# KubeArmor v1.7.x Release Notes Summary

## Version 1.7.4

### ✨ New Features & Enhancements
- **Network Quotas:** Added network bandwidth quota handling and enforcement via the Network Policy Enforcer (NPE).
- **DNS Support:** Extend DNS support for subdomains and verifier compatibility for newer Linux kernels (v6.17).
- **OS Support:** 
  - Added openEuler 24.03 LTS-SP3 to the supported OS matrix.
- **Healthchecks:** Introduced a new gRPC-based healthcheck for liveness probes, improving daemon stability monitoring.
- **Policy Matching:** Improved policy matching for hostnames to ensure more accurate host-based enforcement.
- **Memory Optimization:** Implemented rate-limiting for dropped logs in the feeder to prevent memory spikes.
- **Security & CI/CD:**
  - Integrated Renovate bot to automate dependency pinning, improving the OpenSSF Scorecard from 0/10 to 6/10.
  - Added token permissions to workflows for OpenSSF Scorecard compliance.
  - Implemented SLSA provenance generation in the `ci-systemd-release` workflow.

- **Governance:** Updated maintainers list, CODEOWNERS, and project governance documentation.

### 🐛 Bug Fixes
- **Containerd Events & CVEs:** 
  - Fixed an issue by using the `TaskExit` type to properly unmarshal containerd exit events.
  - Patched HIGH-severity containerd CVEs.

- **USB Handling:** Increased the USB socket buffer and added panic handling to prevent daemon crashes.

- **Daemon Stability:** Fixed a critical panic caused by a `send on closed channel` error.

- **Alpine Images:** 
  - Fixed the `kubearmor-init` alpine image build workflow.

- **CI Pipelines:** 
  - Fixed the CI pipeline to properly certify images on Red Hat ecosystems.

---

## Version 1.7.3

### ✨ New Features & Enhancements
- **Policy Watchers:** Migrated from standard watchers to using Kubernetes informers to watch Host and Network policies, significantly improving performance and reducing API server load.

### 🐛 Bug Fixes
- **System Monitor:** Fixed a BPF verifier error in the system monitor that occurred specifically on Ubuntu 18.04 using Clang 12.
---

## Version 1.7.2

### ✨ New Features & Enhancements
- **GKE Support:** Added the `gkeAllowlistVersion` flag to improve compatibility and control over GKE deployments.


### 🐛 Bug Fixes
- **CPU Architecture Compatibility:** Fixed a critical issue where the init container was incompatible with older CPUs that do not support the `x86-64-v3` microarchitecture instruction set.
- **Controller Scheduling:** Fixed an issue with controller toleration updates.

---

## Version 1.7.1

### 🐛 Bug Fixes
- **UBI Releases:** Fixed a bug related to the automated release of controller and operator UBI images.

---

## Version 1.7.0

### ✨ New Features & Enhancements
- **DNS Enforcement Core:** Introduced **DNS Enforcement** capabilities directly into KubeArmor.
- **Audit Support:** Added support for `Audit` actions in DNS rules, allowing users to observe traffic without blocking it.

### 🐛 Bug Fixes
- **Allow Policies:** Fixed several bugs related to `Allow` actions in network policies.
