Skip to content

Release v0.10.0

Compare
Choose a tag to compare
@github-actions github-actions released this 14 Jul 15:20
· 1475 commits to main since this release

What's Changed

  • Makefile: set GOARCH to TARGET_ARCH only if GOARCH is unset by @mtardy in #880
  • tetragon: use latest cilium module (v1.13.1) by @kkourt in #882
  • Various Dockerfile cleanups by @mtardy in #843
  • tetragon: post action parsing fix by @olsajiri in #879
  • TracingPolicy examples: use portable symbols for syscalls by @mtardy in #886
  • Docs: update the TracingPolicy reference for arm64 by @mtardy in #884
  • fix: injecting Git version into tetragon-operator binary fails by @YTGhost in #890
  • tetragon: Move matchBinaries filter to be executed earlier by @olsajiri in #833
  • Tetra: split commands set between OS for portability by @mtardy in #883
  • helm: recreate daemonset pod when configmap changes by @cjtim in #812
  • use binary search to optimize performance by @Lan-ce-lot in #820
  • test for retrieving exit code by @zhy76 in #852
  • ci: update setup-go@v3 to v4 by @Lan-ce-lot in #864
  • fixup server address when port is not present by @willfindlay in #896
  • matchArgs improvements by @jrfastab in #901
  • build(deps): bump ubuntu from 27cb6e6 to 67211c1 by @dependabot in #877
  • build(deps): bump github/codeql-action from 2.1.37 to 2.2.11 by @dependabot in #897
  • build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.1 to 2.0.2 by @dependabot in #908
  • Dockerfiles: use ENTRYPOINT instead of CMD by @mtardy in #887
  • build(deps): bump google.golang.org/grpc from 1.53.0 to 1.54.0 by @zhy76 in #860
  • pkg/encoder: make customized syscalls printers portable and add open/openat by @mtardy in #900
  • pkg:observer: during stats printing check if total events is not zero by @tixxdz in #914
  • build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @dependabot in #915
  • Dependabot: update config for alpine-curl dep and new label name by @mtardy in #916
  • build(deps): bump actions/upload-pages-artifact from 1.0.7 to 1.0.8 by @dependabot in #918
  • pks/metrics: add syscall metrics by @kkourt in #924
  • pkg/metrics: add event for tracing policy metrics by @kkourt in #927
  • build(deps): bump golang from 1.20.2 to 1.20.3 by @dependabot in #923
  • build(deps): bump actions/checkout from 3.3.0 to 3.5.2 by @dependabot in #926
  • Add Flags To Raw Attach by @kevsecurity in #937
  • tetragon: deal with duplicated tcpmon_map issue by @kkourt in #938
  • tetragon: Add new NoPost and Signal actions by @olsajiri in #885
  • Improvements in bugtool and metrics by @kkourt in #929
  • tests: fail test when tracingpolicy parsing fails by @willfindlay in #947
  • tetragon: Add documentation for Signal and NoPost actions by @olsajiri in #948
  • bug-report-template: add an issue template for bug report by @YTGhost in #898
  • tetragon: Add fail path for data events get_current_pid_tgid call by @olsajiri in #950
  • tetragon: Allow to use data events for char_buf data by @olsajiri in #789
  • Docs: add a try Tetragon on Linux getting-started tutorial and FAQ about running Tetragon on Mac by @mtardy in #899
  • tetragon: handle process threads in clone and process_{exec|exit} events by @tixxdz in #941
  • policyfilter: pod label filter support for tracing policies. by @kkourt in #945
  • build(deps): bump peter-evans/close-issue from 2.2.0 to 3.0.1 by @dependabot in #943
  • tetragon: we only need to find the BTF file skip creating it by @jrfastab in #961
  • tetragon: release memory used for loading programs by @jrfastab in #962
  • build(deps): bump github.com/containerd/containerd from 1.6.10 to 1.7.0 by @zhy76 in #904
  • dependabot: fix a tag issue with alpine-curl image by @mtardy in #956
  • e2e-framework: minor refactors to improve image dumps by @willfindlay in #963
  • build(deps): bump golang from 1.20.3 to 1.20.4 by @dependabot in #966
  • tetragon: Add support for and filter operation by @olsajiri in #940
  • policyfilter: only deal with running containers by @kkourt in #968
  • build(deps): bump docker/setup-buildx-action from 2.4.1 to 2.5.0 by @dependabot in #960
  • Add documentation in the CRD for maxData and returnCopy flags and update doc by @mtardy in #965
  • Add support to load LSM and Tracing programs by @tpapagian in #953
  • tetragon: Add support for LT/GT operators for matchReturnArgs by @olsajiri in #949
  • build(deps): bump ubuntu from 67211c1 to dfd64a3 by @dependabot in #969
  • tetra: transparently handle unix or tcp gRPC socket by @tixxdz in #967
  • github: add feature request issue template by @mtardy in #972
  • build(deps): bump github.com/prometheus/client_model from 0.3.0 to 0.4.0 by @dependabot in #978
  • Cleanup: update golangci-lint and fix new linters alerts by @mtardy in #976
  • build(deps): bump library/alpine from 3.17.3 to 3.18.0 by @dependabot in #986
  • Revert: tetragon: Switch exit tracepoint to __put_task_struct kprobe by @tpapagian in #987
  • docs: add FAQ entry about CGO related issues in pkg/bpf by @mtardy in #981
  • logcapture: use T.Log instead of T.Logf by @willfindlay in #988
  • exec: Skip tests not comment them out by @tpapagian in #990
  • docs: add last two Tetragon KubeCon EU 2023 prez by @mtardy in #993
  • bugtool: skip non-object files from lib directory by @kkourt in #977
  • fix[helm]: remove useless 'if' around a 'with' by @Vampouille in #944
  • build(deps): bump golang.org/x/time from 0.2.0 to 0.3.0 by @dependabot in #985
  • docs: add a "install tetra CLI" guide to getting started by @mtardy in #991
  • tetragon: Use execve_map_get_noinit cgroup related code by @olsajiri in #984
  • docs: add a script to export the generated API doc to references by @mtardy in #1009
  • docs: add an FAQ entry about BTF requirement by @mtardy in #1006
  • api: add comments on fields for reference docs by @mtardy in #959
  • tetragon: Enable parallel build for bpf objects by @olsajiri in #1010
  • tetragon: handle process threads in kprobes and tracepoints by @tixxdz in #946
  • cleanup: remove mistakenly committed coverage artifacts by @mtardy in #999
  • build(deps): bump actions/setup-go from 3.3.0 to 4.0.1 by @dependabot in #1000
  • Deprecate the --config-file flag, replace with --tracing-policy and merge pkg/config with pkg/tracingpolicy by @mtardy in #998
  • Docs: update docs design by @yasell in #931
  • tests: rewrite pkg/sensors/exec:TestExitCode by @mtardy in #1015
  • Add sock and skb matchArgs selectors by @kevsecurity in #1008
  • docs: add a "deploy Tetragon on Kubernetes" guide and rework the existing systemd and container guides by @mtardy in #992
  • docs: fix sticky header, TOC scrolling and add search bar by @yasell in #1026
  • dependabot: remove ignore on tag name by @mtardy in #980
  • build(deps): bump github.com/fatih/color from 1.14.1 to 1.15.0 by @dependabot in #1021
  • Update cilium-builder image by @ferozsalam in #1013
  • metrics: Show the latency needed to handle a msg per op by @tpapagian in #1011
  • tetragon: Adding missing tid setup to HandleGenericEvent by @olsajiri in #1027
  • tetragon: Factor execve sensor and fix process arguments reading by @olsajiri in #1002
  • tetragon: Use do_task_dead probe for exit sensor by @olsajiri in #1012
  • policyfilter improvements by @kkourt in #1038
  • tests: filter unit tests by PID + fix pidSet bugs by @willfindlay in #997
  • bugtool: dump the policyfilter map by @kkourt in #1047
  • Tracing: Add optional labels to argument by @kevsecurity in #1051
  • deps: add renovate to replace dependabot by @mtardy in #1036
  • Add rate limiting to events by @kevsecurity in #1041
  • Rename argRateLimit to rateLimit by @kevsecurity in #1057
  • chore(deps): pin dependencies by @cilium-renovate in #1064
  • fix goroutines leaking in tests by @kkourt in #1042
  • logging: change log level dynamically by @tixxdz in #1048
  • Tracing: Add socket tracking by @kevsecurity in #1060
  • Update cilium-builder image by @ferozsalam in #1056
  • tetragon: Remove unused cgo code for reading perf events by @olsajiri in #1061
  • tetragon: tty monitoring by @olsajiri in #733
  • update_pid_tid_from_sock: add always_inline attr by @kkourt in #1091
  • Fix memory corruption bug by @kkourt in #1090
  • dependabot: remove configuration by @mtardy in #1092
  • docs: change baseURL in doc build workflow by @mtardy in #1093
  • chore(deps): update docker.io/library/alpine docker tag to v3.12.12 by @cilium-renovate in #1088
  • chore(deps): update go (patch) by @cilium-renovate in #1098
  • chore(deps): update docker.io/library/alpine docker tag to v3.18.2 by @cilium-renovate in #1097
  • renovate: various fixes and tuning by @mtardy in #1101
  • tetragon: Switch to clang-15 in Dockerfile.clang by @olsajiri in #1094
  • renovate: fix author match with sign-off by @mtardy in #1103
  • fix(deps): update module github.com/sirupsen/logrus to v1.9.3 by @cilium-renovate in #1102
  • chore(deps): pin dependencies by @cilium-renovate in #1065
  • renovate: re-enable digest update, add semver comment for all github actions, prevent update of local packages by @mtardy in #1105
  • Fix getevents --output flag by @mtardy in #1106
  • chore(deps): update golang docker tag to v1.20.5 by @cilium-renovate in #1111
  • docs: import homepage directly into docs by @mtardy in #1114
  • chore(deps): update all github action dependencies (patch) by @cilium-renovate in #1087
  • build(deps): bump golangci/golangci-lint from v1.52.2 to v1.53.3 by @dependabot in #1084
  • tetragon: Force configured kernel version in observerFindBTF by @olsajiri in #1107
  • tetra: regroup getevents options in exported struct by @mtardy in #1124
  • fix(deps): update all api go dependencies main (patch) by @cilium-renovate in #1123
  • chore(deps): update module github.com/kubernetes-sigs/e2e-framework to v0.0.8 by @cilium-renovate in #1117
  • tetragon: Remove unneeded custom cilium/ebpf dependency by @olsajiri in #1121
  • tetragon: Allow to override tracepoint argument type by @olsajiri in #1113
  • fix(deps): update module github.com/go-openapi/strfmt to v0.21.7 by @cilium-renovate in #1127
  • fix(deps): update kubernetes packages to v0.26.6 (patch) by @cilium-renovate in #1126
  • fix(deps): update module github.com/golang/protobuf to v1.5.3 by @cilium-renovate in #1128
  • chore(deps): update docker.io/library/alpine docker tag to v3.18.2 by @cilium-renovate in #1131
  • chore(deps): update quay.io/cilium/tetragon docker tag to v0.9.0 by @cilium-renovate in #1134
  • chore(deps): update quay.io/cilium/tetragon-operator docker tag to v0.9.0 by @cilium-renovate in #1135
  • fix(deps): update module golang.org/x/sys to v0.9.0 by @cilium-renovate in #1140
  • fix(deps): update module google.golang.org/protobuf to v1.31.0 by @cilium-renovate in #1142
  • fix(deps): update module k8s.io/klog/v2 to v2.100.1 by @cilium-renovate in #1143
  • fix(deps): update module github.com/spf13/viper to v1.16.0 by @cilium-renovate in #1138
  • fix(deps): update module golang.org/x/sync to v0.3.0 by @cilium-renovate in #1139
  • chore(deps): update all github action dependencies (minor) by @cilium-renovate in #1130
  • fix(deps): update module github.com/containerd/containerd to v1.7.2 by @cilium-renovate in #1148
  • fix(deps): update module github.com/hashicorp/golang-lru/v2 to v2.0.4 by @cilium-renovate in #1150
  • pkg: fix versionStrings out of bound by @chenliTW in #1115
  • Revert sigstore/cosign-installer update and ignore it by @mtardy in #1161
  • chore(deps): update actions/deploy-pages action to v2 by @cilium-renovate in #1157
  • fix(deps): update module sigs.k8s.io/e2e-framework to v0.0.8 by @cilium-renovate in #1129
  • fix(deps): update module go.uber.org/atomic to v1.11.0 by @cilium-renovate in #1155
  • fix(deps): update module gopkg.in/yaml.v2 to v3 by @cilium-renovate in #1160
  • fix(deps): update module google.golang.org/grpc to v1.56.1 by @cilium-renovate in #1141
  • fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.3 by @cilium-renovate in #1151
  • fix(deps): update module github.com/prometheus/client_golang to v1.16.0 by @cilium-renovate in #1153
  • chore(deps): update module github.com/cilium/dns to v1.1.50 by @cilium-renovate in #1112
  • encoder: use protojson encoder instead of encoding/json by @willfindlay in #1099
  • chore(deps): remove unused module github.com/cilium/metallb by @cilium-renovate in #1152
  • chore(deps): fix quay.io/cilium/clang tag and digest mismatch and align versions by @cilium-renovate in #1069
  • Add arm64 runners for go tests by @mtardy in #1062
  • chore(deps): update docker.io/library/golang docker tag to v1.20.5 by @cilium-renovate in #1132
  • fix(deps): update module github.com/cilium/little-vm-helper to v0.0.7 by @cilium-renovate in #1147
  • fix(deps): update module sigs.k8s.io/controller-tools to v0.12.0 by @cilium-renovate in #1144
  • chore(deps): update ubuntu:22.04 docker digest to 6120be6 by @cilium-renovate in #1070
  • tetragon: Switch v60 object defines to v61 by @olsajiri in #1120
  • renovate: group Go updates except for major updates by @mtardy in #1162
  • tracing: Add policy for file monitoring by @tpapagian in #1109
  • Bump and tweak Alpine image version by @ferozsalam in #1168
  • eventcache: simple cleanups set 1 by @tixxdz in #1082
  • Fix connect and datagram tracingpolicy examples by @kevsecurity in #1180
  • release notes: add a step to update version in hugo docs by @willfindlay in #1171
  • Make ReturnArgAction optional by @kevsecurity in #1181
  • chore: remove clang-format by @willfindlay in #1186
  • contrib: add a Docker images digest checker by @mtardy in #1185
  • use-cases: add monitor process credentials at syscalls by @tixxdz in #895
  • tetragon: Header file and other cleanups by @olsajiri in #1184
  • Add common types to CRD argument parsing by @kevsecurity in #1190
  • CODEOWNERS: add mtardy and tetragon team to /docs owners by @mtardy in #1188
  • tetra: add .exe suffix for Windows binaries by @mtardy in #1196
  • new clang format by @kkourt in #1191
  • tetragon: do not allow users to set const_buf by @kkourt in #1202
  • docs: reorganize and simplify docs structure with new "concepts" section by @mtardy in #1007
  • Bump e2e jobs-app charts and fix workflow logs collection step by @mtardy in #1187
  • Dockerfiles: add explicit docker.io/library prefix by @mtardy in #1203
  • chore(deps): update docker.io/library/ubuntu:22.04 docker digest to 0bced47 by @cilium-renovate in #1204
  • chore(deps): update docker.io/library/golang:1.20.5 docker digest to fd9306e by @cilium-renovate in #1198
  • fix(deps): update module google.golang.org/grpc to v1.56.2 by @cilium-renovate in #1206
  • fix issue when deleting policy and policyfilter is disabled. by @kkourt in #1200
  • Update cilium/ebpf to v0.11.0 by @tpapagian in #1210
  • renovate: ungroup Go minor updates by @mtardy in #1212
  • Update cilium/cilium to v1.13.4 by @tpapagian in #1211
  • Docs reorganization for use cases by @mtardy in #1215
  • renovate: migrate config for v36 release by @mtardy in #1213
  • issue templates: improve bug report template by @mtardy in #1197
  • bugtool: use gRPC instead of tetra CLI by @kkourt in #1217
  • bugtool: detect bpftool path by @tixxdz in #1219
  • Pass Namespace in metrics options instead of prefixing metric names by @lambdanis in #1228
  • pkg/filters: make field filters work with snake case fields by @willfindlay in #1223
  • Prepare for v0.10.0 release by @kkourt in #1231

New Contributors

Full Changelog: v0.10.0-pre.0...v0.10.0