Merge branch 'master' into chore-admission-controller-update-v3.9.36

sysdiglabs · Dec 19, 2023 · 38f52dc · 38f52dc
2 parents b6d61aa + 7e30f6e
commit 38f52dc
Show file tree

Hide file tree

Showing 56 changed files with 572 additions and 89 deletions.
diff --git a/.github/workflows/agent-release.yaml b/.github/workflows/agent-release.yaml
@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Install Updatecli in the runner
-        uses: updatecli/updatecli-action@v2.50.0
+        uses: updatecli/updatecli-action@v2.51.0
 
       - name: Run Updatecli in apply mode
         run: "updatecli apply --config .github/updatecli.d/config-agent-release.yaml"

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -78,7 +78,7 @@ jobs:
           done
 
       - name: Stash changelog files
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: generated-changelogs
           path: |
@@ -96,7 +96,7 @@ jobs:
           fetch-depth: 0
 
       - name: Unstash generated changelogs
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: generated-changelogs
           path: charts
@@ -169,7 +169,7 @@ jobs:
           token: ${{ secrets.TOOLS_JENKINS_ADMIN_ACCESS_GITHUB_TOKEN }}
 
       - name: Unstash generated changelogs
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: generated-changelogs
           path: charts

diff --git a/charts/admission-controller/CHANGELOG.md b/charts/admission-controller/CHANGELOG.md
@@ -10,6 +10,9 @@ Manual edits are supported only below '## Change Log' and should be used
 exclusively to fix incorrect entries and not to add new ones.
 
 ## Change Log
+# v0.14.16
+### New Features
+* **sysdig-deploy** [49fe006f](https://github.com/sysdiglabs/charts/commit/49fe006fb0ff206c7b566a45bfa5f71713d5ad0a): Add prerequisite information on the chart ([#1468](https://github.com/sysdiglabs/charts/issues/1468))
 # v0.14.15
 ### Chores
 * **admission-controller,cloud-connector,cluster-scanner,node-analyzer,registry-scanner,sysdig-deploy** [9d5d8c58](https://github.com/sysdiglabs/charts/commit/9d5d8c5809d35bcb5e8060ccc454f446cb1e3bc7): change charts ownership ([#1461](https://github.com/sysdiglabs/charts/issues/1461))

diff --git a/charts/admission-controller/RELEASE-NOTES.md b/charts/admission-controller/RELEASE-NOTES.md
@@ -1,5 +1,5 @@
 # What's Changed
 
-### Chores
-- **admission-controller,cloud-connector,cluster-scanner,node-analyzer,registry-scanner,sysdig-deploy** [9d5d8c58](https://github.com/sysdiglabs/charts/commit/9d5d8c5809d35bcb5e8060ccc454f446cb1e3bc7): change charts ownership ([#1461](https://github.com/sysdiglabs/charts/issues/1461))
-#### Full diff: https://github.com/sysdiglabs/charts/compare/admission-controller-0.14.14...admission-controller-0.14.15
+### New Features
+- **sysdig-deploy** [49fe006f](https://github.com/sysdiglabs/charts/commit/49fe006fb0ff206c7b566a45bfa5f71713d5ad0a): Add prerequisite information on the chart ([#1468](https://github.com/sysdiglabs/charts/issues/1468))
+#### Full diff: https://github.com/sysdiglabs/charts/compare/admission-controller-0.14.15...admission-controller-0.14.16
diff --git a/charts/admission-controller/doc.yaml b/charts/admission-controller/doc.yaml
@@ -13,7 +13,7 @@ chart:
   #  values: "-- generate from values file --"
   valuesExample: "sysdig.secureAPIToken=YOUR-KEY-HERE,clusterName=YOUR-CLUSTER-NAME"
 prerequisites:
-  - "Helm 3"
+  - "Helm 3.6"
   - "Kubernetes v1.16+"
   - "Cluster Name (pick one to identify your Kubernetes Cluster)"
   - "Sysdig Secure API Token"

diff --git a/charts/agent/CHANGELOG.md b/charts/agent/CHANGELOG.md
@@ -10,6 +10,15 @@ Manual edits are supported only below '## Change Log' and should be used
 exclusively to fix incorrect entries and not to add new ones.
 
 ## Change Log
+# v1.18.4
+### New Features
+* **agent** [3be55461](https://github.com/sysdiglabs/charts/commit/3be55461cc3b28f710c1000583018c9584616681): add tolerations for rke2 master nodes ([#1539](https://github.com/sysdiglabs/charts/issues/1539))
+# v1.18.3
+### Bug Fixes
+* **agent,sysdig-deploy** [d8e38523](https://github.com/sysdiglabs/charts/commit/d8e38523b3e94f0a6311bb5be8f5135e56d47f1c): /var/data volume mount ([#1532](https://github.com/sysdiglabs/charts/issues/1532))
+# v1.18.2
+### New Features
+* **agent** [d86d3be1](https://github.com/sysdiglabs/charts/commit/d86d3be1eb2ee7da6b135f5262457c6f70f98264): update the readiness probes to use localhost ([#1530](https://github.com/sysdiglabs/charts/issues/1530))
 # v1.18.1
 ### Bug Fixes
 * **agent** [74d90fca](https://github.com/sysdiglabs/charts/commit/74d90fcae6332638233fb3a959dd724b30d82989): ephemeral-storage on gke autopilot and slim enabled ([#1519](https://github.com/sysdiglabs/charts/issues/1519))

diff --git a/charts/agent/Chart.yaml b/charts/agent/Chart.yaml
@@ -30,4 +30,4 @@ sources:
 - https://app.sysdigcloud.com/#/settings/user
 - https://github.com/draios/sysdig
 type: application
-version: 1.18.1
+version: 1.18.4
diff --git a/charts/agent/RELEASE-NOTES.md b/charts/agent/RELEASE-NOTES.md
@@ -1,5 +1,5 @@
 # What's Changed
 
-### Bug Fixes
-- **agent** [74d90fca](https://github.com/sysdiglabs/charts/commit/74d90fcae6332638233fb3a959dd724b30d82989): ephemeral-storage on gke autopilot and slim enabled ([#1519](https://github.com/sysdiglabs/charts/issues/1519))
-#### Full diff: https://github.com/sysdiglabs/charts/compare/agent-1.18.0...agent-1.18.1
+### New Features
+- **agent** [3be55461](https://github.com/sysdiglabs/charts/commit/3be55461cc3b28f710c1000583018c9584616681): add tolerations for rke2 master nodes ([#1539](https://github.com/sysdiglabs/charts/issues/1539))
+#### Full diff: https://github.com/sysdiglabs/charts/compare/agent-1.18.3...agent-1.18.4
diff --git a/charts/agent/templates/daemonset.yaml b/charts/agent/templates/daemonset.yaml
@@ -221,6 +221,7 @@ spec:
           readinessProbe:
             {{- if eq (include "agent.enableHttpProbes" .) "true" }}
             httpGet:
+              host: 127.0.0.1
               path: /healthz
               port: 24483
             {{- else }}
@@ -281,6 +282,8 @@ spec:
               readOnly: true
             - mountPath: /host/var/lib
               name: varlib-vol
+            - mountPath: /host/var/data
+              name: vardata-vol
             - mountPath: /host/var/run
               name: varrun-vol
             {{- if (include "agent.ebpfEnabled" .) }}
@@ -299,6 +302,8 @@ spec:
               readOnly: true
             - mountPath: /host/var/lib
               name: varlib-vol
+            - mountPath: /host/var/data
+              name: vardata-vol
             - mountPath: /host/var/run
               name: varrun-vol
             {{- if (include "agent.ebpfEnabled" .) }}
@@ -424,6 +429,9 @@ spec:
         - name: varlib-vol
           hostPath:
             path: /var/lib
+        - name: vardata-vol
+          hostPath:
+            path: /var/data
         - name: varrun-vol
           hostPath:
             path: /var/run
@@ -459,6 +467,9 @@ spec:
         - name: varlib-vol
           hostPath:
             path: /var/lib
+        - name: vardata-vol
+          hostPath:
+            path: /var/data
         {{- if (include "agent.ebpfEnabled" .) }}
         - name: bpf-probes
           emptyDir: {}

diff --git a/charts/agent/templates/deployment.yaml b/charts/agent/templates/deployment.yaml
@@ -105,6 +105,7 @@ spec:
           readinessProbe:
             {{- if eq (include "agent.enableHttpProbes" .) "true" }}
             httpGet:
+              host: 127.0.0.1
               path: /healthz
               port: 24483
             {{- else }}
@@ -159,6 +160,8 @@ spec:
               readOnly: true
             - mountPath: /host/var/lib
               name: varlib-vol
+            - mountPath: /host/var/data
+              name: vardata-vol
             - mountPath: /host/run
               name: run-vol
             - mountPath: /host/var/run
@@ -179,6 +182,8 @@ spec:
               readOnly: true
             - mountPath: /host/var/lib
               name: varlib-vol
+            - mountPath: /host/var/data
+              name: vardata-vol
             - mountPath: /host/run
               name: run-vol
             - mountPath: /host/var/run
@@ -307,6 +312,9 @@ spec:
         - name: varlib-vol
           hostPath:
             path: /var/lib
+        - name: vardata-vol
+          hostPath:
+            path: /var/data
         - name: run-vol
           hostPath:
             path: /run
@@ -330,6 +338,9 @@ spec:
         - name: varlib-vol
           hostPath:
             path: /var/lib
+        - name: vardata-vol
+          hostPath:
+            path: /var/data
         - name: run-vol
           hostPath:
             path: /run

diff --git a/charts/agent/tests/readiness_probe_test.yaml b/charts/agent/tests/readiness_probe_test.yaml
@@ -12,6 +12,7 @@ tests:
           path: spec.template.spec.containers[0].readinessProbe
           value:
              httpGet:
+               host: 127.0.0.1
                path: /healthz
                port: 24483
              initialDelaySeconds: 90
@@ -26,6 +27,7 @@ tests:
           path: spec.template.spec.containers[0].readinessProbe
           value:
             httpGet:
+              host: 127.0.0.1
               path: /healthz
               port: 24483
             initialDelaySeconds: 90
@@ -90,6 +92,7 @@ tests:
           path: spec.template.spec.containers[0].readinessProbe
           value:
             httpGet:
+              host: 127.0.0.1
               path: /healthz
               port: 24483
             initialDelaySeconds: 90
@@ -105,6 +108,7 @@ tests:
           path: spec.template.spec.containers[0].readinessProbe
           value:
             httpGet:
+              host: 127.0.0.1
               path: /healthz
               port: 24483
             initialDelaySeconds: 90

diff --git a/charts/agent/tests/volumes_test.yaml b/charts/agent/tests/volumes_test.yaml
@@ -14,6 +14,23 @@ tests:
     templates:
       - daemonset.yaml
 
+  - it: Ensure /var/data host volume is mounted as /host/var/data in container
+    set:
+      sysdig:
+        accessKey: AAAAAAAA-BBBB-CCCC-DDDD-EEEEEEEEEEEE
+      delegatedAgentDeployment:
+        enabled: true
+    asserts:
+      - equal:
+          path: spec.template.spec.containers[*].volumeMounts[?(@.name == "vardata-vol")].mountPath
+          value: /host/var/data
+      - equal:
+          path: spec.template.spec.volumes[?(@.name == "vardata-vol")].hostPath.path
+          value: /var/data
+    templates:
+      - daemonset.yaml
+      - deployment.yaml
+
   - it: Ensure /var/lib host volume is mounted as /host/var/lib in container
     asserts:
       - equal:

diff --git a/charts/agent/values.yaml b/charts/agent/values.yaml
@@ -279,6 +279,10 @@ tolerations:
     key: node-role.kubernetes.io/etcd
     operator: Equal
     value: "true"
+  - effect: NoExecute
+    key: CriticalAddonsOnly
+    operator: Equal
+    value: "true"
 leaderelection:
   enable: false
 localForwarder:

diff --git a/charts/cloud-connector/CHANGELOG.md b/charts/cloud-connector/CHANGELOG.md
@@ -11,6 +11,9 @@ exclusively to fix incorrect entries and not to add new ones.
 
 
 ## Change Log
+# v0.8.8
+### New Features
+* **sysdig-deploy** [49fe006f](https://github.com/sysdiglabs/charts/commit/49fe006fb0ff206c7b566a45bfa5f71713d5ad0a): Add prerequisite information on the chart ([#1468](https://github.com/sysdiglabs/charts/issues/1468))
 # v0.8.7
 ### Chores
 * **admission-controller,cloud-connector,cluster-scanner,node-analyzer,registry-scanner,sysdig-deploy** [9d5d8c58](https://github.com/sysdiglabs/charts/commit/9d5d8c5809d35bcb5e8060ccc454f446cb1e3bc7): change charts ownership ([#1461](https://github.com/sysdiglabs/charts/issues/1461))

diff --git a/charts/cloud-connector/Chart.yaml b/charts/cloud-connector/Chart.yaml
@@ -3,7 +3,7 @@ name: cloud-connector
 description: Sysdig Cloud Connector
 
 type: application
-version: 0.8.7
+version: 0.8.8
 appVersion: 0.16.48
 home: https://sysdiglabs.github.io/cloud-connector
 

diff --git a/charts/cloud-connector/README.md b/charts/cloud-connector/README.md
@@ -25,7 +25,7 @@ Use [Cloud Connector](https://docs.sysdig.com/en/docs/installation/sysdig-secure
 ### Prerequisites
 
 
-- Helm v3
+- Helm v3.6
 - Sysdig Secure API Token
 
 ###  Installation
@@ -36,7 +36,7 @@ To install the chart:
 helm repo add sysdig https://charts.sysdig.com
 helm repo update
 helm upgrade --install cloud-connector sysdig/cloud-connector \
-     --create-namespace -n cloud-connector --version=0.8.7  \
+     --create-namespace -n cloud-connector --version=0.8.8  \
      --set sysdig.secureAPIToken=<SECURE_API_TOKEN>
 ```
 
@@ -60,7 +60,7 @@ For example:
 
 ```bash
 helm upgrade --install cloud-connector sysdig/cloud-connector \
-     --create-namespace -n cloud-connector --version=0.8.7  \
+     --create-namespace -n cloud-connector --version=0.8.8  \
      --set sysdig.secureAPIToken=<SECURE_API_TOKEN>
 ```
 
@@ -72,7 +72,7 @@ For example:
 
 ```bash
 helm upgrade --install cloud-connector sysdig/cloud-connector \
-     --create-namespace -n cloud-connector --version=0.8.7  \
+     --create-namespace -n cloud-connector --version=0.8.8  \
     --values values.yaml
 ```
 

diff --git a/charts/cloud-connector/RELEASE-NOTES.md b/charts/cloud-connector/RELEASE-NOTES.md
@@ -1,5 +1,5 @@
 # What's Changed
 
-### Chores
-- **admission-controller,cloud-connector,cluster-scanner,node-analyzer,registry-scanner,sysdig-deploy** [9d5d8c58](https://github.com/sysdiglabs/charts/commit/9d5d8c5809d35bcb5e8060ccc454f446cb1e3bc7): change charts ownership ([#1461](https://github.com/sysdiglabs/charts/issues/1461))
-#### Full diff: https://github.com/sysdiglabs/charts/compare/cloud-connector-0.8.6...cloud-connector-0.8.7
+### New Features
+- **sysdig-deploy** [49fe006f](https://github.com/sysdiglabs/charts/commit/49fe006fb0ff206c7b566a45bfa5f71713d5ad0a): Add prerequisite information on the chart ([#1468](https://github.com/sysdiglabs/charts/issues/1468))
+#### Full diff: https://github.com/sysdiglabs/charts/compare/cloud-connector-0.8.7...cloud-connector-0.8.8
diff --git a/charts/cloud-connector/doc.yaml b/charts/cloud-connector/doc.yaml
@@ -14,7 +14,7 @@ chart:
 #  values: "-- generate from values file --"
   valuesExample: "sysdig.secureAPIToken=<YOUR-SECURE-KEY>"
 prerequisites:
-- "Helm v3"
+- "Helm v3.6"
 - "Sysdig Secure API Token"
 
 release:

diff --git a/charts/cluster-scanner/CHANGELOG.md b/charts/cluster-scanner/CHANGELOG.md
@@ -10,6 +10,9 @@ Manual edits are supported only below '## Change Log' and should be used
 exclusively to fix incorrect entries and not to add new ones.
 
 ## Change Log
+# v0.8.7
+### New Features
+* **sysdig-deploy** [49fe006f](https://github.com/sysdiglabs/charts/commit/49fe006fb0ff206c7b566a45bfa5f71713d5ad0a): Add prerequisite information on the chart ([#1468](https://github.com/sysdiglabs/charts/issues/1468))
 # v0.8.6
 ### Chores
 * **admission-controller,cloud-connector,cluster-scanner,node-analyzer,registry-scanner,sysdig-deploy** [9d5d8c58](https://github.com/sysdiglabs/charts/commit/9d5d8c5809d35bcb5e8060ccc454f446cb1e3bc7): change charts ownership ([#1461](https://github.com/sysdiglabs/charts/issues/1461))

diff --git a/charts/cluster-scanner/Chart.yaml b/charts/cluster-scanner/Chart.yaml
@@ -3,7 +3,7 @@ name: cluster-scanner
 description: Sysdig Cluster Scanner
 
 type: application
-version: 0.8.6
+version: 0.8.7
 appVersion: "0.1.0"
 home: https://www.sysdig.com/
 

diff --git a/charts/cluster-scanner/README.md b/charts/cluster-scanner/README.md
@@ -25,7 +25,7 @@ $ pre-commit run -a
 $ helm repo add sysdig https://charts.sysdig.com
 $ helm repo update
 $ helm upgrade --install sysdig-cluster-scanner sysdig/cluster-scanner \
-      --create-namespace -n sysdig --version=0.8.6  \
+      --create-namespace -n sysdig --version=0.8.7  \
       --set global.clusterConfig.name=CLUSTER_NAME \
       --set global.sysdig.region=SYSDIG_REGION \
       --set global.sysdig.accessKey=YOUR-KEY-HERE
@@ -45,7 +45,7 @@ This chart deploys the Sysdig Cluster Scanner as a Deployment on a [Kubernetes](
 
 ### Prerequisites
 
-- Helm 3
+- Helm 3.6
 - Sysdig AccessKey
 
 
@@ -55,7 +55,7 @@ To install the chart with the release name `cluster-scanner`, run:
 
 ```console
 $ helm upgrade --install sysdig-cluster-scanner sysdig/cluster-scanner \
-       --create-namespace -n sysdig --version=0.8.6 \
+       --create-namespace -n sysdig --version=0.8.7 \
        --set global.clusterConfig.name=CLUSTER_NAME \
        --set global.sysdig.region=SYSDIG_REGION \
        --set global.sysdig.accessKey=YOUR-KEY-HERE
@@ -162,7 +162,7 @@ Specify each parameter using the **`--set key=value[,key=value]`** argument to `
 
 ```console
 $ helm upgrade --install sysdig-cluster-scanner sysdig/cluster-scanner \
-    --create-namespace -n sysdig --version=0.8.6 \
+    --create-namespace -n sysdig --version=0.8.7 \
     --set global.sysdig.region="us1"
 ```
 
@@ -171,7 +171,7 @@ installing the chart. For example:
 
 ```console
 $ helm upgrade --install sysdig-cluster-scanner sysdig/cluster-scanner \
-    --create-namespace -n sysdig --version=0.8.6 \
+    --create-namespace -n sysdig --version=0.8.7 \
     --values values.yaml
 ```
 

diff --git a/charts/cluster-scanner/RELEASE-NOTES.md b/charts/cluster-scanner/RELEASE-NOTES.md
@@ -1,5 +1,5 @@
 # What's Changed
 
-### Chores
-- **admission-controller,cloud-connector,cluster-scanner,node-analyzer,registry-scanner,sysdig-deploy** [9d5d8c58](https://github.com/sysdiglabs/charts/commit/9d5d8c5809d35bcb5e8060ccc454f446cb1e3bc7): change charts ownership ([#1461](https://github.com/sysdiglabs/charts/issues/1461))
-#### Full diff: https://github.com/sysdiglabs/charts/compare/cluster-scanner-0.8.5...cluster-scanner-0.8.6
+### New Features
+- **sysdig-deploy** [49fe006f](https://github.com/sysdiglabs/charts/commit/49fe006fb0ff206c7b566a45bfa5f71713d5ad0a): Add prerequisite information on the chart ([#1468](https://github.com/sysdiglabs/charts/issues/1468))
+#### Full diff: https://github.com/sysdiglabs/charts/compare/cluster-scanner-0.8.6...cluster-scanner-0.8.7