Version 2.11.0-applier
Changed
- Attention: mutation webhook is now enabled by default with
webhook.enabled=truepart of the helm values file. If one does not want to have the mutation webhook feature enabled, one needs to specifywebhook.enabled=false - Expose applier metrics via port 8080 as part of the webhook service
- Bumped K8s libraries to 1.35
Added
- Helm parameter to support network policies:
networkPolicies.create=trueand optionally for egress network policynetworkPolicies.additionalEgressRuleswith sample example on file
Security
- Addressed CVE-2025-61729
Last modified January 9, 2026