Configuring scanning variables using the Helm Chart package
When installing the solution using the Helm Chart package, you can configure scanning variables for Kaspersky Container Security components. These variables are specified in the ENV section of the component installation instructions and let you optimize the scanning process.
The table below lists scan variables of solution components, the corresponding variables in the values.yaml configuration file (if any), and the default values of the variables.
Scanning variables for solution components
|
Variable in the component installation instructions |
Variable in the values.yaml configuration file |
Description |
Default value |
|---|---|---|---|
|
kcs-middleware component ( |
|||
|
|
|
Number of scan workers that process and save the results transmitted by the image handler (kcs-ih) to the middleware. |
10 |
|
|
|
Number of processes responsible for re-evaluating scan results when an assurance policy is changed, added, or removed. |
10 |
|
|
|
Maximum number of tasks in the scan queue. This limit is necessary to prevent excessive usage of memory resources. |
100 |
|
|
|
The number of scan attempts that scanners make as part of a single scan task. |
10 |
|
kube-agent component ( |
|||
|
|
|
How often the agent scans the cluster for compliance with cluster security industry benchmarks. In minutes. |
360 |
|
node-agent component ( |
|||
|
|
|
How often the agent scans the node or nodes for compliance with the Kubernetes benchmarks. In minutes. |
600 |
