Releases: DataDog/KubeHound
Releases · DataDog/KubeHound
v1.6.4
Major changes
- Introduction of TTPs from MITRE ATT&CK framework. Each attack is bound to one TTP.
- Fix issue with missing namespace for Service Account in specific condition.
- Fix issue in KHaaS to avoid concurrency processing on the same RunID.
What's Changed
- graph/edge: Typo in
daemonsets
by @Minosity-VR in #308 - chore(doc): add graph model page. by @Zenithar in #307
- chore(ci): update step actions. by @Zenithar in #309
- chore(ci): update dependencies. by @Zenithar in #310
- feat(graph): document mitre attck in schema. by @Zenithar in #311
- feat(graph): embed MITRE Attck technique and tactic into edges by @Zenithar in #312
- [Fix] Add resilience and logs when failing during edges insertion step by @jt-dd in #313
- [Fix] Add rolebinding namespace on namespace less ServiceAccount by @jt-dd in #314
- Kubehound with no Docker lib dependency by @jt-dd in #315
- chore(doc): document backend overrides capabilities. by @Zenithar in #317
- [Fix] Concurrency processing of runID by @jt-dd in #318
- Using sync.Map instead of mutex + Map for concurrency lock by @jt-dd in #319
- [Fix] breaking changes in upload-artifacts v4 by @jt-dd in #320
- [Fix] Invalid character in build-binary CI job by @jt-dd in #321
- [Fix] missing artifacts in build-binaries CI job by @jt-dd in #322
- [Fix] checkout v4 release missing artifact by @jt-dd in #323
Full Changelog: v1.6.3...v1.6.4
v1.6.3
v1.6.2
Major changes
- Handle errors in janusgraph/gremlin-go drive during ingestion process
- Fix errors in KubeHound data models (
umh_core_pattern
androle_bind
edges) - Update DSL queries to use Janugraph indexed property
What's Changed
- doc(requirements): add memory requirements for docker machine. by @Zenithar in #293
- Fix log typo by @edznux-dd in #296
- graphdb batch writer resiliency by @Zenithar in #295
- Fix umh core pattern attacks by @jt-dd in #298
- Fix role-bind attack by @jt-dd in #299
- Removed the use of labels for perf reasons by @jt-dd in #300
- Fix flags for rootcmd by @jt-dd in #301
- Zenithar/doc various cleanup by @Zenithar in #294
- feat(graphdb): split deletion transactions. by @Zenithar in #303
New Contributors
Full Changelog: v1.6.1...v1.6.2
v1.6.1
What's Changed
Full Changelog: v1.6.0...v1.6.1
v1.6.0
Major changes
- Migrate from logrus to zap.
- Various minor fixes.
- Documentation update.
What's Changed
- Update docs v1.5.2 by @jt-dd in #268
- K8s collector deployment files example by @jt-dd in #269
- fixing waiting time metric by @jt-dd in #276
- Fix dev system-tests --down command by @jt-dd in #277
- Fix local dev env with datadog by @jt-dd in #279
- adding nocache flag for dev commands by @jt-dd in #278
- fix dump remote bucket by @jt-dd in #280
- Logs refactor - migrating to zap by @jt-dd in #281
- Fixing demo dashboard by @jt-dd in #282
- Adding workshop requirements by @jt-dd in #283
- update KHaaS doc link by @ikraemer-dd in #284
- Fix observability by @jt-dd in #285
- only-one-copy-in-graph-per-cluster by @jt-dd in #286
- adding hacklu materials by @jt-dd in #287
- fixing macos sequoia build by @jt-dd in #288
- fix golang version 1.23 by @jt-dd in #289
- Fix linter issue by @jt-dd in #291
New Contributors
- @ikraemer-dd made their first contribution in #284
Full Changelog: v1.5.3...v1.6.0
v1.5.3
v1.5.2
v1.5.1
What's Changed
- Fix fork based PR system-test by @jt-dd in #263
- fix grpc ingestor (backward compat) by @jt-dd in #262
- Add CE_UMH_CORE_PATTERN edge by @martinvoigt-dd in #209
- Fix docker compose deployment by @jt-dd in #265
- add env variable for ingestor/grpc image by @jt-dd in #264
New Contributors
- @uthark made their first contribution in #241
- @martinvoigt-dd made their first contribution in #209
Full Changelog: v1.4.0...v1.5.1
v1.5.0
Breaking changes
kubehound-ingestor
has been renamed tokubehound-binary
since now only one binary is built for all KubeHound component (collector/ingestor/grpc client).--cluster
flag fromkubehound ingestor local
has been deprecated. Ametadata.json
is now generated on each dump. For retro compatibility KubeHound will check the path to extract the metadata info (run_id
andcluster_name
) if not provided from inputs.
What's Changed
- Fix datadog image by @jt-dd in #243
- Updating/cleaning docs by @jt-dd in #242
- Fix typo in mkdocs.yml by @uthark in #241
- Fix workflows RBAC by @jt-dd in #249
- Remove extra permission for GitHub action by @juliendoutre in #250
- Fix datadog agent release by @jt-dd in #253
- Rename kubehound-ingestor to kubehound by @jt-dd in #252
- Fix-ci-release-branch by @jt-dd in #254
- Adding all symbols in KubeHound binary by @jt-dd in #255
- Commiting terraform.lock.hcl by @jt-dd in #256
- Adding a metadata file to KubeHound dumps by @edznux-dd in #247
- [NOJIRA] Use the ParsePath function to gather the cluster name and run ID by @edznux-dd in #248
- adding config command by @jt-dd in #244
- [NOJIRA] Using service with official image instead of deprecated github action by @edznux-dd in #239
- Fix buildx pipeline for Darwin binary/image by @jt-dd in #258
- Renaming kubehound-binary image by @jt-dd in #259
- fix kubehound image name by @jt-dd in #260
- updating docs to v1.5.0 with new features by @jt-dd in #261
New Contributors
Full Changelog: v1.4.0...v1.5.0
v1.4.0
What's Changed
- Fix entrypoint for kubehound-ingestor image by @jt-dd in #231
- Use positionnal argument for directory/file input/output path by @jt-dd in #232
- Adding local config file by @jt-dd in #233
- Updating user doc by @jt-dd in #234
- Fix-darwin-arm-release by @jt-dd in #237
- local-ingest-dump-pipeline by @jt-dd in #238
- Adding developer guide by @jt-dd in #236
- New notebooks - Low Hanging fruits by @jt-dd in #235
- Jt-dd/fixes-release-docs by @jt-dd in #240
Full Changelog: v1.3.3...v1.4.0