Skip to content

Commit

Permalink
[skip ci] Update Helm Chart To v0.1 (#33)
Browse files Browse the repository at this point in the history
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
  • Loading branch information
github-actions[bot] and github-actions[bot] authored Dec 11, 2024
1 parent 513761d commit 1aaef73
Showing 1 changed file with 11 additions and 27 deletions.
38 changes: 11 additions & 27 deletions deployments/sentryflow/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,15 +2,13 @@

# This will set the replicaset count more information can be found here: https://kubernetes.io/docs/concepts/workloads/controllers/replicaset/
replicaCount: 1

# This sets the container image more information can be found here: https://kubernetes.io/docs/concepts/containers/images/
image:
repository: docker.io/5gsec/sentryflow
# This sets the pull policy for images.
pullPolicy: IfNotPresent
# Overrides the image tag whose default is the chart appVersion.
tag: latest

tag: v0.1
# Arguments to pass SentryFlow container
args:
- --config
Expand All @@ -22,7 +20,6 @@ args:
# This is to override the chart name.
nameOverride: ""
fullnameOverride: ""

# This section builds out the service account more information can be found here: https://kubernetes.io/docs/concepts/security/service-accounts/
serviceAccount:
# Specifies whether a service account should be created
Expand All @@ -32,14 +29,11 @@ serviceAccount:
# The name of the service account to use.
# If not set and create is true, a name is generated using the fullname template
name: ""

genericLabels:
app.kubernetes.io/part-of: sentryflow

podSecurityContext:
fsGroup: 2000
runAsNonRoot: true

securityContext:
capabilities:
drop:
Expand All @@ -48,29 +42,26 @@ securityContext:
runAsNonRoot: true
runAsUser: 1000
allowPrivilegeEscalation: false

# This is for setting up a service more information can be found here: https://kubernetes.io/docs/concepts/services-networking/service/
service:
# This sets the service type more information can be found here: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types
type: ClusterIP
ports:
- name: exporter
port: 8888 # Make sure to use the same port as `.exporter.grpc.port` field of `config`
targetPort: 8888 # Make sure to use the same port as `.filters.server.port` field of `config`
targetPort: 8888 # Make sure to use the same port as `.filters.server.port` field of `config`
protocol: TCP
- name: receiver
port: 9999 # Make sure to use the same port as `.filters.server.port` field of `config`
targetPort: 9999 # Make sure to use the same port as `.filters.server.port` field of `config`
protocol: TCP

resources:
limits:
cpu: 500m
memory: 256Mi
requests:
cpu: 500m
memory: 256Mi

# This is to setup the liveness and readiness probes more information can be found here: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
livenessProbe:
httpGet:
Expand All @@ -86,57 +77,50 @@ readinessProbe:
httpHeaders:
- name: status
value: "200"

# This section is for setting up autoscaling more information can be found here: https://kubernetes.io/docs/concepts/workloads/autoscaling/
autoscaling:
enabled: false
minReplicas: 1
maxReplicas: 100
targetCPUUtilizationPercentage: 80
targetMemoryUtilizationPercentage: 80

# Traffic sources configuration
config:
filters:
server:
port: 9999

# Envoy filter is required for `istio-sidecar` service-mesh receiver.
# Uncomment the following if you want to use `istio-sidecar` traffic source
# envoy:
# uri: 5gsec/sentryflow-httpfilter:latest
# Envoy filter is required for `istio-sidecar` service-mesh receiver.
# Uncomment the following if you want to use `istio-sidecar` traffic source
# envoy:
# uri: 5gsec/sentryflow-httpfilter:latest

# Following is required for `nginx-inc-ingress-controller` receiver.
# Uncomment the following if you want to use `nginx-inc-ingress-controller` traffic source
# nginxIngress:
# deploymentName: nginx-ingress-controller
# configMapName: nginx-ingress
# sentryFlowNjsConfigMapName: sentryflow-njs

receivers: # aka sources
# Uncomment the following receivers according to your requirement.
# serviceMeshes:
# To get API observability from Istio service mesh uncomment the following
# - name: istio-sidecar
# namespace: istio-system
# Uncomment the following receivers according to your requirement.
# serviceMeshes:
# To get API observability from Istio service mesh uncomment the following
# - name: istio-sidecar
# namespace: istio-system

# others:
# To get API observability from F5 nginx ingress controller uncomment the following
# - name: nginx-inc-ingress-controller
# namespace: default

# - name: nginx-webserver

exporter:
grpc:
port: 8888

volumes:
- name: sentryflow
configMap:
name: sentryflow
defaultMode: 420

volumeMounts:
- name: sentryflow
mountPath: "/var/lib/sentryflow/"
Expand Down

0 comments on commit 1aaef73

Please sign in to comment.