patch-sumengine-cm.yaml

patch-sumengine-cm.yaml

data:
  app.yaml: |2-
    summary-engine:
      k8s:
        enable: true
      kubearmor:
        cron-interval: 0h05m0s
        enabled: false
        exclude-events:
          operation:
            file: false
            network: false
            process: false
        exclude-namespaces:
          kubearmor: true
        file-aggregation: true
        threshold: 10000
      sentryflow:
        cron-interval: 0h0m10s
        decode-jwt: true
        enabled: true
        include-bodies: true
        redact-sensitive-data: false
        sensitive-rules-files-path:
        - /var/lib/sumengine/sensitive-data-rules.yaml
        threshold: 10000
      splunk:
        certificate: ""
        enabled: false
        index: ""
        maxRetries: 3
        skipTls: false
        source: ""
        sourcetype: ""
        token: ""
        url: ""
      topic:
        summary-event: summary-v2
    watcher:
      kubearmor:
        allowList:
          enabled: false
          operations:
          - CONNECT
          - ACCEPT
          - BIND
          - CREATE
          protocolFamily:
          - TCP
          - AF_INET
          - AF_INET6
        denyList:
          enabled: false
          ports:
          - 53
          urls:
          - localhost
          - 127.0.0.1
          - ::1
        enabled: false
        event-type:
          alerts: true
          logs: true
        relay:
          enabled: false
          name: relay-1
          port: ""
          url: ""
      sentryflow:
        enabled: true
        event-type:
          access-log: true
          metric: false
        service:
          enabled: true
          name: sentryflow
          port: "8080"
          url: "sentryflow.sentryflow"