1
1
cluster_config :
2
2
# The name of the cluster
3
- name :
3
+ name : null
4
4
# The domain of the cluster
5
5
cluster_domain : cluster.local
6
6
# The type of the cluster (Accepted Values: gke-autopilot, generic)
@@ -14,21 +14,20 @@ sysdig_endpoint:
14
14
# The region where the Sysdig Secure instance is located
15
15
region : custom
16
16
# The URL of the Sysdig Secure API (required only when region is custom)
17
- api_url :
17
+ api_url : null
18
18
collector :
19
19
# The hostname of the Sysdig Secure collector (required only when region is custom)
20
- host :
20
+ host : null
21
21
# The port of the Sysdig Secure collector (required only when region is custom)
22
- port :
22
+ port : null
23
23
# The access key for the Sysdig Secure instance
24
- access_key :
24
+ access_key : null
25
25
# The access key for the Sysdig Secure instance (existing secret)
26
- access_key_existing_secret :
26
+ access_key_existing_secret : null
27
27
# The API token for the Sysdig Secure instance
28
- secure_api_token :
28
+ secure_api_token : null
29
29
# The API token for the Sysdig Secure instance (existing secret)
30
- secure_api_token_existing_secret :
31
-
30
+ secure_api_token_existing_secret : null
32
31
# Features
33
32
34
33
features :
@@ -105,7 +104,7 @@ features:
105
104
# The list of namespaces that will be excluded from the audit feature
106
105
excluded_namespaces : []
107
106
# List of rules used to determine if a request should be audited
108
- webhook_rules : # +doc-gen:break
107
+ webhook_rules : # +doc-gen:break
109
108
- apiGroups :
110
109
- " "
111
110
- apps
@@ -209,7 +208,7 @@ host_windows:
209
208
key : os
210
209
value : Windows
211
210
# The affinity for the host shield
212
- affinity : # +doc-gen:break
211
+ affinity : # +doc-gen:break
213
212
nodeAffinity :
214
213
requiredDuringSchedulingIgnoredDuringExecution :
215
214
nodeSelectorTerms :
@@ -250,7 +249,7 @@ host:
250
249
# The image name for the host shield
251
250
shield_name : agent-slim
252
251
# The tag for the host shield images
253
- tag : 13.9.1
252
+ tag : 13.9.2
254
253
# The pull policy for the host shield images
255
254
pull_policy : IfNotPresent
256
255
# The pull secrets for the host shield images
@@ -259,7 +258,7 @@ host:
259
258
# Create a priority class for the host shield
260
259
create : false
261
260
# The name of the priority class (if create is set to false, this will be used as the name of the existing priority class)
262
- name :
261
+ name : null
263
262
# The value of the priority class
264
263
value : 10
265
264
# The labels for the priority class
@@ -272,7 +271,7 @@ host:
272
271
# Create the RBAC resources for the host shield
273
272
create : true
274
273
# The name of the service account for the host shield (if create is set to false, this will be used as the name of the existing service account)
275
- service_account_name :
274
+ service_account_name : null
276
275
# The labels for the service account
277
276
labels : {}
278
277
# The annotations for the service account
@@ -311,7 +310,7 @@ host:
311
310
# The node selector for the host shield
312
311
node_selector : {}
313
312
# The tolerations for the host shield
314
- tolerations : # +doc-gen:break
313
+ tolerations : # +doc-gen:break
315
314
- effect : NoSchedule
316
315
key : node-role.kubernetes.io/master
317
316
- effect : NoSchedule
@@ -329,7 +328,7 @@ host:
329
328
operator : Equal
330
329
value : " true"
331
330
# The affinity for the host shield
332
- affinity : # +doc-gen:break
331
+ affinity : # +doc-gen:break
333
332
nodeAffinity :
334
333
requiredDuringSchedulingIgnoredDuringExecution :
335
334
nodeSelectorTerms :
@@ -353,7 +352,7 @@ host:
353
352
periodSeconds : 10
354
353
# The readiness probe failure threshold
355
354
failureThreshold : 9
356
- liveness : # TODO: Currently host does not have liveness probe. Should we add it?
355
+ liveness : # TODO: Currently host does not have liveness probe. Should we add it?
357
356
# The liveness probe initial delay
358
357
initialDelaySeconds : 90
359
358
# The liveness probe period
@@ -371,8 +370,7 @@ host:
371
370
# The custom volume mounts for the host shield
372
371
volume_mounts : []
373
372
# The dns policy for the host shield
374
- dns_policy :
375
-
373
+ dns_policy : null
376
374
cluster :
377
375
image :
378
376
# The registry where the cluster shield image is stored
@@ -391,7 +389,7 @@ cluster:
391
389
# Create a priority class for the cluster shield
392
390
create : false
393
391
# The name of the priority class (if create is set to false, this will be used as the name of the existing priority class)
394
- name :
392
+ name : null
395
393
# The value of the priority class
396
394
value : 10
397
395
# The labels for the priority class
@@ -402,7 +400,7 @@ cluster:
402
400
# Create the RBAC resources for the cluster shield
403
401
create : true
404
402
# The name of the service account for the cluster shield (if create is set to false, this will be used as the name of the existing service account)
405
- service_account_name :
403
+ service_account_name : null
406
404
# The labels for the service account
407
405
labels : {}
408
406
# The annotations for the service account
@@ -423,7 +421,7 @@ cluster:
423
421
# Create the TLS certificates for the cluster shield
424
422
create : true
425
423
# The name of the secret that contains the TLS certificates
426
- secret_name :
424
+ secret_name : null
427
425
resources :
428
426
requests :
429
427
# The CPU request for the cluster shield
@@ -483,7 +481,7 @@ cluster:
483
481
host_network : false
484
482
485
483
# Define Cluster Shield Pods DNS Policy
486
- dns_policy :
484
+ dns_policy : null
487
485
# The custom environment variables for cluster shield
488
486
env : []
489
487
# The custom volumes for cluster shield
@@ -516,26 +514,24 @@ ssl:
516
514
# -----END CERTIFICATE-----
517
515
518
516
# Filename that is used when creating the secret. Required if cert is provided.
519
- key_name :
517
+ key_name : null
520
518
# Provide the name of an existing Secret that contains the CA required
521
- existing_ca_secret :
519
+ existing_ca_secret : null
522
520
# Provide the filename that is defined inside the existing Secret
523
- existing_ca_secret_key_name :
524
-
521
+ existing_ca_secret_key_name : null
525
522
proxy :
526
523
# HTTP proxy to use for all HTTP requests
527
- http_proxy :
524
+ http_proxy : null
528
525
# Provide the name of an existing Secret that contains the HTTP proxy
529
- http_proxy_existing_secret :
526
+ http_proxy_existing_secret : null
530
527
# HTTPS proxy to use for all HTTPS requests
531
- https_proxy :
528
+ https_proxy : null
532
529
# Provide the name of an existing Secret that contains the HTTPS proxy
533
- https_proxy_existing_secret :
530
+ https_proxy_existing_secret : null
534
531
# No proxy hosts and ips
535
- no_proxy :
532
+ no_proxy : null
536
533
# Provide the name of an existing Secret that contains the no proxy hosts
537
- no_proxy_existing_secret :
538
-
534
+ no_proxy_existing_secret : null
539
535
# Additional .APIVersions in .Capabilities, e.g. "security.openshift.io/v1"
540
536
extra_capabilities_api_versions : []
541
537
@@ -560,15 +556,14 @@ volumes: []
560
556
# The volume mounts for all the workloads
561
557
volume_mounts : []
562
558
# Overrides the default resource identifier ex. sysdig-<override>-cluster
563
- name_override :
559
+ name_override : null
564
560
# Overrides the default full resource identifier ex. <override>-cluster
565
- fullname_override :
566
-
561
+ fullname_override : null
567
562
# Optional parameter used to check the compatibility of shield
568
563
# component versions with the on-premised backend version.
569
564
#
570
565
# If you are running an on-prem version of the Sysdig backend, you MUST set
571
566
# this parameter with the version of Sysdig backend you are using.
572
567
#
573
568
# If you are runinng on SaaS, do NOT provide this parameter.
574
- on_prem_version :
569
+ on_prem_version : null
0 commit comments