fix(shield): add env var and port to host shield container (#1995)

sysdiglabs · Oct 28, 2024 · 501061f · 501061f
1 parent cf0bd2b
commit 501061f
Show file tree

Hide file tree

Showing 3 changed files with 44 additions and 1 deletion.
diff --git a/charts/shield/Chart.yaml b/charts/shield/Chart.yaml
@@ -13,5 +13,5 @@ maintainers:
   - name: mavimo
     email: [email protected]
 type: application
-version: 0.1.9
+version: 0.1.10
 appVersion: "1.0.0"
diff --git a/charts/shield/templates/host/daemonset.yaml b/charts/shield/templates/host/daemonset.yaml
@@ -158,6 +158,17 @@ spec:
                   key: password
             {{- end }}
             {{- include "host.env" . | nindent 12 }}
+            {{ if or .Values.features.posture.host_posture.enabled (dig "kspm_analyzer" "enabled" false .Values.host.additional_settings) }}
+            - name: POD_NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
+            {{- end }}
+          ports:
+            {{- if or .Values.features.posture.host_posture.enabled (dig "kspm_analyzer" "enabled" false .Values.host.additional_settings) }}
+            - containerPort: {{ dig "kspm_analyzer" "port" 12000 .Values.host.additional_settings }}
+              name: kspm-analyzer
+            {{- end }}
           readinessProbe:
             httpGet:
               host: 127.0.0.1

diff --git a/charts/shield/tests/host/daemonset_test.yaml b/charts/shield/tests/host/daemonset_test.yaml
@@ -551,3 +551,35 @@ tests:
           content:
             name: my-cluster-volume
             mountPath: /host/my-cluster-mount-path
+
+  - it: Ensure port and env var set when host posture is enabled
+    set:
+      features:
+        posture:
+          host_posture:
+            enabled: true
+    asserts:
+      - contains:
+          path: spec.template.spec.containers[?(@.name == "sysdig-host-shield")].env
+          content:
+            name: POD_NAMESPACE
+            valueFrom:
+              fieldRef:
+                  fieldPath: metadata.namespace
+      - contains:
+          path: spec.template.spec.containers[?(@.name == "sysdig-host-shield")].ports
+          content:
+            containerPort: 12000
+            name: kspm-analyzer
+
+  - it: Ensure port and env var not set when host posture is disabled
+    asserts:
+      - notContains:
+          path: spec.template.spec.containers[?(@.name == "sysdig-host-shield")].env
+          content:
+            name: POD_NAMESPACE
+            valueFrom:
+              fieldRef:
+                fieldPath: metadata.namespace
+      - isNullOrEmpty:
+          path: spec.template.spec.containers[?(@.name == "sysdig-host-shield")].ports