Add custom security capabilities to the daemonset (#14942)

Signed-off-by: ChiefAlexander <alex.harder@fishtech.group>

stable/metricbeat/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 description: A Helm chart to collect Kubernetes logs with metricbeat
 icon: https://www.elastic.co/assets/blt47799dcdcf08438d/logo-elastic-beats-lt.svg
 name: metricbeat
-version: 1.6.4
+version: 1.7.0
 appVersion: 6.7.0
 home: https://www.elastic.co/products/beats/metricbeat
 sources:

stable/metricbeat/README.md

@@ -61,6 +61,7 @@ The following table lists the configurable parameters of the metricbeat chart an
 | `daemonset.resources.requests.cpu`  | CPU resource requests for daemonset                                                                                                                                                                                                                                                         |                                                                                             |
 | `daemonset.resources.limits.cpu`    | CPU resource limits for daemonset                                                                                                                                                                                                                                                           |                                                                                             |
 | `daemonset.hostNetwork`             | Leverage host network interfaces                                                                                                                                                                                                                                                            | `true`                                                                                      |
+| `daemonset.capabilities`            | Add security capabilities to the daemonset                                                                                                                                                                                                                                                  | `[]`                                                                                        |
 | `daemonset.dnsPolicy`               | Pod DNS Policy                                                                                                                                                                                                                                                                              | `ClusterFirstWithHostNet`                                                                   |
 | `deployment.enabled`                | If true, enable deployment                                                                                                                                                                                                                                                                  |                                                                                             |
 | `deployment.args`                   | Custom arguments for the docker command                                                                                                                                                                                                                                                     |                                                                                             |

stable/metricbeat/templates/daemonset.yaml

@@ -65,6 +65,11 @@ spec:
 {{- end }}
         securityContext:
           runAsUser: 0
+{{- if .Values.daemonset.capabilities }}
+          capabilities:
+            add:
+{{ toYaml .Values.daemonset.capabilities | indent 12 }}
+{{- end }}
         resources:
 {{- if .Values.daemonset.resources }}
 {{ toYaml .Values.daemonset.resources | indent 10 }}