diff --git a/kubernetes-templates/sysdig-cloud/0/README.md b/kubernetes-templates/sysdig-cloud/0/README.md new file mode 100644 index 0000000..4642bf6 --- /dev/null +++ b/kubernetes-templates/sysdig-cloud/0/README.md @@ -0,0 +1,12 @@ +Installing Sysdig in k8s with Rancher
+ +The following kernel headers are necessary before deploying the agent using the Rancher catalog.
+ +DOCKER
+$ sudo ros service enable kernel-headers
+$ sudo ros service up -d kernel-headers
+ + +SYSTEM DOCKER
+$ sudo ros service enable kernel-headers-system-docker
+$ sudo ros service up -d kernel-headers-system-docker
diff --git a/kubernetes-templates/sysdig-cloud/0/rancher-compose.yml b/kubernetes-templates/sysdig-cloud/0/rancher-compose.yml new file mode 100644 index 0000000..0ba053c --- /dev/null +++ b/kubernetes-templates/sysdig-cloud/0/rancher-compose.yml @@ -0,0 +1,26 @@ +.catalog: + name: "Sysdig Cloud" + version: "0.1" + description: "Container-Native Application and Infrastructure Monitoring" + questions: + - variable: "SDC_ACCESS_KEY" + label: "Sysdig Cloud access key" + description: "Your unique Sysdig Cloud access key - register for a Sysdig Cloud account at www.sysdig.com to receive a key." + type: "password" + required: true + - variable: "SDC_TAGS" + label: "Sysdig Cloud tags" + description: "Tags to be applied to all hosts on which the Sysdig Cloud container is deployed - these will surface in the Sysdig Cloud app. Should be a comma-separated list in the form of TAG_NAME:TAG_VALUE. For example: role:webserver,location:europe." + type: "string" + required: false +# - variable: "VERSION" +# label: "Sysdig Cloud version" +# description: "Specify a version of the Sysdig Cloud container to pull (default will pull latest stable version)." +# type: "string" +# default: "latest" +# required: true + - variable: "SDC_ADDITIONAL_CONF" + label: "Additional Configuration" + description: "Content must be valid yaml code, use the escape \n parameter for new lines and adhere to proper indent requirements." + type: "string" + required: false diff --git a/kubernetes-templates/sysdig-cloud/0/sysdig-daemonset.yaml b/kubernetes-templates/sysdig-cloud/0/sysdig-daemonset.yaml new file mode 100644 index 0000000..8726105 --- /dev/null +++ b/kubernetes-templates/sysdig-cloud/0/sysdig-daemonset.yaml @@ -0,0 +1,72 @@ +#Use this sysdig.yaml when Daemon Sets are enabled on Kubernetes (minimum version 1.1.1). Otherwise use the RC method. + +apiVersion: extensions/v1beta1 +kind: DaemonSet +metadata: + name: sysdig-agent + labels: + app: sysdig-agent +spec: + template: + metadata: + labels: + name: sysdig-agent + spec: + volumes: + - name: docker-sock + hostPath: + path: /var/run/docker.sock + - name: dev-vol + hostPath: + path: /dev + - name: proc-vol + hostPath: + path: /proc + - name: boot-vol + hostPath: + path: /boot + - name: modules-vol + hostPath: + path: /lib/modules + - name: usr-vol + hostPath: + path: /usr + hostNetwork: true + hostPID: true + containers: + - name: sysdig-agent + image: sysdig/agent + securityContext: + privileged: true + env: + - name: ACCESS_KEY #REQUIRED - replace with your Sysdig Cloud access key + value: "${SDC_ACCESS_KEY}" # 8312341g-5678-abcd-4a2b2c-33bcsd655 + - name: TAGS #OPTIONAL + value: "${SDC_TAGS}" # linux:ubuntu,dept:dev,local:nyc +# - name: COLLECTOR #OPTIONAL - on-prem install only +# value: 192.168.183.200 +# - name: SECURE #OPTIONAL - on-prem install only +# value: false +# - name: CHECK_CERTIFICATE #OPTIONAL - on-prem install only +# value: false + - name: ADDITIONAL_CONF #OPTIONAL pass additional parameters to the agent such as authentication example provided here + value: "${SDC_ADDITIONAL_CONF}" #"k8s_uri: https://myacct:mypass@localhost:4430\nk8s_ca_certificate: k8s-ca.crt\nk8s_ssl_verify_certificate: true" + volumeMounts: + - mountPath: /host/var/run/docker.sock + name: docker-sock + readOnly: false + - mountPath: /host/dev + name: dev-vol + readOnly: false + - mountPath: /host/proc + name: proc-vol + readOnly: true + - mountPath: /host/boot + name: boot-vol + readOnly: true + - mountPath: /host/lib/modules + name: modules-vol + readOnly: true + - mountPath: /host/usr + name: usr-vol + readOnly: true diff --git a/kubernetes-templates/sysdig-cloud/catalogIcon-sysdig.svg b/kubernetes-templates/sysdig-cloud/catalogIcon-sysdig.svg new file mode 100644 index 0000000..908da64 --- /dev/null +++ b/kubernetes-templates/sysdig-cloud/catalogIcon-sysdig.svg @@ -0,0 +1,13 @@ + + + + + + + diff --git a/kubernetes-templates/sysdig-cloud/config.yml b/kubernetes-templates/sysdig-cloud/config.yml new file mode 100644 index 0000000..49d1d2a --- /dev/null +++ b/kubernetes-templates/sysdig-cloud/config.yml @@ -0,0 +1,5 @@ +name: Sysdig Cloud +description: | + Container-Native Application and Infrastructure Monitoring +version: "0.1" +category: Monitoring