.com/kubearmor/KubeArmor/pull/1555
refactor(bpflsm): add fallback logic for enforcement, optimise ringbuffer usage by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1573
fix(policymatcher) : fixed audit event alerts for allowed network rules by @Prateeknandle in https://github.com/kubearmor/KubeArmor/pull/1569

Full Changelog: https://github.com/kubearmor/KubeArmor/compare/v1.1.1...v1.1.2

v1.1.1

5 months ago

What's Changed

fix(core,monitor,feeder): fix telemetry missing data and configurable debug stdout logs by @DelusionalOptimist in https://github.com/kubearmor/KubeArmor/pull/1534
feat : add flag for defaultposture log in Apparmor by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1537
fix(operaor): handle apparmor and security fs mounts by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1533
fix(bpf) : update prepend_path for handling mount of file path by @Prateeknandle in https://github.com/kubearmor/KubeArmor/pull/1542
chore(tests): cleanup unused code and add sleep to prevent flakiness by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1548

Full Changelog: https://github.com/kubearmor/KubeArmor/compare/v1.1.0...v1.1.1

v1.1.0

5 months ago

What's Changed

Update STABLE-RELEASE to v1.0.3 by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1478
[skip ci] Update Helm Chart To v1.0.3 by @github-actions in https://github.com/kubearmor/KubeArmor/pull/1479
docs: use proper syntax highlighting + formatting in policy examples by @agilgur5 in https://github.com/kubearmor/KubeArmor/pull/1482
docs: fix typos, grammar, style, etc in differentiation.md by @agilgur5 in https://github.com/kubearmor/KubeArmor/pull/1483
Update rule matching for file and network hook by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1484
Update STABLE-RELEASE by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1487
chore(operator): autodeploy kubearmor via operator helm by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1489
chore: pkg import only once by @testwill in https://github.com/kubearmor/KubeArmor/pull/1445
fix: use backtick to format static strings used in apparmor profiles by @Revolyssup in https://github.com/kubearmor/KubeArmor/pull/1270
Enhancement: Introduce Scripts for K3s and KubeArmor Installation with Error Prevention for killercoda-specific Kubernetes Setup by @udit-uniyal in https://github.com/kubearmor/KubeArmor/pull/1493
fixes(killercoda): fix breaking changes introduced in #1493 by @Ankurk99 in https://github.com/kubearmor/KubeArmor/pull/1498
fix(BPF-LSM):replace return statement with a check condition when file path is NULL by @Prateeknandle in https://github.com/kubearmor/KubeArmor/pull/1496
fix(monitor): Added handling when casting a type in SystemMonitor fails by @haytok in https://github.com/kubearmor/KubeArmor/pull/1472
: Audit alerts from BPFLSM enforcer by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1492
[enhancement] helm values for kubearmor relay stdout env by @VedRatan in https://github.com/kubearmor/KubeArmor/pull/1471
feat(bpf,core,feeder,monitor): improve performance and owner only handling by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1491
fix(bpf) : increase the offset value to max combined length for path by @Prateeknandle in https://github.com/kubearmor/KubeArmor/pull/1509
feat(Docs): OSSF URL updated by @rootxrishabh in https://github.com/kubearmor/KubeArmor/pull/1510
fix(monitor): refactor ExecPath handling to improve performance by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1505
fix: Remove CRI Storage volume and volume mounts by @anurag-rajawat in https://github.com/kubearmor/KubeArmor/pull/1507
fix(deps): update deps raised by renovate by @achrefbensaad in https://github.com/kubearmor/KubeArmor/pull/1515
fix(*): KubeArmor goes brrr... ⚡⚡ by @daemon1024 in https://github.com/kubearmor/KubeArmor/pull/1508
fix(core): handle visibility if namespace info is missing by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/1521
fix : Kuberamor compatibility with Bottlerocket vm 1.16 by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1512
updates for bottle rocket support by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/1523

New Contributors

@agilgur5 made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1482
@testwill made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1445
@Revolyssup made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1270
@udit-uniyal made their first contribution in https://github.com/kubearmor/KubeArmor/pull/1493

Full Changelog: https://github.com/kubearmor/KubeArmor/compare/v1.0.3...v1.1.0