v52.1.63

v52.1.63 (2024-02-28)

Release Highlights

Keywords: Custom TLS, eBPF, Homebrew

In this release, we have enhanced the Homebrew installation process and addressed several bugs. We have broadened our eBPF TLS interception capabilities to include support for Golang sockets and custom TLS configurations. Additionally, we have undertaken significant refactoring in the Worker to boost performance and conducted comprehensive bug fixes.

New Features & Bug Fixes

• The installation script is now hosted in the Kubeshark main repository.
• Enhanced the Homebrew user experience (#1488).
• Resolved a Homebrew-related issue (#1345).
• Improved support for Minikube and other Linux kernels by removing the CHECKPOINT_RESTORE capability, which can still be manually added if necessary (8fe0544).
• Refactored significant portions of the Worker's dissection-reassemble-display process for increased reliability (shifted from dynamic API call representation to a static approach to avoid marshaling and unmarshaling).
• Addressed numerous bugs in the Worker.
• Added API call METADATA to each API call information pane, encompassing all relevant API call details.
• Enabled TLS capture from Golang sockets.
• Introduced support for custom TLS eBPF probes.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.63/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.63/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.63/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.63/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.1.63/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.1.62

Kubeshark release v52.1.62

Stale Release

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.62/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.62/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.62/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.62/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.1.62/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.1.61

v52.1.61 (2024-02-28)

Stale Release

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.61/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.61/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.61/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.61/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.1.61/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.1.50

v52.1.50 (2024-02-20)

Release Highlights

Keywords: Kind, Tracer, Browser-based Cryptography

This release addresses two recently reported issues. The first issue involved Kubeshark not functioning correctly on kind. The second issue was related to a bug encountered with a specific Chrome browser version.

Bug Fixes

• Replaced browser-based crypto.randomUUID with the uuid package.
• Upgraded to the latest version of Tracer (kubeshark/tracer@8c5405b, kubeshark/tracer@03073e2)

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.50/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.50/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.50/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.50/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.1.50/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.1.45

v52.1.45 (2024-02-15)

Release Highlights

Keywords: WebSocket, Prometheus, eBPF, Performance

In this release, we focused on enhancing the performance of Tracer, which is tasked with intercepting TLS traffic using eBPF. Additionally, we have introduced support for the WebSocket protocol.

Enhancements and Changes

• Added support for the WebSocket protocol.
• Incorporated TLS metrics into the Prometheus metrics exporter.
• Updated the Kubeshark Grafana dashboard.
• Introduced support for cgroupsv2. (kubeshark/tracer@8c5405b)
• Updated to the latest Cilium eBPF library. (kubeshark/tracer@8c5405b)
• Enhanced the performance of Tracer. (kubeshark/tracer@03073e2)
• Fixed a race condition in Tracer.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.45/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.45/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.45/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.45/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.1.45/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.1.30

v52.1.30 (2024-02-07)

Release Highlights

Keywords: SAML Authentication, Feature and View Authorization

We are excited to announce a significant update in this release, focusing on enhancing our SAML support. We've completely overhauled our SAML authentication process, enabling seamless integration of Kubeshark with corporate Identity Providers (IDPs) using SAML. This improvement allows users to authenticate using their corporate identities and ensures they are authorized to view traffic and utilize certain features based on their roles.

Enhancements and Changes

• Fully revamped SAML authentication for a more robust and streamlined experience.
• Introduced PCAP, JSON, and Error PCAP Time-To-Live (TTL) settings to extend the data retention window, offering more flexibility in data management.
• Implemented feature-based authorization, distinguishing between Admin and Viewer roles to enhance security and control.
• Added namespace-based authorization, allowing users to access namespaces according to their roles, which enhances data segmentation and privacy.
• Significantly improved Tracer performance and reliability, ensuring a smoother and more efficient user experience.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.30/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.30/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.30/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.30/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.1.30/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.1.9

v52.1.9 (2024-01-24)

Release Highlights

Keywords: K8s API, Performance, Pod-Targeting

In this update, our primary goal was to enhance performance by reducing Kubeshark's impact on the K8s API server. Previously, each Worker monitored K8s events, which could potentially strain the K8s API server in large clusters. To address this issue, we have shifted this functionality exclusively to the Hub.

A significant addition is the ability to set pod targeting rules dynamically from the dashboard. This feature enables users to more effectively manage the Kubeshark workload and the traffic it processes.

Enhancements and Changes

• Dynamic Pod Targeting: This feature enables the control of pod targeting rules through the dashboard. It adds significant functionality and enhances performance. With dynamic Pod Targeting, users can tailor the Kubeshark workload (fewer pods mean less workload) and optimize resource consumption.
• Centralized K8s Event Monitoring: By centralizing all K8s event monitoring in the Hub and removing these monitors from the worker nodes, we expect to reduce the impact Kubeshark has on the K8s API, a crucial improvement for extra-large clusters with many nodes.
• SAML Authentication Framework in Air-Gapped Environments: We've laid the groundwork for SAML authentication in air-gapped environments. PR #1475

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.9/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.9/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.9/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.9/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.1.9/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.1.0

v52.1.0 (2024-01-17)

Release Highlights

Keywords: Performance, Security

This release focuses on security and performance improvements, introducing features that provide better control over resource limitations, resource consumption, and granular security capabilities.

Breaking Changes

• In the configuration, when detailing Worker’s CPU and memory limits, for more granular control, the term worker was changed to sniffer, and the term tracer was added. (Commit d99bfea, Commit a5be1a8)

Enhancements and Changes

• Scripting environment variables are now a Kubernetes secret to improve security. (Commit ea3eecf)
• Moved all security capabilities to a central location: values.yaml, for better control over security permissions. (Commit c1fc444)
• Added Global Filter capability in support of sensitive data redaction. (Commit 6c06307)
• Refactored PF-RING support and added support for air-gapped environments. (Commit 6c01078)
• Added Prometheus metrics scraping support for Kubeshark monitoring. (Commit db51e6d)
• Introduced Traffic Sample Rate, providing support for resource consumption throttling and traffic processing. (Commit 8ba3e60)
• Supported limiting Tracer CPU and memory consumption. (Commit a5be1a8)
• Fixed Kafka and AMQP bug.
• Extended pod targeting in support of ICMP and TCP.
• Reduced the amount of bandwidth consumed by the Dashboard to improve performance.
• Ignored redundant EOFs in HTTP parser.
• Added debug utility to tracer. (Commit dab28f8)
• Brought back support for crypto/tls. (Commit b493fec)
• Moved the dashboard’s service map to be a tab instead of a dialog window.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.0/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.0/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.0/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.0/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.1.0/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.0.0

v52.0.0 (2023-12-22)

Release Highlights

Keywords: Traffic Recorder, Half-Connection, API

This release introduces significant new features, including traffic recording and offline analysis, handling of half and erroneous connections, and enhancements to ICMP and TCP dissectors.

Enhancements and Changes

• Traffic Recorder: An advanced tool for capturing and analyzing network traffic.
• Openshift Compatibility: Kubeshark is now compatible with Openshift.
• Half-Connection Handling: Improved visibility of half-connections in supported protocols.
• Erroneous Connection Analysis: Enhanced ICMP and TCP dissectors provide insights into the causes of erroneous connections.
• New API Endpoints: Addition of Hub and Worker API endpoints, facilitating data access via WebSocket without requiring scripts or dashboard access.
• EFS Persistent Volume Support: Enhanced storage options with the introduction of EFS persistent volume support. Refer to Pull Request #1455 for more information.
• Security Context Capabilities: Capability to assign security contexts based on utilized features, minimizing the need for elevated capabilities when unnecessary.
• Addition of beforePcapRemoval and afterPcapRemoval hooks.
• Worker Port Modification: The default Worker port has been changed from 8897 to 30001.
• --pcap Functionality Removed: The --pcap functionality has been discontinued.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.0.0/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.0.0/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.0.0/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.0.0/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.0.0/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v51.0.39

Kubeshark release v51.0.39

Kubeshark CHANGELOG is now part of Kubeshark wiki

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v51.0.39/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v51.0.39/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v51.0.39/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v51.0.39/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v51.0.39/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.