Red Hat Advanced Cluster Security for Kubernetes 3.64

ROX-7230: You can now use deployment and namespace annotations to define where Red Hat Advanced Cluster Security for Kubernetes sends violation notifications when configuring your notifiers. Notifications can be sent to Slack, Microsoft Teams, Email, and others.

ROX-7534: With the Red Hat Advanced Cluster Security for Kubernetes Operator, you can now configure the enforcement behavior of the admission controller as part of the custom resource setting.

ROX-7561: Red Hat Advanced Cluster Security for Kubernetes now supports kernel modules for Ubuntu 16.04 LTS with extended security maintenance (ESM).

ROX-6326: Previously, users with a large number of namespaces would receive sporadic 504 gateway errors when sending requests to the /v1/namespaces/ endpoint. Red Hat Advanced Cluster Security for Kubernetes includes the updated endpoint, which supports pagination to fix this issue.

ROX-6258: Red Hat Advanced Cluster Security for Kubernetes now prefixes the optional security context constraint name with stackrox to avoid global naming conflicts.

ROX-7318: Previously, violations for port forwards and exec events did not contain information about the user who performed the action that generated the events. The violations now include the user context.

ROX-7449: Cluster init bundles contain the secrets required for internal Red Hat Advanced Cluster Security for Kubernetes services to communicate with each other. You can rotate secrets by deleting these, but doing so can cause outages. Red Hat Advanced Cluster Security for Kubernetes now includes an updated deletion workflow that gives a warning about the possible impact of deletion on the environment.

ROX-7684: The OpenShift Compliance Operator uses RPM only for querying, and it does not install any packages. Red Hat Advanced Cluster Security for Kubernetes includes a policy exception for this pod by default to reduce the violations count.