[stable/kiam] added whitelist argument in agent-daemonset.yaml (#14397)

* added whitelist argument in agent-daemonset.yaml

Signed-off-by: Pravar Agrawal <pravarag@gmail.com>

* [stable/kiam] added whitelist argument for metadata API path

- Makes it possible to specify whitelist arguments for allowing other
  AWS metadata API paths which are currently blocked by default
- Update README.md
- Bump the version

Signed-off-by: Pravar Agrawal <pravarag@gmail.com>

* [stable/kiam] bump the version of chart

Signed-off-by: Pravar Agrawal <pravarag@gmail.com>

stable/kiam/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: kiam
-version: 2.4.0
+version: 2.4.1
 appVersion: 3.2
 description: Integrate AWS IAM with Kubernetes
 keywords:

stable/kiam/README.md

@@ -98,6 +98,7 @@ Parameter | Description | Default
 `agent.image.tag` | Agent image tag | `v3.2`
 `agent.image.pullPolicy` | Agent image pull policy | `IfNotPresent`
 `agent.dnsPolicy` | Agent pod DNS policy | `ClusterFirstWithHostNet`
+`agent.whiteListRouteRegexp` | Agent pod whitelist metadata API path argument regex  | `{}`
 `agent.extraArgs` | Additional agent container arguments | `{}`
 `agent.extraEnv` | Additional agent container environment variables | `{}`
 `agent.extraHostPathMounts` | Additional agent container hostPath mounts | `[]`

stable/kiam/templates/agent-daemonset.yaml

@@ -94,6 +94,9 @@ spec:
             - --prometheus-listen-addr=0.0.0.0:{{ .Values.agent.prometheus.port }}
             - --prometheus-sync-interval={{ .Values.agent.prometheus.syncInterval }}
             {{- end }}
+            {{- if .Values.agent.whiteListRouteRegexp }}
+            - --whitelist-route-regexp={{ .Values.agent.whiteListRouteRegexp }}
+            {{- end }}
             - --gateway-timeout-creation={{ .Values.agent.gatewayTimeoutCreation }}
           {{- range $key, $value := .Values.agent.extraArgs }}
             {{- if $value }}

stable/kiam/values.yaml

@@ -14,6 +14,11 @@ agent:
     tag: v3.2
     pullPolicy: IfNotPresent
 
+  ## agent whitelist of proxy routes matching this reg-ex
+  ##
+  # whiteListRouteRegexp:
+
+
   ## Logging settings
   ##
   log: