Tenable Security Center Helm Charts

Tenable Security Center leverages the Helm open-source package manager for Kubernetes. When you install, configure, or upgrade Tenable Security Center in a Kubernetes environment, use this Helm Chart.

To download the Helm Chart for Tenable Security Center, go to https://github.com/tenable/helm-charts.

Helm Chart

Helm Chart Description

securitycenter

Configures the namespace, persistent volume claim, and StatefulSet Pods to pull images from container registries.

Values.yaml Configuration

Specify CPU and Memory Requests and Limits

The following example is for an environment with 10,000 active IPs. For sizing requirements specific to your needs, see Tenable Security Center Cloud Requirements.

resources:

  limits:

    cpu: 16000m

    memory: 64Gi

  requests:

    cpu: 16000m

    memory: 64Gi

Specify SC disk space

persistentVolumeClaim:

  size: 900Gi

Specify Service annotations (Optional)

If you are using Kubernetes in a hosted environment and your provider (for example, AWS) supports it, use the following annotation to restrict access to the created load balancer.

service:

  annotations:

    service.beta.kubernetes.io/load-balancer-source-ranges: "<IP Range>"

Specify Node Affinity (Optional)

Tenable Security Center requires an amd64 node. If you are using Kubernetes in an environment with multiple available node types, or that requires a node affinity policy, you can add the policy to values.yaml. The following is an example policy for Karpenter in AWS and EKS.

affinity:

  nodeAffinity:

    requiredDuringSchedulingIgnoredDuringExecution:

      nodeSelectorTerms:

        - matchExpressions:

          - key: kubernetes.io/arch

            operator: In

            values:

              - amd64

          - key: karpenter.sh/capacity-type

            operator: In

            values:

              - on-demand