Threads

Deploying the Lacework agent to GKE Autopilot fails admission with GKE Warden constraints violations, even with cloudservice.gke.autopilot set. The daemonset spec pulls the image from a registry path the Warden does not accept, and the pod spec misses Autopilot-required settings.

Set image.overrideValue=lacework/datacollector:latest so the image is pulled from the whitelisted source and the Warden checks are skipped, plus cloudservice.gke.autopilot=true, priorityClassCreate=true, and resource requests for cpu and memory. As helm flags: --set image.overrideValue=lacework/datacollector:latest --set cloudservice.gke.autopilot=true --set priorityClassCreate=true --set resources.requests.cpu=100m --set resources.requests.memory=512Mi. The reporter confirmed this deployed successfully.

Source: https://github.com/lacework/helm-charts/issues/191

Source: https://github.com/lacework/helm-charts/issues/191