This basic support of priorityClassName should allow setting higher priority for falco than the default one. This is useful when we want to ensure falco runs on every node.
Signed-off-by: David Guerrero <david.guerrero@prezi.com>
* Fixes issue where containers in deployment were running as root
Due the the `securityContext` key being duplicated in the deployment template,
some of the `runAsUser` configuration was being ignored. This breaks the helm deployment
in some k8s clusters which enforce that containers run as non-root.
Also updates the configmap-reload container to run as user `65534` as per the jimmidyson/configmap-reload Dockerfile.
Signed-off-by: Angus Williams <anguswilliams@gmail.com>
* Adds variables for runAsNonRoot and readOnlyRootFilesystem
Signed-off-by: Angus Williams <anguswilliams@gmail.com>
* Bumped chart version
Signed-off-by: Alejandro Garrido Mota <garridomota@gmail.com>
* Updated serviceMonitor (important capital M) inside README configuration.
It made me loose sometime to reaslise why serviceMonitor wasn't working.
Signed-off-by: Alejandro Garrido Mota <garridomota@gmail.com>
There is no reason to template the name of the container.
Using a fixed name like 'jenkins' for the jenkins master container
makes it actually easier to retrieve logs etc.
Signed-off-by: Torsten Walter <mail@torstenwalter.de>
This fixes the `helm template` warning when providing a job map.
```
warning: destination for jobs is a table. Ignoring non-table value <nil>
```
Signed-off-by: Hendrik Purmann <h.purmann@googlemail.com>
* add support for configmap for containers environment variables
Signed-off-by: Andrew Johnstone <andrew@ajohnstone.com>
* Support configmaps for cluster-autoscaler
Signed-off-by: Andrew Johnstone <andrew@ajohnstone.com>
* support tcp/udp configmap in different namespace
I have a use case which I need to put my tcp-services-configmap in my ```default``` namespace to be able to configure my tcp/udp ports instead of edit them in the ```ingress-nginx``` namespace due to user permissions and roles permissions. it will be amazing if yuu will be able to support this kind of change
Signed-off-by: dors <dors@anyvision.co>
* update readme for the new values
update readme for the new values:
.Values.controller.tcpConfigMapNamespace
.Values.controller.udpConfigMapNamespace
Signed-off-by: dors <dors@anyvision.co>
* Update values.yaml
Signed-off-by: dors <dors@anyvision.co>
* Update README.md
Signed-off-by: dors <dors@anyvision.co>
* Update controller-deployment.yaml
Signed-off-by: dors <dors@anyvision.co>
* Update controller-service.yaml
fix issue when .Value.tcp not empty and .Values.controller.service.nodePorts.tcp is empty Error: render error in "nginx-ingress/templates/controller-service.yaml": template: nginx-ingress/templates/controller-service.yaml:66:13: executing "nginx-ingress/templates/controller-service.yaml" at <index $.Values.controller.service.nodePorts.tcp $key>: error calling index: value has type int; should be string
Signed-off-by: dors <dors@anyvision.co>
* Update Chart.yaml
Signed-off-by: dors <dors@anyvision.co>
* Update values.yaml
Signed-off-by: dors <dors@anyvision.co>
* Create daemonset-tcp-udp-configMapNamespace-values.yaml
Signed-off-by: dors <dors@anyvision.co>
* Create deployment-tcp-udp-configMapNamespace-values.yaml
Signed-off-by: dors <dors@anyvision.co>
* Allows customization of the configmap namespace
Signed-off-by: dors <dors@anyvision.co>
* fix ci test in daemonset-tcp-udp-values.yaml
Signed-off-by: dors <dors@anyvision.co>
* fix ci test in deployment-tcp-udp-configMapNamespace-values.yaml
Signed-off-by: dors <dors@anyvision.co>
* fix typo in README.md
Signed-off-by: dors <dors@anyvision.co>
* Add service annotations
Signed-off-by: Sharon <sharonv@perion.com>
* bump chart version and update variable in README
Signed-off-by: Sharon <sharonv@perion.com>