Skip to content

Instantly share code, notes, and snippets.

@ralvares
Last active July 3, 2024 09:04
Show Gist options
  • Save ralvares/8c94f65d0d8324ceb8dfc8bb984bcbe2 to your computer and use it in GitHub Desktop.
Save ralvares/8c94f65d0d8324ceb8dfc8bb984bcbe2 to your computer and use it in GitHub Desktop.
secured-cluster.yaml
apiVersion: platform.stackrox.io/v1alpha1
kind: SecuredCluster
metadata:
name: stackrox-secured-cluster-services
namespace: stackrox
spec:
monitoring:
openshift:
enabled: true
auditLogs:
collection: Auto
admissionControl:
listenOnUpdates: true
resources:
requests:
cpu: 100m
memory: 50Mi
ephemeral-storage: 50Mi
bypass: BreakGlassAnnotation
contactImageScanners: DoNotScanInline
listenOnCreates: true
replicas: 1
timeoutSeconds: 20
listenOnEvents: true
sensor:
resources:
requests:
cpu: 100m
memory: 50Mi
ephemeral-storage: 50Mi
scannerV4:
db:
persistence:
persistentVolumeClaim:
claimName: scanner-v4-db
indexer:
scaling:
autoScaling: Disabled
maxReplicas: 5
minReplicas: 2
replicas: 1
scannerComponent: Default
scanner:
analyzer:
resources:
requests:
cpu: 100m
memory: 50Mi
ephemeral-storage: 50Mi
scaling:
autoScaling: Disabled
maxReplicas: 5
minReplicas: 2
replicas: 1
db:
resources:
requests:
cpu: 100m
memory: 50Mi
ephemeral-storage: 50Mi
scannerComponent: AutoSense
perNode:
collector:
collection: EBPF
forceCollection: false
imageFlavor: Regular
resources:
requests:
cpu: 100m
memory: 50Mi
ephemeral-storage: 50Mi
compliance:
resources:
requests:
cpu: 100m
memory: 50Mi
ephemeral-storage: 50Mi
nodeInventory:
resources:
requests:
cpu: 100m
memory: 50Mi
ephemeral-storage: 50Mi
taintToleration: TolerateTaints
clusterName: production
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment