2023-07-09 10:32:39 +00:00
|
|
|
# Default values for prometheus-fail2ban-exporter.
|
|
|
|
# This is a YAML-formatted file.
|
|
|
|
# Declare variables to be passed into your templates.
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @param nameOverride Individual release name suffix.
|
|
|
|
## @param fullnameOverride Override the complete release name logic.
|
2023-07-09 10:32:39 +00:00
|
|
|
nameOverride: ""
|
|
|
|
fullnameOverride: ""
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section Affinity
|
2025-01-04 21:22:32 +00:00
|
|
|
## @param affinity Affinity for the fail2ban-exporter deployment.
|
2023-07-09 10:32:39 +00:00
|
|
|
affinity: {}
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section Configuration
|
2025-01-04 21:22:32 +00:00
|
|
|
## @skip config Skip individual fail2ban exporter configuration.
|
2023-07-09 10:32:39 +00:00
|
|
|
config: {}
|
|
|
|
# F2B_COLLECTOR_SOCKET
|
|
|
|
# Path to the fail2ban socket inside the container filesystem.
|
|
|
|
# F2B_COLLECTOR_SOCKET: ""
|
|
|
|
|
|
|
|
# F2B_COLLECTOR_TEXT_PATH
|
|
|
|
# Directory to read text files with metrics from.
|
|
|
|
# F2B_COLLECTOR_TEXT_PATH: ""
|
|
|
|
|
|
|
|
# F2B_EXIT_ON_SOCKET_CONN_ERROR
|
|
|
|
# When set to true the exporter will immediately exit on a fail2ban socket connection error.
|
|
|
|
# F2B_EXIT_ON_SOCKET_CONN_ERROR: ""
|
|
|
|
|
|
|
|
# F2B_WEB_BASICAUTH_PASS
|
|
|
|
# Basic auth password to access the metrics endpoint.
|
|
|
|
# F2B_WEB_BASICAUTH_PASS: ""
|
|
|
|
|
|
|
|
# F2B_WEB_BASICAUTH_USER
|
|
|
|
# Basic auth user to access the metrics endpoint.
|
|
|
|
# F2B_WEB_BASICAUTH_USER:""
|
|
|
|
|
|
|
|
# F2B_WEB_LISTEN_ADDRESS
|
|
|
|
# Alternative listen address instead of 0.0.0.0/0 and ::/0.
|
|
|
|
# F2B_WEB_LISTEN_ADDRESS: ""
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section Image
|
|
|
|
## @param image.repository Image repository, eg. `library/busybox`.
|
|
|
|
## @param image.pullPolicy Image pull policy.
|
|
|
|
## @param image.tag Custom image tag, eg. `0.1.0`. Defaults to `appVersion`.
|
2023-07-09 10:32:39 +00:00
|
|
|
image:
|
|
|
|
repository: git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter
|
|
|
|
pullPolicy: Always
|
|
|
|
# Overrides the image tag whose default is the chart appVersion.
|
|
|
|
tag: ""
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @param imagePullSecrets Secret to use for pulling the image.
|
2023-07-09 10:32:39 +00:00
|
|
|
imagePullSecrets: []
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section Ingress
|
|
|
|
## @skip ingress Skip individual ingress configuration.
|
2023-07-09 10:32:39 +00:00
|
|
|
ingress:
|
|
|
|
enabled: false
|
|
|
|
className: "nginx"
|
|
|
|
annotations:
|
|
|
|
# cert-manager.io/cluster-issuer:
|
|
|
|
# cert-manager.io/issuer:
|
|
|
|
# kubernetes.io/ingress.class: nginx
|
|
|
|
# kubernetes.io/tls-acme: "true"
|
|
|
|
hosts:
|
|
|
|
- host: "your-hostname"
|
|
|
|
paths:
|
|
|
|
- path: /
|
|
|
|
pathType: ImplementationSpecific
|
|
|
|
tls:
|
|
|
|
- secretName: "your-tls-secret"
|
|
|
|
hosts:
|
|
|
|
- "your-hostname"
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section NodeSelector
|
|
|
|
## @skip nodeSelector Skip individual nodeSelector configuration.
|
2023-07-09 10:32:39 +00:00
|
|
|
nodeSelector: {}
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section PodAnnotations
|
|
|
|
## @skip podAnnotations Skip individual podAnnotations configuration.
|
2023-10-02 10:32:43 +00:00
|
|
|
podAnnotations: {}
|
2023-07-09 10:32:39 +00:00
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section PodPriorityClassName
|
|
|
|
## @skip podPriorityClassName Skip individual podPriorityClassName configuration.
|
2023-07-09 10:32:39 +00:00
|
|
|
podPriorityClassName: ""
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section PodSecurityContext
|
|
|
|
## @skip podSecurityContext Skip individual PodSecurityContext configuration.
|
2023-07-09 10:32:39 +00:00
|
|
|
podSecurityContext: {}
|
|
|
|
# fsGroup: 2000
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section Resources
|
|
|
|
## @skip resources Skip individual resource configuration.
|
2023-07-09 10:32:39 +00:00
|
|
|
resources: {}
|
|
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
|
|
# limits:
|
|
|
|
# cpu: 100m
|
|
|
|
# memory: 128Mi
|
|
|
|
# requests:
|
|
|
|
# cpu: 100m
|
|
|
|
# memory: 128Mi
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section SecurityContext
|
|
|
|
## @skip securityContext Skip individual securityContext configuration.
|
2023-07-09 10:32:39 +00:00
|
|
|
securityContext: {}
|
|
|
|
# capabilities:
|
|
|
|
# drop:
|
|
|
|
# - ALL
|
|
|
|
# readOnlyRootFilesystem: true
|
|
|
|
# runAsNonRoot: true
|
|
|
|
# runAsUser: 1000
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section Service
|
|
|
|
## @skip service Skip individual service configuration.
|
2023-07-09 10:32:39 +00:00
|
|
|
service:
|
|
|
|
type: ClusterIP
|
|
|
|
port: 9191
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section ServiceMonitor
|
|
|
|
## @skip serviceMonitor Skip individual serviceMonitor configuration.
|
2023-10-02 10:23:19 +00:00
|
|
|
serviceMonitor:
|
|
|
|
enabled: false
|
|
|
|
annotations: {}
|
|
|
|
honorLabels: false
|
|
|
|
interval: 60s
|
|
|
|
path: /metrics
|
2023-10-02 10:43:39 +00:00
|
|
|
scheme: http
|
2023-10-02 10:23:19 +00:00
|
|
|
scrapeTimeout: 30s
|
2023-10-02 10:43:39 +00:00
|
|
|
tlsConfig:
|
|
|
|
insecureSkipVerify: false
|
2023-10-02 10:23:19 +00:00
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section Tolerations
|
|
|
|
## @skip tolerations Skip individual tolerations configuration.
|
2023-07-09 10:32:39 +00:00
|
|
|
tolerations: []
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section VolumeMounts
|
|
|
|
## @skip volumeMounts Skip individual volumeMounts configuration.
|
2023-07-09 10:32:39 +00:00
|
|
|
volumeMounts:
|
|
|
|
- name: socket
|
|
|
|
mountPath: /var/run/fail2ban/fail2ban.sock
|
|
|
|
|
2025-01-04 21:22:00 +00:00
|
|
|
## @section Volume
|
|
|
|
## @skip volumes Skip individual volume configuration.
|
2023-07-09 10:32:39 +00:00
|
|
|
volumes:
|
|
|
|
- name: socket
|
|
|
|
hostPath:
|
|
|
|
path: /var/run/fail2ban/fail2ban.sock
|
|
|
|
type: Socket
|