UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects
Commit 85eff6fc authored by Sam's avatar Sam Committed by Ryan Garcia
Browse files

chore: update appliance-mode values and docs

parent 91be008f
No related branches found
No related tags found
1 merge request!2483chore: update appliance-mode values and docs
# Enables and configures packages for [Appliance Mode](../README.md): ---
# Enables and configures packages for [Appliance Mode](../../../guides/deployment-scenarios/appliance-mode.md):
istio:
values:
istiod:
resources:
requests:
cpu: 100m
memory: 256Mi
values:
global:
proxy:
resources:
requests:
cpu: 50m
memory: 128Mi
proxy_init:
resources:
requests:
cpu: 50m
memory: 128Mi
istiooperator:
values:
operator:
resources:
requests:
cpu: 100m
memory: 128Mi
jaeger:
enabled: false
kiali:
enabled: false
clusterAuditor: clusterAuditor:
enabled: true enabled: false
values: values:
resources: resources:
requests: requests:
cpu: 100m cpu: 100m
memory: 256Mi memory: 256Mi
limits:
cpu: 100m
memory: 256Mi
gatekeeper: gatekeeper:
enabled: true enabled: false
values: values:
replicas: 1 replicas: 1
controllerManager: controllerManager:
resources: resources:
limits: requests:
cpu: 100m cpu: 100m
memory: 256Mi memory: 256Mi
audit:
resources:
requests: requests:
cpu: 100m cpu: 100m
memory: 256Mi memory: 256Mi
limits:
cpu: 600m
memory: 512Mi
kiali: kyverno:
enabled: true
values:
replicaCount: 1
resources:
limits:
cpu: 350m
memory: 512Mi
requests:
cpu: 350m
memory: 512Mi
kyvernoreporter:
enabled: true
values:
resources:
limits:
cpu: 50m
memory: 100Mi
requests:
cpu: 50m
memory: 100Mi
kyvernopolicies:
enabled: true
logging:
enabled: false enabled: false
kyverno: eckoperator:
enabled: false enabled: false
fluentbit:
enabled: false
promtail:
enabled: true
values: values:
replicaCount: 1 resources:
requests:
cpu: 50m
memory: 32Mi
loki: loki:
values: enabled: true
values:
singleBinary: singleBinary:
replicas: 1 replicas: 1
resources: resources:
limits:
cpu: 100m
memory: 256Mi
requests: requests:
cpu: 100m cpu: 100m
memory: 256Mi memory: 256Mi
neuvector:
enabled: false
values:
controller:
replicas: 1
resources:
limits:
cpu: 200m
memory: 768Mi
requests:
cpu: 100m
memory: 512Mi
cve:
scanner:
replicas: 1
k3s:
enabled: true
tempo: tempo:
enabled: true
values: values:
tempo: tempo:
resources: resources:
limits: limits:
cpu: 200m cpu: 200m
...@@ -54,48 +142,68 @@ tempo: ...@@ -54,48 +142,68 @@ tempo:
requests: requests:
cpu: 200m cpu: 200m
memory: 256Mi memory: 256Mi
tempoQuery:
resources:
limits:
cpu: 100m
memory: 256Mi
requests:
cpu: 100m
memory: 256Mi
fluentbit:
enabled: false
promtail: monitoring:
enabled: true
monitoring:
values: values:
prometheus: prometheus:
prometheusSpec: prometheusSpec:
resources: resources:
requests: requests:
cpu: 200m cpu: 100m
memory: 256Mi memory: 128Mi
limits: limits:
cpu: 200m cpu: 300m
memory: 256Mi memory: 2Gi
kube-state-metrics: kube-state-metrics:
resources: resources:
requests: requests:
cpu: 10m cpu: 10m
memory: 128Mi memory: 128Mi
limits:
cpu: 10m
memory: 128Mi
prometheus-node-exporter: prometheus-node-exporter:
hostRootFsMount:
enabled: false
resources: resources:
requests: requests:
cpu: 100m cpu: 100m
memory: 128Mi memory: 128Mi
limits:
cpu: 100m
memory: 128Mi
grafana: grafana:
testFramework: testFramework:
enabled: false enabled: false
downloadDashboards: prometheusOperator:
resources:
requests:
cpu: 100m
memory: 128Mi
prometheusConfigReloader:
resources: resources:
limits:
cpu: 20m
memory: 20Mi
requests: requests:
cpu: 20m cpu: 50m
memory: 20Mi memory: 50Mi
limits:
cpu: 100m
memory: 50Mi
twistlock:
enabled: true
values:
resources:
requests:
memory: 512Mi
cpu: 50m
init:
resources:
requests:
cpu: 100m
memory: 128Mi
limits:
cpu: 100m
memory: 128Mi
...@@ -11,13 +11,13 @@ There is a values.yaml file in this same directory which provides an example of ...@@ -11,13 +11,13 @@ There is a values.yaml file in this same directory which provides an example of
| Flux | source, helm, kustomize & notification controllers | | Flux | source, helm, kustomize & notification controllers |
| Istio | Possibly too heavy for reduced compute but still able to run on above machine | | Istio | Possibly too heavy for reduced compute but still able to run on above machine |
| Jaeger | Not enough value to justify value and footprint above Tempo | | Jaeger | Not enough value to justify value and footprint above Tempo |
| Tempo | integrated with grafana to provide tracing capability | | Tempo | tracing capability integrated with grafana |
| Kiali | Not enough value to justify running in smaller footprint | | Kiali | Not enough value to justify running in smaller footprint |
| Monitoring | Prometheus/Alertmanager/Grafana for monitoring/alerting | | Monitoring | Prometheus/Alertmanager/Grafana for monitoring/alerting |
| ECK | Too heavy for reduced compute | | ECK | Too heavy for reduced compute |
| Loki/Promtail | need logging | | Loki/Promtail | need logging |
| Gatekeeper/Kyverno | Static environment on edge, compliance will be validated in development/cloud | | Gatekeeper/Kyverno | Static environment on edge, compliance will be validated in development/cloud |
| Cluster Auditor | Static environment on edge, compliance will be validated in development/cloud | | Cluster Auditor/Kyerno Reporter | Static environment on edge, compliance will be validated in development/cloud |
| Twistlock | Runtime security at least | | Twistlock/Neuvector | Runtime security at least |
Review and reference [the values file in the configs folder to deploy BigBang in Appliance Mode](../../assets/configs/appliance-mode/values.yaml). Review and reference [the values file in the configs folder to deploy BigBang in Appliance Mode](../../assets/configs/appliance-mode/values.yaml).
\ No newline at end of file
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment