v35 (#182)

* add kill in the middle systests

Signed-off-by: Bezalel Brandwine <[email protected]>

* revert ACT conditions so GHactions will run on GKE

Signed-off-by: Bezalel Brandwine <[email protected]>

* trigger systests upon changes

Signed-off-by: Bezalel Brandwine <[email protected]>

* try to fix non exists ACT envar

Signed-off-by: Bezalel Brandwine <[email protected]>

* try to set proper K8S_TYPE envar

Signed-off-by: Bezalel Brandwine <[email protected]>

* update actions vers

Signed-off-by: Bezalel Brandwine <[email protected]>

* fix system tests - worked locally.
deletion of pod not working since we don't delete the per-pod AP

Signed-off-by: Bezalel Brandwine <[email protected]>

* add load_10k_alerts_no_memory_leak

Signed-off-by: Bezalel Brandwine <[email protected]>

* exit code as return

Signed-off-by: Bezalel Brandwine <[email protected]>

* fix promql

Signed-off-by: Bezalel Brandwine <[email protected]>

* test is fail with leak

Signed-off-by: Bezalel Brandwine <[email protected]>

* try to fix systests WF again

Signed-off-by: Bezalel Brandwine <[email protected]>

* try to print ACT

Signed-off-by: Bezalel Brandwine <[email protected]>

* save PNG of mem

Signed-off-by: Bezalel Brandwine <[email protected]>

* add plotting for memory to all tests

Signed-off-by: Bezalel Brandwine <[email protected]>

* fix missing argument

Signed-off-by: Bezalel Brandwine <[email protected]>

* add app profile creation

Signed-off-by: Bezalel Brandwine <[email protected]>

* few cosmetics

Signed-off-by: Bezalel Brandwine <[email protected]>

* convert to int for compare

Signed-off-by: Bezalel Brandwine <[email protected]>

* leave as str

Signed-off-by: Bezalel Brandwine <[email protected]>

* clear plt context after saving

Signed-off-by: Bezalel Brandwine <[email protected]>

* add gcloud auth login

Signed-off-by: Bezalel Brandwine <[email protected]>

* revert force login to GKE

Signed-off-by: Bezalel Brandwine <[email protected]>

* Exclude K8s system namespaces from
default-rule-binding.yaml

Signed-off-by: Bezalel Brandwine <[email protected]>

* revert auto-merge bads

Signed-off-by: Bezalel Brandwine <[email protected]>

* fix redundant "-"

Signed-off-by: Bezalel Brandwine <[email protected]>

* missing "

Signed-off-by: Bezalel Brandwine <[email protected]>

* add debug to Helm install

Signed-off-by: Bezalel Brandwine <[email protected]>

* Validate Helm template as CI gate

Signed-off-by: Bezalel Brandwine <[email protected]>

* Add isNamespaced flag to values.yaml and update related templates and code

Signed-off-by: Bezalel Brandwine <[email protected]>

* Fix storeNamespace assignment in NewRuleBindingK8sStore()

This commit fixes an issue where the storeNamespace was not being properly assigned in the NewRuleBindingK8sStore() function. The code now checks if the storeNamespace is empty and assigns it the value of metav1.NamespaceNone. This ensures that the storeNamespace is correctly set.

Signed-off-by: Bezalel Brandwine <[email protected]>

* Update system test workflow to use namespaced tests

Signed-off-by: Bezalel Brandwine <[email protected]>

* try to use sub charts

Signed-off-by: Bezalel Brandwine <[email protected]>

* fix crds

Signed-off-by: Bezalel Brandwine <[email protected]>

* Refactor ruleTags handling and update CRD schema

Signed-off-by: Bezalel Brandwine <[email protected]>

* Fix md_gen failure and add exit status checks

Signed-off-by: Bezalel Brandwine <[email protected]>

* add release helm chart wf

Signed-off-by: Bezalel Brandwine <[email protected]>

* Update charts_dir in release-helm-chart.yaml

Signed-off-by: Bezalel Brandwine <[email protected]>

* Update chart name in release workflow

Signed-off-by: Bezalel Brandwine <[email protected]>

* Update Helm chart version and tag to v0.0.32

Signed-off-by: Bezalel Brandwine <[email protected]>

* Add cacheLock for thread safety

Signed-off-by: Bezalel Brandwine <[email protected]>

* Update version and tag in Chart.yaml and values.yaml

Signed-off-by: Bezalel Brandwine <[email protected]>

---------

Signed-off-by: Bezalel Brandwine <[email protected]>

chart/kubecop/Chart.yaml

@@ -4,9 +4,9 @@ description: A Helm chart for Kubernetes Runtime Security detection system KubeC
 
 type: application
 
-version: 0.0.34
+version: 0.0.35
 
-appVersion: "0.0.34"
+appVersion: "0.0.35"
 
 
 dependencies:

chart/kubecop/values.yaml

@@ -5,7 +5,7 @@
 image:
   repository: quay.io/armosec/kubecop
   pullPolicy: Always
-  tag: "v0.0.34"
+  tag: "v0.0.35"
 
 imagePullSecrets: []
 nameOverride: ""