126 lines
4.7 KiB
YAML
126 lines
4.7 KiB
YAML
operator:
|
|
tolerations:
|
|
- key: "node-role.kubernetes.io/master"
|
|
operator: "Exists"
|
|
effect: "NoSchedule"
|
|
- key: "node-role.kubernetes.io/control-plane"
|
|
operator: "Exists"
|
|
effect: "NoSchedule"
|
|
nodeSelector: {}
|
|
affinity:
|
|
nodeAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- weight: 1
|
|
preference:
|
|
matchExpressions:
|
|
- key: "node-role.kubernetes.io/master"
|
|
operator: In
|
|
values: [""]
|
|
- weight: 1
|
|
preference:
|
|
matchExpressions:
|
|
- key: "node-role.kubernetes.io/control-plane"
|
|
operator: In
|
|
values: [""]
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
resourcePrefix: "openshift.io"
|
|
cniBinPath: "/opt/cni/bin"
|
|
clusterType: "kubernetes"
|
|
# minimal amount of time (in minutes) the operator will wait before removing
|
|
# stale SriovNetworkNodeState objects (objects that doesn't match node with the daemon)
|
|
# "0" means no extra delay, in this case the CR will be removed by the next reconcilation cycle (may take up to 5 minutes)
|
|
staleNodeStateCleanupDelayMinutes: "30"
|
|
metricsExporter:
|
|
port: "9110"
|
|
certificates:
|
|
secretName: "metrics-exporter-cert"
|
|
prometheusOperator:
|
|
enabled: false
|
|
serviceAccount: "prometheus-k8s"
|
|
namespace: "monitoring"
|
|
deployRules: false
|
|
admissionControllers:
|
|
enabled: false
|
|
certificates:
|
|
secretNames:
|
|
operator: "operator-webhook-cert"
|
|
injector: "network-resources-injector-cert"
|
|
certManager:
|
|
# When enabled, makes use of certificates managed by cert-manager.
|
|
enabled: false
|
|
# When enabled, certificates are generated via cert-manager and then name will match the name of the secrets
|
|
# defined above
|
|
generateSelfSigned: false
|
|
# If not specified, no secret is created and secrets with the names defined above are expected to exist in the
|
|
# cluster. In that case, the ca.crt must be base64 encoded twice since it ends up being an env variable.
|
|
custom:
|
|
enabled: false
|
|
# operator:
|
|
# caCrt: |
|
|
# -----BEGIN CERTIFICATE-----
|
|
# MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
|
|
# ...
|
|
# -----END CERTIFICATE-----
|
|
# tlsCrt: |
|
|
# -----BEGIN CERTIFICATE-----
|
|
# MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
|
|
# ...
|
|
# -----END CERTIFICATE-----
|
|
# tlsKey: |
|
|
# -----BEGIN EC PRIVATE KEY-----
|
|
# MHcl4wOuDwKQa+upc8GftXE2C//4mKANBC6It01gUaTIpo=
|
|
# ...
|
|
# -----END EC PRIVATE KEY-----
|
|
# injector:
|
|
# caCrt: |
|
|
# -----BEGIN CERTIFICATE-----
|
|
# MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
|
|
# ...
|
|
# -----END CERTIFICATE-----
|
|
# tlsCrt: |
|
|
# -----BEGIN CERTIFICATE-----
|
|
# MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
|
|
# ...
|
|
# -----END CERTIFICATE-----
|
|
# tlsKey: |
|
|
# -----BEGIN EC PRIVATE KEY-----
|
|
# MHcl4wOuDwKQa+upc8GftXE2C//4mKANBC6It01gUaTIpo=
|
|
# ...
|
|
# -----END EC PRIVATE KEY-----
|
|
|
|
sriovOperatorConfig:
|
|
# deploy sriovOperatorConfig CR with the below values
|
|
deploy: false
|
|
# node selectors for sriov-network-config-daemon
|
|
configDaemonNodeSelector: {}
|
|
# log level for both operator and sriov-network-config-daemon
|
|
logLevel: 2
|
|
# disable node draining when configuring SR-IOV, set to true in case of a single node
|
|
# cluster or any other justifiable reason
|
|
disableDrain: false
|
|
# sriov-network-config-daemon configuration mode. either "daemon" or "systemd"
|
|
configurationMode: daemon
|
|
# feature gates to enable/disable
|
|
featureGates: {}
|
|
|
|
# Example for supportedExtraNICs values ['MyNIC: "8086 1521 1520"']
|
|
supportedExtraNICs: []
|
|
|
|
# Image URIs for sriov-network-operator components
|
|
images:
|
|
operator: ghcr.io/k8snetworkplumbingwg/sriov-network-operator
|
|
sriovConfigDaemon: ghcr.io/k8snetworkplumbingwg/sriov-network-operator-config-daemon
|
|
sriovCni: ghcr.io/k8snetworkplumbingwg/sriov-cni
|
|
ibSriovCni: ghcr.io/k8snetworkplumbingwg/ib-sriov-cni
|
|
ovsCni: ghcr.io/k8snetworkplumbingwg/ovs-cni-plugin
|
|
rdmaCni: ghcr.io/k8snetworkplumbingwg/rdma-cni
|
|
sriovDevicePlugin: ghcr.io/k8snetworkplumbingwg/sriov-network-device-plugin
|
|
resourcesInjector: ghcr.io/k8snetworkplumbingwg/network-resources-injector
|
|
webhook: ghcr.io/k8snetworkplumbingwg/sriov-network-operator-webhook
|
|
metricsExporter: ghcr.io/k8snetworkplumbingwg/sriov-network-metrics-exporter
|
|
metricsExporterKubeRbacProxy: gcr.io/kubebuilder/kube-rbac-proxy:v0.15.0
|
|
|
|
imagePullSecrets: []
|
|
extraDeploy: []
|