- Fix: Disable experimental post-quantum key exchange mechanism X25519Kyber768Draft00 for outgoing TLS connections to the control plane. This was introduced in 0.8.2 with the upgrade to Go 1.23, but was found to have issues with AWS Network Firewall.
- Fix: Log more context around failed updates, such as batch and namespace information.
- Fix: Reduce log noise around Kubernetes API rate limiting
- New: Memory optimizations for reading Kubernetes objects.
- Fix: Trim whitespace around namespaces.
- Info: Updated dependencies.
- New: Performance enhancements for ingesting objects across large clusters.
- Info: Updated dependencies for security patches.
- Info: Added support for arm64 systems.
- Info: Added support for Argo Rollouts
- Fix: Fix bug in backoff calculations that would make Chao wait longer than it should after encountering API errors. This would lead to registered clusters disappearing and re-appearing in the Gremlin UI.
-
Info: Change maximum allowed
max_backoff_durationfrom10mto4m. This is also the new default. Users specifying a longer backoff will see Chao agents fail to start as a result. - Info: Improved logging around API errors, removing large error outputs and other noise.
- New: Provided Chao has access to a valid AWS credentials chain, it now interprets AWS ARN values in
GREMLIN_TEAM_ID,GREMLIN_TEAM_SECRET,certPath,keyPath. Chao supports ARN values from AWS Secrets Manager or AWS Systems Manager Parameter Store. Chao can optionally be supplied withGREMLIN_IAM_ROLEto specify a role to assume for the strict purpose of fetching secret values.
- New: Chao provides a small amount of jitter (5%) between sending data to the backend to avoid thundering herds when multiple clusters restart at the same time
- New: Dependency updates and security patches
- New: Chao now tracks the `PodStatus` of the pods in your cluster, which will be used for future Detected Risks.
- New: Chao now sends the
imageID(e.g.docker.io/my/image@sha256:e10723f3ce663b535d00e21447d0ddb6895e0d08454e53398211318890ecb9029) of each container to inform detected risks.