github/kubeshark
1
0
Fork 0
mirror of https://github.com/kubeshark/kubeshark.git synced 2025-07-03 19:40:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

templating bpf privileged helm value.

Browse Source
This commit is contained in:
Alon Girmonsky 2024-12-26 12:29:18 -08:00
parent b377bfe35f
commit d4d1001cd8
3 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config/configStructs/tapConfig.go
View File

@ -178,6 +178,7 @@ type CapabilitiesConfig struct {
NetworkCapture []string `yaml:"networkCapture" json:"networkCapture" default:"[]"` NetworkCapture []string `yaml:"networkCapture" json:"networkCapture" default:"[]"`
ServiceMeshCapture []string `yaml:"serviceMeshCapture" json:"serviceMeshCapture" default:"[]"` ServiceMeshCapture []string `yaml:"serviceMeshCapture" json:"serviceMeshCapture" default:"[]"`
EBPFCapture []string `yaml:"ebpfCapture" json:"ebpfCapture" default:"[]"` EBPFCapture []string `yaml:"ebpfCapture" json:"ebpfCapture" default:"[]"`
BpfPrivileged bool `yaml:"bpfPrivileged" json:"bpfPrivileged" default:"false"`
} }
type MetricsConfig struct { type MetricsConfig struct {

4
helm-chart/templates/09-worker-daemon-set.yaml
View File

@ -37,8 +37,10 @@ spec:
{{- end }} {{- end }}
imagePullPolicy: {{ .Values.tap.docker.imagePullPolicy }} imagePullPolicy: {{ .Values.tap.docker.imagePullPolicy }}
name: check-bpf name: check-bpf
{{- if .Values.tap.capabilities.bpfPrivileged }}
securityContext: securityContext:
privileged: true privileged: true
{{- end }}
volumeMounts: volumeMounts:
- mountPath: /sys - mountPath: /sys
name: sys name: sys
@ -53,8 +55,10 @@ spec:
{{- end }} {{- end }}
imagePullPolicy: {{ .Values.tap.docker.imagePullPolicy }} imagePullPolicy: {{ .Values.tap.docker.imagePullPolicy }}
name: init-bpf name: init-bpf
{{- if .Values.tap.capabilities.bpfPrivileged }}
securityContext: securityContext:
privileged: true privileged: true
{{- end }}
volumeMounts: volumeMounts:
- mountPath: /sys - mountPath: /sys
name: sys name: sys

1
helm-chart/values.yaml
View File

@ -126,6 +126,7 @@ tap:
- SYS_PTRACE - SYS_PTRACE
- SYS_RESOURCE - SYS_RESOURCE
- IPC_LOCK - IPC_LOCK
bpfPrivileged: false
globalFilter: "" globalFilter: ""
enabledDissectors: enabledDissectors:
- amqp - amqp