2026.01.14 Release Note

This version introduces PostgreSQL parsing as a first citizen of Spider.

Upgrade risk

info

• No compatibility issue 👍

warning

Breaking change!
As PostgreSQL parsing is now a first citizen of Spider, Parsing HTTP by default on all TCP ports is not anymore the default configuration of Whisperers.

This might impact your Whisperers if you are using the default configuration.
You should check and adjust it if needed.

This change was required:

• to avoid parsing HTTP on PostgreSQL ports, which leads to many parsing errors logs.
• to avoid useless CPU load and reduce your bill 😉
• for consistency on PostgreSQL parsing settings, which is not to parse by default on all TCP ports.

... That change broke my regression tests 😅

Key changes

• PostgreSQL parsing in streaming
• Bug fixes for even better resiliency.

How to upgrade

1. Use Helm chart 6.0.0 from repository
2. Adjust global.version field value to 2026.01.14 in your values.yaml
3. Deploy

tip

To activate PostgreSQL parsing, set flips.postgresqlParsing to true in your values.yaml.

See Reference documentation for details.

Versions

Spider

New versions of Spider components:

Component	Version	Docker tag
Helm chart	6.0.0	-
Analysis UI	13.0	2026.01.14
Controllers	2.3	2026.01.14
Gossipers	7.7	2026.01.14
Gociphers	1.8	2026.01.14
Back office	-	2026.01.14
Login UI	-	2026.01.14
Monitoring UI	-	2026.01.14

Dependencies

This operator is required on the Kube where Spider is installed.

Dependency	Version
Elastic Cloud for Kubernetes	2 or 3

These components are set up in the correct versions by the Helm chart:

Dependency	Version	Docker tag
Elastic stack	9.1*	9.1
Redis	8.2	8-alpine
Traefik	3.5	v3.5

(*) Version 7 is still available and compatible for clusters still using ECK 2.

Compatibility

Spider has been successfully tested under these versions of dependencies:

3rd party software	Version
Helm	3.14+
Kube	1.24+

List of changes

Helm chart

✨ New features	PostgreSQL parsing stack Feature flip (not) to deploy PostgreSQL parsing stack
⚙️ Improvements
🐞 Bug fixes	Accept special chars in Redis password Move redis.conf to secrets now that they embed the password

Analysis UI

✨ New features	Whisperer parsing tab can configure PostgreSQL parsing PSQL view with custom timeline, grid, map, dashboard, details, access filters, public links, etc. Are still missing: JSON import & export, uploaded communications purge. TCP details + grid now show PSQL parsing details on top of TLS and HTTP. Fields improvements. Button to get API key for Gociphers in JSON (for standalone ones)
⚙️ Improvements	Add infinite scroll to Controller Attachments and Gociphers TLS targets for better scaling
🐞 Bug fixes	Fix body size missing in HTTP Details view when content length header was absent (like for chunked transfer encoding) Fix time free text input right to timeline when another timezone than user's is selected Fix xAxis of Heatmap that was be messy when displaying at millisecond precision Fixed non visibility of tooltips in Plugins params Fixed removing stats issue when reloading was in progress

Controllers

✨ New features
⚙️ Improvements	Removed state resetting every 15 minutes, as it was causing issues with Kube API with a high loaded cluster (timeouts from Kube). Enforce object allowed parents to prevent Zalando operator to ruin the internal state.
🐞 Bug fixes	Fix regression that caused a race condition when resetting state every 15 minutes, that caused controller to sometimes lose track of a share of the PODs.

Gossipers (Whisperers)

✨ New features
⚙️ Improvements	Upgrade to Go 1.25.1
🐞 Bug fixes

Gociphers

✨ New features
⚙️ Improvements	Upgrade to Go 1.25.1 Do not start network usage capture when networkUsageURL is not defined in environment
🐞 Bug fixes	Resiliency improvment - Manage ephemeral processes in containers when doing discovery

Back office

✨ New features	Postgresql parsing stack (4 pollers, 3 indices, 1 parser)
⚙️ Improvements	Refactoring to allow easily addition of new parsed protocols.
🐞 Bug fixes	Fix error when installing plugins (was returning 401 when getting manifest) Fix bug that caused TCP Parsing Status not to be saved Fix bug with Gocipher status aggregation when Gocipher is deployed as standalone

Login UI

✨ New features
⚙️ Improvements
🐞 Bug fixes

Monitoring UI

✨ New features	Postgresql parsing stack in Summary screen Add Postgresql parsing charts in Parsing screen
⚙️ Improvements
🐞 Bug fixes

Online documentation

Main updated parts:

• Reference values.yaml - Activate PostgreSQL parsing
• Whisperer parsing configuration for PostgreSQL
• PostgreSQL communication details
• New services configuration
• Summary monitoring screen update
• Parsing monitoring screen update

API impacts

note

This section informs about any impact on Spider API, so you may adjust your scripts.

• Components lists
• Pg Read API

Data impacts

note

The table below tells if there are data mapping changes in Elasticsearch indices, associated or not with migrations (Yes ✅ / No ❌).
Migration are automated at upgrade time, but they may leave unattended indices that you have to remove manually.

Index	Description	Migration
spider-pgcom-upload-*	Stores uploaded pg coms metadata	New
spider-pgcom-streaming-*	Stores streamed pg coms metadata	New
spider-pgcomcontent-upload-*	Stores uploaded pg coms contents	New
spider-pgcomcontent-streaming-*	Stores streamed pg coms contents	New
spider-pgparsing-upload-*	Stores parsing log for uploaded pg coms	New
spider-pgparsing-streaming-*	Stores parsing log for streamed pg coms	New
spider-parsing-status-pgparsing-streaming-*	Stores parsings status for streamed pg coms	New