Every required scenario ran, every case passed within the retry budget, and every remaining gap carries an unexpired waiver.
Generated 2026-10-08T08:59:30Z. Scope: every suite a release requires.
How these suites measure what they measure, and what they do not cover: Benchmark Methodology.
| Scenario | Result | Checks passed/total | What it tests |
|---|---|---|---|
| dissection-all | PASS | 16/16 | Test all protocol dissectors via UIEventService |
| kfl-filter | PASS | 15/15 | Comprehensive KFL2 filter verification across syntax, operators, and field types |
| license-enforcement | PASS | 1/1 | License refusal matrix: an unsigned license must refuse every gated route, and the install must recover |
| raw-capture-multi | PASS | 1/1 | Verify raw L4 capture with multiple traffic types |
| resilience | PASS | 3/3 | Fault injection: the hub must notice a worker or hub disappearing and get capture back |
| snapshot | PASS | 6/6 | Snapshot creation, export, and filtering tests |
| tls-decryption | PASS | 9/9 | Verify Kubeshark decrypts TLS-wrapped traffic across the four registry-go-tls strategies (go-stripped, go-crypto-tls, boringssl-static, openssl) |
| Scenario | Result | What it tests |
|---|---|---|
| flows2-20w-100pods | PASS | 20 workers, flows2 polling (+100 fake pods) |
| snapshot-10w-100pods | PASS | Snapshot creation at Small tier (10 workers, 100 pods) with fake pcap production |
| stream-20w-100eps-100pods | PASS | 20 workers streaming 100 entries/s each (+100 fake pods) |
| stream-scaledown-50to20w-100eps-300to100pods | PASS | Scale-down: 50->40->30->20 workers, 300->200->150->100 pods at 100 EPS each |
| stream-scaleup-20to50w-100eps-100to300pods | PASS | Scale-up: 20->30->40->50 workers, 100->150->200->300 pods at 100 EPS each |
| stream-stability-50w-100eps-400pods | PASS | Stability: 50 workers at 100 EPS with 400 pods for 1h to detect memory leaks/crashes |
| tier-large | PASS | Hub baseline at Large tier (100 workers, 1000 pods, 10m steady-state) |
| tier-medium | PASS | Hub baseline at Medium tier (50 workers, 500 pods, 10m steady-state) |
| tier-small | PASS | Hub baseline at Small tier (10 workers, 100 pods, 10m steady-state) |
| tier-xl | PASS | Hub baseline at XL tier (200 workers, 2000 pods, 30m steady-state at 20.2k nominal entries/s) |
| stream-soak-2h-50w-100eps-400pods | PASS | Release soak: 50 workers at 100 EPS with 400 pods for 2h, certifying the hub over a release-length window |
Every gap this run leaves behind, waived or not. A waived gap is still a gap; the waiver says who accepted it and when it has to be looked at again.
| Gap | Kind | Waiver | Approver | Expires | Detail |
|---|---|---|---|---|---|
manual/license-enforcement/POST /license/remove |
manual-check | waived | Volodymyr Stoiko | 2026-12-04 | POST /license/remove is not machine-verified: requires a Descope owner session token and refresh token; manual, not machine-verified |
manual/license-enforcement/POST /license/remove: Removing a license needs a Descope owner session token and a refresh token, neither of which a throwaway CI cluster can obtain. The route is exercised by hand against a real tenant before a release.