mirror of
https://github.com/helm/charts.git
synced 2026-08-23 06:17:18 +00:00
Néstor Salcedaandk8s-ci-robot
e761e8c892
* Add support for deploying Custom App Checks using Helm Chart Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com> * Add a DESIGN document which works a reminder for known issues Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com> * Fix issues from @bencer's review Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com> * Add an script for generating Helm config files with custom AppChecks Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
74 lines
2.0 KiB
YAML
74 lines
2.0 KiB
YAML
# Default values for Sysdig Monitor and Secure Helm package.
|
|
|
|
image:
|
|
repository: sysdig/agent
|
|
tag: latest
|
|
pullPolicy: Always
|
|
|
|
resources: {}
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# limits:
|
|
# cpu: 30m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 20m
|
|
# memory: 128Mi
|
|
|
|
rbac:
|
|
# true here enables creation of rbac resources
|
|
create: true
|
|
|
|
serviceAccount:
|
|
# Create and use serviceAccount resources
|
|
create: true
|
|
# Use this value as serviceAccountName
|
|
name:
|
|
|
|
daemonset: {}
|
|
# Allow the DaemonSet to perform a rolling update on helm update
|
|
# ref: https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set/
|
|
# updateStrategy: RollingUpdate
|
|
|
|
sysdig:
|
|
# Required: You need your Sysdig Monitor access key before running agents.
|
|
# accessKey: ""
|
|
|
|
settings: {}
|
|
### Agent tags
|
|
# tags: linux:ubuntu,dept:dev,local:nyc
|
|
#### Sysdig Software related config ####
|
|
# Sysdig collector address
|
|
# collector: 192.168.1.1
|
|
# Collector TCP port
|
|
# collector_port: 6666
|
|
# Whether collector accepts ssl
|
|
# ssl: true
|
|
# collector certificate validation
|
|
# ssl_verify_certificate: true
|
|
#######################################
|
|
# new_k8s: true
|
|
# k8s_cluster_name: production
|
|
|
|
secure:
|
|
# true here enables Sysdig Secure: container run-time security & forensics
|
|
enabled: false
|
|
|
|
customAppChecks: {}
|
|
# Allow passing custom app checks for Sysdig Agent.
|
|
# Example:
|
|
#
|
|
# sample.py: |-
|
|
# from checks import AgentCheck
|
|
#
|
|
# class MyCustomCheck(AgentCheck):
|
|
# def check(self, instance):
|
|
# self.gauge("testhelm", 1)
|
|
|
|
# Allow sysdig to run on Kubernetes 1.6 masters.
|
|
tolerations:
|
|
- effect: NoSchedule
|
|
key: node-role.kubernetes.io/master
|