2.19.1: IA: JFrog Artifactory auto-discovery, CRI v1; RP enhancements

Image Assurance 2.20.1

• Support JFrog Artifactory auto-discovery
  • When onboarding an Artifactory instance to CloudGuard you should provide the base URL of the Artifactory instance and CloudGuard will scan images of all discovered sub-registries
• Agents load updated registry credentials and CA bundle without restarting the deployment
• CRI: support v1 API following v1alpha2 removal
• CRI-O/Openshift: support nodes without podman on nodes, do not use podman if possible

Runtime Protection - daemon 1.0.0, probe 0.28.0-cp-7

• logging enhancement
• telemetry enhancement
• security enhancement

Full Changelog: 2.18.0...2.19.1

2.19.0 ea: IA: Artifactory auto-discovery, CRI v1; RP enhancements

Image Assurance 2.20.0

• Support JFrog Artifactory auto-discovery
  • When onboarding an Artifactory instance to CloudGuard you should provide the base URL of the Artifactory instance and CloudGuard will scan images of all discovered sub-registries
• Agents load updated registry credentials and CA bundle without restarting the deployment
• CRI: support v1 API following v1alpha2 removal
• CRI-O/Openshift: support nodes without podman on nodes, do not use podman if possible

Runtime Protection - daemon 1.0.0

• logging enhancement
• telemetry enhancement
• security enhancement

Full Changelog: 2.18.0-ea...2.19.0-ea

2.18.0: auto-detect EKS + k3s, linux amd64 node selector, more

• Auto-detection: added k3s (Rancher) and improved for EKS.
• Add containerRuntimeSocket helm parameter for runtime socket path.
• Run pods only on Linux amd64 nodes - default node selector updated.
• Fix helm install warning when setting environment variables for a pod.

Full Changelog: 2.17.0...2.18.0

2.18.0 ea: auto-detect EKS + k3s, linux amd64 node selector, more

• Auto-detection: added k3s (Rancher) and improved for EKS.
• Add containerRuntimeSocket helm parameter for runtime socket path.
• Run pods only on Linux amd64 nodes - default node selector updated.
• Fix helm install warning when setting environment variables for a pod.

Full Changelog: 2.17.0-ea...2.18.0-ea

2.17.0: new registries scan, IA list batching, RP limited GA

Image Assurance 2.18.1:

• Registry images list is sent in batches, allowing to support large registries with many repositories
• Supporting image scanning in additional registry types
  • Harbor
  • JFrog Artifactory
  • Google Artifact Registry
• Supporting registries with Self generated certificates
• Increase images scan rate

Runtime Protection: daemon 0.0.822, policy 1.3.0

• Limited General Availability (GA) for Runtime Protection, including
  • Malicious Signatures engine
  • File Reputation engine
  • Behavioral Profiling (as Public Preview)

All features

• Inventory 1.8.0 and Flow Logs 0.8.0: minor improvements

Full Changelog: 2.16.0...2.17.0

2.17.0 ea: new registries scan, IA list batching, RP limited GA

Image Assurance 2.18.1:

• Registry images list is sent in batches, allowing to support large registries with many repositories
• Supporting image scanning in additional registry types
  • Harbor
  • JFrog Artifactory
  • Google Artifact Registry
• Supporting registries with Self generated certificates
• Increase images scan rate

Runtime Protection: daemon 0.0.822, policy 1.3.0

• Limited General Availability (GA) for Runtime Protection, including
  • Malicious Signatures engine
  • File Reputation engine
  • Behavioral Profiling (as Public Preview)

All features

• Inventory 1.8.0 and Flow Logs 0.8.0: minor improvements

Full Changelog: 2.16.0-ea...2.17.0-ea

2.16.0: credentials from secret, Rancher, RP on EKS & OpenShift, AC fix

• Admission Control:
  enforcer 2.3.0: fix System Event error message of "the agent has suffered a loss of connectivity which lasts for 24 hours"
  policy 1.2.2: fix

• Runtime Protection:
  probe 0.28.0-cp-6: support automated installation of kernel headers on EKS, fix installation on OpenShift

• All features:
  Support Rancher/k3s via manually setting ‘platform’ helm flag
  Support specifying CloudGuard credentials via a Kubernetes secret
  Improve concurrency of rolling updates of daemonsets

Full Changelog: 2.15.1...2.16.0

2.16.0 ea: credentials from secret, Rancher, RP on EKS & OpenShift, AC fix

• Admission Control:
  enforcer 2.3.0: fix System Event error message of "the agent has suffered a loss of connectivity which lasts for 24 hours"
  policy 1.2.2: fix

• Runtime Protection:
  probe 0.28.0-cp-6: support automated installation of kernel headers on EKS, fix installation on OpenShift

• All features:
  Support Rancher/k3s via manually setting ‘platform’ helm flag
  Support specifying CloudGuard credentials via a Kubernetes secret
  Improve concurrency of rolling updates of daemonsets

Full Changelog: 2.15.1-ea...2.16.0-ea

2.15.1: k8s 1.25 adjustments; custom annotations; daemonsets rollout

• inventory agent 1.7.1:
  adjust support for PSP and CronJobs in k8s 1.25
  fix memory footprint issue in large clusters
• support for custom pod annotations for cloudguard agents
• improve daemonsets rollout

Full Changelog: 2.15.0...2.15.1

2.15.1 ea: k8s 1.25 adjustments; custom annotations; daemonsets rollout

• inventory agent 1.7.1
  adjust support for PSP and CronJobs in k8s 1.25
• fix memory footprint issue in large clusters
• support for custom pod annotations for cloudguard agents
• improve daemonsets rollout

Full Changelog: 2.15.0-ea...2.15.1-ea