CircleCI: Upload wiz-sensor chart

Author: circleci-wiz

wiz-kubernetes-integration/Chart.yaml

@@ -17,5 +17,5 @@ dependencies:
   condition: wiz-admission-controller.enabled
 - name: wiz-sensor
   repository: https://wiz-sec.github.io/charts
-  version: ">=1.0.6349"
+  version: ">=1.0.6440"
   condition: wiz-sensor.enabled

wiz-sensor/Chart.yaml

@@ -3,5 +3,5 @@ description: Wiz Sensor helm chart
 home: https://www.wiz.io/
 name: wiz-sensor
 type: application
-version: 1.0.6349
+version: 1.0.6440
 appVersion: 1.0.6349

wiz-sensor/templates/daemonset.yaml

@@ -37,6 +37,11 @@ spec:
         {{- end }}
 
     spec:
+      {{- if .Values.setFsGroup }}
+      securityContext:
+        fsGroup: {{- if .Values.privileged }} 0 {{- else }} 2202 {{- end }}
+      {{- end }}
+
       {{- if .Values.serviceAccount.create }}
       serviceAccountName: {{ include "wiz-sensor.serviceAccountName" . }}
       {{- end }}
@@ -378,6 +383,31 @@ spec:
           {{- toYaml . | nindent 8 }}
         {{- end }}
 
+        {{- if and (not .Values.gkeAutopilot) .Values.livenessProbe.enabled }}
+        livenessProbe:
+          exec:
+            command:
+            - "/bin/onprem-agent"
+            - "version"
+{{ toYaml .Values.livenessProbe.config | indent 10 }}
+        {{- end }}
+        {{- if and (not .Values.gkeAutopilot) .Values.startupProbe.enabled }}
+        startupProbe:
+          exec:
+            command:
+            - "/bin/onprem-agent"
+            - "version"
+{{ toYaml .Values.startupProbe.config | indent 10 }}
+        {{- end }}
+        {{- if and (not .Values.gkeAutopilot) .Values.readinessProbe.enabled }}
+        readinessProbe:
+          exec:
+            command:
+            - "/bin/onprem-agent"
+            - "version"
+{{ toYaml .Values.readinessProbe.config | indent 10 }}
+        {{- end }}
+
         securityContext:
         {{- if .Values.privileged }}
           privileged: true

wiz-sensor/values.yaml

@@ -83,6 +83,9 @@ oldAppArmorAnnotation: false
 # check by enabling this option.
 disableImageVersionCheck: false
 
+# add appropriate fsGroup/supplementalGroups to the pod's securityContext
+useFsGroup: false
+
 clusterExternalId: "" # Required for OKE clusters - specify the cluster's OCID
 subscriptionExternalId: "" # Optional. Used to associate the installation with a Subscription if none can be obtained from IMDS (e.g. on-prem)
 clusterTags: {} # Optional. List of key: value tags to be added to KubernetesCluster object associated with this installation
@@ -295,6 +298,8 @@ daemonset:
   #- key: node.ocs.openshift.io/storage
   #  value: "true"
   #  effect: NoSchedule
+  #- key: CriticalAddonsOnly # allow running on EKS auto-mode system nodes
+  #  operator: Exists
 
   # Default strategy to update the daemonset
   updateStrategy: