Kaspersky Next XDR Expert

desc

Yes

The node name.

The value must comply with the following rules:

• The node name must be 1 to 63 characters long.
• The node name can contain the following characters:
  • Uppercase ASCII letters (A–Z)
  • Lowercase ASCII letters (a–z)
  • Numbers (0–9)
  • Hyphen (-)

host

Yes

The IP address of the node.

The primary worker node must be included in the same subnet as the Kubernetes cluster gateway.

user

Yes

The user name of the account created on the target host and used for connection to the node by KDT.

The value must comply with the following rules:

• The user name must be 1 to 31 characters long.
• The user name can contain the following characters:
  • Lowercase letters (a–z)
  • Numbers (0–9)
  • Underscore (_), hyphen (-)

key

Yes

The path to the private part of the SSH key located on the administrator host and used for connection to the node by KDT.

The parameter value must be a Linux file path or Base64-encoded file content. Also the value must match the ssh_pk parameter value.

We recommend using the SSH key to establish a connection with the node.

nwc-language

Yes

The language of the OSMP Console interface specified by default. After installation, you can change the OSMP Console language.

Possible parameter values:

• enUS
• ruRu

pg_ip

Yes

The IP address of the DBMS.

For the demonstration deployment, when you install the DBMS inside the cluster, the DBMS IP address does not match the cluster gateway IP address and is set by using the pg_ip parameter.

admin_password

Yes

The admin_password parameter specifies the password of the Kaspersky Next XDR Expert user account that will be created by KDT during the installation. The default user name of this account is "admin".

The Main administrator role is assigned to this user account.

The password must comply with the following rules:

• The user password cannot have fewer than 8 or more than 256 characters.
• The password must contain characters from at least three of the groups listed below:
  • Uppercase letters (A–Z)
  • Lowercase letters (a–z)
  • Numbers (0–9)
  • Special characters (@ # $ % ^ & * - _ ! + = [ ] { } | : ' , . ? / \ ` ~ " ( ) ;)
• The password must not contain any whitespaces, Unicode characters, or the ".@" combination.

When you specify the admin_password parameter value manually (not by the Configuration wizard), make sure that this value meets the YAML standard requirements for values in strings:

• The parameter value containing special characters must be enclosed in single quotes.
• Any single quote ' inside the parameter value must be doubled to escape this single quote.

Example: the user account password Any_pass%1234'5678"90 must be specified as the value 'Any_pass%1234''5678"90' of the admin_password parameter.

To avoid compromise, we do not recommend specifying passwords in the configuration file. Instead, you can specify passwords during the installation of Kaspersky Next XDR Expert.

vault_replicas

Yes

The number of replicas of the secret storage in the Kubernetes cluster.

For the demonstration deployment on a single node, set the vault_replicas parameter to 1.

vault_standalone

Yes

The parameter that indicates whether to run the secret storage in the standalone mode.

For the demonstration deployment on a single node, set the vault_standalone parameter value to true.

core_disk_request

Yes

The parameter that specifies the amount of disk space for the operation of KUMA Core. This parameter is used only if the low_resources parameter is set to false. If the low_resources parameter is set to true, the core_disk_request parameter is ignored and 4 GB of the disk space for the operation of KUMA Core is allocated. If you do not specify the core_disk_request parameter and the lowResources parameter is set to false, the default amount of disk space for the operation of KUMA Core is allocated. The default amount of disk space is 512 GB.

host_inventory

No

The path to the additional KUMA inventory file located on the administrator host. This file contains the installation parameters used to partially add or remove hosts with the KUMA services. The parameter value must be a Linux file path or Base64-encoded file content.

If you perform an initial deployment of Kaspersky Next XDR Expert or run a custom action that requires a configuration file, leave the default parameter value (/dev/null).

iam-nwc_host

flow_host

hydra_host

login_host

admsrv_host

console_host

api_host

kuma_host

psql_host

monitoring_host

gateway_host

Yes

The host name that is used in the FQDNs of the public Kaspersky Next XDR Expert services. The service host name and domain name (the smp_domain parameter value) are parts of the service FQDN.

Default values of the parameters:

• iam-nwc_host—"console"
• flow_host—"console"
• hydra_host—"console"
• login_host—"console"
• admsrv_host—"admsrv"
• console_host—"console"
• api_host—"api"
• kuma_host—"kuma"
• psql_host—"psql" (only for the demonstration deployment)
• monitoring_host—"monitoring"
• gateway_host—"console"

pki_host_list

Yes

The list of host names of the public Kaspersky Next XDR Expert services for which a self-signed or custom certificate is to be generated. The parameter value must be a list of host names, separated by spaces. If custom host names are not specified, the default host names are used.

intermediate_bundle

No

The path to the custom intermediate certificate used to work with public Kaspersky Next XDR Expert services. Specify this parameter if the intermediate_enabled parameter is set to true. The parameter value must be a Linux file path or Base64-encoded file content.

encrypt_secret

sign_secret

Yes

The names of the secret files that are stored in the Kubernetes cluster. These names contain the domain name, which must match the smp_domain parameter value.

prometheus_size

Yes

The amount of free disk space allocated to store metrics. Measured in gigabytes, specified as "<amount>GB". The minimum recommended value is 5 GB.

grafana_admin_password

No

The password of the account used to view OSMP metrics through the Grafana tool.

loki_retention_period

Yes

The storage period of OSMP logs after which logs are automatically removed. The default value is 72 hours (set the parameter value in the configuration file as "<time in hours>h". For example, "72h").

psql_tls_off

No

The parameter that indicates whether to encrypt the traffic between the Kaspersky Next XDR Expert components and the DBMS by using the TLS protocol.

If the DBMS is installed outside the cluster, TLS encryption is disabled by default. For the demonstration deployment, if the DBMS is installed inside the cluster, TLS encryption must be disabled (psql_tls_off is set to true).

Possible parameter values:

• true—Do not encrypt the traffic (default value).
• false—Encrypt the traffic.

proxy_addresses

No

The IP address of the proxy server. If the proxy server uses multiple IP addresses, specify these addresses separated by a space (for example, "0.0.0.0 0.0.0.1 0.0.0.2"). Specify this parameter if the proxy_enabled parameter is set to true.

trace_level

No

The trace level. The default value is 0.

Possible parameter values: 0–5.

incident_attachments_max_count_limit

No

The number of files that you can attach to the incident. The default value is 100.

ignore_precheck

No

The parameter indicating whether to check the hardware, software, and network configuration of the Kubernetes cluster nodes for compliance with the prerequisites for installing the solution before the deployment. The default value is false.

Possible parameter values:

• true—Skip the pre-checks.
• false—Perform the pre-checks.