-
Notifications
You must be signed in to change notification settings - Fork 61
Expand file tree
/
Copy pathvalues.yaml
More file actions
111 lines (101 loc) · 3.62 KB
/
values.yaml
File metadata and controls
111 lines (101 loc) · 3.62 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
# Default values for instance-operator.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
replicaCount: 1
replicaCountAutomation: 1
configurations:
generic:
whitelistLabels: crownlabs.polito.it/operator-selector=production
websiteBaseUrl: crownlabs.example.com
instancesAuthUrl: https://crownlabs.example.com/auth
containerEnvironmentOptions:
tag: ""
websockifyImage: crownlabs/websockify
xVncImage: crownlabs/tigervnc
contentDownloaderImage: crownlabs/content-downloader
contentUploaderImage: crownlabs/content-uploader
instmetricsServerEndpoint: crownlabs-instmetrics.crownlabs-production:9090
containerVmSnapshots:
kanikoImage: gcr.io/kaniko-project/executor:latest
exportImage: "crownlabs/img-exporter"
exportImageTag: ""
privateContainerRegistry:
url: registry.crownlabs.example.com
secretName: registry-credentials
maxConcurrentReconciles: 1
maxConcurrentShVolReconciles: 1
sharedVolumeOptions:
storageClass: rook-nfs
monitoring:
prometheusURL: http://kube-prometheus-stack-prometheus.monitoring:9090
queryNginxAvailable: count(up{service="ingress-nginx-external-controller-metrics"})
queryBastionSSHAvailable: count(up{container="bastion-operator-tracker-sidecar"})
queryWebSSHAvailable: count(up{container="webssh"})
queryNginxData: nginx_ingress_controller_requests{exported_namespace="%s", exported_service="%s"}
queryBastionSSHData: bastion_ssh_connections{destination_ip="%s"}
queryWebSSHData: bastion_web_ssh_connections{destination_ip="%s"}
queryStep: 5m
mailTemplateDir: /etc/crownmail/templates
mailConfigDir: /etc/crownmail/configs
automation:
enableInstanceSubmission: true
enableInstanceTermination: true
enableInstanceInactiveTermination: true
enableInstanceExpiration: true
maxConcurrentTerminationReconciles: 1
maxConcurrentInactiveTerminationReconciles: 1
maxConcurrentExpirationReconciles: 1
maxConcurrentSubmissionReconciles: 1
terminationStatusCheckTimeout: "3s"
terminationStatusCheckInterval: "2m"
inactiveTerminationStatusCheckTimeout: "3s"
inactiveTerminationMaxNumberOfAlerts: 3
enableInactivityNotifications: false
enableExpirationNotifications: false
inactiveTerminationNotificationInterval: "24h"
expirationNotificationInterval: "24h"
marginTime: "1m"
publicExposure:
# The IP pool used to assign public IPs to instances.
# Specify IPs as ranges or CIDRs, e.g., "172.18.0.240-172.18.0.249" or "172.18.0.250/30"
ipPool:
- "172.18.0.240-172.18.0.249"
- "172.18.0.250/30"
# Common annotations to be added to all LoadBalancer services
# Format: "key1=val1,key2=val2"
commonAnnotations: "metallb.universe.tf/allow-shared-ip=pe"
# Annotation key for specifying LoadBalancer IPs
loadBalancerIPsKey: "metallb.universe.tf/loadBalancerIPs"
image:
repository: crownlabs/instance-operator
repositoryAutomation: crownlabs/instance-automation
pullPolicy: IfNotPresent
# Overrides the image tag whose default is the chart version.
tag: ""
imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""
deploymentAnnotations:
reloader.stakater.com/auto: "true"
podAnnotations: {}
securityContext:
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 20000
runAsGroup: 20000
privileged: false
resources:
limits:
memory: 750Mi
cpu: 1000m
requests:
memory: 250Mi
cpu: 100m
webssh:
masterKey:
secretName: crownlabs-bastion-operator-web-master-key
keyName: webssh-master
rbacResourcesName: crownlabs-instance-operator