Merge pull request #656 from dark-vex/revert-655-revert-654-migrate-k…

…3s-prod-to-cs Revert "Revert "Enable CS on prod-k3s, disable AC and KSPM Collector""
dark-vex · Oct 31, 2024 · 242661e · 242661e
2 parents 70f2d5a + 17a9b0f
commit 242661e
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 11 deletions.
diff --git a/clusters/common/sysdig-agent/release.yml b/clusters/common/sysdig-agent/release.yml
@@ -30,7 +30,7 @@ spec:
         registry: quay.io
 
     admissionController:
-      enabled: true
+      enabled: false
       features:
         k8sAuditDetections: true
         kspmAdmissionController: false
@@ -69,7 +69,7 @@ spec:
 
     kspmCollector:
        psp:
-        create: false   
+        create: false
 
     rapidResponse:
       enabled: false

diff --git a/clusters/k8s-vms-daniele/apps/sysdig-agent/manifests/release.yml b/clusters/k8s-vms-daniele/apps/sysdig-agent/manifests/release.yml
@@ -19,9 +19,13 @@ spec:
         deploy: true
 
     kspmCollector:
+      enabled: false
       probes:
         initialDelay: 30
 
+    admissionController:
+      enabled: false
+
     agent:
       slim:
         resources:
@@ -147,13 +151,17 @@ spec:
       enabled: true
 
     clusterScanner:
+      enabled: false
+
+    clusterShield:
       enabled: true
-      eveEnabled: true
-      scannerMode: "local"
-      replicaCount: 1
-      runtimeStatusIntegrator:
-        env:
-          USE_MAINDB_V2: "true"
-      imageSbomExtractor:
-        env:
-          USE_MAINDB_V2: "true"
+      cluster_shield:
+        features:
+          admission_control:
+            enabled: false
+          audit:
+            enabled: true
+          container_vulnerability_management:
+            enabled: true
+          posture:
+            enabled: true