Skip to content

Commit

Permalink
chore: update the the shield chart
Browse files Browse the repository at this point in the history
Made with ❤️️ by updatecli
  • Loading branch information
updatecli committed Dec 31, 2024
1 parent 758b6ce commit b212427
Show file tree
Hide file tree
Showing 2 changed files with 32 additions and 36 deletions.
2 changes: 1 addition & 1 deletion charts/shield/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -13,5 +13,5 @@ maintainers:
- name: mavimo
email: [email protected]
type: application
version: 0.4.1
version: 0.4.2
appVersion: "1.0.0"
66 changes: 31 additions & 35 deletions charts/shield/values.yaml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
cluster_config:
# The name of the cluster
name:
name: null
# The domain of the cluster
cluster_domain: cluster.local
# The type of the cluster (Accepted Values: gke-autopilot, generic)
Expand All @@ -14,21 +14,20 @@ sysdig_endpoint:
# The region where the Sysdig Secure instance is located
region: custom
# The URL of the Sysdig Secure API (required only when region is custom)
api_url:
api_url: null
collector:
# The hostname of the Sysdig Secure collector (required only when region is custom)
host:
host: null
# The port of the Sysdig Secure collector (required only when region is custom)
port:
port: null
# The access key for the Sysdig Secure instance
access_key:
access_key: null
# The access key for the Sysdig Secure instance (existing secret)
access_key_existing_secret:
access_key_existing_secret: null
# The API token for the Sysdig Secure instance
secure_api_token:
secure_api_token: null
# The API token for the Sysdig Secure instance (existing secret)
secure_api_token_existing_secret:

secure_api_token_existing_secret: null
# Features

features:
Expand Down Expand Up @@ -105,7 +104,7 @@ features:
# The list of namespaces that will be excluded from the audit feature
excluded_namespaces: []
# List of rules used to determine if a request should be audited
webhook_rules: # +doc-gen:break
webhook_rules: # +doc-gen:break
- apiGroups:
- ""
- apps
Expand Down Expand Up @@ -167,7 +166,7 @@ host:
# The image name for the host shield
shield_name: agent-slim
# The tag for the host shield images
tag: 13.7.0
tag: 13.7.1
# The pull policy for the host shield images
pull_policy: IfNotPresent
# The pull secrets for the host shield images
Expand All @@ -176,7 +175,7 @@ host:
# Create a priority class for the host shield
create: false
# The name of the priority class (if create is set to false, this will be used as the name of the existing priority class)
name:
name: null
# The value of the priority class
value: 10
# The labels for the priority class
Expand All @@ -189,7 +188,7 @@ host:
# Create the RBAC resources for the host shield
create: true
# The name of the service account for the host shield (if create is set to false, this will be used as the name of the existing service account)
service_account_name:
service_account_name: null
# The labels for the service account
labels: {}
# The annotations for the service account
Expand Down Expand Up @@ -228,7 +227,7 @@ host:
# The node selector for the host shield
node_selector: {}
# The tolerations for the host shield
tolerations: # +doc-gen:break
tolerations: # +doc-gen:break
- effect: NoSchedule
key: node-role.kubernetes.io/master
- effect: NoSchedule
Expand All @@ -246,7 +245,7 @@ host:
operator: Equal
value: "true"
# The affinity for the host shield
affinity: # +doc-gen:break
affinity: # +doc-gen:break
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
Expand All @@ -270,7 +269,7 @@ host:
periodSeconds: 10
# The readiness probe failure threshold
failureThreshold: 9
liveness: # TODO: Currently host does not have liveness probe. Should we add it?
liveness: # TODO: Currently host does not have liveness probe. Should we add it?
# The liveness probe initial delay
initialDelaySeconds: 90
# The liveness probe period
Expand Down Expand Up @@ -306,7 +305,7 @@ cluster:
# Create a priority class for the cluster shield
create: false
# The name of the priority class (if create is set to false, this will be used as the name of the existing priority class)
name:
name: null
# The value of the priority class
value: 10
# The labels for the priority class
Expand All @@ -317,7 +316,7 @@ cluster:
# Create the RBAC resources for the cluster shield
create: true
# The name of the service account for the cluster shield (if create is set to false, this will be used as the name of the existing service account)
service_account_name:
service_account_name: null
# The labels for the service account
labels: {}
# The annotations for the service account
Expand All @@ -329,7 +328,7 @@ cluster:
# Create the TLS certificates for the cluster shield
create: true
# The name of the secret that contains the TLS certificates
secret_name:
secret_name: null
resources:
requests:
# The CPU request for the cluster shield
Expand Down Expand Up @@ -389,7 +388,7 @@ cluster:
host_network: false

# Define Cluster Shield Pods DNS Policy
dns_policy:
dns_policy: null
# The custom environment variables for cluster shield
env: []
# The custom volumes for cluster shield
Expand Down Expand Up @@ -422,26 +421,24 @@ ssl:
# -----END CERTIFICATE-----

# Filename that is used when creating the secret. Required if cert is provided.
key_name:
key_name: null
# Provide the name of an existing Secret that contains the CA required
existing_ca_secret:
existing_ca_secret: null
# Provide the filename that is defined inside the existing Secret
existing_ca_secret_key_name:

existing_ca_secret_key_name: null
proxy:
# HTTP proxy to use for all HTTP requests
http_proxy:
http_proxy: null
# Provide the name of an existing Secret that contains the HTTP proxy
http_proxy_existing_secret:
http_proxy_existing_secret: null
# HTTPS proxy to use for all HTTPS requests
https_proxy:
https_proxy: null
# Provide the name of an existing Secret that contains the HTTPS proxy
https_proxy_existing_secret:
https_proxy_existing_secret: null
# No proxy hosts and ips
no_proxy:
no_proxy: null
# Provide the name of an existing Secret that contains the no proxy hosts
no_proxy_existing_secret:

no_proxy_existing_secret: null
# Additional .APIVersions in .Capabilities, e.g. "security.openshift.io/v1"
extra_capabilities_api_versions: []

Expand All @@ -466,15 +463,14 @@ volumes: []
# The volume mounts for all the workloads
volume_mounts: []
# Overrides the default resource identifier ex. sysdig-<override>-cluster
name_override:
name_override: null
# Overrides the default full resource identifier ex. <override>-cluster
fullname_override:

fullname_override: null
# Optional parameter used to check the compatibility of shield
# component versions with the on-premised backend version.
#
# If you are running an on-prem version of the Sysdig backend, you MUST set
# this parameter with the version of Sysdig backend you are using.
#
# If you are runinng on SaaS, do NOT provide this parameter.
on_prem_version:
on_prem_version: null

0 comments on commit b212427

Please sign in to comment.