kyverno-reporter values.yaml
📜
nameOverride📜
Type: string
""
image.registry📜
Type: string
"registry1.dso.mil"
image.repository📜
Type: string
"ironbank/nirmata/policy-reporter/policy-reporter"
image.pullPolicy📜
Type: string
"IfNotPresent"
image.tag📜
Type: string
"2.12.0"
imagePullSecrets📜
Type: list
[]
Default value (formatted)
[]
replicaCount📜
Type: int
1
deploymentStrategy📜
Type: object
{}
Default value (formatted)
{}
port.name📜
Type: string
"http"
port.number📜
Type: int
8080
annotations📜
Type: object
{}
Default value (formatted)
{}
rbac.enabled📜
Type: bool
true
serviceAccount.create📜
Type: bool
true
serviceAccount.annotations📜
Type: object
{}
Default value (formatted)
{}
serviceAccount.name📜
Type: string
""
serviceAccount.automountServiceAccountToken📜
Type: bool
false
service.enabled📜
Type: bool
true
service.annotations📜
Type: object
{}
Default value (formatted)
{}
service.labels📜
Type: object
{}
Default value (formatted)
{}
service.type📜
Type: string
"ClusterIP"
service.port📜
Type: int
8080
podSecurityContext.fsGroup📜
Type: int
1234
securityContext.runAsUser📜
Type: int
1234
securityContext.runAsGroup📜
Type: int
1234
securityContext.runAsNonRoot📜
Type: bool
true
securityContext.privileged📜
Type: bool
false
securityContext.allowPrivilegeEscalation📜
Type: bool
false
securityContext.readOnlyRootFilesystem📜
Type: bool
true
securityContext.capabilities.drop[0]📜
Type: string
"ALL"
securityContext.seccompProfile.type📜
Type: string
"RuntimeDefault"
podAnnotations📜
Type: object
{}
Default value (formatted)
{}
podLabels📜
Type: object
{}
Default value (formatted)
{}
resources📜
Type: object
{}
Default value (formatted)
{}
networkPolicy.enabled📜
Type: bool
false
networkPolicy.egress[0].to📜
Type: string
nil
networkPolicy.egress[0].ports[0].protocol📜
Type: string
"TCP"
networkPolicy.egress[0].ports[0].port📜
Type: int
6443
networkPolicy.ingress📜
Type: list
[]
Default value (formatted)
[]
rest.enabled📜
Type: bool
false
metrics.enabled📜
Type: bool
false
metrics.mode📜
Type: string
"detailed"
metrics.customLabels📜
Type: list
[]
Default value (formatted)
[]
profiling.enabled📜
Type: bool
false
reportFilter.namespaces.include📜
Type: list
[]
Default value (formatted)
[]
reportFilter.namespaces.exclude📜
Type: list
[]
Default value (formatted)
[]
reportFilter.clusterReports.disabled📜
Type: bool
false
ui.enabled📜
Type: bool
false
kyvernoPlugin.enabled📜
Type: bool
false
monitoring.enabled📜
Type: bool
false
global.plugins.kyverno📜
Type: bool
false
global.backend📜
Type: string
""
global.fullnameOverride📜
Type: string
""
global.namespace📜
Type: string
""
global.labels📜
Type: object
{}
Default value (formatted)
{}
policyPriorities📜
Type: object
{}
Default value (formatted)
{}
emailReports.clusterName📜
Type: string
""
emailReports.smtp.secret📜
Type: string
""
emailReports.smtp.host📜
Type: string
""
emailReports.smtp.port📜
Type: int
465
emailReports.smtp.username📜
Type: string
""
emailReports.smtp.password📜
Type: string
""
emailReports.smtp.from📜
Type: string
""
emailReports.smtp.encryption📜
Type: string
""
emailReports.summary.enabled📜
Type: bool
false
emailReports.summary.schedule📜
Type: string
"0 8 * * *"
emailReports.summary.activeDeadlineSeconds📜
Type: int
300
emailReports.summary.backoffLimit📜
Type: int
3
emailReports.summary.ttlSecondsAfterFinished📜
Type: int
0
emailReports.summary.restartPolicy📜
Type: string
"Never"
emailReports.summary.to📜
Type: list
[]
Default value (formatted)
[]
emailReports.summary.filter📜
Type: object
{}
Default value (formatted)
{}
emailReports.summary.channels📜
Type: list
[]
Default value (formatted)
[]
emailReports.violations.enabled📜
Type: bool
false
emailReports.violations.schedule📜
Type: string
"0 8 * * *"
emailReports.violations.activeDeadlineSeconds📜
Type: int
300
emailReports.violations.backoffLimit📜
Type: int
3
emailReports.violations.ttlSecondsAfterFinished📜
Type: int
0
emailReports.violations.restartPolicy📜
Type: string
"Never"
emailReports.violations.to📜
Type: list
[]
Default value (formatted)
[]
emailReports.violations.filter📜
Type: object
{}
Default value (formatted)
{}
emailReports.violations.channels📜
Type: list
[]
Default value (formatted)
[]
existingTargetConfig.enabled📜
Type: bool
false
existingTargetConfig.name📜
Type: string
""
existingTargetConfig.subPath📜
Type: string
""
target.loki.host📜
Type: string
""
target.loki.certificate📜
Type: string
""
target.loki.skipTLS📜
Type: bool
false
target.loki.secretRef📜
Type: string
""
target.loki.path📜
Type: string
""
target.loki.minimumPriority📜
Type: string
""
target.loki.sources📜
Type: list
[]
Default value (formatted)
[]
target.loki.skipExistingOnStartup📜
Type: bool
true
target.loki.customLabels📜
Type: object
{}
Default value (formatted)
{}
target.loki.filter📜
Type: object
{}
Default value (formatted)
{}
target.loki.channels📜
Type: list
[]
Default value (formatted)
[]
target.elasticsearch.host📜
Type: string
""
target.elasticsearch.certificate📜
Type: string
""
target.elasticsearch.skipTLS📜
Type: bool
false
target.elasticsearch.index📜
Type: string
""
target.elasticsearch.username📜
Type: string
""
target.elasticsearch.password📜
Type: string
""
target.elasticsearch.secretRef📜
Type: string
""
target.elasticsearch.rotation📜
Type: string
""
target.elasticsearch.minimumPriority📜
Type: string
""
target.elasticsearch.sources📜
Type: list
[]
Default value (formatted)
[]
target.elasticsearch.skipExistingOnStartup📜
Type: bool
true
target.elasticsearch.customFields📜
Type: object
{}
Default value (formatted)
{}
target.elasticsearch.filter📜
Type: object
{}
Default value (formatted)
{}
target.elasticsearch.channels📜
Type: list
[]
Default value (formatted)
[]
target.slack.webhook📜
Type: string
""
target.slack.secretRef📜
Type: string
""
target.slack.minimumPriority📜
Type: string
""
target.slack.sources📜
Type: list
[]
Default value (formatted)
[]
target.slack.skipExistingOnStartup📜
Type: bool
true
target.slack.customFields📜
Type: object
{}
Default value (formatted)
{}
target.slack.filter📜
Type: object
{}
Default value (formatted)
{}
target.slack.channels📜
Type: list
[]
Default value (formatted)
[]
target.discord.webhook📜
Type: string
""
target.discord.secretRef📜
Type: string
""
target.discord.minimumPriority📜
Type: string
""
target.discord.sources📜
Type: list
[]
Default value (formatted)
[]
target.discord.skipExistingOnStartup📜
Type: bool
true
target.discord.filter📜
Type: object
{}
Default value (formatted)
{}
target.discord.channels📜
Type: list
[]
Default value (formatted)
[]
target.teams.webhook📜
Type: string
""
target.teams.secretRef📜
Type: string
""
target.teams.certificate📜
Type: string
""
target.teams.skipTLS📜
Type: bool
false
target.teams.minimumPriority📜
Type: string
""
target.teams.sources📜
Type: list
[]
Default value (formatted)
[]
target.teams.skipExistingOnStartup📜
Type: bool
true
target.teams.filter📜
Type: object
{}
Default value (formatted)
{}
target.teams.channels📜
Type: list
[]
Default value (formatted)
[]
target.ui.host📜
Type: string
""
target.ui.certificate📜
Type: string
""
target.ui.skipTLS📜
Type: bool
false
target.ui.minimumPriority📜
Type: string
"warning"
target.ui.sources📜
Type: list
[]
Default value (formatted)
[]
target.ui.skipExistingOnStartup📜
Type: bool
true
target.webhook.host📜
Type: string
""
target.webhook.certificate📜
Type: string
""
target.webhook.skipTLS📜
Type: bool
false
target.webhook.secretRef📜
Type: string
""
target.webhook.headers📜
Type: object
{}
Default value (formatted)
{}
target.webhook.minimumPriority📜
Type: string
""
target.webhook.sources📜
Type: list
[]
Default value (formatted)
[]
target.webhook.skipExistingOnStartup📜
Type: bool
true
target.webhook.customFields📜
Type: object
{}
Default value (formatted)
{}
target.webhook.filter📜
Type: object
{}
Default value (formatted)
{}
target.webhook.channels📜
Type: list
[]
Default value (formatted)
[]
target.s3.accessKeyID📜
Type: string
""
target.s3.secretAccessKey📜
Type: string
""
target.s3.secretRef📜
Type: string
""
target.s3.region📜
Type: string
""
target.s3.endpoint📜
Type: string
""
target.s3.bucket📜
Type: string
""
target.s3.pathStyle📜
Type: bool
false
target.s3.prefix📜
Type: string
""
target.s3.minimumPriority📜
Type: string
""
target.s3.sources📜
Type: list
[]
Default value (formatted)
[]
target.s3.skipExistingOnStartup📜
Type: bool
true
target.s3.customFields📜
Type: object
{}
Default value (formatted)
{}
target.s3.filter📜
Type: object
{}
Default value (formatted)
{}
target.s3.channels📜
Type: list
[]
Default value (formatted)
[]
target.kinesis.accessKeyID📜
Type: string
""
target.kinesis.secretAccessKey📜
Type: string
""
target.kinesis.secretRef📜
Type: string
""
target.kinesis.region📜
Type: string
""
target.kinesis.endpoint📜
Type: string
""
target.kinesis.streamName📜
Type: string
""
target.kinesis.minimumPriority📜
Type: string
""
target.kinesis.sources📜
Type: list
[]
Default value (formatted)
[]
target.kinesis.skipExistingOnStartup📜
Type: bool
true
target.kinesis.customFields📜
Type: object
{}
Default value (formatted)
{}
target.kinesis.filter📜
Type: object
{}
Default value (formatted)
{}
target.kinesis.channels📜
Type: list
[]
Default value (formatted)
[]
leaderElection.enabled📜
Type: bool
false
leaderElection.releaseOnCancel📜
Type: bool
true
leaderElection.leaseDuration📜
Type: int
15
leaderElection.renewDeadline📜
Type: int
10
leaderElection.retryPeriod📜
Type: int
2
redis.enabled📜
Type: bool
false
redis.address📜
Type: string
""
redis.database📜
Type: int
0
redis.prefix📜
Type: string
"policy-reporter"
redis.username📜
Type: string
""
redis.password📜
Type: string
""
podDisruptionBudget.minAvailable📜
Type: int
1
Description: Configures the minimum available pods for policy-reporter disruptions. Cannot be used if maxUnavailable
is set.
podDisruptionBudget.maxUnavailable📜
Type: string
nil
Description: Configures the maximum unavailable pods for policy-reporter disruptions. Cannot be used if minAvailable
is set.
nodeSelector📜
Type: object
{}
Default value (formatted)
{}
tolerations📜
Type: list
[]
Default value (formatted)
[]
affinity📜
Type: object
{}
Default value (formatted)
{}
topologySpreadConstraints📜
Type: list
[]
Default value (formatted)
[]
livenessProbe.httpGet.path📜
Type: string
"/ready"
livenessProbe.httpGet.port📜
Type: string
"http"
readinessProbe.httpGet.path📜
Type: string
"/healthz"
readinessProbe.httpGet.port📜
Type: string
"http"
networkPolicies.enabled📜
Type: bool
false
networkPolicies.controlPlaneCidr📜
Type: string
"0.0.0.0/0"
extraVolumes.volumeMounts📜
Type: list
[]
Default value (formatted)
[]
openshift📜
Type: bool
false
istio.enabled📜
Type: bool
false
istio.mtls.mode📜
Type: string
"STRICT"
bbtests.enabled📜
Type: bool
false
bbtests.cypress.artifacts📜
Type: bool
true
bbtests.cypress.envs.cypress_grafana_url📜
Type: string
"http://grafana.monitoring.svc.cluster.local"
bbtests.cypress.envs.cypress_prometheus_url📜
Type: string
"http://monitoring-kube-prometheus-prometheus.monitoring.svc.cluster.local:9090"
bbtests.cypress.envs.cypress_reporter_ns📜
Type: string
"kyverno-reporter"
bbtests.volumes📜
Type: list
[]
Default value (formatted)
[]