Release 5.5.0 lacework-agent Helm Charts (#56)

Co-authored-by: Matti Vanninen <matti@Mattis-MBP.lan>
lacework · Apr 14, 2022 · 6629f05 · 6629f05
1 parent 69c11eb
commit 6629f05
Show file tree

Hide file tree

Showing 9 changed files with 1,508 additions and 69 deletions.
diff --git a/index.yaml b/index.yaml
@@ -3,7 +3,7 @@ entries:
   admission-controller:
   - apiVersion: v2
     appVersion: 0.0.1
-    created: "2022-04-13T09:40:09.047209-07:00"
+    created: "2022-04-14T17:54:46.156448-04:00"
     dependencies:
     - condition: proxy-scanner.enabled
       name: proxy-scanner
@@ -25,7 +25,7 @@ entries:
     version: 0.1.8
   - apiVersion: v2
     appVersion: 0.0.1
-    created: "2022-04-05T14:11:49.063559-07:00"
+    created: "2022-04-14T17:54:46.154485-04:00"
     dependencies:
     - condition: proxy-scanner.enabled
       name: proxy-scanner
@@ -47,7 +47,7 @@ entries:
     version: 0.1.7
   - apiVersion: v2
     appVersion: 0.0.1
-    created: "2022-02-15T16:36:55.02706-08:00"
+    created: "2022-04-14T17:54:46.15205-04:00"
     dependencies:
     - condition: proxy-scanner.enabled
       name: proxy-scanner
@@ -69,14 +69,14 @@ entries:
     version: 0.1.6
   - apiVersion: v2
     appVersion: 0.0.1
-    created: "2022-02-07T21:24:43.305938-08:00"
+    created: "2022-04-14T17:54:46.150053-04:00"
     dependencies:
     - condition: proxy-scanner.enabled
       name: proxy-scanner
       repository: https://lacework.github.io/helm-charts
-      version: 0.2.6
+      version: 0.2.8
     description: Lacework admission controller using Lacework proxy scanner
-    digest: f7c3cd3df4aa1e6067a9a0954f7996e4528983bd6b932bea3cb8e65122174765
+    digest: 50285571bd9ab3a679bec1098a74ba8b5adc680c371b09caaf773fbc291194a7
     keywords:
     - admission-controller
     - runtime-security
@@ -91,7 +91,7 @@ entries:
     version: 0.1.5
   - apiVersion: v2
     appVersion: 0.0.1
-    created: "2022-01-10T10:48:40.252833-08:00"
+    created: "2022-04-14T17:54:46.146361-04:00"
     dependencies:
     - condition: proxy-scanner.enabled
       name: proxy-scanner
@@ -113,7 +113,7 @@ entries:
     version: 0.1.4
   - apiVersion: v2
     appVersion: 0.0.1
-    created: "2021-12-09T13:17:56.15925-06:00"
+    created: "2022-04-14T17:54:46.144133-04:00"
     dependencies:
     - condition: proxy-scanner.enabled
       name: proxy-scanner
@@ -135,7 +135,7 @@ entries:
     version: 0.1.3
   - apiVersion: v2
     appVersion: 0.0.1
-    created: "2021-12-07T15:49:46.489022-06:00"
+    created: "2022-04-14T17:54:46.142452-04:00"
     dependencies:
     - condition: proxy-scanner.enabled
       name: proxy-scanner
@@ -157,7 +157,7 @@ entries:
     version: 0.1.2
   - apiVersion: v2
     appVersion: 0.0.1
-    created: "2021-11-16T22:11:01.485988-08:00"
+    created: "2022-04-14T17:54:46.140701-04:00"
     dependencies:
     - condition: proxy-scanner.enabled
       name: proxy-scanner
@@ -179,7 +179,7 @@ entries:
     version: 0.1.1
   - apiVersion: v2
     appVersion: 0.0.1
-    created: "2021-10-19T13:26:13.082176-07:00"
+    created: "2022-04-14T17:54:46.138911-04:00"
     description: Lacework admission controller using Lacework proxy scanner
     digest: d6d2a6042b051b02ee6eac547b528cb56c5d2ce772f79f962bfb01f41c8ccccd
     keywords:
@@ -195,11 +195,32 @@ entries:
     - admission-controller-0.1.0.tgz
     version: 0.1.0
   lacework-agent:
+  - apiVersion: v2
+    appVersion: "1.0"
+    created: "2022-04-14T17:54:46.165585-04:00"
+    description: Lacework Agent
+    digest: d11a79d7fcecc33e24cee3a4f5197ed2ba5c3ce109c8441b47afa966096fcf16
+    home: https://www.lacework.com
+    icon: https://www.lacework.com/wp-content/uploads/2019/07/Lacework_Logo_color_2019.svg
+    keywords:
+    - monitoring
+    - security
+    - run-time
+    - metric
+    - troubleshooting
+    kubeVersion: '> 1.9.0'
+    maintainers:
+    - email: info@lacework.net
+      name: lacework-support
+    name: lacework-agent
+    urls:
+    - lacework-agent-5.5.0.tgz
+    version: 5.5.0
   - apiVersion: v1
     appVersion: "1.0"
-    created: "2022-04-13T14:33:35.822277914-07:00"
+    created: "2022-04-14T17:54:46.163616-04:00"
     description: Lacework Agent
-    digest: 7dc078885fb3163ef07fcd87b94cb2e932b364960adf2f9f6051d10b65865192
+    digest: 92b924cd23251e515c48affbbb11c9fe24b358feb05797f10bb52821af680c25
     home: https://www.lacework.com
     icon: https://www.lacework.com/wp-content/uploads/2019/07/Lacework_Logo_color_2019.svg
     keywords:
@@ -217,7 +238,7 @@ entries:
     version: 5.4.2
   - apiVersion: v1
     appVersion: "1.0"
-    created: "2022-04-12T05:06:56.411476668Z"
+    created: "2022-04-14T17:54:46.161568-04:00"
     description: Lacework Agent
     digest: 2cfd347bac431971f6a56854db8aba5ce3746bc9d77e48a07142906713aeb885
     home: https://www.lacework.com
@@ -237,7 +258,7 @@ entries:
     version: 5.4.1
   - apiVersion: v1
     appVersion: "1.0"
-    created: "2022-02-05T00:29:39.960326167Z"
+    created: "2022-04-14T17:54:46.159832-04:00"
     description: Lacework Agent
     digest: 9fd57c70abb267d1e57b3625f04f4623ae6629341a6c2e92d97c2464b9ad8515
     home: https://www.lacework.com
@@ -257,7 +278,7 @@ entries:
     version: 5.2.0
   - apiVersion: v1
     appVersion: "1.0"
-    created: "2022-01-19T16:04:11.685281973-08:00"
+    created: "2022-04-14T17:54:46.159117-04:00"
     description: Lacework Agent
     digest: 40199f36400a1d1a3e434a512fc79cc82866183ac7497423ec15c5e59dfc06c8
     home: https://www.lacework.com
@@ -277,7 +298,7 @@ entries:
     version: 5.1.0
   - apiVersion: v1
     appVersion: "1.0"
-    created: "2021-11-12T15:07:24.796458378-08:00"
+    created: "2022-04-14T17:54:46.158343-04:00"
     description: Lacework Agent
     digest: e6c0778f858ed427cf0bc48a509b22480473d9d0b1a38fcc22ab532a74c1118c
     home: https://www.lacework.com
@@ -297,7 +318,7 @@ entries:
     version: 5.0.0
   - apiVersion: v1
     appVersion: "1.0"
-    created: "2021-10-06T20:28:07.439483296-07:00"
+    created: "2022-04-14T17:54:46.157439-04:00"
     description: Lacework Agent
     digest: 316df313975abcb5ab65846cc749c194c5169f09636f2ffbc26a71f0ae9ef29b
     home: https://www.lacework.com
@@ -318,7 +339,7 @@ entries:
   proxy-scanner:
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2022-04-12T14:55:30.5077-07:00"
+    created: "2022-04-14T17:54:46.169454-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: dff07f929e41b1a21cf2f66eab38b1d64af3edcf8bd4ca170ff2ec63caeb06ad
     name: proxy-scanner
@@ -328,7 +349,7 @@ entries:
     version: 0.2.14
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2022-04-05T13:48:06.003835-07:00"
+    created: "2022-04-14T17:54:46.168229-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: 69ce605e16c01f1ad58c1bcd3da4a96368b838ad502257290479f6b108bac65a
     name: proxy-scanner
@@ -338,7 +359,7 @@ entries:
     version: 0.2.13
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2022-03-29T23:14:07.135953-07:00"
+    created: "2022-04-14T17:54:46.167591-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: eeca51b1ba0b699863eab83fb1d4642ba6851c32a3cb02358118390521dacb13
     name: proxy-scanner
@@ -348,7 +369,7 @@ entries:
     version: 0.2.12
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2022-03-01T19:42:44.20446-08:00"
+    created: "2022-04-14T17:54:46.166991-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: 394da8b5dc2a18b416fc423a5b13e49d9920c1f89be5976d9fe6e9d94c6883b2
     name: proxy-scanner
@@ -358,7 +379,7 @@ entries:
     version: 0.2.10
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2022-02-15T16:30:46.259751-08:00"
+    created: "2022-04-14T17:54:46.175152-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: 43324444314509c32b76ce2c213e48a90c54d16d3146d69141b18e42a9383b46
     name: proxy-scanner
@@ -368,7 +389,7 @@ entries:
     version: 0.2.9
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2022-02-07T21:16:01.389703-08:00"
+    created: "2022-04-14T17:54:46.174314-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: b2735c7642058f3d630f69f319c6957c5a406b6d0f720a83caa770735ddf9b17
     name: proxy-scanner
@@ -378,7 +399,7 @@ entries:
     version: 0.2.8
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2022-02-03T20:26:31.206608-08:00"
+    created: "2022-04-14T17:54:46.173589-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: 2265208dc08b5b502fa1d9defda5ca87236f3e9a14c33ab8a47a36b06e21bf2d
     name: proxy-scanner
@@ -388,7 +409,7 @@ entries:
     version: 0.2.7
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2022-01-18T17:01:57.384969-08:00"
+    created: "2022-04-14T17:54:46.17287-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: 54201342fd7677c391d536298b32263fc6736463717a41f1636f54dfb8c719d2
     name: proxy-scanner
@@ -398,7 +419,7 @@ entries:
     version: 0.2.6
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2022-01-07T11:12:02.00621-08:00"
+    created: "2022-04-14T17:54:46.172178-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: a2c75b0233b886373017762b45af3e7c71bb50b1c80e4b2f8d7945da2177df22
     name: proxy-scanner
@@ -408,7 +429,7 @@ entries:
     version: 0.2.5
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2021-12-22T18:14:12.083242-08:00"
+    created: "2022-04-14T17:54:46.171483-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: 7fe22bae1babc9de329c70220eb2668b56a9b6d93d1687c95dc396250f23eeb5
     name: proxy-scanner
@@ -418,7 +439,7 @@ entries:
     version: 0.2.4
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2021-11-16T19:49:36.102667-08:00"
+    created: "2022-04-14T17:54:46.17056-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: adc5ba1623b878b70329e67cf97263f7ff353befdd2d47efe8f2e75808d6ad76
     name: proxy-scanner
@@ -428,12 +449,12 @@ entries:
     version: 0.2.2
   - apiVersion: v2
     appVersion: "1.0"
-    created: "2021-10-19T13:26:13.08344-07:00"
+    created: "2022-04-14T17:54:46.166309-04:00"
     description: A Helm chart for Lacework Proxy Scanner
     digest: fb0bbde3066707aca7f32735c9890e5cf2b24181c9357467124b9cb4fa209f08
     name: proxy-scanner
     type: application
     urls:
     - proxy-scanner-0.2.1.tgz
     version: 0.2.1
-generated: "2022-04-13T14:33:35.809130426-07:00"
+generated: "2022-04-14T17:54:46.137183-04:00"
diff --git a/lacework-agent-5.5.0.tgz b/lacework-agent-5.5.0.tgz
diff --git a/lacework-agent/Chart.yaml b/lacework-agent/Chart.yaml
@@ -1,4 +1,4 @@
-apiVersion: v1
+apiVersion: v2
 appVersion: "1.0"
 description: Lacework Agent
 home: https://www.lacework.com
@@ -9,8 +9,9 @@ keywords:
 - run-time
 - metric
 - troubleshooting
+kubeVersion: '> 1.9.0'
 maintainers:
 - email: info@lacework.net
   name: lacework-support
 name: lacework-agent
-version: 5.4.2
+version: 5.5.0
diff --git a/lacework-agent/README.md b/lacework-agent/README.md
@@ -0,0 +1,3 @@
+# Lacework Agent Helm Charts
+
+[Install on Kubernetes](https://docs.lacework.com/deploy-on-kubernetes)
diff --git a/lacework-agent/templates/configmap.yaml b/lacework-agent/templates/configmap.yaml
@@ -16,6 +16,21 @@ metadata:
 data:
   config.json: |
     {"autoupgrade": "{{ required "A value for autoupgrade is required" .Values.laceworkConfig.autoUpgrade }}",
+     {{- with .Values.laceworkConfig.fim }}
+     {{- if .enable }}
+     "fim": {
+             {{- if kindIs "int64" .coolingPeriod }}"coolingperiod": "{{ .coolingPeriod }}", {{- end }}
+             {{- if kindIs "int64" .crawlInterval }}"crawlinterval": "{{ .crawlInterval }}", {{- end }}
+             {{- if .fileIgnore }}"fileignore": {{ mustToJson .fileIgnore }}, {{- end }}
+             {{- if .filePath }}"filepath": {{ mustToJson .filePath }}, {{- end }}
+             "mode": "enable"
+             {{- if .noAtime }}, "noatime": "true" {{- end }}
+             {{- if .runAt }}, "runat": "{{ .runAt }}" {{- end }}
+     },
+     {{- else }}
+     "fim": {"mode": "disable"},
+     {{- end }}
+     {{- end }}
      {{- if .Values.laceworkConfig.proxyUrl }} "proxyurl" :"{{ .Values.laceworkConfig.proxyUrl}}", {{- end }}
      "serverurl": "{{ .Values.laceworkConfig.serverUrl}}",
      "tags": {"Env": "{{ .Values.laceworkConfig.env }}"

diff --git a/lacework-agent/templates/daemonset.yaml b/lacework-agent/templates/daemonset.yaml
@@ -46,18 +46,17 @@ spec:
         image: {{ template "lacework-agent.image" . }}
         imagePullPolicy: {{ .Values.image.pullPolicy }}
         env:
+{{- if .Values.laceworkConfig.stdoutLogging }}
           - name: LaceworkLogStdout
             value: "yes"
-{{- if kindIs "string" .Values.laceworkConfig.accessToken }}
+{{- end }}
           - name: LaceworkAccessToken
             valueFrom:
               secretKeyRef:
+{{- if kindIs "string" .Values.laceworkConfig.accessToken }}
                 name: {{ include "lacework-agent.name" . }}-access-token
                 key: agent-access-token
 {{- else }}
-          - name: LaceworkAccessToken
-            valueFrom:
-              secretKeyRef:
                 name: {{ required "Secret name required for existing secret" .Values.laceworkConfig.accessToken.existingSecret.name }}
                 key: {{ required "Key name required for existing secret" .Values.laceworkConfig.accessToken.existingSecret.key }}
 {{- end}}

diff --git a/lacework-agent/templates/tests/test-agent.yaml b/lacework-agent/templates/tests/test-agent.yaml
@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: "{{ .Release.Name }}-test"
+  annotations:
+    "helm.sh/hook": test
+spec:
+  containers:
+    - name: {{ .Release.Name }}-token-test
+      image: {{ template "lacework-agent.image" . }}
+      imagePullPolicy: {{ .Values.image.pullPolicy | quote }}
+      env:
+        - name: LACEWORK_SERVER_URL
+          value: {{ .Values.laceworkConfig.serverUrl | quote }}
+        - name: LACEWORK_AGENT_TOKEN
+          valueFrom:
+            secretKeyRef:
+{{- if kindIs "string" .Values.laceworkConfig.accessToken }}
+              name: {{ include "lacework-agent.name" . }}-access-token
+              key: agent-access-token
+{{- else }}
+              name: {{ required "Secret name required for existing secret" .Values.laceworkConfig.accessToken.existingSecret.name }}
+              key: {{ required "Key name required for existing secret" .Values.laceworkConfig.accessToken.existingSecret.key }}
+{{- end }}
+      # Dummy test until we have a URL that we can use to validate the server URL + agent token combination
+      command:
+        - /usr/bin/bash
+        - "true"
+  restartPolicy: Never