Skip to content

neuvector values.yaml📜

domain📜

Type: string

Default value
"dev.bigbang.mil"

istio.enabled📜

Type: bool

Default value
false

istio.injection📜

Type: string

Default value
"enabled"

istio.hardened.enabled📜

Type: bool

Default value
false

istio.hardened.customAuthorizationPolicies📜

Type: list

Default value
[]

istio.hardened.outboundTrafficPolicyMode📜

Type: string

Default value
"REGISTRY_ONLY"

istio.hardened.monitoring.enabled📜

Type: bool

Default value
true

istio.hardened.monitoring.namespaces[0]📜

Type: string

Default value
"monitoring"

istio.hardened.monitoring.principals[0]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-grafana"

istio.hardened.monitoring.principals[1]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-alertmanager"

istio.hardened.monitoring.principals[2]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-operator"

istio.hardened.monitoring.principals[3]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus"

istio.hardened.monitoring.principals[4]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-state-metrics"

istio.hardened.monitoring.principals[5]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-prometheus-node-exporter"

istio.hardened.customServiceEntries📜

Type: list

Default value
[]

istio.neuvector.enabled📜

Type: bool

Default value
true

istio.neuvector.annotations📜

Type: object

Default value
{}

istio.neuvector.labels📜

Type: object

Default value
{}

istio.neuvector.gateways[0]📜

Type: string

Default value
"istio-system/main"

istio.neuvector.hosts[0]📜

Type: string

Default value
"neuvector.{{ .Values.domain }}"

istio.mtls📜

Type: object

Default value
mode: STRICT

Description: Default neuvector peer authentication

istio.mtls.mode📜

Type: string

Default value
"STRICT"

Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic

networkPolicies.enabled📜

Type: bool

Default value
false

networkPolicies.ingressLabels.app📜

Type: string

Default value
"public-ingressgateway"

networkPolicies.ingressLabels.istio📜

Type: string

Default value
"ingressgateway"

networkPolicies.istioNamespaceSelector.ingress📜

Type: string

Default value
"istio-gateway"

networkPolicies.istioNamespaceSelector.egress📜

Type: string

Default value
"istio-gateway"

networkPolicies.controlPlaneCidr📜

Type: string

Default value
"0.0.0.0/0"

networkPolicies.additionalPolicies📜

Type: list

Default value
[]

monitoring.enabled📜

Type: bool

Default value
false

monitoring.namespace📜

Type: string

Default value
"monitoring"

bbtests.enabled📜

Type: bool

Default value
false

bbtests.cypress.artifacts📜

Type: bool

Default value
true

bbtests.cypress.envs.cypress_url📜

Type: string

Default value
"http://neuvector-service-webui.{{ .Release.Namespace }}.svc.cluster.local:8443"

bbtests.cypress.resources.requests.cpu📜

Type: string

Default value
"2"

bbtests.cypress.resources.requests.memory📜

Type: string

Default value
"4Gi"

bbtests.cypress.resources.limits.cpu📜

Type: string

Default value
"2"

bbtests.cypress.resources.limits.memory📜

Type: string

Default value
"4Gi"

bbtests.scripts.envs.URL📜

Type: string

Default value
"http://neuvector-service-webui.{{ .Release.Namespace }}.svc.cluster.local:8443"

global.imagePullSecrets📜

Type: string

Default value
nil

global.images.neuvector_csp_pod.tag📜

Type: string

Default value
"latest"

global.images.neuvector_csp_pod.image📜

Type: string

Default value
"neuvector-billing-azure-by-suse-llc"

global.images.neuvector_csp_pod.registry📜

Type: string

Default value
"registry.suse.de/suse/sle-15-sp5/update/pubclouds/images"

global.images.neuvector_csp_pod.imagePullPolicy📜

Type: string

Default value
"Always"

global.images.controller.tag📜

Type: string

Default value
"5.4.3"

global.images.controller.image📜

Type: string

Default value
"controller"

global.images.controller.registry📜

Type: string

Default value
"registry1.dso.mil/ironbank/neuvector/neuvector"

global.images.manager.tag📜

Type: string

Default value
"5.4.3"

global.images.manager.image📜

Type: string

Default value
"manager"

global.images.manager.registry📜

Type: string

Default value
"registry1.dso.mil/ironbank/neuvector/neuvector"

global.images.enforcer.tag📜

Type: string

Default value
"5.4.3"

global.images.enforcer.image📜

Type: string

Default value
"enforcer"

global.images.enforcer.registry📜

Type: string

Default value
"registry1.dso.mil/ironbank/neuvector/neuvector"

monitor.imagePullSecrets📜

Type: string

Default value
"private-registry"

monitor.install📜

Type: bool

Default value
false

monitor.serviceAccount📜

Type: string

Default value
"default"

monitor.registry📜

Type: string

Default value
"registry1.dso.mil"

monitor.exporter.enabled📜

Type: bool

Default value
false

monitor.exporter.serviceMonitor.enabled📜

Type: bool

Default value
false

monitor.exporter.svc.enabled📜

Type: bool

Default value
false

monitor.exporter.image.repository📜

Type: string

Default value
"ironbank/neuvector/neuvector/prometheus-exporter"

monitor.exporter.image.tag📜

Type: string

Default value
"1-1.0.0"

monitor.exporter.image.imagePullPolicy📜

Type: string

Default value
"Always"

monitor.exporter.containerSecurityContext.runAsUser📜

Type: int

Default value
1001

monitor.exporter.containerSecurityContext.runAsGroup📜

Type: int

Default value
1001

monitor.exporter.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"