Release v0.10.0
What's Changed
- Makefile: set
GOARCH
toTARGET_ARCH
only ifGOARCH
is unset by @mtardy in #880 - tetragon: use latest cilium module (v1.13.1) by @kkourt in #882
- Various Dockerfile cleanups by @mtardy in #843
- tetragon: post action parsing fix by @olsajiri in #879
- TracingPolicy examples: use portable symbols for syscalls by @mtardy in #886
- Docs: update the TracingPolicy reference for arm64 by @mtardy in #884
- fix: injecting Git version into tetragon-operator binary fails by @YTGhost in #890
- tetragon: Move matchBinaries filter to be executed earlier by @olsajiri in #833
- Tetra: split commands set between OS for portability by @mtardy in #883
- helm: recreate daemonset pod when configmap changes by @cjtim in #812
- use binary search to optimize performance by @Lan-ce-lot in #820
- test for retrieving exit code by @zhy76 in #852
- ci: update setup-go@v3 to v4 by @Lan-ce-lot in #864
- fixup server address when port is not present by @willfindlay in #896
- matchArgs improvements by @jrfastab in #901
- build(deps): bump ubuntu from
27cb6e6
to67211c1
by @dependabot in #877 - build(deps): bump github/codeql-action from 2.1.37 to 2.2.11 by @dependabot in #897
- build(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.1 to 2.0.2 by @dependabot in #908
- Dockerfiles: use ENTRYPOINT instead of CMD by @mtardy in #887
- build(deps): bump google.golang.org/grpc from 1.53.0 to 1.54.0 by @zhy76 in #860
- pkg/encoder: make customized syscalls printers portable and add open/openat by @mtardy in #900
- pkg:observer: during stats printing check if total events is not zero by @tixxdz in #914
- build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @dependabot in #915
- Dependabot: update config for alpine-curl dep and new label name by @mtardy in #916
- build(deps): bump actions/upload-pages-artifact from 1.0.7 to 1.0.8 by @dependabot in #918
- pks/metrics: add syscall metrics by @kkourt in #924
- pkg/metrics: add event for tracing policy metrics by @kkourt in #927
- build(deps): bump golang from 1.20.2 to 1.20.3 by @dependabot in #923
- build(deps): bump actions/checkout from 3.3.0 to 3.5.2 by @dependabot in #926
- Add Flags To Raw Attach by @kevsecurity in #937
- tetragon: deal with duplicated tcpmon_map issue by @kkourt in #938
- tetragon: Add new NoPost and Signal actions by @olsajiri in #885
- Improvements in bugtool and metrics by @kkourt in #929
- tests: fail test when tracingpolicy parsing fails by @willfindlay in #947
- tetragon: Add documentation for Signal and NoPost actions by @olsajiri in #948
- bug-report-template: add an issue template for bug report by @YTGhost in #898
- tetragon: Add fail path for data events get_current_pid_tgid call by @olsajiri in #950
- tetragon: Allow to use data events for char_buf data by @olsajiri in #789
- Docs: add a try Tetragon on Linux getting-started tutorial and FAQ about running Tetragon on Mac by @mtardy in #899
- tetragon: handle process threads in clone and process_{exec|exit} events by @tixxdz in #941
- policyfilter: pod label filter support for tracing policies. by @kkourt in #945
- build(deps): bump peter-evans/close-issue from 2.2.0 to 3.0.1 by @dependabot in #943
- tetragon: we only need to find the BTF file skip creating it by @jrfastab in #961
- tetragon: release memory used for loading programs by @jrfastab in #962
- build(deps): bump github.com/containerd/containerd from 1.6.10 to 1.7.0 by @zhy76 in #904
- dependabot: fix a tag issue with alpine-curl image by @mtardy in #956
- e2e-framework: minor refactors to improve image dumps by @willfindlay in #963
- build(deps): bump golang from 1.20.3 to 1.20.4 by @dependabot in #966
- tetragon: Add support for and filter operation by @olsajiri in #940
- policyfilter: only deal with running containers by @kkourt in #968
- build(deps): bump docker/setup-buildx-action from 2.4.1 to 2.5.0 by @dependabot in #960
- Add documentation in the CRD for
maxData
andreturnCopy
flags and update doc by @mtardy in #965 - Add support to load LSM and Tracing programs by @tpapagian in #953
- tetragon: Add support for LT/GT operators for matchReturnArgs by @olsajiri in #949
- build(deps): bump ubuntu from
67211c1
todfd64a3
by @dependabot in #969 - tetra: transparently handle unix or tcp gRPC socket by @tixxdz in #967
- github: add feature request issue template by @mtardy in #972
- build(deps): bump github.com/prometheus/client_model from 0.3.0 to 0.4.0 by @dependabot in #978
- Cleanup: update golangci-lint and fix new linters alerts by @mtardy in #976
- build(deps): bump library/alpine from 3.17.3 to 3.18.0 by @dependabot in #986
- Revert: tetragon: Switch exit tracepoint to __put_task_struct kprobe by @tpapagian in #987
- docs: add FAQ entry about CGO related issues in pkg/bpf by @mtardy in #981
- logcapture: use T.Log instead of T.Logf by @willfindlay in #988
- exec: Skip tests not comment them out by @tpapagian in #990
- docs: add last two Tetragon KubeCon EU 2023 prez by @mtardy in #993
- bugtool: skip non-object files from lib directory by @kkourt in #977
- fix[helm]: remove useless 'if' around a 'with' by @Vampouille in #944
- build(deps): bump golang.org/x/time from 0.2.0 to 0.3.0 by @dependabot in #985
- docs: add a "install tetra CLI" guide to getting started by @mtardy in #991
- tetragon: Use execve_map_get_noinit cgroup related code by @olsajiri in #984
- docs: add a script to export the generated API doc to references by @mtardy in #1009
- docs: add an FAQ entry about BTF requirement by @mtardy in #1006
- api: add comments on fields for reference docs by @mtardy in #959
- tetragon: Enable parallel build for bpf objects by @olsajiri in #1010
- tetragon: handle process threads in kprobes and tracepoints by @tixxdz in #946
- cleanup: remove mistakenly committed coverage artifacts by @mtardy in #999
- build(deps): bump actions/setup-go from 3.3.0 to 4.0.1 by @dependabot in #1000
- Deprecate the
--config-file
flag, replace with--tracing-policy
and mergepkg/config
withpkg/tracingpolicy
by @mtardy in #998 - Docs: update docs design by @yasell in #931
- tests: rewrite pkg/sensors/exec:TestExitCode by @mtardy in #1015
- Add sock and skb matchArgs selectors by @kevsecurity in #1008
- docs: add a "deploy Tetragon on Kubernetes" guide and rework the existing systemd and container guides by @mtardy in #992
- docs: fix sticky header, TOC scrolling and add search bar by @yasell in #1026
- dependabot: remove ignore on tag name by @mtardy in #980
- build(deps): bump github.com/fatih/color from 1.14.1 to 1.15.0 by @dependabot in #1021
- Update cilium-builder image by @ferozsalam in #1013
- metrics: Show the latency needed to handle a msg per op by @tpapagian in #1011
- tetragon: Adding missing tid setup to HandleGenericEvent by @olsajiri in #1027
- tetragon: Factor execve sensor and fix process arguments reading by @olsajiri in #1002
- tetragon: Use do_task_dead probe for exit sensor by @olsajiri in #1012
- policyfilter improvements by @kkourt in #1038
- tests: filter unit tests by PID + fix pidSet bugs by @willfindlay in #997
- bugtool: dump the policyfilter map by @kkourt in #1047
- Tracing: Add optional labels to argument by @kevsecurity in #1051
- deps: add renovate to replace dependabot by @mtardy in #1036
- Add rate limiting to events by @kevsecurity in #1041
- Rename argRateLimit to rateLimit by @kevsecurity in #1057
- chore(deps): pin dependencies by @cilium-renovate in #1064
- fix goroutines leaking in tests by @kkourt in #1042
- logging: change log level dynamically by @tixxdz in #1048
- Tracing: Add socket tracking by @kevsecurity in #1060
- Update cilium-builder image by @ferozsalam in #1056
- tetragon: Remove unused cgo code for reading perf events by @olsajiri in #1061
- tetragon: tty monitoring by @olsajiri in #733
- update_pid_tid_from_sock: add always_inline attr by @kkourt in #1091
- Fix memory corruption bug by @kkourt in #1090
- dependabot: remove configuration by @mtardy in #1092
- docs: change baseURL in doc build workflow by @mtardy in #1093
- chore(deps): update docker.io/library/alpine docker tag to v3.12.12 by @cilium-renovate in #1088
- chore(deps): update go (patch) by @cilium-renovate in #1098
- chore(deps): update docker.io/library/alpine docker tag to v3.18.2 by @cilium-renovate in #1097
- renovate: various fixes and tuning by @mtardy in #1101
- tetragon: Switch to clang-15 in Dockerfile.clang by @olsajiri in #1094
- renovate: fix author match with sign-off by @mtardy in #1103
- fix(deps): update module github.com/sirupsen/logrus to v1.9.3 by @cilium-renovate in #1102
- chore(deps): pin dependencies by @cilium-renovate in #1065
- renovate: re-enable digest update, add semver comment for all github actions, prevent update of local packages by @mtardy in #1105
- Fix getevents
--output
flag by @mtardy in #1106 - chore(deps): update golang docker tag to v1.20.5 by @cilium-renovate in #1111
- docs: import homepage directly into docs by @mtardy in #1114
- chore(deps): update all github action dependencies (patch) by @cilium-renovate in #1087
- build(deps): bump golangci/golangci-lint from v1.52.2 to v1.53.3 by @dependabot in #1084
- tetragon: Force configured kernel version in observerFindBTF by @olsajiri in #1107
- tetra: regroup getevents options in exported struct by @mtardy in #1124
- fix(deps): update all api go dependencies main (patch) by @cilium-renovate in #1123
- chore(deps): update module github.com/kubernetes-sigs/e2e-framework to v0.0.8 by @cilium-renovate in #1117
- tetragon: Remove unneeded custom cilium/ebpf dependency by @olsajiri in #1121
- tetragon: Allow to override tracepoint argument type by @olsajiri in #1113
- fix(deps): update module github.com/go-openapi/strfmt to v0.21.7 by @cilium-renovate in #1127
- fix(deps): update kubernetes packages to v0.26.6 (patch) by @cilium-renovate in #1126
- fix(deps): update module github.com/golang/protobuf to v1.5.3 by @cilium-renovate in #1128
- chore(deps): update docker.io/library/alpine docker tag to v3.18.2 by @cilium-renovate in #1131
- chore(deps): update quay.io/cilium/tetragon docker tag to v0.9.0 by @cilium-renovate in #1134
- chore(deps): update quay.io/cilium/tetragon-operator docker tag to v0.9.0 by @cilium-renovate in #1135
- fix(deps): update module golang.org/x/sys to v0.9.0 by @cilium-renovate in #1140
- fix(deps): update module google.golang.org/protobuf to v1.31.0 by @cilium-renovate in #1142
- fix(deps): update module k8s.io/klog/v2 to v2.100.1 by @cilium-renovate in #1143
- fix(deps): update module github.com/spf13/viper to v1.16.0 by @cilium-renovate in #1138
- fix(deps): update module golang.org/x/sync to v0.3.0 by @cilium-renovate in #1139
- chore(deps): update all github action dependencies (minor) by @cilium-renovate in #1130
- fix(deps): update module github.com/containerd/containerd to v1.7.2 by @cilium-renovate in #1148
- fix(deps): update module github.com/hashicorp/golang-lru/v2 to v2.0.4 by @cilium-renovate in #1150
- pkg: fix versionStrings out of bound by @chenliTW in #1115
- Revert sigstore/cosign-installer update and ignore it by @mtardy in #1161
- chore(deps): update actions/deploy-pages action to v2 by @cilium-renovate in #1157
- fix(deps): update module sigs.k8s.io/e2e-framework to v0.0.8 by @cilium-renovate in #1129
- fix(deps): update module go.uber.org/atomic to v1.11.0 by @cilium-renovate in #1155
- fix(deps): update module gopkg.in/yaml.v2 to v3 by @cilium-renovate in #1160
- fix(deps): update module google.golang.org/grpc to v1.56.1 by @cilium-renovate in #1141
- fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.3 by @cilium-renovate in #1151
- fix(deps): update module github.com/prometheus/client_golang to v1.16.0 by @cilium-renovate in #1153
- chore(deps): update module github.com/cilium/dns to v1.1.50 by @cilium-renovate in #1112
- encoder: use protojson encoder instead of encoding/json by @willfindlay in #1099
- chore(deps): remove unused module
github.com/cilium/metallb
by @cilium-renovate in #1152 - chore(deps): fix
quay.io/cilium/clang
tag and digest mismatch and align versions by @cilium-renovate in #1069 - Add arm64 runners for go tests by @mtardy in #1062
- chore(deps): update docker.io/library/golang docker tag to v1.20.5 by @cilium-renovate in #1132
- fix(deps): update module github.com/cilium/little-vm-helper to v0.0.7 by @cilium-renovate in #1147
- fix(deps): update module sigs.k8s.io/controller-tools to v0.12.0 by @cilium-renovate in #1144
- chore(deps): update ubuntu:22.04 docker digest to 6120be6 by @cilium-renovate in #1070
- tetragon: Switch v60 object defines to v61 by @olsajiri in #1120
- renovate: group Go updates except for major updates by @mtardy in #1162
- tracing: Add policy for file monitoring by @tpapagian in #1109
- Bump and tweak Alpine image version by @ferozsalam in #1168
- eventcache: simple cleanups set 1 by @tixxdz in #1082
- Fix connect and datagram tracingpolicy examples by @kevsecurity in #1180
- release notes: add a step to update version in hugo docs by @willfindlay in #1171
- Make ReturnArgAction optional by @kevsecurity in #1181
- chore: remove clang-format by @willfindlay in #1186
- contrib: add a Docker images digest checker by @mtardy in #1185
- use-cases: add monitor process credentials at syscalls by @tixxdz in #895
- tetragon: Header file and other cleanups by @olsajiri in #1184
- Add common types to CRD argument parsing by @kevsecurity in #1190
- CODEOWNERS: add mtardy and tetragon team to /docs owners by @mtardy in #1188
- tetra: add .exe suffix for Windows binaries by @mtardy in #1196
- new clang format by @kkourt in #1191
- tetragon: do not allow users to set const_buf by @kkourt in #1202
- docs: reorganize and simplify docs structure with new "concepts" section by @mtardy in #1007
- Bump e2e jobs-app charts and fix workflow logs collection step by @mtardy in #1187
- Dockerfiles: add explicit docker.io/library prefix by @mtardy in #1203
- chore(deps): update docker.io/library/ubuntu:22.04 docker digest to 0bced47 by @cilium-renovate in #1204
- chore(deps): update docker.io/library/golang:1.20.5 docker digest to fd9306e by @cilium-renovate in #1198
- fix(deps): update module google.golang.org/grpc to v1.56.2 by @cilium-renovate in #1206
- fix issue when deleting policy and policyfilter is disabled. by @kkourt in #1200
- Update cilium/ebpf to v0.11.0 by @tpapagian in #1210
- renovate: ungroup Go minor updates by @mtardy in #1212
- Update cilium/cilium to v1.13.4 by @tpapagian in #1211
- Docs reorganization for use cases by @mtardy in #1215
- renovate: migrate config for v36 release by @mtardy in #1213
- issue templates: improve bug report template by @mtardy in #1197
- bugtool: use gRPC instead of tetra CLI by @kkourt in #1217
- bugtool: detect bpftool path by @tixxdz in #1219
- Pass Namespace in metrics options instead of prefixing metric names by @lambdanis in #1228
- pkg/filters: make field filters work with snake case fields by @willfindlay in #1223
- Prepare for v0.10.0 release by @kkourt in #1231
New Contributors
- @Lan-ce-lot made their first contribution in #820
- @Vampouille made their first contribution in #944
- @yasell made their first contribution in #931
- @ferozsalam made their first contribution in #1013
- @cilium-renovate made their first contribution in #1064
- @chenliTW made their first contribution in #1115
- @lambdanis made their first contribution in #1228
Full Changelog: v0.10.0-pre.0...v0.10.0