Repository navigation

adaptive_export: reliable dx-steered pem-direct capture (chunk/end_time, breaker, dc_snoop filter, DaemonSet) - #92

Open

ConstanzeTU wants to merge 212 commits into

mainfrom

fix/ae-protocol-export-pxexport

Open

adaptive_export: reliable dx-steered pem-direct capture (chunk/end_time, breaker, dc_snoop filter, DaemonSet)#92
ConstanzeTU wants to merge 212 commits into
mainfrom
fix/ae-protocol-export-pxexport

Commits on Aug 7, 2026
Commits on Aug 14, 2026
Commits on Aug 15, 2026
Commits on Aug 16, 2026
Commits on Aug 17, 2026
Commits on Aug 18, 2026
- ae/pxl: stamp hostname on socket_tracer exports (#136 pushdown)
  entlein
  committed
  75eec19
- ae: dx_order_seeds table + dc_snoop dark-path hostname (#136)
  entlein
  committed
  49b0c2d
- px/dx_evidence_graph: multi-panel pre-correlation dashboard (#136)
  entlein
  committed
  57268e1
- test(clickhouse): dx_order_seeds joins the OperatorOwnedTables tail guard
  constanze
  committed
  3f6b89f
Commits on Aug 19, 2026
Commits on Aug 20, 2026
Commits on Aug 21, 2026
Commits on Aug 22, 2026
Commits on Aug 23, 2026
Commits on Aug 24, 2026
- deploy: pin dx 0.5.0-keepset-rc11 (streaming loop-1 pull, O(batch) memory)
  entlein
  committed
  891f46e
- deploy: pin AE 0.14.19-aeprod81 (dx_dns_resolve ts column)
  entlein
  committed
  2774527
- fix(ae): honour an intentionally tight /query window instead of widening to 600s
  entlein
  committed
  9b4ec24
- ae schema: dx_ord__* event_time as DateTime64 (engage connector time filter)
  entlein
  committed
  5bc2c1d
- ae: bridge cql/mongodb/creds_change, drop the six phantom tracepoint tables
  entlein
  committed
  3feccaa
- ae: register the three new dx_ord__ bridge views so Apply creates them
  constanze
  committed
  9352a82
- test(clickhouse): guard schema.sql against the registration lists
  constanze
  committed
  6aa30b1
- ae schema: ORDER BY includes the message payload (mirrors dx UID keys)
  entlein
  committed
  e76cd2e
Commits on Aug 25, 2026
Commits on Aug 26, 2026
Commits on Aug 30, 2026
- cockpit: add soc.k8sstormcenter.com ingress hosts alongside the existing domain
  entlein
  committed
  f2dc1ce
Commits on Sep 6, 2026
- ae schema: expose offender (infectedPID/offender/profile) on dx_src__kubescape_mitre
  entlein
  committed
  e5b7f22
- ae preset: pid-namespace guard on dc_snoop (K1)
  entlein
  committed
  08eb6f6
- ae preset: scope the BTF comment to what is actually proven
  entlein
  committed
  830070a
- ae: fix schema apply (semicolon in comment) + stop logging secrets
  entlein
  committed
  7a1aae4
- ae: stop re-upserting a live tracepoint on every boot (it undoes K1)
  entlein
  committed
  e6da2a8
- pxl_scripts/dx: strip comments (sync from feat/pixie-native-sbob)
  
  entlein
  and
  claude
  committed
  9dc0ec1
- ae: async_insert on adaptive_attribution writes
  
  entlein
  and
  claude
  committed
  1f3207b
Commits on Sep 7, 2026
- ae schema: own the dx shadow/forest surface
  
  entlein
  and
  claude
  committed
  87153c3
- Revert "ae schema: own the dx shadow/forest surface"
  
  entlein
  and
  claude
  committed
  4a36545
- adaptive_export: wire dark-vector pod-enrichment into the streaming scanner (complete #89)
  entlein
  committed
  c418770
- build(ae): add the internal/pxl dep to streaming (strict deps)
  constanze
  committed
  4f860ba
- adaptive_export: gofumpt queryfor.go; regenerate pxl_scripts README
  entlein
  committed
  5398211
- lint: yamllint the AE/dx manifests and skaffold configs; unshadow ref in graph.tsx
  entlein
  committed
  de6714f
- lint: yaml document-start markers
  entlein
  committed
  99bda7f
Commits on Sep 9, 2026
- adaptive_export: deploy 0.15.2-rc1, the image built from this tree
  ConstanzeTU
  committed
  3adf8e5
- adaptive_export: deploy 0.15.2-rc1, the image built from this tree
  ConstanzeTU
  committed
  2090b16
- adaptive_export: deploy 0.15.2-rc1, the image built from this tree
  ConstanzeTU
  committed
  36a63dc
- adaptive_export: assert the control Service selector, and fail loudly with no endpoints
  ConstanzeTU
  committed
  2ade93c
- adaptive_export: 0.15.3-rc1
  ConstanzeTU
  committed
  a744b00
- adaptive_export: enable the engine migration
  ConstanzeTU
  committed
  afc921d
- adaptive_export: 0.15.4-rc1
  ConstanzeTU
  committed
  2308da0
- adaptive_export: 0.16.0-rc1
  ConstanzeTU
  committed
  d07193c
Commits on Sep 10, 2026
- adaptive_export: 0.16.1-rc1
  ConstanzeTU
  committed
  b10ade6
- adaptive_export: 0.16.2-rc1
  ConstanzeTU
  committed
  2e0f419
- adaptive_export: 0.16.3-rc1
  ConstanzeTU
  committed
  a243014
- adaptive_export: 0.16.4-rc1 (kssync)
  ConstanzeTU
  committed
  7b06fd6
- adaptive_export RBAC: read kubescape CRDs + the trust ConfigMap for kssync
  ConstanzeTU
  committed
  0380e80
- adaptive_export: 0.16.5-rc1 — adds columns the cluster lacks (rogueartifacts pod_uid)
  ConstanzeTU
  committed
  05950a1
- adaptive_export: 0.16.6-rc1 — dx_profiles__latest view
  ConstanzeTU
  committed
  31edba7
- adaptive_export: 0.16.7-rc1 — the profiles view returns rows
  ConstanzeTU
  committed
  e262fcb
- adaptive_export: 0.16.8-rc1 — profiles view correct by structure
  ConstanzeTU
  committed
  7384b9e
- adaptive_export: 0.16.9-rc1 — profiles view projects hostname
  ConstanzeTU
  committed
  130bad5
- adaptive_export: 0.16.10-rc1 — kubescape_rogue_lifecycle
  ConstanzeTU
  committed
  cdac038
- adaptive_export: 0.16.12-rc1 — node column, connector contract enforced
  ConstanzeTU
  committed
  8e46535
- adaptive_export: 0.16.13-rc1
  ConstanzeTU
  committed
  dae9069
Commits on Sep 11, 2026
Commits on Sep 12, 2026
Commits on Sep 13, 2026
Commits on Sep 18, 2026
- k8s,skaffold: tidy deploy comments
  
  constanze
  and
  claude
  committed
  3d8c607
- skaffold: resolve the pull config from DOCKER_CONFIG when the caller sets it
  
  constanze
  and
  claude
  committed
  dd1bda6
Commits on Sep 19, 2026
- k8s/vizier: dx 0.6.0-shadow-rc90 + AE 0.16.45-rc1; dx reads kubescape profiles and rogue artifacts (read-only RBAC, kssync lease, pod namespace env); skaffold: lint
  constanze
  committed
  81b179d
- k8s/vizier/dx: 0.6.0-shadow-rc91; DX_CAPTURE_POLICY on the DaemonSet, adaptive_base by default
  constanze
  committed
  9d60bf8
- k8s/vizier/dx: 0.6.0-shadow-rc92
  constanze
  committed
  ecc441b
- k8s/vizier/dx: 0.6.0-shadow-rc93
  constanze
  committed
  5cbd574
Commits on Sep 20, 2026
- k8s/vizier/dx: 0.6.0-shadow-rc94
  constanze
  committed
  57665ef
- k8s/vizier: AE 0.16.46-rc1
  constanze
  committed
  0df8303
Commits on Oct 4, 2026
- pins
  constanze
  committed
  9c783b1
Commits on Oct 7, 2026
- k8s/vizier/dx: pin the image in the kustomization, as adaptive_export does
  entlein
  committed
  3de9b46
- k8s/vizier: scope adaptive_export's RBAC to what it uses
  entlein
  committed
  4b8bd24
- k8s/vizier, skaffold: adaptive_export owns its own deploy
  entlein
  committed
  d413835
- k8s/vizier: adaptive_export keeps only the cluster grant it uses
  entlein
  committed
  54edd72
- skaffold: one install for the export path
  entlein
  committed
  318c4dc
- skaffold: one file for the export path
  entlein
  committed
  0d5734f
- k8s/vizier, skaffold: the vizier bundle no longer carries adaptive_export
  entlein
  committed
  3a42653
- k8s/vizier: one definition per thing on the export path
  entlein
  committed
  a853252
- skaffold: the export deploy changes nothing when no image changed
  entlein
  committed
  71069c2
- skaffold: the namespace for the export path is set in one place
  entlein
  committed
  36b2a12
- k8s/vizier: name the export path prerequisites
  entlein
  committed
  7f06579
Commits on Oct 8, 2026
- dx: optional mount for the alert stream key
  ConstanzeTU
  committed
  28ec82f
- dx: image pin update
  ConstanzeTU
  committed
  fadeada
- dx: image pin update
  ConstanzeTU
  committed
  ed95766
Commits on Oct 10, 2026
- dx: image pin update
  ConstanzeTU
  committed
  09e9f04
Commits on Oct 12, 2026
- dx: bump dx-daemon image
  ConstanzeTU
  committed
  46998ba
- dx: restore dx-daemon image
  ConstanzeTU
  committed
  6a10643