Skip to content

Commit dd6ae7c

Browse files
committed
operator: add karmor.yaml field in configmap
Signed-off-by: tesla59 <[email protected]>
1 parent a187cdb commit dd6ae7c

File tree

2 files changed

+15
-0
lines changed

2 files changed

+15
-0
lines changed

pkg/KubeArmorOperator/common/defaults.go

+2
Original file line numberDiff line numberDiff line change
@@ -75,6 +75,8 @@ var (
7575

7676
// KubeArmorConfigMapName string = "kubearmor-config"
7777

78+
KubeArmorConfigFileName string = "karmor.yaml"
79+
7880
// ConfigMap Data
7981
ConfigGRPC string = "gRPC"
8082
ConfigVisibility string = "visibility"

pkg/KubeArmorOperator/internal/controller/cluster.go

+13
Original file line numberDiff line numberDiff line change
@@ -1255,35 +1255,43 @@ func UpdateRecommendedPolicyConfig(config *opv1.KubeArmorConfigSpec) bool {
12551255

12561256
func UpdateConfigMapData(config *opv1.KubeArmorConfigSpec) bool {
12571257
updated := false
1258+
configMapData := ""
1259+
12581260
if config.DefaultFilePosture != "" {
12591261
if common.ConfigMapData[common.ConfigDefaultFilePosture] != string(config.DefaultFilePosture) {
12601262
common.ConfigMapData[common.ConfigDefaultFilePosture] = string(config.DefaultFilePosture)
12611263
updated = true
12621264
}
1265+
configMapData += fmt.Sprintf("defaultFilePosture: %s\n", config.DefaultFilePosture)
12631266
}
12641267
if config.DefaultCapabilitiesPosture != "" {
12651268
if common.ConfigMapData[common.ConfigDefaultCapabilitiesPosture] != string(config.DefaultCapabilitiesPosture) {
12661269
common.ConfigMapData[common.ConfigDefaultCapabilitiesPosture] = string(config.DefaultCapabilitiesPosture)
12671270
updated = true
12681271
}
1272+
configMapData += fmt.Sprintf("defaultCapabilitiesPosture: %s\n", config.DefaultCapabilitiesPosture)
12691273
}
12701274
if config.DefaultNetworkPosture != "" {
12711275
if common.ConfigMapData[common.ConfigDefaultNetworkPosture] != string(config.DefaultNetworkPosture) {
12721276
common.ConfigMapData[common.ConfigDefaultNetworkPosture] = string(config.DefaultNetworkPosture)
12731277
updated = true
12741278
}
1279+
configMapData += fmt.Sprintf("defaultNetworkPosture: %s\n", config.DefaultNetworkPosture)
12751280
}
12761281
if config.DefaultVisibility != "" {
12771282
if common.ConfigMapData[common.ConfigVisibility] != config.DefaultVisibility {
12781283
common.ConfigMapData[common.ConfigVisibility] = config.DefaultVisibility
12791284
updated = true
12801285
}
1286+
configMapData += fmt.Sprintf("defaultVisibility: %s\n", config.DefaultVisibility)
12811287
}
12821288
AlertThrottlingEnabled := strconv.FormatBool(config.AlertThrottling)
12831289
if common.ConfigMapData[common.ConfigAlertThrottling] != AlertThrottlingEnabled {
12841290
common.ConfigMapData[common.ConfigAlertThrottling] = AlertThrottlingEnabled
12851291
updated = true
12861292
}
1293+
configMapData += fmt.Sprintf("alertThrottling: %t\n", config.AlertThrottling)
1294+
12871295
MaxAlertPerSec := strconv.FormatInt(int64(config.MaxAlertPerSec), 10)
12881296
if config.MaxAlertPerSec == 0 {
12891297
MaxAlertPerSec = common.DefaultMaxAlertPerSec
@@ -1292,6 +1300,7 @@ func UpdateConfigMapData(config *opv1.KubeArmorConfigSpec) bool {
12921300
common.ConfigMapData[common.ConfigMaxAlertPerSec] = MaxAlertPerSec
12931301
updated = true
12941302
}
1303+
configMapData += fmt.Sprintf("maxAlertPerSec: %s\n", MaxAlertPerSec)
12951304

12961305
ThrottleSec := strconv.FormatInt(int64(config.ThrottleSec), 10)
12971306
if config.ThrottleSec == 0 {
@@ -1301,6 +1310,10 @@ func UpdateConfigMapData(config *opv1.KubeArmorConfigSpec) bool {
13011310
common.ConfigMapData[common.ConfigThrottleSec] = ThrottleSec
13021311
updated = true
13031312
}
1313+
configMapData += fmt.Sprintf("throttleSec: %s\n", ThrottleSec)
1314+
1315+
common.ConfigMapData[common.KubeArmorConfigFileName] = configMapData
1316+
13041317
return updated
13051318
}
13061319

0 commit comments

Comments
 (0)