-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathvalues.yaml
More file actions
127 lines (116 loc) · 3.21 KB
/
Copy pathvalues.yaml
File metadata and controls
127 lines (116 loc) · 3.21 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
# [MANAGER]: Manager Deployment Configurations
controllerManager:
replicas: 1
container:
image:
repository: ghcr.io/slyngdk/nodedrain-controller
tag: ~
args:
- "--leader-elect"
- "--metrics-bind-address=:8443"
- "--health-probe-bind-address=:8081"
resources:
limits:
cpu: 500m
memory: 128Mi
requests:
cpu: 10m
memory: 64Mi
livenessProbe:
initialDelaySeconds: 15
periodSeconds: 20
httpGet:
path: /healthz
port: 8081
readinessProbe:
initialDelaySeconds: 5
periodSeconds: 10
httpGet:
path: /readyz
port: 8081
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- "ALL"
securityContext:
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
terminationGracePeriodSeconds: 10
serviceAccountName: nodedrain-controller-manager
# Nodedrain configuration supports multiple keys/files, is mapped to a secret.
#config:
# config.yaml: |
# log:
# loggers:
# node:
# level: debug
# node-webhook:
# level: debug
# drain-plugin-client:
# level: debug
# reboot:
# checkInterval: 5m
# pod:
# podPriorityClassName: ""
# containerResources:
# requests:
# cpu: 10m
# memory: 16Mi
# limits:
# cpu: 100m
# memory: 32Mi
#
# plugins:
# example-plugin:
# key: value
# Plugin container is started as a initContainer and expecting plugins to be copied to `/plugins/*.so`
#plugins:
# - name: example-plugin
# image: asdf
# command: [ "cp", "/example-plugin.so", "/plugins/" ]
# args: []
plugins: []
# [RBAC]: To enable RBAC (Permissions) configurations
rbac:
enable: true
additional:
clusterRules: []
# Additional rules for the release namespace
rules: []
# namespaces:
# - name: default # Namespace to apply rules to
# rules: []
namespaces: []
# [CRDs]: To enable the CRDs
crd:
# This option determines whether the CRDs are included
# in the installation process.
enable: true
# Enabling this option adds the "helm.sh/resource-policy": keep
# annotation to the CRD, ensuring it remains installed even when
# the Helm release is uninstalled.
# NOTE: Removing the CRDs will also remove all cert-manager CR(s)
# (Certificates, Issuers, ...) due to garbage collection.
keep: true
# [METRICS]: Set to true to generate manifests for exporting metrics.
# To disable metrics export set false, and ensure that the
# ControllerManager argument "--metrics-bind-address=:8443" is removed.
metrics:
enable: true
# [WEBHOOKS]: Webhooks configuration
# The following configuration is automatically generated from the manifests
# generated by controller-gen. To update run 'make manifests' and
# the edit command with the '--force' flag
webhook:
enable: true
# [PROMETHEUS]: To enable a ServiceMonitor to export metrics to Prometheus set true
prometheus:
enable: false
# [CERT-MANAGER]: To enable cert-manager injection to webhooks set true
certmanager:
enable: true
# [NETWORK POLICIES]: To enable NetworkPolicies set true
networkPolicy:
enable: false