mirror of
https://github.com/kubeshark/kubeshark.git
synced 2026-07-10 09:00:15 +00:00
7c8adee7a8
* include kubernetes default labels Using _helpers.tpl to define those labels Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com> * include Notes with tips after the installs Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com> * create a standard service account name Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com> * Update helm-chart/templates/NOTES.txt Co-authored-by: M. Mert Yildiran <me@mertyildiran.com> * Update helm-chart/templates/NOTES.txt Co-authored-by: M. Mert Yildiran <me@mertyildiran.com> * fixes ingress and nginx labels Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com> * fixes new label mapping from values Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com> * update makefile to to use correct default namespace and release name to generate manifests Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com> --------- Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com> Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
345 lines
8.2 KiB
YAML
345 lines
8.2 KiB
YAML
---
|
|
# Source: kubeshark/templates/01-service-account.yaml
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
labels:
|
|
helm.sh/chart: kubeshark-41.7
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "41.7"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-service-account
|
|
namespace: default
|
|
---
|
|
# Source: kubeshark/templates/12-nginx-config.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: kubeshark-nginx-config
|
|
namespace: default
|
|
labels:
|
|
helm.sh/chart: kubeshark-41.7
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "41.7"
|
|
app.kubernetes.io/managed-by: Helm
|
|
data:
|
|
default.conf: |
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
add_header Cache-Control no-cache;
|
|
location / {
|
|
root /usr/share/nginx/html;
|
|
index index.html index.htm;
|
|
try_files $uri $uri/ /index.html;
|
|
expires -1;
|
|
}
|
|
error_page 500 502 503 504 /50x.html;
|
|
location = /50x.html {
|
|
root /usr/share/nginx/html;
|
|
}
|
|
}
|
|
---
|
|
# Source: kubeshark/templates/02-cluster-role.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
labels:
|
|
helm.sh/chart: kubeshark-41.7
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "41.7"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-cluster-role
|
|
namespace: default
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
- extensions
|
|
- apps
|
|
- networking.k8s.io
|
|
resources:
|
|
- pods
|
|
- services
|
|
- endpoints
|
|
- persistentvolumeclaims
|
|
- ingresses
|
|
verbs:
|
|
- list
|
|
- get
|
|
- watch
|
|
---
|
|
# Source: kubeshark/templates/03-cluster-role-binding.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
labels:
|
|
helm.sh/chart: kubeshark-41.7
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "41.7"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-cluster-role-binding
|
|
namespace: default
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: kubeshark-cluster-role
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: kubeshark-service-account
|
|
namespace: default
|
|
---
|
|
# Source: kubeshark/templates/05-hub-service.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
helm.sh/chart: kubeshark-41.7
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "41.7"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-hub
|
|
namespace: default
|
|
spec:
|
|
ports:
|
|
- name: kubeshark-hub
|
|
port: 80
|
|
targetPort: 80
|
|
selector:
|
|
app: kubeshark-hub
|
|
type: NodePort
|
|
status:
|
|
loadBalancer: {}
|
|
---
|
|
# Source: kubeshark/templates/07-front-service.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
helm.sh/chart: kubeshark-41.7
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "41.7"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-front
|
|
namespace: default
|
|
spec:
|
|
ports:
|
|
- name: kubeshark-front
|
|
port: 80
|
|
targetPort: 80
|
|
selector:
|
|
app: kubeshark-front
|
|
type: NodePort
|
|
status:
|
|
loadBalancer: {}
|
|
---
|
|
# Source: kubeshark/templates/09-worker-daemon-set.yaml
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
labels:
|
|
app: kubeshark-worker-daemon-set
|
|
sidecar.istio.io/inject: "false"
|
|
helm.sh/chart: kubeshark-41.7
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "41.7"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-worker-daemon-set
|
|
namespace: default
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: kubeshark-worker-daemon-set
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: kubeshark-worker-daemon-set
|
|
name: kubeshark-worker-daemon-set
|
|
namespace: kubeshark
|
|
spec:
|
|
containers:
|
|
- command:
|
|
- ./worker
|
|
- -i
|
|
- any
|
|
- -port
|
|
- '8897'
|
|
- -servicemesh
|
|
- -tls
|
|
- -procfs
|
|
- /hostproc
|
|
|
|
image: 'docker.io/kubeshark/worker:latest'
|
|
imagePullPolicy: Always
|
|
name: kubeshark-worker-daemon-set
|
|
resources:
|
|
limits:
|
|
cpu: 750m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 50Mi
|
|
securityContext:
|
|
capabilities:
|
|
add:
|
|
- NET_RAW
|
|
- NET_ADMIN
|
|
- SYS_ADMIN
|
|
- SYS_PTRACE
|
|
- DAC_OVERRIDE
|
|
- SYS_RESOURCE
|
|
drop:
|
|
- ALL
|
|
volumeMounts:
|
|
- mountPath: /hostproc
|
|
name: proc
|
|
readOnly: true
|
|
- mountPath: /sys
|
|
name: sys
|
|
readOnly: true
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
hostNetwork: true
|
|
serviceAccountName: kubeshark-service-account
|
|
terminationGracePeriodSeconds: 0
|
|
tolerations:
|
|
- effect: NoExecute
|
|
operator: Exists
|
|
- effect: NoSchedule
|
|
operator: Exists
|
|
volumes:
|
|
- hostPath:
|
|
path: /proc
|
|
name: proc
|
|
- hostPath:
|
|
path: /sys
|
|
name: sys
|
|
---
|
|
# Source: kubeshark/templates/04-hub-pod.yaml
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
labels:
|
|
app: kubeshark-hub
|
|
sidecar.istio.io/inject: "false"
|
|
helm.sh/chart: kubeshark-41.7
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "41.7"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-hub
|
|
namespace: default
|
|
spec:
|
|
containers:
|
|
- command:
|
|
- ./hub
|
|
|
|
env:
|
|
- name: POD_REGEX
|
|
value: '.*'
|
|
- name: NAMESPACES
|
|
value: ''
|
|
- name: LICENSE
|
|
value: ''
|
|
- name: SCRIPTING_ENV
|
|
value: '{}'
|
|
- name: SCRIPTING_SCRIPTS
|
|
value: '[]'
|
|
- name: AUTH_ENABLED
|
|
value: ''
|
|
- name: AUTH_APPROVED_EMAILS
|
|
value: ''
|
|
- name: AUTH_APPROVED_DOMAINS
|
|
value: ''
|
|
image: 'docker.io/kubeshark/hub:latest'
|
|
imagePullPolicy: Always
|
|
name: kubeshark-hub
|
|
resources:
|
|
limits:
|
|
cpu: 750m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 50Mi
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
serviceAccountName: kubeshark-service-account
|
|
terminationGracePeriodSeconds: 0
|
|
tolerations:
|
|
- effect: NoExecute
|
|
operator: Exists
|
|
- effect: NoSchedule
|
|
operator: Exists
|
|
status: {}
|
|
---
|
|
# Source: kubeshark/templates/06-front-pod.yaml
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
labels:
|
|
app: kubeshark-front
|
|
sidecar.istio.io/inject: "false"
|
|
helm.sh/chart: kubeshark-41.7
|
|
app.kubernetes.io/name: kubeshark
|
|
app.kubernetes.io/instance: kubeshark
|
|
app.kubernetes.io/version: "41.7"
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
name: kubeshark-front
|
|
namespace: default
|
|
spec:
|
|
containers:
|
|
- env:
|
|
- name: REACT_APP_DEFAULT_FILTER
|
|
value: ' '
|
|
- name: REACT_APP_HUB_HOST
|
|
value: ' '
|
|
- name: REACT_APP_HUB_PORT
|
|
value: ':8898'
|
|
image: 'docker.io/kubeshark/front:latest'
|
|
imagePullPolicy: Always
|
|
name: kubeshark-front
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
periodSeconds: 1
|
|
successThreshold: 1
|
|
tcpSocket:
|
|
port: 80
|
|
timeoutSeconds: 1
|
|
resources:
|
|
limits:
|
|
cpu: 750m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 50Mi
|
|
volumeMounts:
|
|
- name: nginx-config
|
|
mountPath: /etc/nginx/conf.d/default.conf
|
|
subPath: default.conf
|
|
readOnly: true
|
|
volumes:
|
|
- name: nginx-config
|
|
configMap:
|
|
name: kubeshark-nginx-config
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
serviceAccountName: kubeshark-service-account
|
|
terminationGracePeriodSeconds: 0
|
|
tolerations:
|
|
- effect: NoExecute
|
|
operator: Exists
|
|
- effect: NoSchedule
|
|
operator: Exists
|
|
status: {}
|