github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/cert-manager-webhook-oci/values.yaml (about)

     1  # Portions of the code in this file are derived from https://github.com/cert-manager/webhook-example/blob/master/deploy/example-webhook/values.yaml
     2  # Portions of the code in this file are derived from https://gitlab.com/dn13/cert-manager-webhook-oci/-/blob/1.1.0/deploy/cert-manager-webhook-oci/values.yaml
     3  
     4  # The GroupName here is used to identify the company or business unit that created this webhook.
     5  # This name will need to be referenced in each Issuer's `webhook` stanza to
     6  # inform cert-manager of where to send ChallengePayload resources in order to
     7  # solve the DNS01 challenge.
     8  # This group name should be **unique**, hence using your own company's domain
     9  # here is recommended.
    10  
    11  groupName: verrazzano.io
    12  
    13  certManager:
    14    namespace: cert-manager
    15    clusterResourceNamespace: ""
    16    serviceAccountName: cert-manager
    17  
    18  image:
    19    repository: ghcr.io/verrazzano/cert-manager-webhook-oci
    20    tag: v0.1.0
    21    pullPolicy: IfNotPresent
    22  
    23  global:
    24    imagePullSecrets: []
    25  
    26  nameOverride: "cert-manager-webhook-oci"
    27  fullnameOverride: "cert-manager-webhook-oci"
    28  
    29  service:
    30    type: ClusterIP
    31    port: 443
    32  
    33  securePort: 9443
    34  
    35  resources: {}
    36    # We usually recommend not to specify default resources and to leave this as a conscious
    37    # choice for the user. This also increases chances charts run on environments with little
    38    # resources, such as Minikube. If you do want to specify resources, uncomment the following
    39    # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    40    # limits:
    41    #  cpu: 100m
    42    #  memory: 128Mi
    43    # requests:
    44    #  cpu: 100m
    45    #  memory: 128Mi
    46  
    47  nodeSelector: {}
    48  
    49  tolerations: []
    50  
    51  affinity: {}
    52  
    53  ociAuthSecrets: []
    54  
    55  securityContext:
    56    allowPrivilegeEscalation: false
    57    privileged: false
    58    runAsNonRoot: true
    59    runAsUser: 1000
    60    runAsGroup: 999
    61    capabilities:
    62      drop:
    63        - ALL
    64  
    65  podSecurityContext:
    66    seccompProfile:
    67      type: RuntimeDefault