All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
0.8.0 - 2024-10-23
- Add Vertical Pod Autoscaler (VPA) configuration, enabled by default.
- Disable logger development mode to avoid panicking.
- Disable PodSecurityPolicy by default.
- Expose port 8081 for health/liveness probes.
0.7.11 - 2024-06-12
- Update to go 1.22 and bump dependencies.
0.7.10 - 2024-05-07
- Remove API check for
HorizontalPodautoscaler
.
0.7.9 - 2024-05-03
- Switched API version from the
HorizontalPodAutoscaler
fromautoscaling/v2beta1
toautoscaling/v1
.
0.7.8 - 2024-01-16
- Switch PSP values from
psp.enabled
toglobal.podSecurityStandards.enforced
.
0.7.7 - 2023-12-19
- Add a
scaledObject
resource for KEDA support.
0.7.6 - 2023-12-12
- Update go to v1.21 and bump dependencies.
0.7.5 - 2023-12-06
- Configure
gsoci.azurecr.io
as the default container image registry.
- Stop pushing to
openstack-app-collection
.
0.7.4 - 2023-04-24
- Add icon.
0.7.3 - 2023-04-12
- Removed
application.giantswarm.io/team
label from ServiceMonitor.
0.7.2 - 2023-02-27
- Fix/template RoleBinding for deploying into namespaces other than the release namespace.
0.7.1 - 2023-01-25
- Adds
imagePullSecrets
to Chart.
0.7.0 - 2023-01-11
- Replaces starboard library with trivy-operator library.
- Removes CIS benchmarks & reporting capabilities.
- Add Horizontal Pod Autoscaling based on Prometheus scrape times.
0.6.3 - 2022-12-02
0.6.2 - 2022-10-24
- Fix schema type for tolerations (#157).
0.6.1 - 2022-10-21
- Make ServiceMonitor relabelings configurable and drop unhelpful pod, container, and service labels by default.
- Build with
app-build-suite
. - Add
app-test-suite
basic smoke tests.
0.6.0 - 2022-09-16
- Add
podLabels
property to allow custom pod labels.
- Disable reconciliation of CIS benchmark reports by default. These reports are temporarily removed from
trivy-operator
, to be reintroduced in the future. Reconciliation of CIS benchmarks produced bystarboard
is still supported by settingexporter.CISKubeBenchReports.enabled: true
in the Helm values.
0.5.2 - 2022-09-09
- Make
interval
andscrapeTimeout
configurable in the service monitor viamonitoring.serviceMonitor.interval
andmonitoring.serviceMonitor.scrapeTimeout
0.5.1 - 2022-07-13
- Allow selectively enabling/disabling controllers for each report type.
0.5.0 - 2022-06-22
- Important: the
latest
tag alias is being removed. Some users have reported issues using thelatest
tag on our hosted registries (Docker Hub, Quay, etc.). We advise against usinglatest
tags and don't use them ourselves, so this tag is not kept up to date. Please switch to using a tagged version. We will be removing thelatest
tag from our public registries in the near future to avoid confusion.
- Add missing monitoring options in the Helm chart values.yaml.
- Support sharding report metrics across multiple instances of the exporter.
- Set
runAsNonRoot
and useRuntimeDefault
seccomp profile. - Make replica count configurable in Helm values.
- Add configurable tolerations to Helm values.
- Reconcile and expose metrics for
CISKubeBenchReport
custom resources.
0.4.1 - 2022-04-26
- Spread (jitter) re-queueing of reports by +/- 10% by default to help smooth resource utilization.
0.4.0 - 2022-04-22
- Reconcile and expose metrics for
ConfigAuditReport
custom resources. Requires Starboard v0.15.0 or above.
0.3.3 - 2022-03-31
- Build with
architect
instead ofapp-build-suite
(reverts change from 0.3.2).
0.3.2 - 2022-03-28
- Add configurable nodeSelector to Helm values.
- Build with
app-build-suite
instead ofarchitect
.
0.3.1 - 2022-03-15
- Add NodeAffinity to run the exporter only on Linux Nodes with AMD64.
0.3.0 - 2022-02-14
- Add the
image_registry
label exposing the image registry.
- Bump
golang
,prometheus
, andstarboard
dependency versions. - Update Grafana dashboard to use plugin version 8.3.2 and the new label.
0.2.1 - 2022-01-24
- Make pod annotations configurable.
- Bump
golang
,prometheus
, andstarboard
versions.
0.2.0 - 2022-01-05
- Helm, add configurable container securityContext with secure defaults.
- Bump
starboard
,logr
, andcontroller-runtime
dependency versions. - Remove unneeded
releaseRevision
annotation from deployment.
- Helm, fix incomplete metric name in pods with high/critical CVEs panel
0.1.4 - 2021-12-14
- Helm, remove unused RBAC config and add if for PSP and NetworkPolicy yaml.
0.1.3 - 2021-12-10
- Make pod resource requests/limits configurable via helm values.
0.1.2 - 2021-11-29
- Push images to Aliyun.
- Add
starboard-exporter
to AWS and Azure app collections.
0.1.1 - 2021-11-26
- Make target labels more easily configurable in
values.yaml
.
0.1.0 - 2021-11-26
- Add configurable target labels.
- Add Grafana dashboard.
- Support custom labels for ServiceMonitor.
0.0.1 - 2021-11-18
- Add
image_vulnerabilities
metric per-CVE per-image andimage_vulnerabilities_count
metric for summaries. - Add ServiceMonitor to scrape metrics.