Skip to content

neuvector values.yaml📜

openshift📜

Type: bool

Default value
false

registry📜

Type: string

Default value
"registry1.dso.mil"

tag📜

Type: string

Default value
"5.3.3"

oem📜

Type: string

Default value
nil

imagePullSecrets📜

Type: string

Default value
"private-registry"

psp📜

Type: bool

Default value
false

rbac📜

Type: bool

Default value
true

serviceAccount📜

Type: string

Default value
"default"

leastPrivilege📜

Type: bool

Default value
false

global.cattle.url📜

Type: string

Default value
nil

global.azure.enabled📜

Type: bool

Default value
false

global.azure.identity.clientId📜

Type: string

Default value
"DONOTMODIFY"

global.azure.marketplace.planId📜

Type: string

Default value
"DONOTMODIFY"

global.azure.extension.resourceId📜

Type: string

Default value
"DONOTMODIFY"

global.azure.serviceAccount📜

Type: string

Default value
"csp"

global.azure.imagePullSecrets📜

Type: string

Default value
nil

global.azure.images.neuvector_csp_pod.tag📜

Type: string

Default value
"latest"

global.azure.images.neuvector_csp_pod.image📜

Type: string

Default value
"neuvector-billing-azure-by-suse-llc"

global.azure.images.neuvector_csp_pod.registry📜

Type: string

Default value
"registry.suse.de/suse/sle-15-sp5/update/pubclouds/images"

global.azure.images.neuvector_csp_pod.imagePullPolicy📜

Type: string

Default value
"IfNotPresent"

global.azure.images.controller.tag📜

Type: string

Default value
"5.2.4"

global.azure.images.controller.image📜

Type: string

Default value
"controller"

global.azure.images.controller.registry📜

Type: string

Default value
"docker.io/neuvector"

global.azure.images.manager.tag📜

Type: string

Default value
"5.2.4"

global.azure.images.manager.image📜

Type: string

Default value
"manager"

global.azure.images.manager.registry📜

Type: string

Default value
"docker.io/neuvector"

global.azure.images.enforcer.tag📜

Type: string

Default value
"5.2.4"

global.azure.images.enforcer.image📜

Type: string

Default value
"enforcer"

global.azure.images.enforcer.registry📜

Type: string

Default value
"docker.io/neuvector"

global.aws.enabled📜

Type: bool

Default value
false

global.aws.accountNumber📜

Type: string

Default value
""

global.aws.roleName📜

Type: string

Default value
""

global.aws.serviceAccount📜

Type: string

Default value
"csp"

global.aws.annotations📜

Type: object

Default value
{}

global.aws.imagePullSecrets📜

Type: string

Default value
nil

global.aws.image.digest📜

Type: string

Default value
""

global.aws.image.repository📜

Type: string

Default value
"neuvector/neuvector-csp-adapter"

global.aws.image.tag📜

Type: string

Default value
"latest"

global.aws.image.imagePullPolicy📜

Type: string

Default value
"IfNotPresent"

autoGenerateCert📜

Type: bool

Default value
true

defaultValidityPeriod📜

Type: int

Default value
365

internal.certmanager.enabled📜

Type: bool

Default value
false

internal.certmanager.secretname📜

Type: string

Default value
"neuvector-internal"

controller.enabled📜

Type: bool

Default value
true

controller.annotations📜

Type: object

Default value
{}

controller.strategy.type📜

Type: string

Default value
"RollingUpdate"

controller.strategy.rollingUpdate.maxSurge📜

Type: int

Default value
1

controller.strategy.rollingUpdate.maxUnavailable📜

Type: int

Default value
0

controller.image.repository📜

Type: string

Default value
"ironbank/neuvector/neuvector/controller"

controller.image.hash📜

Type: string

Default value
nil

controller.replicas📜

Type: int

Default value
3

controller.disruptionbudget📜

Type: int

Default value
0

controller.schedulerName📜

Type: string

Default value
nil

controller.priorityClassName📜

Type: string

Default value
nil

controller.podLabels📜

Type: object

Default value
{}

controller.podAnnotations📜

Type: object

Default value
{}

controller.containerSecurityContext.privileged📜

Type: bool

Default value
true

controller.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

controller.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

controller.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

controller.env📜

Type: list

Default value
[]

controller.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].weight📜

Type: int

Default value
100

controller.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].key📜

Type: string

Default value
"app"

controller.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].operator📜

Type: string

Default value
"In"

controller.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].values[0]📜

Type: string

Default value
"neuvector-controller-pod"

controller.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.topologyKey📜

Type: string

Default value
"kubernetes.io/hostname"

controller.tolerations📜

Type: list

Default value
[]

controller.topologySpreadConstraints📜

Type: list

Default value
[]

controller.nodeSelector📜

Type: object

Default value
{}

controller.apisvc.type📜

Type: string

Default value
nil

controller.apisvc.annotations📜

Type: object

Default value
{}

controller.apisvc.route.enabled📜

Type: bool

Default value
false

controller.apisvc.route.termination📜

Type: string

Default value
"passthrough"

controller.apisvc.route.host📜

Type: string

Default value
nil

controller.apisvc.route.tls📜

Type: string

Default value
nil

controller.ranchersso.enabled📜

Type: bool

Default value
false

controller.sso.certificateAuthority.secretName📜

Type: string

Default value
""

controller.pvc.enabled📜

Type: bool

Default value
false

controller.pvc.existingClaim📜

Type: bool

Default value
false

controller.pvc.accessModes[0]📜

Type: string

Default value
"ReadWriteMany"

controller.pvc.storageClass📜

Type: string

Default value
nil

controller.pvc.capacity📜

Type: string

Default value
nil

controller.azureFileShare.enabled📜

Type: bool

Default value
false

controller.azureFileShare.secretName📜

Type: string

Default value
nil

controller.azureFileShare.shareName📜

Type: string

Default value
nil

controller.certificate.secret📜

Type: string

Default value
""

controller.certificate.keyFile📜

Type: string

Default value
"tls.key"

controller.certificate.pemFile📜

Type: string

Default value
"tls.pem"

controller.internal.certificate.secret📜

Type: string

Default value
""

controller.internal.certificate.keyFile📜

Type: string

Default value
"tls.key"

controller.internal.certificate.pemFile📜

Type: string

Default value
"tls.crt"

controller.internal.certificate.caFile📜

Type: string

Default value
"ca.crt"

controller.federation.mastersvc.type📜

Type: string

Default value
nil

controller.federation.mastersvc.loadBalancerIP📜

Type: string

Default value
nil

controller.federation.mastersvc.clusterIP📜

Type: string

Default value
nil

controller.federation.mastersvc.nodePort📜

Type: string

Default value
nil

controller.federation.mastersvc.externalTrafficPolicy📜

Type: string

Default value
nil

controller.federation.mastersvc.internalTrafficPolicy📜

Type: string

Default value
nil

controller.federation.mastersvc.ingress.enabled📜

Type: bool

Default value
false

controller.federation.mastersvc.ingress.host📜

Type: string

Default value
nil

controller.federation.mastersvc.ingress.ingressClassName📜

Type: string

Default value
""

controller.federation.mastersvc.ingress.path📜

Type: string

Default value
"/"

controller.federation.mastersvc.ingress.annotations.”nginx.ingress.kubernetes.io/backend-protocol”📜

Type: string

Default value
"HTTPS"

controller.federation.mastersvc.ingress.tls📜

Type: bool

Default value
false

controller.federation.mastersvc.ingress.secretName📜

Type: string

Default value
nil

controller.federation.mastersvc.annotations📜

Type: object

Default value
{}

controller.federation.mastersvc.route.enabled📜

Type: bool

Default value
false

controller.federation.mastersvc.route.termination📜

Type: string

Default value
"passthrough"

controller.federation.mastersvc.route.host📜

Type: string

Default value
nil

controller.federation.mastersvc.route.tls📜

Type: string

Default value
nil

controller.federation.managedsvc.type📜

Type: string

Default value
nil

controller.federation.managedsvc.loadBalancerIP📜

Type: string

Default value
nil

controller.federation.managedsvc.clusterIP📜

Type: string

Default value
nil

controller.federation.managedsvc.nodePort📜

Type: string

Default value
nil

controller.federation.managedsvc.externalTrafficPolicy📜

Type: string

Default value
nil

controller.federation.managedsvc.internalTrafficPolicy📜

Type: string

Default value
nil

controller.federation.managedsvc.ingress.enabled📜

Type: bool

Default value
false

controller.federation.managedsvc.ingress.host📜

Type: string

Default value
nil

controller.federation.managedsvc.ingress.ingressClassName📜

Type: string

Default value
""

controller.federation.managedsvc.ingress.path📜

Type: string

Default value
"/"

controller.federation.managedsvc.ingress.annotations.”nginx.ingress.kubernetes.io/backend-protocol”📜

Type: string

Default value
"HTTPS"

controller.federation.managedsvc.ingress.tls📜

Type: bool

Default value
false

controller.federation.managedsvc.ingress.secretName📜

Type: string

Default value
nil

controller.federation.managedsvc.annotations📜

Type: object

Default value
{}

controller.federation.managedsvc.route.enabled📜

Type: bool

Default value
false

controller.federation.managedsvc.route.termination📜

Type: string

Default value
"passthrough"

controller.federation.managedsvc.route.host📜

Type: string

Default value
nil

controller.federation.managedsvc.route.tls📜

Type: string

Default value
nil

controller.ingress.enabled📜

Type: bool

Default value
false

controller.ingress.host📜

Type: string

Default value
nil

controller.ingress.ingressClassName📜

Type: string

Default value
""

controller.ingress.path📜

Type: string

Default value
"/"

controller.ingress.annotations.”nginx.ingress.kubernetes.io/backend-protocol”📜

Type: string

Default value
"HTTPS"

controller.ingress.tls📜

Type: bool

Default value
false

controller.ingress.secretName📜

Type: string

Default value
nil

controller.resources📜

Type: object

Default value
{}

controller.configmap.enabled📜

Type: bool

Default value
false

controller.configmap.data📜

Type: string

Default value
nil

controller.secret.enabled📜

Type: bool

Default value
false

controller.secret.data.”userinitcfg.yaml”.users[0].Fullname📜

Type: string

Default value
"admin"

controller.secret.data.”userinitcfg.yaml”.users[0].Password📜

Type: string

Default value
nil

controller.secret.data.”userinitcfg.yaml”.users[0].Role📜

Type: string

Default value
"admin"

enforcer.enabled📜

Type: bool

Default value
true

enforcer.image.repository📜

Type: string

Default value
"ironbank/neuvector/neuvector/enforcer"

enforcer.image.hash📜

Type: string

Default value
nil

enforcer.updateStrategy.type📜

Type: string

Default value
"RollingUpdate"

enforcer.priorityClassName📜

Type: string

Default value
nil

enforcer.podLabels📜

Type: object

Default value
{}

enforcer.podAnnotations📜

Type: object

Default value
{}

enforcer.containerSecurityContext.privileged📜

Type: bool

Default value
true

enforcer.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

enforcer.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

enforcer.env📜

Type: list

Default value
[]

enforcer.tolerations[0].effect📜

Type: string

Default value
"NoSchedule"

enforcer.tolerations[0].key📜

Type: string

Default value
"node-role.kubernetes.io/master"

enforcer.tolerations[1].effect📜

Type: string

Default value
"NoSchedule"

enforcer.tolerations[1].key📜

Type: string

Default value
"node-role.kubernetes.io/control-plane"

enforcer.resources📜

Type: object

Default value
{}

enforcer.internal.certificate.secret📜

Type: string

Default value
""

enforcer.internal.certificate.keyFile📜

Type: string

Default value
"tls.key"

enforcer.internal.certificate.pemFile📜

Type: string

Default value
"tls.crt"

enforcer.internal.certificate.caFile📜

Type: string

Default value
"ca.crt"

manager.enabled📜

Type: bool

Default value
true

manager.image.repository📜

Type: string

Default value
"ironbank/neuvector/neuvector/manager"

manager.image.hash📜

Type: string

Default value
nil

manager.priorityClassName📜

Type: string

Default value
nil

manager.env.ssl📜

Type: bool

Default value
false

manager.env.envs[0].name📜

Type: string

Default value
"JDK_JAVA_OPTIONS"

manager.env.envs[0].value📜

Type: string

Default value
"-Dcom.redhat.fips=false"

manager.svc.type📜

Type: string

Default value
"ClusterIP"

manager.svc.loadBalancerIP📜

Type: string

Default value
nil

manager.svc.annotations📜

Type: object

Default value
{}

manager.route.enabled📜

Type: bool

Default value
true

manager.route.termination📜

Type: string

Default value
"passthrough"

manager.route.host📜

Type: string

Default value
nil

manager.route.tls📜

Type: string

Default value
nil

manager.certificate.secret📜

Type: string

Default value
""

manager.certificate.keyFile📜

Type: string

Default value
"tls.key"

manager.certificate.pemFile📜

Type: string

Default value
"tls.pem"

manager.ingress.enabled📜

Type: bool

Default value
false

manager.ingress.host📜

Type: string

Default value
nil

manager.ingress.ingressClassName📜

Type: string

Default value
""

manager.ingress.path📜

Type: string

Default value
"/"

manager.ingress.annotations.”nginx.ingress.kubernetes.io/backend-protocol”📜

Type: string

Default value
"HTTPS"

manager.ingress.tls📜

Type: bool

Default value
false

manager.ingress.secretName📜

Type: string

Default value
nil

manager.resources📜

Type: object

Default value
{}

manager.topologySpreadConstraints📜

Type: list

Default value
[]

manager.affinity📜

Type: object

Default value
{}

manager.podLabels📜

Type: object

Default value
{}

manager.podAnnotations📜

Type: object

Default value
{}

manager.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

manager.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

manager.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

manager.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

manager.tolerations📜

Type: list

Default value
[]

manager.nodeSelector📜

Type: object

Default value
{}

manager.securityContext.runAsNonRoot📜

Type: bool

Default value
true

manager.securityContext.runAsUser📜

Type: int

Default value
1000

manager.securityContext.runAsGroup📜

Type: int

Default value
1000

manager.securityContext.fsGroup📜

Type: int

Default value
1000

cve.adapter.enabled📜

Type: bool

Default value
false

cve.adapter.image.repository📜

Type: string

Default value
"neuvector/registry-adapter"

cve.adapter.image.tag📜

Type: string

Default value
"0.1.2"

cve.adapter.image.hash📜

Type: string

Default value
nil

cve.adapter.priorityClassName📜

Type: string

Default value
nil

cve.adapter.resources📜

Type: object

Default value
{}

cve.adapter.affinity📜

Type: object

Default value
{}

cve.adapter.podLabels📜

Type: object

Default value
{}

cve.adapter.podAnnotations📜

Type: object

Default value
{}

cve.adapter.env📜

Type: list

Default value
[]

cve.adapter.tolerations📜

Type: list

Default value
[]

cve.adapter.nodeSelector📜

Type: object

Default value
{}

cve.adapter.runAsUser📜

Type: string

Default value
nil

cve.adapter.certificate.secret📜

Type: string

Default value
""

cve.adapter.certificate.keyFile📜

Type: string

Default value
"tls.key"

cve.adapter.certificate.pemFile📜

Type: string

Default value
"tls.crt"

cve.adapter.harbor.protocol📜

Type: string

Default value
"https"

cve.adapter.harbor.secretName📜

Type: string

Default value
nil

cve.adapter.svc.type📜

Type: string

Default value
"NodePort"

cve.adapter.svc.loadBalancerIP📜

Type: string

Default value
nil

cve.adapter.svc.annotations📜

Type: object

Default value
{}

cve.adapter.route.enabled📜

Type: bool

Default value
true

cve.adapter.route.termination📜

Type: string

Default value
"passthrough"

cve.adapter.route.host📜

Type: string

Default value
nil

cve.adapter.route.tls📜

Type: string

Default value
nil

cve.adapter.ingress.enabled📜

Type: bool

Default value
false

cve.adapter.ingress.host📜

Type: string

Default value
nil

cve.adapter.ingress.ingressClassName📜

Type: string

Default value
""

cve.adapter.ingress.path📜

Type: string

Default value
"/"

cve.adapter.ingress.annotations.”nginx.ingress.kubernetes.io/backend-protocol”📜

Type: string

Default value
"HTTPS"

cve.adapter.ingress.tls📜

Type: bool

Default value
false

cve.adapter.ingress.secretName📜

Type: string

Default value
nil

cve.adapter.internal.certificate.secret📜

Type: string

Default value
""

cve.adapter.internal.certificate.keyFile📜

Type: string

Default value
"tls.key"

cve.adapter.internal.certificate.pemFile📜

Type: string

Default value
"tls.crt"

cve.adapter.internal.certificate.caFile📜

Type: string

Default value
"ca.crt"

cve.updater.enabled📜

Type: bool

Default value
true

cve.updater.secure📜

Type: bool

Default value
false

cve.updater.cacert📜

Type: string

Default value
"/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"

cve.updater.image.repository📜

Type: string

Default value
"ironbank/big-bang/base"

cve.updater.image.tag📜

Type: string

Default value
"2.1.0"

cve.updater.image.hash📜

Type: string

Default value
nil

cve.updater.schedule📜

Type: string

Default value
"0 0 * * *"

cve.updater.priorityClassName📜

Type: string

Default value
nil

cve.updater.resources📜

Type: object

Default value
{}

cve.updater.podLabels📜

Type: object

Default value
{}

cve.updater.podAnnotations📜

Type: object

Default value
{}

cve.updater.nodeSelector📜

Type: object

Default value
{}

cve.updater.securityContext.runAsUser📜

Type: int

Default value
1000

cve.updater.securityContext.runAsGroup📜

Type: int

Default value
1000

cve.updater.securityContext.fsGroup📜

Type: int

Default value
1000

cve.updater.securityContext.runAsNonRoot📜

Type: bool

Default value
true

cve.updater.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

cve.updater.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

cve.updater.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

cve.updater.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

cve.scanner.enabled📜

Type: bool

Default value
true

cve.scanner.replicas📜

Type: int

Default value
3

cve.scanner.dockerPath📜

Type: string

Default value
""

cve.scanner.strategy.type📜

Type: string

Default value
"RollingUpdate"

cve.scanner.strategy.rollingUpdate.maxSurge📜

Type: int

Default value
1

cve.scanner.strategy.rollingUpdate.maxUnavailable📜

Type: int

Default value
0

cve.scanner.image.repository📜

Type: string

Default value
"ironbank/neuvector/neuvector/scanner"

cve.scanner.image.tag📜

Type: string

Default value
"5"

cve.scanner.image.hash📜

Type: string

Default value
nil

cve.scanner.priorityClassName📜

Type: string

Default value
nil

cve.scanner.resources📜

Type: object

Default value
{}

cve.scanner.topologySpreadConstraints📜

Type: list

Default value
[]

cve.scanner.affinity📜

Type: object

Default value
{}

cve.scanner.podLabels📜

Type: object

Default value
{}

cve.scanner.podAnnotations📜

Type: object

Default value
{}

cve.scanner.env📜

Type: list

Default value
[]

cve.scanner.tolerations📜

Type: list

Default value
[]

cve.scanner.nodeSelector📜

Type: object

Default value
{}

cve.scanner.securityContext.runAsNonRoot📜

Type: bool

Default value
true

cve.scanner.securityContext.runAsUser📜

Type: int

Default value
1000

cve.scanner.securityContext.runAsGroup📜

Type: int

Default value
1000

cve.scanner.securityContext.fsGroup📜

Type: int

Default value
1000

cve.scanner.internal.certificate.secret📜

Type: string

Default value
""

cve.scanner.internal.certificate.keyFile📜

Type: string

Default value
"tls.key"

cve.scanner.internal.certificate.pemFile📜

Type: string

Default value
"tls.crt"

cve.scanner.internal.certificate.caFile📜

Type: string

Default value
"ca.crt"

cve.scanner.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

cve.scanner.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

cve.scanner.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

cve.scanner.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

docker.path📜

Type: string

Default value
"/var/run/docker.sock"

resources📜

Type: object

Default value
{}

runtimePath📜

Type: string

Default value
nil

docker.path📜

Type: string

Default value
"/var/run/docker.sock"

k3s.enabled📜

Type: bool

Default value
false

k3s.runtimePath📜

Type: string

Default value
"/run/k3s/containerd/containerd.sock"

bottlerocket.enabled📜

Type: bool

Default value
false

bottlerocket.runtimePath📜

Type: string

Default value
"/run/dockershim.sock"

containerd.enabled📜

Type: bool

Default value
false

containerd.path📜

Type: string

Default value
"/var/run/containerd/containerd.sock"

crio.enabled📜

Type: bool

Default value
false

crio.path📜

Type: string

Default value
"/var/run/crio/crio.sock"

admissionwebhook.type📜

Type: string

Default value
"ClusterIP"

crdwebhook.enabled📜

Type: bool

Default value
true

crdwebhook.type📜

Type: string

Default value
"ClusterIP"

domain📜

Type: string

Default value
"bigbang.dev"

istio.enabled📜

Type: bool

Default value
false

istio.injection📜

Type: string

Default value
"enabled"

istio.hardened.enabled📜

Type: bool

Default value
false

istio.hardened.customAuthorizationPolicies📜

Type: list

Default value
[]

istio.hardened.outboundTrafficPolicyMode📜

Type: string

Default value
"REGISTRY_ONLY"

istio.hardened.monitoring.enabled📜

Type: bool

Default value
true

istio.hardened.monitoring.namespaces[0]📜

Type: string

Default value
"monitoring"

istio.hardened.monitoring.principals[0]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-grafana"

istio.hardened.monitoring.principals[1]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-alertmanager"

istio.hardened.monitoring.principals[2]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-operator"

istio.hardened.monitoring.principals[3]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus"

istio.hardened.monitoring.principals[4]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-state-metrics"

istio.hardened.monitoring.principals[5]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-prometheus-node-exporter"

istio.hardened.customServiceEntries📜

Type: list

Default value
[]

istio.neuvector.enabled📜

Type: bool

Default value
true

istio.neuvector.annotations📜

Type: object

Default value
{}

istio.neuvector.labels📜

Type: object

Default value
{}

istio.neuvector.gateways[0]📜

Type: string

Default value
"istio-system/main"

istio.neuvector.hosts[0]📜

Type: string

Default value
"neuvector.{{ .Values.domain }}"

istio.mtls📜

Type: object

Default value
mode: STRICT

Description: Default neuvector peer authentication

istio.mtls.mode📜

Type: string

Default value
"STRICT"

Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic

monitoring.enabled📜

Type: bool

Default value
false

monitoring.namespace📜

Type: string

Default value
"monitoring"

networkPolicies.enabled📜

Type: bool

Default value
false

networkPolicies.ingressLabels.app📜

Type: string

Default value
"istio-ingressgateway"

networkPolicies.ingressLabels.istio📜

Type: string

Default value
"ingressgateway"

networkPolicies.controlPlaneCidr📜

Type: string

Default value
"0.0.0.0/0"

networkPolicies.additionalPolicies📜

Type: list

Default value
[]

monitor.imagePullSecrets📜

Type: string

Default value
"private-registry"

bbtests.enabled📜

Type: bool

Default value
false

bbtests.cypress.artifacts📜

Type: bool

Default value
true

bbtests.cypress.envs.cypress_url📜

Type: string

Default value
"http://neuvector-service-webui.{{ .Release.Namespace }}.svc.cluster.local:8443"

bbtests.scripts.envs.URL📜

Type: string

Default value
"http://neuvector-service-webui.{{ .Release.Namespace }}.svc.cluster.local:8443"