- 08 Aug 2022
- 5 Minutes to read
-
Print
Release Notes - Platform agent
- Updated on 08 Aug 2022
- 5 Minutes to read
-
Print
1.21.1 - 4th August
Traceable's 1.21.1 release has the following updates:
- In-application blocking on Alpine OS - Traceable's 1.21.1 release provides support for in-application request blocking for Traceable agents running on Alpine OS.
1.21.0 - 2nd August
Traceable's 1.21.0 release has the following updates:
- eBPF - Traceable's 1.21.0 release provides support to capture HTTP TLS traffic for applications using OpenSSL.
- Gloo Edge - Traceable's 1.21.0 release adds a new Traceable agent to support Gloo Edge Ingress Controller.
- Environment variable update - Traceable's 1.21.0 release deprecates the following two environment variables:
TA_REMORE_CA_CERT_FILE
TA_REMORE_GRPC_MAX_CALL_RECV_MSG_SIZE
The environment variables that replace the deprecated environment variable are TA_REMOTE_CA_CERT_FILE
and TA_REMOTE_GRPC_MAX_CALL_RECV_MSG_SIZE
.
1.20.1 - 29th June
Traceable's 1.20.1 release has the following updates:
- eBPF - Traceable's 1.20.1 release provides custom labels for eBPF deployment option.
- Data classification - Traceable's 1.20.1 release provides new data classification capabilities through Helm charts, Terraform, and
config.yaml
file.
1.20.0 - 17th June
Traceable's 1.20 release has the following updates:
- OTEL collector - Traceable's 1.20.0 release upgrades the OTEL collector to v0.49.0
- Istio - Traceable's 1.20.0 release provides blocking support on ARM64
1.19.2 - 2nd June
Traceable's 1.19.2 release has the following updates:
- OpenResty - Traceable's 1.19.2 release fixes the issue of incorrect request and response data for OpenResty Lua.
- eBPF - Traceable's 1.19.2 release:
- Allows eBPF container to run in privileged mode.
- Removes IP based filter for the captured traffic
1.19.1 - 21st May
Traceable's 1.19.1 release has the following updates:
- AWS mirroring - Traceable's 1.19.1 release supports multiple CIDR blocks for AWS mirroring.
- ARM64 support - Traceable's 1.19.1 release provides support for ARM64 for platform agent and HAProxy.
- DaemonSet mirroring - Traceable's 1.19.1 release allows capturing HTTP method when using DaemonSet mirroring.
1.18.1 - 22nd April
Traceable's 1.18.1 release has the following updates:
- Enduser identification - Traceable's 1.18.1 release supports extracting JWT tokens from a JSON body field for enduser identification.
- Enduser identification - Traceable's 1.18.1 release provides the ability for enduser identification based on service name.
1.18.0 - 16th April
Traceable's 1.18.0 release has the following updates:
- HorizontalPodAutoScaler warning - 1.80.0 release fixes the deprecated warning that is displayed during the deployment.
- AWS mirroring - 1.80.0 release provides the ability to configure custom reporting endpoints in the CloudFormation template. The new option is named TraceableAPIEndpoint.
- DaemonSet mirroring - 1.80.0 release supports exclude rules for DaemonSet mirroring.
- Static modsec rules - 1.80.0 release no longer supports
config_file
element undermodsec
andprotectioninspectionprocessor
. If you have installed Traceable agent on a VM and upgrading from an older version, make sure to remove the element from your agent configuration. - OPA upgrade - 1.80.0 release upgrades OPA to 0.37.2
- ext_cap - 1.80.0 release removes a few obsolete configuration syntax.
- Java agent - 1.80.0 release upgrades the Java agent to 1.0.9
- Header size - 1.80.0 release increases the maximum size of captured headers to 16k for mirroring.
1.17.3 - 6th April
Traceable's 1.17.3 release adds limited support for HAProxy 2.0.x.
1.17.2 - 5th April
Traceable's 1.17.2 release upgrades the embedded Java agent to version 1.0.8.
1.17.1 - 2nd April
Traceable's 1.17.1 release provides the ability to use self-signed certificates in the Traceable Platform agent for on-premise installation.
1.17.0 - 29th March
Traceable's 1.17.0 release has the following updates for the Traceable Platform agent:
- Traffic mirroring - 1.17.0 release fixes a potential issue caused due to packet drop during traffic mirroring under heavy load.
- Istio - 1.17.0 release provides an ability for Istio cluster deployment to report data to Traceable platform agent deployed in a different cluster.
- Kubernetes namespace - 1.17.0 release provides an option to include Kubernetes namespace in the service name.
1.16.0 - 14th March
Traceable's 1.16.0 release has the following updates for the Traceable Platform agent:
- AutoScaling - Traceable's platform agent 1.16.0 release provides a configurable autoscaling option for pods.
- OTEL collector - Traceable's platform agent 1.16.0 release upgrades the OTEL collector to 0.44.0.
- Log message - Traceable's platform agent 1.16.0 release suppresses a noisy log message
http: proxy error: message context canceled
.
1.15.0 - 23rd February
Traceable's 1.15.0 release has the following updates for the Traceable Platform agent:
- TLS version - Traceable's platform agent 1.15.0 enforces TLS 1.2 as the minimum version.
- Istio mesh - Traceable's 1.15.0 release supports running Traceable agent inside Istio mesh with strict mTLS enabled.
- Configure dropping spans - Traceable 1.15.0 release provides an option to configure dropping of spans in the collector based on the attributes. This configuration is defined as a top level span filter Helm or Terraform value to drop certain spans. The structure should be similar to as shown below. Note that this configuration should be the top-level configuration.ActionScriptActionScript
By default liveliness checks from Kubernetes, AWS LB, and GCP LB are now filtered out.dropSpans: - key: http.request.header.user-agent value_regex: "ELB-HealthChecker/1.0" - key: http.url value: <REGEX>
- ECS traffic mirroring - Traceable now supports ECS traffic mirroring when host networking mode is used.
- Custom Kubernetes selectors - Traceable's 1.15.0 release now supports custom Kubernetes selectors for enabling mirroring.
- Pod annotation for mirroring - Traceable's 1.15.0 release introduces a new annotation to enable or disable mirroring for a pod. When the annotation
mirror.traceable.ai/enabled
is set tofalse
in daemonset mode, the pod is ignored for mirroring. If the value is set tofalse
in sidecar mode, the sidecar is not injected. - Traffic mirroring for namespace - Traceable's 1.15.0 release provides capability to turn on traffic mirroring for all namespaces. Use the label
daemonSetMirroringEnabled
anddaemonSetMirrorAllNamespaces
Helm and Terraform options. - Sidecar pod mirroring - From Traceable's 1.15.0 release, only one sidecar container is injected for sidecar pod mirroring.
1.14.0 - 10th January
Traceable's 1.14.0 release has the following updates for the Traceable Platform agent:
- Certificate and key reload - Traceable's 1.14.0 Platform agent automatically reloads the certificates and keys when the respective files are updated.
- TLS traffic route - Traceable's 1.14.0 Platform agent release routes all TLS traffic through a single port and also removes the use of hairpinning.
- Kubernetes traffic mirroring - Traceable's 1.14.0 Platform agent provides an option to configure Kubernetes traffic mirroring as a daemonset or sidecar.
- AWS traffic mirroring - Traceable's 1.14.0 Platform agent supports installing multiple AWS mirroring CloudFormation stacks with the same source.
1.13.2 - 4th January
Traceable's 1.13.2 release has the following updates for the Traceable Platform agent:
- tmm rename - Traceable's mirroring module (tmm) has been renamed to mirror. For more information, see Mirroring in Annotations and Labels.
- Capture pod egress traffic - Traceable's traffic mirroring for Pods now has an option to capture Pod's egress traffic instead of ingress traffic. By default, the mirroring agent captures the ingress traffic. To capture the egress traffic for all pods in a namespace, annotate the namespace with mirror.traceable.ai/defaultMode:egress. To capture the egress traffic at the pod level, annotate pod with mirror.traceable.ai/mode:egress
- Custom labels - Traceable's Platform agent 1.13.2 gives you an option to inject Traceable sidecars using your existing namespace names, pod labels, annotations and field values. You can use your existing labels if you are deploying Traceable agent using Helm or Terraform. Custom labels are currently supported for Proxy, JAVA, Traceable module extension (tme), and mirroring.
- AWS traffic mirroring - AWS traffic mirroring now works with default VPC and default subnets.
- Support for older Kubernetes versions - Traceable now supports Kubernetes from version 1.14 and later.