Network Operator Application Notes 23.10.0 - Sphinx Test
1.0

universe-k8s-tenant-workload-rule-plugin

Chart version: 0.5.0-dev

AppVersion: 0.5.0-dev

Description: A Helm chart for universe-k8s-tenant-workload-rule-plugin

Name

Version

Repository

lib-universe-proxy 0.0.0 file://../lib-universe-proxy
lib-vault-integration 0.0.0 file://../lib-vault-integration

  • > global (object): global settings for chart

    Default:

    Copy
    Copied!
                

    { "image": { "registry": null, "tag": null } }

  • > nameOverride (string): overrides chart name

    Default:

    Copy
    Copied!
                

    ""

  • > fullnameOverride (string): overrides generated fullName for release

    Default:

    Copy
    Copied!
                

    ""

  • > imagePullSecrets (list): imagePullSecrets to add to the Pod spec

    Default:

    Copy
    Copied!
                

    []

  • > plugin (object): configuration for plugin container

    Default: see default values for nested options

  • > plugin.args.universeWorkloadAPIAddress (string): address of the universe.workload.v1 GRPC API

    Default:

    Copy
    Copied!
                

    "127.0.0.1:59090"

  • > plugin.args.workloadRuleCRNamespace (string): namespace to watch for WorkloadRule CRDs if not set, namespace of the Helm release will be used

    Default:

    Copy
    Copied!
                

    ""

  • > plugin.args.periodicCheckInterval (int): check interval for resource in infrastructure cluster

    Default:

    Copy
    Copied!
                

    5

  • > plugin.args.maxConcurrentReconciles (int): maximum number of concurrent Reconciles for WorkloadRule CRs

    Default:

    Copy
    Copied!
                

    10

  • > plugin.image.registry (string): registry for plugin image

    Default:

    Copy
    Copied!
                

    ""

  • > plugin.image.repository (string): plugin image name

    Default:

    Copy
    Copied!
                

    "universe-k8s-tenant-workload-rule-plugin"

  • > plugin.image.pullPolicy (string): pullPolicy for plugin image

    Default:

    Copy
    Copied!
                

    "IfNotPresent"

  • > plugin.image.tag (string): tag for plugin image if not set, Helm chart appVersion will be used as tag

    Default:

    Copy
    Copied!
                

    ""

  • > plugin.securityContext (object): securityContext for plugin container

    Default:

    Copy
    Copied!
                

    { "allowPrivilegeEscalation": false }

  • > plugin.resources (object): resources for plugin container

    Default:

    Copy
    Copied!
                

    {}

  • > proxy (object): configuration for proxy container

    Default: see documentation in top level chart

  • > podAnnotations (object): podAnnotations to add to the Pod spec

    Default:

    Copy
    Copied!
                

    {}

  • > podSecurityContext (object): podSecurityContext to add to the Pod spec

    Default:

    Copy
    Copied!
                

    {}

  • > nodeSelector (object): nodeSelector to add to the Pod spec

    Default:

    Copy
    Copied!
                

    {}

  • > tolerations (list): tolerations to add to the Pod spec

    Default:

    Copy
    Copied!
                

    []

  • > affinity (object): affinity to add to the Pod spec

    Default:

    Copy
    Copied!
                

    {}

  • > rbac (object): RBAC configuration for plugin Pod

    Default: see default values for nested options

  • > rbac.serviceAccount.create (bool): enables or disables creation of the ServiceAccount

    Default:

    Copy
    Copied!
                

    true

  • > rbac.serviceAccount.name (string): override for default ServiceAccount name

    Default: if not set explicitly Helm release name will be used

  • > rbac.role.create (bool): enables or disables creation of the ClusterRole

    Default:

    Copy
    Copied!
                

    true

  • > rbac.role.name (string): override for default ServiceAccount name

    Default: if not set explicitly Helm release name + “-role” will be used

  • > rbac.roleBinding.create (bool): enables or disables creation of the ClusterRoleBinding

    Default:

    Copy
    Copied!
                

    true

  • > rbac.roleBinding.name (string): override for default ServiceAccount name

    Default: if not set explicitly Helm release name + “-role-binding” will be used

  • > vaultApproleSecret (object): settings for Secret which store roleID and secretID for approle auth method in Vault. check top level chart doc for details

    Default:

    Copy
    Copied!
                

    {}

  • > vaultAnnotations (object): configuration for Vault related Pod annotations. check top level chart doc for details

    Default:

    Copy
    Copied!
                

    {}

Previous universe-k8s-tenant-workload-plugin
Next universe-vault
© Copyright 2023, NVIDIA. Last updated on Feb 7, 2024.