1.11.3-community

[jotak]

A couple of bug fixes here, and three features:

• TLS tracking: configure spec.agent.ebpf.features in FlowCollector with TLSTracking to start gathering TLS information per flow: which versions are used, which cipher suite, etc. As well as metrics.
• Allow user-contributed recording rules to be captured in the Network Health dashboard.
• Automatic enrichment with secondary interfaces: previously, when capturing flows on secondary interfaces like with sriov, you had to configure explicitly each network name (NAD) in FlowCollector. Now, NetObserv is going to check for configured networks per pod without requiring explicit configuration.

What's Changed

Non-breaking changes

• NETOBSERV-2375: make consistent status handling by @jotak in NETOBSERV-2375: make consistent status handling #2520
• NETOBSERV-2477: prevent displaying invalid scopes by @jotak in NETOBSERV-2477: prevent displaying invalid scopes #2519
• NETOBSERV-2085: automatic enrichment with secondary interfaces by @jotak in NETOBSERV-2085: automatic enrichment with secondary interfaces #2514
• NETOBSERV-2620: Make prometheus default true by @Amoghrd in NETOBSERV-2620: Make prometheus default true #2597
• NETOBSERV-2657: Allow external/contributed recording rules in Network Health by @leandroberetta in NETOBSERV-2657: Allow external/contributed recording rules in Network Health #2500
• shellcheck fix: move shebang first line by @jotak in shellcheck fix: move shebang first line #2569
• NETOBSERV-2471: TLSTracking feature knob, TLS fields by @jotak in NETOBSERV-2471: TLSTracking feature knob, TLS fields #2124
• remove duplicate placeholder in console plugin config by @jpinsonneau in remove duplicate placeholder in console plugin config #2616
• NETOBSERV-2488 Add coderabbit config by @memodi in NETOBSERV-2488 Add coderabbit config #2596

Dependencies

Dependencies

• Update netobserv-ebpf-agent-ystream to 7fdc55b by @red-hat-konflux[bot] in Update netobserv-ebpf-agent-ystream to 7fdc55b #2545
• Update netobserv-ebpf-agent-ystream to 7986d34 by @red-hat-konflux[bot] in Update netobserv-ebpf-agent-ystream to 7986d34 #2547
• Update Konflux references by @red-hat-konflux[bot] in Update Konflux references #2548
• Update network-observability-operator-ystream to 61509ab by @red-hat-konflux[bot] in Update network-observability-operator-ystream to 61509ab #2555
• Bump github.com/netobserv/netobserv-ebpf-agent from 1.10.1-community to 1.11.2-community by @dependabot[bot] in Bump github.com/netobserv/netobserv-ebpf-agent from 1.10.1-community to 1.11.2-community #2550
• Bump github.com/netobserv/flowlogs-pipeline from 1.11.0-community to 1.11.2-community by @dependabot[bot] in Bump github.com/netobserv/flowlogs-pipeline from 1.11.0-community to 1.11.2-community #2551
• Bump google.golang.org/grpc from 1.79.1 to 1.79.3 by @dependabot[bot] in Bump google.golang.org/grpc from 1.79.1 to 1.79.3 #2558
• Update registry.access.redhat.com/ubi9/ubi-minimal Docker tag to v9.7-1773939694 by @red-hat-konflux[bot] in Update registry.access.redhat.com/ubi9/ubi-minimal Docker tag to v9.7-1773939694 #2568
• Update flowlogs-pipeline-ystream to 1d64783 by @red-hat-konflux[bot] in Update flowlogs-pipeline-ystream to 1d64783 #2579
• Update netobserv-ebpf-agent-ystream to ac9caf5 by @red-hat-konflux[bot] in Update netobserv-ebpf-agent-ystream to ac9caf5 #2588
• Update network-observability-console-plugin-pf4-ystream to c7840a0 by @red-hat-konflux[bot] in Update network-observability-console-plugin-pf4-ystream to c7840a0 #2591
• Update network-observability-console-plugin-ystream to 8286805 by @red-hat-konflux[bot] in Update network-observability-console-plugin-ystream to 8286805 #2587
• Update quay.io/operator-framework/opm Docker tag to v1.65.0 by @red-hat-konflux[bot] in Update quay.io/operator-framework/opm Docker tag to v1.65.0 #2600
• Update Konflux references by @red-hat-konflux[bot] in Update Konflux references #2583
• Update flowlogs-pipeline-ystream to 5e1bbea by @red-hat-konflux[bot] in Update flowlogs-pipeline-ystream to 5e1bbea #2604
• Update network-observability-operator-ystream to f746c6f by @red-hat-konflux[bot] in Update network-observability-operator-ystream to f746c6f #2602
• Update netobserv-ebpf-agent-ystream to b5fa0ac by @red-hat-konflux[bot] in Update netobserv-ebpf-agent-ystream to b5fa0ac #2606
• Update network-observability-console-plugin-ystream to aeeca00 by @red-hat-konflux[bot] in Update network-observability-console-plugin-ystream to aeeca00 #2607
• Update network-observability-operator-ystream to d97f1da by @red-hat-konflux[bot] in Update network-observability-operator-ystream to d97f1da #2608
• Update network-observability-console-plugin-ystream to 5b6da2b by @red-hat-konflux[bot] in Update network-observability-console-plugin-ystream to 5b6da2b #2615
• Update network-observability-console-plugin-pf4-ystream to a00b970 by @red-hat-konflux[bot] in Update network-observability-console-plugin-pf4-ystream to a00b970 #2614
• Update flowlogs-pipeline-ystream to 66decf6 by @red-hat-konflux[bot] in Update flowlogs-pipeline-ystream to 66decf6 #2613
• Update netobserv-ebpf-agent-ystream to f16c8cc by @red-hat-konflux[bot] in Update netobserv-ebpf-agent-ystream to f16c8cc #2612
• Update network-observability-operator-ystream to 2b199ae by @red-hat-konflux[bot] in Update network-observability-operator-ystream to 2b199ae #2611
• Bump the k8s group across 1 directory with 5 updates by @dependabot[bot] in Bump the k8s group across 1 directory with 5 updates #2584

Full Changelog: 1.11.2-community...1.11.3-community

Related components

eBPF Agent

What's Changed

Non-breaking changes

• Fix failing e2e: pin nginx image by @jotak in Fix failing e2e: pin nginx image netobserv-ebpf-agent#910
• fix flaky test by @jotak in fix flaky test netobserv-ebpf-agent#918
• fix: use host page size for minimized ringbuf maps by @jkaflik in fix: use host page size for minimized ringbuf maps netobserv-ebpf-agent#925
• NETOBSERV-2471: TLS usage tracking by @jotak in NETOBSERV-2471: TLS usage tracking netobserv-ebpf-agent#815

Dependencies

• Bump github.com/cilium/ebpf from 0.20.0 to 0.21.0 by @dependabot[bot] in Bump github.com/cilium/ebpf from 0.20.0 to 0.21.0 netobserv-ebpf-agent#907
• Bump github.com/caarlos0/env/v11 from 11.3.1 to 11.4.0 by @dependabot[bot] in Bump github.com/caarlos0/env/v11 from 11.3.1 to 11.4.0 netobserv-ebpf-agent#897
• Bump golang.org/x/sys from 0.41.0 to 0.42.0 by @dependabot[bot] in Bump golang.org/x/sys from 0.41.0 to 0.42.0 netobserv-ebpf-agent#916
• Bump github.com/netobserv/flowlogs-pipeline from 1.11.0-community to 1.11.2-community by @dependabot[bot] in Bump github.com/netobserv/flowlogs-pipeline from 1.11.0-community to 1.11.2-community netobserv-ebpf-agent#915
• chore(deps): update konflux references by @red-hat-konflux[bot] in chore(deps): update konflux references netobserv-ebpf-agent#913
• Bump google.golang.org/grpc from 1.79.1 to 1.79.3 by @dependabot[bot] in Bump google.golang.org/grpc from 1.79.1 to 1.79.3 netobserv-ebpf-agent#917
• Bump the k8s group with 3 updates by @dependabot[bot] in Bump the k8s group with 3 updates netobserv-ebpf-agent#904
• chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9.7-1773895075 by @red-hat-konflux[bot] in chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9.7-1773895075 netobserv-ebpf-agent#919
• chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9.7-1773939694 by @red-hat-konflux[bot] in chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9.7-1773939694 netobserv-ebpf-agent#921
• chore(deps): update konflux references by @red-hat-konflux[bot] in chore(deps): update konflux references netobserv-ebpf-agent#923
• Bump the k8s group across 1 directory with 3 updates by @dependabot[bot] in Bump the k8s group across 1 directory with 3 updates netobserv-ebpf-agent#926

New Contributors

• @jkaflik made their first contribution in fix: use host page size for minimized ringbuf maps netobserv-ebpf-agent#925

Full Changelog: netobserv/netobserv-ebpf-agent@v1.11.2-community...v1.11.3-community

Flowlogs-Pipeline

What's Changed

Breaking changes 🛠

• NETOBSERV-2085: more flexible secondary nets indexing by @jotak in NETOBSERV-2085: more flexible secondary nets indexing flowlogs-pipeline#1203

Non-breaking changes

• Fix location tests failing by @jpinsonneau in Fix location tests failing flowlogs-pipeline#1222
• NETOBSERV-2471: TLS usage tracking (bump agent) by @jotak in NETOBSERV-2471: TLS usage tracking (bump agent) flowlogs-pipeline#1119
• Update Konflux references by @red-hat-konflux[bot] in Update Konflux references flowlogs-pipeline#1218

Dependencies

• Bump github.com/netobserv/netobserv-ebpf-agent from 1.11.1-community to 1.11.2-community by @dependabot[bot] in Bump github.com/netobserv/netobserv-ebpf-agent from 1.11.1-community to 1.11.2-community flowlogs-pipeline#1211
• Update Konflux references by @red-hat-konflux[bot] in Update Konflux references flowlogs-pipeline#1210
• Bump github.com/minio/minio-go/v7 from 7.0.98 to 7.0.99 by @dependabot[bot] in Bump github.com/minio/minio-go/v7 from 7.0.98 to 7.0.99 flowlogs-pipeline#1206
• Bump the otel group with 9 updates by @dependabot[bot] in Bump the otel group with 9 updates flowlogs-pipeline#1204
• Bump the k8s group with 3 updates by @dependabot[bot] in Bump the k8s group with 3 updates flowlogs-pipeline#1202
• Bump google.golang.org/grpc from 1.79.1 to 1.79.3 by @dependabot[bot] in Bump google.golang.org/grpc from 1.79.1 to 1.79.3 flowlogs-pipeline#1212
• Update registry.access.redhat.com/ubi9/ubi-minimal Docker tag to v9.7-1773895075 by @red-hat-konflux[bot] in Update registry.access.redhat.com/ubi9/ubi-minimal Docker tag to v9.7-1773895075 flowlogs-pipeline#1214
• Update registry.access.redhat.com/ubi9/ubi-minimal Docker tag to v9.7-1773939694 by @red-hat-konflux[bot] in Update registry.access.redhat.com/ubi9/ubi-minimal Docker tag to v9.7-1773939694 flowlogs-pipeline#1215
• Bump github.com/google/go-jsonnet from 0.20.0 to 0.22.0 by @dependabot[bot] in Bump github.com/google/go-jsonnet from 0.20.0 to 0.22.0 flowlogs-pipeline#1225

Full Changelog: netobserv/flowlogs-pipeline@v1.11.2-community...v1.11.3-community

Web Console

What's Changed

Non-breaking changes

• NETOBSERV-2375: adapt statuses to operator changes; sort conditions by @jotak in NETOBSERV-2375: adapt statuses to operator changes; sort conditions netobserv-web-console#1319
• NETOBSERV-2477: fix failed query when namespace scope isn't available by @jotak in NETOBSERV-2477: fix failed query when namespace scope isn't available netobserv-web-console#1347
• NETOBSERV-2388 QE Frontend tests migration by @memodi in NETOBSERV-2388 QE Frontend tests migration netobserv-web-console#1317
• NETOBSERV-2620: Schema update to fix typo and other changes by @Amoghrd in NETOBSERV-2620: Schema update to fix typo and other changes netobserv-web-console#1384
• NETOBSERV-2669: Fix high latency display by @Amoghrd in NETOBSERV-2669: Fix high latency display netobserv-web-console#1371
• NETOBSERV-2657: Allow external/contributed recording rules in Network Health by @leandroberetta in NETOBSERV-2657: Allow external/contributed recording rules in Network Health netobserv-web-console#1311
• NETOBSERV-2471: Allow space in filtered values by @jotak in NETOBSERV-2471: Allow space in filtered values netobserv-web-console#1393
• remove duplicate placeholder in sample config by @jpinsonneau in remove duplicate placeholder in sample config netobserv-web-console#1397

Dependencies

• Update registry.access.redhat.com/ubi9/nodejs-22 Docker tag to v9.7-1773304419 by @red-hat-konflux[bot] in Update registry.access.redhat.com/ubi9/nodejs-22 Docker tag to v9.7-1773304419 netobserv-web-console#1335
• Update Konflux references by @red-hat-konflux[bot] in Update Konflux references netobserv-web-console#1344
• Bump github.com/netobserv/netobserv-ebpf-agent from 1.11.0-community to 1.11.2-community by @dependabot[bot] in Bump github.com/netobserv/netobserv-ebpf-agent from 1.11.0-community to 1.11.2-community netobserv-web-console#1348
• Update registry.access.redhat.com/ubi9/nodejs-22 Docker tag to v9.7-1773809184 by @red-hat-konflux[bot] in Update registry.access.redhat.com/ubi9/nodejs-22 Docker tag to v9.7-1773809184 netobserv-web-console#1353
• Bump undici from 7.22.0 to 7.24.4 in /web by @dependabot[bot] in Bump undici from 7.22.0 to 7.24.4 in /web netobserv-web-console#1354
• Update registry.access.redhat.com/ubi9/ubi-minimal Docker tag to v9.7-1773939694 by @red-hat-konflux[bot] in Update registry.access.redhat.com/ubi9/ubi-minimal Docker tag to v9.7-1773939694 netobserv-web-console#1362
• Update registry.access.redhat.com/ubi9/nodejs-22 Docker tag to v9.7-1774326843 by @red-hat-konflux[bot] in Update registry.access.redhat.com/ubi9/nodejs-22 Docker tag to v9.7-1774326843 netobserv-web-console#1372
• Update registry.access.redhat.com/ubi9/nodejs-22 Docker tag to v9.7-1774457043 by @red-hat-konflux[bot] in Update registry.access.redhat.com/ubi9/nodejs-22 Docker tag to v9.7-1774457043 netobserv-web-console#1382
• Update Konflux references by @red-hat-konflux[bot] in Update Konflux references netobserv-web-console#1368
• Update registry.access.redhat.com/ubi9/nodejs-22 Docker tag to v9.7-1775152218 by @red-hat-konflux[bot] in Update registry.access.redhat.com/ubi9/nodejs-22 Docker tag to v9.7-1775152218 netobserv-web-console#1391
• Update Konflux references by @red-hat-konflux[bot] in Update Konflux references netobserv-web-console#1387
• Bump the k8s group across 1 directory with 3 updates by @dependabot[bot] in Bump the k8s group across 1 directory with 3 updates netobserv-web-console#1376

Full Changelog: netobserv/netobserv-web-console@v1.11.2-community...v1.11.3-community

---

This discussion was created from the release 1.11.3-community.