Skip to content

Commit 4610866

Browse files
alongiralongir
committed
✨ Update the Helm chart
1 parent 1a65b1c commit 4610866

9 files changed

Lines changed: 26 additions & 7 deletions

File tree

‎charts/chart/Chart.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
apiVersion: v2
22
name: kubeshark
3-
version: "52.8.1"
3+
version: "52.9.0"
44
description: The API Traffic Analyzer for Kubernetes
55
home: https://kubeshark.co
66
keywords:

‎charts/chart/README.md‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -140,6 +140,9 @@ Example for overriding image names:
140140
| `tap.bpfOverride` | When using AF_PACKET as a traffic capture backend, override any existing pod targeting rules and set explicit BPF expression (e.g. `net 0.0.0.0/0`). | `[]` |
141141
| `tap.capture.stopped` | Set to `false` to have traffic processing start automatically. When set to `true`, traffic processing is stopped by default, resulting in almost no resource consumption (e.g. Kubeshark is dormant). This property can be dynamically control via the dashboard. | `false` |
142142
| `tap.capture.stopAfter` | Set to a duration (e.g. `30s`) to have traffic processing stop after no websocket activity between worker and hub. | `30s` |
143+
| `tap.capture.raw.enabled` | Enable raw capture of packets and syscalls to disk for offline analysis | `false` |
144+
| `tap.capture.raw.storageSize` | Maximum storage size for raw capture files (supports K8s quantity format: `1Gi`, `500Mi`, etc.) | `1Gi` |
145+
| `tap.capture.dbMaxSize` | Maximum size for capture database (e.g., `4Gi`, `2000Mi`). When empty, automatically uses 80% of allocated storage (`tap.storageLimit`). | `""` |
143146
| `tap.release.repo` | URL of the Helm chart repository | `https://helm.kubeshark.co` |
144147
| `tap.release.name` | Helm release name | `kubeshark` |
145148
| `tap.release.namespace` | Helm release namespace | `default` |
@@ -207,7 +210,7 @@ Example for overriding image names:
207210
| `tap.secrets` | List of secrets to be used as source for environment variables (e.g. `kubeshark-license`) | `[]` |
208211
| `tap.sentry.enabled` | Enable sending of error logs to Sentry | `true` (only for qualified users) |
209212
| `tap.sentry.environment` | Sentry environment to label error logs with | `production` |
210-
| `tap.defaultFilter` | Sets the default dashboard KFL filter (e.g. `http`). By default, this value is set to filter out noisy protocols such as DNS, UDP, ICMP and TCP. The user can easily change this, **temporarily**, in the Dashboard. For a permanent change, you should change this value in the `values.yaml` or `config.yaml` file. | `"!dns and !error"` |
213+
| `tap.defaultFilter` | Sets the default dashboard KFL filter (e.g. `http`). By default, this value is set to filter out noisy protocols such as DNS, UDP, ICMP and TCP. The user can easily change this, **temporarily**, in the Dashboard. For a permanent change, you should change this value in the `values.yaml` or `config.yaml` file. | `""` |
211214
| `tap.liveConfigMapChangesDisabled` | If set to `true`, all user functionality (scripting, targeting settings, global & default KFL modification, traffic recording, traffic capturing on/off, protocol dissectors) involving dynamic ConfigMap changes from UI will be disabled | `false` |
212215
| `tap.globalFilter` | Prepends to any KFL filter and can be used to limit what is visible in the dashboard. For example, `redact("request.headers.Authorization")` will redact the appropriate field. Another example `!dns` will not show any DNS traffic. | `""` |
213216
| `tap.metrics.port` | Pod port used to expose Prometheus metrics | `49100` |

‎charts/chart/templates/04-hub-deployment.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ spec:
3737
- -loglevel
3838
- '{{ .Values.logLevel | default "warning" }}'
3939
- -capture-stop-after
40-
- "{{ .Values.tap.capture.stopAfter | default "5m" }}"
40+
- "{{ if hasKey .Values.tap.capture "stopAfter" }}{{ .Values.tap.capture.stopAfter }}{{ else }}5m{{ end }}"
4141
{{- if .Values.tap.gitops.enabled }}
4242
- -gitops
4343
{{- end }}

‎charts/chart/templates/06-front-deployment.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,8 @@ spec:
4242
{{- else -}}
4343
true
4444
{{- end }}'
45+
- name: REACT_APP_STREAMING_TYPE
46+
value: '{{ default "" (((.Values).tap).dashboard).streamingType }}'
4547
- name: REACT_APP_AUTH_SAML_IDP_METADATA_URL
4648
value: '{{ not (eq .Values.tap.auth.saml.idpMetadataUrl "") | ternary .Values.tap.auth.saml.idpMetadataUrl " " }}'
4749
- name: REACT_APP_TIMEZONE

‎charts/chart/templates/09-worker-daemon-set.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -99,6 +99,10 @@ spec:
9999
- '{{ .Values.tap.misc.resolutionStrategy }}'
100100
- -staletimeout
101101
- '{{ .Values.tap.misc.staleTimeoutSeconds }}'
102+
- -storage-size
103+
- '{{ .Values.tap.storageLimit }}'
104+
- -capture-db-max-size
105+
- '{{ .Values.tap.capture.dbMaxSize }}'
102106
{{- if .Values.tap.docker.overrideImage.worker }}
103107
image: '{{ .Values.tap.docker.overrideImage.worker }}'
104108
{{- else if .Values.tap.docker.overrideTag.worker }}
@@ -394,10 +398,12 @@ spec:
394398
- hostPath:
395399
path: /etc/os-release
396400
name: os-release
401+
{{- if .Values.tap.tls }}
397402
- hostPath:
398403
path: /
399404
name: root
400405
- name: data
406+
{{- end }}
401407
{{- if .Values.tap.persistentStorage }}
402408
persistentVolumeClaim:
403409
claimName: kubeshark-persistent-volume-claim

‎charts/chart/templates/10-ingress.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ spec:
2828
name: kubeshark-front
2929
port:
3030
number: 80
31-
path: /
31+
path: {{ default "/" (((.Values).tap).ingress).path }}
3232
pathType: Prefix
3333
{{- if .Values.tap.ingress.tls }}
3434
tls:

‎charts/chart/templates/12-config-map.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -83,3 +83,5 @@ data:
8383
PCAP_MAX_TIME: '{{ .Values.pcapdump.maxTime }}'
8484
PCAP_MAX_SIZE: '{{ .Values.pcapdump.maxSize }}'
8585
PORT_MAPPING: '{{ toJson .Values.tap.portMapping }}'
86+
RAW_CAPTURE: '{{ .Values.tap.capture.raw.enabled | ternary "true" "false" }}'
87+
RAW_CAPTURE_STORAGE_SIZE: '{{ .Values.tap.capture.raw.storageSize }}'

‎charts/chart/templates/NOTES.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ Notices:
2828
- Support chat using Intercom is enabled. It can be disabled using `--set supportChatEnabled=false`
2929
{{- end }}
3030
{{- if eq .Values.license ""}}
31-
- No license key was detected. You can either log-in/sign-up through the dashboard, or download the license key from https://console.kubeshark.co/ and add it as `LICENSE` via mounted secret (`tap.secrets`).
31+
- No license key was detected. You can either log-in/sign-up through the dashboard, or download the license key from https://console.kubeshark.co/ and add it as 'license: <license>' in helm values or as `--set license=<license>` or as `LICENSE` via mounted secret (`tap.secrets`).
3232
{{- end }}
3333

3434
{{ if .Values.tap.ingress.enabled }}

‎charts/chart/values.yaml‎

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,10 @@ tap:
2929
capture:
3030
stopped: false
3131
stopAfter: 5m
32+
raw:
33+
enabled: false
34+
storageSize: 1Gi
35+
dbMaxSize: ""
3236
release:
3337
repo: https://helm.kubeshark.co
3438
name: kubeshark
@@ -139,6 +143,7 @@ tap:
139143
enabled: false
140144
className: ""
141145
host: ks.svc.cluster.local
146+
path: /
142147
tls: []
143148
annotations: {}
144149
priorityClass: ""
@@ -148,6 +153,7 @@ tap:
148153
ipv6: true
149154
debug: false
150155
dashboard:
156+
streamingType: ""
151157
completeStreamingEnabled: true
152158
telemetry:
153159
enabled: true
@@ -160,7 +166,7 @@ tap:
160166
sentry:
161167
enabled: false
162168
environment: production
163-
defaultFilter: "!dns and !error"
169+
defaultFilter: ""
164170
liveConfigMapChangesDisabled: false
165171
globalFilter: ""
166172
enabledDissectors:
@@ -253,7 +259,7 @@ license: ""
253259
cloudLicenseEnabled: true
254260
aiAssistantEnabled: true
255261
demoModeEnabled: false
256-
supportChatEnabled: true
262+
supportChatEnabled: false
257263
betaEnabled: false
258264
internetConnectivity: true
259265
scripting:

0 commit comments

Comments
 (0)