Add CUSTOM_MACROS to ConfigMap

This commit is contained in:
M. Mert Yildiran 2024-12-23 21:25:11 +03:00
parent 29de008f22
commit 17759d296d
No known key found for this signature in database
GPG Key ID: DA5D6DCBB758A461
4 changed files with 46 additions and 9 deletions

View File

@ -245,6 +245,7 @@ type TapConfig struct {
Capabilities CapabilitiesConfig `yaml:"capabilities" json:"capabilities"` Capabilities CapabilitiesConfig `yaml:"capabilities" json:"capabilities"`
GlobalFilter string `yaml:"globalFilter" json:"globalFilter" default:""` GlobalFilter string `yaml:"globalFilter" json:"globalFilter" default:""`
EnabledDissectors []string `yaml:"enabledDissectors" json:"enabledDissectors"` EnabledDissectors []string `yaml:"enabledDissectors" json:"enabledDissectors"`
CustomMacros map[string]string `yaml:"customMacros" json:"customMacros"`
Metrics MetricsConfig `yaml:"metrics" json:"metrics"` Metrics MetricsConfig `yaml:"metrics" json:"metrics"`
Pprof PprofConfig `yaml:"pprof" json:"pprof"` Pprof PprofConfig `yaml:"pprof" json:"pprof"`
Misc MiscConfig `yaml:"misc" json:"misc"` Misc MiscConfig `yaml:"misc" json:"misc"`

View File

@ -50,6 +50,7 @@ data:
{{- end }}' {{- end }}'
DUPLICATE_TIMEFRAME: '{{ .Values.tap.misc.duplicateTimeframe }}' DUPLICATE_TIMEFRAME: '{{ .Values.tap.misc.duplicateTimeframe }}'
ENABLED_DISSECTORS: '{{ gt (len .Values.tap.enabledDissectors) 0 | ternary (join "," .Values.tap.enabledDissectors) "" }}' ENABLED_DISSECTORS: '{{ gt (len .Values.tap.enabledDissectors) 0 | ternary (join "," .Values.tap.enabledDissectors) "" }}'
CUSTOM_MACROS: '{{ toJson .Values.tap.customMacros }}'
DISSECTORS_UPDATING_ENABLED: '{{ .Values.dissectorsUpdatingEnabled | ternary "true" "false" }}' DISSECTORS_UPDATING_ENABLED: '{{ .Values.dissectorsUpdatingEnabled | ternary "true" "false" }}'
DETECT_DUPLICATES: '{{ .Values.tap.misc.detectDuplicates | ternary "true" "false" }}' DETECT_DUPLICATES: '{{ .Values.tap.misc.detectDuplicates | ternary "true" "false" }}'
PCAP_DUMP_ENABLE: '{{ .Values.pcapdump.enabled }}' PCAP_DUMP_ENABLE: '{{ .Values.pcapdump.enabled }}'

View File

@ -85,10 +85,6 @@ tap:
filter: "" filter: ""
canDownloadPCAP: true canDownloadPCAP: true
canUseScripting: true canUseScripting: true
scriptingPermissions:
canSave: true
canActivate: true
canDelete: true
canUpdateTargetedPods: true canUpdateTargetedPods: true
canStopTrafficCapturing: true canStopTrafficCapturing: true
showAdminConsoleLink: true showAdminConsoleLink: true
@ -121,7 +117,6 @@ tap:
- SYS_ADMIN - SYS_ADMIN
- SYS_PTRACE - SYS_PTRACE
- DAC_OVERRIDE - DAC_OVERRIDE
- IPC_LOCK
ebpfCapture: ebpfCapture:
- SYS_ADMIN - SYS_ADMIN
- SYS_PTRACE - SYS_PTRACE
@ -139,6 +134,7 @@ tap:
- syscall - syscall
- ws - ws
- ldap - ldap
customMacros: {}
metrics: metrics:
port: 49100 port: 49100
pprof: pprof:
@ -165,6 +161,7 @@ pcapdump:
maxTime: 1h maxTime: 1h
maxSize: 500MB maxSize: 500MB
pcapSrcDir: pcapdump pcapSrcDir: pcapdump
time: time
kube: kube:
configPath: "" configPath: ""
context: "" context: ""

View File

@ -1,5 +1,5 @@
--- ---
# Source: kubeshark/templates/16-network-policies.yaml # Source: kubeshark/templates/17-network-policies.yaml
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: NetworkPolicy kind: NetworkPolicy
metadata: metadata:
@ -23,10 +23,13 @@ spec:
- ports: - ports:
- protocol: TCP - protocol: TCP
port: 8080 port: 8080
- ports:
- protocol: TCP
port: 9100
egress: egress:
- {} - {}
--- ---
# Source: kubeshark/templates/16-network-policies.yaml # Source: kubeshark/templates/17-network-policies.yaml
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: NetworkPolicy kind: NetworkPolicy
metadata: metadata:
@ -53,7 +56,7 @@ spec:
egress: egress:
- {} - {}
--- ---
# Source: kubeshark/templates/16-network-policies.yaml # Source: kubeshark/templates/17-network-policies.yaml
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: NetworkPolicy kind: NetworkPolicy
metadata: metadata:
@ -253,6 +256,7 @@ data:
CLOUD_LICENSE_ENABLED: 'true' CLOUD_LICENSE_ENABLED: 'true'
DUPLICATE_TIMEFRAME: '200ms' DUPLICATE_TIMEFRAME: '200ms'
ENABLED_DISSECTORS: 'amqp,dns,http,icmp,kafka,redis,sctp,syscall,ws,ldap' ENABLED_DISSECTORS: 'amqp,dns,http,icmp,kafka,redis,sctp,syscall,ws,ldap'
CUSTOM_MACROS: '{}'
DISSECTORS_UPDATING_ENABLED: 'true' DISSECTORS_UPDATING_ENABLED: 'true'
DETECT_DUPLICATES: 'false' DETECT_DUPLICATES: 'false'
PCAP_DUMP_ENABLE: 'true' PCAP_DUMP_ENABLE: 'true'
@ -457,6 +461,35 @@ spec:
port: 49100 port: 49100
targetPort: 49100 targetPort: 49100
--- ---
# Source: kubeshark/templates/16-hub-service-metrics.yaml
kind: Service
apiVersion: v1
metadata:
labels:
helm.sh/chart: kubeshark-52.3.92
app.kubernetes.io/name: kubeshark
app.kubernetes.io/instance: kubeshark
app.kubernetes.io/version: "52.3.92"
app.kubernetes.io/managed-by: Helm
annotations:
prometheus.io/scrape: 'true'
prometheus.io/port: '9100'
name: kubeshark-hub-metrics
namespace: default
spec:
selector:
app.kubeshark.co/app: hub
helm.sh/chart: kubeshark-52.3.92
app.kubernetes.io/name: kubeshark
app.kubernetes.io/instance: kubeshark
app.kubernetes.io/version: "52.3.92"
app.kubernetes.io/managed-by: Helm
ports:
- name: metrics
protocol: TCP
port: 9100
targetPort: 9100
---
# Source: kubeshark/templates/09-worker-daemon-set.yaml # Source: kubeshark/templates/09-worker-daemon-set.yaml
apiVersion: apps/v1 apiVersion: apps/v1
kind: DaemonSet kind: DaemonSet
@ -526,6 +559,8 @@ spec:
- '49100' - '49100'
- -packet-capture - -packet-capture
- 'best' - 'best'
- -loglevel
- 'warning'
- -unixsocket - -unixsocket
- -servicemesh - -servicemesh
- -procfs - -procfs
@ -584,7 +619,6 @@ spec:
- SYS_ADMIN - SYS_ADMIN
- SYS_PTRACE - SYS_PTRACE
- DAC_OVERRIDE - DAC_OVERRIDE
- IPC_LOCK
drop: drop:
- ALL - ALL
readinessProbe: readinessProbe:
@ -616,6 +650,8 @@ spec:
- /hostproc - /hostproc
- -disable-ebpf - -disable-ebpf
- -disable-tls-log - -disable-tls-log
# - -loglevel
# - 'warning'
image: 'docker.io/kubeshark/worker:v52.3.92' image: 'docker.io/kubeshark/worker:v52.3.92'
imagePullPolicy: Always imagePullPolicy: Always
name: tracer name: tracer
@ -751,6 +787,8 @@ spec:
- ./hub - ./hub
- -port - -port
- "8080" - "8080"
- -loglevel
- 'warning'
env: env:
- name: POD_NAME - name: POD_NAME
valueFrom: valueFrom: