137 lines
12 KiB
Markdown
137 lines
12 KiB
Markdown
# aurva-dataplane
|
|
|
|
 
|
|
|
|
**Aurva Data Plane Helm Chart**
|
|
 Aurva Data Plane Helm chart provides a comprehensive and sophisticated security solution for databases, empowering organizations to fortify their data protection strategies. The chart seamlessly deploys the entire Aurva Data Plane system, encompassing essential components designed to enhance security and observability.
|
|
Key Components:
|
|
- **Aurva-Controller**: Enables efficient data discovery within cloud accounts, listing and analyzing available data sources. Advanced ML models are employed to predict data sensitivity and assess risk scores, bolstering data protection.
|
|
- **Aurva-eBPF**: Delivering unparalleled monitoring and observability, Aurva-eBPF meticulously tracks and analyzes database queries. Crucial details such as query sources, timestamps, and user identities are recorded, enabling rapid detection of anomalies and potential security threats.
|
|
- **Aurva-Proxy**: Positioned as a critical inline component, Aurva-Proxy provides granular Access Control Lists (ACL) to safeguard against real-time database abuse and malicious attacks. It seamlessly integrates with the application-database pipeline, ensuring secure and authorized data access.
|
|
The `values.yaml` file allows effortless customization of the deployment, empowering users to tailor security settings based on their specific requirements and compliance standards.
|
|
Prerequisites: - Kubernetes 1.16+ - Helm 3.x
|
|
|
|
**Homepage:** <https://github.com/aurva-io/aurva-charts>
|
|
|
|
## Maintainers
|
|
|
|
| Name | Email | Url |
|
|
| ---- | ------ | --- |
|
|
| aurva | <contact@aurva.com> | |
|
|
|
|
## Values
|
|
|
|
| Key | Type | Default | Description |
|
|
|-----|------|---------|-------------|
|
|
| aurva_analyzer.additionalLabels | object | `{}` | Additional labels for aurva-analyzer |
|
|
| aurva_analyzer.additionalPodAnnotations | object | `{"test":"value"}` | Additional Pod Annotations added on pod created by this Deployment |
|
|
| aurva_analyzer.affinity | string | `nil` | Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods. |
|
|
| aurva_analyzer.annotations | object | `{"key":"test"}` | Annotations on aurva-analyzer |
|
|
| aurva_analyzer.dnsConfig | object | `{}` | [DNS configuration] |
|
|
| aurva_analyzer.dnsPolicy | string | `"ClusterFirst"` | Alternative DNS policy for application controller pods |
|
|
| aurva_analyzer.env | list | `[]` | |
|
|
| aurva_analyzer.envFrom | object | `{"aurva-controller":{"name":"aurva-analyzer-secrets","type":"secret"}}` | If want to mount Envs from configmap or secret |
|
|
| aurva_analyzer.image.pullPolicy | string | `"IfNotPresent"` | |
|
|
| aurva_analyzer.image.repository | string | `"119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-analyzer"` | |
|
|
| aurva_analyzer.image.tag | string | `"407ea56"` | |
|
|
| aurva_analyzer.imagePullSecrets | string | `""` | Secrets used to pull image |
|
|
| aurva_analyzer.nodeSelector | string | `nil` | Select nodes to deploy which matches the following labels |
|
|
| aurva_analyzer.podLabels | object | `{}` | Additional label added on pod which is used in Service's Label Selector |
|
|
| aurva_analyzer.replicas | int | `1` | no of replicas for aurva analyzer |
|
|
| aurva_analyzer.resources | object | `{"limits":{"cpu":1,"memory":"512Mi"},"requests":{"cpu":1,"memory":"256Mi"}}` | Resources to be defined for pod |
|
|
| aurva_analyzer.secret.additionalLabels | string | `nil` | Additional Labels on secrets |
|
|
| aurva_analyzer.secret.annotations | string | `nil` | Annotations on secrets |
|
|
| aurva_analyzer.secret.config.COMPANY_ID | string | `"b9c03775-8f44-4b46-b71b-7f37dbdd3e9d"` | |
|
|
| aurva_analyzer.secret.config.CONTROLLER_URL | string | `"aurva-test-aurva-controller-svc.test:9090"` | |
|
|
| aurva_analyzer.secret.config.ENVIRONMENT | string | `"staging"` | |
|
|
| aurva_analyzer.secret.name | string | `"aurva-analyzer-secrets"` | |
|
|
| aurva_analyzer.serviceAccount.annotations | string | `nil` | Annotations applied to created service account |
|
|
| aurva_analyzer.serviceAccount.create | bool | `true` | Create a service account for the aurva controller |
|
|
| aurva_analyzer.serviceAccount.labels | object | `{}` | Labels applied to created service account |
|
|
| aurva_analyzer.serviceAccount.name | string | `"aurva-analyzer-sa"` | Service account name |
|
|
| aurva_analyzer.tolerations | string | `nil` | Taint tolerations for nodes |
|
|
| aurva_collector.additionalLabels | object | `{"test":"done"}` | Additional labels for aurva-analyzer |
|
|
| aurva_collector.additionalPodAnnotations | object | `{"test":"value"}` | Additional Pod Annotations added on pod created by this Deployment |
|
|
| aurva_collector.affinity | string | `nil` | Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods. |
|
|
| aurva_collector.annotations | object | `{"key":"test"}` | Annotations on aurva-analyzer |
|
|
| aurva_collector.env | list | `[]` | |
|
|
| aurva_collector.envFrom | object | `{"aurva-controller":{"name":"aurva-collector-secrets","type":"secret"}}` | If want to mount Envs from configmap or secret |
|
|
| aurva_collector.image.pullPolicy | string | `"IfNotPresent"` | |
|
|
| aurva_collector.image.repository | string | `"119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-collector"` | |
|
|
| aurva_collector.image.tag | string | `"6213694"` | |
|
|
| aurva_collector.imagePullSecrets | string | `""` | Secrets used to pull image |
|
|
| aurva_collector.nodeSelector | string | `nil` | Select nodes to deploy which matches the following labels |
|
|
| aurva_collector.podLabels | object | `{}` | Additional label added on pod which is used in Service's Label Selector |
|
|
| aurva_collector.podSecurityContext | object | `{}` | |
|
|
| aurva_collector.priorityClassName | string | `"system-node-critical"` | priorityClassName that you want to associate to daemonset pods |
|
|
| aurva_collector.resources.limits.cpu | int | `1` | |
|
|
| aurva_collector.resources.limits.memory | string | `"2048Mi"` | |
|
|
| aurva_collector.resources.requests.cpu | float | `0.5` | |
|
|
| aurva_collector.resources.requests.memory | string | `"1024Mi"` | |
|
|
| aurva_collector.secret.additionalLabels | string | `nil` | Additional Labels on secrets |
|
|
| aurva_collector.secret.annotations | string | `nil` | Annotations on secrets |
|
|
| aurva_collector.secret.config.AURVA_GRPC_ANALYZER_URL | string | `"aurva-test-aurva-analyzer-svc.test:8080"` | |
|
|
| aurva_collector.secret.config.COMPANY_ID | string | `"b9c03775-8f44-4b46-b71b-7f37dbdd3e9d"` | |
|
|
| aurva_collector.secret.config.DEPLOYMENT_TYPE | string | `"kubernetes"` | |
|
|
| aurva_collector.secret.config.IS_ANALYZER_URL_SECURE | string | `"true"` | |
|
|
| aurva_collector.secret.name | string | `"aurva-collector-secrets"` | |
|
|
| aurva_collector.securityContext.capabilities.add[0] | string | `"SYS_ADMIN"` | |
|
|
| aurva_collector.securityContext.capabilities.add[1] | string | `"NET_RAW"` | |
|
|
| aurva_collector.securityContext.capabilities.add[2] | string | `"NET_ADMIN"` | |
|
|
| aurva_collector.securityContext.capabilities.add[3] | string | `"SYS_RESOURCE"` | |
|
|
| aurva_collector.securityContext.privileged | bool | `true` | |
|
|
| aurva_collector.serviceAccount.annotations | string | `nil` | Annotations applied to created service account |
|
|
| aurva_collector.serviceAccount.create | bool | `true` | Create a service account for the aurva controller |
|
|
| aurva_collector.serviceAccount.labels | object | `{}` | Labels applied to created service account |
|
|
| aurva_collector.serviceAccount.name | string | `"aurva-controller-sa"` | Service account name |
|
|
| aurva_collector.tolerations | string | `nil` | Taint tolerations for nodes |
|
|
| aurva_collector.volumes[0].hostPath | string | `"/sys/kernel/debug"` | |
|
|
| aurva_collector.volumes[0].mountPath | string | `"/sys/kernel/debug"` | |
|
|
| aurva_collector.volumes[0].name | string | `"sys-kernal-debug"` | |
|
|
| aurva_collector.volumes[1].hostPath | string | `"/sys/kernel/btf/vmlinux"` | |
|
|
| aurva_collector.volumes[1].mountPath | string | `"/sys/kernel/btf/vmlinux"` | |
|
|
| aurva_collector.volumes[1].name | string | `"sys-kernal-btf"` | |
|
|
| aurva_controller.additionalLabels | object | `{}` | Additional labels for aurva-controller |
|
|
| aurva_controller.additionalPodAnnotations | object | `{"test":"value"}` | Additional Pod Annotations added on pod created by this Deployment |
|
|
| aurva_controller.affinity | string | `nil` | Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods. |
|
|
| aurva_controller.annotations | object | `{"key":"test"}` | Annotations on aurva-controller |
|
|
| aurva_controller.dnsConfig | object | `{}` | [DNS configuration] |
|
|
| aurva_controller.dnsPolicy | string | `"ClusterFirst"` | Alternative DNS policy for application controller pods |
|
|
| aurva_controller.env | list | `[]` | |
|
|
| aurva_controller.envFrom | object | `{"aurva-controller":{"name":"aurva-controller-secrets","type":"secret"}}` | If want to mount Envs from configmap or secret |
|
|
| aurva_controller.image.pullPolicy | string | `"IfNotPresent"` | |
|
|
| aurva_controller.image.repository | string | `"119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-controller"` | |
|
|
| aurva_controller.image.tag | string | `"2aaa7d4"` | |
|
|
| aurva_controller.imagePullSecrets | string | `""` | Secrets used to pull image |
|
|
| aurva_controller.nodeSelector | string | `nil` | Select nodes to deploy which matches the following labels |
|
|
| aurva_controller.podLabels | object | `{}` | Additional label added on pod which is used in Service's Label Selector |
|
|
| aurva_controller.replicas | int | `1` | no of replicas for aurva controller |
|
|
| aurva_controller.resources | object | `{"limits":{"cpu":1,"memory":"512Mi"},"requests":{"cpu":0.5,"memory":"256Mi"}}` | Resources to be defined for pod |
|
|
| aurva_controller.secret.additionalLabels | string | `nil` | Additional Labels on secrets |
|
|
| aurva_controller.secret.annotations | string | `nil` | Annotations on secrets |
|
|
| aurva_controller.secret.config.AWS_REGION | string | `"ap-south-1"` | |
|
|
| aurva_controller.secret.config.COMMAND_URL | string | `"command.staging.aurva.io:443"` | |
|
|
| aurva_controller.secret.config.COMPANY_ID | string | `"b9c03775-8f44-4b46-b71b-7f37dbdd3e9d"` | |
|
|
| aurva_controller.secret.config.ENVIRONMENT | string | `"staging"` | |
|
|
| aurva_controller.secret.config.PG_DBNAME | string | `"global"` | |
|
|
| aurva_controller.secret.config.PG_HOST | string | `"aurva-control-plane-staging-rds.chui7blyumnd.ap-south-1.rds.amazonaws.com"` | |
|
|
| aurva_controller.secret.config.PG_PASSWORD | string | `"Aurva123"` | |
|
|
| aurva_controller.secret.config.PG_USERNAME | string | `"aurva"` | |
|
|
| aurva_controller.secret.config.PROVIDER_ACCOUNT_ID | string | `"119191042565"` | |
|
|
| aurva_controller.secret.name | string | `"aurva-controller-secrets"` | |
|
|
| aurva_controller.serviceAccount.annotations | object | `{"eks.amazonaws.com/role-arn":"arn:aws:iam::119191042565:role/aurva-complete-chart-test"}` | Annotations applied to created service account |
|
|
| aurva_controller.serviceAccount.create | bool | `true` | Create a service account for the aurva controller |
|
|
| aurva_controller.serviceAccount.labels | object | `{}` | Labels applied to created service account |
|
|
| aurva_controller.serviceAccount.name | string | `"aurva-controller-sa"` | Service account name |
|
|
| aurva_controller.tolerations | string | `nil` | Taint tolerations for nodes |
|
|
| global.aurva_analyzer.enabled | bool | `true` | |
|
|
| global.aurva_collector.enabled | bool | `true` | |
|
|
| global.aurva_controller.enabled | bool | `true` | |
|
|
| global.aurva_pii_analyzer.enabled | bool | `false` | |
|
|
| global.deploymentAnnotations | object | `{}` | |
|
|
| global.priorityClassName | string | `""` | |
|
|
| namespaceOverride | string | `"test"` | Provide a name in place of `aurva` |
|
|
|
|
----------------------------------------------
|
|
Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
|