Changelog

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

---

[0.12.0-bb.0] - 2023-02-17

Changed

• ironbank/twistlock/console/console updated from 22.06.197 to 22.12.415
• ironbank/twistlock/defender/defender updated from 22.06.197 to 22.12.415

[0.11.4-bb.3] - 2023-02-09

Changed

• Add init job resources values and templating

[0.11.4-bb.2] - 2022-01-17

Changed

• Update gluon to new registry1 location + latest version (0.3.2)

[0.11.4-bb.1] - 2022-12-05

Fixed

• Quote value for privileged for stringData

Added

• Add docs for WAAS

[0.11.4-bb.0] - 2022-11-17

Added

• Added Grafana dasboards

[0.11.3-bb.2] - 2022-10-20

Changed

• Modified volume job to add retries on chown + exit with error properly

[0.11.3-bb.1] - 2022-10-14

Added

• Added drop security context capability to defender and console

[0.11.3-bb.0] - 2022-10-12

Added

• Configurable trusted image policy via init job

[0.11.2-bb.0] - 2022-10-06

Fixed

• Added affinity for volume upgrade job
• Set job to run by default
• Add resources for volume job, modify wait logic to handle edge cases with unhealthy console

[0.11.1-bb.0] - 2022-10-02

Changed

• increase Mem for console to 2gb

[0.11.0-bb.0] - 2022-09-27

Added

• Set Twistlock console to run as nonroot
• Added upgrade option for those with local volumes through the volume-upgrade-job

[0.10.0-bb.2] - 2022-09-22

Added

• Enable mTLS for Twistlock metrics
• Updated Gluon to 0.3.1

[0.10.0-bb.1] - 2022-09-02

Added

• Add support for SAML SSO via init script

[0.10.0-bb.0] - 2022-08-26

Changed

• Updated console and defender to 22.06.197

[0.9.1-bb.0] - 2022-09-01

Added

• Conditional PrometheusRule template for Defender count alerts fulfilled by the monitoring stack

[0.9.0-bb.4] - 2022-08-15

Fixed

• Update Defender’s daemonSet to support/add tolerations

[0.9.0-bb.3] - 2022-06-30

Fixed

• Fixed handling of metrics/servicemonitor + creation of user for metrics
• Adjust job TTL to 30 minutes to provide time for viewing debug logging

[0.9.0-bb.2] - 2022-07-04

Updated

• Make Twistlock more customization via values.yaml

[0.9.0-bb.1] - 2022-06-28

Updated

• Updated bb base image to 2.0.0
• Updated gluon to 0.2.10

[0.9.0-bb.0] - 2022-06-16

Updated

• Updated to 22.06.179 (console and defender)
• Updated to latest gluon library + latest base image

[0.8.0-bb.0] - 2022-06-10

Added

• Added oscal-component.yaml

[0.7.0-bb.0] - 2022-05-05

Added

• Added initialization job to setup users, license, defenders, policies, and other misc settings

Changed

• Refactored names and labels to use _helpers.tpl
• Added labels to all resources

[0.6.0-bb.0] - 2022-05-03

Changed

• Updated twistlock image to 22.01.880

[0.5.0-bb.0] - 2022-03-24

Added

• Added Tempo Zipkin Egress Policy

[0.4.0-bb.1] - 2022-02-28

Added

• Added mTLS PeerAuthentication
• Added mTLS exception for defenders

[0.4.0-bb.0] - 2022-01-31

Changed

• Updated to 22.01.840 image versions
• Added documentation for running on k3d

[0.3.0-bb.0] - 2022-01-31

Changed

• Update Chart.yaml to follow new standardization for release automation
• Added renovate check to update new standardization

[0.2.0-bb.0] - 2022-01-18

Changed

• Relocated bbtests from test-values.yaml to values.yaml

[0.1.0-bb.0] - 2021-12-14

Added

• Add annotations to console deployment

[0.0.12-bb.0] - 2021-11-22

Changed

• Rename hostname to domain

[0.0.11-bb.0] - 2021-10-27

Changed

• Add image pull policy for the console

[0.0.10-bb.0] - 2021-10-27

Changed

• Updated console to version 21.08.520
• Updated renovate.json for defender image + appVersion

Added

• tests/images.txt for package release CI
• New network policy to allow for egress to twistlock upstream services

[0.0.9-bb.1] - 2021-10-18

Changed

• VS API version to v1beta1 to solve deprecation
• @micah.nagel added to CODEOWNERS, @joshwolf removed

[0.0.9-bb.0] - 2021-09-10

Added

• Documentation link to PCC default configuration for version 21.04.412
• Network Policy template specifically for Defenders communication
• networkPolicies.nodeCidr value to explicity set ingress CIDR for Defender WebSocket connections

[0.0.8-bb.1] - 2021-08-26

Added

• Added istio sidecar scraping network policy

[0.0.8-bb.0] - 2021-08-16

Added

• Upgrade twistlock console to version 21.04.439

[0.0.7-bb.0] - 2021-08-09

Added

• Add conditional syslog audit integration for twistlock console.

[0.0.6-bb.2] - 2021-08-06

Added

• Add Resource limit and request.

[0.0.6-bb.1] - 2021-07-21

Added

• Add openshift toggle. If it’s set, add port 5353 egress rule.

[0.0.6-bb.0] - 2021-06-09

Fixed

• Bug with istio network policy, allow egress in ns

[0.0.5-bb.0] - 2021-06-02

Changed

• Network policy resource Templates

[0.0.4-bb.3] - 2021-06-01

Added

• Gluon test library dependency

Changed

• CI Test infrastructure. Migrating to helm tests with script capabilities.

[0.0.4-bb.2] - 2021-05-26

Added

• Network policy resource Templates

[0.0.4-bb.0] - 2021-05-12

Added

• Moved all resources into chart/templates/console/
• Updated twistlock to 21.04.412

[0.0.3-bb.4] - 2021-04-06

Added

• Resource and Toleration Values

[0.0.3-bb.3] - 2021-04-05

Changed

• Affinity values modified to standardize

[0.0.3-bb.2] - 2021-03-31

Added

• Values passthroughs for affinity and anti-affinity added

Changed

• Split out resources into separate yaml files

[0.0.3-bb.0] - 2021-02-12

Added

• Options under istio values to control labels, annotations, gateways and full URL modification for twistlock VirtualService.

Changed

• Position of “hostname” value in values, from “console.hostname” to toplevel “hostname”.

[0.0.2-bb.2] - 2021-02-11

Added

• imagePullSecret array to values.

Changed

• Image based on 20.12 version from IronBank.

[0.0.2-bb.1] - 2021-01-27

Changed

• Updating all “dsop.io” URLs to “dso.mil”.

[0.0.2-bb.0] - 2020-12-15

Added

• Istio flag to enable VirtualService when true.

[0.0.1-bb.0] - 2020-06-15

Added

• Initial manifests for deploying Twistlock version 20.04.196.

---

Last update: 2023-03-27 by Micah Nagel