Version 2.25.0-agent

Added

• Helm Parameter clusterDefaultsAutoDeployExemptNamespaces
  This new Helm parameter defines a list of namespaces for which the auto-deploy setting defined in the cluster-defaults ConfigMap will be ignored.

  This parameter has a default value of ["^kube-system$", "^openshift.*"]. Workloads in namespaces matching these regular expressions will not be subject to the auto-deploy setting defined in cluster-defaults. To enable auto-deploy on workloads in affected namespaces, you must use a namespace annotation, or a workload annotation.

  To modify this behavior, set the parameter to null or to a list of regular expressions that you define.

Changed

• Helm Parameter workload.denyNamespaces
  The default value for this parameter is now null. StormForge will observe and create recommendations for workloads in all namespaces by default.

  Previously, this parameter had a default value of ["kube-system", "openshift.*"].

Security

• Addressed CVE-2025-68156