v1.21.0-rc.1

Changelog

• 1144691 (chore) Fix white spaces after dashboard sync env var PR (#2265)
• ee24cd4 Add annotation-gated migration handling for deployments and daemonsets (#2281)
• 2f69d01 Add dashboard force sync config (squash of #2184)
• ba27d3f Add helm metadata forwarder (#2273)
• fd3ab2e Add timer_create syscall to system-probe seccomp profile (#2274)
• 4714fa8 Build requirements once per profile, not for every node (#2292)
• 75e9cf1 CAP-3059 consolidate RBAC creation logic for custom resources (#2262)
• e3c5da1 Differentiate redhat tool versions in bundles (#2277)
• 2c29675 EKS add-on release for 1.19.1 (#2270)
• 452f789 Fix label selector key in docs (#2261)
• 9e9fbe0 Fix version in selector change message (#2258)
• 4bdc79a Harmonize operator with datadog helm chart (#2294)
• 15325db Refactor sort profiles (#2300)
• 94b91a1 Revert "Add timer_create syscall to system-probe seccomp profile (#2274)" (#2311)
• 24f1c33 Revert "[CWS] Add missing system-probe cws volume mount points (#2308)" (#2316)
• a635057 Update Agent version to 7.72.0 (#2287)
• b8e191f Update bundles for 1.20.0 (#2320) (#2324)
• f6f7c18 Update default Agent version to 7.72.1 (#2293)
• c095022 Update default metadata (#2309)
• c350dbf [1.19.1] Publish GCP Marketplace (#2271)
• 036b16e [AGENTONB-2547] Add Secret Refreshes (#2251)
• 01996bc [AGENTONB-2581] Explain the range of Operator permissions (#2286)
• 9c5105b [AGENTONB-2588] refactor metadata fowarder (#2244)
• 1abdb27 [AGENTONB-2591] Add public docs page and annotations for formatting (#2266)
• f42d1e3 [AGENTONB-2598] Update operator metadata (#2283)
• 8efe725 [AGENTONB-2598] Update operator metadata resource count tracking (#2291)
• cf0669c [AGENTONB-2604] (chore) Bump Go version to 1.25.3 (#2256)
• 7a4356a [AGENTONB-2642] Add checksum on default KSM configmap to restart DCA deployment if updated (#2264)
• c3c51b1 [AGENTONB-2666] [DatadogAgent] Only watch own namespace for DDA (#2288)
• c956954 [CWS] Add missing system-probe cws volume mount points (#2308)
• e470820 [CXP-2595] Clean up RunProcessChecksInCoreAgent config (#2178)
• 76f698a [documentation] Add cluster name steps in installation docs (#2303)
• 3fa031c [metadata-forwarder] filter helm release discovery by namespace and owner label (#2310)
• 6001d5a [profiles] Refactor profile apply (#2307)
• 272a47c add controllerrevisions collection in ksm check for agents > 7.72.x (#2249)
• 611c31b fix main generate (#2296)
• 7d8dafa only run metadata forwarders on leader (#2313)
• c051f28 update bundles (#2325)

v1.20.0

Changelog

• f13af83 Add APM to DPA and mark some fields as required (#2206)
• 8e61027 Add MKNOD capability to agent and system-probe when GPU monitoring is enabled (#2228)
• 5e68218 Add deprecation notice and documentation (#2195)
• 538ddeb Add fineGrainedAuthorization flag (#2188)
• e64a212 Add safeguards when comparing status to avoid panics (#2237)
• 8c52bc1 Add sync/force sync behavior to monitors/SLOs/Dashboards docs (#2199)
• d383cd6 Add warning and documentation about upcoming metadata changes (#2177)
• 73bbb4b Autoscaling based on custom metric query (#2174)
• b07f3cc Bump the gh-actions-packages group with 5 updates (#2216)
• aa08f97 Differentiate redhat tool versions in bundles (#2277) (#2280)
• 698a9a8 Fix version in selector change message (#2258) (#2259)
• 5fddea2 Noop: run modernize (#2207)
• 932085b Reduce status update frequency (#2220)
• 686a1db Safeguard unnecessary DS cleanup (#2242)
• f01ea1d Switch DP fallback objective to list (#2217)
• b03b1f1 Update Agent version to 7.72.0 (#2287) (#2289)
• 977f372 Update default Agent version to 7.71.1 (#2231)
• abc33b5 Update default Agent version to 7.72.1 (#2293) (#2297)
• 501fb37 [AGENTONB-2555][DatadogAgentInternal] Fix DDAI metric forwaders errors (#2214)
• 06c7b19 [AGENTONB-2570] Fix /debug/pprof endpoints (#2227)
• 210e44b [AGENTONB-2604] (chore) Bump Go version to 1.25.3 (#2256) (#2278)
• d7ee3f3 [AGENTONB-2642] Add checksum on default KSM configmap to restart DCA deployment if updated (#2264) (#2267)
• 9a933b7 [AGENTRUN-741] Update FIPS proxy version references to 1.1.17 (#2248)
• 2a49036 [CASCL-610] Add require RBAC for ArgoRollout support (#2221)
• 59e0267 [CONTINT-4643] Add an option to configure KSM custom resource metrics collection (#1927)
• a10a754 [CWS] allow security-agent to create the shared unix socket (#2211)
• 79da1db [DatadogAgentInternal][AGENTONB-2546] Profile DDAI name override (#2202)
• 68420ef [metrics-forwarder] Use official go client and add origins (#2148)
• 920f95a [profiles] Reduce dap status update frequency (#2190)
• 997da36 [profiles] Support GPU feature overrides in DAP (#2212)
• ae001bb feat(github): Add workflows for stale issues/PR management (#2223)
• eca0772 fix(stale): Fix typo in the chainguard name (#2230)
• 836be98 migrate to golangci-lint v2 (#2204)
• 55c5702 release v1.20.0 (#2305)
• fee1971 release v1.20.0-rc.1 (#2252)
• 6aeb2b5 release v1.20.0-rc.2 (#2275)
• 6ac8023 release v1.20.0-rc.3 (#2290)
• 2785ff8 release v1.20.0-rc.4 (#2298)
• f4e8de7 use curl to rest api instead of gh pr create (#2241)
• 173a751 usm: Match volume mounts to the CNM (#2229)

v1.20.0-rc.4

Changelog

• f13af83 Add APM to DPA and mark some fields as required (#2206)
• 8e61027 Add MKNOD capability to agent and system-probe when GPU monitoring is enabled (#2228)
• 5e68218 Add deprecation notice and documentation (#2195)
• 538ddeb Add fineGrainedAuthorization flag (#2188)
• e64a212 Add safeguards when comparing status to avoid panics (#2237)
• 8c52bc1 Add sync/force sync behavior to monitors/SLOs/Dashboards docs (#2199)
• d383cd6 Add warning and documentation about upcoming metadata changes (#2177)
• 73bbb4b Autoscaling based on custom metric query (#2174)
• b07f3cc Bump the gh-actions-packages group with 5 updates (#2216)
• aa08f97 Differentiate redhat tool versions in bundles (#2277) (#2280)
• 698a9a8 Fix version in selector change message (#2258) (#2259)
• 5fddea2 Noop: run modernize (#2207)
• 932085b Reduce status update frequency (#2220)
• 686a1db Safeguard unnecessary DS cleanup (#2242)
• f01ea1d Switch DP fallback objective to list (#2217)
• b03b1f1 Update Agent version to 7.72.0 (#2287) (#2289)
• 977f372 Update default Agent version to 7.71.1 (#2231)
• abc33b5 Update default Agent version to 7.72.1 (#2293) (#2297)
• 501fb37 [AGENTONB-2555][DatadogAgentInternal] Fix DDAI metric forwaders errors (#2214)
• 06c7b19 [AGENTONB-2570] Fix /debug/pprof endpoints (#2227)
• 210e44b [AGENTONB-2604] (chore) Bump Go version to 1.25.3 (#2256) (#2278)
• d7ee3f3 [AGENTONB-2642] Add checksum on default KSM configmap to restart DCA deployment if updated (#2264) (#2267)
• 9a933b7 [AGENTRUN-741] Update FIPS proxy version references to 1.1.17 (#2248)
• 2a49036 [CASCL-610] Add require RBAC for ArgoRollout support (#2221)
• 59e0267 [CONTINT-4643] Add an option to configure KSM custom resource metrics collection (#1927)
• a10a754 [CWS] allow security-agent to create the shared unix socket (#2211)
• 79da1db [DatadogAgentInternal][AGENTONB-2546] Profile DDAI name override (#2202)
• 68420ef [metrics-forwarder] Use official go client and add origins (#2148)
• 920f95a [profiles] Reduce dap status update frequency (#2190)
• 997da36 [profiles] Support GPU feature overrides in DAP (#2212)
• ae001bb feat(github): Add workflows for stale issues/PR management (#2223)
• eca0772 fix(stale): Fix typo in the chainguard name (#2230)
• 836be98 migrate to golangci-lint v2 (#2204)
• fee1971 release v1.20.0-rc.1 (#2252)
• 6aeb2b5 release v1.20.0-rc.2 (#2275)
• 6ac8023 release v1.20.0-rc.3 (#2290)
• 2785ff8 release v1.20.0-rc.4 (#2298)
• f4e8de7 use curl to rest api instead of gh pr create (#2241)
• 173a751 usm: Match volume mounts to the CNM (#2229)

v1.20.0-rc.3

Changelog

• f13af83 Add APM to DPA and mark some fields as required (#2206)
• 8e61027 Add MKNOD capability to agent and system-probe when GPU monitoring is enabled (#2228)
• 5e68218 Add deprecation notice and documentation (#2195)
• 538ddeb Add fineGrainedAuthorization flag (#2188)
• e64a212 Add safeguards when comparing status to avoid panics (#2237)
• 8c52bc1 Add sync/force sync behavior to monitors/SLOs/Dashboards docs (#2199)
• d383cd6 Add warning and documentation about upcoming metadata changes (#2177)
• 73bbb4b Autoscaling based on custom metric query (#2174)
• b07f3cc Bump the gh-actions-packages group with 5 updates (#2216)
• aa08f97 Differentiate redhat tool versions in bundles (#2277) (#2280)
• 698a9a8 Fix version in selector change message (#2258) (#2259)
• 5fddea2 Noop: run modernize (#2207)
• 932085b Reduce status update frequency (#2220)
• 686a1db Safeguard unnecessary DS cleanup (#2242)
• f01ea1d Switch DP fallback objective to list (#2217)
• b03b1f1 Update Agent version to 7.72.0 (#2287) (#2289)
• 977f372 Update default Agent version to 7.71.1 (#2231)
• 501fb37 [AGENTONB-2555][DatadogAgentInternal] Fix DDAI metric forwaders errors (#2214)
• 06c7b19 [AGENTONB-2570] Fix /debug/pprof endpoints (#2227)
• 210e44b [AGENTONB-2604] (chore) Bump Go version to 1.25.3 (#2256) (#2278)
• d7ee3f3 [AGENTONB-2642] Add checksum on default KSM configmap to restart DCA deployment if updated (#2264) (#2267)
• 9a933b7 [AGENTRUN-741] Update FIPS proxy version references to 1.1.17 (#2248)
• 2a49036 [CASCL-610] Add require RBAC for ArgoRollout support (#2221)
• 59e0267 [CONTINT-4643] Add an option to configure KSM custom resource metrics collection (#1927)
• a10a754 [CWS] allow security-agent to create the shared unix socket (#2211)
• 79da1db [DatadogAgentInternal][AGENTONB-2546] Profile DDAI name override (#2202)
• 68420ef [metrics-forwarder] Use official go client and add origins (#2148)
• 920f95a [profiles] Reduce dap status update frequency (#2190)
• 997da36 [profiles] Support GPU feature overrides in DAP (#2212)
• ae001bb feat(github): Add workflows for stale issues/PR management (#2223)
• eca0772 fix(stale): Fix typo in the chainguard name (#2230)
• 836be98 migrate to golangci-lint v2 (#2204)
• fee1971 release v1.20.0-rc.1 (#2252)
• 6aeb2b5 release v1.20.0-rc.2 (#2275)
• 6ac8023 release v1.20.0-rc.3 (#2290)
• f4e8de7 use curl to rest api instead of gh pr create (#2241)
• 173a751 usm: Match volume mounts to the CNM (#2229)

v1.20.0-rc.2

Changelog

• f13af83 Add APM to DPA and mark some fields as required (#2206)
• 8e61027 Add MKNOD capability to agent and system-probe when GPU monitoring is enabled (#2228)
• 5e68218 Add deprecation notice and documentation (#2195)
• 538ddeb Add fineGrainedAuthorization flag (#2188)
• e64a212 Add safeguards when comparing status to avoid panics (#2237)
• 8c52bc1 Add sync/force sync behavior to monitors/SLOs/Dashboards docs (#2199)
• d383cd6 Add warning and documentation about upcoming metadata changes (#2177)
• 73bbb4b Autoscaling based on custom metric query (#2174)
• b07f3cc Bump the gh-actions-packages group with 5 updates (#2216)
• 698a9a8 Fix version in selector change message (#2258) (#2259)
• 5fddea2 Noop: run modernize (#2207)
• 932085b Reduce status update frequency (#2220)
• 686a1db Safeguard unnecessary DS cleanup (#2242)
• f01ea1d Switch DP fallback objective to list (#2217)
• 977f372 Update default Agent version to 7.71.1 (#2231)
• 501fb37 [AGENTONB-2555][DatadogAgentInternal] Fix DDAI metric forwaders errors (#2214)
• 06c7b19 [AGENTONB-2570] Fix /debug/pprof endpoints (#2227)
• d7ee3f3 [AGENTONB-2642] Add checksum on default KSM configmap to restart DCA deployment if updated (#2264) (#2267)
• 9a933b7 [AGENTRUN-741] Update FIPS proxy version references to 1.1.17 (#2248)
• 2a49036 [CASCL-610] Add require RBAC for ArgoRollout support (#2221)
• 59e0267 [CONTINT-4643] Add an option to configure KSM custom resource metrics collection (#1927)
• a10a754 [CWS] allow security-agent to create the shared unix socket (#2211)
• 79da1db [DatadogAgentInternal][AGENTONB-2546] Profile DDAI name override (#2202)
• 68420ef [metrics-forwarder] Use official go client and add origins (#2148)
• 920f95a [profiles] Reduce dap status update frequency (#2190)
• 997da36 [profiles] Support GPU feature overrides in DAP (#2212)
• ae001bb feat(github): Add workflows for stale issues/PR management (#2223)
• eca0772 fix(stale): Fix typo in the chainguard name (#2230)
• 836be98 migrate to golangci-lint v2 (#2204)
• fee1971 release v1.20.0-rc.1 (#2252)
• 6aeb2b5 release v1.20.0-rc.2 (#2275)
• f4e8de7 use curl to rest api instead of gh pr create (#2241)
• 173a751 usm: Match volume mounts to the CNM (#2229)

v1.19.1

Changelog

• a921692 Safeguard unnecessary DS cleanup (#2242) (#2245)
• 166e672 release v1.19.0 (#2236)
• 8239eb8 release v1.19.1
• 6368ff4 release v1.19.1-rc.1 (#2246)
• 2e3bcbe use curl to rest api instead of gh pr create (#2241) (#2243)

v1.20.0-rc.1

Changelog

• f13af83 Add APM to DPA and mark some fields as required (#2206)
• 8e61027 Add MKNOD capability to agent and system-probe when GPU monitoring is enabled (#2228)
• 5e68218 Add deprecation notice and documentation (#2195)
• 538ddeb Add fineGrainedAuthorization flag (#2188)
• e64a212 Add safeguards when comparing status to avoid panics (#2237)
• 8c52bc1 Add sync/force sync behavior to monitors/SLOs/Dashboards docs (#2199)
• d383cd6 Add warning and documentation about upcoming metadata changes (#2177)
• 73bbb4b Autoscaling based on custom metric query (#2174)
• b07f3cc Bump the gh-actions-packages group with 5 updates (#2216)
• 5fddea2 Noop: run modernize (#2207)
• 932085b Reduce status update frequency (#2220)
• 686a1db Safeguard unnecessary DS cleanup (#2242)
• f01ea1d Switch DP fallback objective to list (#2217)
• 977f372 Update default Agent version to 7.71.1 (#2231)
• 501fb37 [AGENTONB-2555][DatadogAgentInternal] Fix DDAI metric forwaders errors (#2214)
• 06c7b19 [AGENTONB-2570] Fix /debug/pprof endpoints (#2227)
• 9a933b7 [AGENTRUN-741] Update FIPS proxy version references to 1.1.17 (#2248)
• 2a49036 [CASCL-610] Add require RBAC for ArgoRollout support (#2221)
• 59e0267 [CONTINT-4643] Add an option to configure KSM custom resource metrics collection (#1927)
• a10a754 [CWS] allow security-agent to create the shared unix socket (#2211)
• 79da1db [DatadogAgentInternal][AGENTONB-2546] Profile DDAI name override (#2202)
• 68420ef [metrics-forwarder] Use official go client and add origins (#2148)
• 920f95a [profiles] Reduce dap status update frequency (#2190)
• 997da36 [profiles] Support GPU feature overrides in DAP (#2212)
• ae001bb feat(github): Add workflows for stale issues/PR management (#2223)
• eca0772 fix(stale): Fix typo in the chainguard name (#2230)
• 836be98 migrate to golangci-lint v2 (#2204)
• fee1971 release v1.20.0-rc.1 (#2252)
• f4e8de7 use curl to rest api instead of gh pr create (#2241)
• 173a751 usm: Match volume mounts to the CNM (#2229)

v1.19.1-rc.1

Changelog

• a921692 Safeguard unnecessary DS cleanup (#2242) (#2245)
• 166e672 release v1.19.0 (#2236)
• 6368ff4 release v1.19.1-rc.1 (#2246)
• 2e3bcbe use curl to rest api instead of gh pr create (#2241) (#2243)

v1.19.0

Changelog

• 2d1fae6 Add GroupRetentionDuration to Monitor (#2161)
• 7e19847 Add basic controller tests for DDAI (#2139)
• 20d1c42 Add deprecation notice and documentation (#2195) (#2201)
• dab5406 Add documentation for control plane monitoring (#2155)
• 1bd4ccd Add etcd cert checks for control plane monitoring tests (#2117)
• f359b3c Add retries to e2e tests CI jobs (#2131)
• 0d19eea Add warning for upcoming pod label changes (#2154)
• 61959a7 Bump github.com/docker/docker in /test/e2e (#2113)
• a1f015e Bump github.com/ulikunitz/xz from 0.5.10 to 0.5.14 (#2146)
• 3c6b81c Bump the gh-actions-packages group with 5 updates (#2150)
• 75a1958 CAP-2779 update orchestrator check RBAC (#2124)
• 900987e EKS add-on release for 1.18.0 (#2181)
• 7abdca0 Ensure resourceVersion is set for PDBs (#2191)
• cdf6a54 Fix DS lookup by profile name (#2165)
• 2af841d Mount control plane checks to subfolders (#2132)
• 426801d Omit empty fallback direction (#2175)
• 7169ca0 Reduce status update frequency (#2220) (#2225)
• dcb9c4e Remove old e2e tests references (#2127)
• e8a63d5 Remove verbose debug log (#2151)
• c30c7e7 Support custom seccomp profile configData (#2040)
• adf7a54 Update EKS add-on for Operator 1.16 (#2056)
• da95e2b Update EKS add-on for Operator 1.17 (#2182)
• acb5a0d Update default Agent version to 7.69.3 (#2133)
• 4215ae8 Update default Agent version to 7.70.0 (#2166)
• ff8723a Update default Agent version to 7.71.1 (#2231) (#2234)
• 9b35ebf Update network policy to ensure DNS, NTP, all checks (#2189)
• 1e3eaaf Update workload metadata (#2110)
• b69f67e Use default provider DS instead of legacy provider on EKS and Openshift clusters (#2128)
• 1659859 [1.18.0] Publish GCP Marketplace (#2180)
• 9bf90de [AGENTONB-2555][DatadogAgentInternal] Fix DDAI metric forwaders errors (#2214) (#2224)
• 4d9d199 [AGENTRUN-678] Update FIPS proxy version references to 1.1.16 (#2144)
• 5943df8 [CSPM] fix host benchmarks env variable (#2162)
• 5d74c9e [CWS] add new configuration to allow CWS to send payloads without using the security agent (#2159)
• 1b90492 [CWS] clean up unused security agent features (#2163)
• 1692278 [DatadogAgentInternal][AGENTONB-2546] Profile DDAI name override (#2202) (#2203)
• 7b38e26 [datadogpodautoscaler] Add fallback scaling direction option and last horizontal recommendations (#2157)
• 5b87173 [metrics-forwarder] Use official go client and add origins (#2148) (#2209)
• ea3abc5 [profiles] Reduce dap status update frequency (#2190) (#2219)
• f196b56 add link to configuration page (#2164)
• 9275140 add permission for argorollouts and karpenter (#2152)
• ac1f9bb gpu: support cgroup permission patching configuration (#2130)
• b2c09cd logs: Add autoMultiLineDetection (#2147)
• ad037fd nit: CRD wording fix for control plane monitoring feature (#2120)
• ac66f99 release v1.19.0
• 9698791 release v1.19.0-rc.1 (#2197)
• 2f12795 release v1.19.0-rc.2 (#2210)
• cef5bd6 release v1.19.0-rc.3 (#2235)
• 9bc8056 usm: Match volume mounts to the CNM (#2229) (#2232)
• a88261a v1.18.0 bundle (#2176)

v1.19.0-rc.3

Changelog

• 2d1fae6 Add GroupRetentionDuration to Monitor (#2161)
• 7e19847 Add basic controller tests for DDAI (#2139)
• 20d1c42 Add deprecation notice and documentation (#2195) (#2201)
• dab5406 Add documentation for control plane monitoring (#2155)
• 1bd4ccd Add etcd cert checks for control plane monitoring tests (#2117)
• f359b3c Add retries to e2e tests CI jobs (#2131)
• 0d19eea Add warning for upcoming pod label changes (#2154)
• 61959a7 Bump github.com/docker/docker in /test/e2e (#2113)
• a1f015e Bump github.com/ulikunitz/xz from 0.5.10 to 0.5.14 (#2146)
• 3c6b81c Bump the gh-actions-packages group with 5 updates (#2150)
• 75a1958 CAP-2779 update orchestrator check RBAC (#2124)
• 900987e EKS add-on release for 1.18.0 (#2181)
• 7abdca0 Ensure resourceVersion is set for PDBs (#2191)
• cdf6a54 Fix DS lookup by profile name (#2165)
• 2af841d Mount control plane checks to subfolders (#2132)
• 426801d Omit empty fallback direction (#2175)
• 7169ca0 Reduce status update frequency (#2220) (#2225)
• dcb9c4e Remove old e2e tests references (#2127)
• e8a63d5 Remove verbose debug log (#2151)
• c30c7e7 Support custom seccomp profile configData (#2040)
• adf7a54 Update EKS add-on for Operator 1.16 (#2056)
• da95e2b Update EKS add-on for Operator 1.17 (#2182)
• acb5a0d Update default Agent version to 7.69.3 (#2133)
• 4215ae8 Update default Agent version to 7.70.0 (#2166)
• ff8723a Update default Agent version to 7.71.1 (#2231) (#2234)
• 9b35ebf Update network policy to ensure DNS, NTP, all checks (#2189)
• 1e3eaaf Update workload metadata (#2110)
• b69f67e Use default provider DS instead of legacy provider on EKS and Openshift clusters (#2128)
• 1659859 [1.18.0] Publish GCP Marketplace (#2180)
• 9bf90de [AGENTONB-2555][DatadogAgentInternal] Fix DDAI metric forwaders errors (#2214) (#2224)
• 4d9d199 [AGENTRUN-678] Update FIPS proxy version references to 1.1.16 (#2144)
• 5943df8 [CSPM] fix host benchmarks env variable (#2162)
• 5d74c9e [CWS] add new configuration to allow CWS to send payloads without using the security agent (#2159)
• 1b90492 [CWS] clean up unused security agent features (#2163)
• 1692278 [DatadogAgentInternal][AGENTONB-2546] Profile DDAI name override (#2202) (#2203)
• 7b38e26 [datadogpodautoscaler] Add fallback scaling direction option and last horizontal recommendations (#2157)
• 5b87173 [metrics-forwarder] Use official go client and add origins (#2148) (#2209)
• ea3abc5 [profiles] Reduce dap status update frequency (#2190) (#2219)
• f196b56 add link to configuration page (#2164)
• 9275140 add permission for argorollouts and karpenter (#2152)
• ac1f9bb gpu: support cgroup permission patching configuration (#2130)
• b2c09cd logs: Add autoMultiLineDetection (#2147)
• ad037fd nit: CRD wording fix for control plane monitoring feature (#2120)
• 9698791 release v1.19.0-rc.1 (#2197)
• 2f12795 release v1.19.0-rc.2 (#2210)
• cef5bd6 release v1.19.0-rc.3 (#2235)
• 9bc8056 usm: Match volume mounts to the CNM (#2229) (#2232)
• a88261a v1.18.0 bundle (#2176)