🔖 Bump the Helm chart version to 52.11.0

In preparation for v200 (#1815 )
* In preparation for v200 * updated README * Enable raw capture * changed 0.0.0.0 to 127.0.0.1 as 0.0.0.0 is insecure address * added tip: kubeshark proxy * added new TCP/UDP connection dissectors Set API2 as the default * increased storageLimit per worker. * Updated makefile * updated the complementary license to the end of Jan 2026. * readme touch ups * Updated snapshot image * updated license removed dashboard subproject
2026-02-22 05:50:37 +00:00 · 2025-12-16 11:49:37 -08:00 · 2025-12-16 11:44:02 -08:00 · 2025-12-05 08:27:25 -08:00 · 2025-12-01 16:02:19 -08:00 · 2025-11-28 17:12:22 -08:00
11 changed files with 133 additions and 106 deletions
--- a/15
+++ b/15
@@ -84,8 +84,10 @@ kubectl-view-kubeshark-resources: ## This command outputs all Kubernetes resourc
 	./kubectl.sh view-kubeshark-resources

 generate-helm-values: ## Generate the Helm values from config.yaml
-	mv ~/.kubeshark/config.yaml ~/.kubeshark/config.yaml.old; bin/kubeshark__ config>helm-chart/values.yaml;mv ~/.kubeshark/config.yaml.old ~/.kubeshark/config.yaml
-	sed -i 's/^license:.*/license: ""/' helm-chart/values.yaml && sed -i '1i # find a detailed description here: https://github.com/kubeshark/kubeshark/blob/master/helm-chart/README.md' helm-chart/values.yaml 
+# 	[ -f ~/.kubeshark/config.yaml ] && mv ~/.kubeshark/config.yaml ~/.kubeshark/config.yaml.old
+	bin/kubeshark__ config>helm-chart/values.yaml
+# 	[ -f ~/.kubeshark/config.yaml.old ] && mv ~/.kubeshark/config.yaml.old ~/.kubeshark/config.yaml
+# 	sed -i 's/^license:.*/license: ""/' helm-chart/values.yaml && sed -i '1i # find a detailed description here: https://github.com/kubeshark/kubeshark/blob/master/helm-chart/README.md' helm-chart/values.yaml 

 generate-manifests: ## Generate the manifests from the Helm chart using default configuration
 	helm template kubeshark -n default ./helm-chart > ./manifests/complete.yaml
@@ -189,8 +191,8 @@ release:
 	@make generate-helm-values && make generate-manifests
 	@git add -A . && git commit -m ":bookmark: Bump the Helm chart version to $(VERSION)" && git push
 	@git tag -d v$(VERSION); git tag v$(VERSION) && git push origin --tags
-	@cd helm-chart && rm -rf ../../kubeshark.github.io/charts/chart && mkdir ../../kubeshark.github.io/charts/chart && cp -r . ../../kubeshark.github.io/charts/chart/
-	@cd ../../kubeshark.github.io/ && git add -A . && git commit -m ":sparkles: Update the Helm chart" && git push
+	@rm -rf ../kubeshark.github.io/charts/chart && mkdir ../kubeshark.github.io/charts/chart && cp -r helm-chart/ ../kubeshark.github.io/charts/chart/
+	@cd ../kubeshark.github.io/ && git add -A . && git commit -m ":sparkles: Update the Helm chart" && git push
 	@cd ../kubeshark

 release-dry-run:
@@ -198,11 +200,14 @@ release-dry-run:
 	@cd ../tracer && git checkout master && git pull 
 	@cd ../hub && git checkout master && git pull
 	@cd ../front && git checkout master && git pull 
-	@cd ../kubeshark && git checkout master && git pull && sed -i "s/^version:.*/version: \"$(shell echo $(VERSION) | sed -E 's/^([0-9]+\.[0-9]+\.[0-9]+)\..*/\1/')\"/" helm-chart/Chart.yaml && make
+	@cd ../kubeshark && sed -i "s/^version:.*/version: \"$(shell echo $(VERSION) | sed -E 's/^([0-9]+\.[0-9]+\.[0-9]+)\..*/\1/')\"/" helm-chart/Chart.yaml && make
 	@if [ "$(shell uname)" = "Darwin" ]; then \
 		codesign --sign - --force --preserve-metadata=entitlements,requirements,flags,runtime ./bin/kubeshark__; \
 	fi
 	@make generate-helm-values && make generate-manifests
+	@rm -rf ../kubeshark.github.io/charts/chart && mkdir ../kubeshark.github.io/charts/chart && cp -r helm-chart/ ../kubeshark.github.io/charts/chart/
+	@cd ../kubeshark.github.io/
+	@cd ../kubeshark

 branch:
 	@cd ../worker && git checkout master && git pull && git checkout -b $(name); git push --set-upstream origin $(name)
--- a/README.md
+++ b/README.md
@@ -21,23 +21,37 @@
 </p>
 <p align="center">
  <b>
-    We're currently experiencing issues and our team is working around the clock to resolve them as quickly as possible. We'll keep you updated once everything is back to normal. In the meantime, feel free to reach out to us on <a href="https://join.slack.com/t/kubeshark/shared_invite/zt-3jdcdgxdv-1qNkhBh9c6CFoE7bSPkpBQ">Slack</a> or email us at <a href="mailto:support@kubehq.io">support@kubehq.io</a>.
+    Want to see Kubeshark in action right now? Visit this
+    <a href="https://kubeshark.kubehq.com/">live demo deployment</a> of Kubeshark.
  </b>
 </p>

-**Kubeshark** is a network observability platform for Kubernetes, providing real-time, cluster-wide visibility into Kubernetes’ network. It enables users to inspect all internal and external cluster communications, API calls, and data in transit. Additionally, Kubeshark detects anomalies and emergent behaviors, trigger autonomous remediations, and generate deep network insights.
+**Kubeshark** is an API traffic analyzer for Kubernetes, providing deep packet inspection with complete API and Kubernetes contexts, retaining cluster-wide L4 traffic (PCAP), and using minimal production compute resources.

 ![Simple UI](https://github.com/kubeshark/assets/raw/master/png/kubeshark-ui.png)

 Think [TCPDump](https://en.wikipedia.org/wiki/Tcpdump) and [Wireshark](https://www.wireshark.org/) reimagined for Kubernetes.

+Access cluster-wide PCAP traffic by pressing a single button, without the need to install `tcpdump` or manually copy files. Understand the traffic context in relation to the API and Kubernetes contexts.
+
 #### Service-Map w/Kubernetes Context

 ![Service Map with Kubernetes Context](https://github.com/kubeshark/assets/raw/master/png/kubeshark-servicemap.png)

-#### Cluster-Wide PCAP Recording
+#### Export Cluster-Wide L4 Traffic (PCAP)

-![Cluster-Wide PCAP Recording](https://github.com/kubeshark/assets/raw/master/png/pcap-recording.png)
+Imagine having a cluster-wide [TCPDump](https://www.tcpdump.org/)-like capability—exporting a single [PCAP](https://www.ietf.org/archive/id/draft-gharris-opsawg-pcap-01.html) file that consolidates traffic from multiple nodes, all accessible with a single click.
+
+1. Go to the **Snapshots** tab
+2. Create a new snapshot
+3. **Optionally** select the nodes (default: all nodes)
+4. **Optionally** select the time frame (default: last one hour)
+5. Press **Create**
+
+<img width="3342" height="1206" alt="image" src="https://github.com/user-attachments/assets/e8e47996-52b7-4028-9698-f059a13ffdb7" />
+
+
+Once the snapshot is ready, click the PCAP file to export its contents and open it in Wireshark.

 ## Getting Started
 Download **Kubeshark**'s binary distribution [latest release](https://github.com/kubeshark/kubeshark/releases/latest) or use one of the following methods to deploy **Kubeshark**. The [web-based dashboard](https://docs.kubehq.com/en/ui) should open in your browser, showing a real-time view of your cluster's traffic.
--- a/config/configStruct.go
+++ b/config/configStruct.go
@@ -137,6 +137,8 @@ func CreateDefaultConfig() ConfigStruct {
 				"ldap",
 				"radius",
 				"diameter",
+				"udp-flow",
+				"tcp-flow",
 			},
 			PortMapping: configStructs.PortMapping{
 				HTTP:     []uint16{80, 443, 8080},
@@ -174,7 +176,7 @@ type ConfigStruct struct {
 	Kube                 KubeConfig                    `yaml:"kube" json:"kube"`
 	DumpLogs             bool                          `yaml:"dumpLogs" json:"dumpLogs" default:"false"`
 	HeadlessMode         bool                          `yaml:"headless" json:"headless" default:"false"`
-	License              string                        `yaml:"license" json:"license" default:""`
+	License              string                        `yaml:"license" json:"license" default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`
 	CloudLicenseEnabled  bool                          `yaml:"cloudLicenseEnabled" json:"cloudLicenseEnabled" default:"true"`
 	AiAssistantEnabled   bool                          `yaml:"aiAssistantEnabled" json:"aiAssistantEnabled" default:"true"`
 	DemoModeEnabled      bool                          `yaml:"demoModeEnabled" json:"demoModeEnabled" default:"false"`
--- a/config/configStructs/tapConfig.go
+++ b/config/configStructs/tapConfig.go
@@ -198,7 +198,7 @@ type RoutingConfig struct {
 }

 type DashboardConfig struct {
-	StreamingType            string `yaml:"streamingType" json:"streamingType" default:""`
+	StreamingType            string `yaml:"streamingType" json:"streamingType" default:"connect-rpc"`
 	CompleteStreamingEnabled bool   `yaml:"completeStreamingEnabled" json:"completeStreamingEnabled" default:"true"`
 }

@@ -251,8 +251,8 @@ type PprofConfig struct {

 type MiscConfig struct {
 	JsonTTL                     string `yaml:"jsonTTL" json:"jsonTTL" default:"5m"`
-	PcapTTL                     string `yaml:"pcapTTL" json:"pcapTTL" default:"10s"`
-	PcapErrorTTL                string `yaml:"pcapErrorTTL" json:"pcapErrorTTL" default:"60s"`
+	PcapTTL                     string `yaml:"pcapTTL" json:"pcapTTL" default:"0"`
+	PcapErrorTTL                string `yaml:"pcapErrorTTL" json:"pcapErrorTTL" default:"0"`
 	TrafficSampleRate           int    `yaml:"trafficSampleRate" json:"trafficSampleRate" default:"100"`
 	TcpStreamChannelTimeoutMs   int    `yaml:"tcpStreamChannelTimeoutMs" json:"tcpStreamChannelTimeoutMs" default:"10000"`
 	TcpStreamChannelTimeoutShow bool   `yaml:"tcpStreamChannelTimeoutShow" json:"tcpStreamChannelTimeoutShow" default:"false"`
@@ -263,7 +263,7 @@ type MiscConfig struct {
 }

 type PcapDumpConfig struct {
-	PcapDumpEnabled  bool   `yaml:"enabled" json:"enabled" default:"true"`
+	PcapDumpEnabled  bool   `yaml:"enabled" json:"enabled" default:"false"`
 	PcapTimeInterval string `yaml:"timeInterval" json:"timeInterval" default:"1m"`
 	PcapMaxTime      string `yaml:"maxTime" json:"maxTime" default:"1h"`
 	PcapMaxSize      string `yaml:"maxSize" json:"maxSize" default:"500MB"`
@@ -301,13 +301,13 @@ type SeLinuxOptionsConfig struct {
 }

 type RawCaptureConfig struct {
-	Enabled     bool   `yaml:"enabled" json:"enabled" default:"false"`
+	Enabled     bool   `yaml:"enabled" json:"enabled" default:"true"`
 	StorageSize string `yaml:"storageSize" json:"storageSize" default:"1Gi"`
 }

 type SnapshotsConfig struct {
 	StorageClass string `yaml:"storageClass" json:"storageClass" default:""`
-	StorageSize  string `yaml:"storageSize" json:"storageSize" default:"1Gi"`
+	StorageSize  string `yaml:"storageSize" json:"storageSize" default:"20Gi"`
 }

 type CaptureConfig struct {
@@ -332,7 +332,7 @@ type TapConfig struct {
 	PersistentStoragePvcVolumeMode string                  `yaml:"persistentStoragePvcVolumeMode" json:"persistentStoragePvcVolumeMode" default:"FileSystem"`
 	EfsFileSytemIdAndPath          string                  `yaml:"efsFileSytemIdAndPath" json:"efsFileSytemIdAndPath" default:""`
 	Secrets                        []string                `yaml:"secrets" json:"secrets" default:"[]"`
-	StorageLimit                   string                  `yaml:"storageLimit" json:"storageLimit" default:"5Gi"`
+	StorageLimit                   string                  `yaml:"storageLimit" json:"storageLimit" default:"10Gi"`
 	StorageClass                   string                  `yaml:"storageClass" json:"storageClass" default:"standard"`
 	DryRun                         bool                    `yaml:"dryRun" json:"dryRun" default:"false"`
 	DnsConfig                      DnsConfig               `yaml:"dns" json:"dns"`
--- a/helm-chart/Chart.yaml
+++ b/helm-chart/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v2
 name: kubeshark
-version: "52.10.0"
+version: "52.11.0"
 description: The API Traffic Analyzer for Kubernetes
-home: https://kubehq.com
+home: https://www.kubehq.com
 keywords:
  - kubeshark
  - packet capture
@@ -18,7 +18,7 @@ kubeVersion: '>= 1.16.0-0'
 maintainers:
  - email: info@kubehq.com
    name: Kubeshark
-    url: https://kubehq.com
+    url: https://www.kubehq.com
 sources:
  - https://github.com/kubeshark/kubeshark/tree/master/helm-chart
 type: application
--- a/helm-chart/README.md
+++ b/helm-chart/README.md
@@ -140,11 +140,11 @@ Example for overriding image names:
 | `tap.bpfOverride`                         | When using AF_PACKET as a traffic capture backend, override any existing pod targeting rules and set explicit BPF expression (e.g. `net 0.0.0.0/0`).                                                          | `[]`                                                                                                                                                                                                                                             |
 | `tap.capture.stopped`                             | Set to `false` to have traffic processing start automatically. When set to `true`, traffic processing is stopped by default, resulting in almost no resource consumption (e.g. Kubeshark is dormant). This property can be dynamically control via the dashboard.      | `false`                                                                                                                                                                                                                                          |
 | `tap.capture.stopAfter`                             | Set to a duration (e.g. `30s`) to have traffic processing stop after no websocket activity between worker and hub.     | `30s`                                                                                                                                                                                                                                            |
-| `tap.capture.raw.enabled`                           | Enable raw capture of packets and syscalls to disk for offline analysis      | `false`                                                                                                                                                                                                                                          |
+| `tap.capture.raw.enabled`                           | Enable raw capture of packets and syscalls to disk for offline analysis      | `true`                                                                                                                                                                                                                                          |
 | `tap.capture.raw.storageSize`                       | Maximum storage size for raw capture files (supports K8s quantity format: `1Gi`, `500Mi`, etc.)     | `1Gi`                                                                                                                                                                                                                                            |
 | `tap.capture.dbMaxSize`                           | Maximum size for capture database (e.g., `4Gi`, `2000Mi`). When empty, automatically uses 80% of allocated storage (`tap.storageLimit`).     | `""`                                                                                                                                                                                                                                             |
 | `tap.snapshots.storageClass`                      | Storage class for snapshots volume. When empty, uses `emptyDir`. When set, creates a PVC with this storage class | `""`                                                                                                                                                                                                                                             |
-| `tap.snapshots.storageSize`                       | Storage size for snapshots volume (supports K8s quantity format: `1Gi`, `500Mi`, etc.)     | `1Gi`                                                                                                                                                                                                                                            |
+| `tap.snapshots.storageSize`                       | Storage size for snapshots volume (supports K8s quantity format: `1Gi`, `500Mi`, etc.)     | `10Gi`                                                                                                                                                                                                                                            |
 | `tap.release.repo`                        | URL of the Helm chart repository              | `https://helm.kubehq.com`                                                                                                                                                                                                                        |
 | `tap.release.name`                        | Helm release name                             | `kubeshark`                                                                                                                                                                                                                                      |
 | `tap.release.namespace`                   | Helm release namespace                        | `default`                                                                                                                                                                                                                                        |
@@ -221,7 +221,7 @@ Example for overriding image names:
 | `tap.hostNetwork`                         | Enable host network mode for worker DaemonSet pods. When enabled, worker pods use the host's network namespace for direct network access. | `true`                                                                                                                                                                                                                                           |
 | `tap.gitops.enabled`                          | Enable GitOps functionality. This will allow you to use GitOps to manage your Kubeshark configuration. | `false`                                                                                                                                                                                                                                          |
 | `logs.file`                               | Logs dump path                      | `""`                                                                                                                                                                                                                                             |
-| `pcapdump.enabled`                        | Enable recording of all traffic captured according to other parameters. Whatever Kubeshark captures, considering pod targeting rules, will be stored in pcap files ready to be viewed by tools                 | `true`                                                                                                                                                                                                                                           |
+| `pcapdump.enabled`                        | Enable recording of all traffic captured according to other parameters. Whatever Kubeshark captures, considering pod targeting rules, will be stored in pcap files ready to be viewed by tools                 | `false`                                                                                                                                                                                                                                           |
 | `pcapdump.maxTime`                        | The time window into the past that will be stored. Older traffic will be discarded.  | `2h`                                                                                                                                                                                                                                             |
 | `pcapdump.maxSize`                        | The maximum storage size the PCAP files will consume. Old files that cause to surpass storage consumption will get discarded.   | `500MB`                                                                                                                                                                                                                                          |
 | `kube.configPath`                         | Path to the `kubeconfig` file (`$HOME/.kube/config`)            | `""`                                                                                                                                                                                                                                             |
--- a/helm-chart/templates/06-front-deployment.yaml
+++ b/helm-chart/templates/06-front-deployment.yaml
@@ -86,6 +86,8 @@ spec:
              value: '{{ default false .Values.betaEnabled | ternary "true" "false" }}'
            - name: REACT_APP_DISSECTORS_UPDATING_ENABLED
              value: '{{ .Values.tap.liveConfigMapChangesDisabled | ternary "false" "true" }}'
+            - name: REACT_APP_RAW_CAPTURE_ENABLED
+              value: '{{ .Values.tap.capture.raw.enabled | ternary "true" "false" }}'
            - name: REACT_APP_SENTRY_ENABLED
              value: '{{ (include "sentry.enabled" .) }}'
            - name: REACT_APP_SENTRY_ENVIRONMENT
--- a/helm-chart/templates/NOTES.txt
+++ b/helm-chart/templates/NOTES.txt
@@ -42,8 +42,9 @@ To access the application, follow these steps:
 1. Perform port forwarding with the following commands:

    kubectl port-forward -n {{ .Release.Namespace }} service/kubeshark-front 8899:80
+    you could also run: `kubeshark proxy` (which simply manages the port-forward connection)

 2. Once port forwarding is done, you can access the application by visiting the following URL in your web browser:
-    http://0.0.0.0:8899{{ default "" (((.Values.tap).routing).front).basePath }}/
+    http://127.0.0.1:8899{{ default "" (((.Values.tap).routing).front).basePath }}/

 {{- end }}
--- a/helm-chart/values.yaml
+++ b/helm-chart/values.yaml
@@ -1,4 +1,3 @@
-# find a detailed description here: https://github.com/kubeshark/kubeshark/blob/master/helm-chart/README.md
 tap:
  docker:
    registry: docker.io/kubeshark
@@ -30,12 +29,12 @@ tap:
    stopped: false
    stopAfter: 5m
    raw:
-      enabled: false
+      enabled: true
      storageSize: 1Gi
    dbMaxSize: 500Mi
  snapshots:
    storageClass: ""
-    storageSize: 1Gi
+    storageSize: 20Gi
  release:
    repo: https://helm.kubehq.com
    name: kubeshark
@@ -45,7 +44,7 @@ tap:
  persistentStoragePvcVolumeMode: FileSystem
  efsFileSytemIdAndPath: ""
  secrets: []
-  storageLimit: 5Gi
+  storageLimit: 10Gi
  storageClass: standard
  dryRun: false
  dns:
@@ -156,7 +155,7 @@ tap:
  ipv6: true
  debug: false
  dashboard:
-    streamingType: ""
+    streamingType: connect-rpc
    completeStreamingEnabled: true
  telemetry:
    enabled: true
@@ -183,6 +182,8 @@ tap:
  - ldap
  - radius
  - diameter
+  - udp-flow
+  - tcp-flow
  portMapping:
    http:
    - 80
@@ -209,8 +210,8 @@ tap:
    view: flamegraph
  misc:
    jsonTTL: 5m
-    pcapTTL: 10s
-    pcapErrorTTL: 60s
+    pcapTTL: "0"
+    pcapErrorTTL: "0"
    trafficSampleRate: 100
    tcpStreamChannelTimeoutMs: 10000
    tcpStreamChannelTimeoutShow: false
@@ -247,7 +248,7 @@ logs:
  file: ""
  grep: ""
 pcapdump:
-  enabled: true
+  enabled: false
  timeInterval: 1m
  maxTime: 1h
  maxSize: 500MB
@@ -259,7 +260,7 @@ kube:
  context: ""
 dumpLogs: false
 headless: false
-license: ""
+license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
 cloudLicenseEnabled: true
 aiAssistantEnabled: true
 demoModeEnabled: false
--- a/manifests/complete.yaml
+++ b/manifests/complete.yaml
@@ -4,10 +4,10 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  name: kubeshark-hub-network-policy
  namespace: default
@@ -33,10 +33,10 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  annotations:
  name: kubeshark-front-network-policy
@@ -60,10 +60,10 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  annotations:
  name: kubeshark-dex-network-policy
@@ -87,10 +87,10 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  annotations:
  name: kubeshark-worker-network-policy
@@ -116,10 +116,10 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  name: kubeshark-service-account
  namespace: default
@@ -132,13 +132,13 @@ metadata:
  namespace: default
  labels:
    app.kubehq.com/app: hub
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
 stringData:
-    LICENSE: ''
+    LICENSE: 'FN7QGAIBA5GGSY3FNZZWKAP7QAAACAYBARCGC5DBAEFAAAIBKIA77AQAAEAVGAP7QIAAAAAK76AQKAIC76CAAAAA7YAUX74AAH7566ZCMVWWC2LMEI5CE43VOBYG64TUIBVXKYTFNBYS42LPEIWCE5LTMVZESZBCHIRFKMZVPFTFMZT2KVQTGSLZNVLW2MRZON3E23CONNJFCQ2UEIWCEYLDMNSXG42UN5VWK3RCHIRCELBCMVSGS5DJN5XCEORCIVHFIRKSKBJESU2FEIWCE3TPMRSXGIR2GEYDALBCOBXWI4ZCHIYCYITFNZSCEORRG43DQNJYHAZDEMJQGAYCYITJNZUXI2LBNRBWC4DBMNUXI6JCHIYCYITDMFYGCY3JOR4SEORQFQRGC4DQL5UWIIR2EJIDEUDZMZ2E62LQOAZEKY2YLBJHS2LWJZ3WYSTLKVGUQ3JCPUATCAWXCC54FZ7SEN4JX3GWIG2SESYTVKX36RFM36FDMV7ACYHOA2YJOV5OBQWEFAMXJZYD56H2CRV3YDDQCMICRRSPRLCLQTRQF5CJYRGXGJF65WFUMRQZNNX74HMSQPIYUXYAU5PJGXAZBZHEW5XVKRKVITLY6TNXAAA='
    SCRIPTING_ENV: '{}'
    OIDC_CLIENT_ID: 'not set'
    OIDC_CLIENT_SECRET: 'not set'
@@ -151,10 +151,10 @@ metadata:
  namespace: default
  labels:
    app.kubehq.com/app: hub
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
 stringData:
  AUTH_SAML_X509_CRT: |
@@ -167,10 +167,10 @@ metadata:
  namespace: default
  labels:
    app.kubehq.com/app: hub
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
 stringData:
  AUTH_SAML_X509_KEY: |
@@ -182,10 +182,10 @@ metadata:
  name: kubeshark-nginx-config-map
  namespace: default
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
 data:
  default.conf: |
@@ -246,10 +246,10 @@ metadata:
  namespace: default
  labels:
    app.kubehq.com/app: hub
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
 data:
    POD_REGEX: '.*'
@@ -262,7 +262,7 @@ data:
    INGRESS_ENABLED: 'false'
    INGRESS_HOST: 'ks.svc.cluster.local'
    PROXY_FRONT_PORT: '8899'
-    AUTH_ENABLED: 'true'
+    AUTH_ENABLED: 'false'
    AUTH_TYPE: 'default'
    AUTH_SAML_IDP_METADATA_URL: ''
    AUTH_SAML_ROLE_ATTRIBUTE: 'role'
@@ -281,22 +281,22 @@ data:
    DEFAULT_FILTER: ""
    TRAFFIC_SAMPLE_RATE: '100'
    JSON_TTL: '5m'
-    PCAP_TTL: '10s'
-    PCAP_ERROR_TTL: '60s'
+    PCAP_TTL: '0'
+    PCAP_ERROR_TTL: '0'
    TIMEZONE: ' '
-    CLOUD_LICENSE_ENABLED: 'true'
+    CLOUD_LICENSE_ENABLED: 'false'
    AI_ASSISTANT_ENABLED: 'true'
    DUPLICATE_TIMEFRAME: '200ms'
-    ENABLED_DISSECTORS: 'amqp,dns,http,icmp,kafka,redis,ws,ldap,radius,diameter'
+    ENABLED_DISSECTORS: 'amqp,dns,http,icmp,kafka,redis,ws,ldap,radius,diameter,udp-flow,tcp-flow'
    CUSTOM_MACROS: '{"https":"tls and (http or http2)"}'
    DISSECTORS_UPDATING_ENABLED: 'true'
    DETECT_DUPLICATES: 'false'
-    PCAP_DUMP_ENABLE: 'true'
+    PCAP_DUMP_ENABLE: 'false'
    PCAP_TIME_INTERVAL: '1m'
    PCAP_MAX_TIME: '1h'
    PCAP_MAX_SIZE: '500MB'
    PORT_MAPPING: '{"amqp":[5671,5672],"diameter":[3868],"http":[80,443,8080],"kafka":[9092],"ldap":[389],"redis":[6379]}'
-    RAW_CAPTURE: 'false'
+    RAW_CAPTURE: 'true'
    RAW_CAPTURE_STORAGE_SIZE: '1Gi'
 ---
 # Source: kubeshark/templates/02-cluster-role.yaml
@@ -304,10 +304,10 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  name: kubeshark-cluster-role-default
  namespace: default
@@ -351,10 +351,10 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  name: kubeshark-cluster-role-binding-default
  namespace: default
@@ -372,10 +372,10 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  annotations:
  name: kubeshark-self-config-role
@@ -416,10 +416,10 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  annotations:
  name: kubeshark-self-config-role-binding
@@ -439,10 +439,10 @@ kind: Service
 metadata:
  labels:
    app.kubehq.com/app: hub
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  name: kubeshark-hub
  namespace: default
@@ -460,10 +460,10 @@ apiVersion: v1
 kind: Service
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  name: kubeshark-front
  namespace: default
@@ -481,10 +481,10 @@ kind: Service
 apiVersion: v1
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  annotations:
    prometheus.io/scrape: 'true'
@@ -494,10 +494,10 @@ metadata:
 spec:
  selector:
    app.kubehq.com/app: worker
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  ports:
  - name: metrics
@@ -510,10 +510,10 @@ kind: Service
 apiVersion: v1
 metadata:
  labels:
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  annotations:
    prometheus.io/scrape: 'true'
@@ -523,10 +523,10 @@ metadata:
 spec:
  selector:
    app.kubehq.com/app: hub
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  ports:
  - name: metrics
@@ -541,10 +541,10 @@ metadata:
  labels:
    app.kubehq.com/app: worker
    sidecar.istio.io/inject: "false"
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  name: kubeshark-worker-daemon-set
  namespace: default
@@ -558,10 +558,10 @@ spec:
    metadata:
      labels:
        app.kubehq.com/app: worker
-        helm.sh/chart: kubeshark-52.10.0
+        helm.sh/chart: kubeshark-52.11.0
        app.kubernetes.io/name: kubeshark
        app.kubernetes.io/instance: kubeshark
-        app.kubernetes.io/version: "52.10.0"
+        app.kubernetes.io/version: "52.11.0"
        app.kubernetes.io/managed-by: Helm
      name: kubeshark-worker-daemon-set
      namespace: kubeshark
@@ -571,7 +571,7 @@ spec:
          - /bin/sh
          - -c
          - mkdir -p /sys/fs/bpf && mount | grep -q '/sys/fs/bpf' || mount -t bpf bpf /sys/fs/bpf
-          image: 'docker.io/kubeshark/worker:v52.10'
+          image: 'docker.io/kubeshark/worker:v52.11'
          imagePullPolicy: Always
          name: mount-bpf
          securityContext:
@@ -601,10 +601,10 @@ spec:
            - -staletimeout
            - '30'
            - -storage-size
-            - '5Gi'
+            - '10Gi'
            - -capture-db-max-size
            - '500Mi'
-          image: 'docker.io/kubeshark/worker:v52.10'
+          image: 'docker.io/kubeshark/worker:v52.11'
          imagePullPolicy: Always
          name: sniffer
          ports:
@@ -678,7 +678,7 @@ spec:
            - -disable-tls-log
            - -loglevel
            - 'warning'
-          image: 'docker.io/kubeshark/worker:v52.10'
+          image: 'docker.io/kubeshark/worker:v52.11'
          imagePullPolicy: Always
          name: tracer
          env:
@@ -762,7 +762,7 @@ spec:
          name: root
        - name: data
          emptyDir:
-            sizeLimit: 5Gi
+            sizeLimit: 10Gi
 ---
 # Source: kubeshark/templates/04-hub-deployment.yaml
 apiVersion: apps/v1
@@ -770,10 +770,10 @@ kind: Deployment
 metadata:
  labels:
    app.kubehq.com/app: hub
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  name: kubeshark-hub
  namespace: default
@@ -788,10 +788,10 @@ spec:
    metadata:
      labels:
        app.kubehq.com/app: hub
-        helm.sh/chart: kubeshark-52.10.0
+        helm.sh/chart: kubeshark-52.11.0
        app.kubernetes.io/name: kubeshark
        app.kubernetes.io/instance: kubeshark
-        app.kubernetes.io/version: "52.10.0"
+        app.kubernetes.io/version: "52.11.0"
        app.kubernetes.io/managed-by: Helm
    spec:
      dnsPolicy: ClusterFirstWithHostNet
@@ -807,7 +807,7 @@ spec:
            - -capture-stop-after
            - "5m"
            - -snapshot-size-limit
-            - '1Gi'
+            - '20Gi'
          env:
          - name: POD_NAME
            valueFrom:
@@ -825,7 +825,7 @@ spec:
            value: 'https://api.kubehq.com'
          - name: PROFILING_ENABLED
            value: 'false'
-          image: 'docker.io/kubeshark/hub:v52.10'
+          image: 'docker.io/kubeshark/hub:v52.11'
          imagePullPolicy: Always
          readinessProbe:
            periodSeconds: 5
@@ -885,7 +885,7 @@ spec:
                path: kubeshark.key
      - name: snapshots-volume
        emptyDir:
-          sizeLimit: 1Gi
+          sizeLimit: 20Gi
 ---
 # Source: kubeshark/templates/06-front-deployment.yaml
 apiVersion: apps/v1
@@ -893,10 +893,10 @@ kind: Deployment
 metadata:
  labels:
    app.kubehq.com/app: front
-    helm.sh/chart: kubeshark-52.10.0
+    helm.sh/chart: kubeshark-52.11.0
    app.kubernetes.io/name: kubeshark
    app.kubernetes.io/instance: kubeshark
-    app.kubernetes.io/version: "52.10.0"
+    app.kubernetes.io/version: "52.11.0"
    app.kubernetes.io/managed-by: Helm
  name: kubeshark-front
  namespace: default
@@ -911,22 +911,22 @@ spec:
    metadata:
      labels:
        app.kubehq.com/app: front
-        helm.sh/chart: kubeshark-52.10.0
+        helm.sh/chart: kubeshark-52.11.0
        app.kubernetes.io/name: kubeshark
        app.kubernetes.io/instance: kubeshark
-        app.kubernetes.io/version: "52.10.0"
+        app.kubernetes.io/version: "52.11.0"
        app.kubernetes.io/managed-by: Helm
    spec:
      containers:
        - env:
            - name: REACT_APP_AUTH_ENABLED
-              value: 'true'
+              value: 'false'
            - name: REACT_APP_AUTH_TYPE
              value: 'default'
            - name: REACT_APP_COMPLETE_STREAMING_ENABLED
              value: 'true'
            - name: REACT_APP_STREAMING_TYPE
-              value: ''
+              value: 'connect-rpc'
            - name: REACT_APP_AUTH_SAML_IDP_METADATA_URL
              value: ' '
            - name: REACT_APP_TIMEZONE
@@ -944,7 +944,7 @@ spec:
            - name: REACT_APP_STOP_TRAFFIC_CAPTURING_DISABLED
              value: 'false'
            - name: 'REACT_APP_CLOUD_LICENSE_ENABLED'
-              value: 'true'
+              value: '"false"'
            - name: 'REACT_APP_AI_ASSISTANT_ENABLED'
              value: 'true'
            - name: REACT_APP_SUPPORT_CHAT_ENABLED
@@ -953,11 +953,13 @@ spec:
              value: 'false'
            - name: REACT_APP_DISSECTORS_UPDATING_ENABLED
              value: 'true'
+            - name: REACT_APP_RAW_CAPTURE_ENABLED
+              value: 'true'
            - name: REACT_APP_SENTRY_ENABLED
              value: 'false'
            - name: REACT_APP_SENTRY_ENVIRONMENT
              value: 'production'
-          image: 'docker.io/kubeshark/front:v52.10'
+          image: 'docker.io/kubeshark/front:v52.11'
          imagePullPolicy: Always
          name: kubeshark-front
          livenessProbe:
--- a/misc/consts.go
+++ b/misc/consts.go
@@ -10,7 +10,7 @@ var (
 	Software       = "Kubeshark"
 	Program        = "kubeshark"
 	Description    = "The API Traffic Analyzer for Kubernetes"
-	Website        = "https://kubehq.com"
+	Website        = "https://www.kubehq.com"
 	Email          = "support@kubehq.io"
 	Ver            = "0.0.0"
 	Branch         = "master"
Author	SHA1	Message	Date
Alon Girmonsky	6645e23704	🔖 Bump the Helm chart version to 52.11.0	2025-12-16 11:49:37 -08:00
Alon Girmonsky	b7190162ec	In preparation for v200 (#1815 ) * In preparation for v200 * updated README * Enable raw capture * changed 0.0.0.0 to 127.0.0.1 as 0.0.0.0 is insecure address * added tip: kubeshark proxy * added new TCP/UDP connection dissectors Set API2 as the default * increased storageLimit per worker. * Updated makefile * updated the complementary license to the end of Jan 2026. * readme touch ups * Updated snapshot image * updated license removed dashboard subproject	2025-12-16 11:44:02 -08:00
Alon Girmonsky	9570b2e317	Update README.md (#1814 )	2025-12-05 08:27:25 -08:00
Serhii Ponomarenko	b98113a2b5	🔨 Create raw-capture-enabled `front` env (#1813 )	2025-12-01 16:02:19 -08:00
Alon Girmonsky	9724a0c279	🔖 Bump the Helm chart version to 52.10.3	2025-11-28 17:12:22 -08:00
Alon Girmonsky	47ac96a71b	Adding a default license (#1812 )	2025-11-28 17:06:48 -08:00
Serhii Ponomarenko	4dea643781	🚑 Use `www.kubehq.com` for links (#1809 )	2025-11-26 08:14:40 -08:00