diff --git a/_service b/_service index c0f3798..f7b9924 100644 --- a/_service +++ b/_service @@ -3,8 +3,8 @@ https://github.com/cilium/tetragon git .git - v1.2.1 - v1.2.1 + v1.3.0 + v1.3.0 @PARENT_TAG@ v(.*) enable diff --git a/_servicedata b/_servicedata index 7531b73..ac3bed2 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/cilium/tetragon - 4b33fd75b08b467a1cc2c61d2fe8eb69bf0b001e \ No newline at end of file + 4a6643e71e2357324ab8ab73ecb7286d73e96ef8 \ No newline at end of file diff --git a/tetragon-1.2.1.obscpio b/tetragon-1.2.1.obscpio deleted file mode 100644 index 67c99a6..0000000 --- a/tetragon-1.2.1.obscpio +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:b4ed31b10ae0019b2fd4cf1e67ce2a1d9439691dedc6b05a9b7d41c11a347a89 -size 184324110 diff --git a/tetragon-1.3.0.obscpio b/tetragon-1.3.0.obscpio new file mode 100644 index 0000000..3ae1bd5 --- /dev/null +++ b/tetragon-1.3.0.obscpio @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8b52fe495a79de564a52fc89e5589747d69e20aef7c7f37a32807c105487e99f +size 178766862 diff --git a/tetragon.changes b/tetragon.changes index 61369fb..45d70f5 100644 --- a/tetragon.changes +++ b/tetragon.changes @@ -1,3 +1,62 @@ +------------------------------------------------------------------- +Fri Dec 13 10:00:07 UTC 2024 - opensuse_buildservice@ojkastl.de + +- Update to version 1.3.0: + Large changelog, please find the full changelog here: + https://github.com/cilium/tetragon/releases + * Upgrade notes + Depending on your setup, changes listed here might require a + manual intervention. + - Behavior of export-file-perm flag (and corresponding Helm + value tetragon.exportFilePerm) changed. In case the export + file exists, but has different permissions than specified in + the option, Tetragon will change the file permissions on the + next log rotation. In older versions, log rotation preserved + permissions of the existing file. Before upgrading check if + permissions of the existing export file match the option (600 + by default), and set the agent flag or Helm value to the + desired value if needed. + - Events (protobuf API) + New events for syscall64 type + Previous versions of Tetragon did not distinguish between + different ABIs when using the syscall64 type because the + output was just a size_arg with the id. When executing the + getcpu syscall, for example, the JSON for 64- and 32-bits + would be: + "args":[{"size_arg":"309"}] + "args":[{"size_arg":"318"}] + Note that id 318 for x86_64 is a different syscall: getrandom + so we cannot distinguish between a getrandom syscall on + x86_64 and a getcpu call on 32-bit (i386). To address this + issue, the output of syscall64 was changed to a SyscallId + object that also includes the ABI. So the JSON for 64- and + 32-bits getcpu now is: + "args":[{"syscall_id":{"id":309,"abi":"x64"}}] + "args":[{"syscall_id":{"id":318,"abi":"i386"}}] + Users that want to maintain the old behavior can use the + --enable-compatibility-syscall64-size-type flag for this + version. + The flag will be removed in v1.4. + - Metrics + tetragon_ratelimit_dropped_total metric is renamed to + tetragon_export_ratelimit_events_dropped_total + * Major Changes: + - IMA hashes in LSM events (#2818) by @anfedotoff + - tetragon: add support for associating pod information when + nested cgroups are used (#3170) by @kkourt + * - Bugfixes: + - Fix clone event eventcache retry handler when missing pod + info. (#2899) by @tpapagian + - pkg/sensors: fix memory use of unloaded sensors (#3021) by + @mtardy + - tetragon: fix the process exit signal when core dumped + (#3039) by @justin0u0 + - tetragon: improve how we handle cgroupv1 and cgroupv2 (#3053) + by @tixxdz + - [metrics] Fix overhead_program metrics for return probes + (#3074) by @tpapagian + - exec: fix tracking of matchBinary children (#3186) by @kkourt + ------------------------------------------------------------------- Wed Nov 27 11:11:43 UTC 2024 - opensuse_buildservice@ojkastl.de diff --git a/tetragon.obsinfo b/tetragon.obsinfo index 138569c..76d3654 100644 --- a/tetragon.obsinfo +++ b/tetragon.obsinfo @@ -1,4 +1,4 @@ name: tetragon -version: 1.2.1 -mtime: 1732701307 -commit: 4b33fd75b08b467a1cc2c61d2fe8eb69bf0b001e +version: 1.3.0 +mtime: 1734081089 +commit: 4a6643e71e2357324ab8ab73ecb7286d73e96ef8 diff --git a/tetragon.spec b/tetragon.spec index 4bacd58..b73c70a 100644 --- a/tetragon.spec +++ b/tetragon.spec @@ -20,7 +20,7 @@ %define cli_package_name tetragon-cli Name: tetragon -Version: 1.2.1 +Version: 1.3.0 Release: 0 Summary: eBPF-based Security Observability and Runtime Enforcement License: Apache-2.0 diff --git a/vendor.tar.gz b/vendor.tar.gz index d7a6961..7e4f2f3 100644 --- a/vendor.tar.gz +++ b/vendor.tar.gz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:f9d32ef2313d1f5da74ad16c10607d13c2d3a247528c3d9377198479d8cbe233 -size 13805523 +oid sha256:84f2613ed4a842eb2a9dca9bedc0984aff795e75c95652a01023e94f9b4a0ce8 +size 12643824