# Default values for upgrade-controller.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: %%IMG_REPO%%/%%IMG_PREFIX%%upgrade-controller
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: ""

env:
  releaseManifest:
    image: %%IMG_REPO%%/%%IMG_PREFIX%%release-manifest
  kubectl:
    image: %%IMG_REPO%%/%%IMG_PREFIX%%kubectl
    version: 1.30.3

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Automatically mount a ServiceAccount's API credentials?
  automount: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}
podLabels: {}

podSecurityContext:
  runAsNonRoot: true
  seccompProfile:
    type: RuntimeDefault

securityContext:
   capabilities:
     drop:
     - ALL
   allowPrivilegeEscalation: false

webhookService:
  name: webhook-server
  type: ClusterIP
  port: 443
  targetPort: 9443

resources: {}

livenessProbe:
  httpGet:
    path: /healthz
    port: 8081
  initialDelaySeconds: 15
  periodSeconds: 20
readinessProbe:
  httpGet:
    path: /readyz
    port: 8081
  initialDelaySeconds: 5
  periodSeconds: 10

# Always keep the cert volume first in case others are appended
# or adjust the certificate resources lookup.
volumes:
 - name: cert
   secret:
     secretName: webhook-server-cert
     defaultMode: 420
     optional: false

volumeMounts:
 - name: cert
   mountPath: "/tmp/k8s-webhook-server/serving-certs"
   readOnly: true

nodeSelector: {}

tolerations: []

affinity: {}

crds:
  enabled: true