🔖 Bump the Helm chart version to 52.9.0

* removed the !error && !dns

* removed the default "!dns && !error"

* changed support option to false

Makefile

@@ -189,7 +189,7 @@ release:
 	@make generate-helm-values && make generate-manifests
 	@git add -A . && git commit -m ":bookmark: Bump the Helm chart version to $(VERSION)" && git push
 	@git tag -d v$(VERSION); git tag v$(VERSION) && git push origin --tags
-	@cd helm-chart && rm -r ../../kubeshark.github.io/charts/chart/* && cp -r . ../../kubeshark.github.io/charts/chart/
+	@cd helm-chart && rm -rf ../../kubeshark.github.io/charts/chart && mkdir ../../kubeshark.github.io/charts/chart && cp -r . ../../kubeshark.github.io/charts/chart/
 	@cd ../../kubeshark.github.io/ && git add -A . && git commit -m ":sparkles: Update the Helm chart" && git push
 	@cd ../kubeshark
 

config/configStruct.go

@@ -149,6 +149,10 @@ func CreateDefaultConfig() ConfigStruct {
 			Dashboard: configStructs.DashboardConfig{
 				CompleteStreamingEnabled: true,
 			},
+			Capture: configStructs.CaptureConfig{
+				Stopped:   false,
+				StopAfter: "5m",
+			},
 		},
 	}
 }
@@ -174,7 +178,7 @@ type ConfigStruct struct {
 	CloudLicenseEnabled  bool                          `yaml:"cloudLicenseEnabled" json:"cloudLicenseEnabled" default:"true"`
 	AiAssistantEnabled   bool                          `yaml:"aiAssistantEnabled" json:"aiAssistantEnabled" default:"true"`
 	DemoModeEnabled      bool                          `yaml:"demoModeEnabled" json:"demoModeEnabled" default:"false"`
-	SupportChatEnabled   bool                          `yaml:"supportChatEnabled" json:"supportChatEnabled" default:"true"`
+	SupportChatEnabled   bool                          `yaml:"supportChatEnabled" json:"supportChatEnabled" default:"false"`
 	BetaEnabled          bool                          `yaml:"betaEnabled" json:"betaEnabled" default:"false"`
 	InternetConnectivity bool                          `yaml:"internetConnectivity" json:"internetConnectivity" default:"true"`
 	Scripting            configStructs.ScriptingConfig `yaml:"scripting" json:"scripting"`

config/configStructs/tapConfig.go

@@ -188,6 +188,7 @@ type IngressConfig struct {
 	Enabled     bool                    `yaml:"enabled" json:"enabled" default:"false"`
 	ClassName   string                  `yaml:"className" json:"className" default:""`
 	Host        string                  `yaml:"host" json:"host" default:"ks.svc.cluster.local"`
+	Path        string                  `yaml:"path" json:"path" default:"/"`
 	TLS         []networking.IngressTLS `yaml:"tls" json:"tls" default:"[]"`
 	Annotations map[string]string       `yaml:"annotations" json:"annotations" default:"{}"`
 }
@@ -197,7 +198,8 @@ type RoutingConfig struct {
 }
 
 type DashboardConfig struct {
-	CompleteStreamingEnabled bool `yaml:"completeStreamingEnabled" json:"completeStreamingEnabled" default:"true"`
+	StreamingType            string `yaml:"streamingType" json:"streamingType" default:""`
+	CompleteStreamingEnabled bool   `yaml:"completeStreamingEnabled" json:"completeStreamingEnabled" default:"true"`
 }
 
 type FrontRoutingConfig struct {
@@ -298,6 +300,18 @@ type SeLinuxOptionsConfig struct {
 	User  string `yaml:"user" json:"user"`
 }
 
+type RawCaptureConfig struct {
+	Enabled     bool   `yaml:"enabled" json:"enabled" default:"false"`
+	StorageSize string `yaml:"storageSize" json:"storageSize" default:"1Gi"`
+}
+
+type CaptureConfig struct {
+	Stopped   bool             `yaml:"stopped" json:"stopped" default:"false"`
+	StopAfter string           `yaml:"stopAfter" json:"stopAfter" default:"5m"`
+	Raw       RawCaptureConfig `yaml:"raw" json:"raw"`
+	DbMaxSize   string `yaml:"dbMaxSize" json:"dbMaxSize" default:""`
+}
+
 type TapConfig struct {
 	Docker                         DockerConfig            `yaml:"docker" json:"docker"`
 	Proxy                          ProxyConfig             `yaml:"proxy" json:"proxy"`
@@ -305,7 +319,7 @@ type TapConfig struct {
 	Namespaces                     []string                `yaml:"namespaces" json:"namespaces" default:"[]"`
 	ExcludedNamespaces             []string                `yaml:"excludedNamespaces" json:"excludedNamespaces" default:"[]"`
 	BpfOverride                    string                  `yaml:"bpfOverride" json:"bpfOverride" default:""`
-	Stopped                        bool                    `yaml:"stopped" json:"stopped" default:"false"`
+	Capture                        CaptureConfig           `yaml:"capture" json:"capture"`
 	Release                        ReleaseConfig           `yaml:"release" json:"release"`
 	PersistentStorage              bool                    `yaml:"persistentStorage" json:"persistentStorage" default:"false"`
 	PersistentStorageStatic        bool                    `yaml:"persistentStorageStatic" json:"persistentStorageStatic" default:"false"`
@@ -338,7 +352,7 @@ type TapConfig struct {
 	Watchdog                       WatchdogConfig          `yaml:"watchdog" json:"watchdog"`
 	Gitops                         GitopsConfig            `yaml:"gitops" json:"gitops"`
 	Sentry                         SentryConfig            `yaml:"sentry" json:"sentry"`
-	DefaultFilter                  string                  `yaml:"defaultFilter" json:"defaultFilter" default:"!dns and !error"`
+	DefaultFilter                  string                  `yaml:"defaultFilter" json:"defaultFilter" default:""`
 	LiveConfigMapChangesDisabled   bool                    `yaml:"liveConfigMapChangesDisabled" json:"liveConfigMapChangesDisabled" default:"false"`
 	GlobalFilter                   string                  `yaml:"globalFilter" json:"globalFilter" default:""`
 	EnabledDissectors              []string                `yaml:"enabledDissectors" json:"enabledDissectors"`

helm-chart/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: kubeshark
-version: "52.8.0"
+version: "52.9.0"
 description: The API Traffic Analyzer for Kubernetes
 home: https://kubeshark.co
 keywords:

helm-chart/README.md

@@ -112,7 +112,7 @@ Example for overriding image names:
 
 ```yaml
   docker:
-    overrideImage: 
+    overrideImage:
       worker: docker.io/kubeshark/worker:v52.3.87
       front:  docker.io/kubeshark/front:v52.3.87
       hub:    docker.io/kubeshark/hub:v52.3.87
@@ -138,7 +138,11 @@ Example for overriding image names:
 | `tap.namespaces`                          | Target pods in namespaces                     | `[]`                                                    |
 | `tap.excludedNamespaces`                  | Exclude pods in namespaces                    | `[]`                                                    |
 | `tap.bpfOverride`                         | When using AF_PACKET as a traffic capture backend, override any existing pod targeting rules and set explicit BPF expression (e.g. `net 0.0.0.0/0`).                                                          | `[]`                                                    |
-| `tap.stopped`                             | Set to `false` to have traffic processing start automatically. When set to `true`, traffic processing is stopped by default, resulting in almost no resource consumption (e.g. Kubeshark is dormant). This property can be dynamically control via the dashboard.      | `false`                                                                                                                                                |
+| `tap.capture.stopped`                             | Set to `false` to have traffic processing start automatically. When set to `true`, traffic processing is stopped by default, resulting in almost no resource consumption (e.g. Kubeshark is dormant). This property can be dynamically control via the dashboard.      | `false`                                                                                                                                                |
+| `tap.capture.stopAfter`                             | Set to a duration (e.g. `30s`) to have traffic processing stop after no websocket activity between worker and hub.     | `30s`                                                                                                                                                |
+| `tap.capture.raw.enabled`                           | Enable raw capture of packets and syscalls to disk for offline analysis      | `false`                                                                                                                                                |
+| `tap.capture.raw.storageSize`                       | Maximum storage size for raw capture files (supports K8s quantity format: `1Gi`, `500Mi`, etc.)     | `1Gi`                                                                                                                                                |
+| `tap.capture.dbMaxSize`                           | Maximum size for capture database (e.g., `4Gi`, `2000Mi`). When empty, automatically uses 80% of allocated storage (`tap.storageLimit`).     | `""`                                                                                                                                                |
 | `tap.release.repo`                        | URL of the Helm chart repository              | `https://helm.kubeshark.co`                             |
 | `tap.release.name`                        | Helm release name                             | `kubeshark`                                             |
 | `tap.release.namespace`                   | Helm release namespace                        | `default`                                               |
@@ -206,7 +210,7 @@ Example for overriding image names:
 | `tap.secrets`                             | List of secrets to be used as source for environment variables (e.g. `kubeshark-license`) | `[]`                                                    |
 | `tap.sentry.enabled`                      | Enable sending of error logs to Sentry          | `true` (only for qualified users)                                                  |
 | `tap.sentry.environment`                      | Sentry environment to label error logs with      | `production`                                                  |
-| `tap.defaultFilter`                       | Sets the default dashboard KFL filter (e.g. `http`). By default, this value is set to filter out noisy protocols such as DNS, UDP, ICMP and TCP. The user can easily change this, **temporarily**, in the Dashboard. For a permanent change, you should change this value in the `values.yaml` or `config.yaml` file.        | `"!dns and !error"`                                    |
+| `tap.defaultFilter`                       | Sets the default dashboard KFL filter (e.g. `http`). By default, this value is set to filter out noisy protocols such as DNS, UDP, ICMP and TCP. The user can easily change this, **temporarily**, in the Dashboard. For a permanent change, you should change this value in the `values.yaml` or `config.yaml` file.        | `""`                                    |
 | `tap.liveConfigMapChangesDisabled`        | If set to `true`, all user functionality (scripting, targeting settings, global & default KFL modification, traffic recording, traffic capturing on/off, protocol dissectors) involving dynamic ConfigMap changes from UI will be disabled     | `false`      |
 | `tap.globalFilter`                        | Prepends to any KFL filter and can be used to limit what is visible in the dashboard. For example, `redact("request.headers.Authorization")` will redact the appropriate field. Another example `!dns` will not show any DNS traffic.      | `""`                                        |
 | `tap.metrics.port`                  | Pod port used to expose Prometheus metrics          | `49100`                                                  |
@@ -303,7 +307,7 @@ tap:
 
 [**Click here to see full docs**](https://docs.kubeshark.co/en/saml#installing-with-oidc-enabled-dex-idp).
 
-Choose this option, if **you already have a running instance** of Dex in your cluster & 
+Choose this option, if **you already have a running instance** of Dex in your cluster &
 you want to set up Dex OIDC authentication for Kubeshark users.
 
 Kubeshark supports authentication using [Dex - A Federated OpenID Connect Provider](https://dexidp.io/).
@@ -345,7 +349,7 @@ Add these helm values to set up OIDC authentication powered by your Dex IdP:
 ```yaml
 # values.yaml
 
-tap: 
+tap:
   auth:
     enabled: true
     type: dex
@@ -375,7 +379,7 @@ Once you run `helm install kubeshark kubeshark/kubeshark -f ./values.yaml`, Kube
 
 # Installing your own Dex IdP along with Kubeshark
 
-Choose this option, if **you need to deploy an instance of Dex IdP** along with Kubeshark & 
+Choose this option, if **you need to deploy an instance of Dex IdP** along with Kubeshark &
 set up Dex OIDC authentication for Kubeshark users.
 
 Depending on Ingress enabled/disabled, your Dex configuration might differ.
@@ -411,10 +415,10 @@ The following Dex settings will have these values:
 
 Please, make sure to prepare the following things first.
 
-1. Choose **[Connectors](https://dexidp.io/docs/connectors/)** to enable in Dex IdP. 
+1. Choose **[Connectors](https://dexidp.io/docs/connectors/)** to enable in Dex IdP.
    - i.e. how many kind of "Log in with ..." options you'd like to offer your users
    - You will need to specify connectors in `tap.auth.dexConfig.connectors`
-2. Choose type of **[Storage](https://dexidp.io/docs/configuration/storage/)** to use in Dex IdP. 
+2. Choose type of **[Storage](https://dexidp.io/docs/configuration/storage/)** to use in Dex IdP.
    - You will need to specify storage settings in `tap.auth.dexConfig.storage`
    - default: `memory`
 3. Decide on the OAuth2 `?state=` param expiration time:
@@ -446,28 +450,28 @@ Make sure to:
 
 Helm `values.yaml`:
 ```yaml
-tap: 
+tap:
   auth:
     enabled: true
     type: dex
     dexOidc:
       issuer: https://<your-ingress-hostname>/dex
-      
+
       # Client ID/secret must be taken from `tap.auth.dexConfig.staticClients -> id/secret`
       clientId: kubeshark
       clientSecret: create your own client password
-      
+
       refreshTokenLifetime: "3960h" # 165 days
       oauth2StateParamExpiry: "10m"
       bypassSslCaCheck: false
     dexConfig:
       # This field is REQUIRED!
-      # 
+      #
       # The base path of Dex and the external name of the OpenID Connect service.
       # This is the canonical URL that all clients MUST use to refer to Dex. If a
       # path is provided, Dex's HTTP service will listen at a non-root URL.
       issuer: https://<your-ingress-hostname>/dex
-        
+
       # Expiration configuration for tokens, signing keys, etc.
       expiry:
         refreshTokens:
@@ -475,15 +479,15 @@ tap:
           absoluteLifetime: "3960h"  # 165 days
 
       # This field is REQUIRED!
-      # 
+      #
       # The storage configuration determines where Dex stores its state.
       # See the documentation (https://dexidp.io/docs/storage/) for further information.
       storage:
         type: memory
 
       # This field is REQUIRED!
-      # 
-      # Attention: 
+      #
+      # Attention:
       # Do not change this field and its values.
       # This field is required for internal Kubeshark-to-Dex communication.
       #
@@ -493,7 +497,7 @@ tap:
 
       # This field is REQUIRED!
       #
-      # Attention: 
+      # Attention:
       # Do not change this field and its values.
       # This field is required for internal Kubeshark-to-Dex communication.
       #
@@ -519,10 +523,10 @@ tap:
       # Connectors are used to authenticate users against upstream identity providers.
       # See the documentation (https://dexidp.io/docs/connectors/) for further information.
       #
-      # Attention: 
-      # When you define a new connector, `config.redirectURI` must be: 
+      # Attention:
+      # When you define a new connector, `config.redirectURI` must be:
       # https://<your-ingress-hostname>/dex/callback
-      # 
+      #
       # Example with Google connector:
       # connectors:
       #  - type: google

helm-chart/templates/04-hub-deployment.yaml

@@ -36,6 +36,8 @@ spec:
             - "8080"
             - -loglevel
             - '{{ .Values.logLevel | default "warning" }}'
+            - -capture-stop-after
+            - "{{ if hasKey .Values.tap.capture "stopAfter" }}{{ .Values.tap.capture.stopAfter }}{{ else }}5m{{ end }}"
             {{- if .Values.tap.gitops.enabled }}
             - -gitops
             {{- end }}

helm-chart/templates/06-front-deployment.yaml

@@ -42,6 +42,8 @@ spec:
                       {{- else -}}
                         true
                       {{- end }}'
+            - name: REACT_APP_STREAMING_TYPE
+              value: '{{ default "" (((.Values).tap).dashboard).streamingType }}'
             - name: REACT_APP_AUTH_SAML_IDP_METADATA_URL
               value: '{{ not (eq .Values.tap.auth.saml.idpMetadataUrl "") | ternary .Values.tap.auth.saml.idpMetadataUrl " " }}'
             - name: REACT_APP_TIMEZONE
@@ -65,7 +67,7 @@ spec:
             - name: REACT_APP_RECORDING_DISABLED
               value: '{{ .Values.tap.liveConfigMapChangesDisabled }}'
             - name: REACT_APP_STOP_TRAFFIC_CAPTURING_DISABLED
-              value: '{{- if and .Values.tap.liveConfigMapChangesDisabled .Values.tap.stopped -}}
+              value: '{{- if and .Values.tap.liveConfigMapChangesDisabled .Values.tap.capture.stopped -}}
                         false
                       {{- else -}}
                         {{ .Values.tap.liveConfigMapChangesDisabled | ternary "true" "false" }}

helm-chart/templates/09-worker-daemon-set.yaml

@@ -99,6 +99,10 @@ spec:
             - '{{ .Values.tap.misc.resolutionStrategy }}'
             - -staletimeout
             - '{{ .Values.tap.misc.staleTimeoutSeconds }}'
+            - -storage-size
+            - '{{ .Values.tap.storageLimit }}'
+            - -capture-db-max-size
+            - '{{ .Values.tap.capture.dbMaxSize }}'
         {{- if .Values.tap.docker.overrideImage.worker }}
           image: '{{ .Values.tap.docker.overrideImage.worker }}'
         {{- else if .Values.tap.docker.overrideTag.worker }}
@@ -394,10 +398,12 @@ spec:
         - hostPath:
             path: /etc/os-release
           name: os-release
+        {{- if .Values.tap.tls }}
         - hostPath:
             path: /
           name: root
         - name: data
+        {{- end }}
 {{- if .Values.tap.persistentStorage }}
           persistentVolumeClaim:
             claimName: kubeshark-persistent-volume-claim

helm-chart/templates/10-ingress.yaml

@@ -28,7 +28,7 @@ spec:
                 name: kubeshark-front
                 port:
                   number: 80
-            path: /
+            path: {{ default "/" (((.Values).tap).ingress).path }}
             pathType: Prefix
   {{- if .Values.tap.ingress.tls }}
   tls:

helm-chart/templates/12-config-map.yaml

@@ -11,7 +11,7 @@ data:
     NAMESPACES: '{{ gt (len .Values.tap.namespaces) 0 | ternary (join "," .Values.tap.namespaces) "" }}'
     EXCLUDED_NAMESPACES: '{{ gt (len .Values.tap.excludedNamespaces) 0 | ternary (join "," .Values.tap.excludedNamespaces) "" }}'
     BPF_OVERRIDE: '{{ .Values.tap.bpfOverride }}'
-    STOPPED: '{{ .Values.tap.stopped | ternary "true" "false" }}'
+    STOPPED: '{{ .Values.tap.capture.stopped | ternary "true" "false" }}'
     SCRIPTING_SCRIPTS: '{}'
     SCRIPTING_ACTIVE_SCRIPTS: '{{ gt (len .Values.scripting.active) 0 | ternary (join "," .Values.scripting.active) "" }}'
     INGRESS_ENABLED: '{{ .Values.tap.ingress.enabled }}'
@@ -55,7 +55,7 @@ data:
     TARGETED_PODS_UPDATE_DISABLED: '{{ .Values.tap.liveConfigMapChangesDisabled | ternary "true" "" }}'
     PRESET_FILTERS_CHANGING_ENABLED: '{{ .Values.tap.liveConfigMapChangesDisabled | ternary "false" "true" }}'
     RECORDING_DISABLED: '{{ .Values.tap.liveConfigMapChangesDisabled | ternary "true" "" }}'
-    STOP_TRAFFIC_CAPTURING_DISABLED: '{{- if and .Values.tap.liveConfigMapChangesDisabled .Values.tap.stopped -}}
+    STOP_TRAFFIC_CAPTURING_DISABLED: '{{- if and .Values.tap.liveConfigMapChangesDisabled .Values.tap.capture.stopped -}}
                                         false
                                       {{- else -}}
                                         {{ .Values.tap.liveConfigMapChangesDisabled | ternary "true" "false" }}
@@ -83,3 +83,5 @@ data:
     PCAP_MAX_TIME: '{{ .Values.pcapdump.maxTime }}'
     PCAP_MAX_SIZE: '{{ .Values.pcapdump.maxSize }}'
     PORT_MAPPING: '{{ toJson .Values.tap.portMapping }}'
+    RAW_CAPTURE: '{{ .Values.tap.capture.raw.enabled | ternary "true" "false" }}'
+    RAW_CAPTURE_STORAGE_SIZE: '{{ .Values.tap.capture.raw.storageSize }}'

helm-chart/templates/NOTES.txt

@@ -28,7 +28,7 @@ Notices:
 - Support chat using Intercom is enabled. It can be disabled using `--set supportChatEnabled=false`
 {{- end }}
 {{- if eq .Values.license ""}}
-- No license key was detected. You can either log-in/sign-up through the dashboard, or download the license key from https://console.kubeshark.co/ and add it as `LICENSE` via mounted secret (`tap.secrets`).
+- No license key was detected. You can either log-in/sign-up through the dashboard, or download the license key from https://console.kubeshark.co/ and add it as 'license: <license>' in helm values or as `--set license=<license>` or as `LICENSE` via mounted secret (`tap.secrets`).
 {{- end }}
 
 {{ if .Values.tap.ingress.enabled }}

helm-chart/values.yaml

@@ -26,7 +26,13 @@ tap:
   namespaces: []
   excludedNamespaces: []
   bpfOverride: ""
-  stopped: false
+  capture:
+    stopped: false
+    stopAfter: 5m
+    raw:
+      enabled: false
+      storageSize: 1Gi
+    dbMaxSize: ""
   release:
     repo: https://helm.kubeshark.co
     name: kubeshark
@@ -137,6 +143,7 @@ tap:
     enabled: false
     className: ""
     host: ks.svc.cluster.local
+    path: /
     tls: []
     annotations: {}
   priorityClass: ""
@@ -146,6 +153,7 @@ tap:
   ipv6: true
   debug: false
   dashboard:
+    streamingType: ""
     completeStreamingEnabled: true
   telemetry:
     enabled: true
@@ -158,7 +166,7 @@ tap:
   sentry:
     enabled: false
     environment: production
-  defaultFilter: "!dns and !error"
+  defaultFilter: ""
   liveConfigMapChangesDisabled: false
   globalFilter: ""
   enabledDissectors:
@@ -251,7 +259,7 @@ license: ""
 cloudLicenseEnabled: true
 aiAssistantEnabled: true
 demoModeEnabled: false
-supportChatEnabled: true
+supportChatEnabled: false
 betaEnabled: false
 internetConnectivity: true
 scripting:

manifests/complete.yaml

@@ -4,10 +4,10 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   name: kubeshark-hub-network-policy
   namespace: default
@@ -33,10 +33,10 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   annotations:
   name: kubeshark-front-network-policy
@@ -60,10 +60,10 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   annotations:
   name: kubeshark-dex-network-policy
@@ -87,10 +87,10 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   annotations:
   name: kubeshark-worker-network-policy
@@ -116,10 +116,10 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   name: kubeshark-service-account
   namespace: default
@@ -132,10 +132,10 @@ metadata:
   namespace: default
   labels:
     app.kubeshark.co/app: hub
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
 stringData:
     LICENSE: ''
@@ -151,10 +151,10 @@ metadata:
   namespace: default
   labels:
     app.kubeshark.co/app: hub
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
 stringData:
   AUTH_SAML_X509_CRT: |
@@ -167,10 +167,10 @@ metadata:
   namespace: default
   labels:
     app.kubeshark.co/app: hub
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
 stringData:
   AUTH_SAML_X509_KEY: |
@@ -182,10 +182,10 @@ metadata:
   name: kubeshark-nginx-config-map
   namespace: default
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
 data:
   default.conf: |
@@ -246,10 +246,10 @@ metadata:
   namespace: default
   labels:
     app.kubeshark.co/app: hub
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
 data:
     POD_REGEX: '.*'
@@ -278,7 +278,7 @@ data:
     RECORDING_DISABLED: ''
     STOP_TRAFFIC_CAPTURING_DISABLED: 'false'
     GLOBAL_FILTER: ""
-    DEFAULT_FILTER: "!dns and !error"
+    DEFAULT_FILTER: ""
     TRAFFIC_SAMPLE_RATE: '100'
     JSON_TTL: '5m'
     PCAP_TTL: '10s'
@@ -296,16 +296,18 @@ data:
     PCAP_MAX_TIME: '1h'
     PCAP_MAX_SIZE: '500MB'
     PORT_MAPPING: '{"amqp":[5671,5672],"diameter":[3868],"http":[80,443,8080],"kafka":[9092],"ldap":[389],"redis":[6379]}'
+    RAW_CAPTURE: 'false'
+    RAW_CAPTURE_STORAGE_SIZE: '1Gi'
 ---
 # Source: kubeshark/templates/02-cluster-role.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   name: kubeshark-cluster-role-default
   namespace: default
@@ -349,10 +351,10 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   name: kubeshark-cluster-role-binding-default
   namespace: default
@@ -370,10 +372,10 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   annotations:
   name: kubeshark-self-config-role
@@ -414,10 +416,10 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   annotations:
   name: kubeshark-self-config-role-binding
@@ -437,10 +439,10 @@ kind: Service
 metadata:
   labels:
     app.kubeshark.co/app: hub
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   name: kubeshark-hub
   namespace: default
@@ -458,10 +460,10 @@ apiVersion: v1
 kind: Service
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   name: kubeshark-front
   namespace: default
@@ -479,10 +481,10 @@ kind: Service
 apiVersion: v1
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   annotations:
     prometheus.io/scrape: 'true'
@@ -492,10 +494,10 @@ metadata:
 spec:
   selector:
     app.kubeshark.co/app: worker
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   ports:
   - name: metrics
@@ -508,10 +510,10 @@ kind: Service
 apiVersion: v1
 metadata:
   labels:
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   annotations:
     prometheus.io/scrape: 'true'
@@ -521,10 +523,10 @@ metadata:
 spec:
   selector:
     app.kubeshark.co/app: hub
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   ports:
   - name: metrics
@@ -539,10 +541,10 @@ metadata:
   labels:
     app.kubeshark.co/app: worker
     sidecar.istio.io/inject: "false"
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   name: kubeshark-worker-daemon-set
   namespace: default
@@ -556,10 +558,10 @@ spec:
     metadata:
       labels:
         app.kubeshark.co/app: worker
-        helm.sh/chart: kubeshark-52.8.0
+        helm.sh/chart: kubeshark-52.9.0
         app.kubernetes.io/name: kubeshark
         app.kubernetes.io/instance: kubeshark
-        app.kubernetes.io/version: "52.8.0"
+        app.kubernetes.io/version: "52.9.0"
         app.kubernetes.io/managed-by: Helm
       name: kubeshark-worker-daemon-set
       namespace: kubeshark
@@ -569,7 +571,7 @@ spec:
           - /bin/sh
           - -c
           - mkdir -p /sys/fs/bpf && mount | grep -q '/sys/fs/bpf' || mount -t bpf bpf /sys/fs/bpf
-          image: 'docker.io/kubeshark/worker:v52.8'
+          image: 'docker.io/kubeshark/worker:v52.9'
           imagePullPolicy: Always
           name: mount-bpf
           securityContext:
@@ -598,7 +600,11 @@ spec:
             - 'auto'
             - -staletimeout
             - '30'
-          image: 'docker.io/kubeshark/worker:v52.8'
+            - -storage-size
+            - '5Gi'
+            - -capture-db-max-size
+            - ''
+          image: 'docker.io/kubeshark/worker:v52.9'
           imagePullPolicy: Always
           name: sniffer
           ports:
@@ -672,7 +678,7 @@ spec:
             - -disable-tls-log
             - -loglevel
             - 'warning'
-          image: 'docker.io/kubeshark/worker:v52.8'
+          image: 'docker.io/kubeshark/worker:v52.9'
           imagePullPolicy: Always
           name: tracer
           env:
@@ -764,10 +770,10 @@ kind: Deployment
 metadata:
   labels:
     app.kubeshark.co/app: hub
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   name: kubeshark-hub
   namespace: default
@@ -782,10 +788,10 @@ spec:
     metadata:
       labels:
         app.kubeshark.co/app: hub
-        helm.sh/chart: kubeshark-52.8.0
+        helm.sh/chart: kubeshark-52.9.0
         app.kubernetes.io/name: kubeshark
         app.kubernetes.io/instance: kubeshark
-        app.kubernetes.io/version: "52.8.0"
+        app.kubernetes.io/version: "52.9.0"
         app.kubernetes.io/managed-by: Helm
     spec:
       dnsPolicy: ClusterFirstWithHostNet
@@ -798,6 +804,8 @@ spec:
             - "8080"
             - -loglevel
             - 'warning'
+            - -capture-stop-after
+            - "5m"
           env:
           - name: POD_NAME
             valueFrom:
@@ -815,7 +823,7 @@ spec:
             value: 'https://api.kubeshark.co'
           - name: PROFILING_ENABLED
             value: 'false'
-          image: 'docker.io/kubeshark/hub:v52.8'
+          image: 'docker.io/kubeshark/hub:v52.9'
           imagePullPolicy: Always
           readinessProbe:
             periodSeconds: 5
@@ -878,10 +886,10 @@ kind: Deployment
 metadata:
   labels:
     app.kubeshark.co/app: front
-    helm.sh/chart: kubeshark-52.8.0
+    helm.sh/chart: kubeshark-52.9.0
     app.kubernetes.io/name: kubeshark
     app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.8.0"
+    app.kubernetes.io/version: "52.9.0"
     app.kubernetes.io/managed-by: Helm
   name: kubeshark-front
   namespace: default
@@ -896,10 +904,10 @@ spec:
     metadata:
       labels:
         app.kubeshark.co/app: front
-        helm.sh/chart: kubeshark-52.8.0
+        helm.sh/chart: kubeshark-52.9.0
         app.kubernetes.io/name: kubeshark
         app.kubernetes.io/instance: kubeshark
-        app.kubernetes.io/version: "52.8.0"
+        app.kubernetes.io/version: "52.9.0"
         app.kubernetes.io/managed-by: Helm
     spec:
       containers:
@@ -910,6 +918,8 @@ spec:
               value: 'default'
             - name: REACT_APP_COMPLETE_STREAMING_ENABLED
               value: 'true'
+            - name: REACT_APP_STREAMING_TYPE
+              value: ''
             - name: REACT_APP_AUTH_SAML_IDP_METADATA_URL
               value: ' '
             - name: REACT_APP_TIMEZONE
@@ -931,7 +941,7 @@ spec:
             - name: 'REACT_APP_AI_ASSISTANT_ENABLED'
               value: 'true'
             - name: REACT_APP_SUPPORT_CHAT_ENABLED
-              value: 'true'
+              value: 'false'
             - name: REACT_APP_BETA_ENABLED
               value: 'false'
             - name: REACT_APP_DISSECTORS_UPDATING_ENABLED
@@ -940,7 +950,7 @@ spec:
               value: 'false'
             - name: REACT_APP_SENTRY_ENVIRONMENT
               value: 'production'
-          image: 'docker.io/kubeshark/front:v52.8'
+          image: 'docker.io/kubeshark/front:v52.9'
           imagePullPolicy: Always
           name: kubeshark-front
           livenessProbe: