Configuration Reference
The Edge Agent can be configured via a JSON configuration file or Helm chart values.General Settings
| Parameter | Type | Default | Description |
|---|---|---|---|
logLevel | string | "info" | Logging level (debug, info, warn, error) |
serverPort | integer | 8080 | Port for the HTTP server (metrics, probes) |
Graph Settings
| Parameter | Type | Default | Description |
|---|---|---|---|
graph.pruneInterval | duration | 1h | How often to prune old nodes/edges |
graph.maxPruneAge | duration | 24h | Max age of nodes/edges before pruning |
Kubernetes Settings
| Parameter | Type | Default | Description |
|---|---|---|---|
kube.configPath | string | "" | Path to kubeconfig (if not in-cluster) |
kube.resyncInterval | duration | 5m | Informer resync interval |
kube.clusterName | string | "" | Optional cluster identifier |
kube.resources | array | ["pods", "services", ...] | List of resources to monitor |
Services (DNSTap) Settings
| Parameter | Type | Default | Description |
|---|---|---|---|
services.address | string | ":6000" | Address to listen for DNSTap streams |
services.maxConns | integer | 100 | Max concurrent DNSTap connections |
services.workers | integer | 4 | Worker pool size for service enrichment |
services.readTimeout | duration | 30s | Timeout for reading frames |
services.writeTimeout | duration | 10s | Timeout for writing frames |
services.tls.enabled | boolean | false | Enable TLS for DNSTap |
services.tls.certFile | string | "" | Path to certificate file |
services.tls.keyFile | string | "" | Path to private key file |
services.tls.caFile | string | "" | Path to CA certificate file |
services.tls.requireClientCert | boolean | false | Require client certificate |
services.tls.minVersion | string | "1.2" | Minimum TLS version |
services.tls.cipherSuites | array | [...] | Allowed cipher suites |
services.compression.enabled | boolean | true | Enable DNSTap compression |
services.compression.type | string | "gzip" | Compression type |
services.compression.level | integer | -1 | Compression level (-1 to 9) |
services.handshake.timeout | duration | 10s | Handshake timeout |
services.handshake.contentType | string | "protobuf..." | Expected content type |
Publisher Settings
| Parameter | Type | Default | Description |
|---|---|---|---|
enablePublishing | boolean | false | Enable graph publishing |
publisher.apiKey | string | "" | Authentication key for NOFire AI |
publisher.timeout | duration | 5m | Request timeout |
publisher.maxRetries | integer | 3 | Max retries for failed requests |
publisher.retryDelay | duration | 1m | Delay between retries |
publisher.enableCompression | boolean | false | Enable GZIP for published data |
publisher.graph.url | string | "" | Endpoint for graph updates |
publisher.graph.interval | duration | 1h | Full graph sync interval |
Sentry Settings
| Parameter | Type | Default | Description |
|---|---|---|---|
sentry.dsn | string | "" | Sentry DSN |
sentry.environment | string | "" | Environment tag |
sentry.release | string | "" | Release tag |
sentry.debug | boolean | false | Enable Sentry debug mode |
sentry.sampleRate | float | 1.0 | Error sampling rate |
sentry.tracesSampleRate | float | 0.0 | Transaction sampling rate |