helm
helm copied to clipboard
Add namespaces argument for chao
The chao agent can accept an argument to limit the targeting of namespaces watched and uploaded. This change exposes that argument more easily in the helm chart.
helm template gremlin ./gremlin --namespace gremlin --set gremlin.hostPID=true --set gremlin.hostNetwork=true --set gremlin.collect.processes=true --set gremlin.container.driver=docker-runc --set gremlin.secret.managed=true --set gremlin.secret.type=secret --set gremlin.secret.teamID=a --set gremlin.secret.teamSecret=b --set gremlin.serviceUrl=c --set image.tag=$(git rev-parse HEAD) --debug --set chao.namespaces[0]=x --set chao.namespaces[1]=y --set chao.namespaces[2]=z
......
# Source: gremlin/templates/chao-deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app.kubernetes.io/instance: chao
app.kubernetes.io/name: chao
helm.sh/chart: gremlin-0.18.0
app.kubernetes.io/version: "1"
name: chao
namespace: gremlin
spec:
replicas: 1
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
selector:
matchLabels:
app.kubernetes.io/instance: chao
app.kubernetes.io/name: chao
app.kubernetes.io/version: "1"
template:
metadata:
labels:
app.kubernetes.io/instance: chao
app.kubernetes.io/name: chao
helm.sh/chart: gremlin-0.18.0
app.kubernetes.io/version: "1"
spec:
serviceAccountName: chao
containers:
- image: gremlin/chao:latest
env:
- name: GREMLIN_TEAM_ID
valueFrom:
secretKeyRef:
name: gremlin-secret
key: GREMLIN_TEAM_ID
- name: GREMLIN_CLUSTER_ID
valueFrom:
secretKeyRef:
name: gremlin-secret
key: GREMLIN_CLUSTER_ID
- name: GREMLIN_TEAM_SECRET
valueFrom:
secretKeyRef:
name: gremlin-secret
key: GREMLIN_TEAM_SECRET
args:
- "-api_url"
- "c/kubernetes"
- "-namespaces"
- "x,y,z"
imagePullPolicy: Always
name: chao
volumes:
- name: gremlin-cert
secret:
secretName: gremlin-secret