issues
search
otterize
/
network-mapper
Map Kubernetes traffic: in-cluster, to the Internet, and to AWS IAM and export as text, intents, or an image
Apache License 2.0
612
stars
23
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Handle case where the sniffer could fail to start if the metrics port was taken by another process on the same node, due to hostNetwork
#249
orishoshan
closed
1 day ago
0
Fix bug where sniffer would not stop gracefully upon context cancellation
#248
orishoshan
closed
1 day ago
0
Service name generation fails due to RFC 1123 subdomain validation schema
#247
samox73
opened
1 week ago
1
Sniffer fails posting to http://otterize-network-mapper:9090
#246
fjellvannet
closed
1 day ago
5
Fix a bug where detected TCP traffic from pods short time before their deletion time could be labeled as incoming traffic from the internet
#245
omris94
closed
1 week ago
0
Reduce the risk of misidentification of incoming traffic by verifying destination hostname when resolving incoming internet traffic; Use `/proc/<pid>/root/etc/hostname` for IP to hostname resolution as an alternative to `/proc/<pid>/environ`
#244
omris94
closed
1 week ago
0
Fix bug where discovered traffic from a pod wasn't filtered properly by its creation timestamp
#243
omris94
closed
1 month ago
0
Fix rare issue concerning captures going stale on the AWS VPC CNI, as well as auto-resolve addresses with no currently seen DNS traffic in the cluster
#242
orishoshan
closed
4 weeks ago
0
Add eBPF event filtering and tagging
#241
otterobert
closed
2 weeks ago
1
FIx bug where `hostNetwork` pods could be falsely detected as incoming traffic from outside of the cluster; Support resolution of `LoadBalancer` typed services using their node ports
#240
omris94
closed
1 month ago
0
Add sensitive traffic detection
#239
otterobert
closed
1 month ago
0
Improve load balancer service resolution - support shared external ip address
#238
omris94
closed
1 month ago
0
TLS event filtering
#237
otterobert
closed
1 month ago
0
Integrate gotls into agent
#236
otterobert
closed
1 month ago
0
Add support for reporting direct pod traffic from AWS ALB and similar ingress controllers to Otterize Cloud
#235
orishoshan
closed
1 month ago
0
Added support to read TLS traffic in go binaries
#234
otterobert
closed
1 month ago
0
Add makefile to automate local ebpf development
#233
otterobert
closed
2 months ago
0
Fix error reporting - use the enum graphql type
#232
omris94
closed
2 months ago
0
Ignore target `hostNetwork` pods in the DNS capture flow
#231
omris94
closed
2 months ago
0
Bump intents-operator version to latest main
#230
amitlicht
closed
2 months ago
0
Improve the way we resolve services DNS to identities by going directly from the `targetRef` of `endpoints` instead of going through IP addresses
#229
omris94
closed
3 months ago
0
Fix a bug where a TCP connection to a `hostNetwork` pod could rarely be resolved to the wrong service
#228
omris94
closed
3 months ago
0
Fix a bug where the source hostnames weren't enforced on TCP capture results for AWS; Add a configuration key to define the time a server-pod has to live for us to trust it's IP
#227
omris94
closed
3 months ago
0
Update Otterize CRD versions following changes to the intents operator
#226
omris94
closed
3 months ago
0
Add Markdown linter GitHub action and fix lint issues detected by it
#225
amitlicht
closed
3 months ago
0
New 'node-agent' that listens to pod events and loads eBPF programs
#224
orishavit
closed
2 weeks ago
0
Fix bug: internet intents discovered with CNAME instead of the actual domain name
#223
NetanelBollag
closed
4 months ago
0
Add cache to services reporting
#222
NetanelBollag
closed
4 months ago
0
Support `v2alpha1` and `v1` Otterize CRD version; Report istio destination services (in addition to dst workload); Report workload kinds in order to support kind specification for `clientIntents`
#221
omris94
closed
3 months ago
0
Report ingress and service to support cross cluster visibility
#220
NetanelBollag
closed
4 months ago
0
Report ingress and service to support cross cluster visibility
#219
orishoshan
closed
4 months ago
1
Report TCP sniffing count telemetry
#218
NetanelBollag
closed
5 months ago
0
Enable DNS intents support by default
#217
NetanelBollag
closed
5 months ago
0
Don't report traffic when service has terminated
#216
orishoshan
closed
5 months ago
0
Add stack traces to panics reported in telemetry error reporting
#215
orishoshan
closed
5 months ago
0
Fix bug where external ingress traffic detection would fail if more than one pod was found with the IP in cluster when determining if traffic is external
#214
orishoshan
closed
5 months ago
0
Correctly initialize sentinel errors
#213
orishoshan
closed
5 months ago
0
Change "no podCIDR" log to debug, since it does not indicate an error
#212
orishoshan
closed
5 months ago
0
Adding get cluster id call and bumping go version on dockerfile
#211
evyatarmeged
closed
5 months ago
0
Treat pod not found as external source traffic, only use node podCIDRs if possible.
#210
orishoshan
closed
5 months ago
0
Change TCP log to trace
#209
orishoshan
closed
5 months ago
0
Adding get cluster id call and bumping go version on dockerfile
#208
evyatarmeged
closed
6 months ago
0
Support detection of incoming internet intents to NodePort services
#207
NetanelBollag
closed
6 months ago
0
Update iamlive repo url
#206
orishavit
closed
6 months ago
0
Use $BUILDPLATFORM in Dockerfile
#205
orishavit
closed
6 months ago
0
Fix a case where the watchers (istio/kafka) tried to access logs of non-running pods
#204
omris94
closed
6 months ago
0
Discover incoming internet traffic
#203
NetanelBollag
closed
6 months ago
0
Upgrade error reporter version, fix cases where errors would not be reported or would be reported with wrong stack
#202
orishoshan
closed
5 months ago
0
Resolve TCP sniffer's results IP address hostnames on the mapper, just like in DNS sniffing
#201
NetanelBollag
closed
7 months ago
0
Add TCP based intents discovery
#200
NetanelBollag
closed
7 months ago
0
Next