From cd55ad88dae3bf57691657d7bf7f320bda3478a3 Mon Sep 17 00:00:00 2001 From: Massimiliano Date: Sun, 9 Feb 2020 19:49:22 +0100 Subject: [PATCH 1/4] feat: support k8s 1.16 when deployed as DaemonSet update API resource version and remove deprecated one. Signed-off-by: maxgio92 --- .../falco-event-generator-deployment.yaml | 2 +- .../k8s-with-rbac/falco-daemonset-configmap-slim.yaml | 6 +++++- .../k8s-with-rbac/falco-daemonset-configmap.yaml | 6 +++++- .../k8s-without-rbac/falco-daemonset.yaml | 7 ++++++- 4 files changed, 17 insertions(+), 4 deletions(-) diff --git a/integrations/k8s-using-daemonset/falco-event-generator-deployment.yaml b/integrations/k8s-using-daemonset/falco-event-generator-deployment.yaml index 00789e8c681..ef3530cbe84 100644 --- a/integrations/k8s-using-daemonset/falco-event-generator-deployment.yaml +++ b/integrations/k8s-using-daemonset/falco-event-generator-deployment.yaml @@ -1,4 +1,4 @@ -apiVersion: extensions/v1beta1 +apiVersion: apps/v1 kind: Deployment metadata: name: falco-event-generator-deployment diff --git a/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml b/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml index 6baccb2a9c2..f468ee19470 100644 --- a/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml +++ b/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml @@ -1,4 +1,4 @@ -apiVersion: extensions/v1beta1 +apiVersion: apps/v1 kind: DaemonSet metadata: name: falco-daemonset @@ -6,6 +6,10 @@ metadata: app: falco-example role: security spec: + selector: + matchLabels: + app: falco-example + role: security template: metadata: labels: diff --git a/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap.yaml b/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap.yaml index 680c2a77d95..10c439522e3 100644 --- a/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap.yaml +++ b/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap.yaml @@ -1,4 +1,4 @@ -apiVersion: extensions/v1beta1 +apiVersion: apps/v1 kind: DaemonSet metadata: name: falco-daemonset @@ -6,6 +6,10 @@ metadata: app: falco-example role: security spec: + selector: + matchLabels: + app: falco-example + role: security template: metadata: labels: diff --git a/integrations/k8s-using-daemonset/k8s-without-rbac/falco-daemonset.yaml b/integrations/k8s-using-daemonset/k8s-without-rbac/falco-daemonset.yaml index 45614d2456d..e6e2eaeec83 100644 --- a/integrations/k8s-using-daemonset/k8s-without-rbac/falco-daemonset.yaml +++ b/integrations/k8s-using-daemonset/k8s-without-rbac/falco-daemonset.yaml @@ -1,4 +1,4 @@ -apiVersion: extensions/v1beta1 +apiVersion: apps/v1 kind: DaemonSet metadata: name: falco @@ -6,6 +6,11 @@ metadata: name: falco-daemonset app: demo spec: + selector: + matchLabels: + name: falco + app: demo + role: security template: metadata: labels: From f0239134d5cdb360234e30e0ceee5435f3234c7d Mon Sep 17 00:00:00 2001 From: Massimiliano Date: Sun, 9 Feb 2020 19:55:03 +0100 Subject: [PATCH 2/4] feat: support k8s 1.17 when deployed as DaemonSet update API resource version and remove deprecated one. Signed-off-by: maxgio92 --- .../k8s-using-daemonset/k8s-with-rbac/falco-account.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/integrations/k8s-using-daemonset/k8s-with-rbac/falco-account.yaml b/integrations/k8s-using-daemonset/k8s-with-rbac/falco-account.yaml index 0f7f9ace373..a079f1175e9 100644 --- a/integrations/k8s-using-daemonset/k8s-with-rbac/falco-account.yaml +++ b/integrations/k8s-using-daemonset/k8s-with-rbac/falco-account.yaml @@ -7,7 +7,7 @@ metadata: role: security --- kind: ClusterRole -apiVersion: rbac.authorization.k8s.io/v1beta1 +apiVersion: rbac.authorization.k8s.io/v1 metadata: name: falco-cluster-role labels: @@ -21,7 +21,7 @@ rules: verbs: ["get"] --- kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1beta1 +apiVersion: rbac.authorization.k8s.io/v1 metadata: name: falco-cluster-role-binding namespace: default From 4ae452eab27d83cef0e31ac1f916a756c218c294 Mon Sep 17 00:00:00 2001 From: Massimiliano Date: Tue, 14 Apr 2020 18:22:26 +0200 Subject: [PATCH 3/4] improvement(deployment): remove 1.16 deprecated deployment api group version replace extension/v1beta1 with 1.16-supported apps/v1 version as for release announcement BREAKING CHANGE: spec.rollbackTo is removed, spec.selector is now required and immutable after creation, spec.progressDeadlineSeconds now defaults to 600 seconds, spec.revisionHistoryLimit now defaults to 10, maxSurge and maxUnavailable now default to 25% issue #1043 Signed-off-by: maxgio92 --- .../k8s-using-deployment/falco-event-generator-deployment.yaml | 2 +- .../k8s-with-rbac/falco-k8s-audit-deployment.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/integrations/k8s-using-deployment/falco-event-generator-deployment.yaml b/integrations/k8s-using-deployment/falco-event-generator-deployment.yaml index 00789e8c681..ef3530cbe84 100644 --- a/integrations/k8s-using-deployment/falco-event-generator-deployment.yaml +++ b/integrations/k8s-using-deployment/falco-event-generator-deployment.yaml @@ -1,4 +1,4 @@ -apiVersion: extensions/v1beta1 +apiVersion: apps/v1 kind: Deployment metadata: name: falco-event-generator-deployment diff --git a/integrations/k8s-using-deployment/k8s-with-rbac/falco-k8s-audit-deployment.yaml b/integrations/k8s-using-deployment/k8s-with-rbac/falco-k8s-audit-deployment.yaml index fbb74bb28d9..7fa20351640 100644 --- a/integrations/k8s-using-deployment/k8s-with-rbac/falco-k8s-audit-deployment.yaml +++ b/integrations/k8s-using-deployment/k8s-with-rbac/falco-k8s-audit-deployment.yaml @@ -1,4 +1,4 @@ -apiVersion: extensions/v1beta1 +apiVersion: apps/v1 kind: Deployment metadata: name: falco-k8s-audit From 52c1b4f2336cac41e193b5e7683391e82e98bc57 Mon Sep 17 00:00:00 2001 From: Massimiliano Date: Tue, 14 Apr 2020 18:36:12 +0200 Subject: [PATCH 4/4] improvement(rbac): remove 1.17 deprecated rbac api group replace rbac.authorization.k8s.io/v1beta1 with rbac.authorization.k8s.io/v1 as for the changelog Signed-off-by: maxgio92 --- .../k8s-with-rbac/falco-k8s-audit-account.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/integrations/k8s-using-deployment/k8s-with-rbac/falco-k8s-audit-account.yaml b/integrations/k8s-using-deployment/k8s-with-rbac/falco-k8s-audit-account.yaml index 669bc57fd37..a0989932635 100644 --- a/integrations/k8s-using-deployment/k8s-with-rbac/falco-k8s-audit-account.yaml +++ b/integrations/k8s-using-deployment/k8s-with-rbac/falco-k8s-audit-account.yaml @@ -7,7 +7,7 @@ metadata: role: security --- kind: ClusterRole -apiVersion: rbac.authorization.k8s.io/v1beta1 +apiVersion: rbac.authorization.k8s.io/v1 metadata: name: falco-cluster-role labels: @@ -21,7 +21,7 @@ rules: verbs: ["get"] --- kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1beta1 +apiVersion: rbac.authorization.k8s.io/v1 metadata: name: falco-cluster-role-binding namespace: default