Commit Graph

  • 70fe266bf1 Add required top-level 'owner' field to marketplace.json fix/marketplace-owner-field Volodymyr Stoiko 2026-07-06 11:17:55 +00:00
  • db6f7de8c7 cli/mcp: address Copilot review (token fallback, SSO redirects, messages) gated-auth Volodymyr Stoiko 2026-06-16 20:55:22 +00:00
  • e25892ee52 cli: silence unused linter on retained console helpers cli-console-refactoring-note Volodymyr Stoiko 2026-06-16 20:11:32 +00:00
  • 4abe675b74 docs(mcp): document gated-Hub auth — --token for URL mode, proxy auto-renew Volodymyr Stoiko 2026-06-16 20:03:43 +00:00
  • c94059af60 cli: early-exit 'console' while under refactoring Volodymyr Stoiko 2026-06-16 20:00:17 +00:00
  • bec7ffae1c cli/mcp: authenticate --list-tools with the hub token source Volodymyr Stoiko 2026-06-16 19:55:41 +00:00
  • 89979e3aec cli/mcp: throttle hub-token re-mint on failure; accurate proxy 401 message Volodymyr Stoiko 2026-06-16 19:16:16 +00:00
  • 04d7b04c19 cli/mcp: auto-renew hub token in proxy mode; explicit token + clear expiry in --url mode Volodymyr Stoiko 2026-06-16 19:08:03 +00:00
  • eefa1dc7cc cli: mark 'console' as non-functional / under refactoring Volodymyr Stoiko 2026-06-16 18:35:56 +00:00
  • a306678c7f helm: project kubeshark-hub SA token onto worker for internalauth (gated-auth) Volodymyr Stoiko 2026-06-16 14:30:36 +00:00
  • a8422e3a4b Merge permissions-refactoring (#1942) into gated-auth Volodymyr Stoiko 2026-06-16 11:09:38 +00:00
  • c7fe7f4ce5 helm: render AUTH_GROUP_MAPPING in the hub config-map cli-sa-auth Volodymyr Stoiko 2026-06-15 22:56:31 +00:00
  • dba8867fb5 helm: kubeshark-cli ServiceAccount + token-minter RBAC + allowlist (phase 2a) Volodymyr Stoiko 2026-06-15 21:57:28 +00:00
  • 1c3e99d823 cli: authenticate console ws with the ServiceAccount token (phase 2a) Volodymyr Stoiko 2026-06-15 21:57:27 +00:00
  • 7c67abc3fd cli: mint a ServiceAccount token for gated Hub auth (phase 2a) Volodymyr Stoiko 2026-06-15 21:47:07 +00:00
  • 6ba67ef3f5 cli: authenticate Hub HTTP requests with License-Key (gated-auth phase 1) Volodymyr Stoiko 2026-06-15 20:59:27 +00:00
  • 7bfc43295a chore: drop internal plan ref from auth config comment permissions-refactoring Volodymyr Stoiko 2026-06-03 18:01:08 +00:00
  • 879b4b1e7b Merge branch 'master' into permissions-refactoring Volodymyr Stoiko 2026-06-01 10:14:13 +00:00
  • 9396e64b9b Fix tool-to-section mapping in security-audit skill (#1940) master Alon Girmonsky 2026-05-21 06:52:09 -07:00
  • b5e59321e0 Remove auto-tag workflow; make release-tag idempotent (#1938) Alon Girmonsky 2026-05-20 00:04:42 -07:00
  • c1dbbd2386 Replace HTML embeds with image placeholders in security-audit README security-audit-demo Alon Girmonsky 2026-05-19 22:37:24 -07:00
  • 35dea1bc9a Add security-audit skill README with demo session and sample report Alon Girmonsky 2026-05-19 22:13:09 -07:00
  • f97866f747 🔖 Release v53.3.0 (#1937) v53.3.0 Alon Girmonsky 2026-05-19 02:00:17 -07:00
  • e948637f79 Revert "auth: emit CHART_VERSION into hub ConfigMap (Phase V)" Volodymyr Stoiko 2026-05-19 06:23:16 +00:00
  • b2a0fb0cea Add L7 data boundaries MCP tool, API endpoint and frontend LIVE filter button (#1935) Ilya Gavrilov 2026-05-19 07:53:01 +02:00
  • c21e4c4276 auth: emit CHART_VERSION into hub ConfigMap (Phase V) Volodymyr Stoiko 2026-05-18 22:11:34 +00:00
  • 9445806002 auth: add tap.auth.roles operator-defined role catalogue Volodymyr Stoiko 2026-05-18 21:35:13 +00:00
  • 2475f6e260 Add PostgreSQL protocol support to KFL skill (#1936) Alon Girmonsky 2026-05-18 02:25:04 -07:00
  • 90a6fb3d40 auth: set helm default role to kubeshark-viewer Volodymyr Stoiko 2026-05-17 21:34:50 +00:00
  • cd13d8f89e Add security-audit skill for MITRE ATT&CK-based threat detection (#1934) Alon Girmonsky 2026-05-15 10:16:37 -07:00
  • ad9dfbf5f9 Add install skill for Kubeshark deployment guidance (#1933) Alon Girmonsky 2026-05-15 08:31:33 -07:00
  • fd5bf8c1b5 auth: drop AUTH_ROLES; add AUTH_GROUP_MAPPING + built-in defaultRole Volodymyr Stoiko 2026-05-14 21:04:48 +00:00
  • ed1d2e1a4d Enable tlsx dissector by default (#1928) Alon Girmonsky 2026-05-14 11:40:02 -07:00
  • 7b5954ea00 helm: grant hub tokenreviews and label worker pods for internal auth (#1926) Volodymyr Stoiko 2026-05-13 20:53:20 +03:00
  • 8186b7891b Authz refactoring (helm chart + CLI) (#1921) Volodymyr Stoiko 2026-05-06 19:08:21 +03:00
  • ab81b0c3a7 🔖 Bump the Helm chart version to 53.2.5 (#1920) v53.2.5 Alon Girmonsky 2026-05-01 13:36:38 -07:00
  • 9f5a1a41c0 fix(release-pr): sync bumped Chart.yaml to kubeshark.github.io (#1913) Alon Girmonsky 2026-05-01 10:07:20 -07:00
  • fef3e8fb05 Add PostgreSQL protocol configuration (#1919) Alon Girmonsky 2026-04-29 12:59:11 +03:00
  • 7ae81ccc4b Add MySQL protocol to default configuration (#1916) Alon Girmonsky 2026-04-28 15:49:44 +03:00
  • 27111e48d3 🔨 Create dashboard entries-limit helm value (#1914) Serhii Ponomarenko 2026-04-23 18:20:22 +03:00
  • 1d9a340b0f Adde an option for debug offests debug-offests alongir 2026-04-23 12:24:59 +03:00
  • 863be8f47a 🔖 Bump the Helm chart version to 53.2.3 (#1912) v53.2.3 Alon Girmonsky 2026-04-20 16:39:25 +03:00
  • 9e4059bc4d 🔨 Set nginx proxy-buffer directives (#1909) Serhii Ponomarenko 2026-04-18 08:07:47 +03:00
  • 5ee21b76e9 🔨 Add defaults for nginx proxy helm values nginx-proxy-buffer-values tiptophelmet 2026-04-16 18:22:15 +03:00
  • dfe3673132 Merge branch 'master' into nginx-proxy-buffer-values Serhii Ponomarenko 2026-04-16 15:25:14 +03:00
  • f79885bd35 🔖 Release v53.2.2 (#1908) v53.2.2 Alon Girmonsky 2026-04-14 01:21:58 -07:00
  • 5349df0fb8 Merge branch 'master' into nginx-proxy-buffer-values Serhii Ponomarenko 2026-04-13 19:22:18 +03:00
  • 6762f54eaf 🔨 Create helm values for nginx proxy settings tiptophelmet 2026-04-13 19:20:33 +03:00
  • 31129e570a Provide external volume for dissection job (#1905) Volodymyr Stoiko 2026-04-10 19:51:44 +03:00
  • 3a1ad64b4c fix: add subPathExpr to worker DaemonSet for shared persistent storage (#1901) theechofive 2026-04-10 19:23:31 +03:00
  • fa03da2fd4 Enable MongoDB protocol dissector (#1903) Alon Girmonsky 2026-04-08 08:05:13 -07:00
  • 4de0ac6abd refactor: replace Split in loops with more efficient SplitSeq and gofmt the code (#1888) stringsbuilder 2026-04-07 12:07:50 +08:00
  • 9b5ac2821f Network RCA skill: update resolution tools to list_workloads/list_ips (#1887) Alon Girmonsky 2026-04-06 12:40:34 -07:00
  • 1ba6ed94e0 💄 Improve README with AI skills, KFL semantics, and cloud storage (#1892) Alon Girmonsky 2026-04-02 18:38:13 -07:00
  • 4695acb41e 🐛 Fix release-pr Makefile target cleanup and macOS sed compatibility (#1890) v53.2.0 Alon Girmonsky 2026-03-31 12:05:21 -07:00
  • b80723edfb 🔖 Bump the Helm chart version to 53.2.0 (#1889) Alon Girmonsky 2026-03-31 11:30:42 -07:00
  • ddc2e57f12 Network RCA skill: use local timezone instead of UTC (#1880) Alon Girmonsky 2026-03-24 12:03:05 -07:00
  • e80fc3319b Revamp README descriptions and structure (#1881) Alon Girmonsky 2026-03-23 08:33:27 -07:00
  • 868b4c1f36 Verify hub/front pods are ready by conditions (#1864) Volodymyr Stoiko 2026-03-22 02:33:48 +02:00
  • c63740ec45 🐛 Fix dissection-control front env logic (#1878) Serhii Ponomarenko 2026-03-20 17:20:53 +02:00
  • 37f8becb7b Update label examples: direct access and map_get, note indexed queries fix-kfl-labels Alon Girmonsky 2026-03-18 17:11:35 -07:00
  • 10dbedf356 Add KFL and Network RCA skills (#1875) Alon Girmonsky 2026-03-18 15:31:32 -07:00
  • 963b3e4ac2 🐛 Add default value for demoModeEnabled (#1872) Serhii Ponomarenko 2026-03-17 22:22:42 +02:00
  • b7f61de935 🐛 Add default value for demoModeEnabled readonly-demo-portal tiptophelmet 2026-03-17 18:36:36 +02:00
  • b2813e02bd Add detailed docs for kubeshark irsa setup (#1871) Volodymyr Stoiko 2026-03-17 05:29:49 +02:00
  • 707d7351b6 🛂 Demo Portal: Readonly mode / no authn (#1869) Serhii Ponomarenko 2026-03-17 05:01:18 +02:00
  • 714a63ab12 🦺 Handle nullish demoModeEnabled value tiptophelmet 2026-03-16 22:09:16 +02:00
  • f50dcb8ead 🐛 Fix dissection-control-enabled env logic tiptophelmet 2026-03-16 12:50:05 +02:00
  • 0070aaf3eb 🔨 Replace liveConfigMapChangesDisabled with demoModeEnabled flag tiptophelmet 2026-03-14 01:16:45 +02:00
  • 86223a4698 🔨 Add demo-enabled config tiptophelmet 2026-03-13 14:01:38 +02:00
  • 4f7af0e90d 🔨 Add demo-enabled front env tiptophelmet 2026-03-13 14:01:28 +02:00
  • ebb4f6e3e6 🔨 Add snapshots-updating-enabled config tiptophelmet 2026-03-12 15:26:33 +02:00
  • 1e63b67245 🔨 Add snapshots-updating-enabled front env tiptophelmet 2026-03-12 15:26:10 +02:00
  • 23c86be773 🛂 Control L4 map visibility (helm value) (#1866) Serhii Ponomarenko 2026-03-12 00:36:20 +02:00
  • 7464087798 Restructure README: captures/processes/retains, cluster-wide PCAP update/readme-pcap Alon Girmonsky 2026-03-09 11:39:58 -07:00
  • 3f8a067f9b Update README: Network Observability for SREs & AI Agents (#1861) Alon Girmonsky 2026-03-09 08:29:52 -07:00
  • 33f5310e8e Add gcs cloudstorage configuration docs (#1862) Volodymyr Stoiko 2026-03-09 16:48:17 +02:00
  • 5f2f34e826 Sync helm-chart README with current values.yaml (#1856) Alon Girmonsky 2026-03-06 11:52:10 -08:00
  • f9a5fbbb78 Fix snapshots local storage size (#1859) Volodymyr Stoiko 2026-03-06 18:33:59 +02:00
  • 73f8e3585d Cloud storage explicit config (#1858) Volodymyr Stoiko 2026-03-06 18:27:08 +02:00
  • 359300b3d0 added local verb fix-hub-snapshot-size Alon Girmonsky 2026-03-06 08:23:59 -08:00
  • a6daefc567 Fix MCP Registry publish by using OIDC auth instead of interactive OAuth (#1857) Alon Girmonsky 2026-03-06 08:04:26 -08:00
  • e6a67cc3b7 🔖 Release v53.1.0 (#1854) v53.1.0 Alon Girmonsky 2026-03-05 08:25:59 -08:00
  • eb7dc42b6e Add get_file_url and download_file MCP tools (#1853) Alon Girmonsky 2026-03-04 09:17:23 -08:00
  • d266408377 Add snapshots cloud storage (#1852) Volodymyr Stoiko 2026-03-04 18:50:45 +02:00
  • 40ae6c626b chore: remove duplicate package import (#1800) sunnyraindy 2026-03-05 00:39:32 +08:00
  • e3283327f9 Add --release-helmChartPath CLI flag for local Helm chart support (#1851) Alon Girmonsky 2026-03-04 08:29:04 -08:00
  • a46f05c4aa Revert "Add get_file_url and download_file MCP tools" Alon Girmonsky 2026-03-03 15:06:52 -08:00
  • dbfd17d901 Add get_file_url and download_file MCP tools Alon Girmonsky 2026-03-03 14:54:39 -08:00
  • 95c18b57a4 Use dissection image tag from worker (#1850) Volodymyr Stoiko 2026-02-25 21:41:50 +02:00
  • 6fd2e4b1b2 updated gitignore (#1849) Alon Girmonsky 2026-02-18 11:52:13 -08:00
  • 686c7eba54 Adjust nginx config to work with large download/upload snapshots (#1848) Volodymyr Stoiko 2026-02-18 20:48:57 +02:00
  • 1ad61798f6 Set tcp and udp flows timeouts. Default is 20 minutes (#1847) Ilya Gavrilov 2026-02-18 01:50:13 +01:00
  • ea9bb872a4 Improve nginx config for streaming nginx-streaming-fix Volodymyr Stoiko 2026-02-16 13:43:29 +00:00
  • 318b35e785 Update README and fix broken links (#1846) Alon Girmonsky 2026-02-13 15:43:04 -08:00
  • fecf290a25 Rename generic capture to l7 dissection specific config (#1841) Volodymyr Stoiko 2026-02-11 21:27:37 +02:00
  • a01f7bed74 Update README with new structure and AI focus (#1844) Alon Girmonsky 2026-02-10 10:40:48 -08:00
  • 633a17a0e0 🔧 Add REACT_APP_SCRIPTING_HIDDEN front env (#1845) Serhii Ponomarenko 2026-02-09 23:39:33 +02:00
  • 8fac9a5ad5 Fix MCP Hub API tool call field name (#1842) Alon Girmonsky 2026-02-09 13:03:51 -08:00
  • 76c5eb6b59 Rename flow and full_flow to conn and flow (#1838) Ilya Gavrilov 2026-02-09 22:01:24 +01:00