mirror of
https://github.com/helm/charts.git
synced 2026-08-23 22:37:45 +00:00
Néstor Salceda
67ec941dfc
* Provide a sane default resource limits for the Agent installation Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com> * Update the Sysdig Agent using rolling updates by default This configuration also supports the old OnDelete strategy and allows you to tune the maxUnavailable, maxSurge or minReadySeconds Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com> * Update Chart version and update CHANGELOG Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com> * Limit also the CPU used per Agent Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com> * Update CPU limit setting in the README Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
86 lines
2.4 KiB
YAML
86 lines
2.4 KiB
YAML
# Default values for Sysdig Monitor and Secure Helm package.
|
|
|
|
image:
|
|
registry: docker.io
|
|
repository: sysdig/agent
|
|
tag: 0.88.1
|
|
# Specify a imagePullPolicy
|
|
# Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
|
# ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
|
|
pullPolicy: IfNotPresent
|
|
# Optionally specify an array of imagePullSecrets.
|
|
# Secrets must be manually created in the namespace.
|
|
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
|
#
|
|
# pullSecrets:
|
|
# - name: myRegistrKeySecretName
|
|
|
|
resources:
|
|
# Although resources needed are subjective on the actual workload we provide
|
|
# a sane defaults ones. If you have more questions or concerns, please refer
|
|
# to Sysdig Support for more info about it
|
|
requests:
|
|
cpu: 100m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: 200m
|
|
memory: 1024Mi
|
|
|
|
rbac:
|
|
# true here enables creation of rbac resources
|
|
create: true
|
|
|
|
serviceAccount:
|
|
# Create and use serviceAccount resources
|
|
create: true
|
|
# Use this value as serviceAccountName
|
|
name:
|
|
|
|
daemonset:
|
|
# Perform rolling updates by default in the DaemonSet agent
|
|
# ref: https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set/
|
|
updateStrategy:
|
|
# You can also customize maxUnavailable, maxSurge or minReadySeconds if you
|
|
# need it
|
|
type: RollingUpdate
|
|
|
|
sysdig:
|
|
# Required: You need your Sysdig Monitor access key before running agents.
|
|
# accessKey: ""
|
|
|
|
settings: {}
|
|
### Agent tags
|
|
# tags: linux:ubuntu,dept:dev,local:nyc
|
|
#### Sysdig Software related config ####
|
|
# Sysdig collector address
|
|
# collector: 192.168.1.1
|
|
# Collector TCP port
|
|
# collector_port: 6666
|
|
# Whether collector accepts ssl
|
|
# ssl: true
|
|
# collector certificate validation
|
|
# ssl_verify_certificate: true
|
|
#######################################
|
|
# new_k8s: true
|
|
# k8s_cluster_name: production
|
|
|
|
secure:
|
|
# true here enables Sysdig Secure: container run-time security & forensics
|
|
enabled: false
|
|
|
|
customAppChecks: {}
|
|
# Allow passing custom app checks for Sysdig Agent.
|
|
# Example:
|
|
#
|
|
# sample.py: |-
|
|
# from checks import AgentCheck
|
|
#
|
|
# class MyCustomCheck(AgentCheck):
|
|
# def check(self, instance):
|
|
# self.gauge("testhelm", 1)
|
|
|
|
# Allow sysdig to run on Kubernetes 1.6 masters.
|
|
tolerations:
|
|
- effect: NoSchedule
|
|
key: node-role.kubernetes.io/master
|