NeuVector Helm Installation and White-labeling: Complete Guide#

1
# NeuVector Production Configuration
2
controller:
3
  replicas: 3
4
  resources:
5
    requests:
6
      cpu: "500m"
7
      memory: "1Gi"
8
    limits:
9
      cpu: "2"
10
      memory: "4Gi"
11

12
  # Persistent storage for policies
13
  pvc:
14
    enabled: true
15
    storageClass: "fast-ssd"
16
    accessMode: "ReadWriteOnce"
17
    size: "10Gi"
18

19
  # Federation configuration
20
  federation:
21
    mastersvc:
22
      type: LoadBalancer
23
    managedsvc:
24
      type: LoadBalancer
25

26
  # Advanced settings
27
  env:
28
    - name: CLUSTER_JOIN_RETRY_INTERVAL
29
      value: "30"
30
    - name: CUSTOM_CHECK_CONTROL
31
      value: "1"
32

33
enforcer:
34
  resources:
35
    requests:
36
      cpu: "500m"
37
      memory: "512Mi"
38
    limits:
39
      cpu: "1"
40
      memory: "1Gi"
41

42
  # Runtime protection settings
43
  runtimeProtection: true
44
  admissionControl: true
45

46
manager:
47
  replicas: 2
48
  resources:
49
    requests:
50
      cpu: "250m"
51
      memory: "512Mi"
52
    limits:
53
      cpu: "500m"
54
      memory: "1Gi"
55

56
  # Ingress configuration
57
  ingress:
58
    enabled: true
59
    className: "nginx"
60
    host: neuvector.example.com
61
    annotations:
62
      cert-manager.io/cluster-issuer: "letsencrypt-prod"
63
      nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
64
      nginx.ingress.kubernetes.io/ssl-redirect: "true"
65
    tls:
66
      enabled: true
67
      secretName: neuvector-tls
68

69
  # Session management
70
  env:
71
    - name: MANAGER_SESSION_TIMEOUT
72
      value: "3600"
73
    - name: MANAGER_KEEP_ALIVE_INTERVAL
74
      value: "60"
75

76
scanner:
77
  replicas: 2
78
  strategy:
79
    type: RollingUpdate
80
    rollingUpdate:
81
      maxSurge: 1
82
      maxUnavailable: 0
83

84
  resources:
85
    requests:
86
      cpu: "500m"
87
      memory: "1Gi"
88
    limits:
89
      cpu: "2"
90
      memory: "4Gi"
91

92
  # Scanner storage
93
  pvc:
94
    enabled: true
95
    storageClass: "standard"
96
    size: "10Gi"
97

98
# CRD installation
99
crdwebhook:
100
  enabled: true
101
  resources:
102
    requests:
103
      cpu: "100m"
104
      memory: "128Mi"
105
    limits:
106
      cpu: "200m"
107
      memory: "256Mi"
108

109
# Global settings
110
tag: "5.3.0"
111
imagePullSecrets:
112
  - name: neuvector-registry
113

114
# Service account
115
serviceAccount:
116
  controller: neuvector-controller
117
  enforcer: neuvector-enforcer
118
  scanner: neuvector-scanner
119
  manager: neuvector-manager
120

121
# Security context
122
securityContext:
123
  runAsUser: 0
124
  fsGroup: 0
125

126
# Node selectors for dedicated security nodes
127
nodeSelector:
128
  node-role.kubernetes.io/security: "true"
129

130
# Tolerations for tainted nodes
131
tolerations:
132
  - key: "security"
133
    operator: "Equal"
134
    value: "true"
135
    effect: "NoSchedule"

1
apiVersion: v1
2
kind: ConfigMap
3
metadata:
4
  name: neuvector-branding
5
  namespace: neuvector
6
data:
7
  custom.css: |
8
    /* Custom CSS for white-labeling */
9
    :root {
10
      --primary-color: #1a73e8;
11
      --secondary-color: #34a853;
12
      --background-color: #f8f9fa;
13
      --text-color: #202124;
14
      --border-color: #dadce0;
15
    }
16

17
    /* Logo customization */
18
    .logo-container {
19
      background-image: url('/custom/logo.png');
20
      background-size: contain;
21
      width: 200px;
22
      height: 60px;
23
    }
24

25
    /* Hide NeuVector branding */
26
    .nv-branding {
27
      display: none !important;
28
    }
29

30
    /* Custom header */
31
    .header-bar {
32
      background-color: var(--primary-color);
33
    }
34

35
    /* Custom buttons */
36
    .btn-primary {
37
      background-color: var(--primary-color);
38
      border-color: var(--primary-color);
39
    }
40

41
    .btn-primary:hover {
42
      background-color: #1557b0;
43
      border-color: #1557b0;
44
    }
45

46
    /* Custom navigation */
47
    .nav-sidebar {
48
      background-color: var(--background-color);
49
    }
50

51
    .nav-link.active {
52
      background-color: var(--secondary-color);
53
      color: white;
54
    }
55

56
  custom.js: |
57
    // Custom JavaScript for white-labeling
58
    (function() {
59
      // Wait for DOM to load
60
      document.addEventListener('DOMContentLoaded', function() {
61
        // Replace title
62
        document.title = 'Enterprise Container Security Platform';
63

64
        // Replace footer text
65
        const footer = document.querySelector('.footer-text');
66
        if (footer) {
67
          footer.innerHTML = '© 2024 Your Company. All rights reserved.';
68
        }
69

70
        // Custom welcome message
71
        const welcomeMsg = document.querySelector('.welcome-message');
72
        if (welcomeMsg) {
73
          welcomeMsg.innerHTML = 'Welcome to Enterprise Container Security';
74
        }
75

76
        // Add custom menu items
77
        const menuContainer = document.querySelector('.nav-sidebar');
78
        if (menuContainer) {
79
          const customMenuItem = document.createElement('li');
80
          customMenuItem.className = 'nav-item';
81
          customMenuItem.innerHTML = `
82
            <a class="nav-link" href="/support">
83
              <i class="fas fa-headset"></i>
84
              <span>Enterprise Support</span>
85
            </a>
86
          `;
87
          menuContainer.appendChild(customMenuItem);
88
        }
89
      });
90

91
      // Custom API endpoint for branding
92
      window.customBranding = {
93
        companyName: 'Your Company',
94
        supportEmail: 'support@yourcompany.com',
95
        documentationUrl: 'https://docs.yourcompany.com',
96
        apiEndpoint: 'https://api.yourcompany.com/v1'
97
      };
98
    })();
99

100
  config.json: |
101
    {
102
      "branding": {
103
        "productName": "Enterprise Container Security",
104
        "companyName": "Your Company",
105
        "logo": {
106
          "light": "/custom/logo-light.svg",
107
          "dark": "/custom/logo-dark.svg"
108
        },
109
        "favicon": "/custom/favicon.ico",
110
        "colors": {
111
          "primary": "#1a73e8",
112
          "secondary": "#34a853",
113
          "success": "#34a853",
114
          "warning": "#fbbc04",
115
          "danger": "#ea4335"
116
        },
117
        "features": {
118
          "showNeuVectorLogo": false,
119
          "showVersionInfo": true,
120
          "customFooter": true,
121
          "customHeader": true
122
        },
123
        "links": {
124
          "documentation": "https://docs.yourcompany.com",
125
          "support": "https://support.yourcompany.com",
126
          "community": "https://community.yourcompany.com"
127
        }
128
      }
129
    }

1
manager:
2
  volumes:
3
    - name: custom-branding
4
      configMap:
5
        name: neuvector-branding
6
    - name: custom-assets
7
      persistentVolumeClaim:
8
        claimName: neuvector-assets
9

10
  volumeMounts:
11
    - name: custom-branding
12
      mountPath: /usr/local/apache2/htdocs/custom
13
    - name: custom-assets
14
      mountPath: /usr/local/apache2/htdocs/assets
15

16
  env:
17
    - name: CUSTOM_BRANDING_ENABLED
18
      value: "true"
19
    - name: CUSTOM_CSS_PATH
20
      value: "/custom/custom.css"
21
    - name: CUSTOM_JS_PATH
22
      value: "/custom/custom.js"
23
    - name: CUSTOM_CONFIG_PATH
24
      value: "/custom/config.json"