110 lines
3.3 KiB
YAML
110 lines
3.3 KiB
YAML
operator:
|
|
image:
|
|
# -- repository to use for the operator image
|
|
repository: ghcr.io/mellanox
|
|
# -- image name to use for the operator image
|
|
name: maintenance-operator
|
|
# -- image tag to use for the operator image
|
|
tag: null
|
|
# -- image pull policy for the operator image
|
|
imagePullPolicy: null
|
|
# -- toleration for the operator
|
|
tolerations:
|
|
- key: "node-role.kubernetes.io/master"
|
|
operator: "Exists"
|
|
effect: "NoSchedule"
|
|
- key: "node-role.kubernetes.io/control-plane"
|
|
operator: "Exists"
|
|
effect: "NoSchedule"
|
|
# -- node selector for the operator
|
|
nodeSelector: {}
|
|
# -- node affinity for the operator
|
|
affinity:
|
|
nodeAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- weight: 1
|
|
preference:
|
|
matchExpressions:
|
|
- key: "node-role.kubernetes.io/master"
|
|
operator: Exists
|
|
- weight: 1
|
|
preference:
|
|
matchExpressions:
|
|
- key: "node-role.kubernetes.io/control-plane"
|
|
operator: Exists
|
|
# -- specify resource requests and limits for the operator
|
|
resources:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 64Mi
|
|
# -- operator deployment number of repplicas
|
|
replicas: 1
|
|
serviceAccount:
|
|
# -- set annotations for the operator service account
|
|
annotations: {}
|
|
admissionController:
|
|
# -- enable admission controller of the operator
|
|
enable: true
|
|
certificates:
|
|
secretNames:
|
|
# -- secret name containing certificates for the operator admission controller
|
|
operator: "operator-webhook-cert"
|
|
certManager:
|
|
# -- use cert-manager for certificates
|
|
enable: true
|
|
# -- generate self-signed certificiates with cert-manager
|
|
generateSelfSigned: true
|
|
custom:
|
|
# -- enable custom certificates using secrets
|
|
enable: false
|
|
# operator:
|
|
# caCrt: |
|
|
# -----BEGIN CERTIFICATE-----
|
|
# MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
|
|
# ...
|
|
# -----END CERTIFICATE-----
|
|
# tlsCrt: |
|
|
# -----BEGIN CERTIFICATE-----
|
|
# MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
|
|
# ...
|
|
# -----END CERTIFICATE-----
|
|
# tlsKey: |
|
|
# -----BEGIN EC PRIVATE KEY-----
|
|
# MHcl4wOuDwKQa+upc8GftXE2C//4mKANBC6It01gUaTIpo=
|
|
# ...
|
|
# -----END EC PRIVATE KEY-----
|
|
|
|
# -- operator configuration values. fields here correspond to fields in MaintenanceOperatorConfig CR
|
|
operatorConfig:
|
|
# -- log level configuration
|
|
logLevel: info
|
|
# operatorConfig.maxParallelOperations -- max number of parallel operations
|
|
maxParallelOperations: null
|
|
# -- max number of unavailable nodes
|
|
maxUnavailable: null
|
|
# -- max time for node maintenance
|
|
maxNodeMaintenanceTimeSeconds: null
|
|
|
|
# -- image pull secrets for the operator
|
|
imagePullSecrets: []
|
|
|
|
# -- metrics service configurations
|
|
metricsService:
|
|
ports:
|
|
- name: https
|
|
port: 8443
|
|
protocol: TCP
|
|
targetPort: https
|
|
type: ClusterIP
|
|
|
|
# -- webhook service configurations
|
|
webhookService:
|
|
ports:
|
|
- port: 443
|
|
protocol: TCP
|
|
targetPort: 9443
|
|
type: ClusterIP
|