Enable user management in Kibana introduced in Cyberwatch 15.6
Change: Disable the web interface by default on satellite nodes
When nginx.limitToApi is not set, it defaults to true on satellite nodes and false on other nodes
nginx.limitToApi: false can still be set explicitly to re-enable the web interface on a satellite
Removed: the webScanner.web_scanner_api_key and webScanner.webScannerApiKeySecret variables are no longer used
0.6.7 (2026-03-23)
Add volume size configuration for elasticsearch with the elasticsearch.storageSize variable
Add environment variable configuration with *.env for the container-scanner and web-scanner pods
0.6.6 (2026-03-06)
Elasticsearch data is now persistent
0.6.5 (2026-02-24)
Added allowPrivilegeEscalation to the sidekiq-node pod to enable nmap scans
0.6.4 (2026-02-13)
Fixed volume permissions in container-scanner
0.6.3 (2026-01-26)
Removed the container-scanner volume cleanup service
Cleanup is now performed directly by the container-scanner service
Added a service to the nginx pod on satellite nodes
Added support for Kubernetes secrets for all secrets in the values.yml file
0.6.2 (2026-01-09)
Redis data is now persistent
Fixed warning message related to Elasticsearch pod
Fixed warning message for container-scanner cron job
0.6.1 (2025-12-12)
Added a service to clean up the container-scanner volume
The cleanup interval is configurable via containerScanner.cleanupIntervalHours
The Elasticsearch pod is now a StatefulSet
Added startupProbe and livenessProbe to cache and redis pods
Fixed data-uploads volume mounting when a node is offline
0.6.0 (2025-08-25)
Add NodeSelector capability to pods
Added the ability to scale container-scanner and web-scanner
Added the ability to configure a Horizontal Pod Autoscale (HPA) for web, sidekiq, sidekiq_node, container-scanner and web-scanner pods
Simplified use of certificates for ingress, DB and redis
It is now possible to enter certificates and keys directly in the Values.yml file.
Ingress secrets are not regenerated on each installation
Added support for multiple ingresses.
Added a new configuration for the ingress(es) via the ingress.hosts variable.
Deprecated: the variables ingress.host, ingress.tls, ingress.ingressClassName and ingress.annotations are now deprecated. The variables will be removed in a future update.
Added the ability to use a Persistent Volume (PV) et Persistent Volume Claim (PVC) for the container-scanner cache
Deprecated: the containerScanner.cache_size_limit variable is deprecated. You must now use containerScanner.cacheStorageSize or containerScanner.existingClaim. The variable will be removed in a future update.
Added the ability to specify the Deployments update strategy
DB and redis pods are now in StatefulSet
Add a NOTES.txt file to warn of deprecations after a Helm chart installation or update
Fixed annotation used to disable apparmor on container-scanner
Deprecated: *.extraEnvVars variables for all pods are now displayed as deprecated in the NOTES.txt. It is recommended to use *.env