Add low-power mode setting to configuration

Author: Michael Chmielewski

README.md

@@ -57,6 +57,7 @@ The following kubernetes objects are created when the chart is installed:
 | daemonset.customTsAuditdConfig | string | `""` |  |
 | daemonset.enableContainerd | bool | `unset` | Configures the daemonset agents to listen to the containerd daemon socket. **By default in agent 2.4.0+, the agent detects if containerd is running at startup**  |
 | daemonset.enableDocker | bool | `unset` | Configures the daemonset agents to listen to the docker daemon socket. **By default in agent 2.4.0+, the agent detects if docker is running at startup** |
+| daemonset.enableLowPowerMode | bool | false | Configures the daemonset agents to perform better in tightly-resourced environments. The agent trades some telemetry reporting for reduced CPU and memory consumption. Ref: https://threatstack.zendesk.com/hc/en-us/articles/360016132692-Threat-Stack-Kubernetes-Deployment |
 | daemonset.nodeSelector | object | `{}` |  |
 | daemonset.podAnnotations."container.apparmor.security.beta.kubernetes.io/threatstack-agent" | string | `"unconfined"` |  |
 | daemonset.priorityClassName | string | `""` | Optionally set the priority class name for the daemonset pods. Note that priority classes are not created via this helm chart. Ref: https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/ |

templates/_helpers.tpl

@@ -87,3 +87,16 @@ Return runtime config if containerd is disabled
 {{- end -}}
 {{- end -}}
 {{- end -}}
+
+{{/*
+Return low-power config if setting is enabled
+*/}}
+{{- define "threatstack-agent.daemonset-lowpower-config" -}}
+{{- if kindIs "invalid" .Values.daemonset.enableLowPowerMode -}}
+{{- else -}}
+{{- if eq .Values.daemonset.enableLowPowerMode false -}}
+{{- else -}}
+{{- default "--low-power=true" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}

templates/secrets.yaml

@@ -10,5 +10,5 @@ metadata:
     app.kubernetes.io/managed-by: {{ .Release.Service }}
 type: Opaque
 stringData:
-  ts-setup-args: "--deploy-key {{ .Values.agentDeployKey }} --ruleset '{{ .Values.rulesets }}' {{ .Values.additionalSetupConfig }}"
+  ts-setup-args: "--deploy-key {{ .Values.agentDeployKey }} --ruleset '{{ .Values.rulesets }}' {{ include "threatstack-agent.daemonset-lowpower-config" . }} {{ .Values.additionalSetupConfig }}"
 {{- end -}}

values.yaml

@@ -169,6 +169,15 @@ daemonset:
   # enableDocker: false
   # enableContainerd: false
 
+  # Enable low-power mode
+  # Configures the daemonset agents to perform better in 
+  # tightly-resourced environments. The agent trades some telemetry
+  # reporting for reduced CPU and memory consumption.
+  #
+  # Ref: https://threatstack.zendesk.com/hc/en-us/articles/360016132692-Threat-Stack-Kubernetes-Deployment
+  #
+  enableLowPowerMode: true
+
   additionalRuntimeConfig: "log.level info"
   # Override the agent's liveness probe logic from the default:
   # In case of issues with the probe, you can disable it with the