diff --git a/stable/filebeat/Chart.yaml b/stable/filebeat/Chart.yaml index b8f4b77df8..da4bc09f36 100644 --- a/stable/filebeat/Chart.yaml +++ b/stable/filebeat/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v1 description: A Helm chart to collect Kubernetes logs with filebeat icon: https://www.elastic.co/assets/blt47799dcdcf08438d/logo-elastic-beats-lt.svg name: filebeat -version: 1.5.0 +version: 1.5.1 appVersion: 6.7.0 home: https://www.elastic.co/products/beats/filebeat sources: diff --git a/stable/filebeat/README.md b/stable/filebeat/README.md index 96cfeab3aa..8a972d0094 100644 --- a/stable/filebeat/README.md +++ b/stable/filebeat/README.md @@ -59,6 +59,7 @@ The following table lists the configurable parameters of the filebeat chart and | `serviceAccount.name` | the name of the ServiceAccount to use | `""` | | `podSecurityPolicy.enabled` | Should the PodSecurityPolicy be created. Depends on `rbac.create` being set to `true`. | `false` | | `podSecurityPolicy.annotations` | Annotations to be added to the created PodSecurityPolicy: | `""` | +| `privileged` | Specifies wheter to run as privileged | `false` | Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. diff --git a/stable/filebeat/templates/daemonset.yaml b/stable/filebeat/templates/daemonset.yaml index a78bcfa8a0..2b8e2657ca 100644 --- a/stable/filebeat/templates/daemonset.yaml +++ b/stable/filebeat/templates/daemonset.yaml @@ -89,6 +89,9 @@ spec: {{- end }} securityContext: runAsUser: 0 +{{- if .Values.privileged }} + privileged: true +{{- end }} {{- if .Values.resources }} resources: {{ toYaml .Values.resources | indent 10 }} diff --git a/stable/filebeat/values.yaml b/stable/filebeat/values.yaml index 5fae226b90..1907ffa0bd 100644 --- a/stable/filebeat/values.yaml +++ b/stable/filebeat/values.yaml @@ -140,6 +140,8 @@ podSecurityPolicy: # seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default' # apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default' +privileged: false + ## Add Elastic beat-exporter for Prometheus ## https://github.com/trustpilot/beat-exporter ## Dont forget to enable http on config.http.enabled (exposing filebeat stats)