Allow to run filebeat pods as privileged (#8889)

Signed-off-by: Mickaël Canévet <mickael.canevet@camptocamp.com>

stable/filebeat/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 description: A Helm chart to collect Kubernetes logs with filebeat
 icon: https://www.elastic.co/assets/blt47799dcdcf08438d/logo-elastic-beats-lt.svg
 name: filebeat
-version: 1.5.0
+version: 1.5.1
 appVersion: 6.7.0
 home: https://www.elastic.co/products/beats/filebeat
 sources:

stable/filebeat/README.md

@@ -59,6 +59,7 @@ The following table lists the configurable parameters of the filebeat chart and
 | `serviceAccount.name`                                    | the name of the ServiceAccount to use                                                                     | `""`                                               |
 | `podSecurityPolicy.enabled`                              | Should the PodSecurityPolicy be created. Depends on `rbac.create` being set to `true`.                                                                     | `false`                                               |
 | `podSecurityPolicy.annotations`                                    | Annotations to be added to the created PodSecurityPolicy:                                                                    | `""`                                               |
+| `privileged`                                             | Specifies wheter to run as privileged                                                                    | `false`                                            |
 
 Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
 

stable/filebeat/templates/daemonset.yaml

@@ -89,6 +89,9 @@ spec:
         {{- end }}
         securityContext:
           runAsUser: 0
+{{- if .Values.privileged }}
+          privileged: true
+{{- end }}
 {{- if .Values.resources }}
         resources:
 {{ toYaml .Values.resources | indent 10 }}

stable/filebeat/values.yaml

@@ -140,6 +140,8 @@ podSecurityPolicy:
     # seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
     # apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
 
+privileged: false
+
 ## Add Elastic beat-exporter for Prometheus
 ## https://github.com/trustpilot/beat-exporter
 ## Dont forget to enable http on config.http.enabled (exposing filebeat stats)