[stable/datadog] Volume mounts and ServiceAccount annotations for Cluster Checks runners (#22659)

* [stable/datadog] Add params for mounting volumes to cluster checks runners

Signed-off-by: Marica Odagaki <marica@noredink.com>

* [stable/datadog] Add param for annotating ServiceAccount for cluster checks runners

Signed-off-by: Marica Odagaki <marica@noredink.com>

* [stable/datadog] Bump to 2.3.9

Signed-off-by: Marica Odagaki <marica@noredink.com>
This commit is contained in:
ento
2020-06-25 01:20:37 -07:00
committed by GitHub
parent 36e60d0f96
commit df411feb22
8 changed files with 65 additions and 1 deletions
+5
View File
@@ -1,5 +1,10 @@
# Datadog changelog
## 2.3.16
* Add parameter `clusterChecksRunner.rbac.serviceAccountAnnotations` for specifying annotations for dedicated ServiceAccount for Cluster Checks runners.
* Add parameters `clusterChecksRunner.volumes` and `clusterChecksRunner.volumeMounts` that can be used for providing a secret backend to Cluster Checks runners.
## 2.3.15
* Mount kernel headers in system-probe container
+1 -1
View File
@@ -1,6 +1,6 @@
apiVersion: v1
name: datadog
version: 2.3.15
version: 2.3.16
appVersion: "7"
description: Datadog Agent
keywords:
+3
View File
@@ -423,7 +423,10 @@ helm install --name <RELEASE_NAME> \
| `clusterChecksRunner.rbac.create` | If true, create & use RBAC resources for clusterchecks agent's pods | `true` |
| `clusterChecksRunner.rbac.dedicated` | If true, use dedicated RBAC resources for clusterchecks agent's pods | `false` |
| `clusterChecksRunner.rbac.serviceAccount` | existing ServiceAccount to use (ignored if rbac.create=true) for clusterchecks agent's pods | `default` |
| `clusterChecksRunner.rbac.serviceAccountAnnotations` | Annotations to add to the ServiceAccount if `clusterChecksRunner.rbac.dedicated` is `true` | `{}` |
| `clusterChecksRunner.strategy` | Which update strategy to deploy the Cluster Checks Deployment | RollingUpdate with 0 maxUnavailable, 1 maxSurge |
| `clusterChecksRunner.volumes` | Additional volumes for the Cluster Checks deployment | `nil` |
| `clusterChecksRunner.volumeMounts` | Additional volumeMounts for the Cluster Checks deployment | `nil` |
| `clusterChecksRunner.dnsConfig` | If set, configure dnsConfig options in datadog cluster agent clusterChecks containers | `nil` |
| `kube-state-metrics.rbac.create` | If true, create & use RBAC resources for kube-state-metrics | `true` |
| `kube-state-metrics.serviceAccount.create` | If true, create & use serviceAccount | `true` |
@@ -9,3 +9,13 @@ clusterAgent:
clusterChecksRunner:
enabled: true
volumes:
- name: tmp
hostPath:
path: /tmp
volumeMounts:
- name: tmp
mountPath: /etc/tmp
readOnly: true
@@ -0,0 +1,15 @@
datadog:
apiKey: "00000000000000000000000000000000"
appKey: "0000000000000000000000000000000000000000"
clusterChecks:
enabled: true
clusterAgent:
enabled: true
clusterChecksRunner:
enabled: true
rbac:
dedicated: true
serviceAccountAnnotations:
"eks.amazonaws.com/role-arn": "arn:aws:iam::123456789012:role/datadog-clusterchecker"
@@ -103,10 +103,18 @@ spec:
{{- end }}
resources:
{{ toYaml .Values.clusterChecksRunner.resources | indent 10 }}
{{- if .Values.clusterChecksRunner.volumeMounts }}
volumeMounts:
{{ toYaml .Values.clusterChecksRunner.volumeMounts | indent 10 }}
{{- end }}
livenessProbe:
{{ toYaml .Values.clusterChecksRunner.livenessProbe | indent 10 }}
readinessProbe:
{{ toYaml .Values.clusterChecksRunner.readinessProbe | indent 10 }}
{{- if .Values.clusterChecksRunner.volumes }}
volumes:
{{ toYaml .Values.clusterChecksRunner.volumes | indent 8 }}
{{- end }}
affinity:
{{- if .Values.clusterChecksRunner.affinity }}
{{ toYaml .Values.clusterChecksRunner.affinity | indent 8 }}
@@ -32,4 +32,7 @@ metadata:
app.kubernetes.io/managed-by: {{ .Release.Service | quote }}
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
name: {{ template "datadog.fullname" . }}-cluster-checks
{{- if .Values.clusterChecksRunner.rbac.serviceAccountAnnotations }}
annotations: {{ toYaml .Values.clusterChecksRunner.rbac.serviceAccountAnnotations | nindent 4 }}
{{- end }}
{{- end -}}
+20
View File
@@ -980,6 +980,11 @@ clusterChecksRunner:
#
dedicated: false
## @param serviceAccountAnnotations - object - required
## Annotations to add to the ServiceAccount if clusterChecksRunner.rbac.dedicated is true
#
serviceAccountAnnotations: {}
## @param serviceAccountName - string - required
## Ignored if clusterChecksRunner.rbac.create is true
#
@@ -1083,6 +1088,21 @@ clusterChecksRunner:
# - name: <ENV_VAR_NAME>
# value: <ENV_VAR_VALUE>
## @param volumes - list of objects - optional
## Specify additional volumes to mount in the cluster checks container
#
volumes:
# - hostPath:
# path: <HOST_PATH>
# name: <VOLUME_NAME>
## @param volumeMounts - list of objects - optional
## Specify additional volumes to mount in the cluster checks container
#
volumeMounts:
# - name: <VOLUME_NAME>
# mountPath: <CONTAINER_PATH>
# readOnly: true
kube-state-metrics:
rbac: