aurva-dataplane

Aurva Data Plane Helm Chart Aurva Data Plane Helm chart provides a comprehensive and sophisticated security solution for databases, empowering organizations to fortify their data protection strategies. The chart seamlessly deploys the entire Aurva Data Plane system, encompassing essential components designed to enhance security and observability. Key Components:

Aurva-Controller: Enables efficient data discovery within cloud accounts, listing and analyzing available data sources. Advanced ML models are employed to predict data sensitivity and assess risk scores, bolstering data protection.
Aurva-eBPF: Delivering unparalleled monitoring and observability, Aurva-eBPF meticulously tracks and analyzes database queries. Crucial details such as query sources, timestamps, and user identities are recorded, enabling rapid detection of anomalies and potential security threats.
Aurva-Proxy: Positioned as a critical inline component, Aurva-Proxy provides granular Access Control Lists (ACL) to safeguard against real-time database abuse and malicious attacks. It seamlessly integrates with the application-database pipeline, ensuring secure and authorized data access. The values.yaml file allows effortless customization of the deployment, empowering users to tailor security settings based on their specific requirements and compliance standards. Prerequisites: - Kubernetes 1.16+ - Helm 3.x

Homepage: https://github.com/aurva-io/aurva-charts

Maintainers

Name	Email	Url
aurva	contact@aurva.com

Values

Key	Type	Default	Description
aurva_analyzer.additionalLabels	object	`{}`	Additional labels for aurva-analyzer
aurva_analyzer.additionalPodAnnotations	object	`{"test":"value"}`	Additional Pod Annotations added on pod created by this Deployment
aurva_analyzer.affinity	string	`nil`	Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
aurva_analyzer.annotations	object	`{"key":"test"}`	Annotations on aurva-analyzer
aurva_analyzer.dnsConfig	object	`{}`	[DNS configuration]
aurva_analyzer.dnsPolicy	string	`"ClusterFirst"`	Alternative DNS policy for application controller pods
aurva_analyzer.env	list	`[]`
aurva_analyzer.envFrom	object	`{"aurva-controller":{"name":"aurva-analyzer-secrets","type":"secret"}}`	If want to mount Envs from configmap or secret
aurva_analyzer.image.pullPolicy	string	`"IfNotPresent"`
aurva_analyzer.image.repository	string	`"119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-analyzer"`
aurva_analyzer.image.tag	string	`"407ea56"`
aurva_analyzer.imagePullSecrets	string	`""`	Secrets used to pull image
aurva_analyzer.nodeSelector	string	`nil`	Select nodes to deploy which matches the following labels
aurva_analyzer.podLabels	object	`{}`	Additional label added on pod which is used in Service's Label Selector
aurva_analyzer.replicas	int	`1`	no of replicas for aurva analyzer
aurva_analyzer.resources	object	`{"limits":{"cpu":1,"memory":"512Mi"},"requests":{"cpu":1,"memory":"256Mi"}}`	Resources to be defined for pod
aurva_analyzer.secret.additionalLabels	string	`nil`	Additional Labels on secrets
aurva_analyzer.secret.annotations	string	`nil`	Annotations on secrets
aurva_analyzer.secret.config.COMPANY_ID	string	`"b9c03775-8f44-4b46-b71b-7f37dbdd3e9d"`
aurva_analyzer.secret.config.CONTROLLER_URL	string	`"aurva-test-aurva-controller-svc.test:9090"`
aurva_analyzer.secret.config.ENVIRONMENT	string	`"staging"`
aurva_analyzer.secret.name	string	`"aurva-analyzer-secrets"`
aurva_analyzer.serviceAccount.annotations	string	`nil`	Annotations applied to created service account
aurva_analyzer.serviceAccount.create	bool	`true`	Create a service account for the aurva controller
aurva_analyzer.serviceAccount.labels	object	`{}`	Labels applied to created service account
aurva_analyzer.serviceAccount.name	string	`"aurva-analyzer-sa"`	Service account name
aurva_analyzer.tolerations	string	`nil`	Taint tolerations for nodes
aurva_collector.additionalLabels	object	`{"test":"done"}`	Additional labels for aurva-analyzer
aurva_collector.additionalPodAnnotations	object	`{"test":"value"}`	Additional Pod Annotations added on pod created by this Deployment
aurva_collector.affinity	string	`nil`	Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
aurva_collector.annotations	object	`{"key":"test"}`	Annotations on aurva-analyzer
aurva_collector.env	list	`[]`
aurva_collector.envFrom	object	`{"aurva-controller":{"name":"aurva-collector-secrets","type":"secret"}}`	If want to mount Envs from configmap or secret
aurva_collector.image.pullPolicy	string	`"IfNotPresent"`
aurva_collector.image.repository	string	`"119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-collector"`
aurva_collector.image.tag	string	`"6213694"`
aurva_collector.imagePullSecrets	string	`""`	Secrets used to pull image
aurva_collector.nodeSelector	string	`nil`	Select nodes to deploy which matches the following labels
aurva_collector.podLabels	object	`{}`	Additional label added on pod which is used in Service's Label Selector
aurva_collector.podSecurityContext	object	`{}`
aurva_collector.priorityClassName	string	`"system-node-critical"`	priorityClassName that you want to associate to daemonset pods
aurva_collector.resources.limits.cpu	int	`1`
aurva_collector.resources.limits.memory	string	`"2048Mi"`
aurva_collector.resources.requests.cpu	float	`0.5`
aurva_collector.resources.requests.memory	string	`"1024Mi"`
aurva_collector.secret.additionalLabels	string	`nil`	Additional Labels on secrets
aurva_collector.secret.annotations	string	`nil`	Annotations on secrets
aurva_collector.secret.config.AURVA_GRPC_ANALYZER_URL	string	`"aurva-test-aurva-analyzer-svc.test:8080"`
aurva_collector.secret.config.COMPANY_ID	string	`"b9c03775-8f44-4b46-b71b-7f37dbdd3e9d"`
aurva_collector.secret.config.DEPLOYMENT_TYPE	string	`"kubernetes"`
aurva_collector.secret.config.IS_ANALYZER_URL_SECURE	string	`"true"`
aurva_collector.secret.name	string	`"aurva-collector-secrets"`
aurva_collector.securityContext.capabilities.add[0]	string	`"SYS_ADMIN"`
aurva_collector.securityContext.capabilities.add[1]	string	`"NET_RAW"`
aurva_collector.securityContext.capabilities.add[2]	string	`"NET_ADMIN"`
aurva_collector.securityContext.capabilities.add[3]	string	`"SYS_RESOURCE"`
aurva_collector.securityContext.privileged	bool	`true`
aurva_collector.serviceAccount.annotations	string	`nil`	Annotations applied to created service account
aurva_collector.serviceAccount.create	bool	`true`	Create a service account for the aurva controller
aurva_collector.serviceAccount.labels	object	`{}`	Labels applied to created service account
aurva_collector.serviceAccount.name	string	`"aurva-controller-sa"`	Service account name
aurva_collector.tolerations	string	`nil`	Taint tolerations for nodes
aurva_collector.volumes[0].hostPath	string	`"/sys/kernel/debug"`
aurva_collector.volumes[0].mountPath	string	`"/sys/kernel/debug"`
aurva_collector.volumes[0].name	string	`"sys-kernal-debug"`
aurva_collector.volumes[1].hostPath	string	`"/sys/kernel/btf/vmlinux"`
aurva_collector.volumes[1].mountPath	string	`"/sys/kernel/btf/vmlinux"`
aurva_collector.volumes[1].name	string	`"sys-kernal-btf"`
aurva_controller.additionalLabels	object	`{}`	Additional labels for aurva-controller
aurva_controller.additionalPodAnnotations	object	`{"test":"value"}`	Additional Pod Annotations added on pod created by this Deployment
aurva_controller.affinity	string	`nil`	Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
aurva_controller.annotations	object	`{"key":"test"}`	Annotations on aurva-controller
aurva_controller.dnsConfig	object	`{}`	[DNS configuration]
aurva_controller.dnsPolicy	string	`"ClusterFirst"`	Alternative DNS policy for application controller pods
aurva_controller.env	list	`[]`
aurva_controller.envFrom	object	`{"aurva-controller":{"name":"aurva-controller-secrets","type":"secret"}}`	If want to mount Envs from configmap or secret
aurva_controller.image.pullPolicy	string	`"IfNotPresent"`
aurva_controller.image.repository	string	`"119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-controller"`
aurva_controller.image.tag	string	`"2aaa7d4"`
aurva_controller.imagePullSecrets	string	`""`	Secrets used to pull image
aurva_controller.nodeSelector	string	`nil`	Select nodes to deploy which matches the following labels
aurva_controller.podLabels	object	`{}`	Additional label added on pod which is used in Service's Label Selector
aurva_controller.replicas	int	`1`	no of replicas for aurva controller
aurva_controller.resources	object	`{"limits":{"cpu":1,"memory":"512Mi"},"requests":{"cpu":0.5,"memory":"256Mi"}}`	Resources to be defined for pod
aurva_controller.secret.additionalLabels	string	`nil`	Additional Labels on secrets
aurva_controller.secret.annotations	string	`nil`	Annotations on secrets
aurva_controller.secret.config.AWS_REGION	string	`"ap-south-1"`
aurva_controller.secret.config.COMMAND_URL	string	`"command.staging.aurva.io:443"`
aurva_controller.secret.config.COMPANY_ID	string	`"b9c03775-8f44-4b46-b71b-7f37dbdd3e9d"`
aurva_controller.secret.config.ENVIRONMENT	string	`"staging"`
aurva_controller.secret.config.PG_DBNAME	string	`"global"`
aurva_controller.secret.config.PG_HOST	string	`"aurva-control-plane-staging-rds.chui7blyumnd.ap-south-1.rds.amazonaws.com"`
aurva_controller.secret.config.PG_PASSWORD	string	`"Aurva123"`
aurva_controller.secret.config.PG_USERNAME	string	`"aurva"`
aurva_controller.secret.config.PROVIDER_ACCOUNT_ID	string	`"119191042565"`
aurva_controller.secret.name	string	`"aurva-controller-secrets"`
aurva_controller.serviceAccount.annotations	object	`{"eks.amazonaws.com/role-arn":"arn:aws:iam::119191042565:role/aurva-complete-chart-test"}`	Annotations applied to created service account
aurva_controller.serviceAccount.create	bool	`true`	Create a service account for the aurva controller
aurva_controller.serviceAccount.labels	object	`{}`	Labels applied to created service account
aurva_controller.serviceAccount.name	string	`"aurva-controller-sa"`	Service account name
aurva_controller.tolerations	string	`nil`	Taint tolerations for nodes
global.aurva_analyzer.enabled	bool	`true`
global.aurva_collector.enabled	bool	`true`
global.aurva_controller.enabled	bool	`true`
global.aurva_pii_analyzer.enabled	bool	`false`
global.deploymentAnnotations	object	`{}`
global.priorityClassName	string	`""`
namespaceOverride	string	`"test"`	Provide a name in place of `aurva`

Autogenerated from chart metadata using helm-docs v1.11.0