The Komodor Agent¶
Permissions¶
The Komodor agent uses the native RBAC model of Kubernetes. All the permissions are listed here:
ARM Support¶
Arm64 image is supported via docker manifest.
Advanced Configuration¶
You can configure the agent's functionality using the following configuration file: komodor-k8s-watcher.yaml
(assuming the RBAC permissions are satisfied).
A more detailed list of the configurable parameters can be found here
Data Redaction¶
Learn how to set up data redaction in Komodor
Resources¶
By default, the Komodor agent watches the majority of the resources in your cluster. You can enable/disable watching a resource using the following command:
- Helm:
--set watcher.resources.RESOURCE=true/off
- Kustomize: update the configuration file and the RBAC rule to have
get
,list
andwatch
permissions
Namespaces¶
The Komodor agent watches all the namespaces (by default watchNamespace=all
)
To watch a single namespace use the following command:
- Helm:
--set watcher.watchNamespace=NAMESPACE
- Kustomize: patch the configuration file
watchNamespace=NAMESPACE
Denylist¶
Using namespacesDenylist
you can opt list of namespaces
Agent Tasks¶
Agent tasks are used to interact with the cluster on demand, read more about interaction with the cluster here
To enable agent tasks (default is off
):
- Helm:
--set watcher.enableAgentTaskExecution=true && --set watcher.allowReadingPodLogs=true
- Kustomize: The
full
overlay already has this turned on. If you are building it manually frombase
, patch the configuration fileenableAgentTaskExecution=true
and make sure to have RBAC permissions toget
andlist
forpods
andpods/log
Environment Variables¶
Alternativly, you can pass the configuration as environment variables using the KOMOKW_
prefix and by replacing all the . to _, for the root items the camelcase transforms into underscores as well.
For example:
# apiKey
KOMOKW_API_KEY=1a2b3c4d5e6f7g7h
# watcher.resources.replicaSet
KOMOKW_RESOURCES_REPLICASET=false
# watcher.watchNamespace
KOMOKW_WATCH_NAMESPACE=my-namespace
# watcher.collectHistory
KOMOKW_COLLECT_HISTORY=true
Updating the agent¶
Kustomize¶
kubectl apply -n komodor -k https://github.com/komodorio/helm-charts/manifests/overlays/full/?ref=master
Helm¶
helm repo update
helm upgrade --install k8s-watcher komodorio/k8s-watcher --reuse-values
Uninstalling¶
Kustomize¶
kubectl delete ns komodor
Helm¶
helm uninstall k8s-watcher