--- charts-original/values.yaml +++ charts/values.yaml @@ -1,9 +1,25 @@ +global: + cattle: + systemDefaultRegistry: "" + +autoscaling: + enabled: false rbac: create: true ## Use an existing ClusterRole/Role (depending on rbac.namespaced false/true) # useExistingRole: name-of-some-(cluster)role pspEnabled: true - pspUseAppArmor: true + pspAnnotations: {} + ## Specify pod annotations + ## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#apparmor + ## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp + ## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl + ## + # seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default,runtime/default' + # seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default' + # apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default' + # apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default' + namespaced: false extraRoleRules: [] # - apiGroups: [] @@ -52,7 +68,7 @@ # schedulerName: "default-scheduler" image: - repository: grafana/grafana + repository: rancher/mirrored-grafana-grafana tag: 7.4.5 sha: "" pullPolicy: IfNotPresent @@ -66,12 +82,15 @@ testFramework: enabled: true - image: "bats/bats" + image: "rancher/mirrored-bats-bats" tag: "v1.1.0" imagePullPolicy: IfNotPresent - securityContext: {} + securityContext: + runAsNonRoot: true + runAsUser: 1000 securityContext: + runAsNonRoot: true runAsUser: 472 runAsGroup: 472 fsGroup: 472 @@ -99,7 +118,7 @@ # priorityClassName: downloadDashboardsImage: - repository: curlimages/curl + repository: rancher/mirrored-curlimages-curl tag: 7.73.0 sha: "" pullPolicy: IfNotPresent @@ -284,7 +303,7 @@ ## initChownData container image ## image: - repository: busybox + repository: rancher/mirrored-library-busybox tag: "1.31.1" sha: "" pullPolicy: IfNotPresent @@ -581,7 +600,7 @@ ## Requires at least Grafana 5 to work and can't be used together with parameters dashboardProviders, datasources and dashboards sidecar: image: - repository: quay.io/kiwigrid/k8s-sidecar + repository: rancher/mirrored-kiwigrid-k8s-sidecar tag: 1.10.7 sha: "" imagePullPolicy: IfNotPresent @@ -639,6 +658,10 @@ # Otherwise the namespace in which the sidecar is running will be used. # It's also possible to specify ALL to search in all namespaces searchNamespace: null + + ## The name of a secret in the same kubernetes namespace which contain values to be added to the environment + ## This can be useful for database passwords, etc. Value is templated. + envFromSecret: "" notifiers: enabled: false # label that the configmaps with notifiers are marked with @@ -663,9 +686,9 @@ replicas: 1 image: # image-renderer Image repository - repository: grafana/grafana-image-renderer + repository: rancher/mirrored-grafana-grafana-image-renderer # image-renderer Image tag - tag: latest + tag: 2.0.1 # image-renderer Image sha (optional) sha: "" # image-renderer ImagePullPolicy