Licensing ConfigMap Values
Secrets
| Custom Name | Default Name | Type | Description |
|---|---|---|---|
<secrets.cloud.customSecretName> | <Release.Name>-secret-licensing-cloud | Required when related feature is enabled | Basic authentication secret which contains username and password for Spectra Intelligence authentication. Required when Spectra Intelligence is enabled (configuration.cloud.enabled). |
<secrets.cloudProxy.customSecretName> | <Release.Name>-secret-licensing-cloud-proxy | Required when related feature is enabled | Basic authentication secret which contains username and password for Spectra Intelligence Proxy authentication. Required when Spectra Intelligence Proxy is enabled (configuration.cloud.proxy.enabled). |
<secrets.license.customSecretName> | <Release.Name>-secret-license | Required when related feature is enabled | License secret which contains base64 encoded ReversingLabs licensing file. Required when Spectra Intelligence is not enabled (configuration.cloud.enabled). |
Values
Secret Configuration
| Key | Type | Default | Description |
|---|---|---|---|
| secrets.cloud | object | - | Secret configuration values for setting the Spectra Intelligence credentials. |
| secrets.cloud.createUserSecret | bool | false | If true, the chart creates a Kubernetes Secret using the username and password parameters. WARNING: Use this for convenience/testing only. |
| secrets.cloud.customSecretName | string | nil | Custom secret name. If not set, default secret name will be used. |
| secrets.cloud.password | string | "" | Cloud password secret. Only used if 'createUserSecret' is set to 'true'. WARNING: Use this for convenience/testing only. Do not store sensitive credentials in configuration files that are committed to Git. Consider using a dedicated secret management solution (e.g., Sealed Secrets, External Secrets, or Vault) for production environments. |
| secrets.cloud.username | string | "" | Cloud username secret. Only used if 'createUserSecret' is set to 'true'. WARNING: Use this for convenience/testing only. Do not store sensitive credentials in configuration files that are committed to Git. Consider using a dedicated secret management solution (e.g., Sealed Secrets, External Secrets, or Vault) for production environments. |
| secrets.cloudProxy | object | - | Secret configuration values for setting the Spectra Intelligence credentials when proxy is used. |
| secrets.cloudProxy.createUserSecret | bool | false | If true, the chart creates a Kubernetes Secret using the username and password parameters. WARNING: Use this for convenience/testing only. |
| secrets.cloudProxy.customSecretName | string | nil | Custom secret name. If not set, default secret name will be used. |
| secrets.cloudProxy.password | string | "" | Cloud proxy password secret. Only used if 'createUserSecret' is set to 'true'. WARNING: Use this for convenience/testing only. Do not store sensitive credentials in configuration files that are committed to Git. Consider using a dedicated secret management solution (e.g., Sealed Secrets, External Secrets, or Vault) for production environments. |
| secrets.cloudProxy.username | string | "" | Cloud proxy username secret. Only used if 'createUserSecret' is set to 'true'. WARNING: Use this for convenience/testing only. Do not store sensitive credentials in configuration files that are committed to Git. Consider using a dedicated secret management solution (e.g., Sealed Secrets, External Secrets, or Vault) for production environments. |
| secrets.license | object | - | Secret configuration values for setting the license. |
| secrets.license.base64 | string | nil | Base64 license secret. Only used if 'createUserSecret' is set to 'true'. WARNING: Use this for convenience/testing only. Do not store sensitive credentials in configuration files that are committed to Git. Consider using a dedicated secret management solution (e.g., Sealed Secrets, External Secrets, or Vault) for production environments. |
| secrets.license.createUserSecret | bool | false | If true, the chart creates a Kubernetes Secret using the base64 parameter. WARNING: Use this for convenience/testing only. |
| secrets.license.customSecretName | string | nil | Custom secret name. If not set, default secret name will be used. |
Kubernetes Settings
| Key | Type | Default | Description |
|---|---|---|---|
| affinity | object | {} | Affinity for pod scheduling. Lets you constrain which nodes your pod can be scheduled on based on node labels, or ensure pods are co-located with (or isolated from) other pods. |
| imagePullSecrets | list | ["rl-registry-key"] | Set of stored credentials (authentication tokens) that allows Kubernetes node to "log in" to a private container registry to pull restricted images. |
| nodeSelector | object | {} | Node labels for pod assignment. Pods will only be scheduled to nodes that match all labels defined here. |
| podAnnotations | object | - | Pod annotations. Additional custom annotations for licensing pods. Note: checksum annotation is automatically added in the deployment when Reloader is disabled. |
| tolerations | list | [] | Tolerations for pod assignment. Allows pods to be scheduled onto "tainted" nodes that would otherwise repel them. Used for dedicated hardware (GPUs) or specialized node pools. |
| useReloader | string | nil | Whether to enable Reloader annotations. When defined, this value takes precedence over global.useReloader. |
Application Configuration
| Key | Type | Default | Description |
|---|---|---|---|
| configuration.cloud | object | - | Configures integration with the Spectra Intelligence service or a T1000 instance to receive additional classification information. |
| configuration.cloud.enabled | bool | false | Enable/disable connection. If enabled, it takes precedence over the license file. |
| configuration.cloud.proxy | object | - | Configure an optional proxy connection. |
| configuration.cloud.proxy.enabled | bool | false | Enable/disable proxy server. |
| configuration.cloud.proxy.port | int | 8080 | Specify the TCP port number if using an HTTP proxy. Allowed range: 1–65535. Required only if proxy is used. |
| configuration.cloud.proxy.server | string | "" | Proxy hostname or IP address for routing requests from the appliance to Spectra Intelligence. Required only if proxy is used. |
| configuration.cloud.timeout | int | 60 | Specify the number of seconds to wait when connecting to Spectra Intelligence before terminating the connection request. |
Pod Settings
| Key | Type | Default | Description |
|---|---|---|---|
| image | object | - | Configuration values of the licensing image. |
| image.pullPolicy | string | "Always" | Image pull policy. Options: Always, IfNotPresent, Never. |
| image.tag | string | "8.4.0-20" | Image tag. |
| resources | object | - | Resource requests and limits for the container. |
| resources.limits | object | - | The maximum amount of resources the container is allowed to consume. |
| resources.limits.cpu | string | "500m" | CPU limit. Throttling occurs if the container exceeds this value. |
| resources.limits.memory | string | "256Mi" | Memory limit. If exceeded, the container may be terminated with an OOMKilled error. |
| resources.requests | object | - | The minimum amount of resources the container is guaranteed. |
| resources.requests.cpu | string | "100m" | CPU request. |
| resources.requests.memory | string | "128Mi" | Memory request. |