v52.3.88

v52.3.88 (2024-11-03)

Release Highlights

In this release, alongside a few bug fixes, we've added functionality to override specific image names—a feature required for certain CI platforms that host each image in a private repository.

This release also includes a significant milestone for scripting functionality, introducing a completely redesigned UI for script creation and runtime console. The update features a robust web code editor and many other valuable improvements.

New Features & Bug Fixes

• Added the ability to override image names in values.yaml for each specific image, enabling compatibility with platforms that store images in private repositories.
• Extended script execution capabilities to the Hub, in addition to the existing support for the workers. Now, the Hub can also run scripts, as well as consolidate the results from the Workers.
• Fixed numerous script-related bugs.
• Enhanced performance by switching from text-based JSON to Golang binary objects (GOB) for communication between the workers and the Hub.
• Resolved a frontend issue where entries would blink due to an asynchronous operation that shortened long phrases.
• Fixed an error in the service map where changing perspective (pod, service, namespace) would cause an empty screen if traffic wasn't streaming.
• Fixed an issue where total size in bytes was always shown as zero for TCP packets. TCP packets now display their actual sizes.
• Introduced a completely new UI for scripting.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.88/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.88/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.88/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.88/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.88/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.87

v52.3.87 (2024-10-30)

Release Highlights

Quick fix to v52.3.86, related to running eBPF on GKE.

New Features & Bug Fixes

• Added a missing permission required to run eBPF on certain K8s stacks (e.g. GKE) (kubeshark/tracer@5c27dc6).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.87/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.87/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.87/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.87/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.87/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.86

v52.3.86 (2024-10-29)

Release Highlights

Quick fix to v52.3.85. tap.resourceGuard.enabled was set to false by default.

New Features & Bug Fixes

• Reverted previous commit (629fb11)

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.86/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.86/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.86/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.86/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.86/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.85

v52.3.85 (2024-10-29)

Release Highlights

Keywords: eBPF, Cilium, Scripting, AWS Kinesis, Performance

In this release, we fixed multiple bugs and made several improvements. Kubeshark's eBPF implementation can now work safely with the Cilium CNI. We also added new helper functions, including one that supports uploading data to AWS Kinesis.

New Features & Bug Fixes

• Changed traffic capture to start by default (tap.stopped=false). This behavior can be adjusted with a configuration value.
• Removed the globalFilter that previously prevented access to the recording screen. Issue #1632
• Set tap.resourceGuard.enabled to true by default. This ensures that by default, if resource utilization (CPU, memory, disk) exceeds 90% on any node, traffic capture and processing will pause for that node, until utilization falls below 90%.
• Enhanced pod/container identification in environments with Envoy.
• Addressed critical vulnerabilities. Issue #1598 - thanks to @cmontemuino ❤️❤️❤️
• Added an AWS Kinesis scripting helper.
• Introduced a webhookForm scripting helper to support multipart/form-data content type.
• Fixed several scripting and eBPF-related bugs.
• Started measuring round-trip time in microseconds instead of milliseconds (in K8s everything is much faster).
• Resolved an eBPF-related bug that previously limited compatibility with Cilium CNI. They’re best friends now :)

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.85/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.85/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.85/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.85/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.85/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.84

v52.3.84 (2024-10-17)

Release Highlights

Keywords: Scripts, Tracer

In this release, we fixed several tracer-related issues and improved our scripting-related features.

New Features & Bug Fixes

• Fixed a Tracer issue with older kernel versions (#1629).
• Fixed a Tracer issue reported by a user (#1479).
• Enabled scripting console logs to be shown as part of kubeshark tap's logs. Scripts can now generate logs and reports, which are visible in kubeshark tap's logs.
• Enabled the kubeshark console command to persist across multiple Kubeshark deployments.
• Added an active/inactive state for scripts, allowing them to be added in an inactive state by default.
• Scripts can be activated or deactivated using the Scripting Dashboard.
• A list of active script titles can be set using the scripting.active configuration variable.
• Removed CPU limits and increased memory limits for Hub and Workers to support a wider variety of cluster sizes. Limits can be reintroduced by users on demand.
• Added timestamp>now() to tap.globalFilter by default to ensure only new traffic is presented. This can be changed on the settings page or by setting the tap.globalFilter configuration value.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.84/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.84/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.84/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.84/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.84/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.83

v52.3.83 (2024-10-09)

Release Highlights

Keywords: Scripting, WebSocket, UDP, TLS, HTTPS, Recording, TCPDump, Capture Filters

In this release, along with fixing several bugs, we enhanced our scripting capabilities, added a UDP dissector, improved TLS/HTTPS support, and introduced a new feature that enables continuous recording of all captured traffic—think TCPDump for Kubernetes.

New Features & Bug Fixes

• Resolved several bugs related to capture filters that previously caused inconsistent behavior.
• Improved the kubeshark script command to synchronize scripting code from a local folder to the Kubernetes ConfigMap. You can now use a simple CLI to point to a local folder, ensuring that any changes are reflected in the kubeshark-config-map, with workers automatically reloading the updated scripts.
• Fixed a bug that affected the console CLI command (e.g., kubeshark console), which previously prevented scripting logs from being displayed outside of the dashboard.
• Added UDP support to the list of supported dissectors, allowing Kubeshark to display all UDP packets.
• Enhanced TLS/HTTPS support to display all encrypted TCP packets, along with various TLS 1.x handshake messages (e.g., ClientHello, ServerHello). Additionally, when supported TLS termination libraries such as OpenSSL are used, the full message is parsed.
• Kubeshark now supports continuous automatic recording of all traffic, managing storage allocation and time windows. The recordings can be copied locally on demand using the kubeshark pcapdump command.
• Added support for capturing and processing TLS traffic from short-lived processes that are not part of the Kubernetes manifest (e.g., SSH-ing into a pod or node and using curl with an HTTPS URL).
• Fixed a bug related to Kubernetes watchers by replacing them with cache informers, improving pod-targeting functionality.
• Added an API health endpoint that indicates the health of all workers, particularly the BPF expressions set on each worker. This is especially useful for understanding what types of traffic Kubeshark is monitoring and ignoring.
• Fixed broken WebSocket protocol support (#1624).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.82

v52.3.82 (2024-09-15)

Release Highlights

Keywords: Sentry, Profiling, Webhook, Docker, VLAN, MacVLAN

This release primarily introduces infrastructure changes aimed at optimizing Kubeshark's resource consumption.

New Features & Bug Fixes

• Enhanced self-profiling capabilities with hub support, in addition to the existing support for workers. Profiling can be enabled using the --set tap.pprof.enabled=true flag alongside running kubeshark pprof.
• Added support for Sentry.
• Logged TCP packet timestamps.
• Introduced a new tap.docker.tagLock flag that locks Docker image tags, preventing automatic upgrades to the latest branch image version.
• Added the ability to include custom headers in the Webhook helper.
• Consolidated all settings into a single settings dialog window.
• Improved our support for VLAN and MacVLAN by considering the VLAN ID in the packets.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.82/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.82/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.82/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.82/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.82/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.79

v52.3.79 (2024-08-26)

Release Highlights

Keywords: protocol dissectors, TCP, profiling

This release focuses on adding the ability to dynamically set, enable, and disable protocol dissectors. These changes can impact CPU, memory, and storage consumption, as well as reduce clutter from redundant protocols. Enabling the tcp dissector allows visibility into all TCP packets, regardless of protocol, which is a powerful debugging tool. However, it consumes significant resources, so it's recommended to use it selectively.

We've also added a pprof flag that enables profiling of any Kubeshark container through a UI while Kubeshark is running. This can help identify specific behaviors or protocols that consume significant resources.

New Features & Bug Fixes

• Adjusted container resource and worker storage limits (#1588).
• tcp protocol dissector is now enabled by default (it was previously disabled by default).
• Added the pprof command-line argument to open a profiling UI for a selected container.
• Fixed broken telemetry flag functionality (#1550).
• Enabled dynamic setting, disabling, and enabling of protocol dissectors, including the tcp dissector.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.79/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.79/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.79/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.79/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.79/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.78

v52.3.78 (2024-08-19)

Release Highlights

This release includes a single breaking bug fix on top of version v52.3.77.

New Features & Bug Fixes

• Fixed the bug causing port-forward to fail when using kubeshark CLI (#1587).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.78/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.78/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.78/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.78/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.78/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.77

v52.3.77 (2024-08-19)

Release Highlights

This release includes a single breaking bug fix on top of version v52.3.76.

New Features & Bug Fixes

• Fixed the bug causing the tracer to crash on older kernel versions (issue #1585).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.77/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.77/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.77/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.77/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.77/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.