k8s: Add comment around hostUsers for Universal Profiling deployments (#9847)

In order to set procMount to Unmasked, the additional setting hostUsers net to be set to false.

Signed-off-by: Florian Lehner <[email protected]>

Author: florianl

deploy/kubernetes/elastic-agent-kustomize/default/elastic-agent-managed/base/elastic-agent-managed-daemonset.yaml

@@ -24,6 +24,9 @@ spec:
           effect: NoSchedule
       serviceAccountName: elastic-agent
       hostNetwork: true
+      # The following setting is needed for Universal Profiling to allow to set procMount to "Unmasked".
+      # If you are using the Universal Profiling integration, please uncomment the following line before applying.
+      # hostUsers: false
       dnsPolicy: ClusterFirstWithHostNet
       containers:
         - name: elastic-agent

deploy/kubernetes/elastic-agent-kustomize/default/elastic-agent-standalone/base/elastic-agent-standalone-daemonset.yaml

@@ -24,6 +24,9 @@ spec:
           effect: NoSchedule
       serviceAccountName: elastic-agent-standalone
       hostNetwork: true
+      # The following setting is needed for Universal Profiling to allow to set procMount to "Unmasked".
+      # If you are using the Universal Profiling integration, please uncomment the following line before applying.
+      # hostUsers: false
       dnsPolicy: ClusterFirstWithHostNet
       # Uncomment if using hints feature
       #initContainers:

deploy/kubernetes/elastic-agent-kustomize/ksm-autosharding/elastic-agent-managed/base/elastic-agent-managed-daemonset.yaml

@@ -24,6 +24,9 @@ spec:
           effect: NoSchedule
       serviceAccountName: elastic-agent
       hostNetwork: true
+      # The following setting is needed for Universal Profiling to allow to set procMount to "Unmasked".
+      # If you are using the Universal Profiling integration, please uncomment the following line before applying.
+      # hostUsers: false
       dnsPolicy: ClusterFirstWithHostNet
       containers:
         - name: elastic-agent

deploy/kubernetes/elastic-agent-kustomize/ksm-autosharding/elastic-agent-managed/extra/elastic-agent-managed-statefulset.yaml

@@ -24,6 +24,9 @@ spec:
           effect: NoSchedule
       serviceAccountName: elastic-agent
       hostNetwork: false
+      # The following setting is needed for Universal Profiling to allow to set procMount to "Unmasked".
+      # If you are using the Universal Profiling integration, please uncomment the following line before applying.
+      # hostUsers: false
       dnsPolicy: ClusterFirstWithHostNet
       containers:
         - name: elastic-agent

deploy/kubernetes/elastic-agent-kustomize/ksm-autosharding/elastic-agent-standalone/base/elastic-agent-standalone-daemonset.yaml

@@ -24,6 +24,9 @@ spec:
           effect: NoSchedule
       serviceAccountName: elastic-agent-standalone
       hostNetwork: true
+      # The following setting is needed for Universal Profiling to allow to set procMount to "Unmasked".
+      # If you are using the Universal Profiling integration, please uncomment the following line before applying.
+      # hostUsers: false
       dnsPolicy: ClusterFirstWithHostNet
       # Uncomment if using hints feature
       #initContainers:

deploy/kubernetes/elastic-agent-kustomize/ksm-autosharding/elastic-agent-standalone/extra/elastic-agent-standalone-statefulset.yaml

@@ -24,6 +24,9 @@ spec:
           effect: NoSchedule
       serviceAccountName: elastic-agent-standalone
       hostNetwork: false
+      # The following setting is needed for Universal Profiling to allow to set procMount to "Unmasked".
+      # If you are using the Universal Profiling integration, please uncomment the following line before applying.
+      # hostUsers: false
       dnsPolicy: ClusterFirstWithHostNet
       # Uncomment if using hints feature
       #initContainers:

deploy/kubernetes/elastic-agent-managed-kubernetes.yaml

@@ -24,6 +24,9 @@ spec:
           effect: NoSchedule
       serviceAccountName: elastic-agent
       hostNetwork: true
+      # The following setting is needed for Universal Profiling to allow to set procMount to "Unmasked".
+      # If you are using the Universal Profiling integration, please uncomment the following line before applying.
+      # hostUsers: false
       dnsPolicy: ClusterFirstWithHostNet
       containers:
         - name: elastic-agent

deploy/kubernetes/elastic-agent-managed/elastic-agent-managed-daemonset.yaml

@@ -24,6 +24,9 @@ spec:
           effect: NoSchedule
       serviceAccountName: elastic-agent
       hostNetwork: true
+      # The following setting is needed for Universal Profiling to allow to set procMount to "Unmasked".
+      # If you are using the Universal Profiling integration, please uncomment the following line before applying.
+      # hostUsers: false
       dnsPolicy: ClusterFirstWithHostNet
       containers:
         - name: elastic-agent

deploy/kubernetes/elastic-agent-standalone-kubernetes.yaml

@@ -700,6 +700,9 @@ spec:
           effect: NoSchedule
       serviceAccountName: elastic-agent-standalone
       hostNetwork: true
+      # The following setting is needed for Universal Profiling to allow to set procMount to "Unmasked".
+      # If you are using the Universal Profiling integration, please uncomment the following line before applying.
+      # hostUsers: false
       dnsPolicy: ClusterFirstWithHostNet
       # Uncomment if using hints feature
       #initContainers:

deploy/kubernetes/elastic-agent-standalone/elastic-agent-standalone-daemonset.yaml

@@ -24,6 +24,9 @@ spec:
           effect: NoSchedule
       serviceAccountName: elastic-agent-standalone
       hostNetwork: true
+      # The following setting is needed for Universal Profiling to allow to set procMount to "Unmasked".
+      # If you are using the Universal Profiling integration, please uncomment the following line before applying.
+      # hostUsers: false
       dnsPolicy: ClusterFirstWithHostNet
       # Uncomment if using hints feature
       #initContainers: