[stable/sysdig] Remove auditLog.clusterIP value (#20041)

We don't need to use clusterIP in advance:

* If using webhook, we can deploy the agent and then configure webhook
  to post audit logs to the clusterIP.
* If using AuditSink, we can rely on KubeDNS for reaching the service.

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

stable/sysdig/CHANGELOG.md

@@ -3,6 +3,13 @@
 This file documents all notable changes to Sysdig Helm Chart. The release
 numbering uses [semantic versioning](http://semver.org).
 
+## v1.7.1
+
+### Major changes
+
+* Remove the auditLog.clusterIP dependency. Using dynamic backend allows to
+  rely on DNS queries.
+
 ## v1.7.0
 
 ### Major changes

stable/sysdig/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: sysdig
-version: 1.7.0
+version: 1.7.1
 appVersion: 0.94.0
 description: Sysdig Monitor and Secure agent
 keywords:

stable/sysdig/README.md

@@ -64,7 +64,6 @@ The following table lists the configurable parameters of the Sysdig chart and th
 | `sysdig.settings`                 | Settings for agent's configuration file                                | ` `                                         |
 | `secure.enabled`                  | Enable Sysdig Secure                                                   | `true`                                      |
 | `auditLog.enabled`                | Enable K8s audit log support for Sysdig Secure                         | `false`                                     |
-| `auditLog.clusterIP`              | ClusterIP address where Sysdig will listen to K8s audit log events     | ` `                                         |
 | `auditLog.auditServerUrl`         | The URL where Sysdig Agent listens for K8s audit log events            | `0.0.0.0`                                   |
 | `auditLog.auditServerPort`        | Port where Sysdig Agent listens for K8s audit log events               | `7765`                                      |
 | `auditLog.dynamicBackend.enabled` | Deploy the Audit Sink where Sysdig listens for K8s audit log events    | `false`                                     |

stable/sysdig/templates/auditsink.yaml

@@ -19,5 +19,9 @@ spec:
       qps: 10
       burst: 15
     clientConfig:
-      url: http://{{ required "A valid .Values.auditLog.clusterIP entry required" .Values.auditLog.clusterIP }}:{{ .Values.auditLog.auditServerPort }}/k8s_audit
+      service:
+        namespace: {{ .Release.Namespace }}
+        name: {{ template "sysdig.fullname" . }}
+        port: {{ .Values.auditLog.auditServerPort }}
+        path: /k8s_audit
 {{- end }}

stable/sysdig/templates/service.yaml

@@ -11,7 +11,6 @@ metadata:
 spec:
   selector:
     app: {{ template "sysdig.fullname" .}}
-  clusterIP: {{ required "A valid .Values.auditLog.clusterIP entry required" .Values.auditLog.clusterIP }}
   ports:
   - protocol: TCP
     port: {{ .Values.auditLog.auditServerPort }}

stable/sysdig/values.yaml

@@ -114,8 +114,6 @@ secure:
 auditLog:
   # true here activates the K8s Audit Log feature for Sysdig Secure
   enabled: false
-  # Required: You need to specify a clusterIP for the service which listens to K8s audit events
-  clusterIP:
   auditServerUrl: 0.0.0.0
   auditServerPort: 7765