adding sysdig cloud (#318)

* adding sysdig cloud * minor fixes * quotes on version not desc * access key pw not add con
2016-10-27 13:46:35 -07:00
parent 0c0561c5f1
commit ed8a87ad7b
5 changed files with 128 additions and 0 deletions
@@ -0,0 +1,12 @@
+Installing Sysdig in k8s with Rancher<br>
+
+The following kernel headers are necessary before deploying the agent using the Rancher catalog.<br>
+
+<b>DOCKER</b><br>
+$ sudo ros service enable kernel-headers<br>
+$ sudo ros service up -d kernel-headers<br>
+
+
+<b>SYSTEM DOCKER</b><br>
+$ sudo ros service enable kernel-headers-system-docker<br>
+$ sudo ros service up -d kernel-headers-system-docker<br>
@@ -0,0 +1,26 @@
+.catalog:
+  name: "Sysdig Cloud"
+  version: "0.1"
+  description: "Container-Native Application and Infrastructure Monitoring"
+  questions:
+    - variable: "SDC_ACCESS_KEY"
+      label: "Sysdig Cloud access key"
+      description: "Your unique Sysdig Cloud access key - register for a Sysdig Cloud account at www.sysdig.com to receive a key."
+      type: "password"
+      required: true
+    - variable: "SDC_TAGS"
+      label: "Sysdig Cloud tags"
+      description: "Tags to be applied to all hosts on which the Sysdig Cloud container is deployed - these will surface in the Sysdig Cloud app. Should be a comma-separated list in the form of TAG_NAME:TAG_VALUE. For example: role:webserver,location:europe."
+      type: "string"
+      required: false
+#    - variable: "VERSION"
+#      label: "Sysdig Cloud version"
+#      description: "Specify a version of the Sysdig Cloud container to pull (default will pull latest stable version)."
+#      type: "string"
+#      default: "latest" 
+#      required: true
+    - variable: "SDC_ADDITIONAL_CONF"
+      label: "Additional Configuration"
+      description: "Content must be valid yaml code, use the escape \n parameter for new lines and adhere to proper indent requirements."
+      type: "string"
+      required: false
@@ -0,0 +1,72 @@
+#Use this sysdig.yaml when Daemon Sets are enabled on Kubernetes (minimum version 1.1.1). Otherwise use the RC method.
+
+apiVersion: extensions/v1beta1
+kind: DaemonSet                     
+metadata:
+  name: sysdig-agent
+  labels:
+    app: sysdig-agent
+spec:
+  template:
+    metadata:
+      labels:
+        name: sysdig-agent
+    spec:
+      volumes:
+      - name: docker-sock
+        hostPath:
+         path: /var/run/docker.sock
+      - name: dev-vol
+        hostPath:
+         path: /dev
+      - name: proc-vol
+        hostPath:
+         path: /proc
+      - name: boot-vol
+        hostPath:
+         path: /boot
+      - name: modules-vol
+        hostPath:
+         path: /lib/modules
+      - name: usr-vol
+        hostPath:
+          path: /usr
+      hostNetwork: true
+      hostPID: true
+      containers:
+      - name: sysdig-agent
+        image: sysdig/agent
+        securityContext:
+         privileged: true
+        env:
+        - name: ACCESS_KEY                                  #REQUIRED - replace with your Sysdig Cloud access key
+          value: "${SDC_ACCESS_KEY}"                        # 8312341g-5678-abcd-4a2b2c-33bcsd655
+        - name: TAGS                                       #OPTIONAL
+          value: "${SDC_TAGS}"                             # linux:ubuntu,dept:dev,local:nyc 
+#        - name: COLLECTOR                                  #OPTIONAL - on-prem install only
+#          value: 192.168.183.200 
+#        - name: SECURE                                     #OPTIONAL - on-prem install only       
+#          value: false
+#        - name: CHECK_CERTIFICATE                          #OPTIONAL - on-prem install only
+#          value: false
+        - name: ADDITIONAL_CONF                            #OPTIONAL pass additional parameters to the agent such as authentication example provided here
+          value: "${SDC_ADDITIONAL_CONF}"                  #"k8s_uri: https://myacct:mypass@localhost:4430\nk8s_ca_certificate: k8s-ca.crt\nk8s_ssl_verify_certificate: true"
+        volumeMounts:
+        - mountPath: /host/var/run/docker.sock
+          name: docker-sock
+          readOnly: false
+        - mountPath: /host/dev
+          name: dev-vol
+          readOnly: false
+        - mountPath: /host/proc
+          name: proc-vol
+          readOnly: true
+        - mountPath: /host/boot
+          name: boot-vol
+          readOnly: true
+        - mountPath: /host/lib/modules
+          name: modules-vol
+          readOnly: true
+        - mountPath: /host/usr
+          name: usr-vol
+          readOnly: true