sigs.k8s.io/external-dns@v0.14.1/charts/external-dns/values.yaml (about)

     1  # Default values for external-dns.
     2  # This is a YAML-formatted file.
     3  # Declare variables to be passed into your templates.
     4  
     5  image:
     6    # -- Image repository for the `external-dns` container.
     7    repository: registry.k8s.io/external-dns/external-dns
     8    # -- (string) Image tag for the `external-dns` container, this will default to `.Chart.AppVersion` if not set.
     9    tag:
    10    # -- Image pull policy for the `external-dns` container.
    11    pullPolicy: IfNotPresent
    12  
    13  # -- Image pull secrets.
    14  imagePullSecrets: []
    15  
    16  # -- (string) Override the name of the chart.
    17  nameOverride:
    18  
    19  # -- (string) Override the full name of the chart.
    20  fullnameOverride:
    21  
    22  # -- Labels to add to all chart resources.
    23  commonLabels: {}
    24  
    25  serviceAccount:
    26    # -- If `true`, create a new `ServiceAccount`.
    27    create: true
    28    # -- Labels to add to the service account.
    29    labels: {}
    30    # -- Annotations to add to the service account.
    31    annotations: {}
    32    # -- (string) If this is set and `serviceAccount.create` is `true` this will be used for the created `ServiceAccount` name, if set and `serviceAccount.create` is `false` then this will define an existing `ServiceAccount` to use.
    33    name:
    34    # -- Set this to `false` to [opt out of API credential automounting](https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#opt-out-of-api-credential-automounting) for the `ServiceAccount`.
    35    automountServiceAccountToken:
    36  
    37  service:
    38    # -- Service annotations.
    39    annotations: {}
    40    # -- Service HTTP port.
    41    port: 7979
    42    # -- Service IP families.
    43    ipFamilies: []
    44    # -- (string) Service IP family policy.
    45    ipFamilyPolicy:
    46  
    47  rbac:
    48    # -- If `true`, create a `ClusterRole` & `ClusterRoleBinding` with access to the Kubernetes API.
    49    create: true
    50    # -- Additional rules to add to the `ClusterRole`.
    51    additionalPermissions: []
    52  
    53  # -- Annotations to add to the `Deployment`.
    54  deploymentAnnotations: {}
    55  
    56  # -- [Deployment Strategy](https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy).
    57  deploymentStrategy:
    58    type: Recreate
    59  
    60  # -- (int) Specify the number of old `ReplicaSets` to retain to allow rollback of the `Deployment``.
    61  revisionHistoryLimit:
    62  
    63  # -- Labels to add to the `Pod`.
    64  podLabels: {}
    65  
    66  # -- Annotations to add to the `Pod`.
    67  podAnnotations: {}
    68  
    69  # -- (bool) Set this to `false` to [opt out of API credential automounting](https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#opt-out-of-api-credential-automounting) for the `Pod`.
    70  automountServiceAccountToken:
    71  
    72  # -- If `true`, the `Pod` will have [process namespace sharing](https://kubernetes.io/docs/tasks/configure-pod-container/share-process-namespace/) enabled.
    73  shareProcessNamespace: false
    74  
    75  # -- [Pod security context](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.22/#podsecuritycontext-v1-core), this supports full customisation.
    76  # @default -- See _values.yaml_
    77  podSecurityContext:
    78    runAsNonRoot: true
    79    fsGroup: 65534
    80    seccompProfile:
    81      type: RuntimeDefault
    82  
    83  # -- (string) Priority class name for the `Pod`.
    84  priorityClassName:
    85  
    86  # -- (int) Termination grace period for the `Pod` in seconds.
    87  terminationGracePeriodSeconds:
    88  
    89  # -- (string) [DNS policy](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy) for the pod, if not set the default will be used.
    90  dnsPolicy:
    91  
    92  # -- (object) [DNS config](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config) for the pod, if not set the default will be used.
    93  dnsConfig:
    94  
    95  # -- [Init containers](https://kubernetes.io/docs/concepts/workloads/pods/init-containers/) to add to the `Pod` definition.
    96  initContainers: []
    97  
    98  # -- [Security context](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container) for the `external-dns` container.
    99  # @default -- See _values.yaml_
   100  securityContext:
   101    privileged: false
   102    allowPrivilegeEscalation: false
   103    readOnlyRootFilesystem: true
   104    runAsNonRoot: true
   105    runAsUser: 65532
   106    runAsGroup: 65532
   107    capabilities:
   108      drop: ["ALL"]
   109  
   110  # -- [Environment variables](https://kubernetes.io/docs/tasks/inject-data-application/define-environment-variable-container/) for the `external-dns` container.
   111  env: []
   112  
   113  # -- [Liveness probe](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) configuration for the `external-dns` container.
   114  # @default -- See _values.yaml_
   115  livenessProbe:
   116    httpGet:
   117      path: /healthz
   118      port: http
   119    initialDelaySeconds: 10
   120    periodSeconds: 10
   121    timeoutSeconds: 5
   122    failureThreshold: 2
   123    successThreshold: 1
   124  
   125  # -- [Readiness probe](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) configuration for the `external-dns` container.
   126  # @default -- See _values.yaml_
   127  readinessProbe:
   128    httpGet:
   129      path: /healthz
   130      port: http
   131    initialDelaySeconds: 5
   132    periodSeconds: 10
   133    timeoutSeconds: 5
   134    failureThreshold: 6
   135    successThreshold: 1
   136  
   137  # -- Extra [volumes](https://kubernetes.io/docs/concepts/storage/volumes/) for the `Pod`.
   138  extraVolumes: []
   139  
   140  # -- Extra [volume mounts](https://kubernetes.io/docs/concepts/storage/volumes/) for the `external-dns` container.
   141  extraVolumeMounts: []
   142  
   143  # -- [Resources](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/) for the `external-dns` container.
   144  resources: {}
   145  
   146  # -- Node labels to match for `Pod` [scheduling](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/).
   147  nodeSelector: {}
   148  
   149  # -- Affinity settings for `Pod` [scheduling](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/). If an explicit label selector is not provided for pod affinity or pod anti-affinity one will be created from the pod selector labels.
   150  affinity: {}
   151  
   152  # -- Topology spread constraints for `Pod` [scheduling](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/). If an explicit label selector is not provided one will be created from the pod selector labels.
   153  topologySpreadConstraints: []
   154  
   155  # -- Node taints which will be tolerated for `Pod` [scheduling](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/).
   156  tolerations: []
   157  
   158  serviceMonitor:
   159    # -- If `true`, create a `ServiceMonitor` resource to support the _Prometheus Operator_.
   160    enabled: false
   161    # -- Additional labels for the `ServiceMonitor`.
   162    additionalLabels: {}
   163    # -- Annotations to add to the `ServiceMonitor`.
   164    annotations: {}
   165    # -- (string) If set create the `ServiceMonitor` in an alternate namespace.
   166    namespace:
   167    # -- (string) If set override the _Prometheus_ default interval.
   168    interval:
   169    # -- (string) If set override the _Prometheus_ default scrape timeout.
   170    scrapeTimeout:
   171    # -- (string) If set overrides the _Prometheus_ default scheme.
   172    scheme:
   173    # -- Configure the `ServiceMonitor` [TLS config](https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#tlsconfig).
   174    tlsConfig: {}
   175    # -- (string) Provide a bearer token file for the `ServiceMonitor`.
   176    bearerTokenFile:
   177    # -- [Relabel configs](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config) to apply to samples before ingestion.
   178    relabelings: []
   179    # -- [Metric relabel configs](https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs) to apply to samples before ingestion.
   180    metricRelabelings: []
   181    # -- Provide target labels for the `ServiceMonitor`.
   182    targetLabels: []
   183  
   184  # -- Log level.
   185  logLevel: info
   186  
   187  # -- Log format.
   188  logFormat: text
   189  
   190  # -- Interval for DNS updates.
   191  interval: 1m
   192  
   193  # -- If `true`, triggers run loop on create/update/delete events in addition of regular interval.
   194  triggerLoopOnEvent: false
   195  
   196  # -- if `true`, _ExternalDNS_ will run in a namespaced scope (`Role`` and `Rolebinding`` will be namespaced too).
   197  namespaced: false
   198  
   199  # -- _Kubernetes_ resources to monitor for DNS entries.
   200  sources:
   201    - service
   202    - ingress
   203  
   204  # -- How DNS records are synchronized between sources and providers; available values are `sync` & `upsert-only`.
   205  policy: upsert-only
   206  
   207  # -- Specify the registry for storing ownership and labels.
   208  # Valid values are `txt`, `aws-sd`, `dynamodb` & `noop`.
   209  registry: txt
   210  # -- (string) Specify an identifier for this instance of _ExternalDNS_ wWhen using a registry other than `noop`.
   211  txtOwnerId:
   212  # -- (string) Specify a prefix for the domain names of TXT records created for the `txt` registry.
   213  # Mutually exclusive with `txtSuffix`.
   214  txtPrefix:
   215  # -- (string) Specify a suffix for the domain names of TXT records created for the `txt` registry.
   216  # Mutually exclusive with `txtPrefix`.
   217  txtSuffix:
   218  
   219  ## - Limit possible target zones by domain suffixes.
   220  domainFilters: []
   221  
   222  provider:
   223    # -- _ExternalDNS_ provider name; for the available providers and how to configure them see [README](https://github.com/kubernetes-sigs/external-dns/blob/master/charts/external-dns/README.md#providers).
   224    name: aws
   225    webhook:
   226      image:
   227        # -- (string) Image repository for the `webhook` container.
   228        repository:
   229        # -- (string) Image tag for the `webhook` container.
   230        tag:
   231        # -- Image pull policy for the `webhook` container.
   232        pullPolicy: IfNotPresent
   233      # -- [Environment variables](https://kubernetes.io/docs/tasks/inject-data-application/define-environment-variable-container/) for the `webhook` container.
   234      env: []
   235      # -- Extra arguments to provide for the `webhook` container.
   236      args: []
   237      # -- Extra [volume mounts](https://kubernetes.io/docs/concepts/storage/volumes/) for the `webhook` container.
   238      extraVolumeMounts: []
   239      # -- [Resources](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/) for the `webhook` container.
   240      resources: {}
   241      # -- [Pod security context](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container) for the `webhook` container.
   242      # @default -- See _values.yaml_
   243      securityContext: {}
   244      # -- [Liveness probe](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) configuration for the `external-dns` container.
   245      # @default -- See _values.yaml_
   246      livenessProbe:
   247        httpGet:
   248          path: /healthz
   249          port: http-webhook
   250        initialDelaySeconds: 10
   251        periodSeconds: 10
   252        timeoutSeconds: 5
   253        failureThreshold: 2
   254        successThreshold: 1
   255      # -- [Readiness probe](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) configuration for the `webhook` container.
   256      # @default -- See _values.yaml_
   257      readinessProbe:
   258        httpGet:
   259          path: /healthz
   260          port: http-webhook
   261        initialDelaySeconds: 5
   262        periodSeconds: 10
   263        timeoutSeconds: 5
   264        failureThreshold: 6
   265        successThreshold: 1
   266      # -- Optional [Service Monitor](https://prometheus-operator.dev/docs/operator/design/#servicemonitor) configuration for the `webhook` container.
   267      # @default -- See _values.yaml_
   268      serviceMonitor:
   269        interval:
   270        scheme:
   271        tlsConfig: {}
   272        bearerTokenFile:
   273        scrapeTimeout:
   274        metricRelabelings: []
   275        relabelings: []
   276  
   277  # -- Extra arguments to provide to _ExternalDNS_.
   278  extraArgs: []
   279  
   280  secretConfiguration:
   281    # -- If `true`, create a `Secret` to store sensitive provider configuration (**DEPRECATED**).
   282    enabled: false
   283    # -- Mount path for the `Secret`, this can be templated.
   284    mountPath:
   285    # -- Sub-path for mounting the `Secret`, this can be templated.
   286    subPath:
   287    # -- `Secret` data.
   288    data: {}