Merge pull request #457 from kubescape/seccomp

Seccomp
kubescape · Jun 24, 2024 · 4b79c0b · 4b79c0b
2 parents ec55e09 + c88e163
commit 4b79c0b
Show file tree

Hide file tree

Showing 7 changed files with 91 additions and 82 deletions.
diff --git a/charts/kubescape-operator/Chart.yaml b/charts/kubescape-operator/Chart.yaml
@@ -9,14 +9,14 @@ type: application
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
 
-version: 1.18.17
+version: 1.18.18
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
 
-appVersion: 1.18.17
+appVersion: 1.18.18
 
 maintainers:
 - name: Ben Hirschberg

diff --git a/charts/kubescape-operator/templates/node-agent/clusterrole.yaml b/charts/kubescape-operator/templates/node-agent/clusterrole.yaml
@@ -20,7 +20,7 @@ rules:
   resources: ["deployments", "daemonsets", "statefulsets", "replicasets"]
   verbs: ["get", "watch", "list"]
 - apiGroups: ["spdx.softwarecomposition.kubescape.io"]
-  resources: ["sbomsyfts"]
+  resources: ["sbomsyfts", "seccompprofiles"]
   verbs: ["get", "watch", "list"]
 - apiGroups: ["spdx.softwarecomposition.kubescape.io"]
   resources: ["applicationactivities", "applicationprofiles", "networkneighborses", "networkneighborhoods", "sbomsyftfiltereds"]

diff --git a/charts/kubescape-operator/templates/node-agent/configmap.yaml b/charts/kubescape-operator/templates/node-agent/configmap.yaml
@@ -25,6 +25,7 @@ data:
         "networkServiceEnabled": {{ eq .Values.capabilities.networkPolicyService "enable" }},
         "malwareDetectionEnabled": {{ eq .Values.capabilities.malwareDetection "enable" }},
         "nodeProfileServiceEnabled": {{ eq .Values.capabilities.nodeProfileService "enable" }},
+        "seccompServiceEnabled": {{ eq .Values.capabilities.seccompProfileService "enable" }},
         "initialDelay": "{{ .Values.nodeAgent.config.learningPeriod }}",
         "updateDataPeriod": "{{ .Values.nodeAgent.config.updatePeriod }}",
         "nodeProfileInterval": "{{ .Values.nodeAgent.config.nodeProfileInterval }}",

diff --git a/charts/kubescape-operator/templates/node-agent/daemonset.yaml b/charts/kubescape-operator/templates/node-agent/daemonset.yaml
@@ -118,7 +118,7 @@ spec:
             httpGet:
               path: /livez
               port: 7888
-            initialDelaySeconds: 3
+            initialDelaySeconds: 60
             periodSeconds: 3
           readinessProbe:
             httpGet:

diff --git a/charts/kubescape-operator/tests/__snapshot__/snapshot_test.yaml.snap b/charts/kubescape-operator/tests/__snapshot__/snapshot_test.yaml.snap
diff --git a/charts/kubescape-operator/tests/snapshot_test.yaml b/charts/kubescape-operator/tests/snapshot_test.yaml
@@ -21,6 +21,7 @@ tests:
         runtimeDetection: enable
         malwareDetection: enable
         nodeProfileService: enable
+        seccompProfileService: enable
         autoUpgrading: enable
         prometheusExporter: enable
       server: api.armosec.io

diff --git a/charts/kubescape-operator/values.yaml b/charts/kubescape-operator/values.yaml
@@ -81,6 +81,7 @@ capabilities:
   runtimeDetection: disable
   malwareDetection: disable
   nodeProfileService: disable
+  seccompProfileService: enable
 
   # ====== Other capabilities ======
   #
@@ -477,7 +478,7 @@ nodeAgent:
   image:
     # -- source code: https://github.com/kubescape/node-agent
     repository: quay.io/kubescape/node-agent
-    tag: v0.2.85
+    tag: v0.2.87
     pullPolicy: IfNotPresent
 
   config:
@@ -752,7 +753,7 @@ prometheusExporter:
   name: "prometheus-exporter"
   image:
     repository: quay.io/kubescape/prometheus-exporter
-    tag: v0.0.7
+    tag: v0.0.135
     pullPolicy: IfNotPresent
 
   resources: