false |
| features.investigations.event_forwarder.integrations | | [] |
| features.investigations.event_forwarder.transmit_message_types | | [] |
-| features.responding.rapid_response.enabled | | false |
-| features.monitoring.app_checks.enabled | | false |
-| features.monitoring.java_management_extensions.enabled | | false |
-| features.monitoring.prometheus.enabled | | false |
-| features.monitoring.prometheus.prometheus_yaml | The content of the prometheus.yaml file | {} |
-| features.monitoring.statsd.enabled | | false |
+| features.respond.rapid_response.enabled | | false |
+| features.monitor.app_checks.enabled | | false |
+| features.monitor.java_management_extensions.enabled | | false |
+| features.monitor.prometheus.enabled | | false |
+| features.monitor.prometheus.prometheus_yaml | The content of the prometheus.yaml file | {} |
+| features.monitor.statsd.enabled | | false |
| host.driver | The driver to use for the host agent (Accepted Values: kmod, legacy_ebpf, universal_ebpf) | kmod |
| host.additional_settings | Additional settings to be passed to the host shield (overrides the helm generated settings) | {} |
| host.image.registry | The registry where the host shield images are stored | quay.io |
diff --git a/charts/shield/templates/host/_configmap_helpers.tpl b/charts/shield/templates/host/_configmap_helpers.tpl
index 798e7d045..8dab2efc6 100644
--- a/charts/shield/templates/host/_configmap_helpers.tpl
+++ b/charts/shield/templates/host/_configmap_helpers.tpl
@@ -8,8 +8,8 @@
{{- dict "vulnerability_management" (pick . "host_vulnerability_management" "in_use") | toYaml }}
{{- end }}
-{{- define "host.configmap.responding" }}
-{{- dict "responding" (pick . "rapid_response") | toYaml }}
+{{- define "host.configmap.respond" }}
+{{- dict "respond" (pick . "rapid_response") | toYaml }}
{{- end }}
{{- define "host.configmap.detections" }}
@@ -25,8 +25,8 @@
{{- with .Values.features.vulnerability_management }}
{{- $config = merge $config ((include "host.configmap.vm" .) | fromYaml) }}
{{- end }}
-{{- with .Values.features.responding }}
-{{- $config = merge $config ((include "host.configmap.responding" .) | fromYaml) }}
+{{- with .Values.features.respond }}
+{{- $config = merge $config ((include "host.configmap.respond" .) | fromYaml) }}
{{- end }}
{{- with .Values.features.detections }}
{{- $config = merge $config ((include "host.configmap.detections" .) | fromYaml)}}
@@ -42,10 +42,10 @@ true
{{- end }}
{{- define "host.features.monitor_enabled" }}
-{{- if or .Values.features.monitoring.app_checks.enabled
- .Values.features.monitoring.java_management_extensions.enabled
- .Values.features.monitoring.prometheus.enabled
- .Values.features.monitoring.statsd.enabled
+{{- if or .Values.features.monitor.app_checks.enabled
+ .Values.features.monitor.java_management_extensions.enabled
+ .Values.features.monitor.prometheus.enabled
+ .Values.features.monitor.statsd.enabled
(dig "app_checks_enabled" false .Values.host.additional_settings)
(dig "jmx" "enabled" false .Values.host.additional_settings)
(dig "prometheus" "enabled" false .Values.host.additional_settings)
@@ -70,13 +70,13 @@ true
{{/* TODO: Kubernetes metadata */}}
{{- with .Values.features }}
{{- $config := dict
- "app_checks_enabled" .monitoring.app_checks.enabled
+ "app_checks_enabled" .monitor.app_checks.enabled
"audit_tap"
(dict "enabled" .investigations.audit_tap.enabled)
"drift_control"
(dict "enabled" .detections.drift_control.enabled)
"jmx"
- (dict "enabled" .monitoring.java_management_extensions.enabled)
+ (dict "enabled" .monitor.java_management_extensions.enabled)
"live_logs"
(dict "enabled" .investigations.live_logs.enabled)
"local_forwarder"
@@ -86,11 +86,11 @@ true
"network_topology"
(dict "enabled" .investigations.network_security.enabled)
"prometheus"
- (dict "enabled" .monitoring.prometheus.enabled)
+ (dict "enabled" .monitor.prometheus.enabled)
"secure_audit_streams"
(dict "enabled" .investigations.activity_audit.enabled)
"statsd"
- (dict "enabled" .monitoring.statsd.enabled)
+ (dict "enabled" .monitor.statsd.enabled)
"sysdig_capture_enabled" .investigations.captures.enabled }}
{{- $config | toYaml }}
{{- end }}
@@ -113,7 +113,7 @@ true
{{- if (include "common.proxy.enabled" . ) }}
{{- $config := merge $config (dict "http_proxy" (include "host.proxy_config" . | fromYaml)) }}
{{- end }}
-{{- if .Values.features.responding.rapid_response.enabled }}
+{{- if .Values.features.respond.rapid_response.enabled }}
{{- $config = merge $config (dict "rapid_response" (dict "enabled" true)) }}
{{- end }}
{{- $config = merge $config (include "host.parse_features" . | fromYaml) }}
diff --git a/charts/shield/templates/host/configmap.yaml b/charts/shield/templates/host/configmap.yaml
index 251d322ae..a320e3310 100644
--- a/charts/shield/templates/host/configmap.yaml
+++ b/charts/shield/templates/host/configmap.yaml
@@ -15,7 +15,7 @@ data:
integrations:
{{- toYaml .Values.features.investigations.event_forwarder.integrations | nindent 6 }}
{{- end }}
- {{- if .Values.features.monitoring.prometheus.enabled }}
+ {{- if .Values.features.monitor.prometheus.enabled }}
prometheus.yaml: |
- {{- toYaml .Values.features.monitoring.prometheus.prometheus_yaml | nindent 4 }}
+ {{- toYaml .Values.features.monitor.prometheus.prometheus_yaml | nindent 4 }}
{{- end }}
diff --git a/charts/shield/templates/host/daemonset.yaml b/charts/shield/templates/host/daemonset.yaml
index 9a8aa02ba..42e02c213 100644
--- a/charts/shield/templates/host/daemonset.yaml
+++ b/charts/shield/templates/host/daemonset.yaml
@@ -145,7 +145,7 @@ spec:
{{- include "common.proxy.envs" . | nindent 12 }}
{{- end }}
{{- include "common.custom_ca.envs" (merge (dict) . (dict "CACertsPath" "/opt/draios/certificates/")) | nindent 12 }}
- {{- if .Values.features.responding.rapid_response.enabled }}
+ {{- if .Values.features.respond.rapid_response.enabled }}
- name: PASSWORD
valueFrom:
secretKeyRef:
diff --git a/charts/shield/templates/host/secrets.yaml b/charts/shield/templates/host/secrets.yaml
index aa0f67cce..96d7c2f86 100644
--- a/charts/shield/templates/host/secrets.yaml
+++ b/charts/shield/templates/host/secrets.yaml
@@ -1,4 +1,4 @@
-{{- if .Values.features.responding.rapid_response.enabled }}
+{{- if .Values.features.respond.rapid_response.enabled }}
---
apiVersion: v1
kind: Secret
diff --git a/charts/shield/tests/host/configmap-dragent-yaml_test.yaml b/charts/shield/tests/host/configmap-dragent-yaml_test.yaml
index 87c55c01a..febb8ecc6 100644
--- a/charts/shield/tests/host/configmap-dragent-yaml_test.yaml
+++ b/charts/shield/tests/host/configmap-dragent-yaml_test.yaml
@@ -693,7 +693,7 @@ tests:
- it: Enable App Checks
set:
features:
- monitoring:
+ monitor:
app_checks:
enabled: true
asserts:
@@ -731,7 +731,7 @@ tests:
- it: Enable JMX
set:
features:
- monitoring:
+ monitor:
java_management_extensions:
enabled: true
asserts:
@@ -796,7 +796,7 @@ tests:
- it: Enable Prometheus
set:
features:
- monitoring:
+ monitor:
prometheus:
enabled: true
asserts:
@@ -822,7 +822,7 @@ tests:
- it: Enable StatsD
set:
features:
- monitoring:
+ monitor:
statsd:
enabled: true
asserts:
@@ -963,7 +963,7 @@ tests:
- it: Test manual override of feature mode
set:
features:
- monitoring:
+ monitor:
app_checks:
enabled: true
host:
@@ -1006,7 +1006,7 @@ tests:
- it: Test enabling a monitor feature forces agent mode to monitor
set:
features:
- monitoring:
+ monitor:
app_checks:
enabled: true
asserts:
@@ -1110,7 +1110,7 @@ tests:
- it: Check prometheus.yaml key is created when needed
set:
features:
- monitoring:
+ monitor:
prometheus:
enabled: true
asserts:
@@ -1120,7 +1120,7 @@ tests:
- it: Check that expected content is present in prometheus.yaml
set:
features:
- monitoring:
+ monitor:
prometheus:
enabled: true
prometheus_yaml:
@@ -1140,7 +1140,7 @@ tests:
- it: Check prometheus.yaml key is not created when not needed
set:
features:
- monitoring:
+ monitor:
prometheus:
enabled: false
asserts:
diff --git a/charts/shield/tests/host/configmap-host-shield-config_test.yaml b/charts/shield/tests/host/configmap-host-shield-config_test.yaml
index f3412e2d6..8cf3d1c6c 100644
--- a/charts/shield/tests/host/configmap-host-shield-config_test.yaml
+++ b/charts/shield/tests/host/configmap-host-shield-config_test.yaml
@@ -26,7 +26,7 @@ tests:
posture:
host_posture:
enabled: false
- responding:
+ respond:
rapid_response:
enabled: false
vulnerability_management:
@@ -53,7 +53,7 @@ tests:
posture:
host_posture:
enabled: true
- responding:
+ respond:
rapid_response:
enabled: false
vulnerability_management:
@@ -80,7 +80,7 @@ tests:
posture:
host_posture:
enabled: false
- responding:
+ respond:
rapid_response:
enabled: false
vulnerability_management:
@@ -107,7 +107,7 @@ tests:
posture:
host_posture:
enabled: false
- responding:
+ respond:
rapid_response:
enabled: false
vulnerability_management:
@@ -134,7 +134,7 @@ tests:
posture:
host_posture:
enabled: false
- responding:
+ respond:
rapid_response:
enabled: false
vulnerability_management:
@@ -156,7 +156,7 @@ tests:
posture:
host_posture:
enabled: false
- responding:
+ respond:
rapid_response:
enabled: false
vulnerability_management:
@@ -186,7 +186,7 @@ tests:
posture:
host_posture:
enabled: true
- responding:
+ respond:
rapid_response:
enabled: false
vulnerability_management:
@@ -215,7 +215,7 @@ tests:
posture:
host_posture:
enabled: true
- responding:
+ respond:
rapid_response:
enabled: false
vulnerability_management:
@@ -228,7 +228,7 @@ tests:
- it: Enable Rapid Response
set:
features:
- responding:
+ respond:
rapid_response:
enabled: true
asserts:
@@ -242,7 +242,7 @@ tests:
posture:
host_posture:
enabled: false
- responding:
+ respond:
rapid_response:
enabled: true
vulnerability_management:
@@ -269,7 +269,7 @@ tests:
posture:
host_posture:
enabled: false
- responding:
+ respond:
rapid_response:
enabled: false
vulnerability_management:
diff --git a/charts/shield/tests/host/daemonset_test.yaml b/charts/shield/tests/host/daemonset_test.yaml
index baad79dff..d22873742 100644
--- a/charts/shield/tests/host/daemonset_test.yaml
+++ b/charts/shield/tests/host/daemonset_test.yaml
@@ -224,7 +224,7 @@ tests:
- it: Test Rapid Response password secret
set:
features:
- responding:
+ respond:
rapid_response:
enabled: true
host:
diff --git a/charts/shield/tests/host/secrets_test.yaml b/charts/shield/tests/host/secrets_test.yaml
index 48b3ec698..5a74f229f 100644
--- a/charts/shield/tests/host/secrets_test.yaml
+++ b/charts/shield/tests/host/secrets_test.yaml
@@ -10,7 +10,7 @@ tests:
- it: Test Rapid Response secret is created when needed
set:
features:
- responding:
+ respond:
rapid_response:
enabled: true
host:
diff --git a/charts/shield/values.schema.json b/charts/shield/values.schema.json
index 5f8341b32..ae533c8f7 100644
--- a/charts/shield/values.schema.json
+++ b/charts/shield/values.schema.json
@@ -396,7 +396,7 @@
},
"Features": {
"type": "object",
- "additionalProperties": true,
+ "additionalProperties": false,
"properties": {
"admission_control": {
"$ref": "#/$defs/FeatureAdmissionControl"
@@ -416,11 +416,11 @@
"investigations": {
"$ref": "#/$defs/FeatureGroupInvestigations"
},
- "responding": {
- "$ref": "#/$defs/FeatureGroupResponding"
+ "respond": {
+ "$ref": "#/$defs/FeatureGroupRespond"
},
- "monitoring": {
- "$ref": "#/$defs/FeatureGroupMonitoring"
+ "monitor": {
+ "$ref": "#/$defs/FeatureGroupMonitor"
}
}
},
@@ -886,11 +886,11 @@
}
}
},
- "FeatureGroupResponding": {
+ "FeatureGroupRespond": {
"type": "object",
"properties": {
"rapid_response": {
- "$ref": "#/$defs/FeatureGroupResponding/$defs/RapidResponse"
+ "$ref": "#/$defs/FeatureGroupRespond/$defs/RapidResponse"
}
},
"$defs": {
@@ -906,20 +906,20 @@
}
}
},
- "FeatureGroupMonitoring": {
+ "FeatureGroupMonitor": {
"type": "object",
"properties": {
"app_checks": {
- "$ref": "#/$defs/FeatureGroupMonitoring/$defs/AppChecks"
+ "$ref": "#/$defs/FeatureGroupMonitor/$defs/AppChecks"
},
"java_management_extensions": {
- "$ref": "#/$defs/FeatureGroupMonitoring/$defs/JavaManagementExtensions"
+ "$ref": "#/$defs/FeatureGroupMonitor/$defs/JavaManagementExtensions"
},
"prometheus": {
- "$ref": "#/$defs/FeatureGroupMonitoring/$defs/Prometheus"
+ "$ref": "#/$defs/FeatureGroupMonitor/$defs/Prometheus"
},
"statsd": {
- "$ref": "#/$defs/FeatureGroupMonitoring/$defs/Statsd"
+ "$ref": "#/$defs/FeatureGroupMonitor/$defs/Statsd"
}
},
"$defs": {
diff --git a/charts/shield/values.yaml b/charts/shield/values.yaml
index bc7e1a3da..2c0639ab9 100644
--- a/charts/shield/values.yaml
+++ b/charts/shield/values.yaml
@@ -137,10 +137,10 @@ features:
enabled: false
integrations: []
transmit_message_types: []
- responding:
+ respond:
rapid_response:
enabled: false
- monitoring:
+ monitor:
app_checks:
enabled: false
java_management_extensions: