universe-k8s-tenant-workload-rule-plugin
Chart version: 0.5.0-dev
AppVersion: 0.5.0-dev
Description: A Helm chart for universe-k8s-tenant-workload-rule-plugin
Name |
Version |
Repository |
---|---|---|
lib-universe-proxy | 0.0.0 | file://../lib-universe-proxy |
lib-vault-integration | 0.0.0 | file://../lib-vault-integration |
>
global
(object): global settings for chartDefault:
{ "image": { "registry": null, "tag": null } }
>
nameOverride
(string): overrides chart nameDefault:
""
>
fullnameOverride
(string): overrides generated fullName for releaseDefault:
""
>
imagePullSecrets
(list): imagePullSecrets to add to the Pod specDefault:
[]
>
plugin
(object): configuration for plugin containerDefault: see default values for nested options
>
plugin.args.universeWorkloadAPIAddress
(string): address of the universe.workload.v1 GRPC APIDefault:
"127.0.0.1:59090"
>
plugin.args.workloadRuleCRNamespace
(string): namespace to watch for WorkloadRule CRDs if not set, namespace of the Helm release will be usedDefault:
""
>
plugin.args.periodicCheckInterval
(int): check interval for resource in infrastructure clusterDefault:
5
>
plugin.args.maxConcurrentReconciles
(int): maximum number of concurrent Reconciles for WorkloadRule CRsDefault:
10
>
plugin.image.registry
(string): registry for plugin imageDefault:
""
>
plugin.image.repository
(string): plugin image nameDefault:
"universe-k8s-tenant-workload-rule-plugin"
>
plugin.image.pullPolicy
(string): pullPolicy for plugin imageDefault:
"IfNotPresent"
>
plugin.image.tag
(string): tag for plugin image if not set, Helm chart appVersion will be used as tagDefault:
""
>
plugin.securityContext
(object): securityContext for plugin containerDefault:
{ "allowPrivilegeEscalation": false }
>
plugin.resources
(object): resources for plugin containerDefault:
{}
>
proxy
(object): configuration for proxy containerDefault: see documentation in top level chart
>
podAnnotations
(object): podAnnotations to add to the Pod specDefault:
{}
>
podSecurityContext
(object): podSecurityContext to add to the Pod specDefault:
{}
>
nodeSelector
(object): nodeSelector to add to the Pod specDefault:
{}
>
tolerations
(list): tolerations to add to the Pod specDefault:
[]
>
affinity
(object): affinity to add to the Pod specDefault:
{}
>
rbac
(object): RBAC configuration for plugin PodDefault: see default values for nested options
>
rbac.serviceAccount.create
(bool): enables or disables creation of the ServiceAccountDefault:
true
>
rbac.serviceAccount.name
(string): override for default ServiceAccount nameDefault: if not set explicitly Helm release name will be used
>
rbac.role.create
(bool): enables or disables creation of the ClusterRoleDefault:
true
>
rbac.role.name
(string): override for default ServiceAccount nameDefault: if not set explicitly Helm release name + “-role” will be used
>
rbac.roleBinding.create
(bool): enables or disables creation of the ClusterRoleBindingDefault:
true
>
rbac.roleBinding.name
(string): override for default ServiceAccount nameDefault: if not set explicitly Helm release name + “-role-binding” will be used
>
vaultApproleSecret
(object): settings for Secret which store roleID and secretID for approle auth method in Vault. check top level chart doc for detailsDefault:
{}
>
vaultAnnotations
(object): configuration for Vault related Pod annotations. check top level chart doc for detailsDefault:
{}