Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

doc(sysdig-stackdriver-bridge): Edit for clarity (DOC-3292) #1240

Merged
merged 4 commits into from
Jul 20, 2023
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
99 changes: 54 additions & 45 deletions charts/sysdig-stackdriver-bridge/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,61 +2,81 @@

[Sysdig Stackdriver Bridge](https://docs.sysdig.com/en/kubernetes-audit-logging.html#UUID-f62c275e-389a-317f-2079-2c61d1f282a7_UUID-ded20060-405c-1f5f-4b3f-c18d20b5668d) is an extension of the Sysdig tool that reads audit logs from Stackdriver, reformats them to match the Kubernetes-native format, and sends the logs to a configurable webhook and to the Sysdig agent service.

## Introduction

This chart adds the Sysdig Stackdriver Bridge application into a cluster using a simple `Deployment` with a `ConfigMap`.

## Prerequisites

- Sysdig should be deployed in the target Kubernetes cluster.
- You will need to create a secret that matches the value `secret.name` (`stackdriver-webhook-bridge` by default) that contains the key `key.json` with the value of the created GCP IAM Service Account for Sysdig to access Stackbridge.
- It is recommended to create this `Secret` in an out-of-band fashion in CI/CD, etc.
- Optionally, you can enable creation of the `Secret` via the chart by setting `secret.create=true` and providing the JSON data directly via `secret.data`. **This is not an advisable approach for production systems.**
- Sysdig is deployed in the target Kubernetes cluster.
- A secret that matches the value `secret.name` (`stackdriver-webhook-bridge` by default) is created. It should contain the `key.json` key with the value of the created GCP IAM Service Account for Sysdig to access Stackbridge.
- It is recommended to create this `Secret` in an out-of-band fashion in CI/CD, etc.
- Optionally, you can enable the creation of the `Secret` via the chart by setting `secret.create=true` and providing the JSON data directly via `secret.data`. **This is not an advisable approach for production systems.**

## Installing the Chart
## Install the Chart

To install the chart with the release name `my-release`, run:
To install the chart with the release name `my-release`:

```bash
$ helm repo add sysdiglabs https://sysdiglabs.github.io/charts/
```
1. Add the `sysdiglabs` Helm chart repository.
AlbertoBarba marked this conversation as resolved.
Show resolved Hide resolved

to add the `sysdiglabs` Helm chart repository. Then run:
```bash
$ helm repo add sysdiglabs https://sysdiglabs.github.io/charts/
```

```bash
$ helm install --name my-release sysdiglabs/sysdig-stackdriver-bridge
```
2. Install `sysdig-stackdriver-bridge`:

```bash
$ helm install --name my-release sysdiglabs/sysdig-stackdriver-bridge
```

When done, the application should be running within your cluster if properly configured.

> **Tip**: List all releases using `helm list`
> **Tip**: List all the releases using the `helm list` command.

## Uninstalling the Chart

To uninstall/delete the `my-release` deployment:
## Verify the Integrity and Origin

```bash
$ helm delete my-release
```
Sysdig Helm Charts are signed so you can verify the integrity and origin of each chart. To verify the chart:

The command removes all the Kubernetes components associated with the chart and deletes the release.

### Verify the integrity and origin
Sysdig Helm Charts are signed so users can verify the integrity and origin of each chart, the steps are as follows:

#### Import the Public Key
### Import the Public Key

```console
$ curl -o "/tmp/sysdig_public.gpg" "https://charts.sysdig.com/public.gpg"
$ gpg --import /tmp/sysdig_public.gpg
```

#### Verify the chart
### Verify the Chart

To check the integrity and the origin of the charts you can now append the `--verify` flag to the `install`, `upgrade` and `pull` helm commands.
To check the integrity and the origin of the charts you can now append the `--verify` flag to the `install`, `upgrade`, and `pull` helm commands.

## Configuration

You can use the Helm chart to update the default Sysdig Stackdriver Bridge configurations by using either of the following:

- Using the key-value pair: `--set sysdig.settings.key = value`
- `values.yaml` file

### Using the Key-Value Pair

Specify each parameter using the `--set key=value[,key=value]` argument to the `helm install` command.

For example:

```bash
$ helm install --name my-release \
--set bridge.forwardURL=FOO,bridge.pollInterval=60s \
sysdiglabs/sysdig-stackdriver-bridge
```

### Using values.yaml

The `values.yaml` file specifies the values for the Sysdig Stackdriver Bridge configuration parameters. You can add the configuration to the `values.yaml` file, then use it in the `helm install` command.

```bash
$ helm install --name my-release -f values.yaml sysdiglabs/sysdig-stackdriver-bridge
```

## Configuration Parameters

The following table lists the configurable parameters of the Sysdig Stackdriver Bridge chart and their default values.

| Parameter | Description | Default |
Expand All @@ -80,31 +100,20 @@ The following table lists the configurable parameters of the Sysdig Stackdriver
| `annotations` | Pod annotations | `{}` |
| `tolerations` | Toleration labels for pod assignment | `[]` |

Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example,

```bash
$ helm install --name my-release \
--set bridge.forwardURL=FOO,bridge.pollInterval=60s \
sysdiglabs/sysdig-stackdriver-bridge
```
## Uninstalling the Chart

Alternatively, a YAML file that specifies the values for the parameters can be provided while installing the chart. For example:
To uninstall/delete the `my-release` deployment:

```bash
$ helm install --name my-release -f values.yaml sysdiglabs/sysdig-stackdriver-bridge
$ helm delete my-release
```

> **Tip**: You can use the default [values.yaml](values.yaml)
The command removes all the Kubernetes components associated with the chart and deletes the release.


## Support

For getting support from the Sysdig team, you should refer to the official [Sysdig Support page](https://sysdig.com/support).
For getting support from the Sysdig team, see [Sysdig Support page](https://sysdig.com/support).

In addition to this, you can browse the documentation for the different
components of the Sysdig Platform:

* [Sysdig Monitor](https://app.sysdigcloud.com)
* [Sysdig Secure](https://secure.sysdig.com)
* [Platform Documentation](https://docs.sysdig.com/en/sysdig-platform.html)
* [Monitor Documentation](https://docs.sysdig.com/en/sysdig-monitor.html)
* [Secure Documentation](https://docs.sysdig.com/en/sysdig-secure.html)
Loading