Mohammed Naser | 7d1623e | 2024-06-17 09:12:39 -0400 | [diff] [blame] | 1 | # Copyright Broadcom, Inc. All Rights Reserved. |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 2 | # SPDX-License-Identifier: APACHE-2.0 |
| 3 | |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 4 | ## @section Global parameters |
| 5 | ## Global Docker image parameters |
| 6 | ## Please, note that this will override the image parameters, including dependencies, configured to use the global value |
| 7 | ## Current available global Docker image parameters: imageRegistry, imagePullSecrets and storageClass |
| 8 | ## |
| 9 | |
| 10 | ## @param global.imageRegistry Global Docker image registry |
| 11 | ## @param global.imagePullSecrets Global Docker registry secret names as an array |
| 12 | ## @param global.storageClass Global StorageClass for Persistent Volume(s) |
| 13 | ## |
| 14 | global: |
| 15 | imageRegistry: "" |
| 16 | ## E.g. |
| 17 | ## imagePullSecrets: |
| 18 | ## - myRegistryKeySecretName |
| 19 | ## |
| 20 | imagePullSecrets: [] |
| 21 | storageClass: "" |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 22 | ## Compatibility adaptations for Kubernetes platforms |
| 23 | ## |
| 24 | compatibility: |
| 25 | ## Compatibility adaptations for Openshift |
| 26 | ## |
| 27 | openshift: |
| 28 | ## @param global.compatibility.openshift.adaptSecurityContext Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) |
| 29 | ## |
| 30 | adaptSecurityContext: auto |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 31 | ## @section Common parameters |
| 32 | ## |
| 33 | |
| 34 | ## @param kubeVersion Override Kubernetes version |
| 35 | ## |
| 36 | kubeVersion: "" |
| 37 | ## @param nameOverride String to partially override common.names.fullname |
| 38 | ## |
| 39 | nameOverride: "" |
| 40 | ## @param fullnameOverride String to fully override common.names.fullname |
| 41 | ## |
| 42 | fullnameOverride: "" |
| 43 | ## @param commonLabels Labels to add to all deployed objects |
| 44 | ## |
| 45 | commonLabels: {} |
| 46 | ## @param commonAnnotations Annotations to add to all deployed objects |
| 47 | ## |
| 48 | commonAnnotations: {} |
| 49 | ## @param clusterDomain Kubernetes cluster domain name |
| 50 | ## |
| 51 | clusterDomain: cluster.local |
| 52 | ## @param extraDeploy Array of extra objects to deploy with the release |
| 53 | ## |
| 54 | extraDeploy: [] |
| 55 | ## Enable diagnostic mode in the deployment(s)/statefulset(s) |
| 56 | ## |
| 57 | diagnosticMode: |
| 58 | ## @param diagnosticMode.enabled Enable diagnostic mode (all probes will be disabled) |
| 59 | ## |
| 60 | enabled: false |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 61 | ## @section RabbitMQ Cluster Operator Parameters |
| 62 | ## |
| 63 | |
| 64 | ## Bitnami RabbitMQ Image |
| 65 | ## ref: https://hub.docker.com/r/bitnami/rabbitmq/tags/ |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 66 | ## @param rabbitmqImage.registry [default: REGISTRY_NAME] RabbitMQ Image registry |
| 67 | ## @param rabbitmqImage.repository [default: REPOSITORY_NAME/rabbitmq] RabbitMQ Image repository |
| 68 | ## @skip rabbitmqImage.tag RabbitMQ Image tag (immutable tags are recommended) |
| 69 | ## @param rabbitmqImage.digest RabbitMQ image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 70 | ## @param rabbitmqImage.pullSecrets RabbitMQ Image pull secrets |
| 71 | ## |
| 72 | rabbitmqImage: |
| 73 | registry: docker.io |
| 74 | repository: bitnami/rabbitmq |
Mohammed Naser | 7d1623e | 2024-06-17 09:12:39 -0400 | [diff] [blame] | 75 | tag: 3.13.3-debian-12-r0 |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 76 | digest: "" |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 77 | ## Optionally specify an array of imagePullSecrets. |
| 78 | ## Secrets must be manually created in the namespace. |
| 79 | ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-rabbitmqImage-private-registry/ |
| 80 | ## e.g: |
| 81 | ## pullSecrets: |
| 82 | ## - myRegistryKeySecretName |
| 83 | ## |
| 84 | pullSecrets: [] |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 85 | ## Bitnami RabbitMQ Default User Credential Updater Image |
| 86 | ## ref: https://hub.docker.com/r/bitnami/rmq-default-credential-updater/tags/ |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 87 | ## @param credentialUpdaterImage.registry [default: REGISTRY_NAME] RabbitMQ Default User Credential Updater image registry |
| 88 | ## @param credentialUpdaterImage.repository [default: REPOSITORY_NAME/rmq-default-credential-updater] RabbitMQ Default User Credential Updater image repository |
| 89 | ## @skip credentialUpdaterImage.tag RabbitMQ Default User Credential Updater image tag (immutable tags are recommended) |
| 90 | ## @param credentialUpdaterImage.digest RabbitMQ Default User Credential Updater image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag |
| 91 | ## @param credentialUpdaterImage.pullSecrets RabbitMQ Default User Credential Updater image pull secrets |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 92 | ## |
| 93 | credentialUpdaterImage: |
| 94 | registry: docker.io |
| 95 | repository: bitnami/rmq-default-credential-updater |
Mohammed Naser | 7d1623e | 2024-06-17 09:12:39 -0400 | [diff] [blame] | 96 | tag: 1.0.4-debian-12-r21 |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 97 | digest: "" |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 98 | ## Optionally specify an array of imagePullSecrets. |
| 99 | ## Secrets must be manually created in the namespace. |
| 100 | ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-credentialUpdaterImage-private-registry/ |
| 101 | ## e.g: |
| 102 | ## pullSecrets: |
| 103 | ## - myRegistryKeySecretName |
| 104 | ## |
| 105 | pullSecrets: [] |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 106 | clusterOperator: |
| 107 | ## Bitnami RabbitMQ Cluster Operator image |
| 108 | ## ref: https://hub.docker.com/r/bitnami/rabbitmq-cluster-operator/tags/ |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 109 | ## @param clusterOperator.image.registry [default: REGISTRY_NAME] RabbitMQ Cluster Operator image registry |
| 110 | ## @param clusterOperator.image.repository [default: REPOSITORY_NAME/rabbitmq-cluster-operator] RabbitMQ Cluster Operator image repository |
| 111 | ## @skip clusterOperator.image.tag RabbitMQ Cluster Operator image tag (immutable tags are recommended) |
| 112 | ## @param clusterOperator.image.digest RabbitMQ Cluster Operator image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 113 | ## @param clusterOperator.image.pullPolicy RabbitMQ Cluster Operator image pull policy |
| 114 | ## @param clusterOperator.image.pullSecrets RabbitMQ Cluster Operator image pull secrets |
| 115 | ## |
| 116 | image: |
| 117 | registry: docker.io |
| 118 | repository: bitnami/rabbitmq-cluster-operator |
Mohammed Naser | 7d1623e | 2024-06-17 09:12:39 -0400 | [diff] [blame] | 119 | tag: 2.9.0-debian-12-r2 |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 120 | digest: "" |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 121 | ## Specify a imagePullPolicy |
| 122 | ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent' |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 123 | ## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 124 | ## |
| 125 | pullPolicy: IfNotPresent |
| 126 | ## Optionally specify an array of imagePullSecrets. |
| 127 | ## Secrets must be manually created in the namespace. |
| 128 | ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/ |
| 129 | ## e.g: |
| 130 | ## pullSecrets: |
| 131 | ## - myRegistryKeySecretName |
| 132 | ## |
| 133 | pullSecrets: [] |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 134 | ## @param clusterOperator.revisionHistoryLimit sets number of replicaset to keep in k8s |
| 135 | ## |
| 136 | revisionHistoryLimit: 10 |
| 137 | ## @param clusterOperator.watchAllNamespaces Watch for resources in all namespaces |
| 138 | ## |
| 139 | watchAllNamespaces: true |
| 140 | ## @param clusterOperator.watchNamespaces [array] Watch for resources in the given namespaces (ignored if watchAllNamespaces=true) |
| 141 | ## |
| 142 | watchNamespaces: [] |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 143 | ## @param clusterOperator.replicaCount Number of RabbitMQ Cluster Operator replicas to deploy |
| 144 | ## |
| 145 | replicaCount: 1 |
| 146 | ## @param clusterOperator.schedulerName Alternative scheduler |
| 147 | ## |
| 148 | schedulerName: "" |
| 149 | ## @param clusterOperator.topologySpreadConstraints Topology Spread Constraints for pod assignment |
| 150 | ## https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/ |
| 151 | ## The value is evaluated as a template |
| 152 | ## |
| 153 | topologySpreadConstraints: [] |
| 154 | ## @param clusterOperator.terminationGracePeriodSeconds In seconds, time the given to the %%MAIN_CONTAINER_NAME%% pod needs to terminate gracefully |
| 155 | ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods |
| 156 | ## |
| 157 | terminationGracePeriodSeconds: "" |
| 158 | ## Configure extra options for RabbitMQ Cluster Operator containers' liveness and readiness probes |
| 159 | ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes |
| 160 | ## @param clusterOperator.livenessProbe.enabled Enable livenessProbe on RabbitMQ Cluster Operator nodes |
| 161 | ## @param clusterOperator.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe |
| 162 | ## @param clusterOperator.livenessProbe.periodSeconds Period seconds for livenessProbe |
| 163 | ## @param clusterOperator.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe |
| 164 | ## @param clusterOperator.livenessProbe.failureThreshold Failure threshold for livenessProbe |
| 165 | ## @param clusterOperator.livenessProbe.successThreshold Success threshold for livenessProbe |
| 166 | ## |
| 167 | livenessProbe: |
| 168 | enabled: true |
| 169 | initialDelaySeconds: 5 |
| 170 | periodSeconds: 30 |
| 171 | timeoutSeconds: 5 |
| 172 | successThreshold: 1 |
| 173 | failureThreshold: 5 |
| 174 | ## @param clusterOperator.readinessProbe.enabled Enable readinessProbe on RabbitMQ Cluster Operator nodes |
| 175 | ## @param clusterOperator.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe |
| 176 | ## @param clusterOperator.readinessProbe.periodSeconds Period seconds for readinessProbe |
| 177 | ## @param clusterOperator.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe |
| 178 | ## @param clusterOperator.readinessProbe.failureThreshold Failure threshold for readinessProbe |
| 179 | ## @param clusterOperator.readinessProbe.successThreshold Success threshold for readinessProbe |
| 180 | ## |
| 181 | readinessProbe: |
| 182 | enabled: true |
| 183 | initialDelaySeconds: 5 |
| 184 | periodSeconds: 30 |
| 185 | timeoutSeconds: 5 |
| 186 | successThreshold: 1 |
| 187 | failureThreshold: 5 |
| 188 | ## @param clusterOperator.startupProbe.enabled Enable startupProbe on RabbitMQ Cluster Operator nodes |
| 189 | ## @param clusterOperator.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe |
| 190 | ## @param clusterOperator.startupProbe.periodSeconds Period seconds for startupProbe |
| 191 | ## @param clusterOperator.startupProbe.timeoutSeconds Timeout seconds for startupProbe |
| 192 | ## @param clusterOperator.startupProbe.failureThreshold Failure threshold for startupProbe |
| 193 | ## @param clusterOperator.startupProbe.successThreshold Success threshold for startupProbe |
| 194 | ## |
| 195 | startupProbe: |
| 196 | enabled: false |
| 197 | initialDelaySeconds: 5 |
| 198 | periodSeconds: 30 |
| 199 | timeoutSeconds: 5 |
| 200 | successThreshold: 1 |
| 201 | failureThreshold: 5 |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 202 | ## @param clusterOperator.customLivenessProbe Custom livenessProbe that overrides the default one |
| 203 | ## |
| 204 | customLivenessProbe: {} |
| 205 | ## @param clusterOperator.customReadinessProbe Custom readinessProbe that overrides the default one |
| 206 | ## |
| 207 | customReadinessProbe: {} |
| 208 | ## @param clusterOperator.customStartupProbe Custom startupProbe that overrides the default one |
| 209 | ## |
| 210 | customStartupProbe: {} |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 211 | ## RabbitMQ Cluster Operator resource requests and limits |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 212 | ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/ |
| 213 | ## @param clusterOperator.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if clusterOperator.resources is set (clusterOperator.resources is recommended for production). |
| 214 | ## More information: https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15 |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 215 | ## |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 216 | resourcesPreset: "nano" |
| 217 | ## @param clusterOperator.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads) |
| 218 | ## Example: |
| 219 | ## resources: |
| 220 | ## requests: |
| 221 | ## cpu: 2 |
| 222 | ## memory: 512Mi |
| 223 | ## limits: |
| 224 | ## cpu: 3 |
| 225 | ## memory: 1024Mi |
| 226 | ## |
| 227 | resources: {} |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 228 | ## Configure Pods Security Context |
| 229 | ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod |
| 230 | ## @param clusterOperator.podSecurityContext.enabled Enabled RabbitMQ Cluster Operator pods' Security Context |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 231 | ## @param clusterOperator.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy |
| 232 | ## @param clusterOperator.podSecurityContext.sysctls Set kernel settings using the sysctl interface |
| 233 | ## @param clusterOperator.podSecurityContext.supplementalGroups Set filesystem extra groups |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 234 | ## @param clusterOperator.podSecurityContext.fsGroup Set RabbitMQ Cluster Operator pod's Security Context fsGroup |
| 235 | ## |
| 236 | podSecurityContext: |
| 237 | enabled: true |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 238 | fsGroupChangePolicy: Always |
| 239 | sysctls: [] |
| 240 | supplementalGroups: [] |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 241 | fsGroup: 1001 |
| 242 | ## Configure Container Security Context |
| 243 | ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 244 | ## @param clusterOperator.containerSecurityContext.enabled Enabled containers' Security Context |
| 245 | ## @param clusterOperator.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container |
| 246 | ## @param clusterOperator.containerSecurityContext.runAsUser Set containers' Security Context runAsUser |
| 247 | ## @param clusterOperator.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup |
| 248 | ## @param clusterOperator.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot |
| 249 | ## @param clusterOperator.containerSecurityContext.privileged Set container's Security Context privileged |
| 250 | ## @param clusterOperator.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem |
| 251 | ## @param clusterOperator.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation |
| 252 | ## @param clusterOperator.containerSecurityContext.capabilities.drop List of capabilities to be dropped |
| 253 | ## @param clusterOperator.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 254 | ## |
| 255 | containerSecurityContext: |
| 256 | enabled: true |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 257 | seLinuxOptions: null |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 258 | runAsUser: 1001 |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 259 | runAsGroup: 1001 |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 260 | runAsNonRoot: true |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 261 | privileged: false |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 262 | readOnlyRootFilesystem: true |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 263 | allowPrivilegeEscalation: false |
| 264 | capabilities: |
| 265 | drop: ["ALL"] |
| 266 | seccompProfile: |
| 267 | type: "RuntimeDefault" |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 268 | ## @param clusterOperator.command Override default container command (useful when using custom images) |
| 269 | ## |
| 270 | command: [] |
| 271 | ## @param clusterOperator.args Override default container args (useful when using custom images) |
| 272 | ## |
| 273 | args: [] |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 274 | ## @param clusterOperator.automountServiceAccountToken Mount Service Account token in pod |
| 275 | ## |
| 276 | automountServiceAccountToken: true |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 277 | ## @param clusterOperator.hostAliases RabbitMQ Cluster Operator pods host aliases |
| 278 | ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/ |
| 279 | ## |
| 280 | hostAliases: [] |
| 281 | ## @param clusterOperator.podLabels Extra labels for RabbitMQ Cluster Operator pods |
| 282 | ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ |
| 283 | ## |
| 284 | podLabels: {} |
| 285 | ## @param clusterOperator.podAnnotations Annotations for RabbitMQ Cluster Operator pods |
| 286 | ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ |
| 287 | ## |
| 288 | podAnnotations: {} |
| 289 | ## @param clusterOperator.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` |
| 290 | ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity |
| 291 | ## |
| 292 | podAffinityPreset: "" |
| 293 | ## @param clusterOperator.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` |
| 294 | ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity |
| 295 | ## |
| 296 | podAntiAffinityPreset: soft |
| 297 | ## Node affinity preset |
| 298 | ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity |
| 299 | ## |
| 300 | nodeAffinityPreset: |
| 301 | ## @param clusterOperator.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` |
| 302 | ## |
| 303 | type: "" |
| 304 | ## @param clusterOperator.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set |
| 305 | ## |
| 306 | key: "" |
| 307 | ## @param clusterOperator.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set |
| 308 | ## E.g. |
| 309 | ## values: |
| 310 | ## - e2e-az1 |
| 311 | ## - e2e-az2 |
| 312 | ## |
| 313 | values: [] |
| 314 | ## @param clusterOperator.affinity Affinity for RabbitMQ Cluster Operator pods assignment |
| 315 | ## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity |
| 316 | ## NOTE: `podAffinityPreset`, `podAntiAffinityPreset`, and `nodeAffinityPreset` will be ignored when it's set |
| 317 | ## |
| 318 | affinity: {} |
| 319 | ## @param clusterOperator.nodeSelector Node labels for RabbitMQ Cluster Operator pods assignment |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 320 | ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/ |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 321 | ## |
| 322 | nodeSelector: {} |
| 323 | ## @param clusterOperator.tolerations Tolerations for RabbitMQ Cluster Operator pods assignment |
| 324 | ## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/ |
| 325 | ## |
| 326 | tolerations: [] |
| 327 | ## @param clusterOperator.updateStrategy.type RabbitMQ Cluster Operator statefulset strategy type |
| 328 | ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies |
| 329 | ## |
| 330 | updateStrategy: |
| 331 | ## StrategyType |
| 332 | ## Can be set to RollingUpdate or OnDelete |
| 333 | ## |
| 334 | type: RollingUpdate |
| 335 | ## @param clusterOperator.priorityClassName RabbitMQ Cluster Operator pods' priorityClassName |
| 336 | ## |
| 337 | priorityClassName: "" |
| 338 | ## @param clusterOperator.lifecycleHooks for the RabbitMQ Cluster Operator container(s) to automate configuration before or after startup |
| 339 | ## |
| 340 | lifecycleHooks: {} |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 341 | ## @param clusterOperator.containerPorts.metrics RabbitMQ Cluster Operator container port (used for metrics) |
| 342 | ## |
| 343 | containerPorts: |
| 344 | metrics: 9782 |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 345 | ## @param clusterOperator.extraEnvVars Array with extra environment variables to add to RabbitMQ Cluster Operator nodes |
| 346 | ## e.g: |
| 347 | ## extraEnvVars: |
| 348 | ## - name: FOO |
| 349 | ## value: "bar" |
| 350 | ## |
| 351 | extraEnvVars: [] |
| 352 | ## @param clusterOperator.extraEnvVarsCM Name of existing ConfigMap containing extra env vars for RabbitMQ Cluster Operator nodes |
| 353 | ## |
| 354 | extraEnvVarsCM: "" |
| 355 | ## @param clusterOperator.extraEnvVarsSecret Name of existing Secret containing extra env vars for RabbitMQ Cluster Operator nodes |
| 356 | ## |
| 357 | extraEnvVarsSecret: "" |
| 358 | ## @param clusterOperator.extraVolumes Optionally specify extra list of additional volumes for the RabbitMQ Cluster Operator pod(s) |
| 359 | ## |
| 360 | extraVolumes: [] |
| 361 | ## @param clusterOperator.extraVolumeMounts Optionally specify extra list of additional volumeMounts for the RabbitMQ Cluster Operator container(s) |
| 362 | ## |
| 363 | extraVolumeMounts: [] |
| 364 | ## @param clusterOperator.sidecars Add additional sidecar containers to the RabbitMQ Cluster Operator pod(s) |
| 365 | ## e.g: |
| 366 | ## sidecars: |
| 367 | ## - name: your-image-name |
| 368 | ## image: your-image |
| 369 | ## imagePullPolicy: Always |
| 370 | ## ports: |
| 371 | ## - name: portname |
| 372 | ## containerPort: 1234 |
| 373 | ## |
| 374 | sidecars: [] |
| 375 | ## @param clusterOperator.initContainers Add additional init containers to the RabbitMQ Cluster Operator pod(s) |
| 376 | ## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ |
| 377 | ## e.g: |
| 378 | ## initContainers: |
| 379 | ## - name: your-image-name |
| 380 | ## image: your-image |
| 381 | ## imagePullPolicy: Always |
| 382 | ## command: ['sh', '-c', 'echo "hello world"'] |
| 383 | ## |
| 384 | initContainers: [] |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 385 | ## Network Policies |
| 386 | ## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/ |
| 387 | ## |
| 388 | networkPolicy: |
| 389 | ## @param clusterOperator.networkPolicy.enabled Specifies whether a NetworkPolicy should be created |
| 390 | ## |
| 391 | enabled: true |
| 392 | ## @param clusterOperator.networkPolicy.kubeAPIServerPorts [array] List of possible endpoints to kube-apiserver (limit to your cluster settings to increase security) |
| 393 | ## |
| 394 | kubeAPIServerPorts: [443, 6443, 8443] |
| 395 | ## @param clusterOperator.networkPolicy.allowExternal Don't require injector label for connections |
| 396 | ## The Policy model to apply. When set to false, only pods with the correct |
| 397 | ## injector label will have network access to the ports injector is listening |
| 398 | ## on. When true, injector will accept connections from any source |
| 399 | ## (with the correct destination port). |
| 400 | ## |
| 401 | allowExternal: true |
| 402 | ## @param clusterOperator.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations. |
| 403 | ## |
| 404 | allowExternalEgress: true |
Mohammed Naser | 7d1623e | 2024-06-17 09:12:39 -0400 | [diff] [blame] | 405 | ## @param clusterOperator.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 406 | ## e.g: |
| 407 | ## extraIngress: |
| 408 | ## - ports: |
| 409 | ## - port: 1234 |
| 410 | ## from: |
| 411 | ## - podSelector: |
| 412 | ## - matchLabels: |
| 413 | ## - role: frontend |
| 414 | ## - podSelector: |
| 415 | ## - matchExpressions: |
| 416 | ## - key: role |
| 417 | ## operator: In |
| 418 | ## values: |
| 419 | ## - frontend |
| 420 | extraIngress: [] |
| 421 | ## @param clusterOperator.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy |
| 422 | ## e.g: |
| 423 | ## extraEgress: |
| 424 | ## - ports: |
| 425 | ## - port: 1234 |
| 426 | ## to: |
| 427 | ## - podSelector: |
| 428 | ## - matchLabels: |
| 429 | ## - role: frontend |
| 430 | ## - podSelector: |
| 431 | ## - matchExpressions: |
| 432 | ## - key: role |
| 433 | ## operator: In |
| 434 | ## values: |
| 435 | ## - frontend |
| 436 | ## |
| 437 | extraEgress: [] |
| 438 | ## @param clusterOperator.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces |
| 439 | ## @param clusterOperator.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces |
| 440 | ## |
| 441 | ingressNSMatchLabels: {} |
| 442 | ingressNSPodMatchLabels: {} |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 443 | ## RBAC configuration |
| 444 | ## |
| 445 | rbac: |
| 446 | ## @param clusterOperator.rbac.create Specifies whether RBAC resources should be created |
| 447 | ## |
| 448 | create: true |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 449 | ## ClusterRole parameters |
| 450 | ## |
| 451 | clusterRole: |
| 452 | ## @param clusterOperator.rbac.clusterRole.customRules Define custom access rules for the ClusterRole |
| 453 | ## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole |
| 454 | ## e.g: |
| 455 | ## customRules: |
| 456 | ## - apiGroups: A list of API groups (e.g., [""], ["apps"]). |
| 457 | ## - resources: A list of resource names (e.g., ["configmaps", "pods"]). |
| 458 | ## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]). |
| 459 | customRules: [] |
| 460 | ## @param clusterOperator.rbac.clusterRole.extraRules Define extra access rules for the ClusterRole. This has no effect if customerRules is a non-empty array. |
| 461 | ## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole |
| 462 | ## e.g: |
| 463 | ## extraRules: |
| 464 | ## - apiGroups: A list of API groups (e.g., [""], ["apps"]). |
| 465 | ## - resources: A list of resource names (e.g., ["configmaps", "pods"]). |
| 466 | ## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]). |
| 467 | extraRules: [] |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 468 | ## ServiceAccount configuration |
| 469 | ## |
| 470 | serviceAccount: |
| 471 | ## @param clusterOperator.serviceAccount.create Specifies whether a ServiceAccount should be created |
| 472 | ## |
| 473 | create: true |
| 474 | ## @param clusterOperator.serviceAccount.name The name of the ServiceAccount to use. |
| 475 | ## If not set and create is true, a name is generated using the common.names.fullname template |
| 476 | ## |
| 477 | name: "" |
| 478 | ## @param clusterOperator.serviceAccount.annotations Add annotations |
| 479 | ## |
| 480 | annotations: {} |
| 481 | ## @param clusterOperator.serviceAccount.automountServiceAccountToken Automount API credentials for a service account. |
| 482 | ## |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 483 | automountServiceAccountToken: false |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 484 | ## @section RabbitMQ Cluster Operator Metrics parameters |
| 485 | ## |
| 486 | metrics: |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 487 | ## Metrics service parameters |
| 488 | ## |
| 489 | service: |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 490 | ## @param clusterOperator.metrics.service.enabled Create a service for accessing the metrics endpoint |
| 491 | ## |
| 492 | enabled: false |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 493 | ## @param clusterOperator.metrics.service.type RabbitMQ Cluster Operator metrics service type |
| 494 | ## |
| 495 | type: ClusterIP |
| 496 | ## @param clusterOperator.metrics.service.ports.http RabbitMQ Cluster Operator metrics service HTTP port |
| 497 | ## |
| 498 | ports: |
| 499 | http: 80 |
| 500 | ## Node ports to expose |
| 501 | ## @param clusterOperator.metrics.service.nodePorts.http Node port for HTTP |
| 502 | ## NOTE: choose port between <30000-32767> |
| 503 | ## |
| 504 | nodePorts: |
| 505 | http: "" |
| 506 | ## @param clusterOperator.metrics.service.clusterIP RabbitMQ Cluster Operator metrics service Cluster IP |
| 507 | ## e.g.: |
| 508 | ## clusterIP: None |
| 509 | ## |
| 510 | clusterIP: "" |
| 511 | ## @param clusterOperator.metrics.service.extraPorts Extra ports to expose (normally used with the `sidecar` value) |
| 512 | ## |
| 513 | extraPorts: [] |
| 514 | ## @param clusterOperator.metrics.service.loadBalancerIP RabbitMQ Cluster Operator metrics service Load Balancer IP |
| 515 | ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-loadbalancer |
| 516 | ## |
| 517 | loadBalancerIP: "" |
| 518 | ## @param clusterOperator.metrics.service.loadBalancerSourceRanges RabbitMQ Cluster Operator metrics service Load Balancer sources |
| 519 | ## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service |
| 520 | ## e.g: |
| 521 | ## loadBalancerSourceRanges: |
| 522 | ## - 10.10.10.0/24 |
| 523 | ## |
| 524 | loadBalancerSourceRanges: [] |
| 525 | ## @param clusterOperator.metrics.service.externalTrafficPolicy RabbitMQ Cluster Operator metrics service external traffic policy |
| 526 | ## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip |
| 527 | ## |
| 528 | externalTrafficPolicy: Cluster |
| 529 | ## @param clusterOperator.metrics.service.annotations [object] Additional custom annotations for RabbitMQ Cluster Operator metrics service |
| 530 | ## |
| 531 | annotations: |
| 532 | prometheus.io/scrape: "true" |
| 533 | prometheus.io/port: "{{ .Values.clusterOperator.metrics.service.ports.http }}" |
| 534 | ## @param clusterOperator.metrics.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP" |
| 535 | ## If "ClientIP", consecutive client requests will be directed to the same Pod |
| 536 | ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies |
| 537 | ## |
| 538 | sessionAffinity: None |
| 539 | ## @param clusterOperator.metrics.service.sessionAffinityConfig Additional settings for the sessionAffinity |
| 540 | ## sessionAffinityConfig: |
| 541 | ## clientIP: |
| 542 | ## timeoutSeconds: 300 |
| 543 | ## |
| 544 | sessionAffinityConfig: {} |
| 545 | serviceMonitor: |
| 546 | ## @param clusterOperator.metrics.serviceMonitor.enabled Specify if a servicemonitor will be deployed for prometheus-operator |
| 547 | ## |
| 548 | enabled: false |
| 549 | ## @param clusterOperator.metrics.serviceMonitor.namespace Namespace which Prometheus is running in |
| 550 | ## e.g: |
| 551 | ## namespace: monitoring |
| 552 | ## |
| 553 | namespace: "" |
| 554 | ## @param clusterOperator.metrics.serviceMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator |
| 555 | ## |
| 556 | jobLabel: app.kubernetes.io/name |
| 557 | ## @param clusterOperator.metrics.serviceMonitor.honorLabels Honor metrics labels |
| 558 | ## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint |
| 559 | ## |
| 560 | honorLabels: false |
| 561 | ## @param clusterOperator.metrics.serviceMonitor.selector Prometheus instance selector labels |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 562 | ## ref: https://github.com/bitnami/charts/tree/main/bitnami/prometheus-operator#prometheus-configuration |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 563 | ## e.g: |
| 564 | ## selector: |
| 565 | ## prometheus: my-prometheus |
| 566 | ## |
| 567 | selector: {} |
| 568 | ## @param clusterOperator.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended |
| 569 | ## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint |
| 570 | ## e.g: |
| 571 | ## scrapeTimeout: 10s |
| 572 | ## |
| 573 | scrapeTimeout: "" |
| 574 | ## @param clusterOperator.metrics.serviceMonitor.interval Scrape interval. If not set, the Prometheus default scrape interval is used |
| 575 | ## |
| 576 | interval: "" |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 577 | ## DEPRECATED: Use clusterOperator.metrics.serviceMonitor.labels instead |
| 578 | ## This value will be removed in a future release |
| 579 | ## additionalLabels: {} |
| 580 | |
| 581 | ## @param clusterOperator.metrics.serviceMonitor.metricRelabelings Specify additional relabeling of metrics |
| 582 | ## |
| 583 | metricRelabelings: [] |
| 584 | ## @param clusterOperator.metrics.serviceMonitor.relabelings Specify general relabeling |
| 585 | ## |
| 586 | relabelings: [] |
| 587 | ## @param clusterOperator.metrics.serviceMonitor.labels Extra labels for the ServiceMonitor |
| 588 | ## |
| 589 | labels: {} |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 590 | ## @param clusterOperator.metrics.serviceMonitor.path Define the path used by ServiceMonitor to scrap metrics |
| 591 | ## Could be /metrics for aggregated metrics or /metrics/per-object for more details |
| 592 | ## |
| 593 | path: "" |
| 594 | ## @param clusterOperator.metrics.serviceMonitor.params Define the HTTP URL parameters used by ServiceMonitor |
| 595 | ## |
| 596 | params: {} |
| 597 | podMonitor: |
| 598 | ## @param clusterOperator.metrics.podMonitor.enabled Create PodMonitor Resource for scraping metrics using PrometheusOperator |
| 599 | ## |
| 600 | enabled: false |
| 601 | ## @param clusterOperator.metrics.podMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator |
| 602 | ## |
| 603 | jobLabel: app.kubernetes.io/name |
| 604 | ## @param clusterOperator.metrics.podMonitor.namespace Namespace which Prometheus is running in |
| 605 | ## |
| 606 | namespace: "" |
| 607 | ## @param clusterOperator.metrics.podMonitor.honorLabels Honor metrics labels |
| 608 | ## |
| 609 | honorLabels: false |
| 610 | ## @param clusterOperator.metrics.podMonitor.selector Prometheus instance selector labels |
| 611 | ## ref: https://github.com/bitnami/charts/tree/main/bitnami/prometheus-operator#prometheus-configuration |
| 612 | selector: {} |
| 613 | ## @param clusterOperator.metrics.podMonitor.interval Specify the interval at which metrics should be scraped |
| 614 | ## |
| 615 | interval: 30s |
| 616 | ## @param clusterOperator.metrics.podMonitor.scrapeTimeout Specify the timeout after which the scrape is ended |
| 617 | ## |
| 618 | scrapeTimeout: 30s |
| 619 | ## @param clusterOperator.metrics.podMonitor.additionalLabels [object] Additional labels that can be used so PodMonitors will be discovered by Prometheus |
| 620 | ## |
| 621 | additionalLabels: {} |
| 622 | ## @param clusterOperator.metrics.podMonitor.path Define HTTP path to scrape for metrics. |
| 623 | ## |
| 624 | path: "" |
| 625 | ## @param clusterOperator.metrics.podMonitor.relabelings Specify general relabeling |
| 626 | ## |
| 627 | relabelings: [] |
| 628 | ## @param clusterOperator.metrics.podMonitor.metricRelabelings Specify additional relabeling of metrics |
| 629 | ## |
| 630 | metricRelabelings: [] |
| 631 | ## @param clusterOperator.metrics.podMonitor.params Define the HTTP URL parameters used by PodMonitor |
| 632 | ## |
| 633 | params: {} |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 634 | ## @section RabbitMQ Messaging Topology Operator Parameters |
| 635 | ## |
| 636 | msgTopologyOperator: |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 637 | ## @param msgTopologyOperator.enabled Deploy RabbitMQ Messaging Topology Operator as part of the installation |
| 638 | ## |
| 639 | enabled: true |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 640 | ## Bitnami RabbitMQ Messaging Topology Operator image |
| 641 | ## ref: https://hub.docker.com/r/bitnami/rmq-messaging-topology-operator/tags/ |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 642 | ## @param msgTopologyOperator.image.registry [default: REGISTRY_NAME] RabbitMQ Messaging Topology Operator image registry |
| 643 | ## @param msgTopologyOperator.image.repository [default: REPOSITORY_NAME/rmq-messaging-topology-operator] RabbitMQ Messaging Topology Operator image repository |
| 644 | ## @skip msgTopologyOperator.image.tag RabbitMQ Messaging Topology Operator image tag (immutable tags are recommended) |
| 645 | ## @param msgTopologyOperator.image.digest RabbitMQ Messaging Topology Operator image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 646 | ## @param msgTopologyOperator.image.pullPolicy RabbitMQ Messaging Topology Operator image pull policy |
| 647 | ## @param msgTopologyOperator.image.pullSecrets RabbitMQ Messaging Topology Operator image pull secrets |
| 648 | ## |
| 649 | image: |
| 650 | registry: docker.io |
| 651 | repository: bitnami/rmq-messaging-topology-operator |
Mohammed Naser | 7d1623e | 2024-06-17 09:12:39 -0400 | [diff] [blame] | 652 | tag: 1.14.1-debian-12-r2 |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 653 | digest: "" |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 654 | ## Specify a imagePullPolicy |
| 655 | ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent' |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 656 | ## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 657 | ## |
| 658 | pullPolicy: IfNotPresent |
| 659 | ## Optionally specify an array of imagePullSecrets. |
| 660 | ## Secrets must be manually created in the namespace. |
| 661 | ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/ |
| 662 | ## e.g: |
| 663 | ## pullSecrets: |
| 664 | ## - myRegistryKeySecretName |
| 665 | ## |
| 666 | pullSecrets: [] |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 667 | ## @param msgTopologyOperator.revisionHistoryLimit sets number of replicaset to keep in k8s |
| 668 | ## |
| 669 | revisionHistoryLimit: 10 |
| 670 | ## @param msgTopologyOperator.watchAllNamespaces Watch for resources in all namespaces |
| 671 | ## |
| 672 | watchAllNamespaces: true |
| 673 | ## @param msgTopologyOperator.watchNamespaces [array] Watch for resources in the given namespaces ## @param clusterOperator.watchNamespaces [array] Watch for resources in the given namespaces (ignored if watchAllNamespaces=true) |
| 674 | ## |
| 675 | watchNamespaces: [] |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 676 | ## @param msgTopologyOperator.replicaCount Number of RabbitMQ Messaging Topology Operator replicas to deploy |
| 677 | ## |
| 678 | replicaCount: 1 |
| 679 | ## @param msgTopologyOperator.topologySpreadConstraints Topology Spread Constraints for pod assignment |
| 680 | ## https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/ |
| 681 | ## The value is evaluated as a template |
| 682 | ## |
| 683 | topologySpreadConstraints: [] |
| 684 | ## @param msgTopologyOperator.schedulerName Alternative scheduler |
| 685 | ## |
| 686 | schedulerName: "" |
| 687 | ## @param msgTopologyOperator.terminationGracePeriodSeconds In seconds, time the given to the %%MAIN_CONTAINER_NAME%% pod needs to terminate gracefully |
| 688 | ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods |
| 689 | ## |
| 690 | terminationGracePeriodSeconds: "" |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 691 | ## @param msgTopologyOperator.hostNetwork Boolean |
| 692 | ## |
| 693 | hostNetwork: "false" |
| 694 | ## @param msgTopologyOperator.dnsPolicy Alternative DNS policy |
| 695 | ## |
| 696 | dnsPolicy: "ClusterFirst" |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 697 | ## Configure extra options for RabbitMQ Messaging Topology Operator containers' liveness and readiness probes |
| 698 | ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes |
| 699 | ## @param msgTopologyOperator.livenessProbe.enabled Enable livenessProbe on RabbitMQ Messaging Topology Operator nodes |
| 700 | ## @param msgTopologyOperator.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe |
| 701 | ## @param msgTopologyOperator.livenessProbe.periodSeconds Period seconds for livenessProbe |
| 702 | ## @param msgTopologyOperator.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe |
| 703 | ## @param msgTopologyOperator.livenessProbe.failureThreshold Failure threshold for livenessProbe |
| 704 | ## @param msgTopologyOperator.livenessProbe.successThreshold Success threshold for livenessProbe |
| 705 | ## |
| 706 | livenessProbe: |
| 707 | enabled: true |
| 708 | initialDelaySeconds: 5 |
| 709 | periodSeconds: 30 |
| 710 | timeoutSeconds: 5 |
| 711 | successThreshold: 1 |
| 712 | failureThreshold: 5 |
| 713 | ## @param msgTopologyOperator.readinessProbe.enabled Enable readinessProbe on RabbitMQ Messaging Topology Operator nodes |
| 714 | ## @param msgTopologyOperator.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe |
| 715 | ## @param msgTopologyOperator.readinessProbe.periodSeconds Period seconds for readinessProbe |
| 716 | ## @param msgTopologyOperator.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe |
| 717 | ## @param msgTopologyOperator.readinessProbe.failureThreshold Failure threshold for readinessProbe |
| 718 | ## @param msgTopologyOperator.readinessProbe.successThreshold Success threshold for readinessProbe |
| 719 | ## |
| 720 | readinessProbe: |
| 721 | enabled: true |
| 722 | initialDelaySeconds: 5 |
| 723 | periodSeconds: 30 |
| 724 | timeoutSeconds: 5 |
| 725 | successThreshold: 1 |
| 726 | failureThreshold: 5 |
| 727 | ## @param msgTopologyOperator.startupProbe.enabled Enable startupProbe on RabbitMQ Messaging Topology Operator nodes |
| 728 | ## @param msgTopologyOperator.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe |
| 729 | ## @param msgTopologyOperator.startupProbe.periodSeconds Period seconds for startupProbe |
| 730 | ## @param msgTopologyOperator.startupProbe.timeoutSeconds Timeout seconds for startupProbe |
| 731 | ## @param msgTopologyOperator.startupProbe.failureThreshold Failure threshold for startupProbe |
| 732 | ## @param msgTopologyOperator.startupProbe.successThreshold Success threshold for startupProbe |
| 733 | ## |
| 734 | startupProbe: |
| 735 | enabled: false |
| 736 | initialDelaySeconds: 5 |
| 737 | periodSeconds: 30 |
| 738 | timeoutSeconds: 5 |
| 739 | successThreshold: 1 |
| 740 | failureThreshold: 5 |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 741 | ## @param msgTopologyOperator.customLivenessProbe Custom livenessProbe that overrides the default one |
| 742 | ## |
| 743 | customLivenessProbe: {} |
| 744 | ## @param msgTopologyOperator.customReadinessProbe Custom readinessProbe that overrides the default one |
| 745 | ## |
| 746 | customReadinessProbe: {} |
| 747 | ## @param msgTopologyOperator.customStartupProbe Custom startupProbe that overrides the default one |
| 748 | ## |
| 749 | customStartupProbe: {} |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 750 | ## @param msgTopologyOperator.existingWebhookCertSecret name of a secret containing the certificates (use it to avoid certManager creating one) |
| 751 | ## |
| 752 | existingWebhookCertSecret: "" |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 753 | ## @param msgTopologyOperator.existingWebhookCertCABundle PEM-encoded CA Bundle of the existing secret provided in existingWebhookCertSecret (only if useCertManager=false) |
| 754 | ## |
| 755 | existingWebhookCertCABundle: "" |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 756 | ## RabbitMQ Messaging Topology Operator resource requests and limits |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 757 | ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/ |
| 758 | ## @param msgTopologyOperator.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if msgTopologyOperator.resources is set (msgTopologyOperator.resources is recommended for production). |
| 759 | ## More information: https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15 |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 760 | ## |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 761 | resourcesPreset: "nano" |
| 762 | ## @param msgTopologyOperator.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads) |
| 763 | ## Example: |
| 764 | ## resources: |
| 765 | ## requests: |
| 766 | ## cpu: 2 |
| 767 | ## memory: 512Mi |
| 768 | ## limits: |
| 769 | ## cpu: 3 |
| 770 | ## memory: 1024Mi |
| 771 | ## |
| 772 | resources: {} |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 773 | ## Configure Pods Security Context |
| 774 | ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod |
| 775 | ## @param msgTopologyOperator.podSecurityContext.enabled Enabled RabbitMQ Messaging Topology Operator pods' Security Context |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 776 | ## @param msgTopologyOperator.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy |
| 777 | ## @param msgTopologyOperator.podSecurityContext.sysctls Set kernel settings using the sysctl interface |
| 778 | ## @param msgTopologyOperator.podSecurityContext.supplementalGroups Set filesystem extra groups |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 779 | ## @param msgTopologyOperator.podSecurityContext.fsGroup Set RabbitMQ Messaging Topology Operator pod's Security Context fsGroup |
| 780 | ## |
| 781 | podSecurityContext: |
| 782 | enabled: true |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 783 | fsGroupChangePolicy: Always |
| 784 | sysctls: [] |
| 785 | supplementalGroups: [] |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 786 | fsGroup: 1001 |
| 787 | ## Configure Container Security Context |
| 788 | ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 789 | ## @param msgTopologyOperator.containerSecurityContext.enabled Enabled containers' Security Context |
| 790 | ## @param msgTopologyOperator.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container |
| 791 | ## @param msgTopologyOperator.containerSecurityContext.runAsUser Set containers' Security Context runAsUser |
| 792 | ## @param msgTopologyOperator.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup |
| 793 | ## @param msgTopologyOperator.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot |
| 794 | ## @param msgTopologyOperator.containerSecurityContext.privileged Set container's Security Context privileged |
| 795 | ## @param msgTopologyOperator.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem |
| 796 | ## @param msgTopologyOperator.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation |
| 797 | ## @param msgTopologyOperator.containerSecurityContext.capabilities.drop List of capabilities to be dropped |
| 798 | ## @param msgTopologyOperator.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 799 | ## |
| 800 | containerSecurityContext: |
| 801 | enabled: true |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 802 | seLinuxOptions: null |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 803 | runAsUser: 1001 |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 804 | runAsGroup: 1001 |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 805 | runAsNonRoot: true |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 806 | privileged: false |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 807 | readOnlyRootFilesystem: true |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 808 | allowPrivilegeEscalation: false |
| 809 | capabilities: |
| 810 | drop: ["ALL"] |
| 811 | seccompProfile: |
| 812 | type: "RuntimeDefault" |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 813 | ## @param msgTopologyOperator.fullnameOverride String to fully override rmqco.msgTopologyOperator.fullname template |
| 814 | ## |
| 815 | fullnameOverride: "" |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 816 | ## @param msgTopologyOperator.command Override default container command (useful when using custom images) |
| 817 | ## |
| 818 | command: [] |
| 819 | ## @param msgTopologyOperator.args Override default container args (useful when using custom images) |
| 820 | ## |
| 821 | args: [] |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 822 | ## @param msgTopologyOperator.automountServiceAccountToken Mount Service Account token in pod |
| 823 | ## |
| 824 | automountServiceAccountToken: true |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 825 | ## @param msgTopologyOperator.hostAliases RabbitMQ Messaging Topology Operator pods host aliases |
| 826 | ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/ |
| 827 | ## |
| 828 | hostAliases: [] |
| 829 | ## @param msgTopologyOperator.podLabels Extra labels for RabbitMQ Messaging Topology Operator pods |
| 830 | ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ |
| 831 | ## |
| 832 | podLabels: {} |
| 833 | ## @param msgTopologyOperator.podAnnotations Annotations for RabbitMQ Messaging Topology Operator pods |
| 834 | ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ |
| 835 | ## |
| 836 | podAnnotations: {} |
| 837 | ## @param msgTopologyOperator.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` |
| 838 | ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity |
| 839 | ## |
| 840 | podAffinityPreset: "" |
| 841 | ## @param msgTopologyOperator.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` |
| 842 | ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity |
| 843 | ## |
| 844 | podAntiAffinityPreset: soft |
| 845 | ## Node affinity preset |
| 846 | ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity |
| 847 | ## |
| 848 | nodeAffinityPreset: |
| 849 | ## @param msgTopologyOperator.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` |
| 850 | ## |
| 851 | type: "" |
| 852 | ## @param msgTopologyOperator.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set |
| 853 | ## |
| 854 | key: "" |
| 855 | ## @param msgTopologyOperator.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set |
| 856 | ## E.g. |
| 857 | ## values: |
| 858 | ## - e2e-az1 |
| 859 | ## - e2e-az2 |
| 860 | ## |
| 861 | values: [] |
| 862 | ## @param msgTopologyOperator.affinity Affinity for RabbitMQ Messaging Topology Operator pods assignment |
| 863 | ## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity |
| 864 | ## NOTE: `podAffinityPreset`, `podAntiAffinityPreset`, and `nodeAffinityPreset` will be ignored when it's set |
| 865 | ## |
| 866 | affinity: {} |
| 867 | ## @param msgTopologyOperator.nodeSelector Node labels for RabbitMQ Messaging Topology Operator pods assignment |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 868 | ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/ |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 869 | ## |
| 870 | nodeSelector: {} |
| 871 | ## @param msgTopologyOperator.tolerations Tolerations for RabbitMQ Messaging Topology Operator pods assignment |
| 872 | ## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/ |
| 873 | ## |
| 874 | tolerations: [] |
| 875 | ## @param msgTopologyOperator.updateStrategy.type RabbitMQ Messaging Topology Operator statefulset strategy type |
| 876 | ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies |
| 877 | ## |
| 878 | updateStrategy: |
| 879 | ## StrategyType |
| 880 | ## Can be set to RollingUpdate or OnDelete |
| 881 | ## |
| 882 | type: RollingUpdate |
| 883 | ## @param msgTopologyOperator.priorityClassName RabbitMQ Messaging Topology Operator pods' priorityClassName |
| 884 | ## |
| 885 | priorityClassName: "" |
| 886 | ## @param msgTopologyOperator.lifecycleHooks for the RabbitMQ Messaging Topology Operator container(s) to automate configuration before or after startup |
| 887 | ## |
| 888 | lifecycleHooks: {} |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 889 | ## @param msgTopologyOperator.containerPorts.metrics RabbitMQ Messaging Topology Operator container port (used for metrics) |
| 890 | ## |
| 891 | containerPorts: |
| 892 | metrics: 8080 |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 893 | ## @param msgTopologyOperator.extraEnvVars Array with extra environment variables to add to RabbitMQ Messaging Topology Operator nodes |
| 894 | ## e.g: |
| 895 | ## extraEnvVars: |
| 896 | ## - name: FOO |
| 897 | ## value: "bar" |
| 898 | ## |
| 899 | extraEnvVars: [] |
| 900 | ## @param msgTopologyOperator.extraEnvVarsCM Name of existing ConfigMap containing extra env vars for RabbitMQ Messaging Topology Operator nodes |
| 901 | ## |
| 902 | extraEnvVarsCM: "" |
| 903 | ## @param msgTopologyOperator.extraEnvVarsSecret Name of existing Secret containing extra env vars for RabbitMQ Messaging Topology Operator nodes |
| 904 | ## |
| 905 | extraEnvVarsSecret: "" |
| 906 | ## @param msgTopologyOperator.extraVolumes Optionally specify extra list of additional volumes for the RabbitMQ Messaging Topology Operator pod(s) |
| 907 | ## |
| 908 | extraVolumes: [] |
| 909 | ## @param msgTopologyOperator.extraVolumeMounts Optionally specify extra list of additional volumeMounts for the RabbitMQ Messaging Topology Operator container(s) |
| 910 | ## |
| 911 | extraVolumeMounts: [] |
| 912 | ## @param msgTopologyOperator.sidecars Add additional sidecar containers to the RabbitMQ Messaging Topology Operator pod(s) |
| 913 | ## e.g: |
| 914 | ## sidecars: |
| 915 | ## - name: your-image-name |
| 916 | ## image: your-image |
| 917 | ## imagePullPolicy: Always |
| 918 | ## ports: |
| 919 | ## - name: portname |
| 920 | ## containerPort: 1234 |
| 921 | ## |
| 922 | sidecars: [] |
| 923 | ## @param msgTopologyOperator.initContainers Add additional init containers to the RabbitMQ Messaging Topology Operator pod(s) |
| 924 | ## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ |
| 925 | ## e.g: |
| 926 | ## initContainers: |
| 927 | ## - name: your-image-name |
| 928 | ## image: your-image |
| 929 | ## imagePullPolicy: Always |
| 930 | ## command: ['sh', '-c', 'echo "hello world"'] |
| 931 | ## |
| 932 | initContainers: [] |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 933 | ## Webhook service parameters |
| 934 | ## |
| 935 | service: |
| 936 | ## @param msgTopologyOperator.service.type RabbitMQ Messaging Topology Operator webhook service type |
| 937 | ## |
| 938 | type: ClusterIP |
| 939 | ## @param msgTopologyOperator.service.ports.webhook RabbitMQ Messaging Topology Operator webhook service HTTP port |
| 940 | ## |
| 941 | ports: |
| 942 | webhook: 443 |
| 943 | ## Node ports to expose |
| 944 | ## @param msgTopologyOperator.service.nodePorts.http Node port for HTTP |
| 945 | ## NOTE: choose port between <30000-32767> |
| 946 | ## |
| 947 | nodePorts: |
| 948 | http: "" |
| 949 | ## @param msgTopologyOperator.service.clusterIP RabbitMQ Messaging Topology Operator webhook service Cluster IP |
| 950 | ## e.g.: |
| 951 | ## clusterIP: None |
| 952 | ## |
| 953 | clusterIP: "" |
| 954 | ## @param msgTopologyOperator.service.loadBalancerIP RabbitMQ Messaging Topology Operator webhook service Load Balancer IP |
| 955 | ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-loadbalancer |
| 956 | ## |
| 957 | loadBalancerIP: "" |
| 958 | ## @param msgTopologyOperator.service.extraPorts Extra ports to expose (normally used with the `sidecar` value) |
| 959 | ## |
| 960 | extraPorts: [] |
| 961 | ## @param msgTopologyOperator.service.loadBalancerSourceRanges RabbitMQ Messaging Topology Operator webhook service Load Balancer sources |
| 962 | ## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service |
| 963 | ## e.g: |
| 964 | ## loadBalancerSourceRanges: |
| 965 | ## - 10.10.10.0/24 |
| 966 | ## |
| 967 | loadBalancerSourceRanges: [] |
| 968 | ## @param msgTopologyOperator.service.externalTrafficPolicy RabbitMQ Messaging Topology Operator webhook service external traffic policy |
| 969 | ## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip |
| 970 | ## |
| 971 | externalTrafficPolicy: Cluster |
| 972 | ## @param msgTopologyOperator.service.annotations Additional custom annotations for RabbitMQ Messaging Topology Operator webhook service |
| 973 | ## |
| 974 | annotations: {} |
| 975 | ## @param msgTopologyOperator.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP" |
| 976 | ## If "ClientIP", consecutive client requests will be directed to the same Pod |
| 977 | ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies |
| 978 | ## |
| 979 | sessionAffinity: None |
| 980 | ## @param msgTopologyOperator.service.sessionAffinityConfig Additional settings for the sessionAffinity |
| 981 | ## sessionAffinityConfig: |
| 982 | ## clientIP: |
| 983 | ## timeoutSeconds: 300 |
| 984 | ## |
| 985 | sessionAffinityConfig: {} |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 986 | ## Network Policies |
| 987 | ## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/ |
| 988 | ## |
| 989 | networkPolicy: |
| 990 | ## @param msgTopologyOperator.networkPolicy.enabled Specifies whether a NetworkPolicy should be created |
| 991 | ## |
| 992 | enabled: true |
| 993 | ## @param msgTopologyOperator.networkPolicy.kubeAPIServerPorts [array] List of possible endpoints to kube-apiserver (limit to your cluster settings to increase security) |
| 994 | ## |
| 995 | kubeAPIServerPorts: [443, 6443, 8443] |
| 996 | ## @param msgTopologyOperator.networkPolicy.allowExternal Don't require injector label for connections |
| 997 | ## The Policy model to apply. When set to false, only pods with the correct |
| 998 | ## injector label will have network access to the ports injector is listening |
| 999 | ## on. When true, injector will accept connections from any source |
| 1000 | ## (with the correct destination port). |
| 1001 | ## |
| 1002 | allowExternal: true |
| 1003 | ## @param msgTopologyOperator.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations. |
| 1004 | ## |
| 1005 | allowExternalEgress: true |
Mohammed Naser | 7d1623e | 2024-06-17 09:12:39 -0400 | [diff] [blame] | 1006 | ## @param msgTopologyOperator.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 1007 | ## e.g: |
| 1008 | ## extraIngress: |
| 1009 | ## - ports: |
| 1010 | ## - port: 1234 |
| 1011 | ## from: |
| 1012 | ## - podSelector: |
| 1013 | ## - matchLabels: |
| 1014 | ## - role: frontend |
| 1015 | ## - podSelector: |
| 1016 | ## - matchExpressions: |
| 1017 | ## - key: role |
| 1018 | ## operator: In |
| 1019 | ## values: |
| 1020 | ## - frontend |
| 1021 | extraIngress: [] |
| 1022 | ## @param msgTopologyOperator.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy |
| 1023 | ## e.g: |
| 1024 | ## extraEgress: |
| 1025 | ## - ports: |
| 1026 | ## - port: 1234 |
| 1027 | ## to: |
| 1028 | ## - podSelector: |
| 1029 | ## - matchLabels: |
| 1030 | ## - role: frontend |
| 1031 | ## - podSelector: |
| 1032 | ## - matchExpressions: |
| 1033 | ## - key: role |
| 1034 | ## operator: In |
| 1035 | ## values: |
| 1036 | ## - frontend |
| 1037 | ## |
| 1038 | extraEgress: [] |
| 1039 | ## @param msgTopologyOperator.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces |
| 1040 | ## @param msgTopologyOperator.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces |
| 1041 | ## |
| 1042 | ingressNSMatchLabels: {} |
| 1043 | ingressNSPodMatchLabels: {} |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 1044 | ## RBAC configuration |
| 1045 | ## |
| 1046 | rbac: |
| 1047 | ## @param msgTopologyOperator.rbac.create Specifies whether RBAC resources should be created |
| 1048 | ## |
| 1049 | create: true |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 1050 | ## ClusterRole parameters |
| 1051 | ## |
| 1052 | clusterRole: |
| 1053 | ## @param msgTopologyOperator.rbac.clusterRole.customRules Define custom access rules for the ClusterRole |
| 1054 | ## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole |
| 1055 | ## e.g: |
| 1056 | ## customRules: |
| 1057 | ## - apiGroups: A list of API groups (e.g., [""], ["apps"]). |
| 1058 | ## - resources: A list of resource names (e.g., ["configmaps", "pods"]). |
| 1059 | ## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]). |
| 1060 | customRules: [] |
| 1061 | ## @param msgTopologyOperator.rbac.clusterRole.extraRules Define extra access rules for the ClusterRole. This has no effect if customerRules is a non-empty array. |
| 1062 | ## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole |
| 1063 | ## e.g: |
| 1064 | ## extraRules: |
| 1065 | ## - apiGroups: A list of API groups (e.g., [""], ["apps"]). |
| 1066 | ## - resources: A list of resource names (e.g., ["configmaps", "pods"]). |
| 1067 | ## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]). |
| 1068 | extraRules: [] |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 1069 | ## ServiceAccount configuration |
| 1070 | ## |
| 1071 | serviceAccount: |
| 1072 | ## @param msgTopologyOperator.serviceAccount.create Specifies whether a ServiceAccount should be created |
| 1073 | ## |
| 1074 | create: true |
| 1075 | ## @param msgTopologyOperator.serviceAccount.name The name of the ServiceAccount to use. |
| 1076 | ## If not set and create is true, a name is generated using the common.names.fullname template |
| 1077 | ## |
| 1078 | name: "" |
| 1079 | ## @param msgTopologyOperator.serviceAccount.annotations Add annotations |
| 1080 | ## |
| 1081 | annotations: {} |
| 1082 | ## @param msgTopologyOperator.serviceAccount.automountServiceAccountToken Automount API credentials for a service account. |
| 1083 | ## |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 1084 | automountServiceAccountToken: false |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 1085 | ## @section RabbitMQ Messaging Topology Operator parameters |
| 1086 | ## |
| 1087 | metrics: |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 1088 | ## Metrics service parameters |
| 1089 | ## |
| 1090 | service: |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 1091 | ## @param msgTopologyOperator.metrics.service.enabled Create a service for accessing the metrics endpoint |
| 1092 | ## |
| 1093 | enabled: false |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 1094 | ## @param msgTopologyOperator.metrics.service.type RabbitMQ Cluster Operator metrics service type |
| 1095 | ## |
| 1096 | type: ClusterIP |
| 1097 | ## @param msgTopologyOperator.metrics.service.ports.http RabbitMQ Cluster Operator metrics service HTTP port |
| 1098 | ## |
| 1099 | ports: |
| 1100 | http: 80 |
| 1101 | ## Node ports to expose |
| 1102 | ## @param msgTopologyOperator.metrics.service.nodePorts.http Node port for HTTP |
| 1103 | ## NOTE: choose port between <30000-32767> |
| 1104 | ## |
| 1105 | nodePorts: |
| 1106 | http: "" |
| 1107 | ## @param msgTopologyOperator.metrics.service.clusterIP RabbitMQ Cluster Operator metrics service Cluster IP |
| 1108 | ## e.g.: |
| 1109 | ## clusterIP: None |
| 1110 | ## |
| 1111 | clusterIP: "" |
| 1112 | ## @param msgTopologyOperator.metrics.service.extraPorts Extra ports to expose (normally used with the `sidecar` value) |
| 1113 | ## |
| 1114 | extraPorts: [] |
| 1115 | ## @param msgTopologyOperator.metrics.service.loadBalancerIP RabbitMQ Cluster Operator metrics service Load Balancer IP |
| 1116 | ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-loadbalancer |
| 1117 | ## |
| 1118 | loadBalancerIP: "" |
| 1119 | ## @param msgTopologyOperator.metrics.service.loadBalancerSourceRanges RabbitMQ Cluster Operator metrics service Load Balancer sources |
| 1120 | ## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service |
| 1121 | ## e.g: |
| 1122 | ## loadBalancerSourceRanges: |
| 1123 | ## - 10.10.10.0/24 |
| 1124 | ## |
| 1125 | loadBalancerSourceRanges: [] |
| 1126 | ## @param msgTopologyOperator.metrics.service.externalTrafficPolicy RabbitMQ Cluster Operator metrics service external traffic policy |
| 1127 | ## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip |
| 1128 | ## |
| 1129 | externalTrafficPolicy: Cluster |
| 1130 | ## @param msgTopologyOperator.metrics.service.annotations [object] Additional custom annotations for RabbitMQ Cluster Operator metrics service |
| 1131 | ## |
| 1132 | annotations: |
| 1133 | prometheus.io/scrape: "true" |
| 1134 | prometheus.io/port: "{{ .Values.msgTopologyOperator.metrics.service.ports.http }}" |
| 1135 | ## @param msgTopologyOperator.metrics.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP" |
| 1136 | ## If "ClientIP", consecutive client requests will be directed to the same Pod |
| 1137 | ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies |
| 1138 | ## |
| 1139 | sessionAffinity: None |
| 1140 | ## @param msgTopologyOperator.metrics.service.sessionAffinityConfig Additional settings for the sessionAffinity |
| 1141 | ## sessionAffinityConfig: |
| 1142 | ## clientIP: |
| 1143 | ## timeoutSeconds: 300 |
| 1144 | ## |
| 1145 | sessionAffinityConfig: {} |
| 1146 | serviceMonitor: |
| 1147 | ## @param msgTopologyOperator.metrics.serviceMonitor.enabled Specify if a servicemonitor will be deployed for prometheus-operator |
| 1148 | ## |
| 1149 | enabled: false |
| 1150 | ## @param msgTopologyOperator.metrics.serviceMonitor.namespace Namespace which Prometheus is running in |
| 1151 | ## e.g: |
| 1152 | ## namespace: monitoring |
| 1153 | ## |
| 1154 | namespace: "" |
| 1155 | ## @param msgTopologyOperator.metrics.serviceMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator |
| 1156 | ## |
| 1157 | jobLabel: app.kubernetes.io/name |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 1158 | ## DEPRECATED: Use msgTopologyOperator.metrics.serviceMonitor.labels instead. |
| 1159 | ## This value will be removed in a future release |
| 1160 | ## additionalLabels: {} |
| 1161 | |
| 1162 | ## @param msgTopologyOperator.metrics.serviceMonitor.selector Prometheus instance selector labels |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 1163 | ## ref: https://github.com/bitnami/charts/tree/main/bitnami/prometheus-operator#prometheus-configuration |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 1164 | ## e.g: |
| 1165 | ## selector: |
| 1166 | ## prometheus: my-prometheus |
| 1167 | ## |
| 1168 | selector: {} |
| 1169 | ## @param msgTopologyOperator.metrics.serviceMonitor.honorLabels Honor metrics labels |
| 1170 | ## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint |
| 1171 | ## |
| 1172 | honorLabels: false |
| 1173 | ## @param msgTopologyOperator.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended |
| 1174 | ## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint |
| 1175 | ## e.g: |
| 1176 | ## scrapeTimeout: 10s |
| 1177 | ## |
| 1178 | scrapeTimeout: "" |
| 1179 | ## @param msgTopologyOperator.metrics.serviceMonitor.interval Scrape interval. If not set, the Prometheus default scrape interval is used |
| 1180 | ## |
| 1181 | interval: "" |
| 1182 | ## @param msgTopologyOperator.metrics.serviceMonitor.metricRelabelings Specify additional relabeling of metrics |
| 1183 | ## |
| 1184 | metricRelabelings: [] |
| 1185 | ## @param msgTopologyOperator.metrics.serviceMonitor.relabelings Specify general relabeling |
| 1186 | ## |
| 1187 | relabelings: [] |
| 1188 | ## @param msgTopologyOperator.metrics.serviceMonitor.labels Extra labels for the ServiceMonitor |
| 1189 | ## |
| 1190 | labels: {} |
Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 1191 | podMonitor: |
| 1192 | ## @param msgTopologyOperator.metrics.podMonitor.enabled Create PodMonitor Resource for scraping metrics using PrometheusOperator |
| 1193 | ## |
| 1194 | enabled: false |
| 1195 | ## @param msgTopologyOperator.metrics.podMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator |
| 1196 | ## |
| 1197 | jobLabel: app.kubernetes.io/name |
| 1198 | ## @param msgTopologyOperator.metrics.podMonitor.namespace Namespace which Prometheus is running in |
| 1199 | ## |
| 1200 | namespace: "" |
| 1201 | ## @param msgTopologyOperator.metrics.podMonitor.honorLabels Honor metrics labels |
| 1202 | ## |
| 1203 | honorLabels: false |
| 1204 | ## @param msgTopologyOperator.metrics.podMonitor.selector Prometheus instance selector labels |
| 1205 | ## ref: https://github.com/bitnami/charts/tree/main/bitnami/prometheus-operator#prometheus-configuration |
| 1206 | selector: {} |
| 1207 | ## @param msgTopologyOperator.metrics.podMonitor.interval Specify the interval at which metrics should be scraped |
| 1208 | ## |
| 1209 | interval: 30s |
| 1210 | ## @param msgTopologyOperator.metrics.podMonitor.scrapeTimeout Specify the timeout after which the scrape is ended |
| 1211 | ## |
| 1212 | scrapeTimeout: 30s |
| 1213 | ## @param msgTopologyOperator.metrics.podMonitor.additionalLabels [object] Additional labels that can be used so PodMonitors will be discovered by Prometheus |
| 1214 | ## |
| 1215 | additionalLabels: {} |
| 1216 | ## @param msgTopologyOperator.metrics.podMonitor.relabelings Specify general relabeling |
| 1217 | ## |
| 1218 | relabelings: [] |
| 1219 | ## @param msgTopologyOperator.metrics.podMonitor.metricRelabelings Specify additional relabeling of metrics |
| 1220 | ## |
| 1221 | metricRelabelings: [] |
Mohammed Naser | 9ad0d46 | 2023-01-15 20:36:37 -0500 | [diff] [blame] | 1222 | ## @section cert-manager parameters |
| 1223 | ## |
| 1224 | |
| 1225 | ## @param useCertManager Deploy cert-manager objects (Issuer and Certificate) for webhooks |
| 1226 | ## |
| 1227 | useCertManager: false |