-
Notifications
You must be signed in to change notification settings - Fork 68
/
values.yaml
143 lines (113 loc) · 2.9 KB
/
values.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
# Default values for falcon-integration-gateway.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
push:
aws_security_hub:
enabled: false
region:
confirm_instance: true
aws_sqs:
enabled: false
region:
sqs_queue_name:
azure_log_analytics:
enabled: false
workspace_id:
primary_key:
arc_autodiscovery: false
chronicle:
enabled: false
region:
service_account:
customer_id:
cloudtrail_lake:
enabled: false
channel_arn:
region:
gcp_security_command_center:
enabled: false
vmware_workspace_one:
enabled: false
syslog_host:
syslog_port:
token:
generic:
enabled: false
credentials_store:
# Provide credentials store. Supported values: ssm, secrets_manager
store:
ssm:
# Provide aws region for SSM
region:
# Provide SSM parameter name or path of the client id
client_id:
# Provide SSM parameter name or path of the client secret
client_secret:
secrets_manager:
# Provide aws region for Secrets Manager
region:
# Provide Secrets Manager secret name
secret_name:
# To provide Secrets Manager client id key
client_id_key:
# To provide Secrets Manager client secret key
client_secret_key:
falcon:
client_id:
client_secret:
cloud_region:
# Use this value if you have an existing secret
# defined in your k8s that may contain secrets
# for falcon api client id and pw
existingSecret: ""
integration_gateway:
# Configure number of threads that process Falcon Events
worker_threads: 4
# Filter out events based on severity (allowed values 1-5, default 2)
severity_threshold: 2
# Filter out events based on number of days past the event (default 21)
older_than_days_threshold: 21
# Exclude events originating from certain cloud environments (AWS, Azure, GCP, or unrecognized)
detections_exclude_clouds:
# Pass in the offset to start the stream from. (default: 0)
offset: 0
# Configure logging level (ERROR, WARN, INFO, DEBUG)
level: INFO
# Provide application id. Needs to be different per each fig instance.
application_id: helm-chart-default
replicaCount: 1
image:
repository: quay.io/crowdstrike/falcon-integration-gateway
pullPolicy: Always
tag: latest
imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""
podAnnotations: {}
podSecurityContext: {}
# fsGroup: 2000
securityContext:
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
serviceAccount:
name: falcon-integration-gateway
annotations: {}
resources: {}
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
autoscaling:
enabled: false
minReplicas: 1
maxReplicas: 100
targetCPUUtilizationPercentage: 80
# targetMemoryUtilizationPercentage: 80
nodeSelector: {}
tolerations: []
affinity: {}