values.yaml

cluster:
  name: k8s
  domain: cluster.local

datacenter: dc1

region: yxl

external-secrets:
  replicaCount: 1

  # -- If set, install and upgrade CRDs through helm chart.
  installCRDs: true

  crds:
    # -- If true, create CRDs for Cluster External Secret.
    createClusterExternalSecret: true
    # -- If true, create CRDs for Cluster Secret Store.
    createClusterSecretStore: true

    conversion:
      # -- Conversion is disabled by default as we stopped supporting v1alpha1.
      enabled: true

  # -- If true, external-secrets will perform leader election between instances to ensure no more
  # than one instance of external-secrets operates at a time.
  leaderElect: false

  # -- If set external secrets will filter matching
  # Secret Stores with the appropriate controller values.
  controllerClass: ""

  # -- If set external secrets are only reconciled in the
  # provided namespace
  scopedNamespace: ""

  # -- Must be used with scopedNamespace. If true, create scoped RBAC roles under the scoped namespace
  # and implicitly disable cluster stores and cluster external secrets
  scopedRBAC: false

  # -- if true, the operator will process cluster external secret. Else, it will ignore them.
  processClusterExternalSecret: true

  # -- if true, the operator will process cluster store. Else, it will ignore them.
  processClusterStore: true

  # -- Specifies whether an external secret operator deployment be created.
  createOperator: true

  # -- Specifies the number of concurrent ExternalSecret Reconciles external-secret executes at
  # a time.
  concurrent: 1

  serviceAccount:
    # -- Specifies whether a service account should be created.
    create: true
    # -- Annotations to add to the service account.
    annotations: {}
    # -- The name of the service account to use.
    # If not set and create is true, a name is generated using the fullname template.
    name: ""

  rbac:
    # -- Specifies whether role and rolebinding resources should be created.
    create: true


  prometheus:
    # -- deprecated. will be removed with 0.7.0, use serviceMonitor instead.
    enabled: false
    service:
      # -- deprecated. will be removed with 0.7.0, use serviceMonitor instead.
      port: 8080

  serviceMonitor:
    # -- Specifies whether to create a ServiceMonitor resource for collecting Prometheus metrics
    enabled: false

    # -- Additional labels
    additionalLabels: {}

    # --  Interval to scrape metrics
    interval: 30s

    # -- Timeout if metrics can't be retrieved in given time interval
    scrapeTimeout: 25s

  # -- Pod priority class name.
  priorityClassName: 'tier2-priority'

  # -- Pod disruption budget - for more details see https://kubernetes.io/docs/concepts/workloads/pods/disruptions/
  podDisruptionBudget:
    enabled: false
    minAvailable: 1
    # maxUnavailable: 1

  webhook:
    # -- Specifies whether a webhook deployment be created.
    create: true
    certCheckInterval: "5m"
    replicaCount: 1
    certDir: /tmp/certs
    # -- specifies whether validating webhooks should be created with failurePolicy: Fail or Ignore
    failurePolicy: Ignore
    # -- Specifies if webhook pod should use hostNetwork or not.
    hostNetwork: false

    # -- The port the webhook will listen to
    port: 10250
    rbac:
    # -- Specifies whether role and rolebinding resources should be created.
      create: true
    serviceAccount:
      # -- Specifies whether a service account should be created.
      create: true
      # -- Annotations to add to the service account.
      annotations: {}
      # -- The name of the service account to use.
      # If not set and create is true, a name is generated using the fullname template.
      name: ""

    # -- Pod disruption budget - for more details see https://kubernetes.io/docs/concepts/workloads/pods/disruptions/
    podDisruptionBudget:
      enabled: false
      minAvailable: 1
      # maxUnavailable: 1
    prometheus:
      # -- deprecated. will be removed with 0.7.0, use serviceMonitor instead
      enabled: false
      service:
        # -- deprecated. will be removed with 0.7.0, use serviceMonitor instead
        port: 8080

    serviceMonitor:
      # -- Specifies whether to create a ServiceMonitor resource for collecting Prometheus metrics
      enabled: false

      # -- Additional labels
      additionalLabels: {}

      # --  Interval to scrape metrics
      interval: 30s

      # -- Timeout if metrics can't be retrieved in given time interval
      scrapeTimeout: 25s

      ## -- Extra environment variables to add to container.
    extraEnv: []

      ## -- Map of extra arguments to pass to container.
    extraArgs: {}

      # -- Annotations to add to Secret
    secretAnnotations: {}

      # -- Annotations to add to Deployment
    deploymentAnnotations: {}

      # -- Annotations to add to Pod
    podAnnotations: {}

    podLabels: {}

    podSecurityContext: {}
        # fsGroup: 2000

    securityContext: {}
        # capabilities:
        #   drop:
        #   - ALL
        # readOnlyRootFilesystem: true
        # runAsNonRoot: true
        # runAsUser: 1000

    resources: {}
        # requests:
        #   cpu: 10m
        #   memory: 32Mi

  certController:
    # -- Specifies whether a certificate controller deployment be created.
    create: true
    requeueInterval: "5m"
    replicaCount: 1

    rbac:
    # -- Specifies whether role and rolebinding resources should be created.
      create: true
    serviceAccount:
      # -- Specifies whether a service account should be created.
      create: true
      # -- Annotations to add to the service account.
      annotations: {}
      # -- The name of the service account to use.
      # If not set and create is true, a name is generated using the fullname template.
      name: ""
    nodeSelector: {}

    tolerations: []

    affinity: {}

      # -- Pod priority class name.
    priorityClassName: 'tier2-priority'

    # -- Pod disruption budget - for more details see https://kubernetes.io/docs/concepts/workloads/pods/disruptions/
    podDisruptionBudget:
      enabled: false
      minAvailable: 1
      # maxUnavailable: 1

    serviceMonitor:
      # -- Specifies whether to create a ServiceMonitor resource for collecting Prometheus metrics
      enabled: false

      # -- Additional labels
      additionalLabels: {}

      # --  Interval to scrape metrics
      interval: 30s

      # -- Timeout if metrics can't be retrieved in given time interval
      scrapeTimeout: 25s