Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Created by
brew bump
Created with
brew bump-formula-pr
.release notes
tetragonOperator.replicas=2
andtetragonOperator.failoverLease.enabled=true
.tetragonOperator.strategy
now sets a defaultrollingUpdate
strategy (maxSurge=1
,maxUnavailable=0
) to reduce downtime during an upgrade.podAntiAffinity
(preferredDuringSchedulingIgnoredDuringExecution
) to improve the Pod distribution (if possible), without enforcing it to avoid being stuck during upgrades on single or two node clusters.TracingPolicy (k8s CRD)
FollowFD
,UnfollowFD
, andCopyFD
actions are being deprecarted in this (1.4) and arescheduled for removal in the next (1.5)
Metrics
tetragon_map_errors_total
metric is replaced bymap_errors_update_total
andmap_errors_delete_total
.Changes
total: 298 commits, prs: 110 pr commits: 298
Major Changes
Bugfixes
Minor Changes
tetra: Fix tetra debug progs fail (tetra: Fix tetra debug progs fail cilium/tetragon#3235) by @olsajiri
tetragon: factor generic maps (tetragon: factor generic maps cilium/tetragon#3257) by @olsajiri
fix: nspid assign is not correct (fix: nspid assign is not correct cilium/tetragon#3267) by @arthur-zhang
bug: fix assign vfsmnt correctly (bug: fix assign vfsmnt correctly cilium/tetragon#3261) by @arthur-zhang
[bug] matchPIDs is using first pid only ([bug] matchPIDs is using first pid only cilium/tetragon#3255) by @arthur-zhang
tetragon: Fix override program pin for fmodret and kprobe multi (tetragon: Fix override program pin for fmodret and kprobe multi cilium/tetragon#3298) by @olsajiri
tetra: Add CEL filter to the CLI (tetra: Add CEL filter to the CLI cilium/tetragon#3124) by @knrc
tetragon: update vmlinux.h (tetragon: update vmlinux.h cilium/tetragon#3308) by @olsajiri
doc: note that kernels >= 6.11 require new cgroupv1 configs (doc: note that kernels >= 6.11 require new cgroupv1 configs cilium/tetragon#3284) by @tixxdz
tetra: Set default for retries to 1 (tetra: Set default for retries to 1 cilium/tetragon#3335) by @olsajiri
tetragon: assorted fixes (tetragon: assorted fixes cilium/tetragon#3323) by @olsajiri
tetragon: Add map_errors_update_total/map_errors_delete_total metrics (tetragon: Add map_errors_update_total/map_errors_delete_total metrics cilium/tetragon#3346) by @olsajiri
Add support for struct socket and struct sockaddr. (Add socket and sockaddr types cilium/tetragon#3358) by @kevsecurity
tetragon: map changes (tetragon: map changes cilium/tetragon#3328) by @olsajiri
tetragon: Add GetExecveEntries function (tetragon: Add GetExecveEntries function cilium/tetragon#3390) by @olsajiri
helm: add cri.enabled, cri.socketHostPath, and cgidmap.enables variables (helm: add support for cgidmap/cri cilium/tetragon#3382) by @kkourt
metrics: add metrics for cgidmap CRI resolution
cgroups: relax deployment detection logic (cgroups: relax deployment detection logic cilium/tetragon#3400) by @tixxdz
tetragon: Move extract code into separate function (tetragon: Move extract code into separate function cilium/tetragon#3416) by @olsajiri
tetragon: assorted fixes (tetragon: assorted fixes cilium/tetragon#3394) by @olsajiri
tetragon: harden actions a bit (tetragon: harden actions a bit cilium/tetragon#3279) by @olsajiri
generic sensor: add a dentry type (add dentry type cilium/tetragon#3423) by @olsajiri
gRPC: the deprecated sensors API is now removed. (sensor cleanups cilium/tetragon#3437) by @kkourt
helm: Removed default toleration (
operator: Exists
) for the operator Deployment (helm: Removed default tolerations for the operator cilium/tetragon#3442) by @PhilipSchmidRemove kernel version check for LSM Resolve flag (Remove kernel version check for LSM Resolve flag cilium/tetragon#3415) by @ScriptSathi
tetragon: Pass argument pointer to extract_arg (tetragon: Pass argument pointer to extract_arg cilium/tetragon#3441) by @olsajiri
dentry fixes (dentry fixes cilium/tetragon#3450) by @olsajiri
rthooks: Fix rootDir in createRuntime hook (rthooks: Fix rootDir in createRuntime hook cilium/tetragon#3466) by @tpapagian
tetra: increase connection timeout to 30s (tetra: increase connection timeout to 30s cilium/tetragon#3468) by @kkourt
renovate: add v1.2 for golang 1.23 (renovate: add v1.2 for golang 1.23 cilium/tetragon#3472) by @olsajiri
reshufle some packages (reshufle some packages cilium/tetragon#3481) by @olsajiri
assorted path related fixes (assorted path related fixes cilium/tetragon#3494) by @olsajiri
tetragon: Add extra bounds check to extract_arg (tetragon: Add extra bounds check to extract_arg cilium/tetragon#3503) by @olsajiri
helm: Allow extending clusterroles and operator configmap (helm: Allow extending clusterroles and operator configmap cilium/tetragon#3482) by @lambdanis
tracingpolicy: FollowFD, UnfollowFD, and CopyFD actions are deprecarted (deprecate followFD and friends cilium/tetragon#3491) by @kkourt
pkg/bpf: mount securityfs to check lsm bpf (pkg/bpf: mount securityfs to check lsm bpf cilium/tetragon#3512) by @anfedotoff
tetragon: assorted heap fixes (tetragon: assorted heap fixes cilium/tetragon#3515) by @olsajiri
operator: Support running multiple operator replicas simultaneously (Added support to run multiple Tetragon operator replicas simultaneously cilium/tetragon#3443) by @PhilipSchmid
CI Changes
Documentation changes
Dependency updates
Misc Changes