helm, doc: Added debug Helm flag for the agent

Added a `debug` Helm flag for the Tetragon agent. Implemented via
ConfigMap flag. The Tetragon DaemonSet will be restarted automatically
after changing the debug value.

Signed-off-by: Philip Schmid <phisch@cisco.com>

docs/content/en/docs/troubleshooting/_index.md

@@ -91,6 +91,15 @@ level is controlled by the log-level option at startup:
 * Enable debug level with `--log-level=debug`
 * Enable trace level with `--log-level=trace`
 
+### Change log level on Kubernetes
+
+{{< warning >}}
+The Tetragon DaemonSet will be restarted automatically after changing the debug Helm value!
+{{< /warning >}}
+
+It is possible to change the log level of the Tetragon (DaemonSet) instances by
+setting `tetragon.debug` to `true`.
+
 ### Change log level dynamically
 
 It is possible to change the log level dynamically by sending the corresponding

install/kubernetes/tetragon/templates/tetragon_configmap.yaml

@@ -10,6 +10,7 @@ data:
   btf: {{ .Values.tetragon.btf }}
 {{- end }}
   procfs: /procRoot
+  debug: {{ .Values.tetragon.debug | quote }}
   enable-process-cred: {{ .Values.tetragon.enableProcessCred | quote }}
   enable-process-ns: {{ .Values.tetragon.enableProcessNs | quote }}
   process-cache-size: {{ .Values.tetragon.processCacheSize | quote }}

install/kubernetes/tetragon/values.yaml

@@ -71,6 +71,8 @@ tetragon:
   # Tetragon puts processes in an LRU cache. The cache is used to find ancestors
   # for subsequently exec'ed processes.
   processCacheSize: 65536
+  # If you want to run Tetragon in debug mode change this value to true
+  debug: false
   # JSON export filename. Set it to an empty string to disable JSON export altogether.
   exportFilename: tetragon.log
   # JSON export file permissions as a string. Set it to "600" to restrict access to owner.