[stable/kiam] add option to use hostNetwork for server (#7129)

* [stable/kiam] add option to use hostNetwork for server

* [stable/kiam] bump chart version to 1.2.0

stable/kiam/Chart.yaml

@@ -1,5 +1,5 @@
 name: kiam
-version: 1.1.0
+version: 1.2.0
 appVersion: 2.8
 description: Integrate AWS IAM with Kubernetes
 keywords:

stable/kiam/README.md

@@ -124,6 +124,7 @@ Parameter | Description | Default
 `server.tlsFiles.key` | Base64 encoded strings for the server's private key | `null`
 `server.tolerations` | Tolerations to be applied to server pods | `[]`
 `server.updateStrategy` | Strategy for server DaemonSet updates (requires Kubernetes 1.6+) | `OnDelete`
+`server.useHostNetwork` | If true, use hostNetwork on server to bypass agent iptable rules | `false`
 `rbac.create` | If `true`, create & use RBAC resources | `true`
 `serviceAccounts.agent.create` | If true, create the agent service account | `true`
 `serviceAccounts.agent.name` | Name of the agent service account to use or create | `{{ kiam.agent.fullname }}`

stable/kiam/templates/server-daemonset.yaml

@@ -30,6 +30,7 @@ spec:
       {{- end }}
     spec:
       serviceAccountName: {{ template "kiam.serviceAccountName.server" . }}
+      hostNetwork: {{ .Values.server.useHostNetwork }}
     {{- if .Values.server.nodeSelector }}
       nodeSelector:
 {{ toYaml .Values.server.nodeSelector | indent 8 }}

stable/kiam/values.yaml

@@ -179,6 +179,9 @@ server:
   ## Session duration for STS tokens
   ##
   sessionDuration: 15m
+  ## Use hostNetwork for server
+  ## Set this to true when running the servers on the same nodes as the agents
+  useHostNetwork: false
 
 rbac:
   # Specifies whether RBAC resources should be created