diff --git a/stable/sysdig/CHANGELOG.md b/stable/sysdig/CHANGELOG.md index cc7e229190dd..b5facfc69fcc 100644 --- a/stable/sysdig/CHANGELOG.md +++ b/stable/sysdig/CHANGELOG.md @@ -3,6 +3,13 @@ This file documents all notable changes to Sysdig Helm Chart. The release numbering uses [semantic versioning](http://semver.org). +## v1.7.6 + +### Minor changes + +* Use rbac.authorization.k8s.io/v1 instead of the beta1 API. +* Fix security key duplication when enabling secure and auditLog. + ## v1.7.5 ### Minor changes diff --git a/stable/sysdig/Chart.yaml b/stable/sysdig/Chart.yaml index 2b4298f89ceb..7505228d56a3 100755 --- a/stable/sysdig/Chart.yaml +++ b/stable/sysdig/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v1 name: sysdig -version: 1.7.5 +version: 1.7.6 appVersion: 9.7.0 description: Sysdig Monitor and Secure agent keywords: diff --git a/stable/sysdig/templates/clusterrole.yaml b/stable/sysdig/templates/clusterrole.yaml index a7e794b06fb3..61339111d075 100644 --- a/stable/sysdig/templates/clusterrole.yaml +++ b/stable/sysdig/templates/clusterrole.yaml @@ -1,6 +1,6 @@ {{- if .Values.rbac.create }} kind: ClusterRole -apiVersion: rbac.authorization.k8s.io/v1beta1 +apiVersion: rbac.authorization.k8s.io/v1 metadata: name: {{ template "sysdig.fullname" .}} labels: diff --git a/stable/sysdig/templates/clusterrolebinding.yaml b/stable/sysdig/templates/clusterrolebinding.yaml index ce5da528377b..8498df76fb43 100644 --- a/stable/sysdig/templates/clusterrolebinding.yaml +++ b/stable/sysdig/templates/clusterrolebinding.yaml @@ -1,6 +1,6 @@ {{- if .Values.rbac.create }} kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1beta1 +apiVersion: rbac.authorization.k8s.io/v1 metadata: name: {{ template "sysdig.fullname" .}} labels: diff --git a/stable/sysdig/templates/configmap.yaml b/stable/sysdig/templates/configmap.yaml index 054733feadd0..7ad6bb58497c 100644 --- a/stable/sysdig/templates/configmap.yaml +++ b/stable/sysdig/templates/configmap.yaml @@ -10,18 +10,19 @@ metadata: data: dragent.yaml: | new_k8s: true -{{- if .Values.secure.enabled }} +{{- if or .Values.secure.enabled .Values.auditLog.enabled }} security: +{{- if .Values.auditLog.enabled }} + k8s_audit_server_url: {{ .Values.auditLog.auditServerUrl }} + k8s_audit_server_port: {{ .Values.auditLog.auditServerPort }} +{{- end }} +{{- if .Values.secure.enabled }} enabled: true commandlines_capture: enabled: true memdump: enabled: true {{- end }} -{{- if .Values.auditLog.enabled }} - security: - k8s_audit_server_url: {{ .Values.auditLog.auditServerUrl }} - k8s_audit_server_port: {{ .Values.auditLog.auditServerPort }} {{- end }} {{- if .Values.sysdig.settings }} {{ toYaml .Values.sysdig.settings | indent 4 }}