v1.6.0

helm show chart oci://quay.io/jetstack/charts/venafi-kubernetes-agent --version 1.6.0

What's Changed

This release contains the following notable bug fixes and dependency updates:

• Reduce memory usage by removing the Replicaset data gatherer from the default config by @wallrj in #658
• Fix a bug that caused proxy settings to be ignored by @hawksight in #669
• golang.org/x/net was upgraded to address: CVE-2025-22872 by @wallrj in #675
• Go was upgraded to v1.24.4 to address: CVE-2025-22874, CVE-2025-0913, and CVE-2025-4673

Non user-facing changes

• make upgrade-klone upgrade-base generate-govulncheck by @wallrj in #657
• feat: Initial work on CyberArk Identity client by @SgtCoDFish in #655
• VC-41203: Allow users to select the Machine Hub mode by @maelvls in #653
• golangci-lint spelling linter fixes by @inteon in #659
• Linter fixes (part 2) by @inteon in #660
• Cleanup: config.go by @inteon in #661
• Cleanup client interface by @inteon in #662
• Use new client-go functions for contextual logging by @inteon in #663
• Quick README cleanup, removing a lot of out of date information by @inteon in #665
• Drop unused Delete() function by @inteon in #667
• Remove parts of API that are not used by @inteon in #666
• Remove unnecessary go dependencies by @inteon in #668
• Add CyberArk client and mock server by @inteon in #664
• chore: manually upgrade makefile-modules by @SgtCoDFish in #671
• Go module upgrades to fix CVE-2025-22872 by @wallrj in #675
• Update Go modules in preparation for releasing 1.6.0 by @wallrj in #676

Helm Chart Changes

--- /dev/fd/63  2025-06-25 15:40:20.799993519 +0100
+++ /dev/fd/62  2025-06-25 15:40:20.799993519 +0100
@@ -62,13 +62,6 @@
           resource: deployments
           group: apps
     - kind: "k8s-dynamic"
-      name: "k8s/replicasets"
-      config:
-        resource-type:
-          version: v1
-          resource: replicasets
-          group: apps
-    - kind: "k8s-dynamic"
       name: "k8s/statefulsets"
       config:
         resource-type:
@@ -884,8 +877,25 @@
             runAsNonRoot: true
             seccompProfile:
               type: RuntimeDefault
-          image: "quay.io/jetstack/venafi-agent:v1.5.0"
+          image: "quay.io/jetstack/venafi-agent:v1.6.0"
           imagePullPolicy: IfNotPresent
+          env:
+          - name: POD_NAMESPACE
+            valueFrom:
+              fieldRef:
+                fieldPath: metadata.namespace
+          - name: POD_NAME
+            valueFrom:
+              fieldRef:
+                fieldPath: metadata.name
+          - name: POD_UID
+            valueFrom:
+              fieldRef:
+                fieldPath: metadata.uid
+          - name: POD_NODE
+            valueFrom:
+              fieldRef:
+                fieldPath: spec.nodeName
           args:
             - "agent"
             - "-c"
@@ -909,23 +919,6 @@
             - name: credentials
               mountPath: "/etc/venafi/agent/key"
               readOnly: true
-          env:
-          - name: POD_NAMESPACE
-            valueFrom:
-              fieldRef:
-                fieldPath: metadata.namespace
-          - name: POD_NAME
-            valueFrom:
-              fieldRef:
-                fieldPath: metadata.name
-          - name: POD_UID
-            valueFrom:
-              fieldRef:
-                fieldPath: metadata.uid
-          - name: POD_NODE
-            valueFrom:
-              fieldRef:
-                fieldPath: spec.nodeName
           ports:
             - containerPort: 8081
               name: http-metrics

Docker Image Changes

$ diffoci diff quay.io/jetstack/venafi-agent:v1.5.0 quay.io/jetstack/venafi-agent:v1.6.0 --semantic
INFO[0000] Target platforms: [linux/amd64]
TYPE     NAME                               INPUT-0                                                             INPUT-1
Layer    ctx:/manifests-0/layers-0/layer    length mismatch (666 vs 669)
Layer    ctx:/manifests-0/layers-0/layer    name "lib/apk/db" only appears in input 0
Layer    ctx:/manifests-0/layers-0/layer    name "lib/apk/db/lock" only appears in input 0
Layer    ctx:/manifests-0/layers-0/layer    name "lib/apk/db/scripts.tar" only appears in input 0
Layer    ctx:/manifests-0/layers-0/layer    name "lib/apk/db/installed" only appears in input 0
File     lib/apk                            Linkname                                                            Linkname ../usr/lib/apk
Layer    ctx:/manifests-0/layers-0/layer    name "lib/apk/db/triggers" only appears in input 0
Layer    ctx:/manifests-0/layers-0/layer    name "usr/lib/apk/exec" only appears in input 1
Layer    ctx:/manifests-0/layers-0/layer    name "usr/lib/apk/db/triggers" only appears in input 1
Layer    ctx:/manifests-0/layers-0/layer    name "usr/lib/apk/db" only appears in input 1
Layer    ctx:/manifests-0/layers-0/layer    name "usr/lib" only appears in input 1
Layer    ctx:/manifests-0/layers-0/layer    name "usr/lib/apk" only appears in input 1
Layer    ctx:/manifests-0/layers-0/layer    name "usr/lib/apk/db/installed" only appears in input 1
Layer    ctx:/manifests-0/layers-0/layer    name "usr/lib/apk/db/lock" only appears in input 1
Layer    ctx:/manifests-0/layers-0/layer    name "usr/lib/apk/db/scripts.tar" only appears in input 1
File     ko-app/preflight                   0f9e150ac6eb84d6da1f23e9ab36e10fc923dd728c9ed71ef305030e178477ec    144c10c27ae5fb3dc5974dd4a648d48bd00bf8e29f83fdd3cd95b8093d975b74
File     licenses/LICENSES                  993aa0cd6335911daa13e99056a65a6c431cf6078da800c38ef2fcfcc6219439    a808d2a8c423671bc8be51030969d3fd89915e6097e09c0ffc2896a4c3741dc3
Mani     ctx:/manifests-0/annotations       field "Annotations"
Idx      ctx:/annotations                   field "Annotations"

Full Changelog: v1.5.0...v1.6.0