github kubernetes-sigs/security-profiles-operator v0.10.1

5 hours ago

Welcome to our glorious v0.10.1 release of the security-profiles-operator! The general usage and setup can be found in our documentation. 🥳 👯

To install the operator, run:

$ kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/security-profiles-operator/v0.10.1/deploy/operator.yaml

You can also verify the container image signature by using cosign:

$ cosign verify \
    --certificate-identity krel-trust@k8s-releng-prod.iam.gserviceaccount.com \
    --certificate-oidc-issuer https://accounts.google.com \
    registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.10.1

Beside the operator image, we now also ship spoc, the official Security Profiles Operator Command Line Interface! Binaries for amd64 and arm64 are attached to this release.

To verify the signature of spoc. download all release artifacts and run for amd64 (works in the same way for arm64:

$ cosign verify-blob \
    --certificate-identity sgrunert@redhat.com \
    --certificate-oidc-issuer https://github.com/login/oauth \
    --certificate spoc.amd64.cert \
    --signature spoc.amd64.sig \
    spoc.amd64

To verify the Bill of Materials (BOM) using the bom tool, download the artifacts into a build directory and run:

> bom validate -e spoc.spdx -d build/
+-------------------+-------+-----------------------------+----------------+
|     FILENAME      | VALID |           MESSAGE           | INVALID HASHES |
+-------------------+-------+-----------------------------+----------------+
| spoc.amd64        | OK    | File validated successfully | -              |
| spoc.amd64.cert   | OK    | File validated successfully | -              |
| spoc.amd64.sha512 | OK    | File validated successfully | -              |
| spoc.amd64.sig    | OK    | File validated successfully | -              |
| spoc.arm64        | OK    | File validated successfully | -              |
| spoc.arm64.cert   | OK    | File validated successfully | -              |
| spoc.arm64.sha512 | OK    | File validated successfully | -              |
| spoc.arm64.sig    | OK    | File validated successfully | -              |
+-------------------+-------+-----------------------------+----------------+

The .spdx file is signed as well and we also provide .sha512 sum files for the binaries.

Feel free to provide us any kind of feedback in the official Kubernetes Slack #security-profiles-operator channel.

Changes by Kind

Cleanup

Bug

Dependencies

Added

  • al.essio.dev/pkg/shellescape: v1.6.0
  • buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go: 80ab13b
  • buf.build/go/protovalidate: v1.1.3
  • buf.build/go/protoyaml: v0.6.0
  • cloud.google.com/go/pubsub/v2: v2.3.0
  • connectrpc.com/connect: v1.19.1
  • cyphar.com/go-pathrs: v0.2.4
  • github.com/AliyunContainerService/ack-ram-tool/pkg/ecsmetadata: v0.0.10
  • github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns: v1.3.0
  • github.com/DataDog/go-libddwaf/v4: v4.3.2
  • github.com/MakeNowJust/heredoc/v2: v2.0.1
  • github.com/Masterminds/semver: v1.5.0
  • github.com/Masterminds/sprig: v2.22.0
  • github.com/akamai/AkamaiOPEN-edgegrid-golang/v13: v13.0.0
  • github.com/alibabacloud-go/tea-utils/v2: v2.0.7
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.279.2
  • github.com/aws/aws-sdk-go-v2/service/signin: v1.0.8
  • github.com/benbjohnson/clock: v1.3.5
  • github.com/bitfield/gotestdox: v0.2.2
  • github.com/buildkite/go-buildkite/v4: v4.13.1
  • github.com/buildkite/test-engine-client: v1.6.0
  • github.com/buildkite/zstash: v0.8.0
  • github.com/bytecodealliance/wasmtime-go/v39: v39.0.1
  • github.com/cenkalti/backoff: 309aa71
  • github.com/clipperhouse/displaywidth: v0.11.0
  • github.com/clipperhouse/uax29/v2: v2.7.0
  • github.com/decred/dcrd/crypto/blake256: v1.1.0
  • github.com/dgryski/go-farm: 3414d57
  • github.com/dnephin/pflag: v1.0.7
  • github.com/go-openapi/swag/cmdutils: v0.25.5
  • github.com/go-openapi/swag/conv: v0.25.5
  • github.com/go-openapi/swag/fileutils: v0.25.5
  • github.com/go-openapi/swag/jsonname: v0.25.5
  • github.com/go-openapi/swag/jsonutils: v0.25.5
  • github.com/go-openapi/swag/jsonutils/fixtures_test: v0.25.5
  • github.com/go-openapi/swag/loading: v0.25.5
  • github.com/go-openapi/swag/mangling: v0.25.5
  • github.com/go-openapi/swag/netutils: v0.25.5
  • github.com/go-openapi/swag/stringutils: v0.25.5
  • github.com/go-openapi/swag/typeutils: v0.25.5
  • github.com/go-openapi/swag/yamlutils: v0.25.5
  • github.com/go-openapi/testify/enable/yaml/v2: v2.4.1
  • github.com/go-openapi/testify/v2: v2.4.1
  • github.com/go-ozzo/ozzo-validation/v4: v4.3.0
  • github.com/graph-gophers/graphql-go: v1.9.0
  • github.com/hashicorp/go-hmac-drbg: a6e5a68
  • github.com/hashicorp/go-secure-stdlib/cryptoutil: v0.1.1
  • github.com/hashicorp/go-version: v1.7.0
  • github.com/huandu/go-clone: v1.7.3
  • github.com/huandu/go-sqlbuilder: v1.39.1
  • github.com/lestrrat-go/dsig: v1.0.0
  • github.com/lestrrat-go/dsig-secp256k1: v1.0.0
  • github.com/lestrrat-go/httprc/v3: v3.0.4
  • github.com/lestrrat-go/jwx/v3: v3.0.13
  • github.com/lestrrat-go/option/v2: v2.0.0
  • github.com/mndrix/tap-go: 629fa40
  • github.com/moby/moby/api: v1.54.1
  • github.com/moby/moby/client: v0.4.0
  • github.com/mwitkow/go-proto-validators: v0.2.0
  • github.com/natefinch/atomic: v1.0.1
  • github.com/nrdcg/goacmedns: v0.2.0
  • github.com/oklog/ulid/v2: v2.1.1
  • github.com/olekukonko/cat: 50322a0
  • github.com/pborman/getopt: 7148bc3
  • github.com/prometheus/otlptranslator: v1.0.0
  • github.com/pseudomuto/protoc-gen-doc: v1.5.1
  • github.com/pseudomuto/protokit: v0.2.0
  • github.com/redis/go-redis/extra/rediscmd/v9: v9.5.3
  • github.com/redis/go-redis/extra/redisotel/v9: v9.5.3
  • github.com/saracen/zipextra: f1aa42d
  • github.com/sigstore/rekor-tiles/v2: v2.2.1
  • github.com/sigstore/timestamp-authority/v2: v2.0.6
  • github.com/theckman/httpforwarded: v0.4.0
  • github.com/valyala/fastjson: v1.6.10
  • github.com/wolfeidau/quickzip: v1.0.2
  • github.com/xeipuuv/gojsonschema: v1.2.0
  • go.opentelemetry.io/collector/featuregate: v1.31.0
  • go.opentelemetry.io/collector/internal/telemetry: v0.125.0
  • go.opentelemetry.io/contrib/bridges/otelzap: v0.10.0
  • go.opentelemetry.io/otel/exporters/prometheus: v0.62.0
  • go.opentelemetry.io/otel/log: v0.11.0
  • go.podman.io/common: v0.67.1
  • go.podman.io/image/v5: v5.39.2
  • go.podman.io/storage: v1.62.0
  • go.uber.org/ratelimit: v0.3.1
  • gotest.tools/gotestsum: v1.13.0
  • mvdan.cc/gofumpt: v0.9.2
  • sigs.k8s.io/structured-merge-diff/v6: v6.3.2

Changed

Removed

  • cloud.google.com/go/accessapproval: v1.8.6
  • cloud.google.com/go/accesscontextmanager: v1.9.6
  • cloud.google.com/go/aiplatform: v1.85.0
  • cloud.google.com/go/analytics: v0.28.0
  • cloud.google.com/go/apigateway: v1.7.6
  • cloud.google.com/go/apigeeconnect: v1.7.6
  • cloud.google.com/go/apigeeregistry: v0.9.6
  • cloud.google.com/go/apikeys: v0.6.0
  • cloud.google.com/go/appengine: v1.9.6
  • cloud.google.com/go/area120: v0.9.6
  • cloud.google.com/go/artifactregistry: v1.17.1
  • cloud.google.com/go/asset: v1.21.0
  • cloud.google.com/go/assuredworkloads: v1.12.6
  • cloud.google.com/go/automl: v1.14.7
  • cloud.google.com/go/baremetalsolution: v1.3.6
  • cloud.google.com/go/batch: v1.12.2
  • cloud.google.com/go/beyondcorp: v1.1.6
  • cloud.google.com/go/bigquery: v1.67.0
  • cloud.google.com/go/bigtable: v1.37.0
  • cloud.google.com/go/billing: v1.20.4
  • cloud.google.com/go/binaryauthorization: v1.9.5
  • cloud.google.com/go/certificatemanager: v1.9.5
  • cloud.google.com/go/channel: v1.19.5
  • cloud.google.com/go/cloudbuild: v1.22.2
  • cloud.google.com/go/clouddms: v1.8.7
  • cloud.google.com/go/cloudtasks: v1.13.6
  • cloud.google.com/go/compute: v1.37.0
  • cloud.google.com/go/contactcenterinsights: v1.17.3
  • cloud.google.com/go/container: v1.42.4
  • cloud.google.com/go/containeranalysis: v0.14.1
  • cloud.google.com/go/datacatalog: v1.26.0
  • cloud.google.com/go/dataflow: v0.10.6
  • cloud.google.com/go/dataform: v0.11.2
  • cloud.google.com/go/datafusion: v1.8.6
  • cloud.google.com/go/datalabeling: v0.9.6
  • cloud.google.com/go/dataplex: v1.25.2
  • cloud.google.com/go/dataproc: v1.12.0
  • cloud.google.com/go/dataproc/v2: v2.11.2
  • cloud.google.com/go/dataqna: v0.9.6
  • cloud.google.com/go/datastore: v1.20.0
  • cloud.google.com/go/datastream: v1.14.1
  • cloud.google.com/go/deploy: v1.27.1
  • cloud.google.com/go/dialogflow: v1.68.2
  • cloud.google.com/go/dlp: v1.22.1
  • cloud.google.com/go/documentai: v1.37.0
  • cloud.google.com/go/domains: v0.10.6
  • cloud.google.com/go/edgecontainer: v1.4.3
  • cloud.google.com/go/errorreporting: v0.3.2
  • cloud.google.com/go/essentialcontacts: v1.7.6
  • cloud.google.com/go/eventarc: v1.15.5
  • cloud.google.com/go/filestore: v1.10.2
  • cloud.google.com/go/firestore: v1.18.0
  • cloud.google.com/go/functions: v1.19.6
  • cloud.google.com/go/gaming: v1.9.0
  • cloud.google.com/go/gkebackup: v1.7.0
  • cloud.google.com/go/gkeconnect: v0.12.4
  • cloud.google.com/go/gkehub: v0.15.6
  • cloud.google.com/go/gkemulticloud: v1.5.3
  • cloud.google.com/go/grafeas: v0.2.0
  • cloud.google.com/go/gsuiteaddons: v1.7.7
  • cloud.google.com/go/iap: v1.11.1
  • cloud.google.com/go/ids: v1.5.6
  • cloud.google.com/go/iot: v1.8.6
  • cloud.google.com/go/language: v1.14.5
  • cloud.google.com/go/lifesciences: v0.10.6
  • cloud.google.com/go/logging: v1.13.0
  • cloud.google.com/go/managedidentities: v1.7.6
  • cloud.google.com/go/maps: v1.20.4
  • cloud.google.com/go/mediatranslation: v0.9.6
  • cloud.google.com/go/memcache: v1.11.6
  • cloud.google.com/go/metastore: v1.14.6
  • cloud.google.com/go/networkconnectivity: v1.17.1
  • cloud.google.com/go/networkmanagement: v1.19.1
  • cloud.google.com/go/networksecurity: v0.10.6
  • cloud.google.com/go/notebooks: v1.12.6
  • cloud.google.com/go/optimization: v1.7.6
  • cloud.google.com/go/orchestration: v1.11.9
  • cloud.google.com/go/orgpolicy: v1.15.0
  • cloud.google.com/go/osconfig: v1.14.5
  • cloud.google.com/go/oslogin: v1.14.6
  • cloud.google.com/go/phishingprotection: v0.9.6
  • cloud.google.com/go/policytroubleshooter: v1.11.6
  • cloud.google.com/go/privatecatalog: v0.10.7
  • cloud.google.com/go/pubsublite: v1.8.2
  • cloud.google.com/go/recaptchaenterprise: v1.3.1
  • cloud.google.com/go/recaptchaenterprise/v2: v2.20.4
  • cloud.google.com/go/recommendationengine: v0.9.6
  • cloud.google.com/go/recommender: v1.13.5
  • cloud.google.com/go/redis: v1.18.2
  • cloud.google.com/go/resourcemanager: v1.10.6
  • cloud.google.com/go/resourcesettings: v1.8.3
  • cloud.google.com/go/retail: v1.20.0
  • cloud.google.com/go/run: v1.9.3
  • cloud.google.com/go/scheduler: v1.11.7
  • cloud.google.com/go/secretmanager: v1.14.7
  • cloud.google.com/go/securitycenter: v1.36.2
  • cloud.google.com/go/servicecontrol: v1.11.1
  • cloud.google.com/go/servicedirectory: v1.12.6
  • cloud.google.com/go/servicemanagement: v1.8.0
  • cloud.google.com/go/serviceusage: v1.6.0
  • cloud.google.com/go/shell: v1.8.6
  • cloud.google.com/go/speech: v1.27.1
  • cloud.google.com/go/storagetransfer: v1.12.4
  • cloud.google.com/go/talent: v1.8.3
  • cloud.google.com/go/texttospeech: v1.12.1
  • cloud.google.com/go/tpu: v1.8.3
  • cloud.google.com/go/video: v1.23.5
  • cloud.google.com/go/videointelligence: v1.12.6
  • cloud.google.com/go/vision: v1.2.0
  • cloud.google.com/go/vision/v2: v2.9.5
  • cloud.google.com/go/vmmigration: v1.8.6
  • cloud.google.com/go/vmwareengine: v1.3.5
  • cloud.google.com/go/vpcaccess: v1.8.6
  • cloud.google.com/go/webrisk: v1.11.1
  • cloud.google.com/go/websecurityscanner: v1.7.6
  • cloud.google.com/go/workflows: v1.14.2
  • dmitri.shuralyov.com/gpu/mtl: 666a987
  • gioui.org: 57750fc
  • git.sr.ht/~sbinet/gg: v0.3.1
  • github.com/BurntSushi/xgb: 27f1227
  • github.com/DataDog/appsec-internal-go: v1.11.2
  • github.com/DataDog/go-libddwaf/v3: v3.5.4
  • github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace: v1.28.0
  • github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/cloudmock: v0.53.0
  • github.com/JohnCGriffin/overflow: 46fa312
  • github.com/Microsoft/hcsshim: v0.13.0
  • github.com/OneOfOne/xxhash: v1.2.2
  • github.com/RobinUS2/golang-moving-average: v1.0.0
  • github.com/ahmetb/gen-crd-api-reference-docs: v0.3.0
  • github.com/ajstarks/deck: 30c9fc6
  • github.com/ajstarks/deck/generate: c3f852c
  • github.com/ajstarks/svgo: 1546f12
  • github.com/akamai/AkamaiOPEN-edgegrid-golang: v1.2.2
  • github.com/andybalholm/brotli: v1.0.4
  • github.com/apache/arrow/go/v10: v10.0.1
  • github.com/apache/arrow/go/v11: v11.0.0
  • github.com/apache/thrift: v0.16.0
  • github.com/boombuler/barcode: v1.0.1
  • github.com/bytecodealliance/wasmtime-go/v3: v3.0.2
  • github.com/cespare/xxhash: v1.1.0
  • github.com/checkpoint-restore/go-criu/v6: v6.3.0
  • github.com/containerd/cgroups/v3: v3.0.5
  • github.com/containers/common: v0.64.1
  • github.com/containers/image/v5: v5.36.1
  • github.com/containers/storage: v1.59.1
  • github.com/cpu/goacmedns: v0.1.1
  • github.com/docopt/docopt-go: ee0de3b
  • github.com/eapache/queue/v2: 75960ed
  • github.com/fogleman/gg: v1.3.0
  • github.com/gdamore/encoding: v1.0.1
  • github.com/gdamore/tcell/v2: v2.8.1
  • github.com/ghodss/yaml: v1.0.0
  • github.com/globocom/go-buffer: v1.2.2
  • github.com/go-fonts/dejavu: v0.1.0
  • github.com/go-fonts/latin-modern: v0.2.0
  • github.com/go-fonts/liberation: v0.2.0
  • github.com/go-fonts/stix: v0.1.0
  • github.com/go-gl/glfw: e6da0ac
  • github.com/go-gl/glfw/v3.3/glfw: 6f7a984
  • github.com/go-latex/latex: c0d11ff
  • github.com/go-pdf/fpdf: v0.6.0
  • github.com/golang/freetype: e2365df
  • github.com/google/martian: v2.1.0
  • github.com/google/martian/v3: v3.3.3
  • github.com/google/renameio: v0.1.0
  • github.com/googleapis/go-type-adapters: v1.0.0
  • github.com/googleapis/google-cloud-go-testing: bcd43fb
  • github.com/grpc-ecosystem/grpc-gateway: v1.16.0
  • github.com/hashicorp/golang-lru: v0.5.1
  • github.com/iancoleman/strcase: v0.3.0
  • github.com/jstemmer/go-junit-report: v0.9.1
  • github.com/jung-kurt/gofpdf: 24315ac
  • github.com/kisielk/errcheck: v1.5.0
  • github.com/kisielk/gotool: v1.0.0
  • github.com/klauspost/asmfmt: v1.3.2
  • github.com/klauspost/cpuid/v2: v2.0.9
  • github.com/lucasb-eyer/go-colorful: v1.2.0
  • github.com/lyft/protoc-gen-star: v0.6.1
  • github.com/lyft/protoc-gen-star/v2: 496ad1a
  • github.com/mattn/go-zglob: v0.0.6
  • github.com/minio/asm2plan9s: cdd7644
  • github.com/minio/c2goasm: 36a3d3b
  • github.com/moby/sys/atomicwriter: v0.1.0
  • github.com/morikuni/aec: v1.0.0
  • github.com/patrickmn/go-cache: v2.1.0
  • github.com/phpdave11/gofpdf: v1.4.2
  • github.com/phpdave11/gofpdi: v1.0.13
  • github.com/pierrec/lz4/v4: v4.1.15
  • github.com/pkg/diff: 20ebb0f
  • github.com/remyoudompheng/bigfft: eec4a21
  • github.com/rivo/tview: b0a7293
  • github.com/ruudk/golang-pdf417: a7e3863
  • github.com/sagikazarmark/slog-shim: v0.1.0
  • github.com/sclevine/agouti: v3.0.0
  • github.com/segmentio/ksuid: v1.0.4
  • github.com/sigstore/rekor-tiles: 98cd4a7
  • github.com/sigstore/timestamp-authority: v1.2.8
  • github.com/skratchdot/open-golang: eef8423
  • github.com/spaolacci/murmur3: f09979e
  • github.com/xdg-go/pbkdf2: v1.0.0
  • github.com/xdg-go/scram: v1.1.2
  • github.com/xdg-go/stringprep: v1.0.4
  • github.com/zeebo/assert: v1.3.0
  • github.com/zeebo/errs: v1.4.0
  • github.com/zeebo/xxh3: v1.0.2
  • go.etcd.io/etcd/client/v2: v2.305.21
  • go.etcd.io/etcd/raft/v3: v3.5.21
  • go.opentelemetry.io/collector/pdata/pprofile: v0.121.0
  • go.opentelemetry.io/contrib/detectors/aws/ec2: v1.36.0
  • go.opentelemetry.io/contrib/detectors/aws/ecs: v1.36.0
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc: v1.36.0
  • go.opentelemetry.io/otel/exporters/stdout/stdoutmetric: v1.36.0
  • golang.org/x/image: 723b81c
  • golang.org/x/mobile: d2bd2a2
  • gonum.org/v1/netlib: 8cb4219
  • gonum.org/v1/plot: v0.10.1
  • gopkg.in/errgo.v2: v2.1.0
  • k8s.io/gengo: 9cce18d
  • k8s.io/klog: v0.2.0
  • lukechampine.com/uint128: v1.2.0
  • modernc.org/cc/v3: v3.36.3
  • modernc.org/ccgo/v3: v3.16.9
  • modernc.org/ccorpus: v1.11.6
  • modernc.org/httpfs: v1.0.6
  • modernc.org/libc: v1.17.1
  • modernc.org/mathutil: v1.5.0
  • modernc.org/memory: v1.2.1
  • modernc.org/opt: v0.1.3
  • modernc.org/sqlite: v1.18.1
  • modernc.org/strutil: v1.1.3
  • modernc.org/tcl: v1.13.1
  • modernc.org/token: v1.0.0
  • modernc.org/z: v1.5.1
  • rsc.io/binaryregexp: v0.2.0
  • rsc.io/pdf: v0.1.1
  • rsc.io/quote/v3: v3.1.0
  • rsc.io/sampler: v1.3.0
  • sigs.k8s.io/structured-merge-diff/v4: v4.7.0

Don't miss a new security-profiles-operator release

NewReleases is sending notifications on new releases.