Merge branch 'main' into chore/shield-add-rapid-response-password-secrets

francesco-furlan · web-flow · commit d35bba0c43c2 · 2025-09-24T14:57:17.000+02:00
diff --git a/charts/agent/CHANGELOG.md b/charts/agent/CHANGELOG.md
@@ -10,6 +10,12 @@ Manual edits are supported only below '## Change Log' and should be used
 exclusively to fix incorrect entries and not to add new ones.
 
 ## Change Log
+# v2.3.3
+### New Features
+* **agent** [5a2d5f6a](https://github.com/sysdiglabs/charts/commit/5a2d5f6ae10ab7f2737cada4922bcb8af8a1806d): Enable the possibility to specify an existing secret containing the local forwarder configuration [FR-2992] ([#2382](https://github.com/sysdiglabs/charts/issues/2382))
+# v2.3.2
+### Chores
+* **agent,kspm-collector,node-analyzer** [bd84e2d2](https://github.com/sysdiglabs/charts/commit/bd84e2d2159856df26b636f9b0e2e7fcfd0c7a3d): remove bitnami/kubectl usage ([#2385](https://github.com/sysdiglabs/charts/issues/2385))
 # v2.3.1
 ### New Features
 * **agent,shield,sysdig-deploy** [32be15a2](https://github.com/sysdiglabs/charts/commit/32be15a2247281ff9b325c27a570a8c48d118a20): release agent 14.2.1 ([#2374](https://github.com/sysdiglabs/charts/issues/2374))
diff --git a/charts/agent/Chart.yaml b/charts/agent/Chart.yaml
@@ -30,4 +30,4 @@ sources:
 - https://app.sysdigcloud.com/#/settings/user
 - https://github.com/draios/sysdig
 type: application
-version: 2.3.2
+version: 2.3.3
diff --git a/charts/agent/RELEASE-NOTES.md b/charts/agent/RELEASE-NOTES.md
@@ -1,5 +1,5 @@
 # What's Changed
 
 ### New Features
-- **agent,shield,sysdig-deploy** [32be15a2](https://github.com/sysdiglabs/charts/commit/32be15a2247281ff9b325c27a570a8c48d118a20): release agent 14.2.1 ([#2374](https://github.com/sysdiglabs/charts/issues/2374))
-#### Full diff: https://github.com/sysdiglabs/charts/compare/agent-2.3.0...agent-2.3.1
+- **agent** [5a2d5f6a](https://github.com/sysdiglabs/charts/commit/5a2d5f6ae10ab7f2737cada4922bcb8af8a1806d): Enable the possibility to specify an existing secret containing the local forwarder configuration [FR-2992] ([#2382](https://github.com/sysdiglabs/charts/issues/2382))
+#### Full diff: https://github.com/sysdiglabs/charts/compare/agent-2.3.2...agent-2.3.3
diff --git a/charts/agent/templates/daemonset.yaml b/charts/agent/templates/daemonset.yaml
@@ -394,7 +394,11 @@ spec:
         {{- if .Values.localForwarder.enabled }}
         - name: local-forwarder-config
           secret:
+            {{- if eq .Values.localForwarder.existingSecretName "" }}
             secretName: {{ include "agent.localForwarderSecretName" . }}
+            {{- else }}
+            secretName: {{ .Values.localForwarder.existingSecretName }}
+            {{- end }}
         {{- end }}
         - name: sysdig-agent-secrets
           secret:
diff --git a/charts/agent/templates/secrets.yaml b/charts/agent/templates/secrets.yaml
@@ -49,7 +49,7 @@ type: Opaque
 data:
 {{ include "agent.httpProxyCredentials" . | indent 2 }}
 {{- end }}
-{{- if .Values.localForwarder.enabled }}
+{{- if and .Values.localForwarder.enabled (eq .Values.localForwarder.existingSecretName "") }}
 ---
 apiVersion: v1
 kind: Secret
diff --git a/charts/agent/values.yaml b/charts/agent/values.yaml
@@ -341,6 +341,11 @@ leaderelection:
   enable: false
 localForwarder:
   enabled: false
+  # If existingSecretName is set to anything different than an empty string
+  # the local forwarder secret generation is skipped and the existing secret
+  # name is used to mount the secret volume instead of the one defined in
+  # the secrets template
+  existingSecretName: ""
   transmitMessageTypes:
     - POLICY_EVENTS
     - SECURE_AUDIT
diff --git a/charts/kspm-collector/CHANGELOG.md b/charts/kspm-collector/CHANGELOG.md
@@ -10,6 +10,9 @@ Manual edits are supported only below '## Change Log' and should be used
 exclusively to fix incorrect entries and not to add new ones.
 
 ## Change Log
+# v0.18.6
+### Chores
+* **agent,kspm-collector,node-analyzer** [bd84e2d2](https://github.com/sysdiglabs/charts/commit/bd84e2d2159856df26b636f9b0e2e7fcfd0c7a3d): remove bitnami/kubectl usage ([#2385](https://github.com/sysdiglabs/charts/issues/2385))
 # v0.18.5
 ### Chores
 * **deps** [3379418d](https://github.com/sysdiglabs/charts/commit/3379418d6f2241168397f3eba3da9fc6a40d7e6e): bump kspm-collector to 1.39.15 ([#2378](https://github.com/sysdiglabs/charts/issues/2378))
diff --git a/charts/kspm-collector/RELEASE-NOTES.md b/charts/kspm-collector/RELEASE-NOTES.md
@@ -1,5 +1,5 @@
 # What's Changed
 
 ### Chores
-- **deps** [3379418d](https://github.com/sysdiglabs/charts/commit/3379418d6f2241168397f3eba3da9fc6a40d7e6e): bump kspm-collector to 1.39.15 ([#2378](https://github.com/sysdiglabs/charts/issues/2378))
-#### Full diff: https://github.com/sysdiglabs/charts/compare/kspm-collector-0.18.4...kspm-collector-0.18.5
+- **agent,kspm-collector,node-analyzer** [bd84e2d2](https://github.com/sysdiglabs/charts/commit/bd84e2d2159856df26b636f9b0e2e7fcfd0c7a3d): remove bitnami/kubectl usage ([#2385](https://github.com/sysdiglabs/charts/issues/2385))
+#### Full diff: https://github.com/sysdiglabs/charts/compare/kspm-collector-0.18.5...kspm-collector-0.18.6
diff --git a/charts/node-analyzer/CHANGELOG.md b/charts/node-analyzer/CHANGELOG.md
@@ -10,6 +10,12 @@ Manual edits are supported only below '## Change Log' and should be used
 exclusively to fix incorrect entries and not to add new ones.
 
 ## Change Log
+# v1.36.11
+### Chores
+* **node-analyzer** [212c12c9](https://github.com/sysdiglabs/charts/commit/212c12c98c213e4083b772f2d619edf1331f0012): bump sysdig/kspm-analyzer to 1.45.4 ([#2384](https://github.com/sysdiglabs/charts/issues/2384))
+# v1.36.10
+### Chores
+* **agent,kspm-collector,node-analyzer** [bd84e2d2](https://github.com/sysdiglabs/charts/commit/bd84e2d2159856df26b636f9b0e2e7fcfd0c7a3d): remove bitnami/kubectl usage ([#2385](https://github.com/sysdiglabs/charts/issues/2385))
 # v1.36.9
 ### Chores
 * **nodeanalyzer** [ac7a53c4](https://github.com/sysdiglabs/charts/commit/ac7a53c44c46b557cb3db8d7886cbf40c4658888): bumped host scanner to the latest release ([#2375](https://github.com/sysdiglabs/charts/issues/2375))
diff --git a/charts/node-analyzer/Chart.yaml b/charts/node-analyzer/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: node-analyzer
 description: Sysdig Node Analyzer
 # currently matching Sysdig's appVersion 1.14.34
-version: 1.36.10
+version: 1.36.11
 appVersion: 12.9.2
 keywords:
   - monitoring
diff --git a/charts/node-analyzer/README.md b/charts/node-analyzer/README.md
@@ -248,7 +248,7 @@ The following table lists the configurable parameters of the Sysdig Node Analyze
 | `nodeAnalyzer.tolerations`                                           | Specifies the  tolerations for scheduling.                                                                                                                                                  | <pre>node-role.kubernetes.io/master:NoSchedule,<br>node-role.kubernetes.io/control-plane:NoSchedule</pre>                                                             |
 | `nodeAnalyzer.kspmAnalyzer.debug`                                    | Set to true to show KSPM node analyzer debug logging, which is useful for troubleshooting.                                                                                                  | `false`                                                                                                                                                               |
 | `nodeAnalyzer.kspmAnalyzer.image.repository`                         | Specifies the image repository to pull the  KSPM node analyzer from.                                                                                                                        | `sysdig/kspm-analyzer`                                                                                                                                                |
-| `nodeAnalyzer.kspmAnalyzer.image.tag`                                | Specifies the image tag for the KSPM node analyzer image to be pulled.                                                                                                                      | `1.45.3`                                                                                                                                                              |
+| `nodeAnalyzer.kspmAnalyzer.image.tag`                                | Specifies the image tag for the KSPM node analyzer image to be pulled.                                                                                                                      | `1.45.4`                                                                                                                                                              |
 | `nodeAnalyzer.kspmAnalyzer.image.digest`                             | Specifies the image digest to pull.                                                                                                                                                         | ` `                                                                                                                                                                   |
 | `nodeAnalyzer.kspmAnalyzer.image.pullPolicy`                         | Specifies the The image pull policy for the  KSPM node analyzer.                                                                                                                            | `""`                                                                                                                                                                  |
 | `nodeAnalyzer.kspmAnalyzer.includeSensitivePermissions`              | Grant the service account elevated permissions to run CIS Benchmark for OS4.                                                                                                                | `false`                                                                                                                                                               |
diff --git a/charts/node-analyzer/RELEASE-NOTES.md b/charts/node-analyzer/RELEASE-NOTES.md
@@ -1,5 +1,5 @@
 # What's Changed
 
 ### Chores
-- **nodeanalyzer** [ac7a53c4](https://github.com/sysdiglabs/charts/commit/ac7a53c44c46b557cb3db8d7886cbf40c4658888): bumped host scanner to the latest release ([#2375](https://github.com/sysdiglabs/charts/issues/2375))
-#### Full diff: https://github.com/sysdiglabs/charts/compare/node-analyzer-1.36.8...node-analyzer-1.36.9
+- **node-analyzer** [212c12c9](https://github.com/sysdiglabs/charts/commit/212c12c98c213e4083b772f2d619edf1331f0012): bump sysdig/kspm-analyzer to 1.45.4 ([#2384](https://github.com/sysdiglabs/charts/issues/2384))
+#### Full diff: https://github.com/sysdiglabs/charts/compare/node-analyzer-1.36.10...node-analyzer-1.36.11
diff --git a/charts/node-analyzer/values.yaml b/charts/node-analyzer/values.yaml
@@ -435,7 +435,7 @@ nodeAnalyzer:
     debug: false
     image:
       repository: sysdig/kspm-analyzer
-      tag: 1.45.3
+      tag: 1.45.4
       digest: null
       pullPolicy: null
     # Permissions for OCP4, previously only added for benchmarkrunner
diff --git a/charts/rapid-response/CHANGELOG.md b/charts/rapid-response/CHANGELOG.md
@@ -10,6 +10,9 @@ Manual edits are supported only below '## Change Log' and should be used
 exclusively to fix incorrect entries and not to add new ones.
 
 ## Change Log
+# v0.9.27
+### Chores
+* **agent,kspm-collector,node-analyzer** [bd84e2d2](https://github.com/sysdiglabs/charts/commit/bd84e2d2159856df26b636f9b0e2e7fcfd0c7a3d): remove bitnami/kubectl usage ([#2385](https://github.com/sysdiglabs/charts/issues/2385))
 # v0.9.26
 ### Chores
 * **shield,common,sysdig-deploy,admission-controller,agent,cluster-scanner,cluster-shield,kspm-collector,node-analyzer,rapid-response** [1b992fbc](https://github.com/sysdiglabs/charts/commit/1b992fbc14ffd5b1f63be3896ee40deb5a858d06): bump cluster-shield to 1.15.0 ([#2360](https://github.com/sysdiglabs/charts/issues/2360))
diff --git a/charts/rapid-response/RELEASE-NOTES.md b/charts/rapid-response/RELEASE-NOTES.md
@@ -1,5 +1,5 @@
 # What's Changed
 
 ### Chores
-- **shield,common,sysdig-deploy,admission-controller,agent,cluster-scanner,cluster-shield,kspm-collector,node-analyzer,rapid-response** [1b992fbc](https://github.com/sysdiglabs/charts/commit/1b992fbc14ffd5b1f63be3896ee40deb5a858d06): bump cluster-shield to 1.15.0 ([#2360](https://github.com/sysdiglabs/charts/issues/2360))
-#### Full diff: https://github.com/sysdiglabs/charts/compare/rapid-response-0.9.25...rapid-response-0.9.26
+- **agent,kspm-collector,node-analyzer** [bd84e2d2](https://github.com/sysdiglabs/charts/commit/bd84e2d2159856df26b636f9b0e2e7fcfd0c7a3d): remove bitnami/kubectl usage ([#2385](https://github.com/sysdiglabs/charts/issues/2385))
+#### Full diff: https://github.com/sysdiglabs/charts/compare/rapid-response-0.9.26...rapid-response-0.9.27
diff --git a/charts/sysdig-deploy/CHANGELOG.md b/charts/sysdig-deploy/CHANGELOG.md
@@ -10,6 +10,12 @@ Manual edits are supported only below '## Change Log' and should be used
 exclusively to fix incorrect entries and not to add new ones.
 
 ## Change Log
+# v1.93.6
+### Chores
+* **sysdig-deploy** [e44e190a](https://github.com/sysdiglabs/charts/commit/e44e190a0145b7612026ad9e76921b6995762232): Automatic version bump due to updated dependencies ([#2387](https://github.com/sysdiglabs/charts/issues/2387))
+# v1.93.5
+### Chores
+* **sysdig-deploy** [bb6a61fa](https://github.com/sysdiglabs/charts/commit/bb6a61fa7e5a1df166713c1aec997e20beb643be): Automatic version bump due to updated dependencies ([#2380](https://github.com/sysdiglabs/charts/issues/2380))
 # v1.93.4
 ### Chores
 * **sysdig-deploy** [28204b6e](https://github.com/sysdiglabs/charts/commit/28204b6ead63885a08be28b677e33a758e538b7c): Automatic version bump due to updated dependencies ([#2379](https://github.com/sysdiglabs/charts/issues/2379))
diff --git a/charts/sysdig-deploy/Chart.yaml b/charts/sysdig-deploy/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: sysdig-deploy
 description: A chart with various Sysdig components for Kubernetes
 type: application
-version: 1.93.4
+version: 1.93.6
 maintainers:
   - name: AlbertoBarba
     email: alberto.barba@sysdig.com
@@ -20,13 +20,13 @@ dependencies:
   - name: admission-controller
     # repository: https://charts.sysdig.com
     repository: file://../admission-controller
-    version: ~0.16.11
+    version: ~0.16.12
     alias: admissionController
     condition: admissionController.enabled
   - name: agent
     # repository: https://charts.sysdig.com
     repository: file://../agent
-    version: ~2.3.1
+    version: ~2.3.3
     alias: agent
     condition: agent.enabled
   - name: common
@@ -36,7 +36,7 @@ dependencies:
   - name: node-analyzer
     # repository: https://charts.sysdig.com
     repository: file://../node-analyzer
-    version: ~1.36.9
+    version: ~1.36.11
     alias: nodeAnalyzer
     condition: nodeAnalyzer.enabled
   - name: cluster-scanner
@@ -48,13 +48,13 @@ dependencies:
   - name: kspm-collector
     # repository: https://charts.sysdig.com
     repository: file://../kspm-collector
-    version: ~0.18.5
+    version: ~0.18.6
     alias: kspmCollector
     condition: kspmCollector.enabled,global.kspm.deploy
   - name: rapid-response
     # repository: https://charts.sysdig.com
     repository: file://../rapid-response
-    version: ~0.9.26
+    version: ~0.9.27
     alias: rapidResponse
     condition: rapidResponse.enabled
   - name: cluster-shield
diff --git a/charts/sysdig-deploy/RELEASE-NOTES.md b/charts/sysdig-deploy/RELEASE-NOTES.md
@@ -1,5 +1,5 @@
 # What's Changed
 
 ### Chores
-- **sysdig-deploy** [28204b6e](https://github.com/sysdiglabs/charts/commit/28204b6ead63885a08be28b677e33a758e538b7c): Automatic version bump due to updated dependencies ([#2379](https://github.com/sysdiglabs/charts/issues/2379))
-#### Full diff: https://github.com/sysdiglabs/charts/compare/sysdig-deploy-1.93.3...sysdig-deploy-1.93.4
+- **sysdig-deploy** [e44e190a](https://github.com/sysdiglabs/charts/commit/e44e190a0145b7612026ad9e76921b6995762232): Automatic version bump due to updated dependencies ([#2387](https://github.com/sysdiglabs/charts/issues/2387))
+#### Full diff: https://github.com/sysdiglabs/charts/compare/sysdig-deploy-1.93.5...sysdig-deploy-1.93.6
