Skip to content

Commit

Permalink
chore: bump the bitnami/kubectl image reference in the rapid-response...
Browse files Browse the repository at this point in the history
...  chart

Made with ❤️️ by updatecli
  • Loading branch information
updatecli authored and mavimo committed Oct 24, 2024
1 parent f1a6f9b commit 48a196e
Show file tree
Hide file tree
Showing 4 changed files with 242 additions and 84 deletions.
84 changes: 65 additions & 19 deletions charts/kspm-collector/values.yaml
Original file line number Diff line number Diff line change
@@ -1,18 +1,21 @@
# Can be set to true to show debug logging, useful for troubleshooting.
debug: false
httpProxy: null
httpsProxy: null
noProxy: null
sslVerifyCertificate: null

httpProxy:
httpsProxy:
noProxy:
sslVerifyCertificate:
natsMaxReconnect: 0
natsMaxReconnectFailures: 60
# Namespace to deploy to (Optional: Will default to release namespace)
namespace: null # Default values for Sysdig KSPM Collector
namespace:

# Default values for Sysdig KSPM Collector
global:
clusterConfig: {}
sysdig:
region: "us1"
sslVerifyCertificate: null
sslVerifyCertificate:
proxy: {}
kspm:
deploy: true
Expand Down Expand Up @@ -40,68 +43,94 @@ global:
# NjExWjAUMRIwEAYDVQQDEwloYXJib3ItY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
# MMNlTAQ9fvdNOTzZntye0PQYRTTS34D=
# -----END CERTIFICATE-----

# Filename that is used when creating the secret. Required if cert is provided.
keyName: null # Provide the name of an existing Secret that contains the CA required
existingCaSecret: null # Provide the filename that is defined inside the existing Secret. Required if existingCaSecret is set.
existingCaSecretKeyName: null # Provide the name of an existing ConfigMap that contains the CA required
existingCaConfigMap: null # Provide the filename that is defined inside the existing ConfigMap. Required if existingCaConfigMap is set.
existingCaConfigMapKeyName: null
keyName:

# Provide the name of an existing Secret that contains the CA required
existingCaSecret:
# Provide the filename that is defined inside the existing Secret. Required if existingCaSecret is set.
existingCaSecretKeyName:

# Provide the name of an existing ConfigMap that contains the CA required
existingCaConfigMap:
# Provide the filename that is defined inside the existing ConfigMap. Required if existingCaConfigMap is set.
existingCaConfigMapKeyName:

sysdig:
# Required: You need your Sysdig access key before running agents, either specifying 'accessKey' here, or using 'existingAccessKeySecret'
accessKey: ""
# Alternatively, specify the name of a Kubernetes secret containing an 'access-key' entry
existingAccessKeySecret: ""

# The API endpoint for Sysdig Secure, specified with no protocol:
# * SaaS default region (US East): secure.sysdig.com
# * SaaS US Web: us2.app.sysdig.com
# * SaaS European Union: eu1.app.sysdig.com
# * On-Prem: sysdig.my.company.com
apiEndpoint: ""

# Override value for the NATS service endpoint
natsUrl: ""

# Setting a cluster name allows you to filter events from this cluster using kubernetes.cluster.name
clusterName: ""

image:
repository: sysdig/kspm-collector
tag: 1.39.5
digest: null
digest:
registry: quay.io
pullPolicy: null # Set image pull secret name
pullPolicy:

# Set image pull secret name
# Example
# imagePullSecrets:
# - name: my-super-secret-pull
imagePullSecrets: []

rbac:
# true here enables creation of rbac resources
create: true

scc:
# true here enables creation of Security Context Constraints in Openshift
create: true

psp:
# true here enables creation of Pod Security Policy to allow the agent run with the required permissions
create: true

serviceAccount:
# true here enables creation of service account
create: true
# Use this value as kspmCollectorServiceAccountName
name: "kspm-collector"

replicas: 1

namespaces:
included: ""
excluded: ""

nodeSelector: {}

workloads:
included: ""
excluded: ""

healthIntervalMin: 5

resources:
requests:
cpu: 150m
memory: 256Mi
limits:
cpu: 500m
memory: 1536Mi

port: 8080

readinessProbe:
enabled: true
probe:
Expand All @@ -112,6 +141,7 @@ livenessProbe:
probe:
initialDelaySeconds: 90
periodSeconds: 3

securityContext:
runAsNonRoot: true
runAsUser: 10001
Expand All @@ -121,12 +151,16 @@ securityContext:
capabilities:
drop:
- all

tolerations:
- key: kubernetes.io/arch
operator: Equal
value: arm64
effect: NoSchedule
priorityClassName: null # arch and os will be used to template out a node affinity block matching everything in each list. If affinity is

priorityClassName:

# arch and os will be used to template out a node affinity block matching everything in each list. If affinity is
# defined, these fields will be ignored
arch:
- amd64
Expand All @@ -136,9 +170,13 @@ os:
# Allow the DaemonSet to schedule using affinity rules
# Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
affinity: {}

labels: {}

annotations: {}

podAnnotations: {}

ssl:
ca:
# For outbound connections (secure backend, proxy,...)
Expand All @@ -160,12 +198,20 @@ ssl:
# NjExWjAUMRIwEAYDVQQDEwloYXJib3ItY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
# MMNlTAQ9fvdNOTzZntye0PQYRTTS34D=
# -----END CERTIFICATE-----

# Filename that is used when creating the secret. Required if cert is provided.
keyName: null # Provide the name of an existing Secret that contains the CA required
existingCaSecret: null # Provide the filename that is defined inside the existing Secret. Required if existingCaSecret is set.
existingCaSecretKeyName: null # Provide the name of an existing ConfigMap that contains the CA required
existingCaConfigMap: null # Provide the filename that is defined inside the existing ConfigMap. Required if existingCaConfigMap is set.
existingCaConfigMapKeyName: null
keyName:

# Provide the name of an existing Secret that contains the CA required
existingCaSecret:
# Provide the filename that is defined inside the existing Secret. Required if existingCaSecret is set.
existingCaSecretKeyName:

# Provide the name of an existing ConfigMap that contains the CA required
existingCaConfigMap:
# Provide the filename that is defined inside the existing ConfigMap. Required if existingCaConfigMap is set.
existingCaConfigMapKeyName:

tests:
skip: false
timeout: 300s
Expand Down
Loading

0 comments on commit 48a196e

Please sign in to comment.