Accepting request 1230819 from server:monitoring

OBS-URL: https://build.opensuse.org/request/show/1230819
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tetragon?expand=0&rev=5

_service

@@ -3,8 +3,8 @@
     <param name="url">https://github.com/cilium/tetragon</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v1.2.1</param>
+    <param name="revision">v1.3.0</param>
-    <param name="match-tag">v1.2.1</param>
+    <param name="match-tag">v1.3.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/cilium/tetragon</param>
-              <param name="changesrevision">4b33fd75b08b467a1cc2c61d2fe8eb69bf0b001e</param></service></servicedata>
+              <param name="changesrevision">4a6643e71e2357324ab8ab73ecb7286d73e96ef8</param></service></servicedata>

tetragon-1.2.1.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b4ed31b10ae0019b2fd4cf1e67ce2a1d9439691dedc6b05a9b7d41c11a347a89
-size 184324110

tetragon-1.3.0.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8b52fe495a79de564a52fc89e5589747d69e20aef7c7f37a32807c105487e99f
+size 178766862

tetragon.changes

@@ -1,3 +1,62 @@
+-------------------------------------------------------------------
+Fri Dec 13 10:00:07 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 1.3.0:
+  Large changelog, please find the full changelog here:
+  https://github.com/cilium/tetragon/releases
+  * Upgrade notes
+    Depending on your setup, changes listed here might require a
+    manual intervention.
+    - Behavior of export-file-perm flag (and corresponding Helm
+      value tetragon.exportFilePerm) changed. In case the export
+      file exists, but has different permissions than specified in
+      the option, Tetragon will change the file permissions on the
+      next log rotation. In older versions, log rotation preserved
+      permissions of the existing file. Before upgrading check if
+      permissions of the existing export file match the option (600
+      by default), and set the agent flag or Helm value to the
+      desired value if needed.
+    - Events (protobuf API)
+      New events for syscall64 type
+      Previous versions of Tetragon did not distinguish between
+      different ABIs when using the syscall64 type because the
+      output was just a size_arg with the id. When executing the
+      getcpu syscall, for example, the JSON for 64- and 32-bits
+      would be:
+      "args":[{"size_arg":"309"}]
+      "args":[{"size_arg":"318"}]
+      Note that id 318 for x86_64 is a different syscall: getrandom
+      so we cannot distinguish between a getrandom syscall on
+      x86_64 and a getcpu call on 32-bit (i386). To address this
+      issue, the output of syscall64 was changed to a SyscallId
+      object that also includes the ABI. So the JSON for 64- and
+      32-bits getcpu now is:
+      "args":[{"syscall_id":{"id":309,"abi":"x64"}}]
+      "args":[{"syscall_id":{"id":318,"abi":"i386"}}]
+      Users that want to maintain the old behavior can use the
+      --enable-compatibility-syscall64-size-type flag for this
+      version.
+      The flag will be removed in v1.4.
+    - Metrics
+      tetragon_ratelimit_dropped_total metric is renamed to
+      tetragon_export_ratelimit_events_dropped_total
+  * Major Changes:
+    - IMA hashes in LSM events (#2818) by @anfedotoff
+    - tetragon: add support for associating pod information when
+      nested cgroups are used (#3170) by @kkourt
+  * - Bugfixes:
+    - Fix clone event eventcache retry handler when missing pod
+      info. (#2899) by @tpapagian
+    - pkg/sensors: fix memory use of unloaded sensors (#3021) by
+      @mtardy
+    - tetragon: fix the process exit signal when core dumped
+      (#3039) by @justin0u0
+    - tetragon: improve how we handle cgroupv1 and cgroupv2 (#3053)
+      by @tixxdz
+    - [metrics] Fix overhead_program metrics for return probes
+      (#3074) by @tpapagian
+    - exec: fix tracking of matchBinary children (#3186) by @kkourt
+
 -------------------------------------------------------------------
 Wed Nov 27 11:11:43 UTC 2024 - opensuse_buildservice@ojkastl.de
 

tetragon.obsinfo

@@ -1,4 +1,4 @@
 name: tetragon
-version: 1.2.1
+version: 1.3.0
-mtime: 1732701307
+mtime: 1734081089
-commit: 4b33fd75b08b467a1cc2c61d2fe8eb69bf0b001e
+commit: 4a6643e71e2357324ab8ab73ecb7286d73e96ef8

tetragon.spec

@@ -20,7 +20,7 @@
 %define cli_package_name tetragon-cli
 
 Name:           tetragon
-Version:        1.2.1
+Version:        1.3.0
 Release:        0
 Summary:        eBPF-based Security Observability and Runtime Enforcement
 License:        Apache-2.0

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:f9d32ef2313d1f5da74ad16c10607d13c2d3a247528c3d9377198479d8cbe233
+oid sha256:84f2613ed4a842eb2a9dca9bedc0984aff795e75c95652a01023e94f9b4a0ce8
-size 13805523
+size 12643824