changing to the EBPF instead of Kernel

rh-impact · Nov 29, 2022 · 01b64c3 · 01b64c3
1 parent 0b49cf0
commit 01b64c3
Showing 1 changed file with 16 additions and 3 deletions.
diff --git a/bootstrap/roles/ocp4-install-acs/templates/securedcluster.yaml.j2 b/bootstrap/roles/ocp4-install-acs/templates/securedcluster.yaml.j2
@@ -5,12 +5,25 @@ metadata:
   name: stackrox-secured-cluster-services
 spec:
   clusterName: development
+  auditLogs:
+    collection: Auto
   admissionControl:
+    listenOnUpdates: true
+    bypass: BreakGlassAnnotation
+    contactImageScanners: DoNotScanInline
     listenOnCreates: true
+    timeoutSeconds: 20
     listenOnEvents: true
-    listenOnUpdates: true
+  scanner:
+    analyzer:
+      scaling:
+        autoScaling: Enabled
+        maxReplicas: 5
+        minReplicas: 2
+        replicas: 3
+    scannerComponent: AutoSense
   perNode:
     collector:
-      collection: KernelModule
+      collection: EBPF
       imageFlavor: Regular
-    taintToleration: TolerateTaints
+    taintToleration: TolerateTaints