parca version bump, and upstream merges

rlex · Dec 22, 2021 · 9590f6e · 9590f6e
1 parent 09456c4
commit 9590f6e
Show file tree

Hide file tree

Showing 5 changed files with 22 additions and 37 deletions.
diff --git a/charts/parca/Chart.yaml b/charts/parca/Chart.yaml
@@ -20,10 +20,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.2.3
+version: 1.3.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "v0.5.0"
+appVersion: "v0.6.1"
diff --git a/charts/parca/README.md b/charts/parca/README.md
@@ -1,6 +1,6 @@
 # parca
 
-![Version: 1.2.0](https://img.shields.io/badge/Version-1.2.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v0.2.3](https://img.shields.io/badge/AppVersion-v0.2.3-informational?style=flat-square)
+![Version: 1.3.0](https://img.shields.io/badge/Version-1.3.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v0.6.1](https://img.shields.io/badge/AppVersion-v0.6.1-informational?style=flat-square)
 
 Open Source Infrastructure-wide continuous profiling
 
@@ -32,7 +32,7 @@ parca.dev/port: 'debug'
 | agent.enabled | bool | `true` | Allows disabling parca agent |
 | agent.image.pullPolicy | string | `"IfNotPresent"` | Overrides pullpolicy |
 | agent.image.repository | string | `"ghcr.io/parca-dev/parca-agent"` | Overrides the image repository |
-| agent.image.tag | string | `"v0.1.0"` | Overrides the image tag |
+| agent.image.tag | string | `"v0.3.0"` | Overrides the image tag |
 | agent.logLevel | string | `"info"` | Agent log level |
 | agent.nodeSelector | object | `{}` | node selector for scheduling agent pods |
 | agent.podAnnotations | object | `{}` | Additional annotations for pods |
@@ -60,7 +60,7 @@ parca.dev/port: 'debug'
 | server.corsAllowedOrigins | string | `"*"` | CORS setting |
 | server.image.pullPolicy | string | `"IfNotPresent"` | Overrides pull policy for server |
 | server.image.repository | string | `"ghcr.io/parca-dev/parca"` | Overrides the image repository for server |
-| server.image.tag | string | `"v0.1.0"` | Overrides the image tag for server |
+| server.image.tag | string | `"v0.6.1"` | Overrides the image tag for server |
 | server.logLevel | string | `"info"` | logging level of parca server |
 | server.nodeSelector | object | `{}` | node selector for scheduling server pod |
 | server.podAnnotations | object | `{}` | additional annotations for server pod |

diff --git a/charts/parca/templates/agent-daemonset.yaml b/charts/parca/templates/agent-daemonset.yaml
@@ -57,34 +57,24 @@ spec:
           securityContext:
             {{- toYaml .Values.agent.securityContext | nindent 12 }}
           volumeMounts:
-          - mountPath: /host/root
-            name: root
-            readOnly: true
-          - mountPath: /host/proc
-            name: proc
-            readOnly: true
-          - mountPath: /run
-            name: run
-          - mountPath: /lib/modules
-            name: modules
-          - mountPath: /sys/kernel/debug
-            name: debugfs
-          - mountPath: /sys/fs/cgroup
-            name: cgroup
-          - mountPath: /sys/fs/bpf
-            name: bpffs
-          - mountPath: /etc/localtime
-            name: localtime
+        - mountPath: /tmp
+          name: tmp
+        - mountPath: /run
+          name: run
+        - mountPath: /lib/modules
+          name: modules
+        - mountPath: /sys/kernel/debug
+          name: debugfs
+        - mountPath: /sys/fs/cgroup
+          name: cgroup
+        - mountPath: /sys/fs/bpf
+          name: bpffs
           resources:
             {{- toYaml .Values.agent.resources | nindent 12 }}
       hostPID: true
       volumes:
-      - hostPath:
-          path: /
-        name: root
-      - hostPath:
-          path: /proc
-        name: proc
+      - emptyDir: {}
+        name: tmp
       - hostPath:
           path: /run
         name: run
@@ -100,9 +90,6 @@ spec:
       - hostPath:
           path: /sys/kernel/debug
         name: debugfs
-      - hostPath:
-          path: /etc/localtime
-        name: localtime
       serviceAccountName: {{ include "parca.serviceAccountName" . }}
       {{- with .Values.agent.tolerations }}
       tolerations:

diff --git a/charts/parca/templates/agent-podsecuritypolicy.yaml b/charts/parca/templates/agent-podsecuritypolicy.yaml
@@ -10,11 +10,8 @@ spec:
   allowedCapabilities:
   - '*'
   allowedHostPaths:
-  - pathPrefix: /proc
   - pathPrefix: /sys
-  - pathPrefix: /
-  - pathPrefix: /lib
-  - pathPrefix: /etc
+  - pathPrefix: /lib/modules
   fsGroup:
     rule: RunAsAny
   hostIPC: true

diff --git a/charts/parca/values.yaml b/charts/parca/values.yaml
@@ -28,6 +28,7 @@ agent:
   # -- Security context, needs to be prilileged for ful functionality
   securityContext:
     privileged: true
+    readOnlyRootFilesystem: true
   service:
     # -- service type for agent
     type: ClusterIP
@@ -55,7 +56,7 @@ server:
     # -- Overrides pull policy for server
     pullPolicy: IfNotPresent
     # -- Overrides the image tag for server
-    tag: "v0.5.0"
+    tag: "v0.6.1"
   # -- Sets retention period for server TSDB
   retentionTime: 6h
   # -- logging level of parca server