diff --git a/docs/content/en/docs/reference/helm-chart.md b/docs/content/en/docs/reference/helm-chart.md index 32a3002baaa..1787061071e 100644 --- a/docs/content/en/docs/reference/helm-chart.md +++ b/docs/content/en/docs/reference/helm-chart.md @@ -120,6 +120,7 @@ To use [the values available](#values), with `helm install` or `helm upgrade`, u | tetragon.pprof.address | string | `"localhost"` | The address at which to expose pprof. | | tetragon.pprof.enabled | bool | `false` | Whether to enable exposing pprof server. | | tetragon.pprof.port | int | `6060` | The port at which to expose pprof. | +| tetragon.processCacheGCInterval | string | `"30s"` | Configure the interval (suffixed with s for seconds, m for minutes, etc) for the process cache garbage collector. | | tetragon.processCacheSize | int | `65536` | Tetragon puts processes in an LRU cache. The cache is used to find ancestors for subsequently exec'ed processes. | | tetragon.prometheus.address | string | `""` | The address at which to expose metrics. Set it to "" to expose on all available interfaces. | | tetragon.prometheus.enabled | bool | `true` | Whether to enable exposing Tetragon metrics. | diff --git a/install/kubernetes/tetragon/README.md b/install/kubernetes/tetragon/README.md index c715e4fb1f9..4a9845b3c0c 100644 --- a/install/kubernetes/tetragon/README.md +++ b/install/kubernetes/tetragon/README.md @@ -102,6 +102,7 @@ Helm chart for Tetragon | tetragon.pprof.address | string | `"localhost"` | The address at which to expose pprof. | | tetragon.pprof.enabled | bool | `false` | Whether to enable exposing pprof server. | | tetragon.pprof.port | int | `6060` | The port at which to expose pprof. | +| tetragon.processCacheGCInterval | string | `"30s"` | Configure the interval (suffixed with s for seconds, m for minutes, etc) for the process cache garbage collector. | | tetragon.processCacheSize | int | `65536` | Tetragon puts processes in an LRU cache. The cache is used to find ancestors for subsequently exec'ed processes. | | tetragon.prometheus.address | string | `""` | The address at which to expose metrics. Set it to "" to expose on all available interfaces. | | tetragon.prometheus.enabled | bool | `true` | Whether to enable exposing Tetragon metrics. | diff --git a/install/kubernetes/tetragon/templates/tetragon_configmap.yaml b/install/kubernetes/tetragon/templates/tetragon_configmap.yaml index 74ad983f0a7..ce73beb6814 100644 --- a/install/kubernetes/tetragon/templates/tetragon_configmap.yaml +++ b/install/kubernetes/tetragon/templates/tetragon_configmap.yaml @@ -77,3 +77,4 @@ data: keep-sensors-on-exit: "true" release-pinned-bpf: "false" {{- end }} + process-cache-gc-interval: {{ .Values.tetragon.processCacheGCInterval | quote }} diff --git a/install/kubernetes/tetragon/values.yaml b/install/kubernetes/tetragon/values.yaml index 1b53f4c051c..5cf72451bcd 100644 --- a/install/kubernetes/tetragon/values.yaml +++ b/install/kubernetes/tetragon/values.yaml @@ -233,6 +233,8 @@ tetragon: eventCacheRetryDelay: 2 # -- Persistent enforcement to allow the enforcement policy to continue running even when its Tetragon process is gone. enableKeepSensorsOnExit: false + # -- Configure the interval (suffixed with s for seconds, m for minutes, etc) for the process cache garbage collector. + processCacheGCInterval: 30s # Tetragon Operator settings tetragonOperator: # -- Enables the Tetragon Operator.