OPA Exporter Helm Chart providing monitoring of violations from OPA Gatekeeper
- Kubernetes Cluster deployed
- Kubernetes config installed in
~/.kube/config
- Helm installed
Install Helm
https://helm.sh/docs/intro/install/
- Clone down the repository
- cd into directory
helm install cluster-auditor chart/
Key | Type | Default | Description |
---|---|---|---|
istio.enabled | bool | false |
|
istio.mtls.mode | string | "STRICT" |
|
annotations | object | {} |
|
monitoring.enabled | bool | true |
|
monitoring.dashboards.label.grafana_dashboard | string | "1" |
|
monitoring.dashboards.namespace | string | "monitoring" |
|
image.repo | string | "registry1.dso.mil/ironbank/bigbang/cluster-auditor/opa-exporter" |
|
image.tag | string | "v0.0.7" |
|
image.imagePullPolicy | string | "Always" |
|
imagePullSecrets[0].name | string | "private-registry" |
|
tolerations | list | [] |
|
resources.requests.cpu | string | "300m" |
|
resources.requests.memory | string | "300Mi" |
|
resources.limits.cpu | string | "300m" |
|
resources.limits.memory | string | "300Mi" |
|
loglevel | string | "debug" |
|
securityContext.readOnlyRootFilesystem | bool | true |
|
securityContext.capabilities.drop[0] | string | "ALL" |
|
securityContext.allowPrivilegeEscalation | bool | false |
|
securityContext.privileged | bool | false |
|
affinity | object | {} |
|
nodeSelector | object | {} |
|
networkPolicies.enabled | bool | false |
|
networkPolicies.controlPlaneCidr | string | "0.0.0.0/0" |
|
openshift | bool | false |
|
nameOverride | string | "cluster-auditor" |
|
bbtests.enabled | bool | false |
|
bbtests.cypress.artifacts | bool | true |
|
bbtests.cypress.envs.cypress_grafana_url | string | "http://grafana.monitoring.svc.cluster.local" |
|
bbtests.cypress.envs.cypress_prometheus_url | string | "http://monitoring-kube-prometheus-prometheus.monitoring.svc.cluster.local:9090" |
|
bbtests.cypress.envs.cypress_url | string | "http://monitoring-grafana.monitoring.svc.cluster.local/d/YBgRZG6Mz/opa-violations?orgId=1" |
|
bbtests.cypress.envs.cypress_table_bar_allownodata | string | "1" |
|
bbtests.cypress.envs.cypress_graph_allownodata | string | "2" |
|
bbtests.cypress.envs.cypress_reporter_ns | string | "cluster-auditor" |
Please see the contributing guide if you are interested in contributing.