This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Kubernetes Admission Controller

Release Notes

1 - Kubernetes Admission Controller Release Notes - Version 0.8.8

Kubernetes Admission Controller v0.8.8

Recommendations

  • Make sure to use anchore-admission-controller helm chart v0.9.4 when deploying.

Fixes

  • Rejects TLS certificates issued by the compromised eMudhra intermediate certificate authorities, by building with Go 1.26.10 on a current Debian 13 CA certificate bundle.

Changelog

https://github.com/anchore/kubernetes-admission-controller/releases/tag/v0.8.8

2 - Kubernetes Admission Controller Release Notes - Version 0.8.7

Kubernetes Admission Controller v0.8.7

Recommendations

  • Make sure to use anchore-admission-controller helm chart v0.9.3 when deploying.

Improvements

  • Various supporting packages have been updated in order to improve security.

Fixes

  • Pods whose images are pinned by digest (for example, repo:tag@sha256:... or repo@sha256:...) are now admitted when the image has been analyzed and, in policy mode, passes policy evaluation. Previously, the controller could not find these images in Anchore Enterprise, so it denied the pods even when the image had been analyzed and passed policy.

Changelog

https://github.com/anchore/kubernetes-admission-controller/releases/tag/v0.8.7

3 - Kubernetes Admission Controller Release Notes - Version 0.8.6

Kubernetes Admission Controller v0.8.6

Recommendations

  • Make sure to use anchore-admission-controller helm chart v0.9.1 when deploying.

Improvements

  • Various supporting packages have been updated in order to improve security.

Changelog

https://github.com/anchore/kubernetes-admission-controller/releases/tag/v0.8.6

4 - Kubernetes Admission Controller Release Notes - Version 0.8.5

Kubernetes Admission Controller v0.8.5

Recommendations

  • Make sure to use anchore-admission-controller helm chart v0.8.5 when deploying.

Fixes

  • Addresses security advisories reported against the controller image, including denial-of-service and information disclosure defects in the gRPC (v1.83.2) and CEL (v0.30.0) libraries that the Kubernetes API machinery depends on.
  • The Go toolchain has been raised to 1.26.8, and the release image is now built against the latest 1.26 patch release so that toolchain security fixes are picked up on every build.
  • Various supporting packages, including the OpenTelemetry, etcd client, and Go networking libraries, have been updated in order to improve security.

Changelog

https://github.com/anchore/kubernetes-admission-controller/releases/tag/v0.8.5

5 - Kubernetes Admission Controller Release Notes - Version 0.8.4

Kubernetes Admission Controller v0.8.4

Recommendations

  • Make sure to use anchore-admission-controller helm chart v0.8.4 when deploying.

Improvements

  • The Go toolchain and various supporting packages have been updated in order to improve security.

Changelog

https://github.com/anchore/kubernetes-admission-controller/releases/tag/v0.8.4

6 - Kubernetes Admission Controller Release Notes - Version 0.8.3

Kubernetes Admission Controller v0.8.3

Recommendations

  • Make sure to use anchore-admission-controller helm chart v0.8.3 when deploying.

Improvements

  • Various supporting packages have been updated in order to improve security.

Changelog

https://github.com/anchore/kubernetes-admission-controller/releases/tag/v0.8.3

7 - Kubernetes Admission Controller Release Notes - Version 0.8.1

Kubernetes Admission Controller v0.8.1

Improvements

  • Fixed issue with container image build

Changelog

https://github.com/anchore/kubernetes-admission-controller/releases/tag/v0.8.1

8 - Kubernetes Admission Controller Release Notes - Version 0.8.0

Kubernetes Admission Controller v0.8.0

Improvements

  • Various supporting packages have been updated in order to improve security.

Changelog

https://github.com/anchore/kubernetes-admission-controller/releases/tag/v0.8.0

9 - Kubernetes Admission Controller Release Notes - Version 0.7.0

Kubernetes Admission Controller v0.7.0

Improvements

  • Various supporting packages have been updated in order to improve security.

Fixes

  • Adds an entitlement notice to the admission-controller pod logs to inform users that the admission-controller requires a valid license.
  • Updates the README file to have the correct link to the helm chart.

Changelog

https://github.com/anchore/kubernetes-admission-controller/releases/tag/v0.7.0

10 - Kubernetes Admission Controller Release Notes - Version 0.6.3

Kubernetes Admission Controller v0.6.3

Improvements

  • Various supporting packages have been updated in order to improve security.

Changelog

https://github.com/anchore/kubernetes-admission-controller/releases/tag/v0.6.3