Chao

Dependency updates and security patches

Provided Chao has access to a valid AWS credentials chain, it now interprets AWS ARN values in GREMLIN_TEAM_ID, GREMLIN_TEAM_SECRET, certPath, keyPath. Chao supports ARN values from AWS Secrets Manager or AWS Systems Manager Parameter Store. Chao can optionally be supplied with GREMLIN_IAM_ROLE to specify a role to assume for the strict purpose of fetching secret values.

Chao denies values for fullUpdateInterval less than 5 hours.

Chao provides a small amount of jitter (5%) between sending data to the backend to avoid thundering herds when multiple clusters restart at the same time

Dependency updates and security patches

Chao now tracks the `PodStatus` of the pods in your cluster, which will be used for future Detected Risks.

Dependency updates and minor fixes.

Chao now sends the imageID (e.g. docker.io/my/image@sha256:e10723f3ce663b535d00e21447d0ddb6895e0d08454e53398211318890ecb9029) of each container to inform detected risks.

Bug fix that controls how long to wait based on certain conditions before sending full update when namespaces are set when running chao

Improved Agent Efficiency: the Chao agent now tracks object changes or "deltas" in the cluster using Kubernetes APIs, allowing it to send only relevant changes to the backend.