mirror of
https://github.com/kubeshark/kubeshark.git
synced 2026-05-21 00:23:41 +00:00
a8dd332ff8
* 🔨 Add `AUTH_TYPE` field to `ConfigMap` * 🔨 Add `AUTH_SAML_IDP_METADATA_URL` field to `ConfigMap` * 🔨 Add `AUTH_SAML_X509_CRT` field to `Secret` * 🔨 Add `AUTH_SAML_X509_KEY` field to `Secret` * 🔨 Mount SAML X.509 key pair into `hub` * 🔨 Add `REACT_APP_AUTH_TYPE` environment variable to `front` * 🔧 Add Nginx path rewrite for `/saml` * 🔧 Raise request size to accept big SAML responses * 🔨 Add `REACT_APP_AUTH_TYPE` environment default value * 📝 Update `README.md` * 📝 Update `README.md` * 🔨 Add `AUTH_TYPE` config map key * 🔨 Add `AUTH_SAML_IDP_METADATA_URL` config map key * ☸ Set `CONFIG_AUTH_TYPE` from `TapConfig` * ☸ Set `CONFIG_AUTH_SAML_IDP_METADATA_URL` from `TapConfig` * ✨ Create `SamlConfig` in `TapConfig.AuthConfig` * 🔨 Use updated `tap.auth.saml.idpMetadataUrl` tap config field * 📝 Update `README.md` * 🔨 Add `tap.insgress.enabled/host` to `ConfigMap` * 🔨 Add `tap.proxy.front.port` to `ConfigMap` * 🔨 Add `REACT_APP_AUTH_SAML_IDP_METADATA_URL` env to `front` * 🔧 Supply `auth.saml` fields to `helm-chart/values.yaml` * 🐛 Fix indentation for X.509 secrets * 📝 Provide SAML setup docs * 📝 Update SAML setup docs * 📝 Update SAML setup docs * Added callback URL indication * 💥 Disable standard `Descope` auth --------- Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
119 lines
2.1 KiB
YAML
119 lines
2.1 KiB
YAML
tap:
|
|
docker:
|
|
registry: docker.io/kubeshark
|
|
tag: ""
|
|
imagePullPolicy: Always
|
|
imagePullSecrets: []
|
|
proxy:
|
|
worker:
|
|
srvPort: 30001
|
|
hub:
|
|
srvPort: 8898
|
|
front:
|
|
port: 8899
|
|
host: 127.0.0.1
|
|
regex: .*
|
|
namespaces: []
|
|
release:
|
|
repo: https://helm.kubeshark.co
|
|
name: kubeshark
|
|
namespace: default
|
|
persistentStorage: false
|
|
persistentStorageStatic: false
|
|
efsFileSytemIdAndPath: ""
|
|
storageLimit: 500Mi
|
|
storageClass: standard
|
|
dryRun: false
|
|
resources:
|
|
hub:
|
|
limits:
|
|
cpu: 750m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 50Mi
|
|
sniffer:
|
|
limits:
|
|
cpu: 750m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 50Mi
|
|
tracer:
|
|
limits:
|
|
cpu: 750m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 50Mi
|
|
serviceMesh: true
|
|
tls: true
|
|
ignoreTainted: false
|
|
labels: {}
|
|
annotations: {}
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: kubernetes.io/os
|
|
operator: In
|
|
values:
|
|
- linux
|
|
auth:
|
|
enabled: false
|
|
type: saml
|
|
approvedEmails: []
|
|
approvedDomains: []
|
|
approvedTenants: []
|
|
saml:
|
|
idpMetadataUrl: ""
|
|
x509crt: ""
|
|
x509key: ""
|
|
ingress:
|
|
enabled: false
|
|
className: ""
|
|
host: ks.svc.cluster.local
|
|
tls: []
|
|
annotations: {}
|
|
ipv6: true
|
|
debug: false
|
|
kernelModule:
|
|
enabled: true
|
|
image: kubeshark/pf-ring-module:all
|
|
unloadOnDestroy: false
|
|
telemetry:
|
|
enabled: true
|
|
defaultFilter: ""
|
|
replayDisabled: false
|
|
capabilities:
|
|
networkCapture:
|
|
- NET_RAW
|
|
- NET_ADMIN
|
|
serviceMeshCapture:
|
|
- SYS_ADMIN
|
|
- SYS_PTRACE
|
|
- DAC_OVERRIDE
|
|
- CHECKPOINT_RESTORE
|
|
kernelModule:
|
|
- SYS_MODULE
|
|
ebpfCapture:
|
|
- SYS_ADMIN
|
|
- SYS_PTRACE
|
|
- SYS_RESOURCE
|
|
- CHECKPOINT_RESTORE
|
|
globalFilter: ""
|
|
metrics:
|
|
port: 49100
|
|
trafficSampleRate: 100
|
|
tcpStreamChannelTimeoutMs: 10000
|
|
logs:
|
|
file: ""
|
|
kube:
|
|
configPath: ""
|
|
context: ""
|
|
dumpLogs: false
|
|
headless: false
|
|
license: ""
|
|
scripting:
|
|
env: {}
|
|
source: ""
|
|
watchScripts: true
|