Patch Note for CTE for Kubernetes

CTE for Kubernetes Version	Date	Version
1.5.0.31	2025-08-28	v2

Container Image Digest

Verify that the Container Image Digest matches the version that you are installing.

Release Date	Version	Tag/Build	Architecture	Container Image Digest (Fingerprint)
2025-04-14	1.5.0	1.5.0.31	amd64 (x86_64)	sha256:f9afb13ea8754dd66d7dfcc7b8b861deeb01c8668894dd4a8b5766aa74f7ed9d
2025-04-14	1.5.0	1.5.0.31	arm64	sha256:efba47426b5b68c43ca9ec0e58b088ee14efa9d702b9f239d8ee91d3858244cc

This release of CTE for Kubernetes adds fixes for known defects and addresses known vulnerabilities.

AGT-39000: CipherTrust Manager may not report all pods using the same CTE PVC on the same node

AFFECTED VERSIONS: 1.4.0.37 — 1.6.0.49

Work-around:

CTE PVCs with the following access modes: ReadWriteOnce, ReadWriteMany or ReadOnlyMany, may fail to report to CipherTrust Manager all of the pods using the same volume on the same node. This anomaly is due to how Kubernetes handles a single volume used across multiple pods in the same node. This reporting anomaly in CipherTrust Manager does not mean that the CTE PVC is not attached to the pod. It is recommended that the user describe the CTE PVC (# kubectl describe pvc) to find the list of all of the pods that are using a particular CTE PVC.
AGT-61578: Getting permission denied while creating files in pod

AFFECTED VERSIONS: 1.5.0.27 — 1.6.0.49

CTE does not support the use case where Key rule is "clear_key" and the security rule is "apply_key".
AGT-61761 [CS1580017] [Debian12+CRI-O] CTE for Kubernetes pods throwing error MountDevice failed for volume

AFFECTED VERSIONS: 1.3.0.33 — 1.6.0.49

The combination of Debian 12 Linux OS with Kubernetes CRI-O container runtime interface, is not supported in CTE for Kubernetes.
AGT-62766: AgentInfo EKS ARM

AFFECTED VERSIONS: 1.5.0.27 — 1.6.0.49

Agentinfo is unable to get Kubernetes cluster information on ARM-based nodes.