M. Mert Yildiran
8fe0544175
🔨 Remove CHECKPOINT_RESTORE
capability from defaults
2024-02-26 21:40:14 +03:00
Alon Girmonsky
6af2d11878
removed cloud URL from config map ( #1499 )
...
1. removed cloud URL from config map
2. added to hub's and worker's deployments
2024-02-14 13:06:24 -08:00
Alon Girmonsky
f010f349a1
unixsocket for tracer ( #1497 )
...
- Added `-unixsocket` by default
- In DEBUG mode, added `-dumptracer 100000000`
2024-02-07 09:50:58 -08:00
M. Mert Yildiran
92dab2e2f7
🔨 Add PcapErrorTTL
field to MiscConfig
2024-02-06 01:32:07 +03:00
Serhii Ponomarenko
18d051af28
🔥 Remove old Descope
auth ( #1490 )
...
* 🔥 Remove Descope-related config updates
* 🔥 Remove Descope-related helm values
* 🔥 Remove Descope-related k8s configs
* 🔥 Remove Descope-related fields from `tapConfig`
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-01-31 14:49:55 -08:00
M. Mert Yildiran
cef012d1f3
🐛 Fix the ConfigMap
keys of JsonTTL
and PcapTTL
fields
2024-01-31 16:57:11 +03:00
M. Mert Yildiran
4802cca646
✨ Add MiscConfig
struct with has JsonTTL
and PcapTTL
fields
2024-01-30 02:25:04 +03:00
Alon Girmonsky
4db2a80675
Add API cloud endpoint env var to hub deployment ( #1489 )
...
* Add API cloud endpoint env var to hub deployment
* Added an env var for api cloud endpoint
2024-01-26 00:24:38 -08:00
Serhii Ponomarenko
bfa3efd23a
✨ SAML authorization ( #1487 )
...
* 🔨 Add `AUTH_SAML_ROLE_ATTRIBUTE` field to `ConfigMap`
* 📝 Document `tap.auth.saml.roleAttribute/roles` values
* 🔧 Re-generate `complete.yaml`
* 🔥 Remove `default` tag from `SamlConfig.RoleAttribute`
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-01-24 16:05:37 -08:00
Alon Girmonsky
f6d7510a14
fix the env variable / helm issue ( #1486 )
...
* fix the env variable / helm issue
Empty environment variables can not be read by front.
* change env variable to avoid an empty string
2024-01-23 21:30:24 -08:00
M. Mert Yildiran
f9e0c36d5f
🔨 Add AUTH_SAML_ROLES
field to ConfigMap
2024-01-23 23:22:06 +03:00
Serhii Ponomarenko
a8dd332ff8
✨ SAML integration prototype ( #1475 )
...
* 🔨 Add `AUTH_TYPE` field to `ConfigMap`
* 🔨 Add `AUTH_SAML_IDP_METADATA_URL` field to `ConfigMap`
* 🔨 Add `AUTH_SAML_X509_CRT` field to `Secret`
* 🔨 Add `AUTH_SAML_X509_KEY` field to `Secret`
* 🔨 Mount SAML X.509 key pair into `hub`
* 🔨 Add `REACT_APP_AUTH_TYPE` environment variable to `front`
* 🔧 Add Nginx path rewrite for `/saml`
* 🔧 Raise request size to accept big SAML responses
* 🔨 Add `REACT_APP_AUTH_TYPE` environment default value
* 📝 Update `README.md`
* 📝 Update `README.md`
* 🔨 Add `AUTH_TYPE` config map key
* 🔨 Add `AUTH_SAML_IDP_METADATA_URL` config map key
* ☸ Set `CONFIG_AUTH_TYPE` from `TapConfig`
* ☸ Set `CONFIG_AUTH_SAML_IDP_METADATA_URL` from `TapConfig`
* ✨ Create `SamlConfig` in `TapConfig.AuthConfig`
* 🔨 Use updated `tap.auth.saml.idpMetadataUrl` tap config field
* 📝 Update `README.md`
* 🔨 Add `tap.insgress.enabled/host` to `ConfigMap`
* 🔨 Add `tap.proxy.front.port` to `ConfigMap`
* 🔨 Add `REACT_APP_AUTH_SAML_IDP_METADATA_URL` env to `front`
* 🔧 Supply `auth.saml` fields to `helm-chart/values.yaml`
* 🐛 Fix indentation for X.509 secrets
* 📝 Provide SAML setup docs
* 📝 Update SAML setup docs
* 📝 Update SAML setup docs
* Added callback URL indication
* 💥 Disable standard `Descope` auth
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-01-23 10:47:29 -08:00
M. Mert Yildiran
6307871584
🔨 Add patch
verb to kubeshark-self-config-role
2024-01-23 20:52:04 +03:00
Alon Girmonsky
f2b7df7e02
Global Filter, escaping doublequotes in strings ( #1484 )
...
* Global filter quote change
Global filter uses a single quote as opposed to double quote. This limits the use of `'` inside the string as it can not be escaped. When using double quote ("), single quote can be used and double quote can be escaped as part of a string. An example for a Global Filter string: "redact(\"request.headers.Authorization\", \"request.headers['X-Aws-Ec2-Metadata-Token']\")"
* support escaping double quotes in the global filter string
2024-01-19 16:51:33 -08:00
M. Mert Yildiran
ddc1dc3d71
🔨 Add TcpStreamChannelTimeoutMs
field to TapConfig
struct
2024-01-15 23:00:31 +03:00
M. Mert Yildiran
d99bfea0db
🔨 Rename worker
resource requirement to sniffer
2024-01-15 21:14:06 +03:00
Volodymyr Stoiko
bed9d06c59
Pass kernel-module flag only if pf_ring enabled ( #1480 )
2024-01-14 14:39:32 -08:00
Volodymyr Stoiko
aaeb3ca1eb
Load pf-ring kernel module in init container ( #1476 )
...
* Load kernel module in init container
* Update docs
* Update formatting
* Add pre-stop hook to unload pf_ring module
* Enable hook only on kernel module enabled
* fix template
* Use sidecontainer to unload pf_ring
* Add requirements for tracer into structs
* fix values
* fix typo
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-01-12 15:49:39 -08:00
tgaliotto
a5be1a8eaa
add request and limits for tracer container ( #1459 )
...
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2024-01-12 09:30:50 -08:00
M. Mert Yildiran
8ba3e603a4
✨ Add trafficSampleRate
field to TapConfig
2024-01-10 18:51:52 +03:00
Volodymyr Stoiko
db51e6dbc2
✨ Add kubeshark-worker-metrics
service and document it ( #1474 )
...
* Expose worker metrics
* Add metrics documentation
* upd
* Update metrics port configuration
* Update config/configStructs/tapConfig.go
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* Update helm-chart/README.md
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* Update helm-chart/templates/16-worker-service-metrics.yaml
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
---------
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
2024-01-04 16:17:22 +03:00
M. Mert Yildiran
36767eda27
🔨 Add KernelModuleConfig
struct to TapConfig
2023-12-28 22:09:01 +03:00
Volodymyr Stoiko
6c01078f97
Add PF_RING related changes to docs and helm ( #1471 )
...
* Install pf-ring KMM Module and wait for it
* Add mode configuration
* save
* Update doc
* upd
* toc
* adjust template
* upd
* Add module cr verification job
* upd doc
* Fix binary name
* Add disable mode
* Update PF_RING.md
Some adjustments to the instructions.
* Update 15-pf-ring-kernel-module.yaml
Small syntax err
* upd
* merge master
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
2023-12-27 19:01:20 -08:00
M. Mert Yildiran
6c06307d68
🔨 Add GLOBAL_FILTER
field to ConfigMap
2023-12-27 23:58:17 +03:00
M. Mert Yildiran
2223cad038
🔨 Add REACT_APP_REPLAY_DISABLED
environment variable to front
2023-12-27 22:30:17 +03:00
M. Mert Yildiran
c1fc4447ef
🔨 Move the list of Linux capabilities into values.yaml
2023-12-27 13:14:53 +03:00
M. Mert Yildiran
ea3eecfa04
🔨 Move SCRIPTING_ENV
from ConfigMap
to Secret
2023-12-25 20:55:26 +03:00
M. Mert Yildiran
51968f2aae
🔨 Add REPLAY_DISABLED
field to ConfigMap
2023-12-25 17:34:38 +03:00
M. Mert Yildiran
d3f2cdbf0e
✨ Add DefaultFilter
field to TapConfig
2023-12-18 16:51:55 +03:00
Serhiy Berezin
d3c21a07bb
EFS persistent volume helm deployment support ( #1455 )
...
* EFS persistent volume
docs/14
EFS static and dynamic provision added to default
* Update helm-chart/values.yaml
Co-authored-by: M. Mert Yildiran <mehmetmertyildiran@gmail.com>
* Update helm-chart/templates/08-persistent-volume-claim.yaml
Co-authored-by: M. Mert Yildiran <mehmetmertyildiran@gmail.com>
* Update config/configStructs/tapConfig.go
Fix format
Co-authored-by: M. Mert Yildiran <mehmetmertyildiran@gmail.com>
* Fix format config/configStructs/tapConfig.go
Co-authored-by: M. Mert Yildiran <mehmetmertyildiran@gmail.com>
* Improve formatting
---------
Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
Co-authored-by: M. Mert Yildiran <mehmetmertyildiran@gmail.com>
2023-12-11 10:52:58 -08:00
M. Mert Yildiran
510d5e5ed8
🔥 Remove REACT_APP_HUB_HOST
and REACT_APP_HUB_PORT
environment variables
2023-12-07 22:10:11 +03:00
M. Mert Yildiran
6b8beb50ad
🔨 Update the capabilities
2023-12-04 23:31:15 +03:00
M. Mert Yildiran
dd91087157
Add comments to explain the required Linux capabilities
2023-12-04 22:49:31 +03:00
M. Mert Yildiran
cf3ce0180b
🔨 Remove the unnecessary Linux capabilities
2023-12-04 22:39:21 +03:00
Chin K
fc0f6a8452
🔨 Add SecurityContextConstraints
for OpenShift ( #1451 )
...
* Added OS route
* Openshift Port-changes
* custom-scc
* custom-scc name update
* Revert "custom-scc name update"
This reverts commit 7e6d96c086
.
* Added pre-install hook
* default port
* worker port update
* Update helm-chart/templates/14-kubeshark-scc.yaml
Co-authored-by: M. Mert Yildiran <mehmetmertyildiran@gmail.com>
* SCC only for openshift - capability added
---------
Co-authored-by: M. Mert Yildiran <mehmetmertyildiran@gmail.com>
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
2023-11-21 20:01:34 +03:00
M. Mert Yildiran
e2ef9eff05
🐛 Add CHECKPOINT_RESTORE
Linux capability for kernel versions above 5.9
2023-11-04 00:06:27 +03:00
M. Mert Yildiran
bed59e12ea
🔥 Delete the non-existing field references in _helpers.tpl
file
2023-11-02 18:53:17 +03:00
M. Mert Yildiran
d295cecfc2
🔨 Add REACT_APP_AUTH_ENABLED
environment variable to kubeshark-front
2023-10-28 00:15:00 +03:00
M. Mert Yildiran
820fb64f8d
🔥 Delete envFrom
fields from the Helm templates
2023-10-27 00:31:24 +03:00
M. Mert Yildiran
62d4c3a86e
🔨 Add ApprovedTenants
field to AuthConfig
and enable auth by default
2023-10-26 20:27:34 +03:00
M. Mert Yildiran
3b5cd6c77b
🔨 Make the config field tags camelCase
2023-10-25 18:00:32 +03:00
M. Mert Yildiran
e215870b9d
🔨 Add v
prefix to image tags
2023-10-16 23:30:12 +03:00
M. Mert Yildiran
a3383ee6cc
🔨 Template the Helm chart versions into Docker tags
2023-10-16 23:19:44 +03:00
M. Mert Yildiran
9f8ecc8e4e
🔨 Use if
for commands
2023-10-13 02:09:59 +03:00
M. Mert Yildiran
9cdf1aa68b
🔥 Delete enabling profiler of the worker
2023-10-13 01:58:31 +03:00
M. Mert Yildiran
706a2fc9b5
🔨 Template the -servicemesh
flag
2023-10-12 18:28:42 +03:00
M. Mert Yildiran
6d79598c5d
🔨 Template -no-kernel-module
flag
2023-10-09 21:17:34 +03:00
M. Mert Yildiran
22bdbda718
🔨 Add NET_RAW
and NET_ADMIN
capabilities to tracer
container
2023-10-09 19:56:29 +03:00
M. Mert Yildiran
23e2493890
🔨 Fix the issues in worker DaemonSet
2023-10-04 06:34:34 +03:00
M. Mert Yildiran
a7905bc1ba
Revert " 🔨 Add server
container to worker DaemonSet
"
...
This reverts commit 48adf86b25
.
2023-10-04 06:02:24 +03:00
M. Mert Yildiran
4831b44dfa
Revert " 🔨 Separate the resources of each container in worker DaemonSet
"
...
This reverts commit 6add6fb1ec
.
2023-10-04 06:02:19 +03:00
M. Mert Yildiran
6add6fb1ec
🔨 Separate the resources of each container in worker DaemonSet
2023-09-28 01:36:56 +03:00
M. Mert Yildiran
e1106e25c4
✨ Use emptyDir
as the default type of data
volume
2023-09-27 01:57:15 +03:00
M. Mert Yildiran
48adf86b25
🔨 Add server
container to worker DaemonSet
2023-09-27 00:20:46 +03:00
M. Mert Yildiran
2ea5dc0df0
🔨 Remove SYS_MODULE
from the capabilities of tracer
2023-09-26 21:45:30 +03:00
M. Mert Yildiran
ef7c80df05
📝 Update Helm notes
2023-09-25 23:24:37 +03:00
M. Mert Yildiran
41dacbff1a
🔨 Add tracer
as a separate container to worker DaemonSet
( #1428 )
...
* 🔨 Add `tracer` as a separate container to worker `DaemonSet`
* 🔥 Delete some of the unused connector methods
* 🔨 Set `POD_NAME` and `POD_NAMESPACE` environment variables in worker `DeamonSet`
* 🔨 Set `POD_NAME` and `POD_NAMESPACE` environment variables in hub `Deployment`
* Fix the labels
* Fix the self config role
* Restrict it to specific resource names
* Run `make generate-manifests`
2023-09-24 04:23:32 +03:00
Luiz Oliveira
3dfff2b7a5
♻️ Turn the Ingress path rewrite for Hub into an Nginx location directive ( #1426 )
...
* fixes websocket for nginx-ingress
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* update messagem when helm completes
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* force react port to be a path
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* include Authorization header to the proxy
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* remove hub from proxy
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* remove REACT_APP_HUB_PORT info
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* include path back again to REACT_APP_HUB_PORT
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
---------
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
2023-09-15 21:43:34 +03:00
M. Mert Yildiran
583a5b97ee
🔧 Re-order the template filenames and re-generate values.yaml
and complete.yaml
2023-09-04 02:25:33 +03:00
Luiz Oliveira
64aae06fe5
🛂 Add a new Role
and RoleBinding
resources to have write access for our own Secret
resource ( #1416 )
...
* include role and rolebinding to write secrets
With this, the kubeshark service-account have rights to
update the value of the secrets of the same namespace
where kubeshark was deployed. This was necessary to keep
the value of the license updated
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* Update helm-chart/templates/02-cluster-role.yaml
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* Update helm-chart/templates/03-cluster-role-binding.yaml
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* Update helm-chart/templates/03-cluster-role-binding.yaml
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* Update helm-chart/templates/03-cluster-role-binding.yaml
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* Update helm-chart/templates/02-cluster-role.yaml
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
---------
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
2023-09-04 02:20:26 +03:00
Luiz Oliveira
1ccaa03fb2
🏗️ Give the user ability to set ingress as needed ( #1417 )
...
* Give the user hability to set ingress as needed
- Removed unecessary IngressClass.
- If no IngressClassName passed, use cluster's default class
- Renamed `ingressclass` with `IngressClassName`. Is the standard name
used for it.
- Included custom annotations for Ingress. This way user can set any
custom annotation for the ingress only.
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* Update helm-chart/templates/11-ingress.yaml
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* Update config/configStructs/tapConfig.go
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* Update helm-chart/templates/11-ingress.yaml
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* update default ingressClassName value
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
---------
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
2023-09-04 02:18:43 +03:00
M. Mert Yildiran
1ac3ba0a6d
🔧 Add a notice about telemetry into NOTES.txt
of the Helm chart
2023-08-31 18:55:58 +03:00
M. Mert Yildiran
fa1e7bcf01
🔧 Add TelemetryConfig
struct and --telemetry-enabled
flag to tap
command
2023-08-31 03:50:14 +03:00
M. Mert Yildiran
bf182b6330
🐛 Template the -tls
flag in worker DaemonSet
2023-08-29 03:51:08 +03:00
M. Mert Yildiran
7afb1d8b9b
⏪ Set the probing port of Hub back to 80
2023-08-24 23:51:47 +03:00
M. Mert Yildiran
f628192216
🚑 Add initialDelaySeconds
to readiness and liveness probes of worker DaemonSet
2023-08-24 22:05:26 +03:00
M. Mert Yildiran
0e74238e56
🚀 Rename some of the recently added Kubernetes resources
2023-08-22 19:00:22 +03:00
Luiz Oliveira
63325ec890
🚀 Add readiness and liveness probes to worker DaemonSet
( #1414 )
...
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
2023-08-19 20:32:49 +03:00
M. Mert Yildiran
579cb47ecf
🔥 networking.k8s.io
from apiGroups
and ingresses
from resources
in ClusterRole
2023-08-17 17:29:54 +03:00
M. Mert Yildiran
7ed4088b4b
⚡ Load the environment variables from kubeshark-hub-secret
in worker DaemonSet
2023-08-17 00:56:16 +03:00
Luiz Oliveira
f95db49317
🚀 Change Hub's and Front's resource type from Pod
to Deployment
( #1412 )
...
* change services to ClusterIP and update selector labels
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* replace kind of hub and front to Deployments
Pod -> Deployments
hub config -> Uses a config-map
license -> Ises a secret
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* uses map of labels to select pods and services
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* remove ListAllNamespaces method
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* include livenessProbe and readinessProbe for deployments
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
---------
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
2023-08-16 02:35:31 +03:00
M. Mert Yildiran
749b19512e
⏪ Bring back the app
labels
2023-08-15 18:33:00 +03:00
M. Mert Yildiran
b7a8d9a41a
⚡ Fix the label order
2023-08-15 17:44:39 +03:00
Luiz Oliveira
995fb96f24
🎨 Rename worker labels to the same pattern just like the other resources ( #1410 )
...
* rename worker labels to the same pattern from others kubeshark components
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* update matchLabels from daemonsets
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
---------
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
2023-08-15 16:56:43 +03:00
M. Mert Yildiran
5d4557d1dd
✨ Add SYS_MODULE
Linux capability to the worker DaemonSet
2023-08-14 17:49:14 +03:00
M. Mert Yildiran
78c1c02fe6
🔥 Delete the recently added KMM related resources
2023-08-14 17:43:44 +03:00
M. Mert Yildiran
a5efb6b625
⚡ Fix the indentation
2023-08-12 03:09:37 +03:00
M. Mert Yildiran
7dcb2d23a0
⚡ Use the nodeselectorterms
from values.yaml
in the kmm-operator-controller-manager
deployment
2023-08-12 02:44:35 +03:00
M. Mert Yildiran
f4ff4d4dd6
✨ Add KMMConfig
struct to TapConfig
2023-08-12 02:41:29 +03:00
M. Mert Yildiran
854836056d
🔨 Rename kernel-module-management.yaml
to 15-kernel-module-management.yaml
2023-08-12 02:37:29 +03:00
Luiz Oliveira
090368295c
✨ Include kernel module management operator ( #1409 )
...
Files generated from https://github.com/kubernetes-sigs/kernel-module-management/tree/main/config/default
using kubectl kustomize
included kubeshark labels and checking
Attention, KMM requires cert-manager.
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
2023-08-12 02:36:30 +03:00
M. Mert Yildiran
a5fb7e0474
⚡ Add .Capabilities.APIVersions.Has "kmm.sigs.x-k8s.io/v1beta1"
check to module loader related Helm templates
2023-08-11 21:49:01 +03:00
M. Mert Yildiran
1a0625d37c
⚡ Change the key from Dockerfile
to dockerfile
in module loader ConfigMap
2023-08-11 17:15:12 +03:00
M. Mert Yildiran
7ec1f595a1
⚡ Change the selector in module loader
2023-08-11 00:20:47 +03:00
M. Mert Yildiran
3998485944
🔨 Rename 12-nginx-config.yaml
to 12-nginx-config-map.yaml
2023-08-11 00:15:41 +03:00
M. Mert Yildiran
661e17ace9
✨ Add 14-module-loader-config-map.yaml
and a Makefile rule that generates it
2023-08-11 00:03:37 +03:00
Luiz Oliveira
7c8adee7a8
🔨 Add _helpers.tpl
and NOTES.txt
to Helm chart and refactor labels
( #1406 )
...
* include kubernetes default labels
Using _helpers.tpl to define those labels
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* include Notes with tips after the installs
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* create a standard service account name
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* Update helm-chart/templates/NOTES.txt
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* Update helm-chart/templates/NOTES.txt
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
* fixes ingress and nginx labels
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* fixes new label mapping from values
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
* update makefile to to use correct default namespace and release name to generate manifests
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
---------
Signed-off-by: Luiz Oliveira <ziuloliveira@gmail.com>
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
2023-08-10 22:39:17 +03:00
M. Mert Yildiran
461ad1921e
✨ Add 13-module-loader.yaml
Helm template which should load pf_ring.ko
kernel module using KMM
2023-08-10 15:51:37 +03:00
M. Mert Yildiran
c533bcd38c
✨ Add AUTH_ENABLED
and AUTH_APPROVED_EMAILS
environment variables to Hub's template
2023-08-09 01:22:10 +03:00
M. Mert Yildiran
b9c3704bae
⚡ Remove apiVersion
field
2023-08-07 20:01:59 +03:00
M. Mert Yildiran
46799f6665
Revert " ⚡ Let the user system:anonymous
access the services/proxy
resource"
...
This reverts commit acaa29f8eb
.
2023-08-07 19:59:16 +03:00
Adrian Wyssmann
250a878407
✨ Allow to disable IPv6 for nginx ingress ( #1392 )
...
Co-authored-by: M. Mert Yildiran <me@mertyildiran.com>
2023-08-05 18:43:13 +03:00
M. Mert Yildiran
909cc8de15
⚡ Change default PROFILING_INTERVAL_SECONDS
to 60
2023-07-30 04:57:26 +03:00
M. Mert Yildiran
9e6af8c0bc
⚡ Enable profiling in the worker when debug
is enabled
2023-07-30 04:23:53 +03:00
M. Mert Yildiran
45bfebc956
⚡ Add sidecar.istio.io/inject: "false"
label to all pods
2023-07-30 02:50:30 +03:00
M. Mert Yildiran
acaa29f8eb
⚡ Let the user system:anonymous
access the services/proxy
resource
2023-07-30 02:48:32 +03:00
M. Mert Yildiran
a259361a96
🔥 Remove -packet-capture
flag
2023-07-17 20:14:53 +03:00
M. Mert Yildiran
2224d0e9f4
🐛 Fix the -debug
flag of the worker in the Helm template
2023-07-10 20:43:07 +03:00
M. Mert Yildiran
db01c4e9e3
⏪ Revert the tap.proxy.hub.srvport
usage in the Hub template
2023-07-09 23:11:02 +03:00
M. Mert Yildiran
988bb16260
Use the tap.proxy.hub.port
and tap.proxy.hub.srvport
in the Helm templates
2023-07-09 22:58:02 +03:00
M. Mert Yildiran
9a7c23f070
🔥 Remove nodeSelectorTerms
from hub
and front
pods
2023-07-06 21:28:32 +03:00
M. Mert Yildiran
796fc1453c
⚡ Fix the hub and worker commands
2023-07-03 16:47:00 +03:00
M. Mert Yildiran
f269a61842
Revert "Revert " 🐛 Fix the commands in case of -debug
flag enabled""
...
This reverts commit 64b22daa2a
.
2023-07-03 15:11:04 +03:00
M. Mert Yildiran
64b22daa2a
Revert " 🐛 Fix the commands in case of -debug
flag enabled"
...
This reverts commit 3a2d34647e
.
2023-07-03 12:32:15 +03:00
M. Mert Yildiran
3a2d34647e
🐛 Fix the commands in case of -debug
flag enabled
2023-07-03 12:08:57 +03:00
M. Mert Yildiran
7b86d32174
⚡ Remove the hostPort
field from the manifests
2023-06-30 16:57:26 +03:00
M. Mert Yildiran
b9f9e860b6
⚡ Change the default namespace from kubeshark
to default
and use .Release.Namespace
in Helm templates
2023-06-27 21:06:44 +03:00
M. Mert Yildiran
1404c68a22
⚡ Fix the annotations
in Ingress
2023-06-27 20:50:02 +03:00
M. Mert Yildiran
400c681369
⚡ Fix the issues in Ingress
Helm template
2023-06-27 20:36:46 +03:00
M. Mert Yildiran
a4761e3262
⚡ Handle the column character in REACT_APP_HUB_PORT
environment variable
2023-06-27 14:43:53 +03:00
M. Mert Yildiran
16f1e116c0
⚡ Template the annotations in all resources
2023-06-27 03:45:47 +03:00
M. Mert Yildiran
2d625eccaa
⚡ Rename resourcelabels
to labels
2023-06-27 03:33:46 +03:00
M. Mert Yildiran
19443501da
⚡ Have consistent key style in values.yaml
2023-06-27 03:32:03 +03:00
M. Mert Yildiran
4ef91a2701
✨ Template the controller
field in IngressClass
resource
2023-06-27 03:27:40 +03:00
M. Mert Yildiran
f32a7d97ec
✨ Template the ingressClassName
field in Ingress
resource
2023-06-27 03:25:58 +03:00
M. Mert Yildiran
aeda024986
⚡ Remove the unnecessary single quotes from the Helm templates
2023-06-27 03:19:45 +03:00
M. Mert Yildiran
98198b9733
⚡ Remove the unused labels from the resources
2023-06-27 02:48:46 +03:00
M. Mert Yildiran
0bf7c83b86
⚡ Use toYaml
and nindent
instead of range
in the Helm templates
2023-06-27 02:45:55 +03:00
M. Mert Yildiran
a8df589076
⏪ Bring back the functionality of nodeselectorterms
field into the Helm chart
2023-06-27 01:32:16 +03:00
M. Mert Yildiran
5c4c913a27
⏪ Bring back the functionality of resourcelabels
field into the Helm chart
2023-06-27 01:12:04 +03:00
M. Mert Yildiran
5efb48f0c5
⏪ Bring back the functionality of ignoretainted
field into the Helm chart
2023-06-27 00:15:04 +03:00
Victor Login
e93cd978e8
Update TLS for ingress ( #1367 )
2023-06-21 17:02:44 +03:00
M. Mert Yildiran
836b87d517
⚡ Template the SCRIPTING_ENV
env in Hub pod (Helm)
2023-06-19 01:46:51 +03:00
M. Mert Yildiran
7a5bf83336
✨ Use the Helm chart in tap
command to install Kubeshark ( #1362 )
...
* ✨ Use the Helm chart in `tap` command to install Kubeshark
* ⬆️ Set Go version to `1.19` in `go.mod` file
* ✨ Add `Helm` struct`, `NewHelm` and `NewHelmDefault` methods
* ⚡ Better logging and error return
* ⚡ Pass the config as `values.yaml` to Helm install
* 🔥 Remove `helm-chart`, `manifests` and `check` commands
* ➖ Run `go mod tidy`
* 🎨 Move `helm` package into `kubernetes` package
* 🔥 Remove `# THIS FILE IS AUTOMATICALLY GENERATED BY KUBESHARK CLI. DO NOT EDIT!` notice from the manifests and Helm templates
* 🔥 Remove the unused `GenerateApplyConfiguration` and `buildWithDefaultLabels` methods
2023-06-06 12:16:03 +03:00
M. Mert Yildiran
2edb987c07
⚡ Template REACT_APP_HUB_PORT
in the Helm chart
2023-05-25 20:24:29 +03:00
M. Mert Yildiran
be5bd6a372
⚡ Template the AUTH_APPROVED_DOMAINS
and certmanager.k8s.io/cluster-issuer
...
Also add `networking.k8s.io` to `apiGroups` in `ClusterRole`
2023-05-25 05:07:42 +03:00
M. Mert Yildiran
c57ed1efd3
⚡ Run kubeshark manifests --dump && kubeshark helm-chart
2023-05-24 04:04:34 +03:00
M. Mert Yildiran
ad9dfbce40
✨ Add Ingress
( #1357 )
...
* ✨ Add `Ingress`
* ⚡ Rewrite the target in `Ingress`
* ⚡ Fix the path of front pod in `Ingress`
* ✨ Add `IngressConfig` struct
* ⚡ Generate the correct Helm chart based on `tap.ingress` field of `values.yaml`
2023-05-16 19:46:47 +03:00
M. Mert Yildiran
139336d4ee
⚡ Template hostPort
(s) in the Helm chart
2023-05-10 14:38:38 +03:00
M. Mert Yildiran
f68fed0de8
🐛 Fix the effect of proxy config port changes
2023-05-10 01:28:43 +03:00
M. Mert Yildiran
1d7d242e6c
⚡ Generate the missing new line in 08-persistent-volume-claim.yaml
2023-05-09 00:00:07 +03:00
M. Mert Yildiran
baf0e65337
⚡ Template the Helm chart based on persistentstorage
value
2023-05-08 23:52:14 +03:00
M. Mert Yildiran
a33a3467fc
✨ Add persistentstorage
option
2023-05-08 00:50:56 +03:00
M. Mert Yildiran
2563cc1922
🐛 Fix the imagePullPolicy
to imagepullpolicy
in helm-chart
command
2023-04-24 02:03:58 +03:00
M. Mert Yildiran
38d121556c
✨ Add storageclass
option to config.yaml
2023-04-20 20:20:24 +03:00
M. Mert Yildiran
bbe3338c3c
⚡ Rename 08-persistent-volume.yaml
to 08-persistent-volume-claim.yaml
2023-04-20 20:04:47 +03:00
M. Mert Yildiran
df7d1ac10c
⚡ Give the permission of listing or watching the persistentvolumeclaims
to the ClusterRole
2023-04-20 03:01:25 +03:00
M. Mert Yildiran
44adb397c1
🔥 Remove the old DaemonSet
manifests
2023-04-20 00:26:01 +03:00
M. Mert Yildiran
657ea8570c
✨ Add PersistentVolumeClaim
and mount it to worker DaemonSet
2023-04-20 00:09:22 +03:00
M. Mert Yildiran
686dd5fba1
🔥 Remove the -A
flag and allnamespaces
field from config.yaml
2023-04-19 20:52:28 +03:00
M. Mert Yildiran
90e6e99386
⚡ Run the manifests --dump
and helm-chart
commands
2023-04-19 20:30:11 +03:00
M. Mert Yildiran
fb06545887
⚡ Add a header comment to generated manifests and Helm chart templates
2023-04-12 03:10:23 +03:00
M. Mert Yildiran
3cc543827a
⚡ Fix all of the remaining issues in the Helm chart
2023-04-12 02:50:12 +03:00
M. Mert Yildiran
18addbb980
⚡ Fix the issues in Helm chart such that helm template
succeeds
2023-04-12 02:12:12 +03:00
M. Mert Yildiran
d2b9bddf78
✨ Do more Helm templating
2023-04-12 01:33:41 +03:00
M. Mert Yildiran
3ebf816a68
✨ Generate Helm chart templates
2023-04-12 01:06:39 +03:00
M. Mert Yildiran
100b397cdf
✨ Run kubeshark helm-chart
2023-04-11 19:21:04 +03:00