diff --git a/charts/shield/Chart.yaml b/charts/shield/Chart.yaml index 8745a0de5..c1841d07d 100644 --- a/charts/shield/Chart.yaml +++ b/charts/shield/Chart.yaml @@ -13,5 +13,5 @@ maintainers: - name: mavimo email: marcovito.moscaritolo@sysdig.com type: application -version: 0.4.1 +version: 0.4.2 appVersion: "1.0.0" diff --git a/charts/shield/values.yaml b/charts/shield/values.yaml index f03585a38..e9777af0b 100644 --- a/charts/shield/values.yaml +++ b/charts/shield/values.yaml @@ -1,6 +1,6 @@ cluster_config: # The name of the cluster - name: + name: null # The domain of the cluster cluster_domain: cluster.local # The type of the cluster (Accepted Values: gke-autopilot, generic) @@ -14,21 +14,20 @@ sysdig_endpoint: # The region where the Sysdig Secure instance is located region: custom # The URL of the Sysdig Secure API (required only when region is custom) - api_url: + api_url: null collector: # The hostname of the Sysdig Secure collector (required only when region is custom) - host: + host: null # The port of the Sysdig Secure collector (required only when region is custom) - port: + port: null # The access key for the Sysdig Secure instance - access_key: + access_key: null # The access key for the Sysdig Secure instance (existing secret) - access_key_existing_secret: + access_key_existing_secret: null # The API token for the Sysdig Secure instance - secure_api_token: + secure_api_token: null # The API token for the Sysdig Secure instance (existing secret) - secure_api_token_existing_secret: - + secure_api_token_existing_secret: null # Features features: @@ -105,7 +104,7 @@ features: # The list of namespaces that will be excluded from the audit feature excluded_namespaces: [] # List of rules used to determine if a request should be audited - webhook_rules: # +doc-gen:break + webhook_rules: # +doc-gen:break - apiGroups: - "" - apps @@ -167,7 +166,7 @@ host: # The image name for the host shield shield_name: agent-slim # The tag for the host shield images - tag: 13.7.0 + tag: 13.7.1 # The pull policy for the host shield images pull_policy: IfNotPresent # The pull secrets for the host shield images @@ -176,7 +175,7 @@ host: # Create a priority class for the host shield create: false # The name of the priority class (if create is set to false, this will be used as the name of the existing priority class) - name: + name: null # The value of the priority class value: 10 # The labels for the priority class @@ -189,7 +188,7 @@ host: # Create the RBAC resources for the host shield create: true # The name of the service account for the host shield (if create is set to false, this will be used as the name of the existing service account) - service_account_name: + service_account_name: null # The labels for the service account labels: {} # The annotations for the service account @@ -228,7 +227,7 @@ host: # The node selector for the host shield node_selector: {} # The tolerations for the host shield - tolerations: # +doc-gen:break + tolerations: # +doc-gen:break - effect: NoSchedule key: node-role.kubernetes.io/master - effect: NoSchedule @@ -246,7 +245,7 @@ host: operator: Equal value: "true" # The affinity for the host shield - affinity: # +doc-gen:break + affinity: # +doc-gen:break nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -270,7 +269,7 @@ host: periodSeconds: 10 # The readiness probe failure threshold failureThreshold: 9 - liveness: # TODO: Currently host does not have liveness probe. Should we add it? + liveness: # TODO: Currently host does not have liveness probe. Should we add it? # The liveness probe initial delay initialDelaySeconds: 90 # The liveness probe period @@ -306,7 +305,7 @@ cluster: # Create a priority class for the cluster shield create: false # The name of the priority class (if create is set to false, this will be used as the name of the existing priority class) - name: + name: null # The value of the priority class value: 10 # The labels for the priority class @@ -317,7 +316,7 @@ cluster: # Create the RBAC resources for the cluster shield create: true # The name of the service account for the cluster shield (if create is set to false, this will be used as the name of the existing service account) - service_account_name: + service_account_name: null # The labels for the service account labels: {} # The annotations for the service account @@ -329,7 +328,7 @@ cluster: # Create the TLS certificates for the cluster shield create: true # The name of the secret that contains the TLS certificates - secret_name: + secret_name: null resources: requests: # The CPU request for the cluster shield @@ -389,7 +388,7 @@ cluster: host_network: false # Define Cluster Shield Pods DNS Policy - dns_policy: + dns_policy: null # The custom environment variables for cluster shield env: [] # The custom volumes for cluster shield @@ -422,26 +421,24 @@ ssl: # -----END CERTIFICATE----- # Filename that is used when creating the secret. Required if cert is provided. - key_name: + key_name: null # Provide the name of an existing Secret that contains the CA required - existing_ca_secret: + existing_ca_secret: null # Provide the filename that is defined inside the existing Secret - existing_ca_secret_key_name: - + existing_ca_secret_key_name: null proxy: # HTTP proxy to use for all HTTP requests - http_proxy: + http_proxy: null # Provide the name of an existing Secret that contains the HTTP proxy - http_proxy_existing_secret: + http_proxy_existing_secret: null # HTTPS proxy to use for all HTTPS requests - https_proxy: + https_proxy: null # Provide the name of an existing Secret that contains the HTTPS proxy - https_proxy_existing_secret: + https_proxy_existing_secret: null # No proxy hosts and ips - no_proxy: + no_proxy: null # Provide the name of an existing Secret that contains the no proxy hosts - no_proxy_existing_secret: - + no_proxy_existing_secret: null # Additional .APIVersions in .Capabilities, e.g. "security.openshift.io/v1" extra_capabilities_api_versions: [] @@ -466,10 +463,9 @@ volumes: [] # The volume mounts for all the workloads volume_mounts: [] # Overrides the default resource identifier ex. sysdig--cluster -name_override: +name_override: null # Overrides the default full resource identifier ex. -cluster -fullname_override: - +fullname_override: null # Optional parameter used to check the compatibility of shield # component versions with the on-premised backend version. # @@ -477,4 +473,4 @@ fullname_override: # this parameter with the version of Sysdig backend you are using. # # If you are runinng on SaaS, do NOT provide this parameter. -on_prem_version: +on_prem_version: null