From afb2447edab83c5be72596c77c54594132326b6e Mon Sep 17 00:00:00 2001 From: Bezbran Date: Wed, 21 Feb 2024 14:07:42 +0200 Subject: [PATCH] v35 (#182) * add kill in the middle systests Signed-off-by: Bezalel Brandwine * revert ACT conditions so GHactions will run on GKE Signed-off-by: Bezalel Brandwine * trigger systests upon changes Signed-off-by: Bezalel Brandwine * try to fix non exists ACT envar Signed-off-by: Bezalel Brandwine * try to set proper K8S_TYPE envar Signed-off-by: Bezalel Brandwine * update actions vers Signed-off-by: Bezalel Brandwine * fix system tests - worked locally. deletion of pod not working since we don't delete the per-pod AP Signed-off-by: Bezalel Brandwine * add load_10k_alerts_no_memory_leak Signed-off-by: Bezalel Brandwine * exit code as return Signed-off-by: Bezalel Brandwine * fix promql Signed-off-by: Bezalel Brandwine * test is fail with leak Signed-off-by: Bezalel Brandwine * try to fix systests WF again Signed-off-by: Bezalel Brandwine * try to print ACT Signed-off-by: Bezalel Brandwine * save PNG of mem Signed-off-by: Bezalel Brandwine * add plotting for memory to all tests Signed-off-by: Bezalel Brandwine * fix missing argument Signed-off-by: Bezalel Brandwine * add app profile creation Signed-off-by: Bezalel Brandwine * few cosmetics Signed-off-by: Bezalel Brandwine * convert to int for compare Signed-off-by: Bezalel Brandwine * leave as str Signed-off-by: Bezalel Brandwine * clear plt context after saving Signed-off-by: Bezalel Brandwine * add gcloud auth login Signed-off-by: Bezalel Brandwine * revert force login to GKE Signed-off-by: Bezalel Brandwine * Exclude K8s system namespaces from default-rule-binding.yaml Signed-off-by: Bezalel Brandwine * revert auto-merge bads Signed-off-by: Bezalel Brandwine * fix redundant "-" Signed-off-by: Bezalel Brandwine * missing " Signed-off-by: Bezalel Brandwine * add debug to Helm install Signed-off-by: Bezalel Brandwine * Validate Helm template as CI gate Signed-off-by: Bezalel Brandwine * Add isNamespaced flag to values.yaml and update related templates and code Signed-off-by: Bezalel Brandwine * Fix storeNamespace assignment in NewRuleBindingK8sStore() This commit fixes an issue where the storeNamespace was not being properly assigned in the NewRuleBindingK8sStore() function. The code now checks if the storeNamespace is empty and assigns it the value of metav1.NamespaceNone. This ensures that the storeNamespace is correctly set. Signed-off-by: Bezalel Brandwine * Update system test workflow to use namespaced tests Signed-off-by: Bezalel Brandwine * try to use sub charts Signed-off-by: Bezalel Brandwine * fix crds Signed-off-by: Bezalel Brandwine * Refactor ruleTags handling and update CRD schema Signed-off-by: Bezalel Brandwine * Fix md_gen failure and add exit status checks Signed-off-by: Bezalel Brandwine * add release helm chart wf Signed-off-by: Bezalel Brandwine * Update charts_dir in release-helm-chart.yaml Signed-off-by: Bezalel Brandwine * Update chart name in release workflow Signed-off-by: Bezalel Brandwine * Update Helm chart version and tag to v0.0.32 Signed-off-by: Bezalel Brandwine * Add cacheLock for thread safety Signed-off-by: Bezalel Brandwine * Update version and tag in Chart.yaml and values.yaml Signed-off-by: Bezalel Brandwine --------- Signed-off-by: Bezalel Brandwine --- chart/kubecop/Chart.yaml | 4 ++-- chart/kubecop/values.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/chart/kubecop/Chart.yaml b/chart/kubecop/Chart.yaml index 1a11503..8617861 100644 --- a/chart/kubecop/Chart.yaml +++ b/chart/kubecop/Chart.yaml @@ -4,9 +4,9 @@ description: A Helm chart for Kubernetes Runtime Security detection system KubeC type: application -version: 0.0.34 +version: 0.0.35 -appVersion: "0.0.34" +appVersion: "0.0.35" dependencies: diff --git a/chart/kubecop/values.yaml b/chart/kubecop/values.yaml index 43cb19b..cb34143 100644 --- a/chart/kubecop/values.yaml +++ b/chart/kubecop/values.yaml @@ -5,7 +5,7 @@ image: repository: quay.io/armosec/kubecop pullPolicy: Always - tag: "v0.0.34" + tag: "v0.0.35" imagePullSecrets: [] nameOverride: ""