[SRE-SYM][synthetic-monitoring-agent] add extraEnv

Signed-off-by: houcine.najib <[email protected]>

Author: hnajib-sym

charts/synthetic-monitoring-agent/README.md

@@ -1,6 +1,6 @@
 # synthetic-monitoring-agent
 
-![Version: 0.6.0](https://img.shields.io/badge/Version-0.6.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v0.29.3](https://img.shields.io/badge/AppVersion-v0.29.3-informational?style=flat-square)
+![Version: 1.0.0](https://img.shields.io/badge/Version-1.0.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v0.34.4](https://img.shields.io/badge/AppVersion-v0.34.4-informational?style=flat-square)
 
 Grafana's Synthetic Monitoring application. The agent provides probe functionality and executes network checks for monitoring remote targets.
 
@@ -18,10 +18,6 @@ Grafana's Synthetic Monitoring application. The agent provides probe functionali
 
 * <https://github.com/grafana/synthetic-monitoring-agent>
 
-## Requirements
-
-Kubernetes: `^1.16.0-0`
-
 ## Values
 
 | Key | Type | Default | Description |
@@ -38,6 +34,7 @@ Kubernetes: `^1.16.0-0`
 | autoscaling.targetCPUUtilizationPercentage | int | `60` | Target CPU utilisation percentage |
 | autoscaling.targetMemoryUtilizationPercentage | string | `nil` | Target memory utilisation percentage |
 | deploymentStrategy | object | `{}` | See `kubectl explain deployment.spec.strategy` for more ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy |
+| extraEnv | list | `[]` | Environment variables to add to the agent |
 | extraObjects | list | `[]` | Add dynamic manifests via values: |
 | fullnameOverride | string | `""` | Override the fullname of the chart. |
 | hostAliases | list | `[]` | hostAliases to add |
@@ -51,12 +48,12 @@ Kubernetes: `^1.16.0-0`
 | nodeSelector | object | `{}` | Node labels for pod assignment. |
 | podAnnotations | object | `{}` | Annotations to add to each pod. |
 | podLabels | object | `{}` | Labels to add to each pod. |
-| podSecurityContext | object | `{"fsGroup":65534}` | Security context on the Pod level. |
+| podSecurityContext | object | `{"fsGroup":12345}` | Security context on the Pod level. |
 | readinessProbe | object | `{"httpGet":{"path":"/ready","port":"http"}}` | Readiness probe for the agent |
 | replicaCount | int | `1` | Number of replicas to use; ignored if `autoscaling.enabled` is set to `true`. |
 | resources | object | `{}` | Default resources to apply. |
 | secret.existingSecret | string | `""` | Reference an existing secret for API token |
-| securityContext | object | `{"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534}` | Security context for the container level. |
+| securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"add":["NET_RAW"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":12345,"seccompProfile":{"type":"RuntimeDefault"}}` | Security context for the container level. |
 | service.annotations | object | `{}` | Annotations for the service |
 | service.port | int | `4050` | Service port. |
 | service.type | string | `"ClusterIP"` | Type of service to create. |
@@ -77,4 +74,4 @@ Kubernetes: `^1.16.0-0`
 | tolerations | list | `[]` | List of node taints to tolerate. |
 
 ----------------------------------------------
-Autogenerated from chart metadata using [helm-docs v1.8.1](https://github.com/norwoodj/helm-docs/releases/v1.8.1)
+Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)

charts/synthetic-monitoring-agent/templates/deployment.yaml

@@ -68,6 +68,9 @@ spec:
                 secretKeyRef:
                   key: api-token
                   name: {{ (tpl .Values.secret.existingSecret .) | default (include "synthetic-monitoring-agent.fullname" .) }}
+            {{- with .Values.extraEnv }}
+              {{- toYaml . | nindent 12 }}
+            {{- end }}
           name: {{ .Chart.Name }}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}

charts/synthetic-monitoring-agent/values.yaml

@@ -59,8 +59,11 @@ securityContext:
     add:
       - NET_RAW
   readOnlyRootFilesystem: true
+  allowPrivilegeEscalation: false
   runAsNonRoot: true
   runAsUser: 12345
+  seccompProfile:
+    type: RuntimeDefault
 
 # -- Default resources to apply.
 resources:
@@ -149,6 +152,9 @@ affinity: {}
 # -- Add dynamic manifests via values:
 extraObjects: []
 
+# -- Environment variables to add to the agent
+extraEnv: []
+
 secret:
 # -- Reference an existing secret for API token
   existingSecret: ""