Skip to content

Commit

Permalink
[skip ci] Update Helm Chart To
Browse files Browse the repository at this point in the history
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
  • Loading branch information
github-actions[bot] authored and anurag-rajawat committed Oct 3, 2024
1 parent eacf68b commit b7a0494
Show file tree
Hide file tree
Showing 5 changed files with 6 additions and 38 deletions.
10 changes: 2 additions & 8 deletions deployments/nimbus-k8tls/values.yaml
Original file line number Diff line number Diff line change
@@ -1,38 +1,32 @@
image:
repository: 5gsec/nimbus-k8tls
pullPolicy: Always
tag: "latest"

tag: "v0.4"
nameOverride: ""
fullnameOverride: "nimbus-k8tls"

serviceAccount:
create: true
automount: true
name: "nimbus-k8tls"

podSecurityContext:
fsGroup: 2000

securityContext:
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000

resources:
limits:
cpu: 50m
memory: 64Mi
requests:
cpu: 50m
memory: 64Mi

output:
elasticsearch:
enabled: false
enabled: false
host: "localhost"
user: elastic
port: 9200
Expand Down
9 changes: 1 addition & 8 deletions deployments/nimbus-kubearmor/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,9 @@ image:
repository: 5gsec/nimbus-kubearmor
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
tag: "latest"

tag: "v0.4"
nameOverride: ""
fullnameOverride: "nimbus-kubearmor"

serviceAccount:
# Specifies whether a service account should be created
create: true
Expand All @@ -15,28 +13,23 @@ serviceAccount:
# The name of the service account to use.
# If not set and create is true, a name is generated using the fullname template
name: "nimbus-kubearmor"

podSecurityContext:
fsGroup: 2000

securityContext:
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000

resources:
limits:
cpu: 50m
memory: 64Mi
requests:
cpu: 50m
memory: 64Mi

# Deploy engine
autoDeploy: true

kubearmor-operator:
autoDeploy: true
8 changes: 1 addition & 7 deletions deployments/nimbus-kyverno/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,9 @@ image:
repository: 5gsec/nimbus-kyverno
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
tag: "latest"

tag: "v0.4"
nameOverride: ""
fullnameOverride: "nimbus-kyverno"

serviceAccount:
# Specifies whether a service account should be created
create: true
Expand All @@ -15,25 +13,21 @@ serviceAccount:
# The name of the service account to use.
# If not set and create is true, a name is generated using the fullname template
name: "nimbus-kyverno"

podSecurityContext:
fsGroup: 2000

securityContext:
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000

resources:
limits:
cpu: 50m
memory: 64Mi
requests:
cpu: 50m
memory: 64Mi

# Deploy engine
autoDeploy: true
7 changes: 1 addition & 6 deletions deployments/nimbus-netpol/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,9 @@ image:
repository: 5gsec/nimbus-netpol
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
tag: "latest"

tag: "v0.4"
nameOverride: ""
fullnameOverride: "nimbus-netpol"

serviceAccount:
# Specifies whether a service account should be created
create: true
Expand All @@ -17,18 +15,15 @@ serviceAccount:
# The name of the service account to use.
# If not set and create is true, a name is generated using the fullname template
name: "nimbus-netpol"

podSecurityContext:
fsGroup: 2000

securityContext:
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000

resources:
limits:
cpu: 50m
Expand Down
10 changes: 1 addition & 9 deletions deployments/nimbus/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,18 +4,14 @@ autoDeploy:
netpol: true
kyverno: true
k8tls: true

replicaCount: 1

image:
repository: 5gsec/nimbus
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
tag: "latest"

tag: "v0.4"
nameOverride: ""
fullnameOverride: "nimbus-operator"

serviceAccount:
# Specifies whether a service account should be created
create: true
Expand All @@ -24,26 +20,22 @@ serviceAccount:
# The name of the service account to use.
# If not set and create is true, a name is generated using the fullname template
name: "nimbus-operator"

podSecurityContext:
fsGroup: 2000

securityContext:
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000

resources:
limits:
cpu: 100m
memory: 128Mi
requests:
cpu: 100m
memory: 128Mi

livenessProbe:
httpGet:
path: /healthz
Expand Down

0 comments on commit b7a0494

Please sign in to comment.