87 lines
3.9 KiB
Plaintext
87 lines
3.9 KiB
Plaintext
|
-------------------------------------------------------------------
|
||
|
|
Fri Sep 13 18:27:13 UTC 2024 - opensuse_buildservice@ojkastl.de
|
||
|
|
|
||
|
|
- Update to version 1.2.0:
|
||
|
|
Full changelog see
|
||
|
|
https://github.com/cilium/tetragon/releases/tag/v1.2.0
|
||
|
|
* Major Changes
|
||
|
|
- feat: Username for process_exec events (#2369) by @anfedotoff
|
||
|
|
- tetragon: Allow persistent enforcement during tetragon
|
||
|
|
restart (#2600) by @olsajiri
|
||
|
|
- LSM sensor (#2566) by @anfedotoff
|
||
|
|
* Bugfixes
|
||
|
|
- bpf: use CORE for execve hook (#2399) by @kkourt
|
||
|
|
- Don't create PodInfo if the pod is being deleted (#2431) by
|
||
|
|
@michi-covalent
|
||
|
|
- tetragon: allow namespaced and non-namespaced policies to
|
||
|
|
have the same name (#2337) by @joshuajorel
|
||
|
|
- operator: Don't start metrics server if Helm value
|
||
|
|
tetragonOperator.prometheus.enabled is set to false. (#2484)
|
||
|
|
by @yukinakanaka
|
||
|
|
- enforcer: fix issue when using multiple calls with fmod_ret
|
||
|
|
(#2524) by @kkourt
|
||
|
|
- Reduce the kernel memory footprint (accounted by the cgroup
|
||
|
|
memory controller) of the stack trace feature when unused.
|
||
|
|
(#2546) by @mtardy
|
||
|
|
- Reduce the kernel memory footprint (accounted by the cgroup
|
||
|
|
memory controller) of the ratelimit feature when unused
|
||
|
|
(around ~10MB per kprobe). (#2551) by @mtardy
|
||
|
|
- Reduce the kernel memory footprint (accounted by the cgroup
|
||
|
|
memory controller) of the fdinstall feature when unused
|
||
|
|
(around ~11MB per kprobe). (#2563) by @mtardy
|
||
|
|
- Do not increase the reference count when we cannot find a
|
||
|
|
parent in kthreads. (#2620) by @tpapagian
|
||
|
|
- Reduce the kernel memory footprint (accounted by the cgroup
|
||
|
|
v2 memory controller) of the override feature when unused
|
||
|
|
(around ~3MB per kprobe). (#2692) by @mtardy
|
||
|
|
- Fix a bug related to the matchBinaries Prefix operator by
|
||
|
|
increasing the buffer size used by our dentry walk. Now the
|
||
|
|
matchBinaries Prefix operator can correctly trigger a match
|
||
|
|
on any path above 255 chars. (#2764) by @mtardy
|
||
|
|
- Fix a bug where the tetra getevents command would timeout
|
||
|
|
even if the connection was successful. (#2765) by @mtardy
|
||
|
|
- Fix missing cases in the compact encoder for tetra. (#2819)
|
||
|
|
by @willfindlay
|
||
|
|
- add support for pod association via cgroup id (#2776) by
|
||
|
|
@kkourt
|
||
|
|
- Allow disabling gRPC either by selecting 'enabled:false' in
|
||
|
|
the helm chart or by passing an empty address to the agent
|
||
|
|
(#2826) by @kkourt
|
||
|
|
- Fix tetragon_process_cache_size metric (#2827) by @lambdanis
|
||
|
|
|
||
|
|
-------------------------------------------------------------------
|
||
|
|
Mon Jul 29 18:36:26 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
|
||
|
|
|
||
|
|
- exclude architectures that fail to build due to
|
||
|
|
'pkg/syscallinfo/syscallinfo.go:39:34: undefined: syscallNames'
|
||
|
|
errors
|
||
|
|
|
||
|
|
-------------------------------------------------------------------
|
||
|
|
Wed Jun 12 16:18:43 UTC 2024 - opensuse_buildservice@ojkastl.de
|
||
|
|
|
||
|
|
- Update to version 1.1.2:
|
||
|
|
* Bugfixes:
|
||
|
|
- Don't create PodInfo if the pod is being deleted
|
||
|
|
- [v1.1] backport: bpf: use CORE for execve hook
|
||
|
|
- enforcer: fix issue when using multiple calls with fmod_ret
|
||
|
|
* Minor Changes:
|
||
|
|
- backports:1.1:tests: fix trace module testing
|
||
|
|
- backports:1.1: uid username resolution support
|
||
|
|
- helm: Add tetragon.livenessProbe value
|
||
|
|
- backport:v1.1: btf: take first entry on multiple function
|
||
|
|
matches
|
||
|
|
* Misc Changes:
|
||
|
|
- Prepare for v1.1.0 release
|
||
|
|
- Use gRPC-based liveness probe instead of tetra status.
|
||
|
|
- [v1.1] Introduce upgrade notes
|
||
|
|
- Prepare for v1.1.1 release
|
||
|
|
- [v1.1] Makefile: exclude api tags from version
|
||
|
|
- v1.1: misc updates relating to release process
|
||
|
|
- Prepare for v1.1.2 release
|
||
|
|
|
||
|
|
-------------------------------------------------------------------
|
||
|
|
Tue Apr 30 18:11:26 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
|
||
|
|
|
||
|
|
- new package tetragon: eBPF-based Security Observability and
|
||
|
|
Runtime Enforcement
|