Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Google Kubernetes Engine (GKE) Autopilot (Privileged Pods/Containers Access) #1487

Open
TigerC10 opened this issue Jan 3, 2025 · 1 comment

Comments

@TigerC10
Copy link

TigerC10 commented Jan 3, 2025

Grafana already supports GKE Autopilot, which is described as:

GKE Autopilot is a mode of operation in GKE in which Google manages your cluster configuration, including your nodes, scaling, security, and other preconfigured settings. Autopilot clusters are optimized to run most production workloads, and provision compute resources based on your Kubernetes manifests. The streamlined configuration follows GKE best practices and recommendations for cluster and workload setup, scalability, and security.

GKE Autopilot provides managed worker nodes in addition to a managed control plane for Kubernetes clusters. As such, there are security lock-downs that prevent privileged containers from running. In order to run a pod/container with Privileged access, the container image must be allow-listed by the a Google Cloud Partner in the GKE Autopilot Partners list.

Grafana is already a Google Cloud Partner, so it shouldn't take much to publish the Beyla container images to a gcr.io asset repository and get it added to the GKE Autopilot Partners list.

@grcevski
Copy link
Contributor

grcevski commented Jan 6, 2025

Great idea, thanks for this suggestion!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants