Security Inspector

Version

Image address

Release date

Description

Impact

v0.13.0.0-g88dfa8f-aliyun

registry-cn-hangzhou.ack.aliyuncs.com/acs/security-inspector:v0.13.0.0-g88dfa8f-aliyun

2024-03-26

Expanded role-based access control (RBAC) inspections to check for wildcard usage, cluster-admin role assignments, and modifications to default cluster roles such as system:basic-user, system:discovery, and system:public-info-viewer.

This upgrade does not affect your workloads.

Version

Image address

Release date

Description

Impact

v0.12.0.7-g6f9d47f-aliyun

registry-cn-hangzhou.ack.aliyuncs.com/acs/security-inspector:v0.12.0.7-g6f9d47f-aliyun

2024-02-21

Host network usage and the health check listening port are now configurable on the Add-ons page.

This upgrade does not affect your workloads.

Version

Image address

Release date

Description

Impact

v0.11.0.3-ga2fad87-aliyun

registry-cn-hangzhou.ack.aliyuncs.com/acs/security-inspector:v0.11.0.3-ga2fad87-aliyun

December 21, 2023

Custom ttlSecondsAfterFinished values for security-inspector-polaris-cronjob are now preserved during component updates.

This update does not affect your workloads.

Version

Image address

Release date

Description

Impact

v0.10.1.2-g13c9de7-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.10.1.2-g13c9de7-aliyun

2023-06-02

• Fixed a component failure after upgrading the cluster to 1.26.3-aliyun.1.

• Optimized periodic scan logic to run one task at a time, preventing task pods from getting stuck in Pending state.

This upgrade has no impact on your workloads.

Version

Image address

Release date

Description

Impact

v0.10.0.3-g15b35c4-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.10.0.3-g15b35c4-aliyun

April 13, 2023

Added support for Kubernetes 1.26.

No impact on your workloads.

Version

Image address

Release date

Description

Impact

v0.9.1.0-gcdddfa7-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.9.1.0-gcdddfa7-aliyun

2023-02-27

Fixed CVE-2023-0286 in the component's base image.

No impact on workloads.

Version

Image address

Release date

Description

Impact

v0.9.0.0-g1d38ec6-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.9.0.0-g1d38ec6-aliyun

December 22, 2022

• Adds support for ACK Serverless clusters that run Kubernetes 1.18 and later.

• Restore a Simple Log Service (SLS) dashboard after accidental deletion by restarting the component pod.

This update does not affect your workloads.

v0.8.3.2-ge5496db-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.8.3.2-ge5496db-aliyun

December 13, 2022

This version is in canary release.

Faster initialization removes the multi-minute wait before running security inspections.

This update does not affect your workloads.

Version

Image address

Release date

Description

Impact

v0.8.3.1-gf7bf0e0-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.8.3.1-gf7bf0e0-aliyun

2022-08-30

Adds links to detailed information in the messages for the SecurityInspectorConfigAuditHighRiskFound and SecurityInspectorConfigAuditFinished events.

This upgrade has no impact on your workloads.

Version

Image address

Release date

Description

Impact

v0.8.2.16-gc84d60d-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.8.2.16-gc84d60d-aliyun

June 21, 2022

• Fixed an issue where the MountVolume.SetUp failed for volume "config" : object "kube-system"/"security-inspector-polaris-config" not registered event might occur in Kubernetes 1.22 clusters.

• Reduced API server load from the component in large-scale clusters.

No impact on workloads.

Version

Image address

Release date

Description

Impact

v0.8.1.0-g58d1a56-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.8.1.0-g58d1a56-aliyun

2022-04-11

• Fixed a component misconfiguration that caused automatic node draining to fail for nodes hosting a Pod.

• Fixed incorrect inspection reports when multiple clusters shared the same SLS project.

This upgrade does not affect workloads.

Version

Image address

Release date

Description

Impact

v0.8.0.0-gb0edd1d-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.8.0.0-gb0edd1d-aliyun

February 15, 2022

• Changed the severity level of the privilegeEscalationAllowed check to Medium.

• Fixed issue #84880 to improve support for Kubernetes 1.16 clusters.

No impact on your workloads.

Version

Image address

Release date

Description

Impact

v0.7.0.5-g8cc37b6-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.7.0.5-g8cc37b6-aliyun

2021-12-03

• Adds support for Kubernetes 1.22. The minimum required version of Kubernetes is now 1.16.

• Adds support for the ARM64 architecture.

This update does not affect your workloads.

Version

Image address

Release date

Description

Impact

v0.6.0.4-gc12ad66-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.6.0.4-gc12ad66-aliyun

September 20, 2021

• Added support for scanning against the Center for Internet Security (CIS) Kubernetes V1.20 Benchmark v1.0.0.

• The capabilitiesAdded inspection item now ignores case when checking capabilities. See Configure cluster workload inspections.

This update does not affect your workloads.

Version

Image address

Release date

Description

Impact

v0.5.0.2-g5e33765-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.5.0.2-g5e33765-aliyun

2021-06-24

Fixed incorrect inspection reports when multiple clusters shared the same SLS project.

This is a non-disruptive update.

Version

Image address

Release date

Description

Impact

v0.4.0.0-g541eb31-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.4.0.0-g541eb31-aliyun

March 15, 2021

• Added support for the CIS Kubernetes benchmark.

• This release adds the following Kubernetes events to the Event Center:

  • SecurityInspectorConfigAuditStart: Indicates that the configuration inspection has started.

  • SecurityInspectorConfigAuditFinished: Indicates that the configuration inspection has completed.

  • SecurityInspectorConfigAuditHighRiskFound: Signals that the configuration inspection found a high-risk configuration.

  • SecurityInspectorBenchmarkStart: Indicates that the benchmark check has started.

  • SecurityInspectorBenchmarkFinished: Indicates that the benchmark check has completed.

  • SecurityInspectorBenchmarkFailedCheckFound: Signals that the benchmark check found a failed scored check item.

This update does not affect your workloads.

Version

Image address

Release date

Description

Impact

v0.3.0.2-gcb49252-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.3.0.2-gcb49252-aliyun

January 5, 2021

Adds support for scanning anonymous user permissions to identify risky RBAC configurations.

This upgrade does not affect your workloads.

Version

Image address

Release date

Description

Impact

v0.2.0.22-gd1fbaff-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.2.0.22-gd1fbaff-aliyun

December 16, 2020

• You can now store the latest inspection results as Custom Resource Definitions (CRDs).

• You can now enable or disable specified inspection items.

• You can now configure a workload whitelist.

This update does not affect your workloads.

Version

Image address

Release date

Description

Impact

v0.1.0.3-g69f71f6-aliyun

registry.cn-hangzhou.aliyuncs.com/acs/security-inspector:v0.1.0.3-g69f71f6-aliyun

2020-07-06

Manually trigger inspection tasks to check cluster workloads and generate reports.

No impact on your workloads.