Red Hat OpenShift Container Platform

Important attributes

The following spec and spec.config attributes are important when configuring a FileIntegrity CR.

Table 19. Important `spec` and `spec.config` attributes
Attribute	Description
`spec.nodeSelector`	Specifies a map of key-value pairs that labels for a node must match for a cluster to schedule Advanced Intrusion Detection Environment (AIDE) pods on that node. Typically, you can configure only a single key-value pair. For example, `node-role.kubernetes.io/worker: ""` schedules AIDE on all compute nodes, while `node.openshift.io/os_id: "rhel"` schedules AIDE on all RHEL nodes.
`spec.debug`	A boolean attribute. If set to `true`, the daemon running in the AIDE daemon set pods would output extra information.
`spec.tolerations`	Specify tolerations to schedule on nodes with custom taints. When not specified, a default toleration is applied, which allows tolerations to run on control plane nodes.
`spec.config.gracePeriod`	The number of seconds to pause in between AIDE integrity checks. Frequent AIDE checks on a node can be resource intensive, so it can be useful to specify a longer interval. Defaults to `900`, or 15 minutes.
`maxBackups`	The maximum number of AIDE database and log backups leftover from the `re-init` process to keep on a node. Older backups beyond this number are automatically pruned by the daemon.
`spec.config.name`	Name of a configMap that contains custom AIDE configuration. If omitted, a default configuration is created.
`spec.config.namespace`	Namespace of a configMap that contains custom AIDE configuration. If unset, the FIO generates a default configuration suitable for RHCOS systems.
`spec.config.key`	Key that contains actual AIDE configuration in a config map specified by `name` and `namespace`. The default value is `aide.conf`.
`spec.config.initialDelay`	The number of seconds to wait before starting the first AIDE integrity check. Default is set to 0. This attribute is optional.