github/deprecated-helm-charts
1
0
Fork 0
mirror of https://github.com/helm/charts.git synced 2026-08-23 22:37:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

[stable/prometheus-blackbox-exporter] add "allowIcmp" setting (#20409)

Browse Source 
* [stable/prometheus-blackbox-exporter] add "allowIcmp" setting

Signed-off-by: Alice Sawatzky <alice.sawatzky@farmersedge.ca>

* [stable/prometheus-blackbox-exporter] minor version bump

Signed-off-by: Alice Sawatzky <alice.sawatzky@farmersedge.ca>

* [stable/prometheus-blackbox-exporter] fix NET_RAW capability

Signed-off-by: Alice Sawatzky <alice.sawatzky@farmersedge.ca>

* [stable/prometheus-blackbox-exporter] run as root if allowIcmp is set

Signed-off-by: Alice Sawatzky <alice.sawatzky@farmersedge.ca>

* [stable/prometheus-blackbox-exporter] document security implications of allowIcmp

Signed-off-by: Alice Sawatzky <alice.sawatzky@farmersedge.ca>

* [stable/prometheus-blackbox-exporter] add test values for allowIcmp

Signed-off-by: Alice Sawatzky <alice.sawatzky@farmersedge.ca>
This commit is contained in:
Alice
2020-02-03 09:53:21 -08:00
committed by GitHub
parent cc4d7d91c1
commit 91a1ab9f0c
5 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stable/prometheus-blackbox-exporter/Chart.yaml
+1 -1
View File
@@ -1,7 +1,7 @@
apiVersion: v1
description: Prometheus Blackbox Exporter
name: prometheus-blackbox-exporter
version: 3.0.1
version: 3.1.0
appVersion: 0.15.1
home: https://github.com/prometheus/blackbox_exporter
sources:
stable/prometheus-blackbox-exporter/README.md
+1
View File
@@ -63,6 +63,7 @@ The following table lists the configurable parameters of the Blackbox-Exporter c
| `podAnnotations` | annotations to add to each pod | `{}` |
| `podDisruptionBudget` | pod disruption budget | `{}` |
| `priorityClassName` | priority class name | None |
| `allowIcmp` | whether to enable ICMP probes, by giving the pods `CAP_NET_RAW` and running as root | `false` |
| `resources` | pod resource requests & limits | `{}` |
| `restartPolicy` | container restart policy | `Always` |
| `service.annotations` | annotations for the service | `{}` |
stable/prometheus-blackbox-exporter/ci/icmp-values.yaml
+1
View File
@@ -0,0 +1 @@
allowIcmp: true
stable/prometheus-blackbox-exporter/templates/deployment.yaml
+6 -1
View File
@@ -58,8 +58,13 @@ spec:
imagePullPolicy: {{ .Values.image.pullPolicy }}
securityContext:
readOnlyRootFilesystem: {{ .Values.readOnlyRootFilesystem }}
{{- if .Values.allowIcmp }}
capabilities:
add: ["NET_RAW"]
{{- else }}
runAsNonRoot: {{ .Values.runAsNonRoot }}
runAsUser: {{ .Values.runAsUser }}
{{- end }}
args:
{{- if .Values.config }}
- "--config.file=/config/blackbox.yaml"
@@ -117,4 +122,4 @@ spec:
secret:
secretName: {{ .secretName }}
defaultMode: {{ .defaultMode }}
{{- end }}
{{- end }}
stable/prometheus-blackbox-exporter/values.yaml
+2
View File
@@ -58,6 +58,8 @@ extraSecretMounts: []
# readOnly: true
# defaultMode: 420
allowIcmp: false
resources: {}
# limits:
# memory: 300Mi