diff --git a/lacework-agent/templates/daemonset.yaml b/lacework-agent/templates/daemonset.yaml index 14bf669..1b4f123 100644 --- a/lacework-agent/templates/daemonset.yaml +++ b/lacework-agent/templates/daemonset.yaml @@ -113,6 +113,9 @@ spec: readOnly: true - name: podinfo mountPath: /etc/podinfo + {{- if .Values.volumeMounts }} + {{- toYaml .Values.volumeMounts | nindent 10 }} + {{- end }} {{- if kindIs "string" (.Values.laceworkConfig).serviceAccountName }} serviceAccountName: {{ (.Values.laceworkConfig).serviceAccountName | quote }} {{- end}} @@ -181,6 +184,9 @@ spec: - path: "namespace" fieldRef: fieldPath: metadata.namespace + {{- if .Values.volumes }} + {{- toYaml .Values.volumes | nindent 8 }} + {{- end }} updateStrategy: {{ toYaml (.Values.daemonset).updateStrategy | indent 4 }} {{- end }} diff --git a/lacework-agent/values.schema.json b/lacework-agent/values.schema.json index a10c654..2cf6a9f 100644 --- a/lacework-agent/values.schema.json +++ b/lacework-agent/values.schema.json @@ -576,6 +576,22 @@ }, "additionalProperties": false }, + "volumes": { + "type": "array", + "default": [], + "description": "Array of Additional Volumes", + "items": { + "type": "object" + } + }, + "volumeMounts": { + "type": "array", + "default": [], + "description": "Array of Additional Volume Mounts", + "items": { + "type": "object" + } + }, "resources": { "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements", "description": "Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/" diff --git a/lacework-agent/values.yaml b/lacework-agent/values.yaml index 5c85ff0..295a3ce 100644 --- a/lacework-agent/values.yaml +++ b/lacework-agent/values.yaml @@ -11,6 +11,15 @@ image: # imagePullSecrets: # - name: CustomerRegistrKeySecretName overrideValue: + +# [Optional] Additional Volumes for the agent Pod. +# https://kubernetes.io/docs/concepts/storage/volumes/ +volumes: [] + +# [Optional] Additional Volume Mounts for the agent container. +# (https://kubernetes.io/docs/concepts/storage/volumes/ +volumeMounts: [] + resources: # The requests/limits is guidance and should be adjusted based on the workload # Please contact Lacework support for additional details