Release Notes - Platform agent

1.21.1 - 4th August

Traceable's 1.21.1 release has the following updates:

• In-application blocking on Alpine OS - Traceable's 1.21.1 release provides support for in-application request blocking for Traceable agents running on Alpine OS.

1.21.0 - 2nd August

Traceable's 1.21.0 release has the following updates:

• eBPF - Traceable's 1.21.0 release provides support to capture HTTP TLS traffic for applications using OpenSSL. 
• Gloo Edge - Traceable's 1.21.0 release adds a new Traceable agent to support Gloo Edge Ingress Controller.
• Environment variable update - Traceable's 1.21.0 release deprecates the following two environment variables:
  • TA_REMORE_CA_CERT_FILE
  • TA_REMORE_GRPC_MAX_CALL_RECV_MSG_SIZE

The environment variables that replace the deprecated environment variable are TA_REMOTE_CA_CERT_FILE and TA_REMOTE_GRPC_MAX_CALL_RECV_MSG_SIZE.

1.20.1 - 29th June

Traceable's 1.20.1 release has the following updates:

• eBPF -  Traceable's 1.20.1 release provides custom labels for eBPF deployment option.
• Data classification - Traceable's 1.20.1 release provides new data classification capabilities through Helm charts, Terraform, and config.yaml file.

1.20.0 - 17th June

Traceable's 1.20 release has the following updates:

• OTEL collector - Traceable's 1.20.0 release upgrades the OTEL collector to v0.49.0
• Istio - Traceable's 1.20.0 release provides blocking support on ARM64

1.19.2 - 2nd June

Traceable's 1.19.2 release has the following updates:

• OpenResty - Traceable's 1.19.2 release fixes the issue of incorrect request and response data for OpenResty Lua.
• eBPF - Traceable's 1.19.2 release:
  
  • Allows eBPF container to run in privileged mode.
  • Removes IP based filter for the captured traffic

1.19.1 - 21st May

Traceable's 1.19.1 release has the following updates:

• AWS mirroring - Traceable's 1.19.1 release supports multiple CIDR blocks for AWS mirroring.
• ARM64 support - Traceable's 1.19.1 release provides support for ARM64 for platform agent and HAProxy.
• DaemonSet mirroring - Traceable's 1.19.1 release allows capturing HTTP method when using DaemonSet mirroring.

1.18.1 - 22nd April

Traceable's 1.18.1 release has the following updates:

• Enduser identification - Traceable's 1.18.1 release supports extracting JWT tokens from a JSON body field for enduser identification.
• Enduser identification - Traceable's 1.18.1 release provides the ability for enduser identification based on service name.

1.18.0 - 16th April

Traceable's 1.18.0 release has the following updates:

• HorizontalPodAutoScaler warning - 1.80.0 release fixes the deprecated warning that is displayed during the deployment.
• AWS mirroring - 1.80.0 release provides the ability to configure custom reporting endpoints in the CloudFormation template. The new option is named TraceableAPIEndpoint.
• DaemonSet mirroring - 1.80.0 release supports exclude rules for DaemonSet mirroring.
• Static modsec rules - 1.80.0 release no longer supports config_file element under modsec and protectioninspectionprocessor. If you have installed Traceable agent on a VM and upgrading from an older version, make sure to remove the element from your agent configuration.
• OPA upgrade - 1.80.0 release upgrades OPA to 0.37.2
• ext_cap - 1.80.0 release removes a few obsolete configuration syntax.
• Java agent - 1.80.0 release upgrades the Java agent to 1.0.9
• Header size - 1.80.0 release increases the maximum size of captured headers to 16k for mirroring.

1.17.3 - 6th April

Traceable's 1.17.3 release adds limited support for HAProxy 2.0.x.

1.17.2 - 5th April

Traceable's 1.17.2 release upgrades the embedded Java agent to version 1.0.8.

1.17.1 - 2nd April

Traceable's 1.17.1 release provides the ability to use self-signed certificates in the Traceable Platform agent for on-premise installation.

1.17.0 - 29th March

Traceable's 1.17.0 release has the following updates for the Traceable Platform agent:

• Traffic mirroring - 1.17.0 release fixes a potential issue caused due to packet drop during traffic mirroring under heavy load.
• Istio - 1.17.0 release provides an ability for Istio cluster deployment to report data to Traceable platform agent deployed in a different cluster.
• Kubernetes namespace - 1.17.0 release provides an option to include Kubernetes namespace in the service name.

1.16.0 - 14th March 

Traceable's 1.16.0 release has the following updates for the Traceable Platform agent:

• AutoScaling - Traceable's platform agent 1.16.0 release provides a configurable autoscaling option for pods.
• OTEL collector - Traceable's platform agent 1.16.0 release upgrades the OTEL collector to 0.44.0.
  
• Log message - Traceable's platform agent 1.16.0 release suppresses a noisy log message http: proxy error: message context canceled.

1.15.0 - 23rd February 

Traceable's 1.15.0 release has the following updates for the Traceable Platform agent:

• TLS version - Traceable's platform agent 1.15.0 enforces TLS 1.2 as the minimum version.
• Istio mesh - Traceable's 1.15.0 release supports running Traceable agent inside Istio mesh with strict mTLS enabled.
• Configure dropping spans - Traceable 1.15.0 release provides an option to configure dropping of spans in the collector based on the attributes. This configuration is defined as a top level span filter Helm or Terraform value to drop certain spans. The structure should be similar to as shown below. Note that this configuration should be the top-level configuration.
  ActionScript 
  ActionScript

  dropSpans:
    - key: http.request.header.user-agent
       value_regex: "ELB-HealthChecker/1.0"
    - key: http.url
       value: <REGEX>

  By default liveliness checks from Kubernetes, AWS LB, and GCP LB are now filtered out.
• ECS traffic mirroring - Traceable now supports ECS traffic mirroring when host networking mode is used. 
• Custom Kubernetes selectors - Traceable's 1.15.0 release now supports custom Kubernetes selectors for enabling mirroring. 
• Pod annotation for mirroring - Traceable's 1.15.0 release introduces a new annotation to enable or disable mirroring for a pod. When the annotation mirror.traceable.ai/enabled is set to false in daemonset mode, the pod is ignored for mirroring. If the value is set to false in sidecar mode, the sidecar is not injected.
• Traffic mirroring for namespace - Traceable's 1.15.0 release provides capability to turn on traffic mirroring for all namespaces. Use the label daemonSetMirroringEnabled and daemonSetMirrorAllNamespaces Helm and Terraform options.
• Sidecar pod mirroring - From Traceable's 1.15.0 release, only one sidecar container is injected for sidecar pod mirroring.

1.14.0 - 10th January 

Traceable's 1.14.0 release has the following updates for the Traceable Platform agent:

• Certificate and key reload - Traceable's 1.14.0 Platform agent automatically reloads the certificates and keys when the respective files are updated.
• TLS traffic route - Traceable's 1.14.0 Platform agent release routes all TLS traffic through a single port and also removes the use of hairpinning.
• Kubernetes traffic mirroring - Traceable's 1.14.0 Platform agent provides an option to configure Kubernetes traffic mirroring as a daemonset or sidecar.
• AWS traffic mirroring - Traceable's 1.14.0 Platform agent supports installing multiple AWS mirroring CloudFormation stacks with the same source.

1.13.2 - 4th January 

Traceable's 1.13.2 release has the following updates for the Traceable Platform agent:

• tmm rename - Traceable's mirroring module (tmm) has been renamed to mirror. For more information, see Mirroring in Annotations and Labels. 
• Capture pod egress traffic - Traceable's traffic mirroring for Pods now has an option to capture Pod's egress traffic instead of ingress traffic. By default, the mirroring agent captures the ingress traffic. To capture the egress traffic for all pods in a namespace, annotate the namespace with mirror.traceable.ai/defaultMode:egress. To capture the egress traffic at the pod level, annotate pod with mirror.traceable.ai/mode:egress 
• Custom labels - Traceable's Platform agent 1.13.2 gives you an option to inject Traceable sidecars using your existing namespace names, pod labels, annotations and field values. You can use your existing labels if you are deploying Traceable agent using Helm or Terraform. Custom labels are currently supported for Proxy, JAVA, Traceable module extension (tme), and mirroring.
• AWS traffic mirroring - AWS traffic mirroring now works with default VPC and default subnets.
• Support for older Kubernetes versions - Traceable now supports Kubernetes from version 1.14 and later.