Alon Girmonsky
9775a70722
disable syscall by default as it is a significant ( #1742 )
...
resource consuming
2025-04-10 09:43:42 -07:00
Alon Girmonsky
ac5bf9b276
Make changes in default values ( #1735 )
...
* Disable Intercom support by default.
Support can be enabled using a helm flag.
* updated the license notification
as a result of a successful helm installation.
* GenAI assistant enabled by default
2025-04-07 08:47:37 -07:00
Serhii Ponomarenko
25ecc18d39
🔨 Add default value for Dex node selector terms ( #1740 )
2025-04-07 08:23:04 -07:00
Serhii Ponomarenko
59ef0f8f80
🔨 Add tap.dashboard.completeStreamingEnabled flag ( #1733 )
2025-04-01 13:08:46 -07:00
Volodymyr Stoiko
e47a665d68
Update structs and docs ( #1710 )
...
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2025-02-21 09:07:17 -08:00
Serhii Ponomarenko
f656acea64
🔧 Add aiAssistantEnabled helm value ( #1717 )
...
* 🔧 Add `aiAssistantEnabled` helm value
* 🐛 Add quotes to `AI_ASSISTANT_ENABLED` config val
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2025-02-21 08:53:27 -08:00
Serhii Ponomarenko
631e5f2d24
🔨 Add demoModeEnabled helm value ( #1714 )
...
* 🔨 Add `demoModeEnabled` helm value
* 🐛 Fix `demoModeEnabled` ternary expressions
* 🦺 Check `demoModeEnabled` existence
2025-02-20 17:25:58 -08:00
Volodymyr Stoiko
3d4606d439
Worker component security context refactoring ( #1707 )
...
* Add new security context config
* Fine-grained template for securityContext
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2025-02-03 13:38:41 -08:00
M. Mert Yildiran
f2e60cdee1
Add PortMapping to TapConfig for port number based dissector prioritization ( #1700 )
2025-01-25 12:10:53 -08:00
Alon Girmonsky
0e3f137a69
add diameter protocol support ( #1696 )
2025-01-22 15:57:46 -08:00
Volodymyr Stoiko
ef17eb9fbe
Make node selector component specific ( #1694 )
...
* Make node selector component specific
* Update templates
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2025-01-22 12:50:17 -08:00
Serhii Ponomarenko
0d5bbd53aa
🔧 Add helm variable to disable live config-map user actions ( #1689 )
...
* 🔧 Add helm variable to disable live config-map user actions
* 🐛 Fix ternary for `PRESET_FILTERS_CHANGING_ENABLED` config
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2025-01-18 13:15:46 +02:00
Alon Girmonsky
1d572e6bff
support new radius protocol ( #1682 )
2025-01-08 13:05:57 -08:00
Serhii Ponomarenko
5242d9af07
🛂 Add save/activate/delete role scripting permissions ( #1675 )
...
* 🛂 Add save/activate/delete role scripting permissions
* 🔧 Add scripting permissions to tap-config
* 🔨 Re-generate helm values & `complete.yaml`
* 📝 Add scripting permissions to helm chart docs
* 🏷️ Make scripting permissions `true` by default
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-12-25 12:33:16 -08:00
Alon Girmonsky
4cabf13788
from debug to logLevel ( #1668 )
...
* updated helm values
* removed the tap.debug field
from the tapConfig struct
* Revert "removed the tap.debug field"
This reverts commit f911c02f0d
2024-12-15 17:27:05 -08:00
Alon Girmonsky
9b7e2e7144
change the tlx dissector name to tlsx ( #1648 )
...
as it can be confused with https
tlsx is a dissector for TLS handshakes and not
HTTPS dissector.
2024-12-08 20:36:58 -08:00
Alon Girmonsky
80fa18cbba
Added LDAP support ( #1647 )
2024-12-08 15:02:50 -08:00
Alon Girmonsky
dfbb321084
Default startup values change ( #1646 )
...
* updated the defaultFilter default values and docs.
* fixed a small err in the docs
2024-12-08 14:48:13 -08:00
Volodymyr Stoiko
80d23d62bd
Remove PF_RING references ( #1638 )
...
* Remove PF_RING references
* Update values
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-11-05 14:13:50 -08:00
Alon Girmonsky
22766c2983
remove tcp and udp dissectors by default
2024-10-21 13:03:53 -07:00
bogdanvbalan
783aa03b6a
Feat pcapsaver ( #1621 )
...
* Add cmd to copy pcaps from worker
* Update commands to merge pcaps
* Remove test img
* Remove usage of http endpoint in copy
* Unify commands
* Add copy flag
* Address review comments
* Update k8s config path processing
* Remove debug prints
* setting the pcapSrcDit to the name of the command
* Update values.yaml
* Remove the start,stop and copy flags
* Clean up the the code a bit
Changed the logic so it's either copy or start/stop.
Works well for a first version.
* Improved the logic
* Changed pcapdump enable flag to boolean
* Added helm value documentation
* minor default configuration changes
* Fix default val for enabled
* Final changes
Cleaned up the helm worker template
Improve the logic a bit
* Code cleanup
Changed instances of `enable` to `enabled` for purpose of consistency
Removed unused helm environment variables
* Enable merging all node files to a single file.
Before the outcome had been a merged file per node.
Now the outcome is a single merged file for all nodes.
* Committed for testing purpose
* Reduced the initial disk foot print to 10MB per node
---------
Co-authored-by: bogdan.balan1 <bogdanvalentin.balan@1nce.com>
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-10-07 08:39:52 -07:00
Alon Girmonsky
68da6a819a
emit tls item ( #1625 )
2024-10-03 16:53:30 -07:00
M. Mert Yildiran
9144d98d04
Add udp to list of enabled dissectors ( #1616 )
...
* Add `udp` to list of enabled dissectors
* ignore udp as part of a global filter
* have globalFilter ignore udp and icmp
* Have globalFilter ignore udp and icmp
* Update README.md
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-09-25 11:29:21 -07:00
Serhii Ponomarenko
32caeb37e4
🔨 Create dissectorsUiEnabled flag ( #1599 )
...
* 🔨 Create `dissectorsUiEnabled` flag
* 🔨 Rename `dissectorsUiEnabled` flag
* 🔨 Add `DISSECTORS_UPDATING_ENABLED` config
* 🔨 Set `dissectorsUpdatingEnabled: true` by default
2024-08-29 09:36:58 -07:00
Alon Girmonsky
84f2ec944d
tcp dissector enabled by default ( #1591 )
...
* tcp dissector enabled by default
* changing the readme
In support of having the `tcp` dissector enabled by default.
* Update values.yaml
* Update complete.yaml
* updated the defaultFilter default value
1. Start with some level of "noise reduction" (`tcp` and `dns`).
2. Provide a hint how to use a display filter to filter out protocol aliases.
* Update values.yaml
filter out DNS and TCP
* Update complete.yaml
Filter out DNS and TCP
* Update README.md
Filter out TCP and DNS by default
2024-08-22 17:14:38 -07:00
Alon Girmonsky
be96d4e099
Disable TCP dissector by default ( #1583 )
...
TCP dissector can be added as a helm value. This dissector shouldn't be used in production clusters, as enabling this dissector will consume enormous amounts of CPU and memory.
TODO: Have the TCP dissector adhere to pod targeting rules.
2024-08-16 11:32:29 -07:00
Alon Girmonsky
32136520d8
Slow start ( #1576 )
...
* Start `ExcludedNamespaces` empty by default
* Started Kubeshark with tap.stopped true by default
* Revert "Start `ExcludedNamespaces` empty by default"
This reverts commit 7de515dd3a
2024-08-06 15:39:42 -07:00
M. Mert Yildiran
5089e9ccb8
Add EXCLUDED_NAMESPACES to ConfigMap ( #1571 )
...
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-08-02 08:25:32 -07:00
M. Mert Yildiran
c837874bbe
Add ENABLED_DISSECTORS to ConfigMap ( #1570 )
...
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-08-02 08:17:05 -07:00
Alon Girmonsky
df0aea1462
stash ( #1575 )
2024-07-31 15:14:36 -07:00
Alon Girmonsky
9c9cefc406
Change supportChatEnabled to be true by default.
2024-07-29 17:16:21 -07:00
Serhii Ponomarenko
be86ea8ecb
🔨 Support chat flag ( #1573 )
...
* 🔨 Add `supportChatEnabled` helm value
* 🔨 Add `REACT_APP_SUPPORT_CHAT_ENABLED` env to `front`
2024-07-25 13:09:44 -07:00
Serhii Ponomarenko
7168b5c515
🔨 Add canStopTrafficCapturing SAML authz action ( #1565 )
...
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-07-18 08:18:03 -07:00
M. Mert Yildiran
c88b3b0ba7
Remove "Replay" function functionality ( #1563 )
2024-07-16 13:13:08 -07:00
Serhii Ponomarenko
5a4901f7bd
✨ License via authentication ( #1526 )
...
* 🔨 Add `cloudLicenseEnabled` helm value
* 🔨 Add `CLOUD_LICENSE_ENABLED` key to `ConfigMap`
* 🔨 Add `REACT_APP_CLOUD_LICENSE_ENABLED` `front` env
* 🎨 Reformat `ConfigStruct`
* 🔧 Set `cloudLicenseEnabled: true` by default
* 🔧 Override auth enabled/type if `cloudLicenseEnabled: true`
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-04-21 15:04:08 -07:00
Serhii Ponomarenko
247498492a
✨ Set custom timezone ( #1517 )
...
* 🔨 Add timezone config
* 🔨 Update `complete.yaml`
* 📝 Document `timezone` config
* 📝 Update `timezone` config docs
* 📝 Update `timezone` config docs
* 🔥 Remove unused `TIMEZONE` field from `ConfigMap`
* 🦺 Handle empty `tap.timezone` case
* 🔨 Move `timezone` from `.Values.tap` to `.Values`
* 🔨 Add `timezone` field to helm values
* 🔨 Update `complete.yaml`
* 📝 Update `timezone` config docs
* 🔨 Add `TIMEZONE` field to `ConfigMap`
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-03-19 12:06:50 +01:00
iluxa
9889787833
update comment for IPC_LOCK ( #1507 )
2024-02-27 11:52:07 -08:00
M. Mert Yildiran
8fe0544175
🔨 Remove CHECKPOINT_RESTORE capability from defaults
2024-02-26 21:40:14 +03:00
iluxa
26e23dc94f
add capability for tracer ( #1496 )
...
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-02-06 13:38:21 -08:00
Serhii Ponomarenko
6785f024e4
✨ Feature-based SAML authorization ( #49 ) ( #1495 )
...
* 🔨 Add `showAdminConsoleLink` to helm values
* 🔨 Add `ShowAdminConsoleLink` to `TapConfig`
* 🔨 Regenerate `complete.yaml` manifest
* 📝 Update helm-chart `README.md`
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-02-06 13:36:32 -08:00
Serhii Ponomarenko
bfa3efd23a
✨ SAML authorization ( #1487 )
...
* 🔨 Add `AUTH_SAML_ROLE_ATTRIBUTE` field to `ConfigMap`
* 📝 Document `tap.auth.saml.roleAttribute/roles` values
* 🔧 Re-generate `complete.yaml`
* 🔥 Remove `default` tag from `SamlConfig.RoleAttribute`
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-01-24 16:05:37 -08:00
M. Mert Yildiran
f9e0c36d5f
🔨 Add AUTH_SAML_ROLES field to ConfigMap
2024-01-23 23:22:06 +03:00
Volodymyr Stoiko
aaeb3ca1eb
Load pf-ring kernel module in init container ( #1476 )
...
* Load kernel module in init container
* Update docs
* Update formatting
* Add pre-stop hook to unload pf_ring module
* Enable hook only on kernel module enabled
* fix template
* Use sidecontainer to unload pf_ring
* Add requirements for tracer into structs
* fix values
* fix typo
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-01-12 15:49:39 -08:00
M. Mert Yildiran
36767eda27
🔨 Add KernelModuleConfig struct to TapConfig
2023-12-28 22:09:01 +03:00
M. Mert Yildiran
c1fc4447ef
🔨 Move the list of Linux capabilities into values.yaml
2023-12-27 13:14:53 +03:00
M. Mert Yildiran
3b5cd6c77b
🔨 Make the config field tags camelCase
2023-10-25 18:00:32 +03:00
M. Mert Yildiran
54c5da2fcb
⚡ Add a default NodeSelectorTerm that's matching Linux OS
2023-08-12 03:28:33 +03:00
M. Mert Yildiran
0ef3e2d018
⚡ Fix the issues related to release namespace
2023-07-03 16:33:50 +03:00
M. Mert Yildiran
77a14410f4
Revert " ⏪ Rename releasenamespace field to selfnamespace"
...
This reverts commit d8ee89225c
2023-07-03 15:11:21 +03:00
M. Mert Yildiran
d8ee89225c
⏪ Rename releasenamespace field to selfnamespace
2023-07-03 11:54:06 +03:00
