K8sGPT v0.4.39
security++******!!
K8sGPT v0.4.39 adds a --resource flag to analyze a single resource and a ValidatingAdmissionPolicy analyzer. It also includes six fixes, covering event-derived failure anonymisation, RoleBinding ClusterRole resolution, ReplicaFailure reporting and OpenAI client handling. Two security entries update the gRPC Go module to v1.83.1 and v1.83.2.
What changes for platform teams
Platform teams running K8sGPT can now analyze one resource at a time and get diagnostics for ValidatingAdmissionPolicy objects. The gRPC updates are dependency CVE bumps, with no vulnerability in K8sGPT's own code reported in the notes.
Changes
- Deps: update module google.golang.org/grpc to v1.83.1 [security]security
- Deps: update module google.golang.org/grpc to v1.83.2 [security]security
- Add --resource flag to analyze a single resourceadded
- Add ValidatingAdmissionPolicy analyzeradded
- Anonymise resource names in event-derived failuresfixed
- Do not also report an unsupported scaleTargetRef as missingfixed
- Filter service events by involved object kindfixed
- Guard against empty completion choices in OpenAIClientfixed
- Report ReplicaFailure regardless of replica countfixed
- Resolve ClusterRole references in RoleBindingsfixed
- Deps: update actions/checkout action to v7other
- Deps: update golang docker tag to v1.27other
12 lines2 security2 added6 fixed2 othertyped from the source notes
Full release notes ↗ · all K8sGPT releases
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules