K8Studio 4.0.2
Version 4.0.2
A reliability release focused on safer Kubernetes editing, accurate Security Context reporting, stronger MITRE scan behavior, and regression coverage for YAML workflows across Pods, workloads, RBAC, storage, network, cluster-scoped resources, and CRDs.
Highlights
Security Scanner
- Fixed effective Security Context calculation so container-level values are read first and Pod-level values are used as fallback.
- Fixed misleading Security Context displays where different Pods or containers could appear to show the same values.
- Fixed cases where non-root execution settings could be shown beside an incorrect root-execution finding.
- Improved allowPrivilegeEscalation and runAsNonRoot presentation so safe and unsafe values use colors that match the severity of the setting.
- Improved scanner refresh behavior so rescans use the current object data instead of stale derived values.
- Added coverage for empty container security contexts, inherited Pod security contexts, explicit container overrides, root user detection, non-root user detection, and privilege escalation findings.
YAML Editing
- Fixed YML tabs that could appear blank for non-Pod resources.
- YML views now fall back to the selected Kubernetes object when the editable YAML buffer is empty.
- Improved Ace editor sizing when switching tabs or opening detail pages from grid links.
- The selected tab now stays synchronized when the resource detail view changes.
- Resource update payloads now remove status before saving so server-owned fields are not sent back to Kubernetes.
- Pod updates now detect immutable spec changes locally and present a clearer validation error before Kubernetes rejects the request.
Release Confidence
- Added end-to-end coverage that opens the YML tab for representative Kubernetes kinds and verifies the manifest is visible.
- Added end-to-end coverage that updates annotations from the YML editor and verifies the live object in Kubernetes.
- Covered representative workload, network, storage, config, RBAC, namespace, cluster-scoped, and CRD resources.
- Added regression coverage for forbidden mutations and validation errors without exposing secret values.
- Expanded unit coverage for security-context resolution, MITRE scan behavior, editor fallback behavior, and safe resource update paths.
Fixes
- Fixed detail title action and status messages overlapping delete, save, and cancel controls.
- Fixed editor layout issues where update status messages and action buttons could occupy separate overlapping areas.
- Fixed Pod update attempts that sent status.conditions back to Kubernetes.
- Fixed misleading Pod update failures by blocking unsupported immutable Pod spec changes before apply.
- Fixed YML rendering for Deployments and other non-Pod resources.
- Fixed tab synchronization issues that could leave the YML editor mounted with stale or blank content.