Skip to content

Instantly share code, notes, and snippets.

@ralvares
Created January 22, 2025 05:09
Show Gist options
  • Save ralvares/df4dfe8d7d6c683cf3a028c01de44a3f to your computer and use it in GitHub Desktop.
Save ralvares/df4dfe8d7d6c683cf3a028c01de44a3f to your computer and use it in GitHub Desktop.
Cluster BOT - Secured-Cluster
apiVersion: platform.stackrox.io/v1alpha1
kind: SecuredCluster
metadata:
name: stackrox-secured-cluster-services
namespace: stackrox
spec:
sensor:
resources:
requests:
cpu: 10m
memory: 50Mi
admissionControl:
bypass: BreakGlassAnnotation
contactImageScanners: ScanIfMissing
listenOnCreates: true
listenOnEvents: true
listenOnUpdates: true
replicas: 1
resources:
requests:
cpu: 100m
memory: 50Mi
timeoutSeconds: 10
auditLogs:
collection: Auto
clusterName: production
centralEndpoint: 'central-stackrox.apps.ocp.ralvares.com:443'
monitoring:
openshift:
enabled: true
network:
policies: Enabled
perNode:
collector:
collection: CORE_BPF
forceCollection: false
imageFlavor: Regular
resources:
requests:
cpu: 100m
memory: 50Mi
compliance:
resources:
requests:
cpu: 100m
memory: 50Mi
taintToleration: TolerateTaints
scanner:
analyzer:
resources:
requests:
cpu: 100m
memory: 50Mi
scaling:
autoScaling: Enabled
maxReplicas: 2
minReplicas: 1
replicas: 1
db:
resources:
requests:
cpu: 100m
memory: 50Mi
scannerComponent: AutoSense
scannerV4:
db:
persistence:
persistentVolumeClaim:
claimName: scanner-v4-db
resources:
requests:
cpu: 100m
memory: 50Mi
indexer:
resources:
requests:
cpu: 100m
memory: 50Mi
scaling:
autoScaling: Enabled
maxReplicas: 2
minReplicas: 1
replicas: 1
monitoring:
exposeEndpoint: Disabled
scannerComponent: AutoSense
---
apiVersion: v1
kind: ConfigMap
metadata:
name: collector-config
namespace: stackrox
data:
runtime_config.yaml: |
networking:
externalIps:
enable: true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment