Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kubeshark-cli for openSUSE:Factory checked in at 2026-10-24 22:04:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kubeshark-cli (Old) and /work/SRC/openSUSE:Factory/.kubeshark-cli.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kubeshark-cli" Sat Oct 24 22:04:05 2026 rev:37 rq:1392091 version:53.6.0 Changes: -------- --- /work/SRC/openSUSE:Factory/kubeshark-cli/kubeshark-cli.changes 2026-10-08 11:59:44.722864611 +0200 +++ /work/SRC/openSUSE:Factory/.kubeshark-cli.new.2252680/kubeshark-cli.changes 2026-10-24 22:05:36.490068597 +0200 @@ -1,0 +2,6 @@ +Fri Oct 23 16:05:40 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 53.6.0: + No CLI-related changes or dependency updates in the changelog + +------------------------------------------------------------------- Old: ---- kubeshark-cli-53.5.0.obscpio New: ---- kubeshark-cli-53.6.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kubeshark-cli.spec ++++++ --- /var/tmp/diff_new_pack.QCkYmp/_old 2026-10-24 22:05:38.434150864 +0200 +++ /var/tmp/diff_new_pack.QCkYmp/_new 2026-10-24 22:05:38.436150948 +0200 @@ -19,7 +19,7 @@ %define executable_name kubeshark Name: kubeshark-cli -Version: 53.5.0 +Version: 53.6.0 Release: 0 Summary: CLI for the API traffic analyzer for Kubernetes License: Apache-2.0 @@ -29,7 +29,7 @@ BuildRequires: bash-completion BuildRequires: fish BuildRequires: zsh -BuildRequires: golang(API) >= 1.24 +BuildRequires: golang(API) >= 1.25 %description Kubeshark is an API Traffic Analyzer for Kubernetes providing real-time, ++++++ _service ++++++ --- /var/tmp/diff_new_pack.QCkYmp/_old 2026-10-24 22:05:38.510154080 +0200 +++ /var/tmp/diff_new_pack.QCkYmp/_new 2026-10-24 22:05:38.514154249 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/kubeshark/kubeshark.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v53.5.0</param> + <param name="revision">refs/tags/v53.6.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.QCkYmp/_old 2026-10-24 22:05:38.560156196 +0200 +++ /var/tmp/diff_new_pack.QCkYmp/_new 2026-10-24 22:05:38.571156661 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/kubeshark/kubeshark</param> <param name="changesrevision">f97866f7471cc5288c0e168ab1c42ddceb0bfc57</param></service><service name="tar_scm"> <param name="url">https://github.com/kubeshark/kubeshark.git</param> - <param name="changesrevision">224b045eb5c7061964147b98bb8de30a481bd255</param></service></servicedata> + <param name="changesrevision">b79aa01afc280f4b377c36ad96527b8d063dbfb7</param></service></servicedata> (No newline at EOF) ++++++ kubeshark-cli-53.5.0.obscpio -> kubeshark-cli-53.6.0.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeshark-cli-53.5.0/config/configStructs/tapConfig.go new/kubeshark-cli-53.6.0/config/configStructs/tapConfig.go --- old/kubeshark-cli-53.5.0/config/configStructs/tapConfig.go 2026-10-07 16:58:21.000000000 +0200 +++ new/kubeshark-cli-53.6.0/config/configStructs/tapConfig.go 2026-10-21 09:55:49.000000000 +0200 @@ -393,14 +393,15 @@ } type SnapshotsCloudS3Config struct { - Bucket string `yaml:"bucket" json:"bucket" default:""` - Region string `yaml:"region" json:"region" default:""` - AccessKey string `yaml:"accessKey" json:"accessKey" default:""` - SecretKey string `yaml:"secretKey" json:"secretKey" default:""` - RoleArn string `yaml:"roleArn" json:"roleArn" default:""` - ExternalId string `yaml:"externalId" json:"externalId" default:""` - Endpoint string `yaml:"endpoint" json:"endpoint" default:""` - ForcePathStyle bool `yaml:"forcePathStyle" json:"forcePathStyle" default:"false"` + Bucket string `yaml:"bucket" json:"bucket" default:""` + Region string `yaml:"region" json:"region" default:""` + AccessKey string `yaml:"accessKey" json:"accessKey" default:""` + SecretKey string `yaml:"secretKey" json:"secretKey" default:""` + RoleArn string `yaml:"roleArn" json:"roleArn" default:""` + ExternalId string `yaml:"externalId" json:"externalId" default:""` + Endpoint string `yaml:"endpoint" json:"endpoint" default:""` + ForcePathStyle bool `yaml:"forcePathStyle" json:"forcePathStyle" default:"false"` + InsecureSkipVerify bool `yaml:"insecureSkipVerify" json:"insecureSkipVerify" default:"false"` } type SnapshotsCloudAzblobConfig struct { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeshark-cli-53.5.0/helm-chart/Chart.yaml new/kubeshark-cli-53.6.0/helm-chart/Chart.yaml --- old/kubeshark-cli-53.5.0/helm-chart/Chart.yaml 2026-10-07 16:58:21.000000000 +0200 +++ new/kubeshark-cli-53.6.0/helm-chart/Chart.yaml 2026-10-21 09:55:49.000000000 +0200 @@ -1,6 +1,6 @@ apiVersion: v2 name: kubeshark -version: "53.5.0" +version: "53.6.0" description: The API Traffic Analyzer for Kubernetes home: https://kubeshark.com keywords: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeshark-cli-53.5.0/helm-chart/README.md new/kubeshark-cli-53.6.0/helm-chart/README.md --- old/kubeshark-cli-53.5.0/helm-chart/README.md 2026-10-07 16:58:21.000000000 +0200 +++ new/kubeshark-cli-53.6.0/helm-chart/README.md 2026-10-21 09:55:49.000000000 +0200 @@ -203,6 +203,7 @@ | `tap.snapshots.cloud.s3.externalId` | External ID for the STS AssumeRole call. | `""` | | `tap.snapshots.cloud.s3.endpoint` | Custom endpoint URL for S3-compatible storage (NetApp StorageGRID, Dell ECS, MinIO). When set, the chart adds `SNAPSHOT_AWS_ENDPOINT` to the ConfigMap. | `""` | | `tap.snapshots.cloud.s3.forcePathStyle` | Use path-style bucket addressing (`endpoint/bucket/key`). Required by most S3-compatible stores without wildcard DNS. | `false` | +| `tap.snapshots.cloud.s3.insecureSkipVerify` | Skip TLS certificate verification for the custom `endpoint`. Use when the store presents a certificate from a private CA the hub does not trust. | `false` | | `tap.snapshots.cloud.azblob.storageAccount` | Azure storage account name. When set, the chart auto-creates a ConfigMap with `SNAPSHOT_AZBLOB_STORAGE_ACCOUNT`. | `""` | | `tap.snapshots.cloud.azblob.container` | Azure blob container name. | `""` | | `tap.snapshots.cloud.azblob.storageKey` | Azure storage account access key. When set, the chart auto-creates a Secret with `SNAPSHOT_AZBLOB_STORAGE_KEY`. | `""` | @@ -316,6 +317,7 @@ | `dumpLogs` | Enable dumping of logs | `false` | | `headless` | Enable running in headless mode | `false` | | `license` | License key for the Pro/Enterprise edition | `""` | +| `logLevel` | Log verbosity for the Hub, sniffer and tracer. One of `error`, `warning`, `info`, `debug`, `trace`. `trace` logs per-request authorization detail, including the OIDC subject and group memberships, so treat it as a diagnostic setting rather than a steady-state one. | `warning` | | `scripting.enabled` | Enables scripting. Also gates the scripting API: when `false` the Hub answers `/scripts`, `/scripts/exec`, `/jobs` and the AI assistant with 409, and the dashboard hides the scripting UI. Scripting is deployment-wide rather than a per-role capability, so this is the only switch that closes it. | `false` | | `scripting.env` | Environment variables for the scripting | `{}` | | `scripting.source` | Source directory of the scripts | `""` | diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeshark-cli-53.5.0/helm-chart/docs/snapshots_cloud_storage.md new/kubeshark-cli-53.6.0/helm-chart/docs/snapshots_cloud_storage.md --- old/kubeshark-cli-53.5.0/helm-chart/docs/snapshots_cloud_storage.md 2026-10-07 16:58:21.000000000 +0200 +++ new/kubeshark-cli-53.6.0/helm-chart/docs/snapshots_cloud_storage.md 2026-10-21 09:55:49.000000000 +0200 @@ -23,6 +23,7 @@ externalId: "" endpoint: "" forcePathStyle: false + insecureSkipVerify: false azblob: storageAccount: "" container: "" @@ -58,6 +59,7 @@ | `SNAPSHOT_AWS_EXTERNAL_ID` | No | External ID for the STS AssumeRole call | | `SNAPSHOT_AWS_ENDPOINT` | No | Custom endpoint URL for S3-compatible storage (empty = Amazon S3) | | `SNAPSHOT_AWS_FORCE_PATH_STYLE` | No | `true` to address buckets as `endpoint/bucket/key` instead of `bucket.endpoint/key` | +| `SNAPSHOT_AWS_INSECURE_SKIP_VERIFY` | No | `true` to skip TLS certificate verification for the custom endpoint | | `SNAPSHOT_CLOUD_PREFIX` | No | Key prefix in the bucket (e.g. `snapshots/`) | ### Authentication Methods @@ -278,6 +280,7 @@ - `endpoint` points the hub at the store's S3 gateway instead of Amazon S3. - `forcePathStyle` addresses buckets as `https://endpoint/bucket/key`. Most on-prem stores need this unless wildcard DNS is configured for `bucket.endpoint`. +- `insecureSkipVerify` disables TLS certificate verification for the endpoint. Set it when the store's certificate is signed by a private CA and the hub fails with `x509: certificate signed by unknown authority`. It applies only to the S3 endpoint, not to the STS call. `region` is used only for request signing. When `endpoint` is set and `region` is empty, the hub uses `us-east-1`, which is the default region on StorageGRID, ECS and MinIO. Set it explicitly if the store is configured with a different region name. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeshark-cli-53.5.0/helm-chart/templates/04-hub-deployment.yaml new/kubeshark-cli-53.6.0/helm-chart/templates/04-hub-deployment.yaml --- old/kubeshark-cli-53.5.0/helm-chart/templates/04-hub-deployment.yaml 2026-10-07 16:58:21.000000000 +0200 +++ new/kubeshark-cli-53.6.0/helm-chart/templates/04-hub-deployment.yaml 2026-10-21 09:55:49.000000000 +0200 @@ -79,7 +79,7 @@ - -cloud-storage-provider - '{{ .Values.tap.snapshots.cloud.provider }}' {{- end }} - {{- $hasInlineConfig := or .Values.tap.snapshots.cloud.prefix .Values.tap.snapshots.cloud.s3.bucket .Values.tap.snapshots.cloud.s3.region .Values.tap.snapshots.cloud.s3.roleArn .Values.tap.snapshots.cloud.s3.externalId .Values.tap.snapshots.cloud.s3.endpoint .Values.tap.snapshots.cloud.s3.forcePathStyle .Values.tap.snapshots.cloud.azblob.storageAccount .Values.tap.snapshots.cloud.azblob.container .Values.tap.snapshots.cloud.gcs.bucket .Values.tap.snapshots.cloud.gcs.project }} + {{- $hasInlineConfig := or .Values.tap.snapshots.cloud.prefix .Values.tap.snapshots.cloud.s3.bucket .Values.tap.snapshots.cloud.s3.region .Values.tap.snapshots.cloud.s3.roleArn .Values.tap.snapshots.cloud.s3.externalId .Values.tap.snapshots.cloud.s3.endpoint .Values.tap.snapshots.cloud.s3.forcePathStyle .Values.tap.snapshots.cloud.s3.insecureSkipVerify .Values.tap.snapshots.cloud.azblob.storageAccount .Values.tap.snapshots.cloud.azblob.container .Values.tap.snapshots.cloud.gcs.bucket .Values.tap.snapshots.cloud.gcs.project }} {{- $hasInlineSecrets := or .Values.tap.snapshots.cloud.s3.accessKey .Values.tap.snapshots.cloud.s3.secretKey .Values.tap.snapshots.cloud.azblob.storageKey .Values.tap.snapshots.cloud.gcs.credentialsJson }} {{- if or .Values.tap.secrets .Values.tap.snapshots.cloud.configMaps .Values.tap.snapshots.cloud.secrets $hasInlineConfig $hasInlineSecrets }} envFrom: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeshark-cli-53.5.0/helm-chart/templates/21-cloud-storage.yaml new/kubeshark-cli-53.6.0/helm-chart/templates/21-cloud-storage.yaml --- old/kubeshark-cli-53.5.0/helm-chart/templates/21-cloud-storage.yaml 2026-10-07 16:58:21.000000000 +0200 +++ new/kubeshark-cli-53.6.0/helm-chart/templates/21-cloud-storage.yaml 2026-10-21 09:55:49.000000000 +0200 @@ -1,4 +1,4 @@ -{{- $hasConfigValues := or .Values.tap.snapshots.cloud.prefix .Values.tap.snapshots.cloud.s3.bucket .Values.tap.snapshots.cloud.s3.region .Values.tap.snapshots.cloud.s3.roleArn .Values.tap.snapshots.cloud.s3.externalId .Values.tap.snapshots.cloud.s3.endpoint .Values.tap.snapshots.cloud.s3.forcePathStyle .Values.tap.snapshots.cloud.azblob.storageAccount .Values.tap.snapshots.cloud.azblob.container .Values.tap.snapshots.cloud.gcs.bucket .Values.tap.snapshots.cloud.gcs.project -}} +{{- $hasConfigValues := or .Values.tap.snapshots.cloud.prefix .Values.tap.snapshots.cloud.s3.bucket .Values.tap.snapshots.cloud.s3.region .Values.tap.snapshots.cloud.s3.roleArn .Values.tap.snapshots.cloud.s3.externalId .Values.tap.snapshots.cloud.s3.endpoint .Values.tap.snapshots.cloud.s3.forcePathStyle .Values.tap.snapshots.cloud.s3.insecureSkipVerify .Values.tap.snapshots.cloud.azblob.storageAccount .Values.tap.snapshots.cloud.azblob.container .Values.tap.snapshots.cloud.gcs.bucket .Values.tap.snapshots.cloud.gcs.project -}} {{- $hasSecretValues := or .Values.tap.snapshots.cloud.s3.accessKey .Values.tap.snapshots.cloud.s3.secretKey .Values.tap.snapshots.cloud.azblob.storageKey .Values.tap.snapshots.cloud.gcs.credentialsJson -}} {{- if $hasConfigValues }} --- @@ -31,6 +31,9 @@ {{- if .Values.tap.snapshots.cloud.s3.forcePathStyle }} SNAPSHOT_AWS_FORCE_PATH_STYLE: "true" {{- end }} + {{- if .Values.tap.snapshots.cloud.s3.insecureSkipVerify }} + SNAPSHOT_AWS_INSECURE_SKIP_VERIFY: "true" + {{- end }} {{- if .Values.tap.snapshots.cloud.azblob.storageAccount }} SNAPSHOT_AZBLOB_STORAGE_ACCOUNT: {{ .Values.tap.snapshots.cloud.azblob.storageAccount | quote }} {{- end }} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeshark-cli-53.5.0/helm-chart/tests/cloud_storage_test.yaml new/kubeshark-cli-53.6.0/helm-chart/tests/cloud_storage_test.yaml --- old/kubeshark-cli-53.5.0/helm-chart/tests/cloud_storage_test.yaml 2026-10-07 16:58:21.000000000 +0200 +++ new/kubeshark-cli-53.6.0/helm-chart/tests/cloud_storage_test.yaml 2026-10-21 09:55:49.000000000 +0200 @@ -263,6 +263,29 @@ path: data.SNAPSHOT_AWS_FORCE_PATH_STYLE documentIndex: 0 + - it: should render skip-verify flag for a self-signed S3-compatible endpoint + set: + tap.snapshots.cloud.s3.bucket: my-bucket + tap.snapshots.cloud.s3.endpoint: https://s3.storagegrid.example.com:10443 + tap.snapshots.cloud.s3.insecureSkipVerify: true + asserts: + - hasDocuments: + count: 1 + - equal: + path: data.SNAPSHOT_AWS_INSECURE_SKIP_VERIFY + value: "true" + documentIndex: 0 + + - it: should omit skip-verify flag when disabled + set: + tap.snapshots.cloud.s3.bucket: my-bucket + tap.snapshots.cloud.s3.endpoint: https://s3.storagegrid.example.com:10443 + tap.snapshots.cloud.s3.insecureSkipVerify: false + asserts: + - notExists: + path: data.SNAPSHOT_AWS_INSECURE_SKIP_VERIFY + documentIndex: 0 + - it: should set correct namespace release: namespace: kubeshark-ns diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeshark-cli-53.5.0/helm-chart/values.yaml new/kubeshark-cli-53.6.0/helm-chart/values.yaml --- old/kubeshark-cli-53.5.0/helm-chart/values.yaml 2026-10-07 16:58:21.000000000 +0200 +++ new/kubeshark-cli-53.6.0/helm-chart/values.yaml 2026-10-21 09:55:49.000000000 +0200 @@ -57,6 +57,7 @@ externalId: "" endpoint: "" forcePathStyle: false + insecureSkipVerify: false azblob: storageAccount: "" container: "" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeshark-cli-53.5.0/manifests/complete.yaml new/kubeshark-cli-53.6.0/manifests/complete.yaml --- old/kubeshark-cli-53.5.0/manifests/complete.yaml 2026-10-07 16:58:21.000000000 +0200 +++ new/kubeshark-cli-53.6.0/manifests/complete.yaml 2026-10-21 09:55:49.000000000 +0200 @@ -4,10 +4,10 @@ kind: NetworkPolicy metadata: labels: - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm name: kubeshark-hub-network-policy namespace: default @@ -34,10 +34,10 @@ kind: NetworkPolicy metadata: labels: - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm annotations: name: kubeshark-front-network-policy @@ -62,10 +62,10 @@ kind: NetworkPolicy metadata: labels: - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm annotations: name: kubeshark-dex-network-policy @@ -90,10 +90,10 @@ kind: NetworkPolicy metadata: labels: - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm annotations: name: kubeshark-worker-network-policy @@ -120,10 +120,10 @@ kind: ServiceAccount metadata: labels: - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm name: kubeshark-service-account namespace: default @@ -137,10 +137,10 @@ namespace: default labels: app.kubeshark.com/app: hub - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm stringData: LICENSE: '' @@ -158,10 +158,10 @@ namespace: default labels: app.kubeshark.com/app: hub - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm stringData: AUTH_SAML_X509_CRT: | @@ -178,10 +178,10 @@ namespace: default labels: app.kubeshark.com/app: hub - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm stringData: AUTH_SAML_X509_KEY: | @@ -197,10 +197,10 @@ name: kubeshark-nginx-config-map namespace: default labels: - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm data: default.conf: | @@ -268,10 +268,10 @@ namespace: default labels: app.kubeshark.com/app: hub - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm data: POD_REGEX: '.*' @@ -326,10 +326,10 @@ kind: ClusterRole metadata: labels: - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm name: kubeshark-cluster-role-default namespace: default @@ -380,10 +380,10 @@ kind: ClusterRoleBinding metadata: labels: - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm name: kubeshark-cluster-role-binding-default namespace: default @@ -402,10 +402,10 @@ kind: Role metadata: labels: - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm annotations: name: kubeshark-self-config-role @@ -461,10 +461,10 @@ kind: RoleBinding metadata: labels: - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm annotations: name: kubeshark-self-config-role-binding @@ -485,10 +485,10 @@ metadata: labels: app.kubeshark.com/app: hub - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm name: kubeshark-hub namespace: default @@ -507,10 +507,10 @@ kind: Service metadata: labels: - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm name: kubeshark-front namespace: default @@ -530,10 +530,10 @@ metadata: labels: app.kubeshark.com/metrics: "true" - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm annotations: prometheus.io/scrape: 'true' @@ -543,10 +543,10 @@ spec: selector: app.kubeshark.com/app: worker - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm ports: - name: metrics @@ -561,10 +561,10 @@ metadata: labels: app.kubeshark.com/metrics: "true" - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm annotations: prometheus.io/scrape: 'true' @@ -574,10 +574,10 @@ spec: selector: app.kubeshark.com/app: hub - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm ports: - name: metrics @@ -593,10 +593,10 @@ labels: app.kubeshark.com/app: worker sidecar.istio.io/inject: "false" - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm name: kubeshark-worker-daemon-set namespace: default @@ -611,10 +611,10 @@ labels: app.kubeshark.com/app: worker kubeshark.io/internal-auth: "true" - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm name: kubeshark-worker-daemon-set namespace: kubeshark @@ -624,7 +624,7 @@ - /bin/sh - -c - mkdir -p /sys/fs/bpf && mount | grep -q '/sys/fs/bpf' || mount -t bpf bpf /sys/fs/bpf - image: 'docker.io/kubeshark/worker:v53.5' + image: 'docker.io/kubeshark/worker:v53.6' imagePullPolicy: Always name: mount-bpf securityContext: @@ -663,7 +663,7 @@ - '500Mi' - -cloud-api-url - 'https://api.kubeshark.com' - image: 'docker.io/kubeshark/worker:v53.5' + image: 'docker.io/kubeshark/worker:v53.6' imagePullPolicy: Always name: sniffer ports: @@ -744,7 +744,7 @@ - -disable-tls-log - -loglevel - 'warning' - image: 'docker.io/kubeshark/worker:v53.5' + image: 'docker.io/kubeshark/worker:v53.6' imagePullPolicy: Always name: tracer env: @@ -853,10 +853,10 @@ metadata: labels: app.kubeshark.com/app: hub - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm name: kubeshark-hub namespace: default @@ -871,10 +871,10 @@ metadata: labels: app.kubeshark.com/app: hub - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm spec: dnsPolicy: ClusterFirstWithHostNet @@ -892,7 +892,7 @@ - -snapshot-size-limit - '20Gi' - -dissector-image - - 'docker.io/kubeshark/worker:v53.5' + - 'docker.io/kubeshark/worker:v53.6' - -dissector-cpu - '1' - -dissector-memory @@ -916,7 +916,7 @@ value: 'production' - name: PROFILING_ENABLED value: 'false' - image: 'docker.io/kubeshark/hub:v53.5' + image: 'docker.io/kubeshark/hub:v53.6' imagePullPolicy: Always readinessProbe: periodSeconds: 5 @@ -985,10 +985,10 @@ metadata: labels: app.kubeshark.com/app: front - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm name: kubeshark-front namespace: default @@ -1003,10 +1003,10 @@ metadata: labels: app.kubeshark.com/app: front - helm.sh/chart: kubeshark-53.5.0 + helm.sh/chart: kubeshark-53.6.0 app.kubernetes.io/name: kubeshark app.kubernetes.io/instance: kubeshark - app.kubernetes.io/version: "53.5.0" + app.kubernetes.io/version: "53.6.0" app.kubernetes.io/managed-by: Helm spec: containers: @@ -1047,7 +1047,7 @@ value: 'false' - name: REACT_APP_SENTRY_ENVIRONMENT value: 'production' - image: 'docker.io/kubeshark/front:v53.5' + image: 'docker.io/kubeshark/front:v53.6' imagePullPolicy: Always name: kubeshark-front livenessProbe: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeshark-cli-53.5.0/skills/install/references/cloud-storage.md new/kubeshark-cli-53.6.0/skills/install/references/cloud-storage.md --- old/kubeshark-cli-53.5.0/skills/install/references/cloud-storage.md 2026-10-07 16:58:21.000000000 +0200 +++ new/kubeshark-cli-53.6.0/skills/install/references/cloud-storage.md 2026-10-21 09:55:49.000000000 +0200 @@ -35,6 +35,7 @@ externalId: "" endpoint: "" forcePathStyle: false + insecureSkipVerify: false azblob: storageAccount: "" container: "" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/kubeshark-cli-53.5.0/skills/install/references/helm-values.md new/kubeshark-cli-53.6.0/skills/install/references/helm-values.md --- old/kubeshark-cli-53.5.0/skills/install/references/helm-values.md 2026-10-07 16:58:21.000000000 +0200 +++ new/kubeshark-cli-53.6.0/skills/install/references/helm-values.md 2026-10-21 09:55:49.000000000 +0200 @@ -89,6 +89,7 @@ externalId: "" # STS external ID endpoint: "" # Custom endpoint for S3-compatible storage forcePathStyle: false # Path-style addressing for S3-compatible storage + insecureSkipVerify: false # Skip TLS certificate verification for the custom endpoint azblob: storageAccount: "" container: "" @@ -370,9 +371,23 @@ headless: false # Suppress browser auto-open license: "" # Kubeshark Pro license key timezone: "" # Override timezone -logLevel: warning # Log level: debug, info, warning, error +logLevel: warning # Log level: trace, debug, info, warning, error kube: configPath: "" # Custom kubeconfig path context: "" # Kubernetes context name ``` + +### Log levels + +`logLevel` applies to the Hub, the sniffer and the tracer, since the chart passes the same +value to every container. Levels, least verbose first: `error`, `warning` (default), `info`, +`debug`, `trace`. + +`trace` is for diagnosing a specific problem, not for running a deployment. It adds a +per-request narrative of authentication and authorization: the resolved role, capabilities +and namespace scope, and from the OIDC tokens the subject, issuer, audience, the names of +the claims present and the value of the configured roles claim. That means the subject +identifier and the caller's group memberships reach the container logs and anything +collecting them. Token payloads are not logged in full, and neither are signatures. +Turn it on to answer a question, then turn it back down. ++++++ kubeshark-cli.obsinfo ++++++ --- /var/tmp/diff_new_pack.QCkYmp/_old 2026-10-24 22:05:39.109179429 +0200 +++ /var/tmp/diff_new_pack.QCkYmp/_new 2026-10-24 22:05:39.121179936 +0200 @@ -1,5 +1,5 @@ name: kubeshark-cli -version: 53.5.0 -mtime: 1791385101 -commit: 224b045eb5c7061964147b98bb8de30a481bd255 +version: 53.6.0 +mtime: 1792569349 +commit: b79aa01afc280f4b377c36ad96527b8d063dbfb7 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/kubeshark-cli/vendor.tar.gz /work/SRC/openSUSE:Factory/.kubeshark-cli.new.2252680/vendor.tar.gz differ: char 96, line 1
