118 lines
2.7 KiB
YAML
118 lines
2.7 KiB
YAML
# Default values for prometheus-fail2ban-exporter.
|
|
# This is a YAML-formatted file.
|
|
# Declare variables to be passed into your templates.
|
|
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
affinity: {}
|
|
|
|
config: {}
|
|
# F2B_COLLECTOR_SOCKET
|
|
# Path to the fail2ban socket inside the container filesystem.
|
|
# F2B_COLLECTOR_SOCKET: ""
|
|
|
|
# F2B_COLLECTOR_TEXT_PATH
|
|
# Directory to read text files with metrics from.
|
|
# F2B_COLLECTOR_TEXT_PATH: ""
|
|
|
|
# F2B_EXIT_ON_SOCKET_CONN_ERROR
|
|
# When set to true the exporter will immediately exit on a fail2ban socket connection error.
|
|
# F2B_EXIT_ON_SOCKET_CONN_ERROR: ""
|
|
|
|
# F2B_WEB_BASICAUTH_PASS
|
|
# Basic auth password to access the metrics endpoint.
|
|
# F2B_WEB_BASICAUTH_PASS: ""
|
|
|
|
# F2B_WEB_BASICAUTH_USER
|
|
# Basic auth user to access the metrics endpoint.
|
|
# F2B_WEB_BASICAUTH_USER:""
|
|
|
|
# F2B_WEB_LISTEN_ADDRESS
|
|
# Alternative listen address instead of 0.0.0.0/0 and ::/0.
|
|
# F2B_WEB_LISTEN_ADDRESS: ""
|
|
|
|
image:
|
|
repository: git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter
|
|
pullPolicy: Always
|
|
# Overrides the image tag whose default is the chart appVersion.
|
|
tag: ""
|
|
|
|
imagePullSecrets: []
|
|
|
|
ingress:
|
|
enabled: false
|
|
className: "nginx"
|
|
annotations:
|
|
# cert-manager.io/cluster-issuer:
|
|
# cert-manager.io/issuer:
|
|
# kubernetes.io/ingress.class: nginx
|
|
# kubernetes.io/tls-acme: "true"
|
|
hosts:
|
|
- host: "your-hostname"
|
|
paths:
|
|
- path: /
|
|
pathType: ImplementationSpecific
|
|
tls:
|
|
- secretName: "your-tls-secret"
|
|
hosts:
|
|
- "your-hostname"
|
|
|
|
nodeSelector: {}
|
|
|
|
podAnnotations: {}
|
|
|
|
podPriorityClassName: ""
|
|
|
|
podSecurityContext: {}
|
|
# fsGroup: 2000
|
|
|
|
resources: {}
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
|
|
securityContext: {}
|
|
# capabilities:
|
|
# drop:
|
|
# - ALL
|
|
# readOnlyRootFilesystem: true
|
|
# runAsNonRoot: true
|
|
# runAsUser: 1000
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 9191
|
|
|
|
# Deploy a serviceMonitor to scrape the metrics automatically via prometheus
|
|
# operator.
|
|
serviceMonitor:
|
|
enabled: false
|
|
annotations: {}
|
|
honorLabels: false
|
|
interval: 60s
|
|
path: /metrics
|
|
scheme: http
|
|
scrapeTimeout: 30s
|
|
tlsConfig:
|
|
insecureSkipVerify: false
|
|
|
|
tolerations: []
|
|
|
|
volumeMounts:
|
|
- name: socket
|
|
mountPath: /var/run/fail2ban/fail2ban.sock
|
|
|
|
volumes:
|
|
- name: socket
|
|
hostPath:
|
|
path: /var/run/fail2ban/fail2ban.sock
|
|
type: Socket
|