v52.3.84

v52.3.84 (2024-10-17)

Release Highlights

Keywords: Scripts, Tracer

In this release, we fixed several tracer-related issues and improved our scripting-related features.

New Features & Bug Fixes

• Fixed a Tracer issue with older kernel versions (#1629).
• Fixed a Tracer issue reported by a user (#1479).
• Enabled scripting console logs to be shown as part of kubeshark tap's logs. Scripts can now generate logs and reports, which are visible in kubeshark tap's logs.
• Enabled the kubeshark console command to persist across multiple Kubeshark deployments.
• Added an active/inactive state for scripts, allowing them to be added in an inactive state by default.
• Scripts can be activated or deactivated using the Scripting Dashboard.
• A list of active script titles can be set using the scripting.active configuration variable.
• Removed CPU limits and increased memory limits for Hub and Workers to support a wider variety of cluster sizes. Limits can be reintroduced by users on demand.
• Added timestamp>now() to tap.globalFilter by default to ensure only new traffic is presented. This can be changed on the settings page or by setting the tap.globalFilter configuration value.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.84/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.84/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.84/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.84/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.84/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.83

v52.3.83 (2024-10-09)

Release Highlights

Keywords: Scripting, WebSocket, UDP, TLS, HTTPS, Recording, TCPDump, Capture Filters

In this release, along with fixing several bugs, we enhanced our scripting capabilities, added a UDP dissector, improved TLS/HTTPS support, and introduced a new feature that enables continuous recording of all captured traffic—think TCPDump for Kubernetes.

New Features & Bug Fixes

• Resolved several bugs related to capture filters that previously caused inconsistent behavior.
• Improved the kubeshark script command to synchronize scripting code from a local folder to the Kubernetes ConfigMap. You can now use a simple CLI to point to a local folder, ensuring that any changes are reflected in the kubeshark-config-map, with workers automatically reloading the updated scripts.
• Fixed a bug that affected the console CLI command (e.g., kubeshark console), which previously prevented scripting logs from being displayed outside of the dashboard.
• Added UDP support to the list of supported dissectors, allowing Kubeshark to display all UDP packets.
• Enhanced TLS/HTTPS support to display all encrypted TCP packets, along with various TLS 1.x handshake messages (e.g., ClientHello, ServerHello). Additionally, when supported TLS termination libraries such as OpenSSL are used, the full message is parsed.
• Kubeshark now supports continuous automatic recording of all traffic, managing storage allocation and time windows. The recordings can be copied locally on demand using the kubeshark pcapdump command.
• Added support for capturing and processing TLS traffic from short-lived processes that are not part of the Kubernetes manifest (e.g., SSH-ing into a pod or node and using curl with an HTTPS URL).
• Fixed a bug related to Kubernetes watchers by replacing them with cache informers, improving pod-targeting functionality.
• Added an API health endpoint that indicates the health of all workers, particularly the BPF expressions set on each worker. This is especially useful for understanding what types of traffic Kubeshark is monitoring and ignoring.
• Fixed broken WebSocket protocol support (#1624).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.82

v52.3.82 (2024-09-15)

Release Highlights

Keywords: Sentry, Profiling, Webhook, Docker, VLAN, MacVLAN

This release primarily introduces infrastructure changes aimed at optimizing Kubeshark's resource consumption.

New Features & Bug Fixes

• Enhanced self-profiling capabilities with hub support, in addition to the existing support for workers. Profiling can be enabled using the --set tap.pprof.enabled=true flag alongside running kubeshark pprof.
• Added support for Sentry.
• Logged TCP packet timestamps.
• Introduced a new tap.docker.tagLock flag that locks Docker image tags, preventing automatic upgrades to the latest branch image version.
• Added the ability to include custom headers in the Webhook helper.
• Consolidated all settings into a single settings dialog window.
• Improved our support for VLAN and MacVLAN by considering the VLAN ID in the packets.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.82/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.82/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.82/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.82/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.82/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.79

v52.3.79 (2024-08-26)

Release Highlights

Keywords: protocol dissectors, TCP, profiling

This release focuses on adding the ability to dynamically set, enable, and disable protocol dissectors. These changes can impact CPU, memory, and storage consumption, as well as reduce clutter from redundant protocols. Enabling the tcp dissector allows visibility into all TCP packets, regardless of protocol, which is a powerful debugging tool. However, it consumes significant resources, so it's recommended to use it selectively.

We've also added a pprof flag that enables profiling of any Kubeshark container through a UI while Kubeshark is running. This can help identify specific behaviors or protocols that consume significant resources.

New Features & Bug Fixes

• Adjusted container resource and worker storage limits (#1588).
• tcp protocol dissector is now enabled by default (it was previously disabled by default).
• Added the pprof command-line argument to open a profiling UI for a selected container.
• Fixed broken telemetry flag functionality (#1550).
• Enabled dynamic setting, disabling, and enabling of protocol dissectors, including the tcp dissector.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.79/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.79/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.79/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.79/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.79/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.78

v52.3.78 (2024-08-19)

Release Highlights

This release includes a single breaking bug fix on top of version v52.3.77.

New Features & Bug Fixes

• Fixed the bug causing port-forward to fail when using kubeshark CLI (#1587).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.78/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.78/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.78/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.78/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.78/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.77

v52.3.77 (2024-08-19)

Release Highlights

This release includes a single breaking bug fix on top of version v52.3.76.

New Features & Bug Fixes

• Fixed the bug causing the tracer to crash on older kernel versions (issue #1585).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.77/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.77/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.77/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.77/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.77/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.76

v52.3.76 (2024-08-17)

Release Highlights

Keywords: TCP Connection Analysis, TCP, HTTP2

In this release, we've extended the tcp dissector functionality to include all TCP packets. This enhancement allows users to see the content of all TCP traffic, regardless of whether the protocol is supported or not. When using this dissector, packet content is presented as-is without message reassembly. This enables users to debug traffic and address questions like, "Why am I not seeing traffic?" as well as to conduct thorough pod-to-pod connection analysis.

Additionally, we fixed several critical bugs introduced in previous releases.

New Features & Bug Fixes

• Extended the tcp dissector to include all TCP packets.
• Added the ability to include or exclude this dissector from the list of supported protocols in the values.yaml configuration.
• The tcp dissector is disabled by default and can be explicitly added via a Helm value.
• Added profiling infrastructure.
• Restored the option to disable telemetry.
• Fixed the bug causing the tracer to crash on older kernel versions (issue #1585).
• Fixed various issues related to HTTP/2 support (HTTP/2 over TLS, HTTP/2 Cleartext (H2C)).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.76/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.76/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.76/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.76/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.76/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.74

v52.3.74 (2024-08-13)

Release Highlights

Keywords:

This release primarily focuses on bug fixes and improvements, building on the recent v52.3.73 release.

New Features & Bug Fixes

• Improved performance of the dashboard (React application).
• Introduced a new dashboard feature that allows dynamic exclusion of namespaces from pod targeting.
• Restored (broken) functionality on ARM architecture (e.g., Mac M1).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.74/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.74/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.74/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.74/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.74/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.73

v52.3.73 (2024-08-08)

Release Highlights

Keywords: performance, support, capture filters, prometheus,

In this release, one of the main focus points was to allow more granularity in deciding what traffic to process and when, resulting in much-improved resource consumption and reduction of noise (e.g., traffic you're not interested in).

The first feature is a simple yet super useful ability to control Kubeshark resource consumption. Think of it like a dynamic on/off switch: when set to "on," Kubeshark functions as expected, and when set to "off," Kubeshark lays dormant and consumes almost no resources. This is especially useful if you want to have Kubeshark installed but not actually processing traffic and consuming resources, yet ready to start on command (manual or automated).

The second feature is the ability to configure the list of supported protocol dissectors and remove protocols that are of less interest (e.g., DNS). This results in less noise and less resource consumption as the traffic will not be processed. Traffic is captured, but if it belongs to a protocol that isn't supported or is disabled in the configuration, it will not be processed and will be discarded.

The third feature in this group is the ability to exclude namespaces for the pod targeting rules. Until now, we could only add namespaces to the list; now, we can also exclude them. This is useful for specifying what we don’t want to target, as opposed to what we do want to target. An example is excluding kube-system or istio-system, which can be busy yet of no interest.

A simple yet very useful feature is the ability to export any custom metric to Prometheus, making Kubeshark a very useful monitoring tool.

New Features & Bug Fixes

• Added a dashboard ability to dynamically start and stop Kubeshark from processing traffic. When Kubeshark is stopped, it becomes dormant, consuming close to zero resources.
• Added an ability to determine the default start/stop behavior in Helm as a Helm value. The default behavior is set to start Kubeshark stopped and require an explicit action in the dashboard to start traffic processing.
• Removed the replay functionality.
• Added more granularity in determining duplicate traffic.
• Added online support option using Intercom. This option can be disabled by using --set supportChatEnabled=false. The default value is set to true.
• Added capability to export custom metrics to Prometheus in scripting.
• Deprecated the kubeshark pro command.
• Added an ability to configure supported protocol dissectors and remove any protocols that are of no interest (e.g., DNS when it is not interesting).
• Added an ability to exclude namespaces from pod targeting. This is only a backend implementation and can be configured in the Helm values. Dashboard implementation that will allow dynamically changing the list of excluded namespaces is yet to be implemented.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.73/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.73/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.73/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.73/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.73/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.72

v52.3.72 (2024-07-27)

Release Highlights

Keywords:

New Features & Bug Fixes

• Add an ability to stop Kubeshark from processing new traffic (making it dormant consuming close to zero resources), and restart processing traffic on-demand
• Add an ability to determine the default start/stop behavior in the helm as a helm value (#1557).
• Added an ability to determine start/stop behavior dynamically from the UI
• Removed the replay functionality
• Added more granularity in determining duplicate traffic (#1561)
• Added online support option using Intercom
• Added an option to disable online support (#1573)
• Added capability to export custom metrics to Prometheus in scripting.
• Improved performance of AF_PACKET based packet capture