Skip to content

fix: update deployment.yaml of traps not to use projected volume #287

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
omrozowicz-splunk merged 2 commits into from
Dec 21, 2021
Merged

fix: update deployment.yaml of traps not to use projected volume #287

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5be6771
fix: update deployment.yaml of traps not to use projected volume
omrozowicz-splunk Dec 21, 2021
55348b5
fix: update trap v3 docs
omrozowicz-splunk Dec 21, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
76 changes: 37 additions & 39 deletions charts/splunk-connect-for-snmp/templates/traps/deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -134,45 +134,43 @@ spec:
path: "config.yaml"
{{- if .Values.traps.usernameSecrets }}
- name: snmpv3-secrets
projected:
sources:
{{- range .Values.traps.usernameSecrets }}
{{- $secret := (lookup "v1" "Secret" $.Release.Namespace . ) -}}
{{- if $secret }}
- secret:
name: {{ . }}
items:
{{ if $secret.data.userName -}}
- key: userName
path: {{ . }}/userName
{{- end }}
{{ if $secret.data.authKey -}}
- key: authKey
path: {{ . }}/authKey
{{- end }}
{{ if $secret.data.privKey -}}
- key: privKey
path: {{ . }}/privKey
{{- end }}
{{ if $secret.data.authProtocol -}}
- key: authProtocol
path: {{ . }}/authProtocol
{{- end }}
{{ if $secret.data.privProtocol -}}
- key: privProtocol
path: {{ . }}/privProtocol
{{- end }}
{{ if $secret.data.contextEngineId -}}
- key: contextEngineId
path: {{ . }}/contextEngineId
{{- end }}
{{ if $secret.data.contextName -}}
- key: contextName
path: {{ . }}/contextName
{{- end }}
{{- end }}
{{- end }}
{{- end }}
{{- range .Values.traps.usernameSecrets }}
{{- $secret := (lookup "v1" "Secret" $.Release.Namespace . ) -}}
{{- if $secret }}
secret:
secretName: {{ . }}
items:
{{ if $secret.data.userName -}}
- key: userName
path: {{ . }}/userName
{{- end }}
{{ if $secret.data.authKey -}}
- key: authKey
path: {{ . }}/authKey
{{- end }}
{{ if $secret.data.privKey -}}
- key: privKey
path: {{ . }}/privKey
{{- end }}
{{ if $secret.data.authProtocol -}}
- key: authProtocol
path: {{ . }}/authProtocol
{{- end }}
{{ if $secret.data.privProtocol -}}
- key: privProtocol
path: {{ . }}/privProtocol
{{- end }}
{{ if $secret.data.contextEngineId -}}
- key: contextEngineId
path: {{ . }}/contextEngineId
{{- end }}
{{ if $secret.data.contextName -}}
- key: contextName
path: {{ . }}/contextName
{{- end }}
{{- end }}
{{- end }}
{{- end }}
- name: pysnmp-cache-volume
emptyDir: {}
- name: tmp
Expand Down
16 changes: 16 additions & 0 deletions docs/configuration/trap-configuration.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -64,6 +64,22 @@ traps:
- sc4snmp-homesecure-sha-aes
- sc4snmp-homesecure-sha-des
```

### Define security engine ID for SNMPv3

Security engine ID variable is necessary when sending SNMPv3 traps. By default it is set to
`8000000903000A397056B8AC`. It has to match the `-e` string in snmptrap.

Example:
```yaml
traps:
securityEngineId: "8000000903000A397056B8AC"
```
An example of SNMPv3 trap is:
```yaml
snmptrap -v3 -l authPriv -u snmp-poller -a SHA -A PASSWORD1 -x AES -X PASSWORD1 10.202.13.233 '' 1.3.6.1.2.1.2.2.1.1.1
```

### Define load balancer IP
`loadBalancerIP` is the IP address in the metallb pool.
Example:
Expand Down