Cluster Shieldhttps://docs.sysdig.com/en/release-notes/sysdig-cluster-shield-release-notes/Recent content on Cluster ShieldenFri, 14 Aug 2026 09:49:05 -0400 https://docs.sysdig.com/icons/sysdig-horizontal.pngCluster Shieldhttps://docs.sysdig.com/en/release-notes/sysdig-cluster-shield-release-notes/Sysdig logoCluster Shield - 1.25.0 July 30, 2026https://docs.sysdig.com/en/release-notes/sysdig-cluster-shield-release-notes/#1.25.0-july-30-2026Supported shield chart version: 1.49.0Supported shield chart version: 1.49.0

Enhancements

  • Added a default cluster tag so Kube State Metrics (KSM) reported via Cluster Shield now include an agent_tag_cluster label set to the configured cluster name.
  • Added collection of Apache Spark labels (spark-role, spark-app-name) to workload definitions when present, enabling downstream Spark workload aggregation.
  • Kubernetes Audit supports GKE logs, relying on Google Cloud Logging and Pub/Sub. To set up Kubernetes Audit for GKE, see Kubernetes Audit Integration.

Vulnerability Fixes

This release addresses the following vulnerabilities:

]]>1.25.0 July 30, 2026Cluster Shield - 1.24.1 July 9, 2026https://docs.sysdig.com/en/release-notes/sysdig-cluster-shield-release-notes/#1.24.1-july-9-2026Supported shield chart version: 1.46.4Supported shield chart version: 1.46.4

Defect Fixes

  • Fixed an issue where Kubernetes posture scans could stop running until a rollout restart, caused by the posture component mishandling a leadership change.

Vulnerability Fixes

This release addresses the following vulnerabilities:

]]>1.24.1 July 9, 2026Cluster Shield - 1.24.0 June 26, 2026https://docs.sysdig.com/en/release-notes/sysdig-cluster-shield-release-notes/#1.24.0-june-26-2026Supported shield chart version: 1.44.0Supported shield chart version: 1.44.0

Defect Fixes

  • Fixed a memory leak in the Kubernetes Audit component that caused memory usage to grow each time new policies were loaded.

Vulnerability Fixes

This release addresses the following vulnerabilities:

]]>1.24.0 June 26, 2026Cluster Shield - 1.23.0 May 28, 2026https://docs.sysdig.com/en/release-notes/sysdig-cluster-shield-release-notes/#1.23.0-may-28-2026Supported shield chart version: 1.42.0Supported shield chart version: 1.42.0

Enhancements

  • The audit feature can now poll Kubernetes audit events from CloudWatch Logs when running on EKS nodes. Authentication is handled automatically via IRSA if the cluster-shield ServiceAccount is annotated with the appropriate IAM role. Follow the dedicated documentation to set this up.

Defect Fixes

  • Fixed an issue which could cause Container Vulnerability Management feature to terminate unexpectedly.

Vulnerability Fixes

This release addresses the following vulnerabilities:

]]>1.23.0 May 28, 2026Cluster Shield - 1.22.0 April 24, 2026https://docs.sysdig.com/en/release-notes/sysdig-cluster-shield-release-notes/#1.22.0-april-24-2026Supported shield chart version: 1.35.0Supported shield chart version: 1.35.0

Defect Fixes

  • Fixed an issue causing Admission Controller to incorrectly handle Image Signature Verification due to incorrect evaluation of the certificate timestamp.
  • Fixed an issue causing Admission Controller not to correctly evaluate Image Signature Validation policies when the scope was set to the whole infrastructure.

Vulnerability Fixes

This release addresses the following vulnerabilities:

]]>1.22.0 April 24, 2026Cluster Shield - 1.21.0 March 26, 2026https://docs.sysdig.com/en/release-notes/sysdig-cluster-shield-release-notes/#1.21.0-march-26-2026Supported shield chart version: 1.31.0Supported shield chart version: 1.31.0

Defect Fixes

  • Fixed a bug which could cause a fatal error: concurrent map writes error when analyzing Python uv.lock files.
  • Fixed a bug where RHEL EUS distributions were incorrectly identified as standard RHEL.
  • Resolved an issue where the Kubernetes Lease resource created using Helm was missing standard Kubernetes labels:
    • app.kubernetes.io/name
    • app.kubernetes.io/instance
    • app.kubernetes.io/version

Vulnerability Fixes

This release addresses the following vulnerabilities:

]]>1.21.0 March 26, 2026Cluster Shield - 1.20.0 February 26, 2026https://docs.sysdig.com/en/release-notes/sysdig-cluster-shield-release-notes/#1.20.0-february-26-2026Supported shield chart version: 1.30.0Supported shield chart version: 1.30.0

Enhancements

  • Lease resources are no longer managed by the Helm chart and are now created directly by Cluster Shield with an ownerReference configured. Their lifecycle is delegated to Kubernetes garbage collection, ensuring automatic cleanup when the owning component is removed. This improves upgrade reliability, prevents orphaned resources, reduces operational complexity, and aligns resource management with native Kubernetes behavior for more predictable deployments.

Defect Fixes

Vulnerability Fixes

This release addresses the following vulnerabilities:

]]>1.20.0 February 26, 2026Cluster Shield - 1.19.0 January 29, 2026https://docs.sysdig.com/en/release-notes/sysdig-cluster-shield-release-notes/#1.19.0-january-29-2026Supported shield chart version: 1.27.0Supported shield chart version: 1.27.0

Defect Fixes

  • Fixed an issue in Response Actions where the Volume Snapshot action failed for deployments with multiple pods sharing the same Persistent Volume Claim (PVC). The action now deduplicates shared PVCs, preventing the too many matching PVCs found error.

Vulnerability Fixes

This release addresses the following vulnerabilities:

]]>1.19.0 January 29, 2026