Bump chart and app versions for new agent and Added an additional configuration option in values.yaml

Author: Michael Chmielewski

Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 name: threatstack-agent
-version: 2.0.0
-appVersion: 2.3.0
+version: 2.1.0
+appVersion: 2.3.1
 description: A Helm chart for the Threat Stack Cloud Security Agent
 keywords:
 - security

templates/configmap.yaml

@@ -13,3 +13,6 @@ data:
 {{- if .Values.daemonset.customAuditRules }}
   custom-audit-rules-content: {{ toYaml .Values.daemonset.customAuditRules | indent 4 }}
 {{- end }}
+{{- if .Values.daemonset.customTsAuditd }}
+  custom-tsauditd-config: {{ toYaml .Values.daemonset.customTsAuditd | indent 4 }}
+{{- end }}

templates/daemonset.yaml

@@ -127,6 +127,11 @@ spec:
           - name: custom-audit-rules
             mountPath: /opt/threatstack/etc/audit-custom.rules
             subPath: audit-custom.rules
+{{- end }}
+{{- if .Values.daemonset.customTsAuditd }}
+          - name: custom-tsauditd-config
+            mountPath: /opt/threatstack/etc/tsauditd-custom.cfg
+            subPath: tsauditd-custom.cfg
 {{- end }}
       volumes:
         - hostPath:
@@ -149,3 +154,11 @@ spec:
               - key: custom-audit-rules-content
                 path: audit-custom.rules
 {{- end }}
+{{- if .Values.daemonset.customTsAuditd }}
+        - name: custom-tsauditd-config
+          configMap:
+            name: {{ include "threatstack-agent.name" . }}-config-args
+            items:
+              - key: custom-tsauditd-config
+                path: tsauditd-custom.cfg
+{{- end }}

values.yaml

@@ -212,3 +212,14 @@ daemonset:
   #     the end
   #
   customAuditRules: ""
+
+  # Override this to provide custom auditd config
+  # https://threatstack.zendesk.com/hc/en-us/articles/360030897272-FAQ-Workaround-for-the-Known-Linux-Limitation-with-auditd
+  #
+  # Example:
+  #   customTsAuditdConfig: |
+  #     {
+  #       ...
+  #     }
+  #
+  customTsAuditdConfig: ""