---
registry: reg.dc
tag: latest

enforcer:
  image:
    repository: neuvector/enforcer.preview

controller:
  image:
    repository: neuvector/controller.preview
  replicas: 1

manager:
  image:
    repository: neuvector/manager.preview

  env:
    ssl: false

  svc:
    type: ClusterIP

  ingress:
    enabled: true
    host: neuvector.dc
    annotations:
      cert-manager.io/cluster-issuer: vault-issuer
      traefik.ingress.kubernetes.io/router.tls: 'true'
    tls: true
    secretName: neuvector-tls

cve:
  scanner:
    image:
      repository: neuvector/scanner.preview
    replicas: 1
  updater:
    image:
      repository: neuvector/updater.preview

k3s:
  enabled: true