# Default values for rancher-cis-benchmark.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

image:
  cisoperator:
    repository: rancher/cis-operator
    tag: v1.0.12
  securityScan:
    repository: rancher/security-scan
    tag: v0.2.12
  sonobuoy:
    repository: rancher/mirrored-sonobuoy-sonobuoy
    tag: v0.56.16

resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

## Node labels for pod assignment
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
##
nodeSelector: {}

## List of node taints to tolerate (requires Kubernetes >= 1.6)
tolerations: []

securityScanJob:
  overrideTolerations: false
  tolerations: []

affinity: {}

global:
  cattle:
    systemDefaultRegistry: ""
    clusterName: ""
    psp:
      enabled: false
  kubectl:
    repository: rancher/kubectl
    tag: v1.26.3

alerts:
  enabled: false
  severity: warning
  metricsPort: 8080