Skip to content

v1.0.0
Compare
Choose a tag to compare
@github-actions github-actions released this 01 Nov 09:11
· 830 commits to main since this release
v1.0.0
90c0769

Changes

Breaking Changes:

  • export: switch to default permissions on exported JSON to 0600. (#1575) by @tixxdz

Major Changes:

  • tetragon: build arm64 tarball (#1484) by @tixxdz
  • tetragon:process_exec: display uids/gids credentials and detect privileged execution (#1296) by @tixxdz
  • Add a new kernel stack traces alpha feature to kprobes events. (#1429) by @mtardy
  • api: add a policy_name field to kprobe, tracepoint and uprobe events (#1574) by @mtardy
  • tetragon: Add killer sensor (#1205) by @olsajiri
  • helm: Set the feature that implements Namespaced policies and Pod label filters on by default (#1647) by @kkourt

Bugfixes:

  • Use a message copy to apply fieldFilters in exec events (#1432) by @tpapagian
  • bpf: fix verification error in bpf_execve_event (#1454) by @kkourt
  • Add complete k8s object validation and defaults on standalone (#1521) by @mtardy
  • tetragon: fix crash in kprobe validation (#1551) by @olsajiri
  • bugfix: Use shared string maps in kprobe-multi (#1582) by @tpapagian
  • bpf: fix policyfilter issue for existing processes (#1590) by @kkourt
  • Fixes a regression on enable/disable sensors that would prevent a sensor from being enabled. (#1562) by @mtardy
  • helm: Fix selector labels for the operator deployment (#1644) by @michi-covalent

Minor Changes:

  • pkg/metrics: add common go&gRPC prometheus metrics (#1416) by @Jack-R-lantern
  • tetragon: Adding lists documentation (#1401) by @olsajiri
  • tetragon-oci-hook: fix issue for containerd (#1375) by @kkourt
  • tetragon: Add buffer between perf reader and events processing code (#593) by @olsajiri
  • helm: update livenessProbe to retry 5 times before failing (#1407) by @willfindlay
  • Convert string and char_buf matches to hash look ups (#1408) by @kevsecurity
  • tetragon: Add metric to report rate limited events (#1453) by @jrfastab
  • tetragon: trace kernel modules operations (#1390) by @tixxdz
  • helm: Allow multiple installations of the Tetragon Helm chart (#1400) by @ashishkurmi
  • Controller for the Pod Info Custom Resource (#1410) by @prateek041
  • doc: add arm64 tarball install (#1496) by @tixxdz
  • tetragon: improve how we handle TIDs and GetProcessCopy() (#1256) by @tixxdz
  • Add IPv6 support to BPF rate limit (#1458) by @kevsecurity
  • cmd: Remove deprecated --config-file flag (#1498) by @lambdanis
  • metrics: report metric errors when caching pids (#1502) by @tixxdz
  • tracing: check for empty returnArg (#1515) by @kkourt
  • tetragon: Hook exit sensor on acct_process (#1509) by @olsajiri
  • metrics: Add metrics label filter configuration (#1444) by @nap32
  • tetragon: Several observer related cleanups (#1525) by @olsajiri
  • Collect tetragon_map_in_use_gauge and tetragon_map_errors_total metrics directly from BPF maps at the scrape time. Expose the tetragon_map_errors_total metrics as a counter instead of a gauge. (#1510) by @lambdanis
  • tetragon: Remove sensors on exit not programs (#1514) by @olsajiri
  • imagePullPolicy for the operator deployment can be set in tetragonOperator.image.pullPolicy Helm value and defaults to IfNotPresent. (#1544) by @lambdanis
  • Implement the ability to filter on event types in the getevents CLI. (#1549) by @darox
  • bpf: read the task real parent (#1559) by @tixxdz
  • Expose an interface for defining metrics with configurable labels. (#1548) by @lambdanis
  • tetragon: Allow to specify rb-* size options with size suffix (#1593) by @olsajiri
  • ci:tarball-release: remove unnecessary step about installing go (#1601) by @tixxdz
  • ci: add login-action to docker hub (#1602) by @tixxdz
  • tetragon: Add helper scripts for stats benchmarks (#1583) by @olsajiri
  • systemd fixes (#1636) by @tixxdz
  • helm: add service monitor scrape interval config (#1638) by @Jack-R-lantern
  • doc: update tetragon daemon flags (#1662) by @tixxdz
  • tetragon: Cleanup tgids array before another round of events iteration (#1581) by @olsajiri
  • Introduce startup logic to check userspace and BPF struct alignment, and exit with an error message if we detect a mismatch. (#1650) by @willfindlay
  • tetragon: Add support to pass options through spec (#1626) by @olsajiri
  • helm: add PROCESS_TRACEPOINT to exported events (#1684) by @kkourt

CI Changes:

Documentation changes:

Dependency updates:

  • fix(deps): update module google.golang.org/grpc to v1.58.0 (#1448) by @cilium-renovate[bot]
  • chore(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 [security] (#1439) by @cilium-renovate[bot]
  • chore(deps): update go to v1.20.8 (patch) (#1446) by @cilium-renovate[bot]
  • fix(deps): update kubernetes packages to v0.27.6 (patch) (#1472) by @cilium-renovate[bot]
  • fix(deps): update module github.com/cilium/cilium to v1.14.2 (#1473) by @cilium-renovate[bot]
  • fix(deps): update all go dependencies main (patch) (#1471) by @cilium-renovate[bot]
  • fix(deps): update module google.golang.org/grpc to v1.58.1 (#1483) by @cilium-renovate[bot]
  • chore(deps): update all lvh-images main (patch) (#1475) by @cilium-renovate[bot]
  • fix(deps): update module sigs.k8s.io/controller-runtime to v0.15.2 (#1487) by @cilium-renovate[bot]
  • chore(deps): update quay.io/lvh-images/kernel-images docker tag to bpf-next-20230920.012553 (#1486) by @cilium-renovate[bot]
  • chore(deps): update all lvh-images main (patch) (#1508) by @cilium-renovate[bot]
  • fix(deps): update module google.golang.org/grpc to v1.58.2 (#1482) by @cilium-renovate[bot]
  • fix(deps): update module github.com/prometheus/client_golang to v1.17.0 (#1519) by @cilium-renovate[bot]
  • chore(deps): update go to v1.21.1 (minor) (#1344) by @cilium-renovate[bot]
  • chore(deps): update all github action dependencies (#1523) by @cilium-renovate[bot]
  • fix(deps): update all go dependencies main (patch) (#1518) by @cilium-renovate[bot]
  • chore(deps): update docker.io/library/alpine docker tag to v3.18.4 (#1528) by @cilium-renovate[bot]
  • fix(deps): update module github.com/hashicorp/golang-lru/v2 to v2.0.7 (#1538) by @cilium-renovate[bot]
  • chore(deps): update all github action dependencies to v3 (major) (#1546) by @cilium-renovate[bot]
  • chore(deps): update docker/build-push-action action to v5 (#1547) by @cilium-renovate[bot]
  • chore(deps): update actions/upload-pages-artifact action to v2 (#1545) by @cilium-renovate[bot]
  • chore(deps): update docker.io/library/golang:1.21.1-alpine docker digest to 1c9cc94 (#1527) by @cilium-renovate[bot]
  • chore(deps): update actions/checkout action to v4 (#1529) by @cilium-renovate[bot]
  • chore(deps): update all lvh-images main (patch) (#1537) by @cilium-renovate[bot]
  • chore(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 [security] (#1552) by @cilium-renovate[bot]
  • fix(deps): update module github.com/prometheus/client_model to v0.5.0 (#1564) by @cilium-renovate[bot]
  • chore(deps): update go to v1.21.2 (patch) (#1563) by @cilium-renovate[bot]
  • fix(deps): update kubernetes packages to v0.28.2 (patch) (#1569) by @cilium-renovate[bot]
  • fix(deps): update module golang.org/x/sys to v0.13.0 (#1566) by @cilium-renovate[bot]
  • fix(deps): update module golang.org/x/sync to v0.4.0 (#1565) by @cilium-renovate[bot]
  • fix(deps): update all go dependencies main (#1372) by @cilium-renovate[bot]
  • fix(deps): update all go dependencies main (patch) (#1571) by @cilium-renovate[bot]
  • chore(deps): update module golang.org/x/net to v0.17.0 [security] (#1585) by @cilium-renovate[bot]
  • fix(deps): update module github.com/spf13/viper to v1.17.0 (#1572) by @cilium-renovate[bot]
  • fix(deps): update module github.com/google/go-cmp to v0.6.0 (#1578) by @cilium-renovate[bot]
  • chore(deps): update quay.io/lvh-images/kernel-images docker tag to bpf-next-20231010.012608 (#1568) by @cilium-renovate[bot]
  • fix(deps): update module google.golang.org/grpc to v1.58.3 (#1596) by @cilium-renovate[bot]
  • chore(deps): update all lvh-images main (patch) (#1599) by @cilium-renovate[bot]
  • fix(deps): update module github.com/cilium/ebpf to v0.12.0 (#1600) by @cilium-renovate[bot]
  • chore(deps): update go to v1.21.3 (patch) (#1577) by @cilium-renovate[bot]
  • fix(deps): update kubernetes packages to v0.28.3 (patch) (#1619) by @cilium-renovate[bot]
  • fix(deps): update module google.golang.org/grpc to v1.59.0 (#1642) by @cilium-renovate[bot]
  • chore(deps): update all lvh-images main (patch) (#1634) by @cilium-renovate[bot]
  • fix(deps): update all go dependencies main (patch) (#1635) by @cilium-renovate[bot]
  • chore(deps): update docker.io/golangci/golangci-lint docker tag to v1.55.0 (#1641) by @cilium-renovate[bot]
  • chore(deps): update docker.io/golangci/golangci-lint docker tag to v1.55.1 (#1669) by @cilium-renovate[bot]
  • fix(deps): update module github.com/containerd/containerd to v1.7.8 (#1675) by @cilium-renovate[bot]
  • chore(deps): update all lvh-images main (patch) (#1668) by @cilium-renovate[bot]
  • fix(deps): update module github.com/google/uuid to v1.4.0 (#1676) by @cilium-renovate[bot]

Misc Changes:

Other Changes:

  • fix(deps): update kubernetes packages to v0.27.5 (patch) (#1397) by @cilium-renovate[bot]
  • fix(deps): update all go dependencies main (patch) (#1396) by @cilium-renovate[bot]
  • fix(deps): update module golang.org/x/sys to v0.12.0 (#1424) by @cilium-renovate[bot]
  • README: simplify the README to refer to the documentation (#1380) by @mtardy
  • fix(deps): update module github.com/google/cel-go to v0.18.0 (#1423) by @cilium-renovate[bot]
  • fix typo error (#1651) by @crazy-canux
  • build-images-ci: fix GH action (#1688) by @kkourt
  • tetragon: docs, fix modules policy library CRD link (#1696) by @jrfastab

New Contributors

Full Changelog: v0.11.0...v1.0.0

Contributors

kkourt, tpapagian, and 21 other contributors
Assets 18