Reference for all required and optional values in the Claude Compliance Collector Helm chart.
Required values
| Value | Description |
aiGuardUrl |
Full AI Guard endpoint URL the collector sends conversation content to for scanning.
Must be an
https:// URL with a non-empty path and no trailing slash, except for a self-hosted, cluster-local
AI Guard host, which may use http://. See Claude Compliance Collector prerequisites for all endpoint URLs. |
Optional values that are commonly configured
These values are most likely to need adjustment for your deployment. All other optional
values use internal defaults that work for the majority of deployments and do not
require changes.
| Value | Default | Constraints | Description |
schedule.cron |
0 0/4 * * * |
5-field cron expression
|
Schedule for the CronJob. The minute field is ignored — the fire minute is set by
scheduleOffsetMinutes instead. |
schedule.timeZone |
UTC |
Valid IANA timezone
|
Timezone used to interpret
schedule.cron. |
scheduleOffsetMinutes |
0 |
Min: 0, Max: 57
|
Minute at which the CronJob fires, and the anchor for the scan window. TrendAI recommends
using different values across deployments to distribute Anthropic API load.
|
existingSecret.name |
compliance-collector-secrets |
—
|
Name of the pre-created Kubernetes Secret holding your two API keys. The chart never
creates or populates this Secret — you create it yourself before installing.
|
tmv1ApplicationName |
trendAI-claude-compliance |
Max 64 characters
|
Application name sent in the
TMV1-Application-Name header to
TrendAI Vision One™. This name appears in the AI Guard dashboard and is used to filter collector-specific
detections. |
Optional values - advanced
These values are internal configuration values with defaults that work for most deployments.
TrendAI recommends leaving them at their default values unless you have a specific
reason to change them.
| Value | Default | Constraints | Description |
scanIntervalHours |
4 |
Allowed: 1, 2, 3, 4, 6, 8, 12, 24
|
Hours between scheduled runs and the chat-processing window size. Restricted to divisors
of 24 for uniform daily coverage.
|
activityScanWindowHours |
24 |
Min: 4, Max: 168
|
Hours of Activity Feed history to scan when discovering chat IDs. Must be greater
than or equal to
scanIntervalHours. |
chunkSizeChars |
10240 |
Min: 256, Max: 50000
|
Maximum characters per chunk sent to AI Guard.
|
chunkOverlap |
0.15 |
Min: 0.0, Max: 0.5
|
Overlap fraction between consecutive chunks. The default 15% overlap ensures context
continuity across chunk boundaries.
|
maxRetries |
3 |
Min: 0, Max: 10
|
Maximum retries for transient failures before a chat is logged as
exhausted_retries and dropped. |
concurrency.maxWorkers |
2 |
Min: 1, Max: 1000
|
Number of chats processed concurrently within a single CronJob run.
|
existingSecret.keys.anthropic |
anthropic_compliance_key |
—
|
Field name within the Secret holding the Anthropic Compliance Access Key. Also used
as the on-disk filename mounted at
/var/run/secrets/compliance-collector/. |
existingSecret.keys.visionOne |
vision_one_aiguard_key |
—
|
Field name within the Secret holding the TrendAI Vision One™ API key. Also used as the on-disk filename mounted at
/var/run/secrets/compliance-collector/. |
existingSecret.skipPreflightCheck |
false |
—
|
For offline
helm template rendering only. Never set to true on a real install — doing so bypasses the check that the Secret exists. |
serviceAccount.create |
true |
—
|
Creates a namespace-scoped ServiceAccount for the collector pod. No cluster-level
RBAC is required.
|
resources.* |
100m/256Mi requests, 1000m/512Mi limits
|
—
|
Standard Kubernetes CPU and memory requests and limits for the collector pod. Tune
for your chat volume.
|
cronJob.concurrencyPolicy |
Forbid |
—
|
Skips a scheduled fire if the previous run is still in progress.
|
cronJob.backoffLimit |
0 |
—
|
Number of times Kubernetes retries a failed Job before marking it failed. TrendAI
recommends not raising this value — the collector application owns its own retry logic
through
maxRetries. |