⚠️ Repo Archive Notice
As of Nov 13, 2020, charts in this repo will no longer be updated. For more information, see the Helm Charts Deprecation and Archive Notice, and Update.
ClamAV
DEPRECATION NOTICE
This chart is deprecated and no longer supported.
An Open-Source antivirus engine for detecting trojans, viruses, malware & other malicious threats.
ClamAV is the open source standard for mail gateway scanning software. Developed by Cisco Talos. This Helm Chart uses the MailU Docker image.
QuickStart
$ helm install stable/clamav --name foo --namespace bar
Introduction
This chart bootstraps a ClamAV deployment and service on a Kubernetes cluster using the Helm Package manager.
Prerequisites
- Kubernetes 1.4+
- PV provisioner support in the underlying infrastructure (optional)
Installing the Chart
To install the chart with the release name my-release:
$ helm install --name my-release stable/clamav
The command deploys ClamAV on the Kubernetes cluster in the default configuration. The configuration section lists the parameters that can be configured during installation.
Tip
: List all releases using
helm list
In order to deploy this chart under Kubernetes 1.9+, the kubeMeta.deploymentApiVersion MUST be set to "apps/v1".
Uninstalling the Chart
To uninstall/delete the my-release deployment:
$ helm delete my-release --purge
The command removes all the Kubernetes components associated with the chart and deletes the release.
Configuration
The configurable parameters of the ClamAV chart and
their descriptions can be seen in values.yaml. The full documentation contains more information about running ClamAV in docker.
Tip
: You can use the default values.yaml
Memory Usage
ClamAV uses around 1 GB RAM.
Virus Definitions
For ClamAV to work properly, both the ClamAV engine and the ClamAV Virus Database (CVD) must be kept up to date.
The virus database is usually updated many times per week.
Freshclam should perform these updates automatically. Instructions for setting up Freshclam can be found in the documentation section. If your network is segmented or the end hosts are unable to reach the Internet, you should investigate setting up a private local mirror. If this is not viable, you may use these direct download