# Example values.yaml file

> File Inspection Engine Helm chart example values.yaml configuration file with defaults for storage, service and ingress settings.

```yaml
# Default values for fie.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

image:
  repository: registry.reversinglabs.com/fie/file-inspection-engine
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: ""

imagePullSecrets: {} # value not used for RL registry

licenseFileContent: "" # FIE license received from ReversingLabs

nameOverride: ""
fullnameOverride: ""

podAnnotations: {}

podSecurityContext: {}

securityContext: {}

storage:
  existingPvcName: "" # set name to use existing pvc
  size: 32Gi # min. 22Gi atm.
  className: gp2
  rlTmpInRam: true
  tmpfsSize: 20Gi

service:
  annotations: {}
  # To set an internal load balancer, refer to your cloud service provider documentation.
  type: ClusterIP
  port: 8000

ingress:
  enabled: false
  className: "alb"
  annotations: {}
  # There are different features supported by various Ingress controllers. Please refer to  
  # documentation on your platform specific Ingress controller to configure it in your environment.
  hosts:
    - host: fie.local.lan
      paths:
        - path: /
          pathType: Prefix
  tls: []
  #  - secretName: fie-tls
  #    hosts:
  #      - fie.local.lan

resources:
  requests:
    cpu: 8
    memory: 32Gi
    ephemeral-storage: 100Gi

nodeSelector: {}

tolerations: []

affinity: {}

settings:
  # This option is available only for alpha6 and above. Possible values: enabled / disabled / force
  addFileType: "disabled"
  # Cloud account password, used only for default registry auth
  cloudPassword: ""
  # Desired frequency of cloud threat data updates, between 1 minute and 24 hours. Use m for minutes
  # and h for hours, e.g. 45m or 6h.
  cloudUpdateInterval: "5m0s"
  # Automatic updates of cloud threat data
  cloudUpdates: true
  # Cloud account username, used only for default registry auth
  cloudUsername: ""
  # Maximum concurrent requests performing file analysis, across all HTTP endpoints. Allowed values are from 0 (unlimited) to 100
  concurrencyLimit: 20
  # The address and port on which the HTTP server will listen.
  httpAddress: ":8000"
  # Files larger than this will be analyzed by large Spectra Core instances (0 to 10240 MiB). When 0, there is no distinction between instances.
  largeFileThreshold: 10
  # Set the max decompression factor to limit resource usage during decompression, with 0 meaning no limit.
  maxDecompressionFactor: 1.0
  # The value needs to be between 1 and 10240 MiB. Uploads larger than this will be rejected.
  maxUploadFileSize: 2048
  # The number of Spectra Core instances that will process large files (0 to 100)
  numberOfLargeCores: 2
  # The number of Spectra Core instances that will process regular files (1 to 100)
  numberOfRegularCores: 4
  # Whether suspicious samples should be classified as malicious
  paranoidMode: false
  # cgroup v2 memory use percentage that triggers rejection of new file uploads. Allowed values are from 0 (disabled) to 100.
  processingUnavailableAtMemoryPercent: 0
  # The host and port of a proxy for outgoing HTTP connections. It can optionally include one of the
  # following three schemes: http, https, socks5. Example: socks5://host:port
  proxyAddress: ""
  # Maximum analysis time, for example 10s (seconds) or 1m (minute). The default is 0, which means unlimited.
  timeout: "0"
  # The maximum number of file layers to unpack when performing static analysis. Valid values
  # are from 0 (unlimited) to MaxInt32. Default 17
  unpackingDepth: 17
  # Includes detailed information about malicious samples in the HTTP response
  withThreatDetails: false
  # Do not look up samples in the malicious threat data. The files don't need to be present locally either.
  withoutMaliciousThreatData: false
```
