- 28 Nov 2024
- 10 Minutes to read
- Print
- DarkLight
- PDF
Platform agent
- Updated on 28 Nov 2024
- 10 Minutes to read
- Print
- DarkLight
- PDF
1.51.0 — 27th November
Traceable’s Platform Agent 1.51.0 release provides the following:
Update
Upgrade to OTEL Collector v0.111.0
The OpenTelemetry Collector has been upgraded to version v0.111.0 to align with the latest features and improvements.Default
noProxy
Values for Helm Installations
Addedlocalhost
and127.0.0.1
as default values for thenoProxy
Helm configuration. This ensures internal calls made by the TPA onlocalhost
or127.0.0.1
are excluded from proxying when usinghttpProxy
andhttpsProxy
environment variables. This prevents disruptions to internal communication.Default
NoProxy
Values in Installation Script
The TPA installation script now setsnoProxy
default values tolocalhost
and127.0.0.1
to simplify configuration and avoid manual setup.HTTP Reverse Proxy Enabled by Default
The HTTP reverse proxy is now enabled by default. Port5442
can be used for all TPA calls, including sending traces and metrics (replacing port4317
) and retrieving remote configuration (replacing port5441
).Upgrade Envoy Image
The Envoy image has been upgraded to address known vulnerabilities and enhance security.eBPF CloudFormation Template Configuration Updates
Updated eBPF CloudFormation templates to support dynamic service discovery for ECS services. This enhancement allows dynamic service names for Docker containers running on ECS-EC2 instances, addressing specific use cases requiring flexible service name configurations.Update to eBPF version
The eBPF version is updated to 1.20.2
Resolved issues
Fix for Data Leak in Suppression Pattern Configuration
Resolved a data leak issue that occurred when a suppression pattern returned an empty string for match groups due to misconfiguration. This fix ensures data integrity and proper suppression behavior.
1.50.1 — 26th November
Traceable’s Platform Agent 1.50.1 release provides the following:
Update
HTTP 1.1 communication — You can now configure the Traceable Platform Agent (TPA) to communicate with the platform using HTTP/1.1 without requiring a user proxy. This update provides flexibility for environments where direct communication is preferred, or proxies are not necessary.
1.50.0 — 22nd October
Traceable’s Platform Agent 1.50.0 release provides the following:
Update
Platform agent support on Ubuntu 24.04 — The 1.50.0 release supports installing Traceable Platform Agent on Ubuntu 24.04, allowing users to use the install script for seamless deployment on the latest Ubuntu LTS release.
proc FS scan — The 1.50.0 release adds new configuration options in Helm and Terraform to control the
proc
filesystem scan period. This enhances flexibility in managing performance and resource consumption. For more information, see the eBPF section in Helm and Terraform values topic.Java agent version — The 1.50.0 release updates the Java agent version to 1.13.0 in both Helm and Terraform.
Resolved issues
Collector config race condition — The 1.50.0 release resolves a race condition when fetching collector configuration, which previously resulted in unredacted data being sent to the Traceable Platform.
Incorrect duration in Istio data capture—The 1.50.0 release resolves an issue in which the duration of captured data in Istio was inaccurately recorded.
1.49.2 — 3rd October
Traceable’s Platform Agent 1.49.2 release provides the following:
Update
Support for HTTP/1.1 Communication via Envoy Sidecar — In environments where the proxy does not support HTTP/2, users can deploy an optional Envoy sidecar. This allows Traceable Platform Agent (TPA) communication over HTTP/1.1, ensuring compatibility with proxies that only support HTTP/1.1. This is supported on Linux environments. For more information, see Platform agent to Traceable Platform via HTTP/1.1 topic.
1.49.1 — 30th September
Traceable’s Platform Agent 1.49.1 release provides the following:
Updates
gRPC health check: The 1.49.1 release exposes the gRPC health check endpoint. For more information, see Health check.
eBPF tracer: The 1.49.1 release enables independent eBPF tracer Helm deployment. For more information, see eBPF independent helm deployment.
Default Linux node: In the 1.49.1 release, the Platform agent now defaults to running only on Linux nodes using node selectors. For more information, see the Before you begin section in the Introduction topic.
gRPC message size config: The 1.49.1 release adds
grpc_max_call_recv_msg_size
configuration for collector clients in agentmanager. For more information, see the Collector section in Helm and Terraform values topic.CPU limit exposure: The 1.49.1 release adds
CPULimit
option in the install script for eBPF and Platform agent configurations. For more information, see eBPF, tpa-only, and ebpf-only sections.Span attributes: The 1.49.1 release captures eBPF pod annotations as span attributes. For more information, see the eBPF section in the Helm and Terraform values topic.
Custom error pages: The 1.49.1 release lets you render custom error pages for blocked requests by
ext_cap
.
Resolved Issues
Span remover processor: The 1.49.1 release resolves a regression issue about activating the spanremover processor for Platform agent Helm deployments.
High memory usage — The 1.49.1 release resolves an issue of high memory usage caused by multiple services and multiple span exclude rules.
1.48.1 — 23rd Aug
Traceable’s Platform Agent 1.48.1 release provides the following:
Updates
TraceableRefreshTokenArn
— The 1.48.1 release adds theTraceableRefreshTokenArn
parameter to enhance security and manageability. This parameter specifies the Amazon Resource Name (ARN) for the Traceable Platform's refresh token, which is stored securely in AWS Secrets Manager. By leveraging this parameter, users can ensure their refresh tokens are securely managed and accessed.Egress ports — The 1.48.1 release allows additional outbound access via the security group.
1.48.0 — 12th Aug
Traceable’s Platform Agent 1.48.0 release provides the following:
Updates
GCP — The 1.48.0 release allows configuring a mirrored interface for GCP mirroring.
Configuration override — The 1.48.0 release allows override of the configuration in the Traceable Platform agent’s
config.yaml
file. This applies to installation script, Docker, Mirroring Terraform, and GCP mirroring.Kubernetes pod label — The 1.48.0 release allows you to capture Kubernetes pod labels for eBPF agent by configuring the
ebpfPodLabels
helm value.Update strategy — The 1.48.0 release provides update strategy configuration for Traceable Platform agent and eBPF daemonset deployments.
Proxy flags — The 1.48.0 release adds three new flags in the installation script for
ebpf
,tpa-only
, andmirror
options--http-proxy
--https-proxy
--no-proxy
Resolved issues
Platform agent crash — The 1.48.0 release resolves a regression issue that caused the platform agent to crash.
ECS deployment — The 1.48.0 release resolves the
Failed to extract ServerMetadata from context
issue in ECS deployment.Blocking or sampling rules — The 1.48.0 release resolves an issue with blocking or sampling rules in specific environments for TME-based deployments.
1.47.1 — 22nd July
Traceable’s Platform Agent 1.47.1 release provides the following:
Updates
Pivotal Cloud Foundry (PCF) — The 1.47.1 release excludes internal processes from eBPF PCF deployment by default.
NGINX ingress controller — The 1.47.1 release adds support for custom container and configmap name.
Istio — The 1.47.1 release adds various timeout options for Traceable’s Istio agent. For more information, see Helm values for Istio.
eBPF and Platform agent—The 1.47.1 release provides Cloudformation templates for deploying Traceable’s eBPF solution and Platform agent.
eBPF
The 1.47.1 release supports the Priority class for eBPF deployment.
The 1.47.1 release updates the eBPF version to 1.15.2.
GCP mirroring — The 1.47.1 release provides configurations for OS image and network interface to listen to.
1.46.1 — 4th July
Traceable’s Platform Agent 1.46.1 release provides the following:
Updates
eBPF — The 1.46.1 release updates the eBPF version to 1.15.0.
eBPF BTF — The 1.46.1 release allows configuring the eBPF BTF download path. For more information, see Helm and Terraform values topic.
Signature verification — The 1.46.1 release provides a new option,
--no-verify
, if you do not wish to verify signatures.
1.46.0 — 20th June
Traceable’s Platform Agent 1.46.0 release provides the following:
Updates
http_proxy and no_proxy — The 1.46.0 release provides support for
http_proxy
andno_proxy
through Helm chart and Terraform. For more information, see the Proxy section.AWS VPC mirroring — The 1.46.0 release allows the passing of additional custom IAM roles.
OTEL collector — The 1.46.0 release upgrades the OTEL collector to version 0.102.1
1.45.0 — 24th May
Traceable’s Platform Agent 1.45.0 release provides the following:
Updates
AWS VPC mirroring — The 1.45.0 release provides AWS VPC support launch template instead of launch configuration for EC2 instances.
AWS API gateway
The 1.45.0 release adds support for monitoring multiple accounts from an external account.
The 1.45.0 release adds support for external Traceable Platforma gent instance.
The 1.45.0 release adds support for the Cloudformation template.
1.44.2 — 14th May
Traceable’s Platform Agent 1.44.2 release provides the following:
Updates
eBPF
The 1.44.2 release provides uprobes exclusion configurations for a Kubernetes deployment.
The 1.44.2 release provides options in the installation script to override the
yaml
file. The options are:For
ebpf
—--ebpf-override-config-file OVERRIDE_CONFIG_FILE
For
ebpf-only
—--override-config-file OVERRIDE_CONFIG_FILE
The 1.44.2 release updates the eBPF version to 1.13.3
1.44.1 — 3rd May
Resolved issue
Region blocking — The 1.44.1 release resolves an issue where region blocking was not working when the forwarded header was spoofed.
1.44.0 — 29th April
Traceable’s Platform Agent 1.44.0 release provides the following:
Updates
Sidecar and proxy — The 1.44.0 release removes support for sidecar and proxy injection.
Configuration override — The 1.44.0 release provides the ability to override a set of values in
config.yaml
without editing theconfig.yaml
file. Traceable provides a command-line and environment variable option to override:command-line argument —
--config-override /path/to/config-override.yaml
Environment variable —
TA_CONFIG_OVERRIDE_FILE=/path/to/config-override.yaml
SCC and eBPF — The 1.44.0 release allows configuring SCC for eBPF in OpenShift deployments.
eBPF — The 1.44.0 release upgrades the eBPF version to 1.12.2.
Service account names — The 1.44.0 release allows configuring service account names in a Kubernetes deployment.
Logging — The 1.44.0 release provides additional logging for blocking Platform agent deployment in a VM environment.
Resolved issues
Injector match selectors — The 1.44.0 release resolves an issue in which the Platform agent crashed when injector match selectors were not specified.
1.43.0 - 8th April
Traceable’s Platform Agent 1.43.0 release provides the following:
Updates
Platform agent on Windows — The 1.43.0 release provides support for installing Traceable’s Platform agent on a Windows machine. For more information, see Platform agent on Windows.
GCP mirroring
The 1.43.0 release supports Traceable’s GCP mirroring deployment in a shared VPC.
The 1.43.0 release supports the ability to configure the Traceable Platform endpoint in the GCP mirroring setup script.
The 1.43.0 release supports mirroring GCP Application Load Balancers through the use of network tags.
eBPF
The 1.43.0 release updates the root file system in the eBPF tracer container to be read-only.
The 1.43.0 release updates the eBPF version to 1.12.1.
OTEL — The 1.43.0 release updates the OTEL collector version to 0.96.0
GraphQL — The 1.43.0 release supports capturing GraphQL payload by default for Traceable module extension (TME) based agents.
OS distribution name — The 1.43.0 release removes OS distribution names for
rpm
packages as they are OS distribution independent.Apigee — The 1.43.0 release supports the Apigee agent sending data to the Traceable Platform agent using a message logging policy.
Note
This requires the use of latest Apigee agent 1.29.0 or later.
Resolved issues
The 1.43.0 release fixes vulnerabilities found by container image scans.
1.42.1 - 13th March
Traceable’s Platform Agent 1.42.1 release provides the following:
Updates
Log level — The 1.42.1 release provides logging levels for Traceable’s internal library. You can set these levels using Helm values. For more information, see Helm and terraform values.
F5 — The 1.42.1 release provides support for capturing F5 TLS data using High-Speed Logging (HSL).
eBPF
The 1.42.1 release separates the service account for the eBPF tracer and Traceable Platform agent for implementing fine-grained privileges.
The 1.42.1 release updates the eBPF version to 1.11.3
ImagePullSecrets — The 1.42.1 release supports
ImagePullSecrets
for the Kubernetes environment. This helps you separate deployment from authentication when you pull images from a repository.PCF — The 1.42.1 release updates the PCF tile to use Ubuntu Jammy stemcell.
Custom annotations and labels — The 1.42.1 release supports custom annotations and labels for Helm and Terraform deployments.
HAProxy agent — The 1.42.1 release updates the change processing timeout to 1 second.
Resolved issues
Data classification — The 1.42.1 release resolves the issue of not marking the data type as sensitive when the data type's value is null.
Reverse proxy — The 1.42.1 release resolves an issue where HTTP reverse proxy was not working for gRPC API endpoints.
1.41.2 - 23rd February
Traceable’s Platform Agent 1.41.2 release provides the following:
Updates
eBPF version - 1.41.2 release updates the eBPF version to 1.11.2.
AWS mirroring - The 1.41.2 release adds support for VPC filter with tag-based mirror source for AWS VPC Mirroring.
1.41.0 - 16th February
Traceable’s Platform Agent 1.41.0 release provides the following:
Updates
OPA - The 1.41.0 release deprecates OPA-related configurations in Helm chart and Terraform.
Java agent version - The 1.41.0 release upgrades the injected Java agent version to 1.1.5.
Signed archives - The 1.41.0 release provides signed debs, zips, and rpm artifacts.
Azure - The 1.41.0 release has the following updates for Azure:
API endpoint in the template.
Updated the template to use vNet and subnet from a different resource group.
Updated the template to use the traffic mirroring installation script.
Resolved issues
Status code - The 1.41.0 release resolves an issue where “null” was displayed as a status code for TME-based (Traceable module extension) agents.
1.40.1 - 11th January
Traceable’s Platform Agent 1.40.1 release provides the following:
Updates
eBPF - The eBPF version is updated to 1.10.7.
Resolved issues
API exclusion - The 1.40.1 release resolves an issue where data was not being dropped when API exclusion was defined.