helm icon indicating copy to clipboard operation
helm copied to clipboard

Add namespaces argument for chao

Open ZachNo opened this issue 5 months ago • 0 comments

The chao agent can accept an argument to limit the targeting of namespaces watched and uploaded. This change exposes that argument more easily in the helm chart.

helm template gremlin ./gremlin --namespace gremlin --set gremlin.hostPID=true --set gremlin.hostNetwork=true --set gremlin.collect.processes=true --set gremlin.container.driver=docker-runc --set gremlin.secret.managed=true --set gremlin.secret.type=secret --set gremlin.secret.teamID=a --set gremlin.secret.teamSecret=b --set gremlin.serviceUrl=c --set image.tag=$(git rev-parse HEAD) --debug --set chao.namespaces[0]=x --set chao.namespaces[1]=y --set chao.namespaces[2]=z
......
# Source: gremlin/templates/chao-deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app.kubernetes.io/instance: chao
    app.kubernetes.io/name: chao
    helm.sh/chart: gremlin-0.18.0
    app.kubernetes.io/version: "1"
  name: chao
  namespace: gremlin
spec:
  replicas: 1
  strategy:
    rollingUpdate:
      maxSurge: 25%
      maxUnavailable: 25%
    type: RollingUpdate
  selector:
    matchLabels:
      app.kubernetes.io/instance: chao
      app.kubernetes.io/name: chao
      app.kubernetes.io/version: "1"
  template:
    metadata:
      labels:
        app.kubernetes.io/instance: chao
        app.kubernetes.io/name: chao
        helm.sh/chart: gremlin-0.18.0
        app.kubernetes.io/version: "1"
    spec:
      serviceAccountName: chao
      containers:
        - image: gremlin/chao:latest
          env:
            - name: GREMLIN_TEAM_ID
              valueFrom:
                secretKeyRef:
                  name:  gremlin-secret
                  key: GREMLIN_TEAM_ID
            - name: GREMLIN_CLUSTER_ID
              valueFrom:
                secretKeyRef:
                  name:  gremlin-secret
                  key: GREMLIN_CLUSTER_ID
            - name: GREMLIN_TEAM_SECRET
              valueFrom:
                secretKeyRef:
                  name: gremlin-secret
                  key: GREMLIN_TEAM_SECRET
          args:
            - "-api_url"
            - "c/kubernetes"
            - "-namespaces"
            - "x,y,z"
          imagePullPolicy: Always
          name: chao
      volumes:
      - name: gremlin-cert
        secret:
          secretName: gremlin-secret

ZachNo avatar Sep 06 '24 19:09 ZachNo