Files

73 lines
1.7 KiB
YAML

controllerManager:
serviceAccount:
create: true
name: ""
annotations: {}
nodeSelector: {}
tolerations: []
manager:
args:
- --metrics-bind-address=:8443
- --leader-elect
- --health-probe-bind-address=:8081
containerSecurityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
image:
repository: kms/kubernetes-operator
tag: v0.10.25
resources:
limits:
cpu: 500m
memory: 128Mi
requests:
cpu: 10m
memory: 64Mi
# -- Extra environment variables to add to the manager container
extraEnv: []
podSecurityContext:
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
replicas: 1
kubernetesClusterDomain: cluster.local
# DEPRECATED: Use scopedNamespaces instead. This field will be removed in a future version.
# If both scopedNamespace and scopedNamespaces are set, scopedNamespaces takes precedence.
scopedNamespace: ""
# List of namespaces to watch. If empty, the operator watches all namespaces (cluster-scoped).
# When scopedRBAC is true, a Role and RoleBinding will be created in each namespace.
# Example:
# scopedNamespaces:
# - team-a-namespace
# - team-b-namespace
scopedNamespaces: []
scopedRBAC: false
installCRDs: true
imagePullSecrets: []
metricsService:
ports:
- name: https
port: 8443
protocol: TCP
targetPort: 8443
type: ClusterIP
telemetry:
serviceMonitor:
enabled: false
selectors: {}
scheme: https
port: https
path: /metrics
bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
interval: 30s
scrapeTimeout: 10s