RSS

Cluster Shield Release Notes

Here are the most recent release notes for Cluster Shield. Review the entries to learn about the latest features, defect fixes, and known issues.

1.23.0 May 28, 2026

Supported shield chart version: 1.42.0

Enhancements

  • The audit feature can now poll Kubernetes audit events from CloudWatch Logs when running on EKS nodes. Authentication is handled automatically via IRSA if the cluster-shield ServiceAccount is annotated with the appropriate IAM role. Follow the dedicated documentation to set this up.

Defect Fixes

  • Fixed an issue which could cause Container Vulnerability Management feature to terminate unexpectedly.

Vulnerability Fixes

This release addresses the following vulnerabilities:

1.22.0 April 24, 2026

Supported shield chart version: 1.35.0

Defect Fixes

  • Fixed an issue causing Admission Controller to incorrectly handle Image Signature Verification due to incorrect evaluation of the certificate timestamp.
  • Fixed an issue causing Admission Controller not to correctly evaluate Image Signature Validation policies when the scope was set to the whole infrastructure.

Vulnerability Fixes

This release addresses the following vulnerabilities:

1.21.0 March 26, 2026

Supported shield chart version: 1.31.0

Defect Fixes

  • Fixed a bug which could cause a fatal error: concurrent map writes error when analyzing Python uv.lock files.
  • Fixed a bug where RHEL EUS distributions were incorrectly identified as standard RHEL.
  • Resolved an issue where the Kubernetes Lease resource created using Helm was missing standard Kubernetes labels:
    • app.kubernetes.io/name
    • app.kubernetes.io/instance
    • app.kubernetes.io/version

Vulnerability Fixes

This release addresses the following vulnerabilities:

1.20.0 February 26, 2026

Supported shield chart version: 1.30.0

Enhancements

  • Lease resources are no longer managed by the Helm chart and are now created directly by Cluster Shield with an ownerReference configured. Their lifecycle is delegated to Kubernetes garbage collection, ensuring automatic cleanup when the owning component is removed. This improves upgrade reliability, prevents orphaned resources, reduces operational complexity, and aligns resource management with native Kubernetes behavior for more predictable deployments.

Defect Fixes

Vulnerability Fixes

This release addresses the following vulnerabilities:

1.19.0 January 29, 2026

Supported shield chart version: 1.27.0

Defect Fixes

  • Fixed an issue in Response Actions where the Volume Snapshot action failed for deployments with multiple pods sharing the same Persistent Volume Claim (PVC). The action now deduplicates shared PVCs, preventing the too many matching PVCs found error.

Vulnerability Fixes

This release addresses the following vulnerabilities: