1.6.23
Return time zone-
Due to a wrong timezone that was presented at the UI,
we should send the timezone (in iso date format) from the APIs
RP partial profiling code-
Resolved issue of Workloads' profiles getting stuck on “Waiting for startup”
Enabled the creation and enforcement of Partial Profiles
Agent status report CSV api-
path: kubernetes/account/agentStatusReportCSV
Added API that returns status of all the agents in the account (that user has permission to their clusters)
Allow offboarding through old controller (Terraform)-
align the code in the old controller API to the new one, so disabling TI will work the same, and therefore, also offboarding with terraform
UI- Containers Improvements - 1.6.23
Workloads Images redesign
In our commitment to enhancing the efficiency and usability of our platform, we have successfully migrated our old protected assets to a React-based infrastructure. This new development brings better performance, faster load times, and improved user experience.
Kubernetes Version in Environment Table:
To provide more detailed information about each environment, we've added a new column to the Environments table that shows the version of Kubernetes (K8s) running in each environment. This enhancement will give users a better understanding of their infrastructure and help them plan upgrades more effectively.
Kubernetes - Helm 2.20.1 EA branch: GKE Autopilot Support, priority class enhancements
Type: New Feature
Description:
The following features have been added to the Helm EA branch:
Allow specifying priority class per agent. Set 'cluster-critical' and 'node-critical' priority class for agents by default
Autopilot Supported Blades: Inventory, Compliance, Image Assurance, Admission Controller and Threat Intelligence
Known limitations:
Auto-detection of Autopilot is not supported (i.e., installation may fail if platform is not set explicitly)
Autopilot versions prior to 1.25 are not supported
Helm 2.20.0 Release Content
Image Assurance 2.21.0:
Improvements for slow networks and large images
Runtime Protection | runtime-daemon 1.6.2, runtime-probe 0.30.2-cp-3, runtime-cos-compat 0.0.9
Google COS support for File Reputation engine
Security enhancements
Profiling engine improvements - better detection of startup event
Reduced Memory & CPU footprint
All features
FluentBit removal
2.19.1: IA: Artifactory auto-discovery, CRI v1 etc.; RP: enhancement.
Image Assurance 2.20.1
Support JFrog Artifactory auto-discovery
When onboarding an Artifactory instance to CloudGuard you should provide the FQDN of the Artifactory server. CloudGuard will scan images of all discovered sub-registries
Agents load updated registry credentials and CA bundle without requiring a restart
CRI: support v1 API following v1alpha2 removal
CRI-O/Openshift: support nodes without podman, do not use podman if possible
Runtime Protection - daemon 1.0.0, probe 0.28.0-cp-7
Logging enhancements
Telemetry enhancements
Security enhancements