chore(deps): update dependency cilium/tetragon to v1.1.0 #4439
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
nicholasdille-bot
approved these changes
Apr 29, 2024
🔍 Vulnerabilities of
|
| digest | sha256:65ec7406359c8c691c41f0c708db7058f97c0c6de5b5b6d5bf415e80f66cd700 |
| vulnerabilities |     |
| platform | linux/amd64 |
| size | 21 MB |
| packages | 140 |
Description
|
|
Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/8882117165. |
|
PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/8882117165. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.0.3->1.1.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
cilium/tetragon (cilium/tetragon)
v1.1.0: releaseCompare Source
Release notes
Breaking Changes:
API: Remove deprecated pod.labels field. Use pod.pod_labels instead. (https://github.com/cilium/tetragon/pull/1848) by @michi-covalent
TracingPolicy: Replace symbol field (string) with symbols (array of strings) in uprobe spec. If using policies with uprobes, you need to replace the symbol field. (https://github.com/cilium/tetragon/pull/1975) by @olsajiri
TracingPolicy: Rename killer to enforcer. If using policies with killers, you need to replace killers with enforcers and action: NotifyKiller with NotifyEnforcer. (https://github.com/cilium/tetragon/pull/2117) by @olsajiri
Fix metrics related to monitoring BPF maps and userspace caches. Remove
tetragon_map_drops_total(it was duplicatingtetragon_errors_total{type="process_cache_evicted"}). Removetetragon_map_in_use_gauge{map="eventcache"}(event cache is not a BPF map). Replacetetragon_map_in_use_gauge{map="processLru"}withtetragon_process_cache_size(process cache is not a BPF map). (https://github.com/cilium/tetragon/pull/1950) by @sadath-12Support user mode stacktraces in events. To enable this feature, set userStackTrace: true in the policy Post action. (https://github.com/cilium/tetragon/pull/2175) by @anfedotoff
To distinguish different stacktraces, kernel stacktraces are now enabled with kernelStackTrace policy field (renamed from stackTrace), and posted in kernel_stack_trace event field (renamed from stack_trace).
Major Changes:
Bugfixes:
prepend_namefunction (https://github.com/cilium/tetragon/pull/1902) by @mtardyMinor Changes:
Add a metric to provide missed events per type (https://github.com/cilium/tetragon/pull/1674) by @tpapagian
tetragon: factor kprobes (https://github.com/cilium/tetragon/pull/1685) by @olsajiri
tetragon: namespace checks (https://github.com/cilium/tetragon/pull/1627) by @tixxdz
tetragon: save tetragon pid into pidfile (https://github.com/cilium/tetragon/pull/1743) by @tixxdz
operator: Don't log an error if the PodInfo resource already exists. (https://github.com/cilium/tetragon/pull/1777) by @michi-covalent
Increases the character limit for prefix matches from 128 to 256. (https://github.com/cilium/tetragon/pull/1779) by @kevsecurity
tetragon: Assorted fixes (https://github.com/cilium/tetragon/pull/1781) by @olsajiri
policylibrary: add a catch all for setuid root and suid execution (https://github.com/cilium/tetragon/pull/1706) by @tixxdz
tetragon: get rid of some programs (https://github.com/cilium/tetragon/pull/1783) by @olsajiri
Misc Helm updates (https://github.com/cilium/tetragon/pull/1814) by @lambdanis
Helm: Added various configuration options for the Tetragon Operator Deployment (https://github.com/cilium/tetragon/pull/1817) by @PhilipSchmid
Add
PrefixandNotPrefixoperators to matchBinaries (https://github.com/cilium/tetragon/pull/1732) by @mtardyAdd a Kubernetes service exposing Tetragon Operator metrics. Make the operator metrics port configurable via Helm values and change the default to 2113. (https://github.com/cilium/tetragon/pull/1797) by @hungran
helm: add servicemonitor for operator (https://github.com/cilium/tetragon/pull/1836) by @hungran
tetragon: Detect large program with feature check (https://github.com/cilium/tetragon/pull/1833) by @olsajiri
tetragon: Add LT/GT oerator checks (https://github.com/cilium/tetragon/pull/1863) by @olsajiri
tetragon: Add support to match 32 bit syscalls (https://github.com/cilium/tetragon/pull/1816) by @olsajiri
tetragon: Move return filter to kernel (https://github.com/cilium/tetragon/pull/1773) by @olsajiri
tetragon: Detect and use disassociate_ctty as exit probe if needed (https://github.com/cilium/tetragon/pull/1853) by @olsajiri
tetragon: Use cilium/ebpf detection (https://github.com/cilium/tetragon/pull/1904) by @olsajiri
tetragon: Small filter fixes (https://github.com/cilium/tetragon/pull/1891) by @olsajiri
api:events: add message field to inform users what is happening (https://github.com/cilium/tetragon/pull/1940) by @tixxdz
tetragon: detect if binary execution raised process privileges (https://github.com/cilium/tetragon/pull/1786) by @tixxdz
Add rateLimitScope to control what rateLimit applies to. (https://github.com/cilium/tetragon/pull/1962) by @kevsecurity
Update
tetragon_errors_totalmetric to not count event cache retries and errors. Addtetragon_event_cache_retries_totalandtetragon_event_cache_parent_info_errors_totalmetrics. (https://github.com/cilium/tetragon/pull/1923) by @sadath-12tetra: Add event filter based on tracing policy name (https://github.com/cilium/tetragon/pull/1867) by @ioandr
killer sensor: add fmod_ret support (https://github.com/cilium/tetragon/pull/1953) by @kkourt
tetragon: run Tetragon without access to CRD (https://github.com/cilium/tetragon/pull/1931) by @aohoyd
helm: Add
tetragonOperator.enabledflag to the chart (https://github.com/cilium/tetragon/pull/2004) by @aohoydtetragon: Add support for uprobe arguments (https://github.com/cilium/tetragon/pull/1978) by @olsajiri
tetra: add a probe command to probe BPF features (https://github.com/cilium/tetragon/pull/2017) by @mtardy
tetragon: Harden loader sensor (https://github.com/cilium/tetragon/pull/2024) by @olsajiri
bugtool: fetch gops pprof heap (https://github.com/cilium/tetragon/pull/2007) by @tixxdz
tetragon: Add support to use security_ functions in killer https://github.com/cilium/tetragon/pull/20022) by @olsajiri
validation: improve error message when failing to load a TracingPolicy (https://github.com/cilium/tetragon/pull/2031) by @christian-2
policylibrary: consolidate privileges raising operations into privileges-raise.yaml single policy (https://github.com/cilium/tetragon/pull/1957) by @tixxdz
Extend string matching to strings of length 4096 characters (increased from 144 characters). (https://github.com/cilium/tetragon/pull/2069) by @kevsecurity
tetragon: Factor uprobe sensor setup (https://github.com/cilium/tetragon/pull/2085) by @olsajiri
Rename tetragon_policyflter_metrics_total metric to tetragon_policyfilter_metrics_total (fix a typo). (https://github.com/cilium/tetragon/pull/2096) by @mtardy
tetragon: extract linux_binprm member using CO:RE (https://github.com/cilium/tetragon/pull/1986) by @dwindsor
killer: assorted fixes (https://github.com/cilium/tetragon/pull/2058) by @olsajiri
policy pod-label filters: allow for namespace filtering using k8s:io.kubernetes.pod.namespace (https://github.com/cilium/tetragon/pull/1952) by @sadath-12
Parse kthreads during /proc scanning (https://github.com/cilium/tetragon/pull/2089) by @tpapagian
pkg/sensors: expose policy status through metrics and tetra (https://github.com/cilium/tetragon/pull/2090) by @mtardy
Fail with an error when the event exporter fails to start. (https://github.com/cilium/tetragon/pull/2127) by @willfindlay
tetragon:trivial: create run dir early to avoid errors (https://github.com/cilium/tetragon/pull/2148) by @tixxdz
tetragon:tarball: docker oci tarball fix (https://github.com/cilium/tetragon/pull/2161) by @tixxdz
Add support for data_loc char buffers. (https://github.com/cilium/tetragon/pull/2168) by @kevsecurity
Metrics with known labels values are initialized to 0 on startup. (https://github.com/cilium/tetragon/pull/2162) by @lambdanis
This helps to ensure stable resources usage and metrics queries. This also involves changes in several metrics labels:
Allow for the operator to forcefully update CRDs regardless of the version (https://github.com/cilium/tetragon/pull/2023) by @aohoyd
Provide minimal support for struct net_device (https://github.com/cilium/tetragon/pull/2196) by @kevsecurity
Tracing: add support for file permissions (https://github.com/cilium/tetragon/pull/2222) by @Jianlin-lv
tetragon: assorted fixes (https://github.com/cilium/tetragon/pull/2264) by @olsajiri
tetragon: log current security context if any at startup (https://github.com/cilium/tetragon/pull/2149) by @tixxdz
tracing-policies: support tags to categorize events (https://github.com/cilium/tetragon/pull/2008) by @tixxdz
cves: add detection of XZ backdoor in OpenSSH (https://github.com/cilium/tetragon/pull/2276) by @tixxdz
tracingpolicy: comment message field for older versions support (https://github.com/cilium/tetragon/pull/2281) by @tixxdz
tetragon: store caps during fork (https://github.com/cilium/tetragon/pull/2275) by @tixxdz
Metrics for map and cache sizes are improved: (https://github.com/cilium/tetragon/pull/2291) by @lambdanis
Filter out bash kubernetes healthchecks (https://github.com/cilium/tetragon/pull/2262) by @alexeysofin
Add export metrics (https://github.com/cilium/tetragon/pull/2340) by @chancez
Support installing CRDs as part of Tetragon Helm chart by setting crds.installMethod=helm value. tetragonOperator.skipCRDCreation value is deprecated - if set to true, use crds.installMethod=none instead. (https://github.com/cilium/tetragon/pull/2375) by @lambdanis
CI Changes:
Documentation changes:
Misc Changes:
docker run(https://github.com/cilium/tetragon/pull/2341) by @chancezAll changes
e2a8561by @cilium-renovate in https://github.com/cilium/tetragon/pull/173611eadc0(main) by @cilium-renovate in https://github.com/cilium/tetragon/pull/1744Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.