Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fbnoroot2 #704

Open
wants to merge 28 commits into
base: main
Choose a base branch
from
Open
Changes from 1 commit
Commits
Show all changes
28 commits
Select commit Hold shift + click to select a range
1325139
[SECURITY] Eliminate need for root user for log collecting pods
gsmith-sas Oct 23, 2024
91f9825
Migrate DB, remove configmap
gsmith-sas Nov 1, 2024
faac84c
OpenShift-specific changes (still work-in-progress)
gsmith-sas Nov 8, 2024
4baf657
More OpenShift-specific changes
gsmith-sas Nov 13, 2024
112d8b0
Draft customized SCC
gsmith-sas Nov 14, 2024
9792c48
Rename SCC; add logic to create it as pre-requisite on OpenShift
gsmith-sas Nov 15, 2024
3f5465b
More OpenShift changes
gsmith-sas Nov 15, 2024
6b5dfe5
Start of sprint housekeeping
gsmith-sas Dec 10, 2024
88aadf8
Enable multiline parsing by default
gsmith-sas Dec 10, 2024
daabc0c
Improve handling of messages from CrunchyData exporter containers
gsmith-sas Dec 10, 2024
526e097
Improve handling of nginx controller messages
gsmith-sas Dec 10, 2024
0e82580
Revert "Improve handling of nginx controller messages"
gsmith-sas Dec 11, 2024
21867d2
Sync fbnoroot up to current stable
gsmith-sas Dec 11, 2024
0bdafef
Sync fbnoroot to include fbtweaks changes
gsmith-sas Dec 11, 2024
9baeee7
Add seccompProfile to Fluent Bit SCC
gsmith-sas Dec 11, 2024
6d52037
Move FB initContainer definition to template file to support airgap
gsmith-sas Dec 12, 2024
6da1358
Adjust pod/container security settings; tweak OpenShift config
gsmith-sas Dec 12, 2024
74ba925
Further tweaks
gsmith-sas Dec 12, 2024
f92e3cf
OpenShift Good - FB Log Collector
gsmith-sas Dec 13, 2024
81f1721
Remove changes to obsolete file
gsmith-sas Dec 13, 2024
cab2bfe
FB as K8s Event collector - security tweaks
gsmith-sas Dec 13, 2024
03d3efe
Remove v4m-k8sevents SCC during cleanup
gsmith-sas Dec 13, 2024
bc04657
Update CHANGELOG.md
gsmith-sas Dec 13, 2024
636337b
Update FB for alternate solution (Azure Monitor)
gsmith-sas Dec 13, 2024
18c1c4c
Futher tweaks re: alternate solution
gsmith-sas Dec 13, 2024
0f4e1d1
Further tweaks (2): alternate solution
gsmith-sas Dec 13, 2024
1fc0c7f
Revise ARTIFACT_INVENTORY.template to mention FB initContainer
gsmith-sas Dec 13, 2024
4f0e718
Remove cleanup logic from migrate script
gsmith-sas Dec 17, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
More OpenShift-specific changes
gsmith-sas committed Nov 13, 2024
commit 4baf657ae9119c90dabbd7bdb58865ec6759270e
1 change: 1 addition & 0 deletions logging/fb/fluent-bit_helm_values_opensearch.yaml
Original file line number Diff line number Diff line change
@@ -97,6 +97,7 @@ initContainers:
imagePullPolicy: IfNotPresent
command: ['sh', '-c', "./usr/bin/migrate_fbstate_db.sh"]
securityContext:
privileged: true
readOnlyRootFilesystem: true
capabilities:
drop: ["all"]
3 changes: 1 addition & 2 deletions logging/openshift/values-fluent-bit.yaml
Original file line number Diff line number Diff line change
@@ -3,5 +3,4 @@ securityContext:
openShift:
enabled: true
securityContextConstraints:
create: false
existingName: "privileged"
create: true