Virtualization Behavior
Virtualization Agent behavior keys
Source authority. configs/agent.example.yml (virtualization.*)
These keys live on the Agent YAML (virtualization.*). They do not turn the Manager into a hypervisor.
Scroll sideways to see the full table. Use the arrow keys when focused.
| Key | Component | Description | Type | Required | Default | Allowed values | Example | Secret/sensitive | Restart/reload | Edition | Interactions | Source authority |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
virtualization.enabled | Agent | Enable KVM inventory | bool | no | unset/false unless example | true/false | true | no | restart | Shared | POST /virtualization/vm-data | VirtualizationConfig |
virtualization.platform | Agent | Platform string | string | no | kvm | kvm (other strings exist; not certified) | kvm | no | restart | Shared | VirtualizationConfig | |
virtualization.libvirt.uri | Agent | libvirt connection | string | no | qemu:///system | URI | qemu:///system | no | restart | Shared | permission to connect | LibvirtConfig |
virtualization.libvirt.read_only | Agent | Read-only session | bool | no | false | true/false | false | no | restart | Shared | LibvirtConfig | |
virtualization.discovery.interval | Agent | Rediscovery period | duration | no | 30s | Go duration | 30s | no | restart | Shared | VirtDiscoveryConfig | |
virtualization.discovery.cache_ttl | Agent | VM cache TTL | duration | no | 60s | 60s | no | restart | Shared | VirtDiscoveryConfig | ||
virtualization.events.enabled | Agent | libvirt event subscribe | bool | no | true | true/false | true | no | restart | Shared | VirtEventsConfig | |
virtualization.events.auto_apply_rules | Agent | Apply rules on VM start | bool | no | true | true/false | true | no | restart | Shared | enforcement Agents only | VirtEventsConfig |
agent.vm_bridge_name | Agent | Bridge for TAP/XDP topology | string | no | example viifbr0 | iface | viifbr0 | no | restart | Shared | not a global brand name | agent.example.yml |
agent.interfaces | Agent | Explicit monitor NICs | list | no | [] | [] | no | restart | Shared | empty ≠ all interfaces | agent.example.yml | |
ebpf.xdp_attach_mode | Agent | XDP attach | enum | no | auto | auto|native|generic|offload | auto | no | restart | Shared | agent.example.yml |
Hosting Agents must keep virtualization.enabled: false (Hosting example YAML). Isolation APIs apply to virtualization enforcement, not Hosting observation.