* [stable/sysdig] Add affinity instructions to schedule on amd64 and linux
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* [stable/sysdig] Add support for custom annotations
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* [stable/sysdig] Upgrade to latest Sysdig Agent (9.9.1)
Add the nodeSelector property to daemonset to schedule only on certain
nodes.
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Add a livenessProbe
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* [stable/sysdig] Add SCC if Openshift is detected
Signed-off-by: Federico Barcelona <fede_rico_94@hotmail.com>
* [stable/sysdig] Rename value to use scc.create instead
Signed-off-by: Federico Barcelona <fede_rico_94@hotmail.com>
We don't need to use clusterIP in advance:
* If using webhook, we can deploy the agent and then configure webhook
to post audit logs to the clusterIP.
* If using AuditSink, we can rely on KubeDNS for reaching the service.
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Drop permissions to read configmaps and secrets
Sysdig is no longer planning to add support for configmaps and secrets
in cointerface
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Mount /etc/modprobe.d from host
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Add support for slim image for Agent
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Document new values for slim
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Add a new major release with slim support
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Document the /etc/modprobe.d support on CHANGELOG
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
If you change some agent settings in values.yaml of passing via the
command line, you can alter the value of new_k8s flag
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Provide a sane default resource limits for the Agent installation
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Update the Sysdig Agent using rolling updates by default
This configuration also supports the old OnDelete strategy and allows
you to tune the maxUnavailable, maxSurge or minReadySeconds
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Update Chart version and update CHANGELOG
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Limit also the CPU used per Agent
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Update CPU limit setting in the README
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Use a 5s pod termination grace period
Is lowered to avoid data gaps if the pod fails to terminate quickly. The
faster it finishes less time takes a new agent to start up successfully,
thus it means prevent some data gaps.
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Check for running file instead of relying on logs
Some people disable log files and this can be problematic.
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Mount whole /run and /var/run inside the container
This is done for accessing the CRI / containerd socket, when present.
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Avoid floating references for the agent
This is described on [Best Practices](https://github.com/helm/helm/blob/master/docs/chart_best_practices/pods.md)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Update Chart version and CHANGELOG
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Allow to use other image registries than docker.io
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Add a section to README for documenting how to use private repositories
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Add a section for documenting the AWS Marketplace setup.
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Do not create Daemonset if accessKey is missing
This fixes the CI build
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Fixes suggested by @bencer
Thanks!
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Fix the changes that @bencer requested.
I didn't see them before
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Fix feedback from @bencer
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Add support for deploying Custom App Checks using Helm Chart
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Add a DESIGN document which works a reminder for known issues
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Fix issues from @bencer's review
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Add an script for generating Helm config files with custom AppChecks
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* First public version of the Sysdig Helm package
* Add default resources values
* Fixes in documentation
* Fix typo
* Modify resource values to recommended ones
* Rename to Sysdig Monitor
* Add missing resources definition
* Add a consistent label set to the daemonset
