Kubeshark release v52.9.0 (10-03-2025)

Release Highlights

Bug Fixes & New Features

• Added a Helm property to control the duration before Kubeshark automatically enters [Dormant](https://docs.kubeshark.co/en/on_off_switch) mode to conserve resources when idle. In Dormant mode, resource consumption is minimized. This behavior can be disabled via Helm. Kubeshark will not enter Dormant mode if any dashboard, Agent logic script, or recording is active.
• The hostroot volume is now created only when the tracer is deployed. tracer deployment is controlled by the tap.tls=true/false setting.
• Introduced support for defining a custom ingress path via the Helm value: tap.ingress.path.

Patches

When new patch releases are published, they will be automatically added and listed in this section.

v52.9.1 (11-10-2025)

• Fixed #1795

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.9.0/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.9.0/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.9.0/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.9.0/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.9.0/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

Kubeshark release v52.8.1 (08-12-2025)

Release Highlights

This release includes small bug fixes and some new capabilities.

Bug Fixes & New Features

• Fixed support for Cgroup V2 in cases where additional privileges are required.

• Implemented a traffic processing timeout for periods of complete inactivity:

  • A new Helm value has been introduced to define the timeout duration when there is no dashboard streaming traffic, no active recordings, and no agents operating.
  • In such cases, Kubeshark will transition into a Dormant state until new activity is detected.
  • During the Dormant state, traffic processing is halted, and resource consumption is minimized.
  • This ensures Kubeshark consumes negligible system resources unless actively in use.

Patches

When new patch releases are published, they will be automatically added and listed in this section.

v52.8.6 (09-24-2025)

• Improved service map rendering performance

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.8.1/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.8.1/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.8.1/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.8.1/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.8.1/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

Kubeshark release v52.8.0 (07-28-2025)

Release Highlights

This release primarily addresses bug fixes and security vulnerabilities.

Bug Fixes & New Features

• Resolved Helm chart issue (#1763)
• Implemented minor bug fix (#1767)
• Patched multiple vulnerabilities (#1773)
• Introduced PriorityClass to Helm chart (#1775)

Patches

When new patch release are published, that will be added automatically and listed in this section

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.8.0/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.8.0/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.8.0/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.8.0/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.8.0/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

Kubeshark release v52.7.8 (06-16-2025)

Release Highlights

This release addresses minor issues with version tagging and WebSocket protocol handling, re-enables Intercom-based support, and introduces support for downloading Agent logic scripts for local development and version control.

Bug Fixes & New Features

• Resolved a Make issue that caused the CLI to use an explicit tag (e.g., v52.3.77) instead of the latest tag (e.g., v52.3).
• Reintroduced online support via Intercom. This can be disabled using: --set supportChatEnabled=false.
• Fixed a panic related to the WebSocket (WS) protocol.
• Added the ability to download an Agent logic script (JavaScript file). Once downloaded, the script can be used locally and managed via source control.

Patches

When new patch release are published, that will be added automatically and listed in this section

v52.7.9 (2025-07-21)

• [Worker] Fixed a significant memory leak in the Worker.
• [Hub] Fixed a rare bug where the targeted pods list, would exclude certain pods.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.8/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.8/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.8/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.8/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.7.8/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

Kubeshark release v52.7.7 (06-03-2025)

Release Highlights

This release includes several key bug fixes and feature enhancements. Notably, it adds support for external secret managers and improves Helm chart semantic versioning (semver) compliance.

Bug Fixes & New Features

• Fixed a bug where eBPF traffic capture did not work when persistent volume storage was used. (#1757).
• Fixed a bug where Kubeshark stopped processing traffic when Workers restarted (#1760).
• Added an option to configure secrets to be read from environment variables, enabling the use of external secret managers for storing items such as licenses or SAML/OIDC secrets.
• Updated Chart.yaml to use the full semantic version, ensuring the Helm chart is semver compliant (#1752).
• Improved calculations for throughput, bandwidth, and latency in the service map.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.7/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.7/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.7/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.7/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.7.7/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

V52.7.0 (2025-04-16)

Release Highlights

This update adds new Helm options, improves GitOps compatibility, and enhances traffic capture with AF_PACKET. It also fixes bugs related to CLI exit, packet loss, Kafka crashes, and watchdog stability.

Keywords: AF_PACKET, BPF, Dex, PVC, Kafka, Packet loss, Scripts

Bug Fixes & New Features

• Added support for tapping network interface traffic using AF_PACKET. This can be configured by entering a BPF expression (e.g., net 0.0.0.0/0) in the BPF OVERRIDE field in the Settings dialog. Useful when expected traffic is not being captured.
• Added the Helm value tap.dashboard.completeStreamingEnabled, which sets the default mode for full (with payload) or partial (without payload) processing. This option can also be controlled from the dashboard.
• Added the Helm value tap.auth.dexOidc.bypassSslCaCheck, which allows communication with a Dex IdP using an unknown SSL Certificate Authority, preventing SSL CA-related errors.
• Added support for azure-csi-premium for RWX PVC volumes (https://github.com/kubernetes-sigs/azuredisk-csi-driver/tree/master/deploy/example/sharedisk).
• Disabled the online chat option by default.
• Added support for a GitOps-friendly mode where dynamically changed configmap and secret values are preserved during Helm upgrades, avoiding CI/CD system overrides while Kubeshark is running.
• Enabled the kubeshark CLI to use a proprietary configuration file.
• Fixed a protocol matcher bug caused by packet loss (#1746).
• Fixed a panic that occasionally occurred in the Kafka dissector.
• Fixed a bug where the watchdog function could crash the Worker when no traffic was being processed on the node.
• Fixed a bug in the kubeshark scripts command where it didn't exit properly upon receiving ^C.

Patches

When new patch release are published, that will be added automatically and listed in this section

v52.7.1 (2025-04-30)

• Added the ability to take a PCAP snapshot (e.g., the last hour of cluster-wide traffic) and download the PCAP repository directly from the dashboard. This essentially integrates the pcapdump command into the dashboard.
• Automation templates can now start automatically by referencing them in the configuration.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.0/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.0/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.0/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.7.0/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.7.0/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

V52.6.0 (2025-03-24)

Release Highlights

In this release, we fixed several bugs and added notable integrations. Highlights include support for OIDC with DEX and the ability to host Kubeshark behind a reverse proxy using a custom path.

Keywords: SCTP, LDAP, OIDC, DEX, Reverse Proxy

Bug Fixes & New Features

• Optimized service map performance for large clusters (thousands of pods and above).
• Improved SCTP reassembler support.
• Fixed a bug related to LDAP protocol dissection.
• Added OIDC with DEX integration for SSO authentication.

Read more in our OIDC with DEX section.

• Introduced a watchdog mechanism that terminates the Worker if it deems it non-functional. This feature is enabled by default and can be disabled using the Helm value: --set tap.watchdog.enabled=false
• Added support for hosting Kubeshark behind a reverse proxy with a custom path.

Read more in our Reverse Proxy with a Custom Path section.

Patches

When new patch release are published, that will be added automatically and listed in this section

v52.6.2 (2025-03-27)

• Critical bug fixes (#1730, #1729)

v52.6.3 (2025-03-29)

• Bug fix (#1732)

v52.6.4 (2025-04-10)

• Bug fix (#1741)
• View real-time streaming API flows without full payload capture — a disk- and CPU-efficient method optimized for tcp, udp, and syscall visibility.
• Improved both the service-map and API calls tabs with enhanced workload identity visualization and many new features and functions.

v52.6.7 (2025-04-30)

• Added the ability to take a PCAP snapshot (e.g., the last hour of cluster-wide traffic) and download the PCAP repository directly from the dashboard. This essentially integrates the pcapdump command into the dashboard.
• Automation templates can now start automatically by referencing them in the configuration.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.6.0/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.6.0/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.6.0/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.6.0/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.6.0/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

V52.5.0 (2025-03-01)

Release Highlights

In this minor release, we've added support for taints and tolerations for all Kubeshark images (front, hub, and worker).

Patches

When new patch release are published, that will be added automatically and listed in this section

v52.5.1 (2025-03-03)

• Improve dashboard performance in large clusters (over 50 nodes)
• Add support for clusters with spot instances

v52.5.2 (2025-03-07)

• Fixed a bug where on random occasions the Worker would stop processing traffic until restarted (#1720)

v52.5.3 (2025-03-14)

• Store latest state of the service map in the browser cache.

v52.5.6 (2025-03-25)

• Optimized service map performance for large clusters (thousands of pods and above).
• Improved SCTP reassembler support.
• Fixed a bug related to LDAP protocol dissection.

v52.5.9 (2025-03-27)

• Critical bug fixes (#1730, #1729)

v52.5.10 (2025-03-29)

• Bug fix (#1732)

v52.5.11 (2025-04-10)

• Bug fix (#1741)
• View real-time streaming API flows without full payload capture — a disk- and CPU-efficient method optimized for tcp, udp, and syscall visibility.
• Improved both the service-map and API calls tabs with enhanced workload identity visualization and many new features and functions.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.5.0/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.5.0/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.5.0/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.5.0/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.5.0/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

V52.4.0 (2025-02-05)

Release Highlights

In this new minor release, in addition to fixing bugs and improving performance, we’ve implemented a few significant features.

Automatic Patch Updates

Benefit: Quicker bug fixes

Going forward, the major.minor tag will always include the latest patch release. An explicit patch version can still be used by using the major.minor.patch tag (e.g., 52.3.96 or 52.4.0).

Automatic Packet Capture Technology Choice per Node

Benefit: Harvest more information using fewer resources (CPU, memory)

An algorithm now attempts to find the best packet capture technology for each node. Selecting the optimal packet capture technology per node can significantly impact the amount of information harvested by Kubeshark, as well as memory and CPU consumption.

This optimal method depends on the node’s kernel version, supported networking technologies (e.g. eBPF, Cgroup V1 or V2, AF_PACKET, etc), and available security capabilities.

The flow is:
eBPF on Cgroup V2 => eBPF on Cgroup V1 => AF_PACKET => libpcap

You can still explicitly set the packet capture technology by configuring the appropriate Helm value. For example:

--set tap.packetCapture=af_packet

Default Protocol Port Mapping

Benefit: Faster protocol detection and dissection

We’ve added default port mapping to test and detect protocols based on the ports being used. For example, if port 80 or 443 is detected, Kubeshark will first attempt to test for HTTP. If the protocol is not identified as HTTP, Kubeshark will continue testing against all other protocol options.

This approach helps reduce false detections and optimizes the time required to begin dissecting a specific protocol. When default ports aren’t used, users can modify the default port mapping by setting the tap.portMapping Helm value.

New Features & Bug Fixes

• Automatic determination of the best packet capture technology per node
• Automatic patch update system
• Added default port mapping for better protocol detection and faster dissection
• Fixed a few bugs related to the kubeshark pcapdump command
• Fixed the missing pull secret alignment (ce7913c)
• Refactored the workers’ security context, enabling more granularity with configuration support for AppArmor, SELinux, and more
• Added a way to see Kubeshark’s logs in the dashboard by enabling the script named: Kubeshark Logs and Pod Events Report
• Added a way to monitor the Hub and workers’ CPU and memory consumption in the dashboard by enabling the script named: Monitor Kubeshark Resources
• Improved the Hub’s memory and CPU consumption
• Fixed a DNS-related panic (#1708))
• Fixed an issue in the service map where aggregation numbers (e.g., bandwidth, CPU) related to Kafka were incorrect

Patches

• Fixed Websocket related panic that was due to an oversized message size (#1713).
• Removed some redundant warnings from the Workers' logs.
• Optimized Workers CPU consumption.
• Added KFL selectors the the legend components int he legend section in the Service Map.
• Scan and redact sensitive information also in the response and request bodies in addition to the headers and cookies
• Show/hide map nodes & edges on legend click.
• Make script editor compatible with air-gapped environments.
• Bug fix: When non-Kubeshark pods may not terminate correctly (#1718)
• Address an edge-case when ebpf is explicitly requested and the Tracer is disabled (--set tap.tls=false and --set tap.packetCapture=ebpf).
• Add Sentry for better remote support
• Avoid a potential deadlock in the Hub
• Fixed #1719

v52.4.10 (2025-03-03)

• Improve dashboard performance in large clusters (over 50 nodes)
• Add support for clusters with spot instances

v52.4.11 (2025-03-07)

• Fixed a bug where on random occasions the Worker would stop processing traffic until restarted (#1720)

v52.4.12 (2025-03-14)

Store latest state of the service map in the browser cache.

v52.4.13 (2025-03-25)

• Optimized service map performance for large clusters (thousands of pods and above).
• Improved SCTP reassembler support.
• Fixed a bug related to LDAP protocol dissection.

v52.4.16 (2025-03-27)

• Critical bug fixes (#1730, #1729)

v52.4.17 (2025-03-29)

• Bug fix (#1732)

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.4.0/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.4.0/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.4.0/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.4.0/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.4.0/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

V52.3.96 (2025-01-24)

Release Highlights

In this release, we introduced a new protocol: Diameter.
We also fixed multiple bugs and added additional configuration values to support scheduling on specific nodes, specific DNS configurations, and more.

Keywords: pcapdump, Diameter, DNS, LDAP

New Features & Bug Fixes

• Introduced support for the new protocol: Diameter.
• Fixed multiple bugs in the pcapdump command.
• Resolved a bug related to the LDAP protocol that caused the sniffer to crash.
• Fixed an issue where the tap.tls=false option was broken, preventing the Worker daemon-set from functioning without the Tracer when eBPF is not supported on the host. (#1699)
• Addressed a bug in the DNS protocol where the source and destination order was reversed.
• Corrected an error that displayed an incorrect aggregate bandwidth figure for TCP packets in the service map. (#1692)
• Enhanced the nodeSelector directive to include the hub and front deployments, in addition to the worker nodes. This allows users to schedule the hub and front on persistent nodes (e.g., control plane), which is particularly useful when using spot instances.
• Added support for specific DNS configurations (e.g., ndots: 2) in the Helm templates.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.96/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.96/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.96/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.96/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.96/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.