github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/coherence-operator/values.yaml (about) 1 # Copyright 2020, 2023, Oracle Corporation and/or its affiliates. 2 # Licensed under the Universal Permissive License v 1.0 as shown at 3 # http://oss.oracle.com/licenses/upl. 4 5 # image is the Coherence Operator image 6 image: 7 registry: "ghcr.io/oracle" 8 name: "coherence-operator" 9 tag: "3.2.11" 10 11 # defaultCoherenceImage is the default application image that will be used if a Coherence 12 # resource does not specify an image name. 13 defaultCoherenceImage: 14 registry: "ghcr.io/oracle" 15 name: "coherence-ce" 16 tag: "22.06.4" 17 18 # watchNamespaces is the comma delimited list of namespaces that the operator should 19 # manage Coherence resources in. The default is to manage all namespaces. 20 watchNamespaces: "" 21 22 # imagePullPolicy controls the K8s container spec's pull policy 23 # If not set the pull policy is "IfNotPresent". 24 imagePullPolicy: 25 26 # replicas is the number of Operator replicas to run. 27 # The operator runs HA by default, with one of the replicas assuming leadership. 28 replicas: 3 29 30 # imagePullSecrets provides support pulling images from private registries, the value references 31 # one or more secrets to be used when pulling images. Secrets must be manually created in the 32 # target namespace. 33 # ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/ 34 # 35 # For example, adding the pull secret "foo" would be: 36 # 37 # imagePullSecrets: 38 # - name: "foo" 39 # 40 # adding multiple pull secrets "foo" and "bar" would be 41 # 42 # imagePullSecrets: 43 # - name: "foo" 44 # - name: "bar" 45 imagePullSecrets: 46 47 # --------------------------------------------------------------------------- 48 # Additional labels that are added to the Operator Pods. 49 labels: 50 51 # --------------------------------------------------------------------------- 52 # Additional annotations that are added to the Operator Pods. 53 annotations: 54 55 # --------------------------------------------------------------------------- 56 # Additional labels that are added to the Operator Deployment. 57 deploymentLabels: 58 59 # --------------------------------------------------------------------------- 60 # Additional annotations that are added to the Operator Deployment. 61 deploymentAnnotations: 62 63 # --------------------------------------------------------------------------- 64 # Operator Pod securityContext 65 # This sets the securityContext configuration for the Pod, for example 66 # to run as a non-root user: 67 # 68 # podSecurityContext: 69 # runAsNonRoot: true 70 # runAsUser: 1000 71 # 72 podSecurityContext: 73 74 # --------------------------------------------------------------------------- 75 # Operator container securityContext 76 # This sets the securityContext configuration for the container, for example 77 # to run as a non-root user: 78 # 79 # securityContext: 80 # runAsNonRoot: true 81 # runAsUser: 1000 82 # 83 securityContext: 84 85 # --------------------------------------------------------------------------- 86 # Pod scheduling values 87 88 # affinity controls Pod scheduling preferences. 89 # ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity 90 affinity: 91 92 # nodeSelector is the Node labels for pod assignment 93 # ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector 94 nodeSelector: 95 96 # tolerations is for nodes that have taints on them. 97 # Useful if you want to dedicate nodes to just run the coherence container 98 # For example: 99 # tolerations: 100 # - key: "key" 101 # operator: "Equal" 102 # value: "value" 103 # effect: "NoSchedule" 104 # 105 # ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/ 106 tolerations: 107 108 # webhookCertType sets how webhook certificates will be managed. 109 # Valid values are "self-signed" "cert-manager" or "manual" the Operator will fail to start if 110 # the value is invalid. 111 # The default is "self-signed" where the operator will create self-signed certs for the webhook. 112 # If set to "cert-manager" it is expected that cert-manager is installed and configured to 113 # manage the certificates. https://cert-manager.io/docs/installation/kubernetes/ 114 # If set to "manual" the certificate Secret should be created and managed externally 115 webhookCertType: self-signed 116 117 # webhookCertSecret is the name of the Secret that will contain the certificates for the Coherence webhooks. 118 webhookCertSecret: coherence-webhook-server-cert 119 120 # siteLabel is the Kubernetes Node label used to set the site identity for Coherence Pods. 121 siteLabel: 122 123 # rackLabel is the Kubernetes Node label used to set the rack identity for Coherence Pods. 124 rackLabel: 125 126 # serviceAccountName is the name of the service account to create and assign RBAC roles to. 127 # If not set the default name used is "coherence-operator". 128 serviceAccountName: coherence-operator 129 130 # The optional settings to adjust the readiness probe timings for the Operator 131 readinessProbe: 132 # initialDelaySeconds is the number of seconds after the container has started before readiness probes are initiated. 133 # More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes 134 initialDelaySeconds: 10 135 # periodSeconds is how often (in seconds) to perform the probe. 136 # Default to 10 seconds. Minimum value is 1. 137 periodSeconds: 10 138 # failureThreshold is the minimum consecutive failures for the probe to be considered failed after having succeeded. 139 # Defaults to 3. Minimum value is 1. 140 failureThreshold: 3 141 142 # The optional settings to adjust the liveness probe timings for the Operator 143 livenessProbe: 144 # initialDelaySeconds is the number of seconds after the container has started before liveness probes are initiated. 145 # More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes 146 initialDelaySeconds: 10 147 # periodSeconds is how often (in seconds) to perform the probe. 148 # Default to 10 seconds. Minimum value is 1. 149 periodSeconds: 10 150 # failureThreshold is the minimum consecutive failures for the probe to be considered failed after having succeeded. 151 # Defaults to 3. Minimum value is 1. 152 failureThreshold: 3 153 154 # resources will configure the Coherence Operator container's resource limits. 155 # The resources can be specified in a values file, the same as they would be 156 # for a container in a k8s Pod spec, for example: 157 # 158 # resources: 159 # requests: 160 # memory: "64Mi" 161 # cpu: "250m" 162 # limits: 163 # memory: "128Mi" 164 # cpu: "500m" 165 # 166 # Or, alternatively they can be specified individually using the Helm install --set option, for example 167 # 168 # helm install --set resources.requests.memory="64Mi" \ 169 # -- set resources.requests.cpu="250m" 170 # -- set resources.limits.memory="128Mi" 171 # -- set resources.limits.cpu="250m" 172 # 173 # ref: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ 174 resources: 175 176 # onlySameNamespace is a flag to indicate that the Operator should only monitor and control 177 # Coherence clusters in the same namespace that it is installed into. 178 # If this flag is set to true, any watchNamespaces value will be ignored, as this 179 # will automatically be set to the same namespace the Operator is installed into. 180 # The default is false, the Operator will monitor all namespaces 181 onlySameNamespace: false 182 183 # clusterRoles controls whether the Helm chart will create RBAC ClusterRole and bindings for the Operator 184 # These are required if the Operator will watch multiple namespaces. 185 # If set to false then the Operator will only watch the namespace it is deployed into. 186 # If this value is false the Operator will not create CRDs, these MUST be manually installed. 187 # The default is true. 188 clusterRoles: true 189 # nodeRoles controls whether the Helm chart will create RBAC ClusterRole and bindings for the Operator to 190 # lookup cluster-wide Node information. 191 # Setting this value clusterRoles and to false will mean that the Operator cannot look up Node labels that will be used 192 # to set theCoherence site and rack values so Coherence cluster will be unable to automatically achieve site-safety. 193 # The default is true. 194 nodeRoles: false 195 # webhooks controls whether the Coherence Operator registers admission web-hooks for the Coherence resource. 196 # If this is set to false, then it will be possible to install invalid Coherence resource into the Kubernetes 197 # cluster, that may cause errors when the Operator tries to reconcile them, or worse the Operator may create 198 # other invalid Kubernetes resources that fail to run. 199 webhooks: true