Kaspersky Next XDR Expert

schemaType: ParameterSet

schemaVersion: 1.0.1

namespace: ""

name: bootstrap

project: xdr

# Nodes on which the Kubernetes cluster and Kaspersky XDR will be deployed

nodes:

# Primary node parameters

# Node name. The value must be 1 to 63 characters long.

# It can only contain the ASCII letters 'a' to 'z' (in either lowercase or uppercase), the digits '0' to '9', and the hyphen ('-').

- desc: cdt-primary1

# Node type.

# Possible node types: primary, worker.

# Primary node is intended for managing the cluster, storing metadata, and distributing the workload.

type: primary

# IP address of the node.

# Primary and worker nodes must be included in the same subnet as the Kubernetes cluster gateway.

host: 10.80.23.42

access:

ssh:

# User name of the account.

# The user account is created on the target host and is used by KDT to connect to the node.

# The user name must be 1 to 31 characters long.

# It can contain letters ('a' to 'z'), digits ('0' to '9'), underscores ('_'), and hyphens ('-').

user: root

# Password for connecting to the node, which can be used instead of the SSH key.

# password: pass

# Path to the SSH private key for connection to the primary worker node by KDT. The SSH private key is located on the administrator host.

# We recommend using the SSH key to establish a connection with the node.

# The parameter value must be a Linux file path or Base64-encoded file content. Also, the value must match the 'ssh_pk' parameter value.

key: /root/.ssh/id_rsa

# Worker node parameters

# Node name. The value must be 1 to 63 characters long.

# It can only contain the ASCII letters 'a' to 'z' (in either lowercase or uppercase), the digits '0' to '9', and the hyphen ('-').

- desc: cdt-w1

# Node type.

# Possible node types: primary, worker.

# The workload of Kaspersky XDR components is distributed between worker nodes.

type: worker

# IP address of the node.

# Primary and worker nodes must be included in the same subnet as the Kubernetes cluster gateway.

host: 10.80.23.141

access:

ssh:

# User name of the account.

# The user account is created on the target host and is used by KDT to connect to the node.

# The user name must be 1 to 31 characters long.

# It can contain letters ('a' to 'z'), digits ('0' to '9'), underscores ('_'), and hyphens ('-').

user: root

# Password for connecting to the node, which can be used instead of the SSH key.

# password: pass

# Path to the SSH private key for connection to the primary worker node by KDT. The SSH private key is located on the administrator host.

# We recommend using the SSH key to establish a connection with the node.

# The parameter value must be a Linux file path or Base64-encoded file content. Also, the value must match the 'ssh_pk' parameter value.

key: /root/.ssh/id_rsa

# Worker node parameters

# Node name. The value must be 1 to 63 characters long.

# It can only contain the ASCII letters 'a' to 'z' (in either lowercase or uppercase), the digits '0' to '9', and the hyphen ('-').

- desc: cdt-w2

# Node type.

# Possible node types: primary, worker.

# The workload of Kaspersky XDR components is distributed between worker nodes.

type: worker

# IP address of the node.

# Primary and worker nodes must be included in the same subnet as the Kubernetes cluster gateway.

host: 10.80.23.45

access:

ssh:

# User name of the account.

# The user account is created on the target host and is used by KDT to connect to the node.

# The user name must be 1 to 31 characters long.

# It can contain letters ('a' to 'z'), digits ('0' to '9'), underscores ('_'), and hyphens ('-').

user: root

# Password for connecting to the node, which can be used instead of the SSH key.

# password: pass

# Path to the SSH private key for connection to the primary worker node by KDT. The SSH private key is located on the administrator host.

# We recommend using the SSH key to establish a connection with the node.

# The parameter value must be a Linux file path or Base64-encoded file content. Also, the value must match the 'ssh_pk' parameter value.

key: /root/.ssh/id_rsa

# Worker node parameters

# Node name. The value must be 1 to 63 characters long.

# It can only contain the ASCII letters 'a' to 'z' (in either lowercase or uppercase), the digits '0' to '9', and the hyphen ('-').

- desc: cdt-w3

# Node type.

# Possible node types: primary, worker.

# The workload of Kaspersky XDR components is distributed between worker nodes.

type: worker

# IP address of the node.

# Primary and worker nodes must be included in the same subnet as the Kubernetes cluster gateway.

host: 10.80.23.30

access:

ssh:

# User name of the account.

# The user account is created on the target host and is used by KDT to connect to the node.

# The user name must be 1 to 31 characters long.

# It can contain letters ('a' to 'z'), digits ('0' to '9'), underscores ('_'), and hyphens ('-').

user: root

# Password for connecting to the node, which can be used instead of the SSH key.

# password: pass

# Path to the SSH private key for connection to the primary worker node by KDT. The SSH private key is located on the administrator host.

# We recommend using the SSH key to establish a connection with the node.

# The parameter value must be a Linux file path or Base64-encoded file content. Also, the value must match the 'ssh_pk' parameter value.

key: /root/.ssh/id_rsa

# Node kind 'admsrv' indicates that Administration Server will be installed on this node.

# We strongly recommend that you select the node on which Administration Server will work. Do not specify the 'kind: admsrv' value for other nodes.

kind: admsrv

# Parameters for the Kaspersky XDR deployment

parameters:

# Connection string for accessing the DBMS installed and configured on a separate server.

# user_db—The user name of a privileged internal DBMS account. This account is granted permissions to create databases and other DBMS accounts.

# password_db—The password of the privileged internal DBMS account.

# fqdn_db:port_db—The FQDN and connection port of a separate server on which the DBMS is installed.

# The 'psql_dsn' parameter value must comply with the URI format. If the connection URI includes symbols with special meaning in any of its parts, it must be encoded with percent-encoding.

- name: psql_dsn

source:

value: "postgres://postgres:password@dbms.example.com:1234"

# IP address of the Kubernetes cluster gateway.

# The Kubernetes cluster gateway is intended for connecting to the Kaspersky XDR components installed inside the Kubernetes cluster.

# The gateway must be included in the same subnet as all cluster nodes.

- name: ingress_ip

source:

value: 10.80.23.182

# Path to the SSH private key for connection to the primary and workers nodes by KDT. The SSH private key is located on the administrator host.

# The parameter value must be a Linux file path or Base64-encoded file content. Also, the value must match the 'key' parameter value.

- name: ssh_pk

source:

path: /root/.ssh/id_rsa

# Password of the Kaspersky XDR user account that will be created during the installation.

# Password must be 8 to 256 characters long.

# It can contain lowercase or uppercase letters ('a' to 'z'), digits ('0' to '9'), and special characters (@ # $ % ^ & * - _ ! + = [ ] { } | : ' , . ? / \ ` ~ " ( ) ;).

- name: admin_password

source:

value: "password"

# Amount of disk space for the operation of KUMA Core, in gigabytes.

# Specified as "<amount>Gi". Default value is 512Gi.

# If the 'low_resources' parameter is set to true, the 'core_disk_request' parameter is ignored and 4Gi is allocated.

- name: core_disk_request

source:

value: 512Gi

# Path to the KUMA inventory file that contains the installation parameters for deployment of the KUMA services. This file is located on the administrator host.

# The parameter value must be a Linux file path or Base64-encoded file content.

- name: inventory

source:

value: "/home/user/inventory.yml"

# Path to the license key of KUMA Core. This file is located on the administrator host.

# The parameter value must be a Linux file path or Base64-encoded file content.

- name: license

source:

value: "/home/user/license.key"

# Domain name. The parameter value must meet the requirements for second-level domain naming.

# The service host name and domain name are parts of FQDNs of the Kaspersky XDR services.

# Default values of service host names: iam-nwc_host—"console", flow_host—"console", hydra_host—"console", login_host—"console", admsrv_host—"admsrv", console_host—"console", api_host—"api", kuma_host—"kuma", monitoring_host—"monitoring", gateway_host—"console".

# Custom host names can be specified in the configuration file.

# Example: console.smp.local is the FQDN of the service that provides access to the OSMP Console. This FQDN consists of the 'console_host' and 'smp_domain' parameter values.

- name: smp_domain

source:

value: "smp.local"

# List of host names of the Kaspersky XDR services for which a self-signed or custom certificate must be generated.

# The parameter value must be a list of host names, separated by spaces. If custom host names are not specified, the default host names are used.

- name: pki_fqdn_list

source:

value: "admsrv api console kuma monitoring"