falcosecurity / charts

Community managed Helm charts for running Falco with Kubernetes
Apache License 2.0
230 stars 280 forks source link

ImagePullSecrets not consistent across Charts #673

Open rriverak opened 2 months ago

rriverak commented 2 months ago

Describe the bug

If we install the latest Version of falcosecurity/falco Chart with a custom ImagePullSecrets we got a different rendering behavior from the Sidekick Subcharts.

How to reproduce it

Install the falcosecurity/falco Chart with custom ImagePullSecrets for Falco and Falcosidekick.

imagePullSecrets: 
  - name: my-secret

falcosidekick:
  enabled: true
  imagePullSecrets:
    - name: my-secret

the Manifest for the falco Chart itself everything looks good.

imagePullSecrets:
  - name: my-secret

but on the Sidekick Subchart we got a broken entry:

imagePullSecrets:
  - name: map[name:my-secret]

Quickfix In order to generate a valid manifest, the key "name" must be removed from the imagePullSecrets list in Falcosidekick.

imagePullSecrets: 
  - name: my-secret

falcosidekick:
  enabled: true
  imagePullSecrets:
    - my-secret

Expected behaviour

Same interpolation logic across all charts or add at least a Note to the Docs.

Issif commented 2 months ago

You're right. Thanks for the notice.

Basically, we have 2 behaviors here:

Right now, the imagePullSecrets field for the deployments/pods can only have a name but it would make sense in the future to have more options, so it seems better to consider a list of objects and not a list of strings. I'll change the behavior in Falcosidekick chart to have consistency.