node-agent: add the trackPublicNetworks option

Author: apetruhin

api/v1/coroot_types.go

@@ -70,6 +70,9 @@ type NodeAgentSpec struct {
 	LogCollector LogCollectorSpec `json:"logCollector,omitempty"`
 	EbpfTracer   EbpfTracerSpec   `json:"ebpfTracer,omitempty"`
 	EbpfProfiler EbpfProfilerSpec `json:"ebpfProfiler,omitempty"`
+
+	// Allow track connections to the specified IP networks (e.g., Y.Y.Y.Y/mask, default: 0.0.0.0/0).
+	TrackPublicNetworks []string `json:"trackPublicNetworks,omitempty"`
 }
 
 type LogCollectorSpec struct {

api/v1/zz_generated.deepcopy.go

@@ -5999,6 +5999,12 @@ spec:
                           type: string
                       type: object
                     type: array
+                  trackPublicNetworks:
+                    description: 'Allow track connections to the specified IP networks
+                      (e.g., Y.Y.Y.Y/mask, default: 0.0.0.0/0).'
+                    items:
+                      type: string
+                    type: array
                   update_strategy:
                     description: DaemonSetUpdateStrategy is a struct used to control
                       the update strategy for a DaemonSet.

config/crd/coroot.com_coroots.yaml

@@ -54,6 +54,9 @@ func (r *CorootReconciler) nodeAgentDaemonSet(cr *corootv1.Coroot) *appsv1.Daemo
 	if v := cr.Spec.NodeAgent.EbpfProfiler.Enabled; v == nil || *v {
 		env = append(env, corev1.EnvVar{Name: "PROFILES_ENDPOINT", Value: corootURL + "/v1/profiles"})
 	}
+	if v := cr.Spec.NodeAgent.TrackPublicNetworks; len(v) > 0 {
+		env = append(env, corev1.EnvVar{Name: "TRACK_PUBLIC_NETWORK", Value: strings.Join(v, "\n")})
+	}
 
 	for _, e := range cr.Spec.NodeAgent.Env {
 		env = append(env, e)