fix(agent,cluster-shield,node-analyzer,shield,kspm-collector,admission-controller,rapid-response): remove unused allowedUnsafeSysctls constraint

charts/admission-controller/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: admission-controller
 description: Sysdig Admission Controller using Sysdig Secure inline image scanner
 type: application
-version: 0.16.8
+version: 0.16.9
 appVersion: 3.9.50
 home: https://sysdiglabs.github.io/admission-controller/
 icon: https://avatars.githubusercontent.com/u/5068817?s=200&v=4

charts/admission-controller/README.md

@@ -68,7 +68,7 @@ For example:
 
 ```bash
 helm upgrade --install admission-controller sysdig/admission-controller \
-    --create-namespace -n sysdig-admission-controller --version=0.16.8  \
+    --create-namespace -n sysdig-admission-controller --version=0.16.9  \
     --set sysdig.secureAPIToken=YOUR-KEY-HERE,clusterName=YOUR-CLUSTER-NAME
 ```
 
@@ -80,7 +80,7 @@ For example:
 
 ```bash
 helm upgrade --install admission-controller sysdig/admission-controller \
-     --create-namespace -n sysdig-admission-controller --version=0.16.8  \
+     --create-namespace -n sysdig-admission-controller --version=0.16.9  \
     --values values.yaml
 
 ```

charts/admission-controller/templates/webhook/securitycontextconstraint.yaml

@@ -15,7 +15,6 @@ allowHostPorts: false
 allowPrivilegeEscalation: true
 allowPrivilegedContainer: true
 allowedCapabilities: []
-allowedUnsafeSysctls: []
 defaultAddCapabilities: []
 fsGroup:
   type: RunAsAny

charts/agent/Chart.yaml

@@ -30,4 +30,4 @@ sources:
 - https://app.sysdigcloud.com/#/settings/user
 - https://github.com/draios/sysdig
 type: application
-version: 1.36.0
+version: 1.36.1

charts/agent/templates/securitycontextconstraint.yaml

@@ -25,7 +25,6 @@ allowedCapabilities: []
 allowedCapabilities:
 {{ include "agent.capabilities" . }}
 {{- end }}
-allowedUnsafeSysctls: []
 defaultAddCapabilities: []
 fsGroup:
   type: RunAsAny

charts/cluster-shield/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: cluster-shield
 description: Cluster Shield Helm Chart for Kubernetes
 type: application
-version: 1.8.2
+version: 1.8.3
 appVersion: "1.8.2"
 maintainers:
   - name: AlbertoBarba

charts/cluster-shield/templates/openshift_securitycontextconstraint.yaml

@@ -16,7 +16,6 @@ allowHostPorts: false
 allowPrivilegeEscalation: true
 allowPrivilegedContainer: true
 allowedCapabilities: []
-allowedUnsafeSysctls: []
 defaultAddCapabilities: []
 fsGroup:
   type: RunAsAny

charts/kspm-collector/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: kspm-collector
 description: Sysdig KSPM collector
-version: 0.17.4
+version: 0.17.5
 appVersion: 1.39.6
 keywords:
   - monitoring

charts/kspm-collector/templates/securitycontextconstraint.yaml

@@ -16,7 +16,6 @@ allowHostPorts: false
 allowPrivilegeEscalation: false
 allowPrivilegedContainer: false
 allowedCapabilities: []
-allowedUnsafeSysctls: []
 defaultAddCapabilities: []
 fsGroup:
   type: RunAsAny

charts/node-analyzer/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: node-analyzer
 description: Sysdig Node Analyzer
 # currently matching Sysdig's appVersion 1.14.34
-version: 1.34.7
+version: 1.34.8
 appVersion: 12.9.2
 keywords:
   - monitoring

charts/node-analyzer/templates/securitycontextconstraint.yaml

@@ -16,7 +16,6 @@ allowHostPorts: false
 allowPrivilegeEscalation: true
 allowPrivilegedContainer: true
 allowedCapabilities: []
-allowedUnsafeSysctls: []
 defaultAddCapabilities: []
 fsGroup:
   type: RunAsAny

charts/rapid-response/Chart.yaml

@@ -13,7 +13,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.9.17
+version: 0.9.18
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.

charts/rapid-response/templates/securitycontextconstraint.yaml

@@ -16,7 +16,6 @@ allowHostPorts: false
 allowPrivilegeEscalation: false
 allowPrivilegedContainer: false
 allowedCapabilities: []
-allowedUnsafeSysctls: []
 defaultAddCapabilities: []
 fsGroup:
   type: RunAsAny

charts/shield/Chart.yaml

@@ -13,5 +13,5 @@ maintainers:
   - name: mavimo
     email: [email protected]
 type: application
-version: 0.9.4
+version: 0.9.5
 appVersion: "1.0.0"

charts/shield/templates/cluster/openshift-securitycontextconstraint.yaml

@@ -16,7 +16,6 @@ allowHostPorts: false
 allowPrivilegeEscalation: true
 allowPrivilegedContainer: true
 allowedCapabilities: []
-allowedUnsafeSysctls: []
 defaultAddCapabilities: []
 fsGroup:
   type: RunAsAny

charts/shield/templates/host/openshift-securitycontextconstraint.yaml

@@ -21,7 +21,6 @@ allowedCapabilities: []
 allowedCapabilities:
   {{- include "host.capabilities" . | nindent 2 }}
 {{- end }}
-allowedUnsafeSysctls: []
 defaultAddCapabilities: []
 fsGroup:
   type: RunAsAny