From 5b3eea58b32d7673503f830dbeb20eded65ae487 Mon Sep 17 00:00:00 2001 From: Andrew Taylor Date: Tue, 23 Jul 2024 13:06:02 -0400 Subject: [PATCH] CMP-2666: Added SPO 0.8.4 release notes --- modules/spo-binding-workloads.adoc | 5 +++-- .../spo-release-notes.adoc | 12 ++++++++++++ 2 files changed, 15 insertions(+), 2 deletions(-) diff --git a/modules/spo-binding-workloads.adoc b/modules/spo-binding-workloads.adoc index 5e76a2c81db6..8f69e05d73e0 100644 --- a/modules/spo-binding-workloads.adoc +++ b/modules/spo-binding-workloads.adoc @@ -22,7 +22,7 @@ You can use the `ProfileBinding` resource to bind a security profile to the `Sec .Procedure -. To bind a pod that uses a `quay.io/security-profiles-operator/test-nginx-unprivileged:1.21` image to the example `{kind}` profile, create a `ProfileBinding` object in the same namespace with the pod and the `{kind}` objects: +. To bind a pod that uses a default image to the example `{kind}` profile, create a `ProfileBinding` object in the same namespace with the pod and the `{kind}` objects: + [source,yaml,subs="attributes+"] ---- @@ -35,10 +35,11 @@ spec: profileRef: kind: {kind} <1> name: profile <2> - image: quay.io/security-profiles-operator/test-nginx-unprivileged:1.21 + image: * <3> ---- <1> The `kind:` variable refers to the name of the profile. <2> The `name:` variable refers to the name of the profile. +<3> You can enable a default `ProfileBinding` by using the `*` as the image name. . Label the namespace with `enable-binding=true` by running the following command: + diff --git a/security/security_profiles_operator/spo-release-notes.adoc b/security/security_profiles_operator/spo-release-notes.adoc index ddd9f4430e6f..0dfa8ade8552 100644 --- a/security/security_profiles_operator/spo-release-notes.adoc +++ b/security/security_profiles_operator/spo-release-notes.adoc @@ -12,6 +12,18 @@ These release notes track the development of the Security Profiles Operator in { For an overview of the Security Profiles Operator, see xref:../../security/security_profiles_operator/spo-overview.adoc#[Security Profiles Operator Overview]. +[id="spo-release-notes-0-8-4"] +== Security Profiles Operator 0.8.4 + +The following advisory is available for the Security Profiles Operator 0.8.4: + +* link:https://access.redhat.com/errata/RHBA-2024:4781[RHBA-2024:4781 - OpenShift Security Profiles Operator bug fix update] + +[id="spo-0-8-4-new-features-and-enhancements"] +=== New features and enhancements + +* You can now specify a default `ProfileBinding` by setting a wildcard. For more information, see xref:../../security/security_profiles_operator/spo-selinux.adoc#spo-binding-workloads_spo-selinux[Binding workloads to profiles with ProfileBindings (SELinux)] and xref:../../security/security_profiles_operator/spo-seccomp.adoc#spo-binding-workloads_spo-seccomp[Binding workloads to profiles with ProfileBindings (Seccomp)] + [id="spo-release-notes-0-8-2"] == Security Profiles Operator 0.8.2