Migrate sysdig v1.9.2
parent
ff68c4433c
commit
2f74cdd7a7
|
@ -0,0 +1,20 @@
|
|||
# Sysdig Secure DevOps Platform
|
||||
|
||||
Sysdig enables companies to confidently run cloud-native workloads in production. With the Sysdig Secure DevOps Platform, cloud teams embed security, maximize availability, and validate compliance. The Sysdig platform is open by design, with the scale, performance, and usability enterprises demand. The largest companies rely on Sysdig for cloud-native security and visibility.
|
||||
|
||||
## Embed security
|
||||
* Detect vulnerabilities and misconfigurations with a single workflow
|
||||
* Block threats without impacting performance using K8s controls
|
||||
* Conduct forensics even after the container is gone
|
||||
|
||||
## Maximize availability
|
||||
* Prevent issues by monitoring performance and capacity
|
||||
* Accelerate troubleshooting with a single source of truth
|
||||
* Scale Prometheus monitoring across clusters and clouds
|
||||
|
||||
## Validate compliance
|
||||
* Verify configuration meets CIS best practices
|
||||
* Ensure application compliance with NIST, PCI
|
||||
* Enable audit by correlating Kubernetes activity
|
||||
|
||||
Learn more at [sysdig.com](https://sysdig.com/)
|
|
@ -0,0 +1,104 @@
|
|||
labels:
|
||||
io.rancher.certified: partner
|
||||
io.cattle.role: cluster
|
||||
rancher_min_version: 2.3.0
|
||||
questions:
|
||||
#image configurations
|
||||
- variable: defaultImage
|
||||
default: true
|
||||
description: "Use default Sysdig image or specify a custom one"
|
||||
label: Use Default Sysdig Image
|
||||
type: boolean
|
||||
show_subquestion_if: false
|
||||
group: "Container Images"
|
||||
subquestions:
|
||||
- variable: image.repository
|
||||
default: "ranchercharts/sysdig"
|
||||
description: "Sysdig Image Name"
|
||||
type: string
|
||||
label: Sysdig Image Name
|
||||
- variable: image.tag
|
||||
default: "0.93.0"
|
||||
description: "Sysdig Image Tag"
|
||||
type: string
|
||||
label: Sysdig Image Tag
|
||||
#agent configurations
|
||||
- variable: sysdig.accessKey
|
||||
default: ""
|
||||
description: "You need your Sysdig accessKey before running agents"
|
||||
type: string
|
||||
required: true
|
||||
label: Sysdig accessKey
|
||||
- variable: sysdig.backend
|
||||
default: "Sysdig SaaS"
|
||||
description: "Where is Sysdig backend hosted on"
|
||||
type: enum
|
||||
label: Sysdig Backend
|
||||
group: "Agent Configuration"
|
||||
required: true
|
||||
options:
|
||||
- "sysdig-saas"
|
||||
- "self-hosted"
|
||||
- variable: sysdig.settings.collector
|
||||
required: true
|
||||
default: "collector.sysdigcloud.com"
|
||||
description: "The host of the Sysdig collector the agent sends data to, only set this option if you need the agent to send data to a custom backend"
|
||||
type: string
|
||||
label: Sysdig Collector
|
||||
group: "Agent Configuration"
|
||||
show_if: "sysdig.backed=self-hosted"
|
||||
- variable: sysdig.settings.collector_port
|
||||
required: true
|
||||
default: "6443"
|
||||
description: "The port where the Sysdig collector listens to"
|
||||
type: string
|
||||
label: Sysdig Collector Port
|
||||
group: "Agent Configuration"
|
||||
show_if: "sysdig.backed=self-hosted"
|
||||
- variable: sysdig.settings.ssl
|
||||
required: true
|
||||
default: true
|
||||
description: "Use SSL to connect to the Sysdig collector"
|
||||
type: boolean
|
||||
label: Sysdig Collector SSL
|
||||
group: "Agent Configuration"
|
||||
show_if: "sysdig.backed=self-hosted"
|
||||
- variable: sysdig.settings.ssl_verify_certificate
|
||||
required: true
|
||||
default: true
|
||||
description: "Validate SSL certificate from the Sysdig collector"
|
||||
type: boolean
|
||||
label: Sysdig Collector Verify SSL Certificate
|
||||
group: "Agent Configuration"
|
||||
show_if: "sysdig.backed=self-hosted&&sysdig.settings.ssl=true"
|
||||
- variable: sysdig.settings.tags
|
||||
default: ""
|
||||
description: "Agent tags, separated by commas. For example: 'linux:ubuntu,dept:dev,local:nyc'"
|
||||
type: string
|
||||
label: Agent Tags
|
||||
group: "Agent Configuration"
|
||||
- variable: ebpf.enabled
|
||||
default: false
|
||||
description: "Enable eBPF support for Sysdig agent instead of kernel module"
|
||||
type: boolean
|
||||
label: Enable eBPF
|
||||
group: "Agent Configuration"
|
||||
#proxy configurations
|
||||
- variable: proxy.httpProxy
|
||||
default: ""
|
||||
description: "An http URL to use as a proxy for http requests"
|
||||
type: string
|
||||
label: Proxy for HTTP Requests
|
||||
group: "Proxy Configuration"
|
||||
- variable: proxy.httpsProxy
|
||||
default: ""
|
||||
description: "An http URL to use as a proxy for https requests"
|
||||
type: string
|
||||
label: Proxy for HTTPS Requests
|
||||
group: "Proxy Configuration"
|
||||
- variable: proxy.noProxy
|
||||
default: ""
|
||||
description: "A space-separated list of URLs for which no proxy should be used"
|
||||
type: string
|
||||
label: No Proxy List (separated by a space)
|
||||
group: "Proxy Configuration"
|
|
@ -0,0 +1,2 @@
|
|||
url: https://github.com/sysdiglabs/charts/releases/download/sysdig-1.9.2/sysdig-1.9.2.tgz
|
||||
packageVersion: 00
|
|
@ -0,0 +1,11 @@
|
|||
diff -x '*.tgz' -x '*.lock' -uNr packages/sysdig/charts-original/Chart.yaml packages/sysdig/charts/Chart.yaml
|
||||
--- packages/sysdig/charts-original/Chart.yaml
|
||||
+++ packages/sysdig/charts/Chart.yaml
|
||||
@@ -26,3 +26,7 @@
|
||||
- https://app.sysdigcloud.com/#/settings/user
|
||||
- https://github.com/draios/sysdig
|
||||
version: 1.9.2
|
||||
+annotations:
|
||||
+ catalog.cattle.io/certified: partner
|
||||
+ catalog.cattle.io/namespace: sysdig
|
||||
+ catalog.cattle.io/release-name: sysdig
|
Loading…
Reference in New Issue