neuvector-helm - GitLite

KO | EN

gitlite — search

#javascript #python #react #golang #go #android #docker #macos #nodejs #java #windows #awesome-list #vue #ios

neuvector-helm

(★ 148)

HELM chart to install NeuVector container cluster

파일 탐색기

최종 버전 다운로드 (.zip)

파일 수가 많아 일부만 표시됩니다. 전체 파일은 위 다운로드 버튼으로 확인해 주세요.

- - fossa.yml
  - lint-unitest.yaml
  - publish-on-tagging.yaml
  - renovate-vault.yml
  - update-charts.yml
- renovate.json
- - .helmignore
  - Chart.yaml
  - README.md
  - values.schema.json
  - values.yaml
- - Chart.yaml
  - README.md
  - values.yaml
- - Chart.yaml
  - README.md
  - values.yaml
- Automatic_runtime_Engine_Detection.md
- bump_version.sh
- .gitignore
- crd_test.go
- daemonset_test.go
- deployment_test.go
- exporter_test.go
- go.mod
- go.sum
- helm_test.go
- ingress_test.go
- pvc_test.go
- registry_adapter_test.go
- role_test.go
- route_test.go
- sa_test.go
- scanner_test.go
- service_test.go
- updater_test.go
.gitignore
CODEOWNERS
ct.yaml
go.mod
go.sum
LICENSE
README.md

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/neuvector/neuvector-helm

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd neuvector-helm

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. Go

보통 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Go Go 언어 컴파일러 및 도구 모음입니다.

go build ./...

Go 프로그램을 컴파일해 실행 파일을 만듭니다.

go run .

따로 빌드하지 않고 바로 Go 프로그램을 실행합니다.

✅ 빌드가 에러 없이 끝나면 성공입니다. go run . 을 썼다면 터미널 출력을 확인하세요.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# NeuVector Helm charts

A collection of Helm charts for deploying NeuVector product in Kubernetes, Rancher and Openshift clusters.

## Installing charts

### Helm Charts

This repository contains three Helm charts.
Chart | Description
----- | -----------
core | Deploy NeuVector container security core services. [chart](charts/core)
crd | Deploy CRD services before installing NeuVector container security platform. [chart](charts/crd)
monitor | Deploy monitoring services, such as Prometheus exporter. [chart](charts/monitor)

**IMPORTANT** - Each chart has a set of configuration values, especially for the 'core' chart. Review the Helm chart configuration values [here](charts/core) and make any required changes to the `values.yaml` file for your deployment.

### Adding chart repo

```console
helm repo add neuvector https://neuvector.github.io/neuvector-helm/
helm search repo neuvector/core
```

### Versioning

Helm charts for officially released product are published from the release branch of the repository. The main branch is used for the charts of the product in the development. Typically, the charts in the main branch are published with the alpha, beta or rc tag. They can be discovered with --devel option.

```console
$ helm search repo neuvector/core -l
NAME          	CHART VERSION	APP VERSION	DESCRIPTION
neuvector/core	2.2.2       	5.0.2      	Helm chart for NeuVector's core services
neuvector/core	2.2.1        	5.0.1      	Helm chart for NeuVector's core services
neuvector/core	2.2.0        	5.0.0      	Helm chart for NeuVector's core services
neuvector/core	1.9.2        	4.4.4-s2   	Helm chart for NeuVector's core services
neuvector/core	1.9.1        	4.4.4      	Helm chart for NeuVector's core services
...
...

$ helm search repo neuvector/core --devel
NAME            	CHART VERSION	APP VERSION	DESCRIPTION
neuvector/core	2.2.0-b1     	5.0.0-b1   	Helm chart for NeuVector's core services
neuvector/core	1.9.2        	4.4.4-s2   	Helm chart for NeuVector's core services
neuvector/core	1.9.1        	4.4.4      	Helm chart for NeuVector's core services
neuvector/core	1.9.0        	4.4.4      	Helm chart for NeuVector's core services
neuvector/core	1.8.9        	4.4.3      	Helm chart for NeuVector's core services
...
...
```

### Deploy in Kubernetes

To install the chart with the release name `neuvector`:

- Create the NeuVector namespace. You can use namespace name other than "neuvector".
```console
kubectl create namespace neuvector
```

- Label the NeuVector namespace with privileged profile for deploying on PSA enabled cluster.
```console
kubectl label  namespace neuvector "pod-security.kubernetes.io/enforce=privileged"
```

- To install the chart with the release name `neuvector`.
```console
helm install neuvector --namespace neuvector --create-namespace neuvector/core
```

You can find a list of all config options in the [README of the core chart](charts/core).

### Deploy in Rancher by SUSE

You can find instructions for deploying NeuVector from Rancher charts here: https://open-docs.neuvector.com/deploying/rancher

### Deploy in RedHat OpenShift

- Create a new project.
```console
oc new-project neuvector
```

- Privileged SCC is added to Service Account specified in the values.yaml by Helm chart version 2.0.0 and above in new Helm install on OpenShift 4.x. In case of upgrading NeuVector chart from previous version to 2.0.0, please delete Privileged SCC before upgrading.

```console
oc delete rolebinding -n neuvector system:openshift:scc:privileged
```

To install the chart with the release name `neuvector`:

```console
helm install neuvector --namespace neuvector neuvector/core --set openshift=true,crio.enabled=true
```

## Rolling upgrade

```console
helm upgrade neuvector --set tag=5.0.2 neuvector/core
```

## Uninstalling the Chart

To uninstall/delete the `neuvector` deployment:

```console
helm delete neuvector
```

The command removes all the Kubernetes components associated with the chart and deletes the release.

## Using private registry

If you are using a private registry, you need pull NeuVector images of the specified version to your own registry and add registry name when installing the chart.

```console
helm install neuvector --namespace neuvector neuvector/core --set registry=your-private-registry
```

If your registry needs authentication, create a secret with the authentication information:

```console
kubectl create secret docker-registry regsecret -n neuvector --docker-server=https://your-private-registry/ --docker-username=your-name --docker-password=your-password --docker-email=your-email
```

or for OpenShift:

```console
oc create secret docker-registry regsecret -n neuvector --docker-server=https://your-private-registry/ --docker-username=your-name --docker-password=your-password --docker-email=your-email
```

And install the helm chart with at least these values:

```console
helm install neuvector --namespace neuvector neuvector/core --set imagePullSecrets=regsecret,registry=your-private-registry
```

To keep the vulnerability database up-to-date, you want to create a script, run it as a cronjob to pull the updater and scanner images periodically to your own registry.

```console
$ docker login docker.io
$ docker pull docker.io/neuvector/updater
$ docker logout docker.io

$ oc login -u <user_name>
# this user_name is the one when you install neuvector

$ docker login -u <user_name> -p `oc whoami -t` docker-registry.default.svc:5000
$ docker tag docker.io/neuvector/updater docker-registry.default.svc:5000/neuvector/updater
$ docker push docker-registry.default.svc:5000/neuvector/updater
$ docker logout docker-registry.default.svc:5000
```

## Migration

If you are using the previous way to install charts from the source directly, after adding the Helm repo, you can upgrade the current installation by given the same chart name.

```console
helm upgrade my-release neuvector/core --namespace neuvector --set tag=4.1.0
```