anchore-enterprise values.yaml¶
domain¶
Type: string
Default value
"dev.bigbang.mil"
routes.inbound.anchore-api.enabled¶
Type: bool
Default value
true
routes.inbound.anchore-api.selector.”app.kubernetes.io/component”¶
Type: string
Default value
"api"
routes.inbound.anchore-api.gateways[0]¶
Type: string
Default value
"istio-gateway/public-ingressgateway"
routes.inbound.anchore-api.hosts[0]¶
Type: string
Default value
"anchore-api.{{ .Values.domain }}"
routes.inbound.anchore-api.http[0].match[0].uri.prefix¶
Type: string
Default value
"/metrics"
routes.inbound.anchore-api.http[0].route[0].destination.host¶
Type: string
Default value
"anchore-enterprise-anchore-enterprise-api.anchore.svc.cluster.local"
routes.inbound.anchore-api.http[0].route[0].destination.port.number¶
Type: int
Default value
8228
routes.inbound.anchore-api.http[0].fault.abort.percentage.value¶
Type: int
Default value
100
routes.inbound.anchore-api.http[0].fault.abort.httpStatus¶
Type: int
Default value
403
routes.inbound.anchore-api.http[1].match[0].uri.prefix¶
Type: string
Default value
"/"
routes.inbound.anchore-api.http[1].route[0].destination.host¶
Type: string
Default value
"anchore-enterprise-anchore-enterprise-api.anchore.svc.cluster.local"
routes.inbound.anchore-api.http[1].route[0].destination.port.number¶
Type: int
Default value
8228
routes.inbound.anchore-ui.enabled¶
Type: bool
Default value
true
routes.inbound.anchore-ui.selector.”app.kubernetes.io/component”¶
Type: string
Default value
"ui"
routes.inbound.anchore-ui.gateways[0]¶
Type: string
Default value
"istio-gateway/public-ingressgateway"
routes.inbound.anchore-ui.hosts[0]¶
Type: string
Default value
"anchore.{{ .Values.domain }}"
routes.inbound.anchore-ui.service¶
Type: string
Default value
"anchore-enterprise-anchore-enterprise-ui.anchore.svc.cluster.local"
routes.inbound.anchore-ui.port¶
Type: int
Default value
3000
routes.outbound.anchore-data-service.enabled¶
Type: bool
Default value
true
routes.outbound.anchore-data-service.hosts[0]¶
Type: string
Default value
"data.anchore-enterprise.com"
istio.enabled¶
Type: bool
Default value
false
istio.sidecar.enabled¶
Type: bool
Default value
false
istio.sidecar.outboundTrafficPolicyMode¶
Type: string
Default value
"REGISTRY_ONLY"
istio.serviceEntries.custom¶
Type: list
Default value
[]
istio.authorizationPolicies.enabled¶
Type: bool
Default value
false
istio.authorizationPolicies.custom¶
Type: list
Default value
[]
istio.mtls.mode¶
Type: string
Default value
"STRICT"
networkPolicies.enabled¶
Type: bool
Default value
false
networkPolicies.ingress.to.catalog:8082.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"catalog"
networkPolicies.ingress.to.catalog:8082.from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
Default value
false
networkPolicies.ingress.to.simplequeue:8083.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"simplequeue"
networkPolicies.ingress.to.simplequeue:8083.from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
Default value
false
networkPolicies.ingress.to.analyzer:8084.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"analyzer"
networkPolicies.ingress.to.analyzer:8084.from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
Default value
false
networkPolicies.ingress.to.policy:8087.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"policyengine"
networkPolicies.ingress.to.policy:8087.from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
Default value
false
networkPolicies.ingress.to.api:8228.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"api"
networkPolicies.ingress.to.api:8228.from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
Default value
false
networkPolicies.ingress.to.reports:8558.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"reports"
networkPolicies.ingress.to.reports:8558.from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
Default value
false
networkPolicies.ingress.to.notifications:8668.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"notifications"
networkPolicies.ingress.to.notifications:8668.from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
Default value
false
networkPolicies.ingress.to.ui-redis:9121.from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
Default value
false
networkPolicies.egress.definitions.anchore-data-service.to[0].ipBlock.cidr¶
Type: string
Default value
"0.0.0.0/0"
networkPolicies.egress.definitions.anchore-data-service.ports[0].port¶
Type: int
Default value
443
networkPolicies.egress.definitions.anchore-data-service.ports[0].protocol¶
Type: string
Default value
"TCP"
networkPolicies.egress.definitions.ldap-subnets.to[0].ipBlock.cidr¶
Type: string
Default value
"192.168.0.0/16"
networkPolicies.egress.definitions.ldap-subnets.to[1].ipBlock.cidr¶
Type: string
Default value
"172.16.0.0/12"
networkPolicies.egress.definitions.ldap-subnets.to[2].ipBlock.cidr¶
Type: string
Default value
"10.0.0.0/8"
networkPolicies.egress.definitions.ldap-subnets.ports[0].port¶
Type: int
Default value
636
networkPolicies.egress.definitions.ldap-subnets.ports[0].protocol¶
Type: string
Default value
"TCP"
networkPolicies.egress.definitions.notification-services.to[0].ipBlock.cidr¶
Type: string
Default value
"0.0.0.0/0"
networkPolicies.egress.definitions.redis-subnets.to[0].ipBlock.cidr¶
Type: string
Default value
"192.168.0.0/16"
networkPolicies.egress.definitions.redis-subnets.to[1].ipBlock.cidr¶
Type: string
Default value
"172.16.0.0/12"
networkPolicies.egress.definitions.redis-subnets.to[2].ipBlock.cidr¶
Type: string
Default value
"10.0.0.0/8"
networkPolicies.egress.definitions.redis-subnets.ports[0].port¶
Type: int
Default value
6379
networkPolicies.egress.definitions.redis-subnets.ports[0].protocol¶
Type: string
Default value
"TCP"
networkPolicies.egress.definitions.registry-subnets.to[0].ipBlock.cidr¶
Type: string
Default value
"0.0.0.0/0"
networkPolicies.egress.from.*.to.k8s.tempo/tempo:9411¶
Type: bool
Default value
false
networkPolicies.egress.from.analyzer.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"analyzer"
networkPolicies.egress.from.analyzer.to.definition.registry-subnets¶
Type: bool
Default value
true
networkPolicies.egress.from.api.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"api"
networkPolicies.egress.from.api.to.definition.redis-subnets¶
Type: bool
Default value
false
networkPolicies.egress.from.api.to.definition.notification-services¶
Type: bool
Default value
true
networkPolicies.egress.from.catalog.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"catalog"
networkPolicies.egress.from.catalog.to.definition.registry-subnets¶
Type: bool
Default value
true
networkPolicies.egress.from.datasyncer.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"datasyncer"
networkPolicies.egress.from.datasyncer.to.definition.anchore-data-service¶
Type: bool
Default value
true
networkPolicies.egress.from.notifications.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"notifications"
networkPolicies.egress.from.notifications.to.definition.notification-services¶
Type: bool
Default value
true
networkPolicies.egress.from.smoketest.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"smoketest"
networkPolicies.egress.from.smoketest.to.definition.registry-subnets¶
Type: bool
Default value
true
networkPolicies.egress.from.ui.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"ui"
networkPolicies.egress.from.ui.to.definition.ldap-subnets¶
Type: bool
Default value
true
networkPolicies.egress.from.ui.to.definition.redis-subnets¶
Type: bool
Default value
false
networkPolicies.additionalPolicies¶
Type: list
Default value
[]
sso.enabled¶
Type: bool
Default value
false
sso.name¶
Type: string
Default value
"keycloak"
sso.acsHttpsPort¶
Type: int
Default value
-1
sso.spEntityId¶
Type: string
Default value
"platform1_a8604cc9-f5e9-4656-802d-d05624370245_bb8-anchore"
sso.acsUrl¶
Type: string
Default value
"https://anchore.bigbang.dev/service/sso/auth/keycloak"
sso.defaultAccount¶
Type: string
Default value
"user"
sso.defaultRole¶
Type: string
Default value
"read-write"
sso.roleAttribute¶
Type: string
Default value
""
sso.requireSignedAssertions¶
Type: bool
Default value
false
sso.requireSignedResponse¶
Type: bool
Default value
true
sso.idpMetadataUrl¶
Type: string
Default value
"https://login.dso.mil/auth/realms/baby-yoda/protocol/saml/descriptor"
sso.idpMetadataXml¶
Type: string
Default value
""
sso.host¶
Type: string
Default value
"login.dso.mil"
sso.realm¶
Type: string
Default value
"baby-yoda"
sso.resources.limits.cpu¶
Type: string
Default value
"100m"
sso.resources.limits.memory¶
Type: string
Default value
"256Mi"
sso.resources.requests.cpu¶
Type: string
Default value
"100m"
sso.resources.requests.memory¶
Type: string
Default value
"256Mi"
sso.containerSecurityContext.runAsUser¶
Type: int
Default value
1001
sso.containerSecurityContext.runAsGroup¶
Type: int
Default value
1001
sso.containerSecurityContext.capabilities.drop[0]¶
Type: string
Default value
"ALL"
monitoring.enabled¶
Type: bool
Default value
false
monitoring.namespace¶
Type: string
Default value
"monitoring"
monitoring.serviceMonitor.scheme¶
Type: string
Default value
""
monitoring.serviceMonitor.tlsConfig¶
Type: object
Default value
{}
bbtests.enabled¶
Type: bool
Default value
false
bbtests.scripts.image¶
Type: string
Default value
"registry1.dso.mil/ironbank/anchore/cli/cli:0.9.4"
bbtests.scripts.envs.ANCHORE_CLI_URL¶
Type: string
Default value
"http://{{ include \"enterprise.api.fullname\" . }}:{{ .Values.upstream.api.service.port }}/v2"
bbtests.scripts.envs.ANCHORE_CLI_USER¶
Type: string
Default value
"admin"
bbtests.scripts.envs.ANCHORE_SCAN_IMAGE¶
Type: string
Default value
"quay.io/prometheus/node-exporter:latest"
bbtests.scripts.secretEnvs[0].name¶
Type: string
Default value
"ANCHORE_CLI_PASS"
bbtests.scripts.secretEnvs[0].valueFrom.secretKeyRef.name¶
Type: string
Default value
"{{ include \"enterprise.fullname\" . }}"
bbtests.scripts.secretEnvs[0].valueFrom.secretKeyRef.key¶
Type: string
Default value
"ANCHORE_ADMIN_PASSWORD"
bbtests.cypress.artifacts¶
Type: bool
Default value
true
bbtests.cypress.envs.cypress_url¶
Type: string
Default value
"http://{{ include \"enterprise.ui.fullname\" . }}:{{ .Values.upstream.ui.service.port }}"
bbtests.cypress.envs.cypress_user¶
Type: string
Default value
"admin"
bbtests.cypress.envs.cypress_registry¶
Type: string
Default value
"docker.io"
bbtests.cypress.envs.cypress_repository¶
Type: string
Default value
"anchore/grype"
bbtests.cypress.envs.cypress_tag¶
Type: string
Default value
"latest"
bbtests.cypress.secretEnvs[0].name¶
Type: string
Default value
"cypress_password"
bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.name¶
Type: string
Default value
"{{ include \"enterprise.fullname\" . }}"
bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.key¶
Type: string
Default value
"ANCHORE_ADMIN_PASSWORD"
global.fullnameOverride¶
Type: string
Default value
""
global.nameOverride¶
Type: string
Default value
"anchore-enterprise"
ui-redis.enabled¶
Type: bool
Default value
true
ui-redis.istio.enabled¶
Type: string
Default value
"{{ .Values.istio.enabled }}"
ui-redis.upstream.nameOverride¶
Type: string
Default value
"ui-redis"
ui-redis.upstream.fullnameOverride¶
Type: string
Default value
"anchore-enterprise-ui-redis"
ui-redis.upstream.auth.password¶
Type: string
Default value
"anchore-redis,123"
ui-redis.upstream.architecture¶
Type: string
Default value
"standalone"
ui-redis.upstream.master.persistence.enabled¶
Type: bool
Default value
false
ui-redis.upstream.commonConfiguration¶
Type: string
Default value
"maxmemory 200mb\nsave \"\""
ui-redis.cleanUpgrade.redisLabel¶
Type: string
Default value
"app.kubernetes.io/name: ui-redis"
postgresql.enabled¶
Type: bool
Default value
true
postgresql.image.registry¶
Type: string
Default value
"registry1.dso.mil"
postgresql.image.repository¶
Type: string
Default value
"ironbank/opensource/postgres/postgresql"
postgresql.image.tag¶
Type: string
Default value
"18.4"
postgresql.global.security.allowInsecureImages¶
Type: bool
Default value
true
postgresql.global.postgresql.auth.username¶
Type: string
Default value
"anchore"
Description: PostgreSQL User to create
postgresql.global.postgresql.auth.password¶
Type: string
Default value
"anchore-postgres,123"
Description: PostgreSQL Password for the new user
postgresql.global.postgresql.auth.database¶
Type: string
Default value
"anchore"
Description: PostgreSQL Database to create
postgresql.primary.networkPolicy.enabled¶
Type: bool
Default value
false
postgresql.primary.persistence.mountPath¶
Type: string
Default value
"/var/lib/postgresql"
postgresql.primary.extraVolumes[0].name¶
Type: string
Default value
"run-postgresql"
postgresql.primary.extraVolumes[0].emptyDir¶
Type: object
Default value
{}
postgresql.primary.extraVolumeMounts[0].name¶
Type: string
Default value
"run-postgresql"
postgresql.primary.extraVolumeMounts[0].mountPath¶
Type: string
Default value
"/run/postgresql"
postgresql.primary.resources.limits.cpu¶
Type: string
Default value
"1000m"
postgresql.primary.resources.limits.memory¶
Type: string
Default value
"4096Mi"
postgresql.primary.resources.requests.cpu¶
Type: string
Default value
"1000m"
postgresql.primary.resources.requests.memory¶
Type: string
Default value
"4096Mi"
postgresql.metrics.resources.limits.cpu¶
Type: string
Default value
"200m"
postgresql.metrics.resources.limits.memory¶
Type: string
Default value
"256Mi"
postgresql.metrics.resources.requests.cpu¶
Type: string
Default value
"200m"
postgresql.metrics.resources.requests.memory¶
Type: string
Default value
"256Mi"
postgresql.postgresqlDataDir¶
Type: string
Default value
"/var/lib/postgresql/pgdata/data"
postgresql.volumePermissions.enabled¶
Type: bool
Default value
false