QCS Sensor YAML Customizations

The Qualys Container Sensor deployment package includes Kubernetes YAML files used for different runtimes and environments. Certain parameters can be customized while critical settings must remain unchanged.

Parameters That Can Be Modified

The following parameters may be customized based on deployment requirements:

• Sensor activation information (CUSTOMERID, ACTIVATIONID, POD_URL)
• Sensor image version
• CPU resources
• Proxy settings
• Proxy certificates
• Tolerations
• Priority classes
• Runtime-specific host paths
• Supported runtime arguments

Parameters That Should Not Be Modified

• RBAC resources (ServiceAccount, Role, ClusterRole, RoleBinding, ClusterRoleBinding)
• Required sensor environment variables
• Essential volume mounts
• Security settings
• Kubernetes resource relationships used by the sensor

Best Practices

• Modify only documented parameters.
• Preserve YAML formatting and indentation.
• Validate YAML syntax before deployment.
• Test changes in a non-production environment.

Summary

Qualys YAML files support limited customization for environment-specific settings while critical sensor, RBAC, volume, and security configurations should remain unchanged.

Applicable to all Kubernetes deployment topics including Docker, Containerd, CRI-O, OpenShift, EKS, AKS, and GKE deployments.