Skip to main content
Version: Spectra Detect 6.4.0

Detect Platform Secrets and ConfigMap Values

Secrets​

Custom NameDefault NameTypeDescription
rl-registry-keyrl-registry-keyRequiredSecret of type kubernetes.io/dockerconfigjson used for pulling images from a Docker registry. Secret is either created by umbrella chart (registry.createRegistrySecret) or already exists.
<global.registryCredentialsCustomSecretName>rl-registry-credentialsRequired in Write ModeBasic authentication secret which contains registry credentials. Secret is either created by umbrella chart (registry.createRegistryCredentialsSecret) or already exists. Required when Detect is deployed in Write Mode (global.appliance.configMode set to STANDARD).

Values​

Global Settings​

KeyTypeDefaultDescription
global.applianceobject-Global appliances configuration.
global.appliance.configModestring"CONFIGMAP"Configuration mode of the appliance. Allowed values: CONFIGMAP (Configuration is provided with configmap), STANDARD (configuration is provided over UI).
global.applyRestrictedPolicyboolfalseApply needed parts of the restricted policy to all sub-charts. When enabled, Alloy should be disabled, as it is not currently supported under the restricted policy.
global.centralLoggingEnabledboolfalseWhen set to true, all sub-charts enable central logging. When set to false, all sub-charts disable it. If SDM is not enabled (global.sdmEnabled: false), central logging is automatically disabled.
global.clusterDomainNamestring"cluster.local"Cluster Domain Name
global.postgresCustomSecretNamestringnilPostgres custom secret name. If not set, default secret name will be used.
global.quishingAnalysisobject-Configures quishing-analysis integration for extracting network addresses from media files (QR codes, OCR). Shared between Worker and SDM Portal.
global.quishingAnalysis.enabledboolfalseEnable/disable quishing-analysis integration.
global.quishingAnalysis.maxPdfPagesint10Maximum number of PDF pages to process per file.
global.quishingAnalysis.timeoutint300Timeout in seconds for waiting for quishing-analysis results.
global.quishingAnalysis.topContainerOnlyboolfalseProcess only top container (true) or also process children (false).
global.rabbitmqAdminCustomSecretNamestringnilRabbitMQ custom admin secret name. If not set, default secret name will be used.
global.rabbitmqCustomSecretNamestringnilRabbitMQ custom secret name. If not set, default secret name will be used.
global.registryCredentialsCustomSecretNamestringnilCustom secret name for the basic-auth secret containing registry credentials. If not set, the default secret name rl-registry-credentials will be used.
global.riskToleranceModeint2Configures the Risk Tolerance mode override applied to threat classification reports. low (1) escalates to Malicious on a confirmed network IOC; default (2) applies no override; high (3) de-escalates low-confidence verdicts to Goodware. Shared between Worker and SDM Portal.
global.sdmEnabledboolfalseControls whether Spectra Detect Manager chart will be deployed. When false, central logging is automatically disabled in sub-charts even if global.centralLoggingEnabled is true.
global.umbrellabooltrueNotifies dependency charts that they are being used from the umbrella chart. Must always be set to true.
global.useReloaderbooltrueWhether to enable Reloader annotations.

Secret Configuration​

KeyTypeDefaultDescription
registry.authSecretNamestring"rl-registry-key"The name of a Kubernetes secret resource used for pulling images from a Docker registry.
registry.authSecretPasswordstringnilThe password used for authenticating with the registry.
registry.authSecretUsernamestringnilThe username used for authenticating with the registry.
registry.createRegistryCredentialsSecretboolfalseIf enabled, a Kubernetes basic-auth secret containing registry credentials will be created. If disabled, the secret must be created manually in the namespace.
registry.createRegistrySecretbooltrueIf enabled, a Kubernetes secret for pulling images will be created. If disabled, the secret must be created manually in the namespace.
registry.imageRegistrystring"registry.reversinglabs.com"The image registry address.

Kubernetes Settings​

KeyTypeDefaultDescription
imagePullSecretslist["rl-registry-key"]Set of stored credentials (authentication tokens) that allows Kubernetes node to "log in" to a private container registry to pull restricted images.

Pod Settings​

KeyTypeDefaultDescription
utilitiesImageobject-Configuration values of the utilities image used for pre upgrade job.
utilitiesImage.pullPolicystring"Always"Image pull policy. Options: Always, IfNotPresent, Never.
utilitiesImage.tagstring"6.4.0-14"Image tag.

Component Settings​

KeyTypeDefaultDescription
connectorIcap.enabledboolfalseIf enabled, connector-icap chart will be used and ICAP connector pods will be deployed.
connectorS3.enabledboolfalseIf enabled, connector-s3 chart will be used and S3 connector pods will be deployed.
logging.enabledboolfalseIf enabled, logging stack (Alloy + Loki + Grafana) will be deployed for log collection and visualization.
prometheus.enabledbooltrueHas to be enabled when Prometheus is used. It creates a secret containing the Prometheus configuration, enabling other charts to connect.
reloader.enabledbooltrueIf enabled, reloader will be deployed. Reloader ensures that latest configuration is applied at all time.
worker.enabledbooltrueIf enabled, worker chart will be used and Worker service pods will be deployed.