universe-k8s-tenant-workload-rule-plugin
Chart version: 0.5.0-dev
AppVersion: 0.5.0-dev
Description: A Helm chart for universe-k8s-tenant-workload-rule-plugin
Name |
Version |
Repository |
|---|---|---|
| lib-universe-proxy | 0.0.0 | file://../lib-universe-proxy |
| lib-vault-integration | 0.0.0 | file://../lib-vault-integration |
>
global(object): global settings for chartDefault:
{ "image": { "registry": null, "tag": null } }
>
nameOverride(string): overrides chart nameDefault:
""
>
fullnameOverride(string): overrides generated fullName for releaseDefault:
""
>
imagePullSecrets(list): imagePullSecrets to add to the Pod specDefault:
[]
>
plugin(object): configuration for plugin containerDefault: see default values for nested options
>
plugin.args.universeWorkloadAPIAddress(string): address of the universe.workload.v1 GRPC APIDefault:
"127.0.0.1:59090"
>
plugin.args.workloadRuleCRNamespace(string): namespace to watch for WorkloadRule CRDs if not set, namespace of the Helm release will be usedDefault:
""
>
plugin.args.periodicCheckInterval(int): check interval for resource in infrastructure clusterDefault:
5
>
plugin.args.maxConcurrentReconciles(int): maximum number of concurrent Reconciles for WorkloadRule CRsDefault:
10
>
plugin.image.registry(string): registry for plugin imageDefault:
""
>
plugin.image.repository(string): plugin image nameDefault:
"universe-k8s-tenant-workload-rule-plugin"
>
plugin.image.pullPolicy(string): pullPolicy for plugin imageDefault:
"IfNotPresent"
>
plugin.image.tag(string): tag for plugin image if not set, Helm chart appVersion will be used as tagDefault:
""
>
plugin.securityContext(object): securityContext for plugin containerDefault:
{ "allowPrivilegeEscalation": false }
>
plugin.resources(object): resources for plugin containerDefault:
{}
>
proxy(object): configuration for proxy containerDefault: see documentation in top level chart
>
podAnnotations(object): podAnnotations to add to the Pod specDefault:
{}
>
podSecurityContext(object): podSecurityContext to add to the Pod specDefault:
{}
>
nodeSelector(object): nodeSelector to add to the Pod specDefault:
{}
>
tolerations(list): tolerations to add to the Pod specDefault:
[]
>
affinity(object): affinity to add to the Pod specDefault:
{}
>
rbac(object): RBAC configuration for plugin PodDefault: see default values for nested options
>
rbac.serviceAccount.create(bool): enables or disables creation of the ServiceAccountDefault:
true
>
rbac.serviceAccount.name(string): override for default ServiceAccount nameDefault: if not set explicitly Helm release name will be used
>
rbac.role.create(bool): enables or disables creation of the ClusterRoleDefault:
true
>
rbac.role.name(string): override for default ServiceAccount nameDefault: if not set explicitly Helm release name + “-role” will be used
>
rbac.roleBinding.create(bool): enables or disables creation of the ClusterRoleBindingDefault:
true
>
rbac.roleBinding.name(string): override for default ServiceAccount nameDefault: if not set explicitly Helm release name + “-role-binding” will be used
>
vaultApproleSecret(object): settings for Secret which store roleID and secretID for approle auth method in Vault. check top level chart doc for detailsDefault:
{}
>
vaultAnnotations(object): configuration for Vault related Pod annotations. check top level chart doc for detailsDefault:
{}