Maintained with ☕️ by
IcePanel logo

The constraint template library includes a new template: K8sDisallowInteractiveTTY

Share

Services

## Feature The constraint template library includes a new template: `K8sDisallowInteractiveTTY`. For reference, see the [Constraint template library](https://cloud.google.com/anthos-config-management/docs/latest/reference/constraint-template-library). ## Change Policy Controller bundles have been updated to the following versions: `cis-k8s-v1.5.1`: `202312.1`, `cost-reliability-v2023`: `202312.0`, `nist-sp-800-190`: `202312.1`, `nist-sp-800-53-r5`: `202312.1`, `nsa-cisa-k8s-v1.2`: `202312.1`, `pci-dss-v3.2.1`: `202312.1`, `psp-v2022`: `202312.0`. For reference, see [Policy Controller bundles overview](https://cloud.google.com/anthos-config-management/docs/concepts/policy-controller-bundles). ## Change Upgraded bundled Helm version from v3.13.1 to [v3.13.3](https://github.com/helm/helm/releases/tag/v3.13.3) to pick up vulnerability fixes. To understand the changes in each release, review the [changelogs](https://github.com/helm/helm/releases). ## Change Upgraded bundled Kustomize version from v5.1.1 to [v5.3.0](https://github.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv5.3.0) to pick up vulnerability fixes. To understand the changes in each release, review the [changelogs](https://github.com/kubernetes-sigs/kustomize/releases). ## Fix Fixed a race condition that could cause deadlock when uninstalling Config Sync. This issue could sometimes occur if a RepoSync was managed by a RootSync with foreground deletion propagation enabled. ## Fix Fixed an issue that could cause RootSyncs and RepoSyncs to be reported as Current before they had been reconciled. ## Fix Fixed an issue where the log level could not be set for the otel-agent container. ## Fix Fixed an issue where RepoSync Secrets were not garbage collected when switching between Secret refs or types. ## Fix Fixed a performance issue where the config-management-operator was continuously updating the webhook definition, causing unnecessary churn in the apiserver and etcd.