helm/kubeshark-helm-charts/kubeshark 52.3.83

v52.3.83

on Artifact Hub

v52.3.83 (2024-10-09)

Release Highlights

Keywords: Scripting, WebSocket, UDP, TLS, HTTPS, Recording, TCPDump, Capture Filters

In this release, along with fixing several bugs, we enhanced our scripting capabilities, added a UDP dissector, improved TLS/HTTPS support, and introduced a new feature that enables continuous recording of all captured traffic—think TCPDump for Kubernetes.

New Features & Bug Fixes

• Resolved several bugs related to capture filters that previously caused inconsistent behavior.
• Improved the kubeshark script command to synchronize scripting code from a local folder to the Kubernetes ConfigMap. You can now use a simple CLI to point to a local folder, ensuring that any changes are reflected in the kubeshark-config-map, with workers automatically reloading the updated scripts.
• Fixed a bug that affected the console CLI command (e.g., kubeshark console), which previously prevented scripting logs from being displayed outside of the dashboard.
• Added UDP support to the list of supported dissectors, allowing Kubeshark to display all UDP packets.
• Enhanced TLS/HTTPS support to display all encrypted TCP packets, along with various TLS 1.x handshake messages (e.g., ClientHello, ServerHello). Additionally, when supported TLS termination libraries such as OpenSSL are used, the full message is parsed.
• Kubeshark now supports continuous automatic recording of all traffic, managing storage allocation and time windows. The recordings can be copied locally on demand using the kubeshark pcapdump command.
• Added support for capturing and processing TLS traffic from short-lived processes that are not part of the Kubernetes manifest (e.g., SSH-ing into a pod or node and using curl with an HTTPS URL).
• Fixed a bug related to Kubernetes watchers by replacing them with cache informers, improving pod-targeting functionality.
• Added an API health endpoint that indicates the health of all workers, particularly the BPF expressions set on each worker. This is especially useful for understanding what types of traffic Kubeshark is monitoring and ignoring.
• Fixed broken WebSocket protocol support (#1624).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.83/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.