diff --git a/charts/armo-components/Chart.yaml b/charts/armo-components/Chart.yaml index 71470c9..2ed2195 100644 --- a/charts/armo-components/Chart.yaml +++ b/charts/armo-components/Chart.yaml @@ -8,13 +8,13 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 1.7.14 +version: 1.7.15 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to # follow Semantic Versioning. They should reflect the version the application is using. # It is recommended to use it with quotes. -appVersion: "v1.7.14" +appVersion: "v1.7.15" maintainers: - name: Ben Hirschberg diff --git a/charts/armo-components/templates/armo-collector-deployment.yaml b/charts/armo-components/templates/armo-collector-statefulset.yaml similarity index 93% rename from charts/armo-components/templates/armo-collector-deployment.yaml rename to charts/armo-components/templates/armo-collector-statefulset.yaml index 43f2774..e9fe698 100644 --- a/charts/armo-components/templates/armo-collector-deployment.yaml +++ b/charts/armo-components/templates/armo-collector-statefulset.yaml @@ -2,7 +2,9 @@ {{ template "account_guid" . }} {{ template "cluster_name" . }} apiVersion: apps/v1 -kind: Deployment +# statefulset is needed in order to avoid to pods reporting from the same cluster in parallel. +# parallel reporting will cause Kubescape SaaS to miss identify the cluster liveness status +kind: StatefulSet metadata: name: {{ .Values.armoCollector.name }} namespace: {{ .Values.armoNameSpace }} @@ -10,6 +12,7 @@ metadata: app: {{ .Values.armoCollector.name }} tier: {{ .Values.global.namespaceTier}} spec: + serviceName: "" replicas: {{ .Values.armoCollector.replicaCount }} selector: matchLabels: diff --git a/charts/armo-components/templates/armo-kubescape-deployment.yaml b/charts/armo-components/templates/armo-kubescape-deployment.yaml index 17b2a16..626d831 100644 --- a/charts/armo-components/templates/armo-kubescape-deployment.yaml +++ b/charts/armo-components/templates/armo-kubescape-deployment.yaml @@ -11,6 +11,12 @@ metadata: helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} spec: replicas: {{ .Values.armoKubescape.replicaCount }} + revisionHistoryLimit: 2 + strategy: + rollingUpdate: + maxSurge: 0% + maxUnavailable: 100% + type: RollingUpdate selector: matchLabels: app.kubernetes.io/name: {{ .Values.armoKubescape.name }} diff --git a/charts/armo-components/templates/armo-notification-service-deployment.yaml b/charts/armo-components/templates/armo-notification-service-deployment.yaml index d75d8d6..d07a238 100644 --- a/charts/armo-components/templates/armo-notification-service-deployment.yaml +++ b/charts/armo-components/templates/armo-notification-service-deployment.yaml @@ -10,6 +10,12 @@ metadata: helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} spec: replicas: {{ .Values.armoNotificationService.replicaCount }} + revisionHistoryLimit: 2 + strategy: + rollingUpdate: + maxSurge: 0% + maxUnavailable: 100% + type: RollingUpdate selector: matchLabels: app.kubernetes.io/name: {{ .Values.armoNotificationService.name }} diff --git a/charts/armo-components/templates/armo-vuln-scanner-deployment.yaml b/charts/armo-components/templates/armo-vuln-scanner-deployment.yaml index 87e2c61..4ce82a5 100644 --- a/charts/armo-components/templates/armo-vuln-scanner-deployment.yaml +++ b/charts/armo-components/templates/armo-vuln-scanner-deployment.yaml @@ -11,6 +11,12 @@ metadata: tier: {{ .Values.global.namespaceTier}} spec: replicas: {{ .Values.armoVulnScanner.replicaCount }} + revisionHistoryLimit: 2 + strategy: + rollingUpdate: + maxSurge: 0% + maxUnavailable: 100% + type: RollingUpdate selector: matchLabels: app.kubernetes.io/name: {{ .Values.armoVulnScanner.name }} diff --git a/charts/armo-components/templates/armo-websocket-deployment.yaml b/charts/armo-components/templates/armo-websocket-deployment.yaml index ebc939b..cda2b96 100644 --- a/charts/armo-components/templates/armo-websocket-deployment.yaml +++ b/charts/armo-components/templates/armo-websocket-deployment.yaml @@ -9,6 +9,12 @@ metadata: tier: {{ .Values.global.namespaceTier}} spec: replicas: {{ .Values.armoWebsocket.replicaCount }} + revisionHistoryLimit: 2 + strategy: + rollingUpdate: + maxSurge: 0% + maxUnavailable: 100% + type: RollingUpdate selector: matchLabels: app.kubernetes.io/name: {{ .Values.armoWebsocket.name }} diff --git a/charts/armo-components/values.yaml b/charts/armo-components/values.yaml index 8a1d0ba..20c30bc 100644 --- a/charts/armo-components/values.yaml +++ b/charts/armo-components/values.yaml @@ -217,7 +217,7 @@ armoWebsocket: image: # -- source code: https://github.com/armosec/k8s-ca-websocket (private repo) repository: quay.io/armosec/action-trigger - tag: v0.0.37 + tag: v0.0.39 pullPolicy: Always service: