92 lines
1.8 KiB
YAML
92 lines
1.8 KiB
YAML
|
# Default values for upgrade-controller.
|
||
|
|
# This is a YAML-formatted file.
|
||
|
|
# Declare variables to be passed into your templates.
|
||
|
|
|
||
|
|
replicaCount: 1
|
||
|
|
|
||
|
|
image:
|
||
|
|
repository: %%IMG_REPO%%/%%IMG_PREFIX%%upgrade-controller
|
||
|
|
pullPolicy: IfNotPresent
|
||
|
|
# Overrides the image tag whose default is the chart appVersion.
|
||
|
|
tag: ""
|
||
|
|
|
||
|
|
env:
|
||
|
|
releaseManifest:
|
||
|
|
image: %%IMG_REPO%%/%%IMG_PREFIX%%release-manifest
|
||
|
|
kubectl:
|
||
|
|
image: %%IMG_REPO%%/%%IMG_PREFIX%%kubectl
|
||
|
|
version: 1.30.3
|
||
|
|
|
||
|
|
imagePullSecrets: []
|
||
|
|
nameOverride: ""
|
||
|
|
fullnameOverride: ""
|
||
|
|
|
||
|
|
serviceAccount:
|
||
|
|
# Specifies whether a service account should be created
|
||
|
|
create: true
|
||
|
|
# Automatically mount a ServiceAccount's API credentials?
|
||
|
|
automount: true
|
||
|
|
# Annotations to add to the service account
|
||
|
|
annotations: {}
|
||
|
|
# The name of the service account to use.
|
||
|
|
# If not set and create is true, a name is generated using the fullname template
|
||
|
|
name: ""
|
||
|
|
|
||
|
|
podAnnotations: {}
|
||
|
|
podLabels: {}
|
||
|
|
|
||
|
|
podSecurityContext:
|
||
|
|
runAsNonRoot: true
|
||
|
|
seccompProfile:
|
||
|
|
type: RuntimeDefault
|
||
|
|
|
||
|
|
securityContext:
|
||
|
|
capabilities:
|
||
|
|
drop:
|
||
|
|
- ALL
|
||
|
|
allowPrivilegeEscalation: false
|
||
|
|
|
||
|
|
webhookService:
|
||
|
|
name: webhook-server
|
||
|
|
type: ClusterIP
|
||
|
|
port: 443
|
||
|
|
targetPort: 9443
|
||
|
|
|
||
|
|
resources: {}
|
||
|
|
|
||
|
|
livenessProbe:
|
||
|
|
httpGet:
|
||
|
|
path: /healthz
|
||
|
|
port: 8081
|
||
|
|
initialDelaySeconds: 15
|
||
|
|
periodSeconds: 20
|
||
|
|
readinessProbe:
|
||
|
|
httpGet:
|
||
|
|
path: /readyz
|
||
|
|
port: 8081
|
||
|
|
initialDelaySeconds: 5
|
||
|
|
periodSeconds: 10
|
||
|
|
|
||
|
|
# Always keep the cert volume first in case others are appended
|
||
|
|
# or adjust the certificate resources lookup.
|
||
|
|
volumes:
|
||
|
|
- name: cert
|
||
|
|
secret:
|
||
|
|
secretName: webhook-server-cert
|
||
|
|
defaultMode: 420
|
||
|
|
optional: false
|
||
|
|
|
||
|
|
volumeMounts:
|
||
|
|
- name: cert
|
||
|
|
mountPath: "/tmp/k8s-webhook-server/serving-certs"
|
||
|
|
readOnly: true
|
||
|
|
|
||
|
|
nodeSelector: {}
|
||
|
|
|
||
|
|
tolerations: []
|
||
|
|
|
||
|
|
affinity: {}
|
||
|
|
|
||
|
|
crds:
|
||
|
|
enabled: true
|