Tiller Service present

This product is not supported for your selected Datadog site. ().
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Metadata

Id: 8b862ca9-0fbd-4959-ad72-b6609bdaa22d

Cloud Provider: Kubernetes

Platform: Kubernetes

Severity: High

Category: Insecure Configurations

Learn More

Description

Tiller services should be removed because Helm v2 is deprecated and no longer supported. This rule flags resources that reference ’tiller’ in their metadata.name, in values of metadata.labels, or in values under spec.selector. These references should be removed or replaced to ensure compatibility with Helm v3.

Compliant Code Examples

apiVersion: v1
kind: Service
metadata:
  name: some-service
  labels:
    name: some-label
spec:
  ports:
    - protocol: TCP
      port: 80
      targetPort: 9376

Non-Compliant Code Examples

apiVersion: v1
kind: Service
metadata:
  name: tiller-deploy
  labels:
    app: helm
    name: tiller
spec:
  type: ClusterIP
  selector:
    app: helm
    name: tiller
  ports:
  - name: tiller
    port: 44134
    protocol: TCP
    targetPort: tiller