Updates

helm/charts/rezilion-charts/index.yaml

@@ -3,12 +3,12 @@ entries:
   rezilion:
   - apiVersion: v2
     appVersion: 0.0.1
-    created: "2022-01-09T11:48:36.061836409+02:00"
+    created: "2022-01-09T16:40:34.802022503+02:00"
     description: Rezilion AddOn
-    digest: 5e853002d9a514e5ad4ffac5625e99001d4d05adac8e361c7eb92b51b6615bf8
+    digest: 72631d5dd2dcdf44dc58887cf79f8fa6db436dbc784c4da2e0488e26ed758a08
     name: rezilion
     type: application
     urls:
-    - https://lzl-ssp-helm-test.s3.eu-west-1.amazonaws.com/rezilion-0.0.1.tgz
+    - https://lzl-ssp-helm-test.s3.eu-west-1.amazonaws.com/rezilion-0.0.1.tgz/rezilion-0.0.1.tgz
     version: 0.0.1
-generated: "2022-01-09T11:48:36.058033634+02:00"
+generated: "2022-01-09T16:40:34.798287756+02:00"

helm/charts/rezilion/templates/rezilion.yaml

@@ -1,22 +1,122 @@
-apiVersion: apps/v1
-kind: Deployment
+{{- range .Values.applications }}
+---
+apiVersion: v1
+kind: ServiceAccount
 metadata:
-  name: rezilion-app
+  name: hermes
+  namespace: rezilion
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  name: hermes
+  namespace: rezilion
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - namespaces
+      - nodes
+      - pods/exec
+    verbs:
+      - get
+      - list
+      - watch
+      - delete
+      - create
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  name: hermes
+roleRef:
+  kind: ClusterRole
+  name: hermes
+  apiGroup: rbac.authorization.k8s.io
+subjects:
+  - kind: ServiceAccount
+    name: hermes
+    namespace: rezilion
+---
+apiVersion: apps/v1 
+kind: DaemonSet 
+metadata: 
+  name: rezilion-hermes
+  namespace: rezilion
   labels:
-    app: rezilion-app
+    k8s-app: hermes
 spec:
-  replicas: 1
   selector:
-    matchLabels:
-      app: rezilion-app
-  template:
+    matchLabels: 
+      name: rezilion-hermes
+  template: 
     metadata:
       labels:
-        app: rezilion-app
+        name: rezilion-hermes
     spec:
+      hostNetwork: true
+      hostPID: true
+      restartPolicy: Always
+      serviceAccount: hermes
+      serviceAccountName: hermes
+      imagePullSecrets:
+      - name: rezilioncreds
       containers:
-        - name: rezilion-app
-          image: nginx
+        - name: rezilion-hermes
+          image: ngnix
+          resources:
+            requests:
+              memory: "500M"
+              cpu: "200m"
+            limits:
+              memory: "500M"
+              cpu: "200m"
+          readinessProbe:
+            exec:
+              command:
+                - /bin/sh
+                - -c
+                - ps -ef | grep maia | grep -v grep || echo "FIXME"
           imagePullPolicy: Always
-          ports:
-            - containerPort: 80
+          securityContext:
+            privileged: true
+            capabilities:
+              add:
+                - SYS_PTRACE
+                - SYS_ADMIN
+          env:
+            - name: HOST_ROOT
+              value: /tmp/host_root
+            - name: HERMES_HOST_SCOPE
+              value: packages
+            - name: HERMES_CONTAINERS_SCOPE
+              value: all
+            - name: HERMES_IDENTIFIER
+              value: hostname
+            - name: HERMES_LIFE_TIME
+              value: 12h
+            - name: HERMES_SAMPLE_INTERVAL
+              value: 1m
+            - name: HERMES_ACCEPTED_EULA
+              value: "yes"
+            - name: HERMES_UPLOAD_INTERVAL
+              value: 10m
+            - name: HERMES_DESTINATION
+              value: /tmp/hermes
+            - name: HERMES_EXECUTION_WITHOUT_CGROUPS
+              value: periodic-run
+            - name: COMMON_API_KEY
+              value: {{ .apiKey }}
+          volumeMounts:
+          - name: hermes-claim1
+            mountPath: /var/run/docker.sock
+          - name: hermes-claim2
+            mountPath: /tmp/host_root
+      volumes:
+      - name: hermes-claim1
+        hostPath:
+          path: /var/run/docker.sock
+      - name: hermes-claim2
+        hostPath:
+          path: /

helm/charts/rezilion/values.yaml

@@ -0,0 +1,3 @@
+---
+applications:
+  - apiKey: "test_api_key"

lib/index.ts

@@ -15,7 +15,7 @@ export const defaultProps: HelmAddOnProps & RezilionAddOnProps = {
     namespace: 'kube-system',
     release: 'rezilion',
     version: '0.0.1',
-    repository: 'https://github.com/Rezilion/rezilion-ssp-addon/tree/main/helm/',
+    repository: 'https://lzl-ssp-helm-test.s3.eu-west-1.amazonaws.com',
     values: {}
 }