mirror of
https://github.com/helm/charts.git
synced 2026-08-22 22:07:36 +00:00
Néstor Salcedaandk8s-ci-robot
402aeebfe8
* [stable/sysdig] Update to latest agent version * Run Sysdig Agent as [daemonset v2.0](https://github.com/draios/sysdig-cloud-scripts/blob/master/agent_deploy/kubernetes/sysdig-agent-daemonset-v2.yaml). * Fix value's naming in order to follow [best practices](https://docs.helm.sh/chart_best_practices/#naming-conventions). * Use a secure.enabled flag for enabling Sysdig Secure. * Allow rbac resource creation or use existing serviceAccountName. * Use required function for retrieving sysdig.accessKey. This ensures that key is present. * Add a Changelog * Use GitHub accounts instead of real names for making CI pass * Fix version number as a string * Add OWNERS file * Separate rbac and serviceAccount Follow RBAC best practices: https://github.com/kubernetes/helm/blob/master/docs/chart_best_practices/rbac.md * Fix namespace issues in cluster role binding
63 lines
1.7 KiB
YAML
63 lines
1.7 KiB
YAML
# Default values for Sysdig Monitor and Secure Helm package.
|
|
|
|
image:
|
|
repository: sysdig/agent
|
|
tag: latest
|
|
pullPolicy: Always
|
|
|
|
resources: {}
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# limits:
|
|
# cpu: 30m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 20m
|
|
# memory: 128Mi
|
|
|
|
rbac:
|
|
# true here enables creation of rbac resources
|
|
create: true
|
|
|
|
serviceAccount:
|
|
# Create and use serviceAccount resources
|
|
create: true
|
|
# Use this value as serviceAccountName
|
|
name:
|
|
|
|
daemonset: {}
|
|
# Allow the DaemonSet to perform a rolling update on helm update
|
|
# ref: https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set/
|
|
# updateStrategy: RollingUpdate
|
|
|
|
sysdig:
|
|
# Required: You need your Sysdig Monitor access key before running agents.
|
|
# accessKey: ""
|
|
|
|
settings: {}
|
|
### Agent tags
|
|
# tags: linux:ubuntu,dept:dev,local:nyc
|
|
#### Sysdig Software related config ####
|
|
# Sysdig collector address
|
|
# collector: 192.168.1.1
|
|
# Collector TCP port
|
|
# collector_port: 6666
|
|
# Whether collector accepts ssl
|
|
# ssl: true
|
|
# collector certificate validation
|
|
# ssl_verify_certificate: true
|
|
#######################################
|
|
# new_k8s: true
|
|
# k8s_cluster_name: production
|
|
|
|
secure:
|
|
# true here enables Sysdig Secure: container run-time security & forensics
|
|
enabled: false
|
|
|
|
# Allow sysdig to run on Kubernetes 1.6 masters.
|
|
tolerations:
|
|
- effect: NoSchedule
|
|
key: node-role.kubernetes.io/master
|