Skip to content

v1.17.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Oct 23:49
· 1 commit to main since this release
v1.17.0
7505b3f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

⚠️ Security fix — upgrade recommended

This release fixes a critical CSRF vulnerability in Radar's local mode (GHSA-w7q8-74xp-j784). In versions ≤ 1.16.0, a malicious web page visited while Radar was running could send cross-site requests to the local API and act against your cluster with your kubeconfig credentials. All users on 1.16.0 or earlier should upgrade to 1.17.0.

Radar v1.17.0

Modern Kubernetes visibility. Local-first. No account. No cloud dependency. Fast.

Topology, event timeline, and service traffic — plus resource browsing and Helm management. Open source. Free forever.

Installation

Homebrew (macOS/Linux):

brew install skyhook-io/tap/radar

Scoop (Windows):

scoop bucket add skyhook https://github.com/skyhook-io/scoop-bucket
scoop install radar

PowerShell (Windows):

irm https://raw.githubusercontent.com/skyhook-io/radar/main/install.ps1 | iex

Manual (macOS Apple Silicon):

curl -LO https://github.com/skyhook-io/radar/releases/download/v1.17.0/radar_v1.17.0_darwin_arm64.tar.gz
tar -xzf radar_v1.17.0_darwin_arm64.tar.gz
sudo mv kubectl-radar /usr/local/bin/

Manual (macOS Intel):

curl -LO https://github.com/skyhook-io/radar/releases/download/v1.17.0/radar_v1.17.0_darwin_amd64.tar.gz
tar -xzf radar_v1.17.0_darwin_amd64.tar.gz
sudo mv kubectl-radar /usr/local/bin/

Manual (Linux amd64):

curl -LO https://github.com/skyhook-io/radar/releases/download/v1.17.0/radar_v1.17.0_linux_amd64.tar.gz
tar -xzf radar_v1.17.0_linux_amd64.tar.gz
sudo mv kubectl-radar /usr/local/bin/

Desktop App

Homebrew (macOS):

brew install --cask skyhook-io/tap/radar-desktop

Debian/Ubuntu:

curl -LO https://github.com/skyhook-io/radar/releases/download/v1.17.0/radar-desktop_v1.17.0_linux_amd64.deb
sudo dpkg -i radar-desktop_v1.17.0_linux_amd64.deb

Fedora/RHEL:

curl -LO https://github.com/skyhook-io/radar/releases/download/v1.17.0/radar-desktop_v1.17.0_linux_amd64.rpm
sudo rpm -i radar-desktop_v1.17.0_linux_amd64.rpm

Scoop (Windows):

scoop bucket add skyhook https://github.com/skyhook-io/scoop-bucket
scoop install radar-desktop

Windows (direct download): Download from the assets below.

CLI

Then run: kubectl radar

Changelog

  • 61979eb AI Findings: stop the pane jumping back while scrolling on macOS
  • 6241756 AI summary: stop flagging AnalysisRuns that the controller stopped (#2057)
  • 46883ed Add a read-capture seam for cluster transitions (#2103)
  • cfc90c2 Bump golang.org/x/net to v0.60.0 and browserslist to 4.29.3
  • f264b8a Capacity: explain why a pool isn't scaling down (#2052)
  • e22429b Chart: read VictoriaMetrics objects whenever Radar reads Secrets, and restart on RBAC changes (#2040)
  • 0b8d6a1 CloudNativePG: incident workflows, guarded operations and guided recovery (#1922)
  • 2590be3 Cluster Audit: find unclaimed storage (unconsumed PVCs, long-Pending claims, Released PVs) (#2055)
  • c8294f6 Connect Ingress TLS Secrets across graph and reverse context (#1988)
  • 34b1d1f Connect KEDA scalers to observed authentication dependencies (#1987)
  • 4be4a8d Connect certificates to cached issuers (#1979)
  • 175daa0 Connect observed Pod and replica configuration in topology (#1981)
  • 1e94aaf Detail pages and logs fit at laptop widths; Pending Pods and scheduling causes read plainly (#2074)
  • fbfe986 Detect custom resources stuck deleting on an operator's finalizer (#2053)
  • 61a0842 Don't show Home's all-clear when Helm releases weren't checked
  • 7d03425 Don't show the Issues all-clear when Helm releases weren't checked
  • 9c627cc Expose assigned Pods in Node resource context (#1982)
  • e446289 Extract shared Pod log engine and keep follows continuous (#2077)
  • a037cf0 Extract shared read-scope, image-tag, origin and managed-by helpers (#2143)
  • dcd95de Flag a 401 in any namespace of the Helm issue read
  • a6407d0 Flag a 401 on the Helm read and explain the flag to agents
  • 9ce88a1 GitOps tree: move the cause-tooltip gate into a helper
  • d52b481 GitOps tree: show the cause tooltip only on failing nodes
  • 2806e7e GitOps: drop the field-count badge on rows with an Argo diff
  • 83a46d2 GitOps: show Argo's field list above the resource diff
  • 617b5ef GitOps: stop the Argo field list crashing the page, and show Secret changes
  • 22379df Helm actions: change objects in the release's namespace, not where its history is stored (#2080)
  • c460f0d Helm chart: print how to open Radar after install and upgrade
  • 82e00b4 Include actual Pod dependencies in resource context (#1980)
  • 1894d20 Isolate resource hosts and shared workspace presentation (#2078)
  • 8b02724 Issues follow Radar's read rules on every surface (#2071)
  • 072ddd1 Keep /api/issues fast on clusters with many Helm releases (#2058)
  • 34a5202 Keep Helm release payloads out of the Secret cache
  • 09a84b2 Keep relationship previews and policy metadata within caller visibility (#2083)
  • bcff56c Link discovered custom-resource instances to their CRD definitions (#2013)
  • 3e28361 Load the full Monaco editor feature set and document the worker alias
  • e33ba67 Logs: honest Previous-run answers, and Stream leaves Previous
  • 340bb85 Open the exact object behind EndpointSlice, Knative and Crossplane reference links (#1996)
  • c9962a3 Preserve autoscaling target identity and link HPA Object metric sources (#2009)
  • 0266e7f Promote workspace facts and action review to shared UI (#2104)
  • 5b714f0 Read Traefik TLS material where Traefik reads it (#2075)
  • 72d628d Read pod-level resources (spec.resources) in pod totals, the Pods table and pod detail (#1975)
  • 364aef4 Recover Knative references using their declared resource identity (#2085)
  • abaf8e9 Related resources: put every relationship under a true label (#2049)
  • 86ae0f5 Remember filters across kind and section switches (#2022)
  • 601b9ae Report unchecked issue sources as a list instead of a Helm flag
  • d66825d Resolve Contour's delegated TLS secrets in their own namespace (#2073)
  • 98975fb Resolve Istio hosts only within the observed service domain (#2086)
  • f925f05 Resolve built-in and CAPI relationship identity precisely (#2084)
  • 9f5bbbe Resolve configured TLS references with cached Secret metadata (#2087)
  • fa3f01f Return from promote-full once the controller has taken it
  • fab3ec2 Say failed or stuck Helm releases in the issues tool description
  • e90513a Say when /api/issues couldn't check Helm releases
  • fb10f7b Scope PVC volume usage and distinguish unreachable Prometheus (#2070)
  • afbf1ac Scope current MCP warning events to observed resource and Pod UIDs (#2005)
  • 69dc686 Server: one origin check for the API, add trustedOrigins setting (#2036)
  • 6519719 Share PodSpec reference extraction across audit and context (#1977)
  • 85e87c2 Share cached observed dependency target materialization (#1986)
  • 0871e23 Shared UI: support guided creation, explicit terminals and chart selection (#2079)
  • e9b9727 Show Flux sources as upstream dependencies and explain source failures (#1989)
  • 717a7de Show Gateway API UDPRoutes like the other route kinds (#2076)
  • 2382603 Show the right Homebrew update command for homebrew-core installs
  • 9350700 Stop serving the previous cluster's topology and packages after a context switch
  • 45400b8 Stop the Linux desktop app crashing when opening a resource from an open drawer (#1974)
  • 980d73c Sync Flux objects with their whole source chain, like flux reconcile --with-source (#2110)
  • c44c38c Test the 401 case on the /api/issues handler too
  • 88c6fc4 Test the Helm line under limited visibility and that it shows once
  • 6713f57 Topology routing: per-Pod Service membership, default backends, private Knative, and every Internet entrypoint (#2045)
  • 5486898 Upgrade monaco-editor to 0.57.0 and the dompurify override to 3.4.17
  • 7505b3f What's New: v1.17.0 release notes (#2144)
  • d2a0c3c feat(audit): per-resource check opt-out via radarhq.io/ignore-checks (#1520)
  • fa3b9c8 fix(argocd): stop making page reads wait for an Argo CD status check
  • cf79bec fix(helm): distinguish effective values from overrides
  • 243d0e9 fix(helm): follow-ups to chart source tracking
  • 947daf8 fix(helm): harden chart source recovery
  • 1257cb0 fix(helm): harden effective values handling
  • f397846 fix(helm): keep values compare and editing working against older Radars
  • a1db35f fix(helm): persist and recover chart sources
  • 7d2ddc9 fix(mcp): keep the issues tool description within the catalog budget
  • f6c8911 fix(timeline): an unreachable PostgreSQL costs the timeline, not the product
  • e69a942 fix(timeline): close the gaps a second review found
  • 131f303 fix(timeline): count only lost changes, and keep a late store from failing other reads
  • 697d1bf fix(timeline): log PostgreSQL outages with the database named, point the page at the logs
  • 2167fc6 fix(timeline): retry failed seen-mark clears, say when recent changes could not be read
  • 7dfd720 fix(timeline): say why the timeline is down, and make the outage alertable
Assets 14
Loading