Skip to content

Commit

Permalink
fix: update neuvector values for least privilege (#373)
Browse files Browse the repository at this point in the history
## Description

update neuvector values for least privilege rbac and non-default service
account usage

## Related Issue

Fixes #372

Co-authored-by: Micah Nagel <micah.nagel@defenseunicorns.com>
  • Loading branch information
zachariahmiller and mjnagel authored Apr 30, 2024
1 parent 51c6540 commit 7f4de4f
Show file tree
Hide file tree
Showing 3 changed files with 8 additions and 3 deletions.
2 changes: 1 addition & 1 deletion src/neuvector/values/monitor-values.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
leastPrivilege: false
leastPrivilege: true

exporter:
# This is disabled pending further discussion/upstream changes to handle metrics with SSO setup
Expand Down
3 changes: 1 addition & 2 deletions src/neuvector/values/values.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
leastPrivilege: false #This is a new setting on version big bang has not added to umbrella yet
leastPrivilege: true
autoGenerateCert: false
rbac: true
serviceAccount: default
manager:
env:
ssl: false
Expand Down
6 changes: 6 additions & 0 deletions tasks.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,12 @@ includes:
- common-setup: https://raw.githubusercontent.com/defenseunicorns/uds-common/v0.3.6/tasks/setup.yaml

tasks:

- name: default
actions:
- description: "Build, deploy and test UDS Core"
task: test-uds-core

- name: dev-setup
actions:
- description: "Create the dev cluster"
Expand Down

0 comments on commit 7f4de4f

Please sign in to comment.