Release Notes

1.2.0

• TCA now available as Github Action. Check here for more details.
• New configuration checks added including FIPS 140-2 compliance checks:
  • TIS0005 - Root CA certificate is invalid or has expired
  • TIS0902 - Using tracing configuration in MeshConfig is not recommended
  • TIS1701 - The compliance policy is either missing, invalid, or not set to enforce FIPS 140-2 requirements
  • TIS1702 - The gateway’s TLS configuration (version or cipher suites) does not comply with strict FIPS 140-2 requirements
  • TIS1703 - The image is not FIPS compliant
• FIPS compliance checks can be enabled using --enable-fips flag for configuration analysis and --enable-fips-workload flag for workload analysis. Note that FIPS workload analysis can take significant time and it is recommended to scope to specific namespaces.
• Added support for multiple mesh config files for analysis using multiple -f flags.
• Added support for passing kubeconfig as stdin using - flag.
• Added support for disabling hyperlink in terminal output using --output-disabled-hyperlink flag. This is useful when you want to copy the output to a text file.
• Bug fixes for several configuration checks.

1.1.0

• New configuration checks added:
  • TIS0305 - Gateway Server Credentials are Invalid
  • TIS0804 - MeshConfig Telemetry Configuration Detected
  • TIS1109 - Protocol Mismatch Between Gateway and VirtualService
  • TIS1402 - Reference Does Not Have a Valid Service (Service Name Not Found)
• Configuration checks are now organized by categories: General, Security, Traffic, Gateway, Extension and Telemetry.
• Added ability to suppress specific checks using --ignore-check flag.
• Added PDF export for analysis results using -o pdf flag.
• Added support for display table without borders using --table-style simple flag.
• Enhanced documentation access: Click on codes to view detailed explanations and recommendations.
  • Only supported for terminal emulators that support hyperlinks. See here for list of terminal emulators that support hyperlinks.
  • If your terminal emulator does not support hyperlinks, you can still view the documentation by copying the code and pasting it in your browser with following url https://docs.tetrate.io/istio-subscription/tools/tca/analysis/<CODE>. Example https://docs.tetrate.io/istio-subscription/tools/tca/analysis/TIS0001.
  • Another options is to export the analysis results to PDF.

1.0.0

• Initial release