Configuration

Create a values file for your helm deploy:

TimeZone: "CET"
logLevel: "INFO"
flaskConfig: "production" #or development

serviceAccount:
  create: true
  name: "kubedash-admin"

image:
  repository: devopstales/kubedash
  tag: 2.0
  pullPolicy: Always

podSecurityContext:
  runAsNonRoot: true
  runAsUser: 10001

containerSecurityContext:
  allowPrivilegeEscalation: false
  capabilities:
    drop: ["all"]

ingress:
  enabled: true
  url: "kubedash.mydomain.intra"
  annotations:
    nginx.ingress.kubernetes.io/proxy-body-size: "10m"
    kubernetes.io/ingress.class: nginx
  tls:
    enabled: true
    tlsSecret: "mycert-tls"
    certManager:
      enabled: false
      clusterIssuer: "letsencrypt"
  whitelist:
    enabled: false
    ips: []

route:
  enabled: false

Operator Configuration

The following tables lists configurable parameters of the trivy-operator chart and their default values.

Key	Type	Default	Description
TimeZone	string	"CET"	Time Zone in container
affinity	object	{}	Set the affinity for the pod.
containerSecurityContext	object	{"allowPrivilegeEscalation":false,"capabilities":{"drop":["all"]}}	list of the container's SecurityContexts
flaskConfig	string	"production"	flask environment: production or development
image.pullPolicy	string	"Always"	The docker image pull policy
image.repository	string	"devopstales/kubedash"	The docker image repository to use
image.tag	string	"2.0"	The docker image tag to use
ingress.annotations	object	{"kubernetes.io/ingress.class":"nginx","nginx.ingress.kubernetes.io/proxy-body-size":"10m"}	Extra annotation to the Ingress object
ingress.enabled	bool	true	Enable Ingress object creation
ingress.tls.certManager.clusterIssuer	string	"letsencrypt"	Name of the certManager cluster issuer to use
ingress.tls.certManager.enabled	bool	false	Enable certManager
ingress.tls.enabled	bool	true	Enable tls on Ingress object
ingress.tls.tlsSecret	string	""	Name of the secret storing tls cert
ingress.url	string	"kubedash.mydomain.intra"	URL of the Ingress object
ingress.whitelist.enabled	bool	false	Enable ip blocking on ingress
ingress.whitelist.ips	list	[]	List of ips to allow communication
logLevel	string	"INFO"	Log level
nodeSelector	object	{}	Set nodeSelector for the pod
persistence.accessMode	string	"ReadWriteOnce"	Volumes mode
persistence.annotations	object	{}	Volumes annotations
persistence.enabled	bool	true	Volumes for the pod
persistence.size	string	"1Gi"	Volumes size
podSecurityContext	object	{"fsGroup":10001,"fsGroupChangePolicy":"OnRootMismatch","runAsNonRoot":true,"runAsUser":10001}	list of the pos's SecurityContexts
route.annotations	object	{}	Extra annotation to the OpenShift Route object
route.enabled	bool	false	Enable OpenShift Route object creation
route.url	string	"kubedash.mydomain.intra"	URL of the OpenShift Route object
serviceAccount.create	bool	true	Enable automatic serviceAccount creation
serviceAccount.name	string	"kubedash-admin"	Configure the name of the serviceAccount
tolerations	list	[]	Set tolerations for the pod