[POA-3228] Add POSTMAN_INSIGHTS_DISABLE_REPRO_MODE env var at pod level (#93)

This pull request includes changes to add a new
`POSTMAN_INSIGHTS_DISABLE_REPRO_MODE` environment variable to explicitly
disable repro mode at the pod level.

### New ReproMode attribute at `PodArgs` level:

* `cmd/internal/kube/daemonset/constants.go`: Added a new environment
variable `POSTMAN_INSIGHTS_DISABLE_REPRO_MODE` to control the ReproMode
feature at the pod level.
* `cmd/internal/kube/daemonset/pod_args.go`: Updated the `PodArgs`
struct to include a new `ReproMode` boolean field.
* `cmd/internal/kube/daemonset/apidump_process.go`: Modified the
`StartApiDumpProcess` method to use the new `ReproMode` field from
`podArgs` instead of `d.InsightsReproModeEnabled`.

### Pod Environment Variables Inspection:

* `cmd/internal/kube/daemonset/kube_events_worker.go`: 
* Introduced a new `containerConfig` struct to encapsulate the required
container configuration and the new `disableReproMode` field. Updated
the `inspectPodForEnvVars` function to populate and use this new struct.
* Set the pod level `reproMode` attribute based on the daemonset repro
mode and env variable from the pod

### Telemetry Logging:

* `cmd/internal/kube/daemonset/telemetry.go`: Enhanced the
`dumpPodsApiDumpProcessState` function to include the `ReproMode` status
in the log output.

Author: mudit-postman

cmd/internal/kube/daemonset/apidump_process.go

@@ -84,7 +84,7 @@ func (d *Daemonset) StartApiDumpProcess(podUID types.UID) error {
 			CollectTCPAndTLSReports: apispec.DefaultCollectTCPAndTLSReports,
 			ParseTLSHandshakes:      apispec.DefaultParseTLSHandshakes,
 			MaxWitnessSize_bytes:    apispec.DefaultMaxWitnessSize_bytes,
-			ReproMode:               d.InsightsReproModeEnabled,
+			ReproMode:               podArgs.ReproMode,
 			DaemonsetArgs: optionals.Some(apidump.DaemonsetArgs{
 				TargetNetworkNamespaceOpt: networkNamespace,
 				StopChan:                  podArgs.StopChan,

cmd/internal/kube/daemonset/constants.go

@@ -4,8 +4,9 @@ import "time"
 
 const (
 	// Pod environment variables
-	POSTMAN_INSIGHTS_PROJECT_ID = "POSTMAN_INSIGHTS_PROJECT_ID"
-	POSTMAN_INSIGHTS_API_KEY    = "POSTMAN_INSIGHTS_API_KEY"
+	POSTMAN_INSIGHTS_PROJECT_ID         = "POSTMAN_INSIGHTS_PROJECT_ID"
+	POSTMAN_INSIGHTS_API_KEY            = "POSTMAN_INSIGHTS_API_KEY"
+	POSTMAN_INSIGHTS_DISABLE_REPRO_MODE = "POSTMAN_INSIGHTS_DISABLE_REPRO_MODE"
 
 	// Daemonset environment variables
 	POSTMAN_INSIGHTS_ENV                = "POSTMAN_ENV" // This is same as root POSTMAN_ENV

cmd/internal/kube/daemonset/kube_events_worker.go

@@ -2,6 +2,7 @@ package daemonset
 
 import (
 	"fmt"
+	"strconv"
 
 	"github.com/akitasoftware/akita-libs/akid"
 	"github.com/akitasoftware/go-utils/maps"
@@ -41,6 +42,11 @@ type requiredContainerConfig struct {
 	apiKey    string
 }
 
+type containerConfig struct {
+	requiredContainerConfig requiredContainerConfig
+	disableReproMode        string
+}
+
 // handlePodAddEvent handles the event when a pod is added to the Kubernetes cluster.
 // It performs the following steps:
 // 1. Check if the pod does not have the agent sidecar container.
@@ -168,7 +174,7 @@ func (d *Daemonset) inspectPodForEnvVars(pod coreV1.Pod, podArgs *PodArgs) error
 		return errors.New("no running containers found in the pod")
 	}
 
-	containerConfigMap := maps.NewMap[string, requiredContainerConfig]()
+	containerConfigMap := maps.NewMap[string, containerConfig]()
 
 	// Iterate over all containers in the pod to check for the required environment variables
 	for _, containerUUID := range containerUUIDs {
@@ -178,23 +184,30 @@ func (d *Daemonset) inspectPodForEnvVars(pod coreV1.Pod, podArgs *PodArgs) error
 			continue
 		}
 
-		containerEnvVars := requiredContainerConfig{}
+		containerEnvVars := containerConfig{
+			requiredContainerConfig: requiredContainerConfig{},
+		}
 		if projectID, exists := envVars[POSTMAN_INSIGHTS_PROJECT_ID]; exists {
-			containerEnvVars.projectID = projectID
+			containerEnvVars.requiredContainerConfig.projectID = projectID
 		}
 		if apiKey, exists := envVars[POSTMAN_INSIGHTS_API_KEY]; exists {
-			containerEnvVars.apiKey = apiKey
+			containerEnvVars.requiredContainerConfig.apiKey = apiKey
+		}
+		if disableReproMode, exists := envVars[POSTMAN_INSIGHTS_DISABLE_REPRO_MODE]; exists {
+			containerEnvVars.disableReproMode = disableReproMode
 		}
 		containerConfigMap[containerUUID] = containerEnvVars
 	}
 
 	mainContainerUUID := ""
-	mainContainerConfig := requiredContainerConfig{}
+	mainContainerConfig := containerConfig{
+		requiredContainerConfig: requiredContainerConfig{},
+	}
 	mainContainerMissingAttrs := []string{}
 	maxSetAttrs := -1
 
 	for uuid, config := range containerConfigMap {
-		attrCount, missingAttrs := countSetAttributes(config)
+		attrCount, missingAttrs := countSetAttributes(config.requiredContainerConfig)
 		if attrCount > maxSetAttrs {
 			maxSetAttrs = attrCount
 			mainContainerMissingAttrs = missingAttrs
@@ -227,15 +240,34 @@ func (d *Daemonset) inspectPodForEnvVars(pod coreV1.Pod, podArgs *PodArgs) error
 	deployment.SetK8sTraceTags(pod, podArgs.TraceTags)
 
 	podArgs.ContainerUUID = mainContainerUUID
-	err = akid.ParseIDAs(mainContainerConfig.projectID, &podArgs.InsightsProjectID)
+	err = akid.ParseIDAs(mainContainerConfig.requiredContainerConfig.projectID, &podArgs.InsightsProjectID)
 	if err != nil {
 		return errors.Wrap(err, "failed to parse project ID")
 	}
 	podArgs.PodCreds = PodCreds{
-		InsightsAPIKey:      mainContainerConfig.apiKey,
+		InsightsAPIKey:      mainContainerConfig.requiredContainerConfig.apiKey,
 		InsightsEnvironment: d.InsightsEnvironment,
 	}
 
+	// Determine ReproMode flag for the apidump process
+	podArgs.ReproMode = d.InsightsReproModeEnabled
+
+	if !d.InsightsReproModeEnabled {
+		printer.Infof("Repro mode is disabled at the DaemonSet level for pod: %s\n", pod.Name)
+		return nil
+	}
+
+	// Check if ReproMode is explicitly disabled at the pod level
+	if mainContainerConfig.disableReproMode != "" {
+		reproModeDisabled, err := strconv.ParseBool(mainContainerConfig.disableReproMode)
+		if err != nil {
+			printer.Errorf("Invalid disableReproMode value for pod: %s, error: %v. Defaulting to DaemonSet-level setting.\n", pod.Name, err)
+		} else if reproModeDisabled {
+			podArgs.ReproMode = false
+			printer.Infof("Repro mode is explicitly disabled at the pod level for pod: %s\n", pod.Name)
+		}
+	}
+
 	return nil
 }
 

cmd/internal/kube/daemonset/pod_args.go

@@ -42,6 +42,7 @@ type PodArgs struct {
 	// apidump related fields
 	InsightsProjectID akid.ServiceID
 	TraceTags         tags.SingletonTags
+	ReproMode         bool
 
 	// Pod related fields
 	PodName       string

cmd/internal/kube/daemonset/telemetry.go

@@ -35,15 +35,16 @@ func (d *Daemonset) dumpPodsApiDumpProcessState() {
 	logf("Dumping pods api dump process state, time: %s\n", time.Now().UTC())
 
 	logf(hrBr)
-	logf(" %-30v%-30v%-40v%-70v\n", "projectID", "currentState", "podUID", "podName")
+	logf(" %-30v%-30v%-10v%-40v%-70v\n", "projectID", "currentState", "reproMode", "podUID", "podName")
 	logf(hrBr)
 
 	d.PodArgsByNameMap.Range(func(k, v interface{}) bool {
 		podUID := k.(types.UID)
 		podArgs := v.(*PodArgs)
-		logf(" %-30v%-30v%-40v%-70v\n",
+		logf(" %-30v%-30v%-10v%-40v%-70v\n",
 			podArgs.InsightsProjectID,
 			podArgs.PodTrafficMonitorState,
+			podArgs.ReproMode,
 			podUID,
 			podArgs.PodName,
 		)