Policy Controller has been updated to include a more recent build of OPA Gatekeeper (hash
Share
Services
## Announcement
Policy Controller has been updated to include a more recent build of OPA Gatekeeper (hash: [ a1f01f4 ](https://github.com/open-policy-agent/gatekeeper/tree/a1f01f4)).
## Change
Policy Controller bundles have been updated to the following versions: `asm-policy-v0.0.1`: `202310.0`, `cis-k8s-v1.5.1`: `202310.0`, `cost-reliability-v2023`: `202310.0-preview`, `nist-sp-800-190`: `202310.0`, `nist-sp-800-53-r5`: `202310.0`, `nsa-cisa-k8s-v1.2`: `202310.0`, `pci-dss-v3.2.1`: `202310.0`, `policy-essentials-v2022`: `202310.0`, `psp-v2022`: `202310.0`, `pss-baseline-v2022`: `202310.0`, `pss-restricted-v2022`: `202310.0`. For reference, see [Policy Controller bundles overview](https://cloud.google.com/anthos-config-management/docs/concepts/policy-controller-bundles).
## Change
The constraint template library's `K8sPSPAllowedUsers`, `K8sPSPAllowPrivilegeEscalationContainer`, `K8sPSPAutomountServiceAccountTokenPod`, `K8sPSPCapabilities`, `K8sPSPFlexVolumes`, `K8sPSPForbiddenSysctls`, `K8sPSPFSGroup`, `K8sPSPHostFilesystem`, `K8sPSPHostNamespace`, `K8sPSPHostNetworkingPorts`, `K8sPSPPrivilegedContainer`, `K8sPSPProcMount`, `K8sPSPReadOnlyRootFilesystem`, `K8sPSPSELinuxV2`, `K8sPSPVolumeTypes`, and `K8sRequiredProbes` no longer raise violations during updates of existing objects for immutable fields.
## Change
Updated the Open Telemetry image from 0.86.0 to 0.87.0 to address security vulnerabilities. For more information about these changes, see the full changelog for [opentelemetry-collector-contrib](https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/main/CHANGELOG.md).
What else is happening at Google Cloud Platform?
The CPU allocation setting has been renamed to Billing in the Google Cloud console for Cloud Run services
December 13th, 2024
Services
Share
Google Kubernetes Engine (GKE) - December 13th, 2024 [Feature]
December 13th, 2024
Services
Share