kubecost/kubecost-cloud-agent

The Helm chart for the Kubecost Cloud agent install process

kubecost-cloud-agent's Issues

Update Installation Messaging

Our Kubecost Cloud Agent Installation contains remnants of our self-hosted product installation (i.e. port forwarding instructions). This messaging should be updated to be specific to the Kubecost Cloud Agent

Add support for proxy

If there is no issue proxying the agent traffic, we should add the same ENVs here that we use in the main helm chart.

https://github.com/kubecost/cost-analyzer-helm-chart/blob/349dab7c3b693b76e0fdd3809e681172871a40fa/cost-analyzer/templates/_helpers.tpl#L770-L781

Capability to create rule that adds team member with a specific email domain to a specific team by default.

Support GKE Autopilot

When running the helm install command given in the dashboard...

Release "kubecost-cloud" does not exist. Installing it now.
W0215 14:30:11.250680   80804 warnings.go:70] autopilot-default-resources-mutator:Autopilot updated DaemonSet kubecost-cloud/kubecost-cloud-network-costs: adjusted resources to meet requirements for containers [kubecost-cloud-network-costs] (see http://g.co/gke/autopilot-resources)
W0215 14:30:11.357355   80804 warnings.go:70] autopilot-default-resources-mutator:Autopilot updated Deployment kubecost-cloud/kubecost-cloud-prometheus-server: defaulted unspecified resources for containers [prometheus-server-configmap-reload, prometheus-server] (see http://g.co/gke/autopilot-defaults)
W0215 14:30:11.369829   80804 warnings.go:70] autopilot-default-resources-mutator:Autopilot updated Deployment kubecost-cloud/kubecost-cloud-cloud-agent: defaulted unspecified resources for containers [kubecost-cloud-cloud-agent] (see http://g.co/gke/autopilot-defaults)
Error: 1 error occurred:
	* admission webhook "warden-validating.common-webhooks.networking.gke.io" denied the request: GKE Warden rejected the request because it violates one or more constraints.
Violations details: {"[denied by autogke-disallow-hostnamespaces]":["enabling hostNetwork is not allowed in Autopilot."],"[denied by autogke-disallow-privilege]":["container kubecost-cloud-network-costs is privileged; not allowed in Autopilot"],"[denied by autogke-no-host-port]":["container kubecost-cloud-network-costs specifies host ports [3001], which are disallowed in Autopilot."],"[denied by autogke-no-write-mode-hostpath]":["hostPath volume nf-conntrack in container kubecost-cloud-network-costs is accessed in write mode; disallowed in Autopilot.","hostPath volume netfilter in container kubecost-cloud-network-costs is accessed in write mode; disallowed in Autopilot."]}

Use .Values.kubecostModel.extraEnv

We want to update LOG_FORMAT as documented here.

It looks like .Values.kubecostModel.extraEnv is unused, even though it is documented here in the default values.

Add support for BYO prometheus/custom tsdb

Get agent tls cert publicly verified

New image registry URL is suspicious

We noticed in the Kubecost Cloud dashboard that our agents were out of date, but the registry URL in the upgrade instructions is different from the previous versions. It is now gcr.io/kubecost1/cloud-agent. The kubecost1 publisher name is suspicious. Is this change legitimate? Or is this a malicious registry?

Possibility to set cloudAgentKey from secret

In guideline here you have description on setting `` through parameters.

The way how chart formed - it's not possible to set it through env variable from secret.

Please add this possibility