git-hubby-helm/values.yaml at main · Interhyp/git-hubby-helm · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
webhooks:
  enabled: true
controllerManager:
  podLabels: {}
  watchedNamespaces:
    - github-configuration
  manager:
    args:
    - --metrics-bind-address=:8443
    - --leader-elect
    - --health-probe-bind-address=:8081
    - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs
    containerSecurityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      readOnlyRootFilesystem: true
    image:
      repository: ghcr.io/interhyp/git-hubby
      # -- Overrides the image tag. Defaults to the chart's appVersion.
      tag: ""
    resources:
      limits:
        cpu: 500m
        memory: 128Mi
      requests:
        cpu: 10m
        memory: 64Mi
  nodeSelector: {}
  podSecurityContext:
    runAsNonRoot: true
    seccompProfile:
      type: RuntimeDefault
  replicas: 2
  podDisruptionBudget:
    enabled: true
    minAvailable: 1
    # maxUnavailable: 1
  strategy:
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
    type: RollingUpdate
  tolerations: []
  topologySpreadConstraints:
    - maxSkew: 1
      topologyKey: kubernetes.io/hostname
      whenUnsatisfiable: ScheduleAnyway
kubernetesClusterDomain: cluster.local
metricsService:
  ports:
  - name: https
    port: 8443
    protocol: TCP
    targetPort: 8443
  type: ClusterIP
serviceAccount:
  labels: {}
  secrets: []
  annotations: {}
  automount: true
  create: true
  name: ""
webhookService:
  type: ClusterIP
servingCert:
  # duration: 2160h0m0s
  issuerRef:
    kind: Issuer
    name: selfsigned-issuer
  # privateKey:
  #   algorithm: RSA
  #   size: 4096
  # renewBefore: 360h0m0s
  # subject:
  #   organizations:
  #     - My Organization
  # usages:
  #   - server auth
  #   - client auth