github/kubeshark
1
0
Fork 0
mirror of https://github.com/kubeshark/kubeshark.git synced 2026-03-18 10:32:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,205 Commits 9 Branches 961 Tags
0070aaf3eb53bf64df1e03690ef6059ccba41e46
Commit Graph

221 Commits

Author SHA1 Message Date
tiptophelmet
0070aaf3eb 🔨 Replace liveConfigMapChangesDisabled with demoModeEnabled flag 2026-03-14 01:16:45 +02:00
Serhii Ponomarenko
23c86be773 🛂 Control L4 map visibility (helm value) (#1866) 
* 🔨 Add `tap.dashboard.clusterWideMapEnabled` helm value

* 🔨 Add cluster-wide-map-enabled `front` env

* 🔨 Add fallback value for `front` env
 2026-03-11 15:36:20 -07:00
Volodymyr Stoiko
33f5310e8e Add gcs cloudstorage configuration docs (#1862) 
* add gcs docs

* add explicit gcs keys

* gcs helm tests

* add iam permissions docs for gcs

* Update gcs docs with exact setup steps for workload identity
 2026-03-09 07:48:17 -07:00
Volodymyr Stoiko
73f8e3585d Cloud storage explicit config (#1858) 
* Add explicit configs

* Add helm unit tests

* fixpipeline

* latest

---------

Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2026-03-06 08:27:08 -08:00
Volodymyr Stoiko
d266408377 Add snapshots cloud storage (#1852) 
* add testing values for helm chart

* Add readme updates for cloud storage

* fixes

* cloud-storage-docs

---------

Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2026-03-04 08:50:45 -08:00
Alon Girmonsky
e3283327f9 Add --release-helmChartPath CLI flag for local Helm chart support (#1851) 
Allow users to specify a local Helm chart folder via CLI flag or config,
which takes precedence over the KUBESHARK_HELM_CHART_PATH env variable and
the remote Helm repo. Also update nginx proxy config to disable buffering
for better streaming and large snapshot support.
 2026-03-04 08:29:04 -08:00
Volodymyr Stoiko
95c18b57a4 Use dissection image tag from worker (#1850) 2026-02-25 11:41:50 -08:00
Ilya Gavrilov
1ad61798f6 Set tcp and udp flows timeouts. Default is 20 minutes (#1847) 
* Set tcp and udp flows timeouts. Default is 10 minutes

* fix make test
 2026-02-17 16:50:13 -08:00
Volodymyr Stoiko
fecf290a25 Rename generic capture to l7 dissection specific config (#1841) 
* Rename generic capture to l7 dissection specific config

* upd

* upd flags

* Create `REACT_APP_DISSECTION_ENABLED` env to set initial dissection state

---------

Co-authored-by: Serhii Ponomarenko <116438358+tiptophelmet@users.noreply.github.com>
Co-authored-by: tiptophelmet <serhii.ponomarenko.jobs@gmail.com>
 2026-02-11 11:27:37 -08:00
Serhii Ponomarenko
633a17a0e0 🔧 Add REACT_APP_SCRIPTING_HIDDEN front env (#1845) 
* 🔧 Add `scripting.enabled` helm value

* 🔧 Add `REACT_APP_SCRIPTING_HIDDEN` front env

* 🔧 Change `REACT_APP_SCRIPTING_HIDDEN` front env
 2026-02-09 13:39:33 -08:00
Volodymyr Stoiko
0f1c9c52ea Add captureSelf flag to enable/disable kubeshark traffic capture (#1829) 
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2026-02-04 08:49:01 -08:00
Volodymyr Stoiko
1b027153e3 Increase dissector image limit (#1823) 
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2026-01-21 19:52:45 -08:00
Volodymyr Stoiko
77d16e73e8 Migrate kubehq.com to kubeshark.com domain (#1824) 
* Update labels

* Update kubeshark API url

* Update other domains

* comments

---------

Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2026-01-21 19:23:50 -08:00
Volodymyr Stoiko
1fd9dffc60 Add delayed dissection controller configuration (#1818) 
* Allow managing jobs in kubeshark namespaces

* Extend with dissector image

* make dissection job resources configurable
 2026-01-06 11:56:53 -08:00
Alon Girmonsky
b7190162ec In preparation for v200 (#1815) 
* In preparation for v200

* updated README

* Enable raw capture

* changed 0.0.0.0 to 127.0.0.1
as 0.0.0.0 is insecure address

* added tip: kubeshark proxy

* added new TCP/UDP connection dissectors
Set API2 as the default

* increased storageLimit per worker.

* Updated makefile

* updated the complementary license
to the end of Jan 2026.

* readme touch ups

* Updated snapshot image

* updated license
removed dashboard subproject
 2025-12-16 11:44:02 -08:00
Alon Girmonsky
a12a5aec19 🔖 Bump the Helm chart version to 52.10.0 2025-11-25 11:40:17 -08:00
Volodymyr Stoiko
25832ce596 Make host-network in worker daemonset configurable (#1803) 
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-11-24 16:43:48 -08:00
Volodymyr Stoiko
a7b9e09f2b Add volume for snapshots in hub (#1801) 
* Add hub snapshots volume

* Add snapshot limit into env

* fix
 2025-11-17 10:45:41 -08:00
Ilya Gavrilov
773fefae21 Set default dbMaxSize to 500Mi (#1796) 2025-11-06 11:41:35 -08:00
Alon Girmonsky
7dcacf14f2 Removed the !error && !dns and disabled support chat option by default (#1792) 
* removed the !error && !dns

* removed the default "!dns && !error"

* changed support option to false
 2025-10-03 16:26:50 +02:00
Volodymyr Stoiko
e55b62491a Add raw capture config parameters (#1789) 
* Add raw capture config parameters

* upd

* upd
 2025-09-30 08:26:42 -07:00
Volodymyr Stoiko
f5167cbb2a Pass db storage size and ration to calculate for badger db (#1788) 
* Pass db storage size and ration to calculate for badger db

* Use badger max db size option
 2025-09-25 08:17:21 -07:00
Serhii Ponomarenko
349d8b07df 🔨 Add tap.dashboard.streamingType helm value (#1783) 
* 🔨 Add `tap.dashboard.streamingType` helm value

* 🔨 Add `streamingType` to tap config

* 🔨 Adjust `REACT_APP_STREAMING_TYPE` front env value

* 🔨 Use default empty string for `streamingType` value
 2025-09-02 10:43:38 -07:00
Serhii Ponomarenko
88f43b94d9 🔨 Add tap.ingress.path helm value (#1782) 
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-08-26 13:01:55 -07:00
Volodymyr Stoiko
56b936b8b8 Add stopAfter option to disable capture when inactive (#1778) 
* Add stopAfter option to disable capture when inactive

* Use 5m dorman

* Add capture stop after flag in hub
 2025-08-12 11:23:16 -07:00
Volodymyr Stoiko
eee3030410 Add priority class configuration for Kubeshark components (#1775) 
* Add priority class into templates

* upd readme

* upd

---------

Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-07-28 12:18:45 -07:00
Alon Girmonsky
398a4b9efc disable watchdog by default (#1759) 2025-06-02 13:04:21 -07:00
Volodymyr Stoiko
ed0fb34888 Add secret names to inject env variables from (#1756) 
* Add secrets for inject into hub deployment

* Update notes

* upd

---------

Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-05-29 18:24:46 -07:00
Alon Girmonsky
7dcd9eee95 Incerased storage limit from 500Mi to 5Gi (#1755) 2025-05-12 10:34:58 -07:00
Volodymyr Stoiko
7618795fdf Add optional gitops mode (#1748) 2025-04-16 10:18:53 -07:00
Volodymyr Stoiko
1218386638 Decrease initial delay seconds (#1736) 
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-04-08 13:33:10 -07:00
Volodymyr Stoiko
59026d4ad4 Add pvc volumeMode (#1739) 
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-04-07 08:25:27 -07:00
Serhii Ponomarenko
a6eabbbdee 🔨 Add tap.auth.dexOidc.bypassSslCaCheck flag (#1737) 
* 🔨 Add `tap.auth.dexOidc.bypassSslCaCheck` flag

* 📝 Update docs for Dex SSL CA bypass

* 🔨 Bring back deleted Dex node-selector-terms
 2025-04-04 10:07:02 -07:00
Serhii Ponomarenko
59ef0f8f80 🔨 Add tap.dashboard.completeStreamingEnabled flag (#1733) 2025-04-01 13:08:46 -07:00
Serhii Ponomarenko
453d27af43 🔨 Create tap.routing.front.basePath flag (#1726) 
* 🔨 Add `tap.routing.front.basePath` helm value

* 🔨 Use `tap.routing.front.basePath` to adjust nginx blocks

* 🔨 Set `front` base path to empty string

* 📝 Update `front` base path docs

* 📝 Add `front` base path example

* 📝 Add base-path to Kubeshark URL in instructions

---------

Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-03-24 14:23:41 -07:00
Volodymyr Stoiko
0386e57906 Add watchdog option (#1723) 
* add watchdog

* Enable watchdog on sniffer
 2025-03-24 11:02:57 -07:00
Volodymyr Stoiko
e47a665d68 Update structs and docs (#1710) 
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-02-21 09:07:17 -08:00
Alon Girmonsky
95d6655af6 finished templating tap.mountBpf option. (#1711) 2025-02-12 12:28:52 -08:00
Volodymyr Stoiko
3d4606d439 Worker component security context refactoring (#1707) 
* Add new security context config

* Fine-grained template for securityContext

---------

Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-02-03 13:38:41 -08:00
bogdanvbalan
8f6ef686de Refactor and simplify pcapdump logic (#1701) 
* Fix spammy logs

* Fix err related to value missing from pcap config

* Test target dir only when provided

* Improve consistency of error handling

* Remove obsolete code

---------

Co-authored-by: bogdan.balan1 <bogdanvalentin.balan@1nce.com>
 2025-01-27 13:42:59 -08:00
M. Mert Yildiran
f2e60cdee1 Add PortMapping to TapConfig for port number based dissector prioritization (#1700) 2025-01-25 12:10:53 -08:00
Volodymyr Stoiko
ad10212ba5 Add dns config (#1698) 
* Add dnsconfig

* Update templates

* Add dns configuration values

* readme
 2025-01-24 09:14:08 -08:00
Volodymyr Stoiko
ef17eb9fbe Make node selector component specific (#1694) 
* Make node selector component specific

* Update templates

---------

Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-01-22 12:50:17 -08:00
bogdanvbalan
c92f509863 #528 Remove pcap src from configMap (#1693) 
* Remove pcap src from configMap

* change folder name

keep it simple and short

---------

Co-authored-by: bogdan.balan1 <bogdanvalentin.balan@1nce.com>
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-01-22 10:10:44 -08:00
Serhii Ponomarenko
0d5bbd53aa 🔧 Add helm variable to disable live config-map user actions (#1689) 
* 🔧 Add helm variable to disable live config-map user actions

* 🐛 Fix ternary for `PRESET_FILTERS_CHANGING_ENABLED` config

---------

Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-01-18 13:15:46 +02:00
bogdanvbalan
507099c1ec Fix err when using dest arg (#1688) 
Co-authored-by: bogdan.balan1 <bogdanvalentin.balan@1nce.com>
 2025-01-16 10:19:18 +02:00
Volodymyr Stoiko
f9c66df528 Update worker liveness/readiness config (#1684) 
* Increase worker init delay to 30s

* Update values

* fix

* Make probe values configurable

* upd

---------

Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2025-01-08 13:09:51 -08:00
Alon Girmonsky
773ad78ac7 extended the https macro to include http2 
in addition to http
 2025-01-03 10:30:22 -08:00
Alon Girmonsky
bbcaf74fa7 added https as a default macro (#1680) 
* added https as a default macro

* small syntax fix
 2025-01-03 09:54:50 -08:00
M. Mert Yildiran
639f1deb51 Add CUSTOM_MACROS to ConfigMap (#1674) 
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
 2024-12-25 16:45:03 -08:00