chore(deps): update actions/checkout action to v5 - abandoned

.github/workflows/cd-dashboard-release.yaml

@@ -13,7 +13,7 @@ jobs:
       packages: write
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Upload dashboard to release assets
         run: |
           VERSION=$(echo $GITHUB_REF | cut -d / -f 3)

.github/workflows/cd-docs-pdf.yaml

@@ -32,7 +32,7 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: false
       - id: doc-files

.github/workflows/cd-pages.yaml

@@ -16,7 +16,7 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - uses: oleksiyrudenko/[email protected]
@@ -29,7 +29,7 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
       - name: Login to GitHub Packages Docker Registry
-        uses: docker/login-action@v3.3.0
+        uses: docker/login-action@v3.4.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -80,7 +80,7 @@ jobs:
       - mike
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - name: Install Helm

.github/workflows/ci-docker-deployment.yaml

@@ -17,7 +17,7 @@ jobs:
           - 3.10
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Zip docker_compose directory and upload it
         run: |
           zip -r docker_compose.zip docker_compose 

.github/workflows/ci-main.yaml

@@ -39,7 +39,7 @@ jobs:
     continue-on-error: true
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: run fossa analyze and create report
         run: |
           curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.sh | bash
@@ -67,7 +67,7 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-python@v5
         with:
           python-version: "3.10"
@@ -79,7 +79,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -104,7 +104,7 @@ jobs:
         python-version:
           - "3.10"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Setup python
         uses: actions/setup-python@v5
         with:
@@ -137,7 +137,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Project
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 2
       - name: Get commit message
@@ -159,24 +159,27 @@ jobs:
     runs-on: ubuntu-latest
     if: "contains(needs.integration-tests-check.outputs.commit_message, '[run-int-tests]') || github.ref_name == 'develop'"
     timeout-minutes: 120
+    strategy:
+      matrix:
+        index: [1, 2, 3, 4, 5, 6]
     steps:
       - name: Checkout Project
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Setup python
         uses: actions/setup-python@v5
         with:
           python-version: "3.10"
       - name: run install_microk8s.sh
         run: |
-          sudo snap install microk8s --classic --channel=1.30/stable
+          sudo snap install microk8s --classic --channel=1.33/stable
           sudo apt-get install snmp -y
           sudo apt-get install python3-dev -y
       - name: run automatic_setup_microk8s.sh
         run: integration_tests/automatic_setup_microk8s.sh integration
       - name: run tests
         working-directory: integration_tests
         run: |
-          poetry run pytest --splunk_host="localhost" --splunk_password="changeme2" --trap_external_ip="$(hostname -I | cut -d " " -f1)" --sc4snmp_deployment="microk8s"
+          poetry run pytest --splunk_host="localhost" --splunk_password="changeme2" --trap_external_ip="$(hostname -I | cut -d " " -f1)" --sc4snmp_deployment="microk8s" -m part${{ matrix.index }}
 
   test-integration-compose:
     name: Run integration tests in docker compose deployment
@@ -185,9 +188,12 @@ jobs:
     runs-on: ubuntu-latest
     if: "contains(needs.integration-tests-check.outputs.commit_message, '[run-int-tests]') || github.ref_name == 'develop'"
     timeout-minutes: 120
+    strategy:
+      matrix:
+        index: [ 1, 2, 3, 4, 5, 6 ]
     steps:
       - name: Checkout Project
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Setup python
         uses: actions/setup-python@v5
         with:
@@ -213,4 +219,4 @@ jobs:
       - name: run tests
         working-directory: integration_tests
         run: |
-          poetry run pytest --splunk_host="localhost" --splunk_password="changeme2" --trap_external_ip="$(hostname -I | cut -d " " -f1)" --sc4snmp_deployment="docker-compose"
+          poetry run pytest --splunk_host="localhost" --splunk_password="changeme2" --trap_external_ip="$(hostname -I | cut -d " " -f1)" --sc4snmp_deployment="docker-compose" -m part${{ matrix.index }}

.github/workflows/ci-release-pr.yaml

@@ -31,7 +31,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: false
           persist-credentials: false
@@ -42,7 +42,7 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
       - name: Login to GitHub Packages Docker Registry
-        uses: docker/login-action@v3.3.0
+        uses: docker/login-action@v3.4.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

.github/workflows/ci-release.yaml

@@ -32,7 +32,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: false
           persist-credentials: false
@@ -43,7 +43,7 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
       - name: Login to GitHub Packages Docker Registry
-        uses: docker/login-action@v3.3.0
+        uses: docker/login-action@v3.4.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

.github/workflows/ci-ui-tests.yaml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Project
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 2
       - name: Get commit message
@@ -49,7 +49,7 @@ jobs:
 
     steps:
       - name: Checkout Project
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Python
         uses: actions/setup-python@v5
@@ -72,7 +72,7 @@ jobs:
 
       - name: install microk8s
         run: |
-          sudo snap install microk8s --classic --channel=1.30/stable
+          sudo snap install microk8s --classic --channel=1.33/stable
           sudo apt-get install snmp -y
           sudo apt-get install python3-dev -y
 

.github/workflows/mike.yaml

@@ -32,7 +32,7 @@ jobs:
       pages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - uses: oleksiyrudenko/[email protected]

.github/workflows/offline-installation.yaml

@@ -17,7 +17,7 @@ jobs:
           - "3.10"
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Setup python
         uses: actions/setup-python@v5
         with:

.github/workflows/update-tags.yaml

@@ -12,5 +12,5 @@ jobs:
       contents: write
       packages: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: haya14busa/action-update-semver@v1

CHANGELOG.md

@@ -3,8 +3,16 @@
 ## Unreleased
 
 ### Changed
+- implemented mTLS for Splunk 10
+- update default microk8s to 1.33
+- introduce `splunkMetricNameHyphenToUnderscore` parameter to make metric names follow Splunk schema
+- change default walk to get only SNMPv2-MIB
+- add `disableMongoDebugLogging` parameter to disable extensive pymnogo logs while `logLevel` is set to `DEBUG`
+- add `includeSecurityContextId` parameter to control whether to add the `context_engine_id` field to v3 trap events
 
 ### Fixed
+- fix text SNMP values with numbers and 'E' being interpreted as scientific notation
+- added missing `ipv6Enabled` flag in poller
 
 
 ## [1.12.3]

charts/splunk-connect-for-snmp/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 20.2.2
 - name: mibserver
   repository: https://pysnmp.github.io/mibs/charts/
-  version: 1.15.21
-digest: sha256:389e85827643b1799c9a08abe987403eeb5965bd0f1567339e4975f0460c78d3
-generated: "2025-06-03T15:48:49.0332+02:00"
+  version: 1.15.25
+digest: sha256:b7c83eee7395cbc67d21833ab21da52d1d43481c798e52d0a9a7f0a7c3fe05b4
+generated: "2025-08-13T13:56:57.099109+02:00"

charts/splunk-connect-for-snmp/Chart.yaml

@@ -14,12 +14,12 @@ type: application
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
 
-version: 1.12.3
+version: 1.13.0-beta.9
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "1.12.3"
+appVersion: "1.13.0-beta.9"
 #
 dependencies:
   - name: mongodb

charts/splunk-connect-for-snmp/templates/NOTES.txt

@@ -1,2 +1,2 @@
-Walk profiles no longer include IF-MIB family by default.
-If you've used this functionality before, please update the walk profile with ['IF-MIB'] varBind.
+Default walk no longer calls full oid tree, instead it is collecting only 'SNMPv2-MIB'.
+If you want to call full oid for the devices, you have to set enableFullWalk flag to true.

charts/splunk-connect-for-snmp/templates/inventory/job.yaml

@@ -50,6 +50,8 @@ spec:
             value: {{ .Values.scheduler.tasksExpiryTime | quote }}
           - name: CONFIG_FROM_MONGO
             value: {{ quote .Values.UI.enable | default "false" }}
+          - name: ENABLE_FULL_WALK
+            value: {{ .Values.poller.enableFullWalk | default "false" | quote }}
           volumeMounts:
             - name: config
               mountPath: "/app/config"

charts/splunk-connect-for-snmp/templates/traps/deployment.yaml

@@ -59,6 +59,8 @@ spec:
               value: "http://{{ printf "%s-%s" .Release.Name "mibserver" }}/standard.txt"
             - name: LOG_LEVEL
               value: {{ .Values.traps.logLevel | default "INFO" }}
+            - name: DISABLE_MONGO_DEBUG_LOGGING
+              value: {{ .Values.traps.disableMongoDebugLogging | quote }}
             - name: PYSNMP_DEBUG
               value: {{ .Values.pysnmpDebug | default "" | quote }}
             {{- if .Values.splunk.protocol }}
@@ -77,6 +79,8 @@ spec:
             {{- end}}
             - name: SPLUNK_HEC_INSECURESSL
               value: {{ .Values.splunk.insecureSSL | default "false" | quote }}
+            - name: INCLUDE_SECURITY_CONTEXT_ID
+              value: {{ .Values.traps.includeSecurityContextId | default "false" | quote }}
             - name: SNMP_V3_SECURITY_ENGINE_ID
               value: {{ join "," .Values.traps.securityEngineId }}
             - name: SPLUNK_HEC_TOKEN

charts/splunk-connect-for-snmp/templates/ui/_helpers.tpl

@@ -51,6 +51,8 @@ spec:
             value: {{ .Values.scheduler.logLevel | default "INFO" }}
           - name: CONFIG_FROM_MONGO
             value: {{ quote .Values.UI.enable | default "false" }}
+          - name: ENABLE_FULL_WALK
+            value: {{ .Values.poller.enableFullWalk | default "false" | quote }}
           volumeMounts:
             - name: config
               mountPath: "/app/config"

charts/splunk-connect-for-snmp/templates/worker/_helpers.tpl

@@ -117,6 +117,8 @@ Common labels
 {{- end}}
 - name: LOG_LEVEL
   value: {{ .Values.worker.logLevel | default "INFO" }}
+- name: DISABLE_MONGO_DEBUG_LOGGING
+  value: {{ .Values.worker.disableMongoDebugLogging | quote }}
 - name: UDP_CONNECTION_TIMEOUT
   value: {{ .Values.worker.udpConnectionTimeout | default "3" | quote }}
 - name: MAX_OID_TO_PROCESS
@@ -152,6 +154,8 @@ Common labels
   value: {{ .Values.splunk.insecureSSL | default "false" | quote }}
 - name: SPLUNK_AGGREGATE_TRAPS_EVENTS
   value: {{ .Values.traps.aggregateTrapsEvents | default "false" | quote }}
+- name: SPLUNK_METRIC_NAME_HYPHEN_TO_UNDERSCORE
+  value: {{ .Values.poller.splunkMetricNameHyphenToUnderscore | default "false" | quote }}
 - name: SPLUNK_HEC_TOKEN
   valueFrom:
     secretKeyRef:
@@ -179,6 +183,8 @@ Common labels
   value: {{ .Values.worker.poller.concurrency | default "4" | quote }}
 - name: PREFETCH_COUNT
   value: {{ .Values.worker.poller.prefetch | default "1" | quote }}
+- name: IPv6_ENABLED
+  value: {{ .Values.poller.ipv6Enabled | default "false" | quote }}
 {{- end }}
 
 {{- define "environmental-variables-sender" -}}

charts/splunk-connect-for-snmp/templates/worker/sender/deployment.yaml

@@ -46,6 +46,14 @@ spec:
           env:
             {{- include "environmental-variables" . | nindent 12 }}
             {{- include "environmental-variables-sender" . | nindent 12 }}
+            {{- if .Values.splunk.mtls.enabled }}
+            - name: SPLUNK_HEC_MTLS_CLIENT_CERT
+              value: /app/hec-mtls/tls.crt
+            - name: SPLUNK_HEC_MTLS_CLIENT_KEY
+              value: /app/hec-mtls/tls.key
+            - name: SPLUNK_HEC_MTLS_CA_CERT
+              value: /app/hec-mtls/cacert.pem
+            {{- end }}
           {{- if .Values.worker.livenessProbe.enabled }}
           livenessProbe:
             exec:
@@ -63,6 +71,11 @@ spec:
             periodSeconds: {{ .Values.worker.readinessProbe.periodSeconds }}
           {{- end }}
           volumeMounts:
+            {{- if .Values.splunk.mtls.enabled }}
+            - name: hec-mtls
+              mountPath: "/app/hec-mtls"
+              readOnly: true
+            {{- end }}
             - name: config
               mountPath: "/app/config"
               readOnly: true
@@ -102,6 +115,11 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
       volumes:
+        {{- if .Values.splunk.mtls.enabled }}
+        - name: hec-mtls
+          secret:
+            secretName: {{ .Values.splunk.mtls.secretRef }}
+        {{- end }}
         # You set volumes at the Pod level, then mount them into containers inside that Pod
         - name: config
           configMap: