|
| 1 | +# Custom values for audit-assistant chart. |
| 2 | +# This is a YAML-formatted file. |
| 3 | + |
| 4 | +# image is a map of the global Kubernetes image settings |
| 5 | +image: |
| 6 | + |
| 7 | + # repositoryPrefix is a prefix for Audit Assistant images and is used to pull images from a private registry |
| 8 | + repositoryPrefix: "fortifydocker/" |
| 9 | + |
| 10 | + # pullPolicy is Kubernetes image pull policy, supported values are Always, IfNotPresent, and Never |
| 11 | + pullPolicy: IfNotPresent |
| 12 | + |
| 13 | + # dataTag is a tag to be used for audit-assistant-data image (provides Fortify data) |
| 14 | + #dataTag: "2024.04.0003" |
| 15 | + |
| 16 | + |
| 17 | +# imagePullSecrets is a list of Kubernetes image pull secrets, for details, see the Kubernetes documentation |
| 18 | +# (https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/) |
| 19 | +imagePullSecrets: [] |
| 20 | + |
| 21 | + |
| 22 | +# service is a map of the Kubernetes service resource options used to expose the Audit Assistant service |
| 23 | +service: |
| 24 | + |
| 25 | + # type is Kubernetes service type (required), supported values are ClusterIP, NodePort, and LoadBalancer |
| 26 | + type: ClusterIP |
| 27 | + |
| 28 | + # port is external port of the service (required), the meaning depends on selected service type |
| 29 | + port: 8080 |
| 30 | + |
| 31 | + # clusterIP is fixed service cluster IP address, if empty, Kubernetes assigns a value |
| 32 | + clusterIP: "" |
| 33 | + |
| 34 | + # loadBalancerIP is fixed load balancer IP address, if empty, the Kubernetes cloud provider assigns a value |
| 35 | + loadBalancerIP: "" |
| 36 | + |
| 37 | + # annotations is a map of annotations applied to the service |
| 38 | + annotations: {} |
| 39 | + |
| 40 | + |
| 41 | +# db is a map of database connection settings |
| 42 | +db: |
| 43 | + |
| 44 | + # host is address of the database server (required), a port may be included, for example, "db.host:5432" |
| 45 | + host: "" |
| 46 | + |
| 47 | + # name is Audit Assistant database name (required) |
| 48 | + name: "" |
| 49 | + |
| 50 | + # username is username required to access Audit Assistant database (required) |
| 51 | + username: "" |
| 52 | + |
| 53 | + # password is password (for username) required to access Audit Assistant database (required) |
| 54 | + password: "" |
| 55 | + |
| 56 | + # connectionProperties is a string of JDBC URL connection properties, for example, "defaultRowFetchSize=1000&socketTimeout=600" |
| 57 | + connectionProperties: "defaultRowFetchSize=1000" |
| 58 | + |
| 59 | + |
| 60 | +# app is a map of Audit Assistant settings |
| 61 | +app: |
| 62 | + # hostUrl is a public URL address used by users to access Audit Assistant (required) |
| 63 | + hostUrl: "" |
| 64 | + |
| 65 | + # mailSender is sender email address for outgoing mail messages (required) |
| 66 | + mailSender: "" |
| 67 | + |
| 68 | + # mailServerHost is address of SMTP server for outgoing mail messages (required) |
| 69 | + mailServerHost: "" |
| 70 | + |
| 71 | + # mailServerPort is SMTP server port |
| 72 | + mailServerPort: 25 |
| 73 | + |
| 74 | + # mailServerEncryption is to enable encryption while communicating with mail server. |
| 75 | + # NONE:No encryption, OPTIONAL:Encryption with startTls but optional, STARTTLS:Encryption with startTls, SMTPS:Encryption with SSL/TLS protocol |
| 76 | + mailServerEncryption: "OPTIONAL" |
| 77 | + |
| 78 | + # defaultAdminUserEmail is email address of administrator user that will be automatically created if does not exist yet (recommended) |
| 79 | + defaultAdminUserEmail: "" |
| 80 | + |
| 81 | + # defaultAdminUserPassword is initial password for newly created administrator user (recommended), see defaultAdminUserEmail |
| 82 | + defaultAdminUserPassword: "" |
| 83 | + |
| 84 | + # passwordLockoutThreshold is number of unsuccessful login attempts causing account lockout |
| 85 | + passwordLockoutThreshold: 5 |
| 86 | + |
| 87 | + # passwordLockoutDurationMinutes is account lockout duration in minutes after unsuccessful login attempt count has reached threshold |
| 88 | + passwordLockoutDurationMinutes: 10 |
| 89 | + |
| 90 | + # resetPasswordTokenExpirationMinutes is time in minutes that password reset token expires after it is generated |
| 91 | + resetPasswordTokenExpirationMinutes: 30 |
| 92 | + |
| 93 | + # resetPasswordTokenExpirationMinutesNewUser is time in minutes that password reset token expires after it is generated for new user |
| 94 | + resetPasswordTokenExpirationMinutesNewUser: 1440 |
| 95 | + |
| 96 | + # enable is to enable all the features introduced in Audit Assistant G2 |
| 97 | + enableG2: true |
| 98 | + |
| 99 | + # enable is to enable all the features introduced in Audit Assistant G1 |
| 100 | + enableG1: true |
| 101 | + |
| 102 | + # apiRequestRetentionDays is the time in days after that an API request audit log will be deleted from Audit Assistant (-1 disables cleanup, 0 disables audit log) - G2 only |
| 103 | + apiRequestRetentionDays: 365 |
| 104 | + |
| 105 | + # Minimum percentage of increase in training data to retrain a classifier - G2 only |
| 106 | + retrainDataThreshold: 5 |
| 107 | + |
| 108 | + # Minimum time (in seconds) between two consecutive trainings - G2 only |
| 109 | + minSecondsBetweenTraining: 86400 |
| 110 | + |
| 111 | + # Minimum records per class required to train a classifier - G2 only |
| 112 | + minRecordsPerClass: 10 |
| 113 | + |
| 114 | + # Parallelism for spark. if value set as 0 then parallelism considered as 3 * number of CPU cores - G2 only |
| 115 | + sparkParallelism: 0 |
| 116 | + |
| 117 | + # Minimum percentage of increase in training data to recalculate model performance |
| 118 | + recalculatePerformanceThreshold: 5 |
| 119 | + |
| 120 | + # Minimum time (in seconds) between two consecutive model performance calculation |
| 121 | + minSecondsBetweenPerformanceCalculation: 86400 |
| 122 | + |
| 123 | + # Data of last daysForModelWeightCalculation from version statistics table will be used to calculate weight of the local and global models |
| 124 | + daysForModelWeightCalculation: 90 |
| 125 | + |
| 126 | +# mail server credentials secret settings |
| 127 | +mailServerCredentials: |
| 128 | + # secretName used for creating kubernetes secret with mail server credentials |
| 129 | + secretName: "" |
| 130 | + # usernameKey used to set mail server username in kubernetes secret |
| 131 | + usernameKey: "" |
| 132 | + # passwordKey used to set mail server password in kubernetes secret |
| 133 | + passwordKey: "" |
| 134 | + |
| 135 | +# For each Random forest parameters, default values can be tuned. |
| 136 | +# And also, Random forest parameters can be set for each language. |
| 137 | +# For example, |
| 138 | +# numTrees: |
| 139 | +# default: 20 |
| 140 | +# java: 21 |
| 141 | +# G2 only |
| 142 | +randomForestParams: |
| 143 | + # numTrees is the number of trees to be used in the classifier while training the models |
| 144 | + numTrees: |
| 145 | + default: 300 |
| 146 | + c#: 85 |
| 147 | + javascript: 127 |
| 148 | + php: 125 |
| 149 | + xml: 51 |
| 150 | + c: 85 |
| 151 | + c++: 85 |
| 152 | + java properties: 129 |
| 153 | + asp.net: 211 |
| 154 | + jsp: 135 |
| 155 | + unknown: 110 |
| 156 | + |
| 157 | + # maxDepth is the longest path between root node and leaf node of the trees used for training the models |
| 158 | + maxDepth: |
| 159 | + default: 9 |
| 160 | + c#: 16 |
| 161 | + java: 28 |
| 162 | + javascript: 5 |
| 163 | + php: 28 |
| 164 | + sql: 25 |
| 165 | + xml: 18 |
| 166 | + java properties: 27 |
| 167 | + asp.net: 20 |
| 168 | + jsp: 29 |
| 169 | + python: 5 |
| 170 | + swift: 27 |
| 171 | + |
| 172 | + # minInstancesPerNode is the minimum number of training instances required for a node in the tree to split further |
| 173 | + minInstancesPerNode: |
| 174 | + default: 5 |
| 175 | + c#: 7 |
| 176 | + html: 27 |
| 177 | + java: 29 |
| 178 | + javascript: 13 |
| 179 | + php: 19 |
| 180 | + xml: 15 |
| 181 | + c: 7 |
| 182 | + c++: 7 |
| 183 | + java properties: 21 |
| 184 | + asp.net: 21 |
| 185 | + unknown: 29 |
| 186 | + |
| 187 | +# secretRef external trust store secret settings |
| 188 | +secretRef: |
| 189 | + # name of the secret |
| 190 | + name: |
| 191 | + # keys is key names for each attribute in the above secret created |
| 192 | + keys: |
| 193 | + # jvmTruststoreFileEntry jvm trust store file key created from the above secret |
| 194 | + jvmTruststoreFileEntry: |
| 195 | + # jvmTruststorePassword jvm trust store password |
| 196 | + jvmTruststorePassword: |
| 197 | + |
| 198 | +# components is a map of configurations for Audit Assistant pods and containers |
| 199 | +components: |
| 200 | + predict: |
| 201 | + replicaCount: 2 |
| 202 | + webapp: |
| 203 | + replicaCount: 2 |
| 204 | + predict-v2: |
| 205 | + replicaCount: 2 |
| 206 | + train-v2: |
| 207 | + replicaCount: 2 |
| 208 | + |
| 209 | +# productLicense is a text of Audit Assistant license file (required), |
| 210 | +# can be set using helm CLI option "--set-file=productLicense=path/to/license.xml" |
| 211 | +productLicense: "" |
0 commit comments