---
#registry: reg.dc
tag: latest

enforcer:
  image:
    repository: neuvector/enforcer

controller:
  image:
    repository: neuvector/controller
  replicas: 1

manager:
  image:
    repository: neuvector/manager

  env:
    ssl: false

  svc:
    type: ClusterIP

  ingress:
    enabled: true
    host: neuvector.dc
    annotations:
      cert-manager.io/cluster-issuer: vault-issuer
      traefik.ingress.kubernetes.io/router.tls: 'true'
    tls: true
    secretName: neuvector-tls

cve:
  scanner:
    image:
      repository: neuvector/scanner
    replicas: 1
  updater:
    image:
      repository: neuvector/updater

k3s:
  enabled: true