* helm: gate worker hub token on the same condition as hub AUTH_ENABLED (#1954)
The hub's AUTH_ENABLED is derived from cloudLicenseEnabled/demoModeEnabled/
tap.auth.enabled, but the worker DaemonSet gated HUB_INTERNAL_TOKEN_PATH, its
volumeMount and the projected serviceAccountToken on tap.auth.enabled alone.
With demoModeEnabled: true (or the default cloudLicenseEnabled: true) and
tap.auth.enabled unset, the hub required a bearer token the workers never got,
so every worker -> hub call returned 401: tracer target refresh and name
resolution history silently stopped while capture kept working.
Extract the condition into a kubeshark.authEnabled helper and consume it from
both 12-config-map.yaml and 09-worker-daemon-set.yaml so the two cannot drift.
AUTH_ENABLED renders identically to before for all combinations of
cloudLicenseEnabled/license/demoModeEnabled/tap.auth.enabled/tap.auth.type.
* helm: mount the hub internal token in the tracer container too (#1954)
The tracer polls the hub's /pods/all and /pods/targeted on every sync cycle,
but only the sniffer container received HUB_INTERNAL_TOKEN_PATH and the token
mount, so with auth enabled the tracer's requests were rejected and TLS hooking
never picked up newly started pods. Wire the same env var and projected-token
mount into the tracer container.
Requires the matching tracer2 change that sends the Bearer header.
* Add hub to the list of containers in `pprof` command and add flags to `pprof` command
* Reduce duplication
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
* Add -debug prefix to container tag when profiling enabled
* Update helm-chart/templates/_helpers.tpl
* Update helm-chart/templates/_helpers.tpl
---------
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* Global filter quote change
Global filter uses a single quote as opposed to double quote. This limits the use of `'` inside the string as it can not be escaped. When using double quote ("), single quote can be used and double quote can be escaped as part of a string. An example for a Global Filter string: "redact(\"request.headers.Authorization\", \"request.headers['X-Aws-Ec2-Metadata-Token']\")"
* support escaping double quotes in the global filter string
* include kubernetes default labels
Using _helpers.tpl to define those labels
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* include Notes with tips after the installs
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* create a standard service account name
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* Update helm-chart/templates/NOTES.txt
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* Update helm-chart/templates/NOTES.txt
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* fixes ingress and nginx labels
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* fixes new label mapping from values
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* update makefile to to use correct default namespace and release name to generate manifests
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
---------
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
Volodymyr Stoiko
Serhii PonomarenkoandAlon Girmonsky
M. Mert YildiranandAlon Girmonsky
Luiz OliveiraandM. Mert Yildiran