v1.7.1

OCI_PREFLIGHT_IMAGE: quay.io/jetstack/venafi-agent
OCI_PREFLIGHT_TAG: v1.7.1
HELM_CHART_IMAGE: quay.io/jetstack/charts/venafi-kubernetes-agent
HELM_CHART_VERSION: v1.7.1
ARK_IMAGE: quay.io/jetstack/disco-agent
ARK_IMAGE_TAG: v1.7.1
ARK_IMAGE_DIGEST: sha256:b63bfa7eb45302be214e7f408aff70aa15221105ced934e95c2faf83e65aa0af
ARK_CHART: quay.io/jetstack/charts/disco-agent
ARK_CHART_TAG: v1.7.1
ARK_CHART_DIGEST: sha256:2d0ff2fd142e2f84541bd228591f1133b5b0604c7bedbecc839964696c0b49e0

What's Changed

This is a patch release with a small change to the CyberArk disco-agent, to filter out deleted Secret resources from the data which it uploads to the CyberArk Discovery and Context API because that data is not needed by the backend.
This release also contains various changes to the venafi-kubernetes-agent Helm chart documentation, related to the rebranding of Venafi to CyberArk product names.
Finally, this release contains extended debug logging, as a result of updating to the latest version of venafi-connection-lib, to help customers and support engineers diagnose problems with VenafiConnection based authentication in the field.

• [VC-46370] CyberArk: Skip deleted resources when converting data readings to snapshot by @wallrj-cyberark in #741
• [VC-45018] Improve consistency of contextual information in cert-components by @iossifbenbassat123 in #739
• [VC-46486] Update venafi-connection-lib to v0.5.1 by @wallrj-cyberark in #742

New Contributors

• @iossifbenbassat123 made their first contribution in #739

Helm Chart Changes

$ diff -u  <(helm template oci://quay.io/jetstack/charts/venafi-kubernetes-agent --version v1.7.0 | fgrep -v -e helm.sh/chart -e app.kubernetes.io/version) <(helm template oci://quay.io/jetstack/charts/venafi-kubernetes-agent:v1.7.1 | fgrep -v -e helm.sh/chart -e app.kubernetes.io/version)
Pulled: quay.io/jetstack/charts/venafi-kubernetes-agent:v1.7.1
Pulled: quay.io/jetstack/charts/venafi-kubernetes-agent:v1.7.0
Digest: sha256:94782809893d1ad0e815054216bb77f41a97c9db9941da5743034fffd327ed4c
Digest: sha256:2776ca45271676dbfee30cbec69063faaef66c51081a56f0df249c20ba6d954e
--- /dev/fd/63  2025-11-04 12:20:32.541652736 +0000
+++ /dev/fd/62  2025-11-04 12:20:32.542652733 +0000
@@ -877,7 +877,7 @@
             runAsNonRoot: true
             seccompProfile:
               type: RuntimeDefault
-          image: "quay.io/jetstack/venafi-agent:v1.7.0"
+          image: "quay.io/jetstack/venafi-agent:v1.7.1"
           imagePullPolicy: IfNotPresent
           env:
           - name: POD_NAMESPACE

Docker Image Comparison

$ diffoci diff quay.io/jetstack/venafi-agent:v1.7.0 quay.io/jetstack/venafi-agent:v1.7.1 --semantic
INFO[0000] Target platforms: [linux/amd64]
TYPE    NAME                            INPUT-0                                                             INPUT-1
File    ko-app/preflight                b2453fed97b6041799436821ae56d88e12b272ad373cde0c87af8261dc5f27f5    6d6aaa53e279170a4e42811ca176bf44330eda4acca70740970a657b03082cc0
File    licenses/LICENSES               eba3b9d98369e17c83a1ee29798b663e14dd9b54bcf720b936127a06f104fed3    b73d0d9af1d810bd33928f92085aa3e97ba79f3cc8f842f65f2be17ad7c7d7bd
Mani    ctx:/manifests-0/annotations    field "Annotations"
Idx     ctx:/annotations                field "Annotations"

Full Changelog: v1.7.0...v1.7.1