63 Commits
Author SHA1 Message Date
Matt FarinaandGitHub 4a04b6f964 Removed old owners files (#24416)
Signed-off-by: Matt Farina <matt@mattfarina.com>
2020-11-13 17:06:05 -05:00
Fede BarcelonaandGitHub 69124f41ef [stable/sysdig] Deprecating sysdig chart (#24016)
Signed-off-by: Federico Barcelona <fede_rico_94@hotmail.com>
2020-11-04 02:12:03 -08:00
Néstor SalcedaandGitHub a2259d6e45 [stable/sysdig] Upgrade to latest Sysdig Agent version (10.0.0) (#22260)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-05-05 05:19:08 -07:00
Néstor SalcedaandGitHub 2268fe045e [stable/sysdig] Implement a more comprehensive securityContexts (#22160)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-04-28 04:42:06 -07:00
Néstor SalcedaandGitHub f600d33b37 [stable/sysdig] Add affinity instructions to schedule on amd64 and linux (#22150)
* [stable/sysdig] Add affinity instructions to schedule on amd64 and linux

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* [stable/sysdig] Add support for custom annotations

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-04-28 01:36:05 -07:00
Néstor SalcedaandGitHub cae81df502 [stable/sysdig] Upgrade to latest Sysdig Agent (9.9.1) (#22083)
* [stable/sysdig] Upgrade to latest Sysdig Agent (9.9.1)

Add the nodeSelector property to daemonset to schedule only on certain
nodes.

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Add a livenessProbe

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-04-23 09:17:11 -07:00
Néstor SalcedaandGitHub b5bd582e6a [stable/sysdig] Use app.kubernetes.io labels instead of custom ones (#22022)
* [stable/sysdig] Use app.kubernetes.io labels instead of custom ones

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* [stable/sysdig] Bump chart version

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-04-20 07:07:39 -07:00
Néstor SalcedaandGitHub 24f0fe3129 [stable/sysdig] Upgrade Sysdig Agent to its latest version (9.9.0) (#21932)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-04-15 07:24:03 -07:00
Fede BarcelonaandGitHub 609560713f [stable/sysdig] Add SCC if Openshift is detected (#21825)
* [stable/sysdig] Add SCC if Openshift is detected

Signed-off-by: Federico Barcelona <fede_rico_94@hotmail.com>

* [stable/sysdig] Rename value to use scc.create instead

Signed-off-by: Federico Barcelona <fede_rico_94@hotmail.com>
2020-04-08 09:21:44 -07:00
Néstor SalcedaandGitHub a11d5fa79e [stable/sysdig] Add a hack to implement watches on Helm based Operator (#21822)
This implementation in operators breaks the pattern in some Helm based
operators about using an splitted image description:

https://github.com/helm/charts/blob/master/stable/postgresql/values.yaml#L15
https://github.com/helm/charts/blob/master/stable/prometheus/values.yaml#L534
https://github.com/helm/charts/blob/master/stable/redis/values.yaml#L15
https://github.com/helm/charts/blob/master/stable/wordpress/values.yaml#L14

But is required to certify the operator.

https://github.com/operator-framework/operator-sdk/blob/master/doc/helm/user-guide.md#passing-environment-variables-to-the-helm-chart

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-04-07 07:37:46 -07:00
Néstor SalcedaandGitHub 5f479353fd [stable/sysdig] Use latest Sysdig Agent version (9.8.0) (#21711)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-04-02 02:34:24 -07:00
Néstor SalcedaandGitHub 0322682a42 [stable/sysdig] Use stable API and fix configmap issues (#21500)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-03-17 08:56:22 -07:00
Néstor SalcedaandGitHub 52a6973e4b [stable/sysdig] Update latest agent version (9.7.0) (#21357)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-03-10 08:23:35 -07:00
Néstor SalcedaandGitHub e2a9608fd0 [stable/sysdig] Upgrade to latest agent version (9.6.1) (#21213)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-03-03 01:19:38 -08:00
Brendan GermainandGitHub 595e8dce25 [stable/sysdig] fix setting env vars (#21106) (#21106)
Signed-off-by: Brendan Germain <brendan.germain@nasdaq.com>
2020-02-28 13:30:46 -08:00
Néstor SalcedaandGitHub dab43edbe3 [stable/sysdig] Upgrade to latest Sysdig Image (9.5.0) (#20471)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-01-31 03:54:19 -08:00
Néstor SalcedaandKubernetes Prow Robot 651f4c576c [stable/sysdig] Remove auditLog.clusterIP value (#20041)
We don't need to use clusterIP in advance:

* If using webhook, we can deploy the agent and then configure webhook
  to post audit logs to the clusterIP.
* If using AuditSink, we can rely on KubeDNS for reaching the service.

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-01-10 09:36:35 -08:00
Néstor SalcedaandKubernetes Prow Robot 492aed9898 [stable/sysdig] Enable Sysdig Secure by default (#19935)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-01-08 05:01:40 -08:00
Néstor SalcedaandKubernetes Prow Robot bb500af264 [stable/sysdig] Enable K8s audit log feature for Sysdig Agent (#19815)
* Add auditlog support Sysdig Agent

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Add documentation for the K8s audit log feature

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2020-01-06 07:17:35 -08:00
Néstor SalcedaandKubernetes Prow Robot 80804650f8 [stable/sysdig] Add slim support for Sysdig Agent (#19778)
* Drop permissions to read configmaps and secrets

Sysdig is no longer planning to add support for configmaps and secrets
in cointerface

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Mount /etc/modprobe.d from host

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Add support for slim image for Agent

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Document new values for slim

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Add a new major release with slim support

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Document the /etc/modprobe.d support on CHANGELOG

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-12-26 08:53:38 -08:00
Néstor SalcedaandKubernetes Prow Robot 82a3138c69 [stable/sysdig] Upgrade to latest sysdig agent version (0.94.0) (#19753)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-12-23 10:35:33 -08:00
Néstor SalcedaandKubernetes Prow Robot 7b1c29a83f [stable/sysdig] Bump version to latest, the 0.93.1 (#19530)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-12-11 17:24:32 -08:00
Néstor SalcedaandKubernetes Prow Robot 192155b684 [stable/sysdig] Update the notes to contain the reference to Secure tab (#19125)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-11-25 09:19:24 -08:00
Néstor SalcedaandKubernetes Prow Robot 27ac54778c [stable/sysdig] Upgrade to latest version of Sysdig Agent (0.93.0) (#18885)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-11-14 09:53:35 -08:00
Fede BarcelonaandKubernetes Prow Robot ff4019f490 [stable/sysdig] Add 'How to upgrade to last version' to the README (#18403)
Signed-off-by: Federico Barcelona <fede_rico_94@hotmail.com>
2019-10-31 09:11:37 -07:00
Néstor SalcedaandKubernetes Prow Robot c59c010a6c [stable/sysdig] Fix 1.16 compatibility errors introduced in v1.4.19 (#18230)
* Revert "[stable/sysdig] Fixes compatibility with 1.16 (#17538)"

This reverts commit d1811c2bef.

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Add selector section needed for the version upgrade

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Update Chart metadata and CHANGELOG

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* We support Kubernetes since 1.9+, with beta APIs enabled

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-10-28 02:31:26 -07:00
Xiang DaiandKubernetes Prow Robot d1811c2bef [stable/sysdig] Fixes compatibility with 1.16 (#17538)
* Fixes compatibility with 1.16

Signed-off-by: Xiang Dai <764524258@qq.com>

* fix a typo

Signed-off-by: Xiang Dai <764524258@qq.com>

* bump up version

Signed-off-by: Xiang Dai <764524258@qq.com>

* bump up

Signed-off-by: Xiang Dai <764524258@qq.com>

* update changelog

Signed-off-by: Xiang Dai <764524258@qq.com>
2019-10-16 01:43:40 -07:00
Néstor SalcedaandKubernetes Prow Robot 3a4dbf39d4 [stable/sysdig] Upgrade to Sysdig Agent 0.92.3 (#17787)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-10-08 07:59:13 -07:00
Néstor SalcedaandKubernetes Prow Robot 0164bc2cb5 [stable/sysdig] Upgrade to Sysdig Agent 0.92.2 (#17549)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-09-30 14:25:32 -07:00
Thiago CaiubiandKubernetes Prow Robot f0ade143a2 Allow the DaemonSet to schedule ussing affinity rules (#17180)
Heavily inspired by
https://github.com/helm/charts/blob/master/stable/signalsciences.

Signed-off-by: Thiago Caiubi <thiago.caiubi@gmail.com>
2019-09-17 07:02:26 -07:00
Jorge Salamero SanzandKubernetes Prow Robot 9477ef31a0 [stable/sysdig] Add configmaps, secrets access and more config settings (#16891)
* [stable/sysdig] Add configmaps, secrets access and more config settings

Signed-off-by: Jorge Salamero Sanz <bencer@cauterized.net>

* [stable/sysdig] Ooops, forget to increase version in Chart.yaml

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-09-05 04:47:09 -07:00
Carlos Tadeu Panato JuniorandKubernetes Prow Robot 21ce7cd634 [stable/sysdig] fix example (#16782)
* fix example

Signed-off-by: Carlos Panato <ctadeu@gmail.com>

* update changelog

Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2019-09-02 14:28:08 -07:00
Néstor SalcedaandKubernetes Prow Robot 074bd2a646 [stable/sysdig] Upgrade to latest agent version - 0.92.1 (#16549)
The requests and limits have been also updated to match values provided
by Sysdig

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-08-23 06:41:17 -07:00
Fede BarcelonaandKubernetes Prow Robot bb8381faff [stable/sysdig] Update to latest agent version (#16107)
Signed-off-by: Federico Barcelona <fede_rico_94@hotmail.com>
2019-08-07 02:40:51 -07:00
Néstor SalcedaandKubernetes Prow Robot 9e0d2f23ce [stable/sysdig] Add nestorsalceda as an approver in OWNERS file (#15132)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-06-28 12:23:07 -07:00
Néstor SalcedaandKubernetes Prow Robot d011d8e44c [stable/sysdig] Update Sysdig Agent to 0.90.3 (#14872)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-06-18 01:28:17 -07:00
Néstor SalcedaandKubernetes Prow Robot 9b5d0adbfd [stable/sysdig] New Agent upstream release 0.90.2 (#14374)
* [stable/sysdig] New Agent upstream release 0.90.2

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Update README

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-06-03 04:14:15 -07:00
Néstor SalcedaandKubernetes Prow Robot 1f22c8f661 [stable/sysdig] New upstream sysdig version 0.90.1 (#14245)
* Add a volume with the os release version

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Upgrade to Sysdig Agent 0.90.1

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Update changelog

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-05-29 09:22:30 -07:00
Carlos Tadeu Panato JuniorandKubernetes Prow Robot 3f7bee09ee add apiVersion (#13839)
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2019-05-14 22:41:07 -07:00
Néstor SalcedaandKubernetes Prow Robot 9bb750ccd2 [stable/sysdig] Hardcode new_k8s value to true (#13749)
If you change some agent settings in values.yaml of passing via the
command line, you can alter the value of new_k8s flag

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-05-14 06:41:14 -07:00
Néstor SalcedaandKubernetes Prow Robot c6b44efe56 Enable new_k8s flag by default (#13618)
This allows kube state metrics to be automatically detected, monitored, and
displayed in Sysdig Monitor.

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-05-10 02:49:58 -07:00
Néstor SalcedaandKubernetes Prow Robot 08678ecb94 Upgrade image to 0.89.5 and update cluster role (#13094)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-04-22 05:07:44 -07:00
Néstor SalcedaandKubernetes Prow Robot f2ba280a9d Make accessKey explicit as empty value (#13060)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-04-15 08:06:13 -07:00
Néstor SalcedaandKubernetes Prow Robot 160d833f72 Bump Sysdig Agent version and use latest logo (#12737)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-04-02 03:38:34 -07:00
Fede BarcelonaandKubernetes Prow Robot 8a6c08fc6d [stable/sysdig] Update README (#12522)
* [stable/sysdig] Update README

Signed-off-by: Federico Barcelona <fede_rico_94@hotmail.com>

* Update documentation

Signed-off-by: Jorge Salamero Sanz <bencer@cauterized.net>

* Replace tabs by spaces

Signed-off-by: Jorge Salamero Sanz <bencer@cauterized.net>
2019-04-02 02:50:34 -07:00
Néstor SalcedaandKubernetes Prow Robot af554de493 [stable/sysdig] Use latest released agent image version and add options to support eBPF based probe (#11856)
* Upgrade agent image version to 0.89.0

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Add support for configuring eBPF

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Bump up Chart version

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Update CHANGELOG with latest news

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-03-01 03:22:42 -08:00
Néstor SalcedaandKubernetes Prow Robot 67ec941dfc [stable/sysdig] Add resource limits and enable rollingUpdate strategy by default (#11535)
* Provide a sane default resource limits for the Agent installation

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Update the Sysdig Agent using rolling updates by default

This configuration also supports the old OnDelete strategy and allows
you to tune the maxUnavailable, maxSurge or minReadySeconds

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Update Chart version and update CHANGELOG

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Limit also the CPU used per Agent

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Update CPU limit setting in the README

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-02-19 07:59:17 -08:00
Néstor SalcedaandKubernetes Prow Robot 23c3e66dc2 Revert the checksum annotations (#11283)
The sysdig agent automatically restarts when it detects a configuration
change.

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-02-19 04:39:51 -08:00
Néstor SalcedaandKubernetes Prow Robot 57e7476a38 [stable/sysdig] Improvements for latests versions of Sysdig Agent (#11493)
* Use a 5s pod termination grace period

Is lowered to avoid data gaps if the pod fails to terminate quickly. The
faster it finishes less time takes a new agent to start up successfully,
thus it means prevent some data gaps.

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Check for running file instead of relying on logs

Some people disable log files and this can be problematic.

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Mount whole /run and /var/run inside the container

This is done for accessing the CRI / containerd socket, when present.

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Avoid floating references for the agent

This is described on [Best Practices](https://github.com/helm/helm/blob/master/docs/chart_best_practices/pods.md)

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Update Chart version and CHANGELOG

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
2019-02-18 22:53:17 -08:00
Maartje EyskensandKubernetes Prow Robot 127081679e Fix value in example (#10067)
The `AgentTags` value did not exist (anymore). Changed this to `sysdig.settings.tags`

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2019-01-11 07:25:21 -08:00