mirror of
https://github.com/kubeshark/kubeshark.git
synced 2026-07-11 01:19:26 +00:00
433 lines
11 KiB
YAML
433 lines
11 KiB
YAML
---
|
|
# Source: kubeshark/templates/01-service-account.yaml
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
labels:
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-service-account
|
|
namespace: default
|
|
---
|
|
# Source: kubeshark/templates/14-secret.yaml
|
|
kind: Secret
|
|
apiVersion: v1
|
|
metadata:
|
|
name: kubeshark-secret
|
|
namespace: default
|
|
labels:
|
|
app.kubeshark.co/app: hub
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
stringData:
|
|
LICENSE: ''
|
|
---
|
|
# Source: kubeshark/templates/12-nginx-config-map.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: kubeshark-nginx-config-map
|
|
namespace: default
|
|
labels:
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
data:
|
|
default.conf: |
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
add_header Cache-Control no-cache;
|
|
location / {
|
|
root /usr/share/nginx/html;
|
|
index index.html index.htm;
|
|
try_files $uri $uri/ /index.html;
|
|
expires -1;
|
|
}
|
|
error_page 500 502 503 504 /50x.html;
|
|
location = /50x.html {
|
|
root /usr/share/nginx/html;
|
|
}
|
|
}
|
|
---
|
|
# Source: kubeshark/templates/13-config-map.yaml
|
|
kind: ConfigMap
|
|
apiVersion: v1
|
|
metadata:
|
|
name: kubeshark-config-map
|
|
namespace: default
|
|
labels:
|
|
app.kubeshark.co/app: hub
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
data:
|
|
POD_REGEX: '.*'
|
|
NAMESPACES: ''
|
|
SCRIPTING_ENV: 'null'
|
|
SCRIPTING_SCRIPTS: '[]'
|
|
AUTH_ENABLED: ''
|
|
AUTH_APPROVED_EMAILS: ''
|
|
AUTH_APPROVED_DOMAINS: ''
|
|
TELEMETRY_DISABLED: ''
|
|
---
|
|
# Source: kubeshark/templates/02-cluster-role.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-cluster-role
|
|
namespace: default
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
- extensions
|
|
- apps
|
|
resources:
|
|
- pods
|
|
- services
|
|
- endpoints
|
|
- persistentvolumeclaims
|
|
verbs:
|
|
- list
|
|
- get
|
|
- watch
|
|
---
|
|
# Source: kubeshark/templates/03-cluster-role-binding.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-cluster-role-binding
|
|
namespace: default
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: kubeshark-cluster-role
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: kubeshark-service-account
|
|
namespace: default
|
|
---
|
|
# Source: kubeshark/templates/05-hub-service.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app.kubeshark.co/app: hub
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-hub
|
|
namespace: default
|
|
spec:
|
|
ports:
|
|
- name: kubeshark-hub
|
|
port: 80
|
|
targetPort: 80
|
|
selector:
|
|
app.kubeshark.co/app: hub
|
|
type: ClusterIP
|
|
status:
|
|
loadBalancer: {}
|
|
---
|
|
# Source: kubeshark/templates/07-front-service.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-front
|
|
namespace: default
|
|
spec:
|
|
ports:
|
|
- name: kubeshark-front
|
|
port: 80
|
|
targetPort: 80
|
|
selector:
|
|
app.kubeshark.co/app: front
|
|
type: ClusterIP
|
|
status:
|
|
loadBalancer: {}
|
|
---
|
|
# Source: kubeshark/templates/09-worker-daemon-set.yaml
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
labels:
|
|
app.kubeshark.co/app: worker
|
|
sidecar.istio.io/inject: "false"
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-worker-daemon-set
|
|
namespace: default
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app.kubeshark.co/app: worker
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubeshark.co/app: worker
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
name: kubeshark-worker-daemon-set
|
|
namespace: kubeshark
|
|
spec:
|
|
containers:
|
|
- command:
|
|
- ./worker
|
|
- -i
|
|
- any
|
|
- -port
|
|
- '8897'
|
|
- -servicemesh
|
|
- -tls
|
|
- -procfs
|
|
- /hostproc
|
|
|
|
image: 'docker.io/kubeshark/worker:latest'
|
|
imagePullPolicy: Always
|
|
name: kubeshark-worker-daemon-set
|
|
envFrom:
|
|
- secretRef:
|
|
name: kubeshark-secret
|
|
resources:
|
|
limits:
|
|
cpu: 750m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 50Mi
|
|
securityContext:
|
|
capabilities:
|
|
add:
|
|
- NET_RAW
|
|
- NET_ADMIN
|
|
- SYS_ADMIN
|
|
- SYS_PTRACE
|
|
- DAC_OVERRIDE
|
|
- SYS_RESOURCE
|
|
- SYS_MODULE
|
|
drop:
|
|
- ALL
|
|
readinessProbe:
|
|
periodSeconds: 1
|
|
failureThreshold: 3
|
|
successThreshold: 1
|
|
initialDelaySeconds: 5
|
|
tcpSocket:
|
|
port: 8897
|
|
livenessProbe:
|
|
periodSeconds: 1
|
|
failureThreshold: 3
|
|
successThreshold: 1
|
|
initialDelaySeconds: 5
|
|
tcpSocket:
|
|
port: 8897
|
|
volumeMounts:
|
|
- mountPath: /hostproc
|
|
name: proc
|
|
readOnly: true
|
|
- mountPath: /sys
|
|
name: sys
|
|
readOnly: true
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
hostNetwork: true
|
|
serviceAccountName: kubeshark-service-account
|
|
terminationGracePeriodSeconds: 0
|
|
tolerations:
|
|
- effect: NoExecute
|
|
operator: Exists
|
|
- effect: NoSchedule
|
|
operator: Exists
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: kubernetes.io/os
|
|
operator: In
|
|
values:
|
|
- linux
|
|
volumes:
|
|
- hostPath:
|
|
path: /proc
|
|
name: proc
|
|
- hostPath:
|
|
path: /sys
|
|
name: sys
|
|
---
|
|
# Source: kubeshark/templates/04-hub-deployment.yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: kubeshark-hub
|
|
namespace: default
|
|
labels:
|
|
app.kubeshark.co/app: hub
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
spec:
|
|
replicas: 1 # Set the desired number of replicas
|
|
selector:
|
|
matchLabels:
|
|
app.kubeshark.co/app: hub
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubeshark.co/app: hub
|
|
sidecar.istio.io/inject: "false"
|
|
spec:
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
serviceAccountName: kubeshark-service-account
|
|
containers:
|
|
- name: kubeshark-hub
|
|
command:
|
|
- ./hub
|
|
|
|
envFrom:
|
|
- configMapRef:
|
|
name: kubeshark-config-map
|
|
- secretRef:
|
|
name: kubeshark-secret
|
|
image: 'docker.io/kubeshark/hub:latest'
|
|
imagePullPolicy: Always
|
|
readinessProbe:
|
|
periodSeconds: 1
|
|
failureThreshold: 3
|
|
successThreshold: 1
|
|
initialDelaySeconds: 3
|
|
tcpSocket:
|
|
port: 80
|
|
livenessProbe:
|
|
periodSeconds: 1
|
|
failureThreshold: 3
|
|
successThreshold: 1
|
|
initialDelaySeconds: 3
|
|
tcpSocket:
|
|
port: 80
|
|
resources:
|
|
limits:
|
|
cpu: 750m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 50Mi
|
|
---
|
|
# Source: kubeshark/templates/06-front-deployment.yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: kubeshark-front
|
|
namespace: default
|
|
labels:
|
|
app.kubeshark.co/app: front
|
|
helm.sh/chart: kubeshark-50.2
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "50.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
spec:
|
|
replicas: 1 # Set the desired number of replicas
|
|
selector:
|
|
matchLabels:
|
|
app.kubeshark.co/app: front
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubeshark.co/app: front
|
|
spec:
|
|
containers:
|
|
- env:
|
|
- name: REACT_APP_DEFAULT_FILTER
|
|
value: ' '
|
|
- name: REACT_APP_HUB_HOST
|
|
value: ' '
|
|
- name: REACT_APP_HUB_PORT
|
|
value: ':8898'
|
|
image: 'docker.io/kubeshark/front:latest'
|
|
imagePullPolicy: Always
|
|
name: kubeshark-front
|
|
livenessProbe:
|
|
periodSeconds: 1
|
|
failureThreshold: 3
|
|
successThreshold: 1
|
|
initialDelaySeconds: 3
|
|
tcpSocket:
|
|
port: 80
|
|
readinessProbe:
|
|
periodSeconds: 1
|
|
failureThreshold: 3
|
|
successThreshold: 1
|
|
initialDelaySeconds: 3
|
|
tcpSocket:
|
|
port: 80
|
|
timeoutSeconds: 1
|
|
resources:
|
|
limits:
|
|
cpu: 750m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 50Mi
|
|
volumeMounts:
|
|
- name: nginx-config
|
|
mountPath: /etc/nginx/conf.d/default.conf
|
|
subPath: default.conf
|
|
readOnly: true
|
|
volumes:
|
|
- name: nginx-config
|
|
configMap:
|
|
name: kubeshark-nginx-config-map
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
serviceAccountName: kubeshark-service-account
|