Cluster Shield Release Notes

Here are the most recent release notes for Cluster Shield. Review the entries to learn about the latest features, defect fixes, and known issues.

1.22.0 April 24, 2026

Supported shield chart version: 1.35.0

Fixed an issue causing Admission Controller to incorrectly handle Image Signature Verification due to incorrect evaluation of the certificate timestamp.
Fixed an issue causing Admission Controller not to correctly evaluate Image Signature Validation policies when the scope was set to the whole infrastructure.

This release addresses the following vulnerabilities:

Supported shield chart version: 1.31.0

Fixed a bug which could cause a fatal error: concurrent map writes error when analyzing Python uv.lock files.
Fixed a bug where RHEL EUS distributions were incorrectly identified as standard RHEL.
Resolved an issue where the Kubernetes Lease resource created using Helm was missing standard Kubernetes labels:
- app.kubernetes.io/name
- app.kubernetes.io/instance
- app.kubernetes.io/version

This release addresses the following vulnerabilities:

Supported shield chart version: 1.30.0

Lease resources are no longer managed by the Helm chart and are now created directly by Cluster Shield with an ownerReference configured. Their lifecycle is delegated to Kubernetes garbage collection, ensuring automatic cleanup when the owning component is removed. This improves upgrade reliability, prevents orphaned resources, reduces operational complexity, and aligns resource management with native Kubernetes behavior for more predictable deployments.

This release addresses the following vulnerabilities:

Supported shield chart version: 1.27.0

Fixed an issue in Response Actions where the Volume Snapshot action failed for deployments with multiple pods sharing the same Persistent Volume Claim (PVC). The action now deduplicates shared PVCs, preventing the too many matching PVCs found error.

This release addresses the following vulnerabilities: