Add GPL-2.0 license notice for rad-runtime eBPF programs (#97)

* Add GPL-2.0 source-offer notice for rad-runtime eBPF programs

The rad-runtime plugin ships eBPF programs under GPL-2.0. Add a written offer for the corresponding source to the chart README and a NOTICE file so the notice travels with the packaged chart.

Author: pancernik

stable/rad-plugins/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: rad-plugins
-version: 2.4.17
+version: 2.4.18
 description: A Helm chart to run the RAD Security plugins
 home: https://rad.security
 icon: https://app.rad.security/assets/favicon.svg
@@ -17,13 +17,9 @@ annotations:
   artifacthub.io/category: security
   # Possible kind options are added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
-    - kind: security
-      description: Bump rad-sbom to v1.1.73 with go-jose/go-jose/v4 v4.1.6 (GHSA-mgcc-cww5-fp2q)
-    - kind: security
-      description: Bump rad-guard to v1.1.46 with klauspost/compress v1.18.7 (GHSA-259r-337f-4rfw)
-    - kind: changed
-      description: Rebuild rad-bootstrapper v1.1.36, rad-sync v1.1.40, rad-watch v1.1.52, rad-runtime and rad-runtime-exporter v0.1.49 with updated internal libraries
-  artifacthub.io/containsSecurityUpdates: "true"
+    - kind: added
+      description: Add GPL-2.0 license notice and NOTICE file for the rad-runtime eBPF programs
+  artifacthub.io/containsSecurityUpdates: "false"
   artifacthub.io/links: |
     - name: source
       url: https://github.com/rad-security/plugins-helm-chart

stable/rad-plugins/NOTICE

@@ -0,0 +1,14 @@
+RAD Security Plugins (rad-plugins) — Third-Party License Notices
+================================================================
+
+eBPF programs (rad-runtime)
+---------------------------
+The rad-runtime plugin distributed in this chart includes eBPF programs
+licensed under the GNU General Public License, version 2 (GPL-2.0).
+
+Written offer for corresponding source
+--------------------------------------
+As required by the GPL-2.0, the complete corresponding source code for these
+eBPF programs is available on request. This written offer is valid for three
+years from the date you received this distribution and extends to any third
+party. To obtain the source, contact RAD Security at support@rad.security.

stable/rad-plugins/README.md

@@ -571,6 +571,12 @@ helm uninstall rad -n rad
 
 The command removes all the Kubernetes components associated with the chart and deletes the release.
 
+## License notices
+
+The `rad-runtime` plugin includes eBPF programs licensed under the GNU General Public License, version 2 (GPL-2.0). The other RAD Security plugins in this chart are distributed under their own licenses.
+
+As required by the GPL-2.0, the complete corresponding source code for these eBPF programs is available on request. This written offer is valid for three years from the date you received this distribution and extends to any third party. To request the source, contact RAD Security at `support@rad.security`. The same notice ships in the [`NOTICE`](./NOTICE) file bundled with this chart.
+
 ## Values
 
 | Key | Type | Default | Description |

stable/rad-plugins/README.md.gotmpl

@@ -571,6 +571,12 @@ helm uninstall rad -n rad
 
 The command removes all the Kubernetes components associated with the chart and deletes the release.
 
+## License notices
+
+The `rad-runtime` plugin includes eBPF programs licensed under the GNU General Public License, version 2 (GPL-2.0). The other RAD Security plugins in this chart are distributed under their own licenses.
+
+As required by the GPL-2.0, the complete corresponding source code for these eBPF programs is available on request. This written offer is valid for three years from the date you received this distribution and extends to any third party. To request the source, contact RAD Security at `support@rad.security`. The same notice ships in the [`NOTICE`](./NOTICE) file bundled with this chart.
+
 {{ template "chart.valuesSection" . }}
 
 | rad.clusterName | The name of the cluster you want displayed in RAD Security. | `""` |