Release 6.12.0 lacework-agent Helm Charts

Author: catz-lw

index.yaml

@@ -14,4 +14,4 @@ maintainers:
 - email: info@lacework.net
   name: lacework-support
 name: lacework-agent
-version: 6.11.0
+version: 6.12.0

lacework-agent-6.12.0.tgz

@@ -42,6 +42,10 @@ spec:
 {{ toYaml .Values.clusterAgent.image.imagePullSecrets | indent 8 }}
 {{- end }}
       terminationGracePeriodSeconds: 20
+{{- if .Values.clusterAgent.hostNetworkAccess }}
+      hostNetwork: true
+      dnsPolicy: ClusterFirstWithHostNet
+{{- end }}
       securityContext:
         runAsNonRoot: true
         runAsUser: 5001

lacework-agent/Chart.yaml

@@ -16,6 +16,9 @@ metadata:
   {{- end }}
 data:
   config.yaml: |
+    {{- if .Values.laceworkConfig.proxyUrl }}
+    proxyurl: {{ .Values.laceworkConfig.proxyUrl}}
+    {{- end }}
     serverurl: {{ .Values.laceworkConfig.serverUrl}}
 {{- if or (kindIs "int64" .Values.clusterAgent.scrapeInitialDelayMins) (kindIs "float64" .Values.clusterAgent.scrapeInitialDelayMins) }}
     initialdelaymins: {{ .Values.clusterAgent.scrapeInitialDelayMins }}

lacework-agent/templates/cluster-agent.yaml

@@ -37,13 +37,17 @@ data:
        {{- end }}
      {{- end }}
      {{- with .Values.laceworkConfig.codeaware }}
-       {{- if or (eq (toString .enable) "true") (eq (toString .enable) "all") }}
+       {{- if or (eq (quote .enable) "true") (eq (quote .enable) "all") }}
         "codeaware": {
           "enable": "all"
         },
-       {{- else if or (eq (toString .enable) "experimental") (eq (toString .enable) "false") }}
+       {{- else if (eq (quote .enable) "experimental") }}
         "codeaware": {
-          "enable": {{ quote .enable }}
+          "enable": "experimental"
+        },
+       {{- else if (eq (quote .enable) "false") }}
+        "codeaware": {
+          "enable": "false"
         },
        {{- end }}
      {{- end }}

lacework-agent/templates/cluster-configmap.yaml

@@ -231,6 +231,17 @@
                         "null"
                     ],
                     "description": "Cluster mode agent's scrape interval in minutes"
+                },
+		"proxyUrl": {
+                    "type": [
+                        "string",
+                        "null"
+                    ],
+		    "description": "Proxy URL for the cluster collector"
+		},
+		"hostNetworkAccess": {
+                    "type": "boolean",
+                    "description": "Enable host network access to the cluster collector pod"
                 }
             },
             "additionalProperties": false

lacework-agent/templates/configmap.yaml

@@ -2,7 +2,7 @@
 image:
   registry: docker.io
   repository: lacework/datacollector
-  tag: 6.11.0
+  tag: 6.12.0
   # imagePullPolicy should be Always to get the latest container
   # http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
   pullPolicy: Always
@@ -33,10 +33,14 @@ clusterAgent:
   scrapeInitialDelayMins:
   # [Optional] Cluster mode agent's scrape interval in minutes.
   scrapeIntervalMins:
+  # [Optional] Route agent traffic through the specified proxy.
+  # https://docs.lacework.net/onboarding/restricted/configure-agent-behavior-in-configjson-file#proxyurl-propert
+  proxyUrl:
+  hostNetworkAccess: false
   image:
     registry: docker.io
     repository: lacework/k8scollector
-    tag: 6.11.0
+    tag: 6.12.0
     # imagePullPolicy should be Always to get the latest container
     # http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
     pullPolicy: Always
@@ -72,7 +76,7 @@ laceworkConfig:
   # [Optional] Enable Active Vulnerability Detection
   # https://docs.lacework.net/onboarding/configure-agent-behavior-in-configjson-file#codeaware-property
   codeaware:
-    enable:
+    enable: false
   # [Optional] Define the endpoint that the agent uses to discover containers
   containerEngineEndpoint:
   # [Optional] Define the runtime that the agent uses to discover containers