
Falco 0.30: Runtime Security for Kubernetes
Falco 0.30 enhances runtime security with improved rule engine, better Kubernetes integration, and expanded threat detection capabilities for cloud-native workloads.

Falco 0.30 enhances runtime security with improved rule engine, better Kubernetes integration, and expanded threat detection capabilities for cloud-native workloads.

Kyverno 1.0 achieves General Availability, delivering a Kubernetes-native policy engine with validation, mutation, and generation capabilities for cloud-native security.

KubeArmor introduces eBPF-based runtime security enforcement for Kubernetes, providing system call filtering and policy enforcement at the kernel level.

External Secrets Operator 0.6 integrates external secret management systems with Kubernetes, providing secure, automated secret synchronization for cloud-native applications.

Istio 1.11 improves multi-cluster topologies, enhances security policies, and introduces experimental ambient mesh for sidecar-free workloads.

Bottlerocket 1.1 enhances the container-optimized OS with improved security, better Kubernetes integration, and enhanced tooling for node management.

cert-manager 1.6 enhances automated TLS certificate management with improved ACME support, better issuer integration, and enhanced security features for Kubernetes workloads.

Cilium 1.10 enhances eBPF-based networking with improved performance, advanced security policies, and expanded Hubble observability capabilities.

Kubernetes 1.21 focused on security, stability, and long-term consistency, introducing immutable Secrets and ConfigMaps GA, graceful node shutdown GA, CronJobs GA, and the deprecation of PodSecurityPolicies. This release included 50 enhancements with 15 graduating to stable.

Harbor 2.2 enhances the enterprise container registry with improved security scanning, better OCI artifact support, and enhanced Kubernetes integration for cloud-native deployments.