182 lines
5.0 KiB
YAML
182 lines
5.0 KiB
YAML
# Default values for citrix-ingress-controller.
|
|
# This is a YAML-formatted file.
|
|
# Declare variables to be passed into your templates.
|
|
|
|
# Citrix Ingress Controller config details
|
|
imageRegistry: quay.io
|
|
imageRepository: citrix/citrix-k8s-ingress-controller
|
|
imageTag: 1.28.2
|
|
image: "{{ .Values.imageRegistry }}/{{ .Values.imageRepository }}:{{ .Values.imageTag }}"
|
|
pullPolicy: IfNotPresent
|
|
imagePullSecrets: []
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
openshift: false
|
|
adcCredentialSecret: # K8s Secret Name
|
|
# Enable secretStore to implement CSI Secret Provider classes for holding the nslogin credentials
|
|
secretStore:
|
|
enabled: false
|
|
username: {}
|
|
#valueFrom:
|
|
# configMapKeyRef:
|
|
# name: test1
|
|
# key: username
|
|
password: {}
|
|
#valueFrom:
|
|
# configMapKeyRef:
|
|
# name: test1
|
|
# key: password
|
|
nsIP: x.x.x.x
|
|
nsVIP:
|
|
nsSNIPS:
|
|
license:
|
|
accept: no
|
|
nsPort: 443
|
|
nsProtocol: HTTPS
|
|
nsEnableLabel: true
|
|
# nitroReadTimeout is timeout value in seconds for nitro api read timeout(default is 20)
|
|
nitroReadTimeout:
|
|
logLevel: INFO
|
|
jsonLog: false
|
|
entityPrefix:
|
|
kubernetesURL:
|
|
clusterName:
|
|
ingressClass:
|
|
setAsDefaultIngressClass: False
|
|
serviceClass:
|
|
defaultSSLCertSecret:
|
|
podIPsforServiceGroupMembers: False
|
|
ignoreNodeExternalIP: False
|
|
ipam: False
|
|
# API server Cert verification can be disabled, while communicating with API Server, if disableAPIServerCertVerify set to True
|
|
disableAPIServerCertVerify: False
|
|
logProxy:
|
|
nodeWatch: false
|
|
cncPbr: False
|
|
nodeSelector:
|
|
key:
|
|
value:
|
|
tolerations: []
|
|
updateIngressStatus: True
|
|
nsHTTP2ServerSide: "OFF"
|
|
nsCookieVersion: "0"
|
|
nsConfigDnsRec:
|
|
nsSvcLbDnsRec:
|
|
nsDnsNameserver:
|
|
optimizeEndpointBinding:
|
|
routeLabels:
|
|
namespaceLabels:
|
|
disableOpenshiftRoutes:
|
|
|
|
# Exporter config details
|
|
exporter:
|
|
required: false
|
|
imageRegistry: quay.io
|
|
imageRepository: citrix/citrix-adc-metrics-exporter
|
|
imageTag: 1.4.9
|
|
image: "{{ .Values.exporter.imageRegistry }}/{{ .Values.exporter.imageRepository }}:{{ .Values.exporter.imageTag }}"
|
|
pullPolicy: IfNotPresent
|
|
ports:
|
|
containerPort: 8888
|
|
resources: {}
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
extraVolumeMounts: []
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user.
|
|
#- name: github-key
|
|
# mountPath: /etc/config/keys/
|
|
# readOnly: true
|
|
#- name: agent-init-scripts
|
|
# mountPath: /docker-entrypoint.d/
|
|
|
|
# For CRDs supported by Citrix Ingress Controller
|
|
crds:
|
|
install: false
|
|
retainOnDelete: false
|
|
|
|
# Enable RBAC role (so called local role), by default CIC deployed with ClusterRole.
|
|
# below variable to deploy CIC with RBAC role, only ingress service supported with this config
|
|
rbacRole: False
|
|
|
|
# Config required to be done by Citrix Ingress Controller for sending metrics to Citrix Observability Exporter
|
|
analyticsConfig:
|
|
required: false
|
|
distributedTracing:
|
|
enable: false
|
|
samplingrate: 100
|
|
endpoint:
|
|
server:
|
|
service:
|
|
timeseries:
|
|
port: 30002
|
|
metrics:
|
|
enable: false
|
|
mode: 'avro'
|
|
auditlogs:
|
|
enable: false
|
|
events:
|
|
enable: false
|
|
transactions:
|
|
enable: false
|
|
port: 30001
|
|
|
|
nsLbHashAlgo:
|
|
required: false
|
|
hashFingers: 256
|
|
hashAlgorithm: 'DEFAULT'
|
|
|
|
# Specifies whether a ServiceAccount should be created
|
|
serviceAccount:
|
|
create: true
|
|
# The name of the ServiceAccount to use.
|
|
# If not set and `create` is true, a name is generated using the fullname template
|
|
# name:
|
|
|
|
podAnnotations: {}
|
|
|
|
resources: {}
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# Following values depends on no of ingresses configured by Ingress Controllers, so it is
|
|
# advised to test with maximum no of ingresses to set these values.
|
|
# limits:
|
|
# cpu: 1000m
|
|
# memory: 1000Mi
|
|
# requests:
|
|
# cpu: 500m
|
|
# memory: 500Mi
|
|
|
|
affinity: {}
|
|
|
|
extraVolumeMounts: []
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user.
|
|
#- name: github-key
|
|
# mountPath: /etc/config/keys/
|
|
# readOnly: true
|
|
#- name: agent-init-scripts
|
|
# mountPath: /docker-entrypoint.d/
|
|
|
|
extraVolumes: []
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user.
|
|
#- name: agent-init-scripts
|
|
# configMap:
|
|
# name: agent-init-scripts
|
|
# defaultMode: 0755
|
|
#- name: github-key
|
|
# secret:
|
|
# secretName: github-key
|
|
# defaultMode: 0744
|