v52.3.95

V52.3.95 (2025-01-11)

Release Highlights

This release addresses a critical bug causing Workers to fail in busy clusters due to a short readiness probe timeout. In addition to increasing the default values, we’ve introduced templated readiness probe values for both Hub and Worker components. The new readiness probe template variables section enables users to fine-tune these values based on their cluster’s performance.

Additionally, we are introducing support for a new protocol: Remote Authentication Dial-In User Service (RADIUS), tailored for users running Kubernetes in 5G core infrastructure environments.

Keywords: RADIUS, Readiness Probe, UDP, Scripting

New Features & Bug Fixes:

1. Fixed a critical bug causing Workers to fail in busy clusters ([#1683](#1683)).
2. Resolved a bug in UDP handling where there was a mismatch between the source and destination ports.
3. Introduced support for the RADIUS protocol.
4. Enhanced the console.log helper, which now supports printing JavaScript JSON objects without requiring JSON.stringify.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.95/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.95/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.95/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.95/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.95/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.94

V52.3.94 (2025-01-03)

Release Highlights

This release introduces a range of enhancements to Kubeshark's functionality, including improved traffic capture, extended configurability, and enhanced compatibility for air-gapped environments. Key updates include support for PCAP traffic recording, refined Istio/Envoy inspection, and the ability to define custom macros. Additionally, communication and performance improvements, as well as user-friendly logging configurations, make this update more robust and user-centric.

Keywords: Envoy, Istio, tcpdump, eBPF

New Features & Bug Fixes:

• TCPdump-Style PCAP Recording:

• Extended the pcapdump command (tcpdump-style traffic recording) that records all L4 traffic (TCP, UDP, SCTP) captured by Kubeshark, including decrypted TLS and mTLS traffic.This capability can run on any size cluster with no limit with no license required.

• Can now record all traffic within a certain time window (e.g. 5 minutes)

• Read more about it here.

• Enhance the Linux Operating System Context by adding detailed process information (e.g., process name, ID, path) for both source and destination of each request-response pair.

• Improved eBPF traffic capture by supporting both cgroup V1 and V2, with the ability to explicitly choose between them.

• Added Prometheus reporting capabilities to the Hub.

• Replaced the default Sniffer port from 30001 to 48999 to avoid port collisions with other applications.

• Improved communication between Sniffer and Tracer for better performance.

• Enabled the definition of custom KFL macros. As an example, set by default: tap.customMacros.https="(http or http2) and tls, which allows users to filter TLS-decrypted HTTP 1 and 2 traffic using the https keyword. Additional macros can be set by the user.

• Kubeshark now works seamlessly in air-gapped environments, removing dependencies on a licensing server.

• Added links and options for product support.

• Granular Log Levels:

• Introduced a logLevel configuration value to allow for more granular control over log verbosity.

• Supported values: info, debug, warning, error.

• Default log level: warning.

• Deprecated the previous tap.debug configuration.

• Istio/Envoy Inspection:

• Enhanced identification of Istio/Envoy traffic to inspect communications between containers and Envoy sidecars in Istio-enabled pods.

• Added an easy way to redact sensitive information from the dashboard

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.94/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.94/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.94/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.94/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.94/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.93

Kubeshark release v52.3.93

Release failed.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.93/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.93/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.93/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.93/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.93/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.92

Release Highlights 🎈🎉 New Protocol Alert: LDAP 🎈🎉

In this release, we've addressed several bugs and introduced significant enhancements:

• LDAP Protocol Support: Kubeshark now supports the LDAPv3 protocol, expanding its protocol analysis capabilities.

• Dashboard Color Scheme Refresh: The dashboard's color scheme has been updated for improved visual clarity.

• Enhanced Scripting Capabilities: Improvements have been made to the scripting functionality, enhancing user experience.

Additionally, Kubeshark can now remediate by blocking the ingress and egress of a pod when suspicious behavior is detected.

Keywords: LDAP, scripting, eBPF, dashboard

New Features & Bug Fixes

• Fixed an issue where adding a new script after deleting a previous one disrupted the scripts list (#1663).

• Renamed the tls dissector to tlsx to prevent confusion with HTTPS TLS.

• Enhanced source/destination resolution for pods that started before Kubeshark when using eBPF as the packet capture method (enabled with --set tap.packetCapture=ebpf).

• Added a helper function to block egress and ingress for specific pods.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.92/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.92/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.92/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.92/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.92/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.91

v52.3.91 (2024-12-01)

Release Highlights

Keywords: DNS, OpenSSL, eBPF

This release focuses primarily on bug fixes and improving the resilience of Kubeshark.

New Features & Bug Fixes

• Added the ability to view Kubeshark logs (hub and workers) directly in the dashboard.
• Fixed an issue in the service map where arrows disappeared under certain conditions.
• Enhanced DNS entry presentation by including the record type.
• Have the dashboard display source and destination process names and IDs when using eBPF as the traffic capture source.
• Added the capability to export and download all dashboard data as CSV files.
• Introduced support for the OpenSSL version of WGET.
• Improved and simplified the scripting logging mechanism.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.91/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.91/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.91/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.91/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.91/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.90

v52.3.90 (2024-11-20)

Release Highlights

Keywords: BoringSSL, TLS, scripting, eBPF, cgroupV1

This release introduces two major enhancements:

1. BoringSSL Support: This update enables Istio users to inspect encrypted Envoy-to-Envoy traffic in plaintext. BoringSSL, a TLS termination library used by Envoy/Istio, now allows traffic decryption, enhancing visibility and troubleshooting in environments where Istio is configured with mTLS in STRICT mode.

2. eBPF with cgroup v1 Support: Users can now utilize the eBPF packet capture method on older operating systems with cgroup v1 support. This provides significant advantages over the AF_PACKET method, delivering improved performance and visibility.

New Features & Bug Fixes

• BoringSSL Integration: Added support for inspecting Envoy-encrypted traffic in plaintext, especially useful for Istio setups using mTLS in STRICT mode.
• eBPF Traffic Capture for cgroup v1: Introduced a new eBPF-based traffic capture method with support for both cgroup v1 and v2, making it compatible with a wider range of operating systems.
• Bug Fixes: Addressed multiple bugs, including issue #1643.
• Improved Scripting Console: Added the ability to deactivate scripts directly from the scripting console, enhancing the scripting user experience.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.90/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.90/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.90/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.90/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.90/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.89

v52.3.89 (2024-11-10)

Release Highlights

Keywords: scripts, PF-RING, gRPC, HTTP/2, Prometheus

This release primarily addresses bug fixes reported by users.

New Features & Bug Fixes

• CPU and memory limits can now be defined as integers or strings.
• kubeshark scripts now detects kubeshark restarts and automatically syncs local scripts to kubeshark-config-map. This allows for synchronizing local scripts to kubeshark-config-map with a single command.
• Removed all remnants of the deprecated PF-RING option.
• Enhanced network error detection and reporting by retaining artifacts of requests or responses that result in network errors.
• Improved display of non-ASCII characters, especially in protocols such as TCP and SCTP.
• Added support for the DNS protocol over TCP.
• Added support for reporting custom metrics in vector form to Prometheus.
• Fixed a bug that could cause browser issues when displaying an entry with gRPC or HTTP/2.
• Fixed a bug where entry names would blink for very long path names.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.89/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.89/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.89/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.89/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.89/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.88

v52.3.88 (2024-11-03)

Release Highlights

In this release, alongside a few bug fixes, we've added functionality to override specific image names—a feature required for certain CI platforms that host each image in a private repository.

This release also includes a significant milestone for scripting functionality, introducing a completely redesigned UI for script creation and runtime console. The update features a robust web code editor and many other valuable improvements.

New Features & Bug Fixes

• Added the ability to override image names in values.yaml for each specific image, enabling compatibility with platforms that store images in private repositories.
• Extended script execution capabilities to the Hub, in addition to the existing support for the workers. Now, the Hub can also run scripts, as well as consolidate the results from the Workers.
• Fixed numerous script-related bugs.
• Enhanced performance by switching from text-based JSON to Golang binary objects (GOB) for communication between the workers and the Hub.
• Resolved a frontend issue where entries would blink due to an asynchronous operation that shortened long phrases.
• Fixed an error in the service map where changing perspective (pod, service, namespace) would cause an empty screen if traffic wasn't streaming.
• Fixed an issue where total size in bytes was always shown as zero for TCP packets. TCP packets now display their actual sizes.
• Introduced a completely new UI for scripting.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.88/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.88/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.88/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.88/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.88/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.87

v52.3.87 (2024-10-30)

Release Highlights

Quick fix to v52.3.86, related to running eBPF on GKE.

New Features & Bug Fixes

• Added a missing permission required to run eBPF on certain K8s stacks (e.g. GKE) (kubeshark/tracer@5c27dc6).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.87/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.87/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.87/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.87/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.87/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.86

v52.3.86 (2024-10-29)

Release Highlights

Quick fix to v52.3.85. tap.resourceGuard.enabled was set to false by default.

New Features & Bug Fixes

• Reverted previous commit (629fb11)

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.86/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.86/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.86/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.86/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.86/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.