194 lines
4.5 KiB
YAML
194 lines
4.5 KiB
YAML
# Copyright 2021 Dynatrace LLC
|
|
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# may be set to "kubernetes", "openshift", or "gke-autopilot"
|
|
platform: ""
|
|
|
|
#image qualifier; OBSOLETE -> use imageref instead!
|
|
# supply either image or imageref; if both supplied, imageref will be disregarded
|
|
image: ""
|
|
#image description using tags
|
|
#resulting image will be named <repository>:v<tag>
|
|
imageRef:
|
|
repository: "" #path to repo
|
|
tag: "" #defaults to chart version
|
|
|
|
customPullSecret: ""
|
|
installCRD: true
|
|
|
|
operator:
|
|
nodeSelector: {}
|
|
tolerations: []
|
|
labels: []
|
|
annotations: []
|
|
apparmor: false
|
|
securityContext:
|
|
privileged: false
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: true
|
|
runAsUser: 1001
|
|
runAsGroup: 1001
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
podSecurityContext:
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
limits:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
|
|
webhook:
|
|
hostNetwork: false
|
|
nodeSelector: {}
|
|
tolerations: []
|
|
labels: []
|
|
annotations: []
|
|
apparmor: false
|
|
securityContext:
|
|
privileged: false
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: true
|
|
runAsUser: 1001
|
|
runAsGroup: 1001
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
podSecurityContext:
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
requests:
|
|
cpu: 300m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 300m
|
|
memory: 128Mi
|
|
highAvailability: true
|
|
validatingWebhook:
|
|
timeoutSeconds: 10
|
|
mutatingWebhook:
|
|
timeoutSeconds: 10
|
|
|
|
csidriver:
|
|
enabled: true
|
|
nodeSelector: {}
|
|
kubeletPath: "/var/lib/kubelet"
|
|
existingPriorityClassName: "" # if defined, use this priorityclass instead of creating a new one
|
|
priorityClassValue: "1000000"
|
|
maxUnmountedVolumeAge: "" # defined in days, must be a plain number
|
|
tolerations:
|
|
- effect: NoSchedule
|
|
key: node-role.kubernetes.io/master
|
|
operator: Exists
|
|
- effect: NoSchedule
|
|
key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
labels: []
|
|
annotations: []
|
|
csiInit:
|
|
securityContext:
|
|
runAsUser: 0
|
|
privileged: false
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: false
|
|
seLinuxOptions:
|
|
level: s0
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 100Mi
|
|
limits:
|
|
cpu: 50m
|
|
memory: 100Mi
|
|
server:
|
|
securityContext:
|
|
runAsUser: 0
|
|
privileged: true # Needed for mountPropagation
|
|
allowPrivilegeEscalation: true # Needed for privileged
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: false
|
|
seLinuxOptions:
|
|
level: s0
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 100Mi
|
|
limits:
|
|
cpu: 50m
|
|
memory: 100Mi
|
|
provisioner:
|
|
securityContext:
|
|
runAsUser: 0
|
|
privileged: true # Needed for mountPropagation
|
|
allowPrivilegeEscalation: true # Needed for privileged
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: false
|
|
seLinuxOptions:
|
|
level: s0
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
resources:
|
|
requests:
|
|
cpu: 300m
|
|
memory: 100Mi
|
|
limits:
|
|
cpu: 300m
|
|
memory: 100Mi
|
|
registrar:
|
|
securityContext:
|
|
runAsUser: 0
|
|
privileged: false
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: false
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
resources:
|
|
requests:
|
|
cpu: 20m
|
|
memory: 30Mi
|
|
limits:
|
|
cpu: 20m
|
|
memory: 30Mi
|
|
livenessprobe:
|
|
securityContext:
|
|
runAsUser: 0
|
|
privileged: false
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: false
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
resources:
|
|
requests:
|
|
cpu: 20m
|
|
memory: 30Mi
|
|
limits:
|
|
cpu: 20m
|
|
memory: 30Mi
|
|
|