blob: c1c0b04ea8561d89505d643fa507550b7d68021b [file] [log] [blame]
Mohammed Naser7d1623e2024-06-17 09:12:39 -04001# Copyright Broadcom, Inc. All Rights Reserved.
Mohammed Naser65cda132024-05-02 14:34:08 -04002# SPDX-License-Identifier: APACHE-2.0
3
Mohammed Naser9ad0d462023-01-15 20:36:37 -05004## @section Global parameters
5## Global Docker image parameters
6## Please, note that this will override the image parameters, including dependencies, configured to use the global value
7## Current available global Docker image parameters: imageRegistry, imagePullSecrets and storageClass
8##
9
10## @param global.imageRegistry Global Docker image registry
11## @param global.imagePullSecrets Global Docker registry secret names as an array
12## @param global.storageClass Global StorageClass for Persistent Volume(s)
13##
14global:
15 imageRegistry: ""
16 ## E.g.
17 ## imagePullSecrets:
18 ## - myRegistryKeySecretName
19 ##
20 imagePullSecrets: []
21 storageClass: ""
Mohammed Naser65cda132024-05-02 14:34:08 -040022 ## Compatibility adaptations for Kubernetes platforms
23 ##
24 compatibility:
25 ## Compatibility adaptations for Openshift
26 ##
27 openshift:
28 ## @param global.compatibility.openshift.adaptSecurityContext Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation)
29 ##
30 adaptSecurityContext: auto
Mohammed Naser9ad0d462023-01-15 20:36:37 -050031## @section Common parameters
32##
33
34## @param kubeVersion Override Kubernetes version
35##
36kubeVersion: ""
37## @param nameOverride String to partially override common.names.fullname
38##
39nameOverride: ""
40## @param fullnameOverride String to fully override common.names.fullname
41##
42fullnameOverride: ""
43## @param commonLabels Labels to add to all deployed objects
44##
45commonLabels: {}
46## @param commonAnnotations Annotations to add to all deployed objects
47##
48commonAnnotations: {}
49## @param clusterDomain Kubernetes cluster domain name
50##
51clusterDomain: cluster.local
52## @param extraDeploy Array of extra objects to deploy with the release
53##
54extraDeploy: []
55## Enable diagnostic mode in the deployment(s)/statefulset(s)
56##
57diagnosticMode:
58 ## @param diagnosticMode.enabled Enable diagnostic mode (all probes will be disabled)
59 ##
60 enabled: false
Mohammed Naser9ad0d462023-01-15 20:36:37 -050061## @section RabbitMQ Cluster Operator Parameters
62##
63
64## Bitnami RabbitMQ Image
65## ref: https://hub.docker.com/r/bitnami/rabbitmq/tags/
Mohammed Naser65cda132024-05-02 14:34:08 -040066## @param rabbitmqImage.registry [default: REGISTRY_NAME] RabbitMQ Image registry
67## @param rabbitmqImage.repository [default: REPOSITORY_NAME/rabbitmq] RabbitMQ Image repository
68## @skip rabbitmqImage.tag RabbitMQ Image tag (immutable tags are recommended)
69## @param rabbitmqImage.digest RabbitMQ image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
Mohammed Naser9ad0d462023-01-15 20:36:37 -050070## @param rabbitmqImage.pullSecrets RabbitMQ Image pull secrets
71##
72rabbitmqImage:
73 registry: docker.io
74 repository: bitnami/rabbitmq
Mohammed Naser7d1623e2024-06-17 09:12:39 -040075 tag: 3.13.3-debian-12-r0
Mohammed Naser65cda132024-05-02 14:34:08 -040076 digest: ""
Mohammed Naser9ad0d462023-01-15 20:36:37 -050077 ## Optionally specify an array of imagePullSecrets.
78 ## Secrets must be manually created in the namespace.
79 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-rabbitmqImage-private-registry/
80 ## e.g:
81 ## pullSecrets:
82 ## - myRegistryKeySecretName
83 ##
84 pullSecrets: []
Mohammed Naser9ad0d462023-01-15 20:36:37 -050085## Bitnami RabbitMQ Default User Credential Updater Image
86## ref: https://hub.docker.com/r/bitnami/rmq-default-credential-updater/tags/
Mohammed Naser65cda132024-05-02 14:34:08 -040087## @param credentialUpdaterImage.registry [default: REGISTRY_NAME] RabbitMQ Default User Credential Updater image registry
88## @param credentialUpdaterImage.repository [default: REPOSITORY_NAME/rmq-default-credential-updater] RabbitMQ Default User Credential Updater image repository
89## @skip credentialUpdaterImage.tag RabbitMQ Default User Credential Updater image tag (immutable tags are recommended)
90## @param credentialUpdaterImage.digest RabbitMQ Default User Credential Updater image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
91## @param credentialUpdaterImage.pullSecrets RabbitMQ Default User Credential Updater image pull secrets
Mohammed Naser9ad0d462023-01-15 20:36:37 -050092##
93credentialUpdaterImage:
94 registry: docker.io
95 repository: bitnami/rmq-default-credential-updater
Mohammed Naser7d1623e2024-06-17 09:12:39 -040096 tag: 1.0.4-debian-12-r21
Mohammed Naser65cda132024-05-02 14:34:08 -040097 digest: ""
Mohammed Naser9ad0d462023-01-15 20:36:37 -050098 ## Optionally specify an array of imagePullSecrets.
99 ## Secrets must be manually created in the namespace.
100 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-credentialUpdaterImage-private-registry/
101 ## e.g:
102 ## pullSecrets:
103 ## - myRegistryKeySecretName
104 ##
105 pullSecrets: []
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500106clusterOperator:
107 ## Bitnami RabbitMQ Cluster Operator image
108 ## ref: https://hub.docker.com/r/bitnami/rabbitmq-cluster-operator/tags/
Mohammed Naser65cda132024-05-02 14:34:08 -0400109 ## @param clusterOperator.image.registry [default: REGISTRY_NAME] RabbitMQ Cluster Operator image registry
110 ## @param clusterOperator.image.repository [default: REPOSITORY_NAME/rabbitmq-cluster-operator] RabbitMQ Cluster Operator image repository
111 ## @skip clusterOperator.image.tag RabbitMQ Cluster Operator image tag (immutable tags are recommended)
112 ## @param clusterOperator.image.digest RabbitMQ Cluster Operator image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500113 ## @param clusterOperator.image.pullPolicy RabbitMQ Cluster Operator image pull policy
114 ## @param clusterOperator.image.pullSecrets RabbitMQ Cluster Operator image pull secrets
115 ##
116 image:
117 registry: docker.io
118 repository: bitnami/rabbitmq-cluster-operator
Mohammed Naser7d1623e2024-06-17 09:12:39 -0400119 tag: 2.9.0-debian-12-r2
Mohammed Naser65cda132024-05-02 14:34:08 -0400120 digest: ""
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500121 ## Specify a imagePullPolicy
122 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
Mohammed Naser65cda132024-05-02 14:34:08 -0400123 ## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500124 ##
125 pullPolicy: IfNotPresent
126 ## Optionally specify an array of imagePullSecrets.
127 ## Secrets must be manually created in the namespace.
128 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
129 ## e.g:
130 ## pullSecrets:
131 ## - myRegistryKeySecretName
132 ##
133 pullSecrets: []
Mohammed Naser65cda132024-05-02 14:34:08 -0400134 ## @param clusterOperator.revisionHistoryLimit sets number of replicaset to keep in k8s
135 ##
136 revisionHistoryLimit: 10
137 ## @param clusterOperator.watchAllNamespaces Watch for resources in all namespaces
138 ##
139 watchAllNamespaces: true
140 ## @param clusterOperator.watchNamespaces [array] Watch for resources in the given namespaces (ignored if watchAllNamespaces=true)
141 ##
142 watchNamespaces: []
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500143 ## @param clusterOperator.replicaCount Number of RabbitMQ Cluster Operator replicas to deploy
144 ##
145 replicaCount: 1
146 ## @param clusterOperator.schedulerName Alternative scheduler
147 ##
148 schedulerName: ""
149 ## @param clusterOperator.topologySpreadConstraints Topology Spread Constraints for pod assignment
150 ## https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
151 ## The value is evaluated as a template
152 ##
153 topologySpreadConstraints: []
154 ## @param clusterOperator.terminationGracePeriodSeconds In seconds, time the given to the %%MAIN_CONTAINER_NAME%% pod needs to terminate gracefully
155 ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods
156 ##
157 terminationGracePeriodSeconds: ""
158 ## Configure extra options for RabbitMQ Cluster Operator containers' liveness and readiness probes
159 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes
160 ## @param clusterOperator.livenessProbe.enabled Enable livenessProbe on RabbitMQ Cluster Operator nodes
161 ## @param clusterOperator.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
162 ## @param clusterOperator.livenessProbe.periodSeconds Period seconds for livenessProbe
163 ## @param clusterOperator.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
164 ## @param clusterOperator.livenessProbe.failureThreshold Failure threshold for livenessProbe
165 ## @param clusterOperator.livenessProbe.successThreshold Success threshold for livenessProbe
166 ##
167 livenessProbe:
168 enabled: true
169 initialDelaySeconds: 5
170 periodSeconds: 30
171 timeoutSeconds: 5
172 successThreshold: 1
173 failureThreshold: 5
174 ## @param clusterOperator.readinessProbe.enabled Enable readinessProbe on RabbitMQ Cluster Operator nodes
175 ## @param clusterOperator.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
176 ## @param clusterOperator.readinessProbe.periodSeconds Period seconds for readinessProbe
177 ## @param clusterOperator.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
178 ## @param clusterOperator.readinessProbe.failureThreshold Failure threshold for readinessProbe
179 ## @param clusterOperator.readinessProbe.successThreshold Success threshold for readinessProbe
180 ##
181 readinessProbe:
182 enabled: true
183 initialDelaySeconds: 5
184 periodSeconds: 30
185 timeoutSeconds: 5
186 successThreshold: 1
187 failureThreshold: 5
188 ## @param clusterOperator.startupProbe.enabled Enable startupProbe on RabbitMQ Cluster Operator nodes
189 ## @param clusterOperator.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
190 ## @param clusterOperator.startupProbe.periodSeconds Period seconds for startupProbe
191 ## @param clusterOperator.startupProbe.timeoutSeconds Timeout seconds for startupProbe
192 ## @param clusterOperator.startupProbe.failureThreshold Failure threshold for startupProbe
193 ## @param clusterOperator.startupProbe.successThreshold Success threshold for startupProbe
194 ##
195 startupProbe:
196 enabled: false
197 initialDelaySeconds: 5
198 periodSeconds: 30
199 timeoutSeconds: 5
200 successThreshold: 1
201 failureThreshold: 5
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500202 ## @param clusterOperator.customLivenessProbe Custom livenessProbe that overrides the default one
203 ##
204 customLivenessProbe: {}
205 ## @param clusterOperator.customReadinessProbe Custom readinessProbe that overrides the default one
206 ##
207 customReadinessProbe: {}
208 ## @param clusterOperator.customStartupProbe Custom startupProbe that overrides the default one
209 ##
210 customStartupProbe: {}
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500211 ## RabbitMQ Cluster Operator resource requests and limits
Mohammed Naser65cda132024-05-02 14:34:08 -0400212 ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
213 ## @param clusterOperator.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if clusterOperator.resources is set (clusterOperator.resources is recommended for production).
214 ## More information: https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500215 ##
Mohammed Naser65cda132024-05-02 14:34:08 -0400216 resourcesPreset: "nano"
217 ## @param clusterOperator.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
218 ## Example:
219 ## resources:
220 ## requests:
221 ## cpu: 2
222 ## memory: 512Mi
223 ## limits:
224 ## cpu: 3
225 ## memory: 1024Mi
226 ##
227 resources: {}
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500228 ## Configure Pods Security Context
229 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
230 ## @param clusterOperator.podSecurityContext.enabled Enabled RabbitMQ Cluster Operator pods' Security Context
Mohammed Naser65cda132024-05-02 14:34:08 -0400231 ## @param clusterOperator.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy
232 ## @param clusterOperator.podSecurityContext.sysctls Set kernel settings using the sysctl interface
233 ## @param clusterOperator.podSecurityContext.supplementalGroups Set filesystem extra groups
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500234 ## @param clusterOperator.podSecurityContext.fsGroup Set RabbitMQ Cluster Operator pod's Security Context fsGroup
235 ##
236 podSecurityContext:
237 enabled: true
Mohammed Naser65cda132024-05-02 14:34:08 -0400238 fsGroupChangePolicy: Always
239 sysctls: []
240 supplementalGroups: []
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500241 fsGroup: 1001
242 ## Configure Container Security Context
243 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
Mohammed Naser65cda132024-05-02 14:34:08 -0400244 ## @param clusterOperator.containerSecurityContext.enabled Enabled containers' Security Context
245 ## @param clusterOperator.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
246 ## @param clusterOperator.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
247 ## @param clusterOperator.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
248 ## @param clusterOperator.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
249 ## @param clusterOperator.containerSecurityContext.privileged Set container's Security Context privileged
250 ## @param clusterOperator.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
251 ## @param clusterOperator.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
252 ## @param clusterOperator.containerSecurityContext.capabilities.drop List of capabilities to be dropped
253 ## @param clusterOperator.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500254 ##
255 containerSecurityContext:
256 enabled: true
Mohammed Naser65cda132024-05-02 14:34:08 -0400257 seLinuxOptions: null
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500258 runAsUser: 1001
Mohammed Naser65cda132024-05-02 14:34:08 -0400259 runAsGroup: 1001
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500260 runAsNonRoot: true
Mohammed Naser65cda132024-05-02 14:34:08 -0400261 privileged: false
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500262 readOnlyRootFilesystem: true
Mohammed Naser65cda132024-05-02 14:34:08 -0400263 allowPrivilegeEscalation: false
264 capabilities:
265 drop: ["ALL"]
266 seccompProfile:
267 type: "RuntimeDefault"
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500268 ## @param clusterOperator.command Override default container command (useful when using custom images)
269 ##
270 command: []
271 ## @param clusterOperator.args Override default container args (useful when using custom images)
272 ##
273 args: []
Mohammed Naser65cda132024-05-02 14:34:08 -0400274 ## @param clusterOperator.automountServiceAccountToken Mount Service Account token in pod
275 ##
276 automountServiceAccountToken: true
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500277 ## @param clusterOperator.hostAliases RabbitMQ Cluster Operator pods host aliases
278 ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
279 ##
280 hostAliases: []
281 ## @param clusterOperator.podLabels Extra labels for RabbitMQ Cluster Operator pods
282 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
283 ##
284 podLabels: {}
285 ## @param clusterOperator.podAnnotations Annotations for RabbitMQ Cluster Operator pods
286 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
287 ##
288 podAnnotations: {}
289 ## @param clusterOperator.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
290 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
291 ##
292 podAffinityPreset: ""
293 ## @param clusterOperator.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
294 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
295 ##
296 podAntiAffinityPreset: soft
297 ## Node affinity preset
298 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
299 ##
300 nodeAffinityPreset:
301 ## @param clusterOperator.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
302 ##
303 type: ""
304 ## @param clusterOperator.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set
305 ##
306 key: ""
307 ## @param clusterOperator.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set
308 ## E.g.
309 ## values:
310 ## - e2e-az1
311 ## - e2e-az2
312 ##
313 values: []
314 ## @param clusterOperator.affinity Affinity for RabbitMQ Cluster Operator pods assignment
315 ## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
316 ## NOTE: `podAffinityPreset`, `podAntiAffinityPreset`, and `nodeAffinityPreset` will be ignored when it's set
317 ##
318 affinity: {}
319 ## @param clusterOperator.nodeSelector Node labels for RabbitMQ Cluster Operator pods assignment
Mohammed Naser65cda132024-05-02 14:34:08 -0400320 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500321 ##
322 nodeSelector: {}
323 ## @param clusterOperator.tolerations Tolerations for RabbitMQ Cluster Operator pods assignment
324 ## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
325 ##
326 tolerations: []
327 ## @param clusterOperator.updateStrategy.type RabbitMQ Cluster Operator statefulset strategy type
328 ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies
329 ##
330 updateStrategy:
331 ## StrategyType
332 ## Can be set to RollingUpdate or OnDelete
333 ##
334 type: RollingUpdate
335 ## @param clusterOperator.priorityClassName RabbitMQ Cluster Operator pods' priorityClassName
336 ##
337 priorityClassName: ""
338 ## @param clusterOperator.lifecycleHooks for the RabbitMQ Cluster Operator container(s) to automate configuration before or after startup
339 ##
340 lifecycleHooks: {}
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500341 ## @param clusterOperator.containerPorts.metrics RabbitMQ Cluster Operator container port (used for metrics)
342 ##
343 containerPorts:
344 metrics: 9782
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500345 ## @param clusterOperator.extraEnvVars Array with extra environment variables to add to RabbitMQ Cluster Operator nodes
346 ## e.g:
347 ## extraEnvVars:
348 ## - name: FOO
349 ## value: "bar"
350 ##
351 extraEnvVars: []
352 ## @param clusterOperator.extraEnvVarsCM Name of existing ConfigMap containing extra env vars for RabbitMQ Cluster Operator nodes
353 ##
354 extraEnvVarsCM: ""
355 ## @param clusterOperator.extraEnvVarsSecret Name of existing Secret containing extra env vars for RabbitMQ Cluster Operator nodes
356 ##
357 extraEnvVarsSecret: ""
358 ## @param clusterOperator.extraVolumes Optionally specify extra list of additional volumes for the RabbitMQ Cluster Operator pod(s)
359 ##
360 extraVolumes: []
361 ## @param clusterOperator.extraVolumeMounts Optionally specify extra list of additional volumeMounts for the RabbitMQ Cluster Operator container(s)
362 ##
363 extraVolumeMounts: []
364 ## @param clusterOperator.sidecars Add additional sidecar containers to the RabbitMQ Cluster Operator pod(s)
365 ## e.g:
366 ## sidecars:
367 ## - name: your-image-name
368 ## image: your-image
369 ## imagePullPolicy: Always
370 ## ports:
371 ## - name: portname
372 ## containerPort: 1234
373 ##
374 sidecars: []
375 ## @param clusterOperator.initContainers Add additional init containers to the RabbitMQ Cluster Operator pod(s)
376 ## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
377 ## e.g:
378 ## initContainers:
379 ## - name: your-image-name
380 ## image: your-image
381 ## imagePullPolicy: Always
382 ## command: ['sh', '-c', 'echo "hello world"']
383 ##
384 initContainers: []
Mohammed Naser65cda132024-05-02 14:34:08 -0400385 ## Network Policies
386 ## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
387 ##
388 networkPolicy:
389 ## @param clusterOperator.networkPolicy.enabled Specifies whether a NetworkPolicy should be created
390 ##
391 enabled: true
392 ## @param clusterOperator.networkPolicy.kubeAPIServerPorts [array] List of possible endpoints to kube-apiserver (limit to your cluster settings to increase security)
393 ##
394 kubeAPIServerPorts: [443, 6443, 8443]
395 ## @param clusterOperator.networkPolicy.allowExternal Don't require injector label for connections
396 ## The Policy model to apply. When set to false, only pods with the correct
397 ## injector label will have network access to the ports injector is listening
398 ## on. When true, injector will accept connections from any source
399 ## (with the correct destination port).
400 ##
401 allowExternal: true
402 ## @param clusterOperator.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations.
403 ##
404 allowExternalEgress: true
Mohammed Naser7d1623e2024-06-17 09:12:39 -0400405 ## @param clusterOperator.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy
Mohammed Naser65cda132024-05-02 14:34:08 -0400406 ## e.g:
407 ## extraIngress:
408 ## - ports:
409 ## - port: 1234
410 ## from:
411 ## - podSelector:
412 ## - matchLabels:
413 ## - role: frontend
414 ## - podSelector:
415 ## - matchExpressions:
416 ## - key: role
417 ## operator: In
418 ## values:
419 ## - frontend
420 extraIngress: []
421 ## @param clusterOperator.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy
422 ## e.g:
423 ## extraEgress:
424 ## - ports:
425 ## - port: 1234
426 ## to:
427 ## - podSelector:
428 ## - matchLabels:
429 ## - role: frontend
430 ## - podSelector:
431 ## - matchExpressions:
432 ## - key: role
433 ## operator: In
434 ## values:
435 ## - frontend
436 ##
437 extraEgress: []
438 ## @param clusterOperator.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces
439 ## @param clusterOperator.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces
440 ##
441 ingressNSMatchLabels: {}
442 ingressNSPodMatchLabels: {}
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500443 ## RBAC configuration
444 ##
445 rbac:
446 ## @param clusterOperator.rbac.create Specifies whether RBAC resources should be created
447 ##
448 create: true
Mohammed Naser65cda132024-05-02 14:34:08 -0400449 ## ClusterRole parameters
450 ##
451 clusterRole:
452 ## @param clusterOperator.rbac.clusterRole.customRules Define custom access rules for the ClusterRole
453 ## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole
454 ## e.g:
455 ## customRules:
456 ## - apiGroups: A list of API groups (e.g., [""], ["apps"]).
457 ## - resources: A list of resource names (e.g., ["configmaps", "pods"]).
458 ## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]).
459 customRules: []
460 ## @param clusterOperator.rbac.clusterRole.extraRules Define extra access rules for the ClusterRole. This has no effect if customerRules is a non-empty array.
461 ## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole
462 ## e.g:
463 ## extraRules:
464 ## - apiGroups: A list of API groups (e.g., [""], ["apps"]).
465 ## - resources: A list of resource names (e.g., ["configmaps", "pods"]).
466 ## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]).
467 extraRules: []
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500468 ## ServiceAccount configuration
469 ##
470 serviceAccount:
471 ## @param clusterOperator.serviceAccount.create Specifies whether a ServiceAccount should be created
472 ##
473 create: true
474 ## @param clusterOperator.serviceAccount.name The name of the ServiceAccount to use.
475 ## If not set and create is true, a name is generated using the common.names.fullname template
476 ##
477 name: ""
478 ## @param clusterOperator.serviceAccount.annotations Add annotations
479 ##
480 annotations: {}
481 ## @param clusterOperator.serviceAccount.automountServiceAccountToken Automount API credentials for a service account.
482 ##
Mohammed Naser65cda132024-05-02 14:34:08 -0400483 automountServiceAccountToken: false
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500484 ## @section RabbitMQ Cluster Operator Metrics parameters
485 ##
486 metrics:
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500487 ## Metrics service parameters
488 ##
489 service:
Mohammed Naser65cda132024-05-02 14:34:08 -0400490 ## @param clusterOperator.metrics.service.enabled Create a service for accessing the metrics endpoint
491 ##
492 enabled: false
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500493 ## @param clusterOperator.metrics.service.type RabbitMQ Cluster Operator metrics service type
494 ##
495 type: ClusterIP
496 ## @param clusterOperator.metrics.service.ports.http RabbitMQ Cluster Operator metrics service HTTP port
497 ##
498 ports:
499 http: 80
500 ## Node ports to expose
501 ## @param clusterOperator.metrics.service.nodePorts.http Node port for HTTP
502 ## NOTE: choose port between <30000-32767>
503 ##
504 nodePorts:
505 http: ""
506 ## @param clusterOperator.metrics.service.clusterIP RabbitMQ Cluster Operator metrics service Cluster IP
507 ## e.g.:
508 ## clusterIP: None
509 ##
510 clusterIP: ""
511 ## @param clusterOperator.metrics.service.extraPorts Extra ports to expose (normally used with the `sidecar` value)
512 ##
513 extraPorts: []
514 ## @param clusterOperator.metrics.service.loadBalancerIP RabbitMQ Cluster Operator metrics service Load Balancer IP
515 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-loadbalancer
516 ##
517 loadBalancerIP: ""
518 ## @param clusterOperator.metrics.service.loadBalancerSourceRanges RabbitMQ Cluster Operator metrics service Load Balancer sources
519 ## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
520 ## e.g:
521 ## loadBalancerSourceRanges:
522 ## - 10.10.10.0/24
523 ##
524 loadBalancerSourceRanges: []
525 ## @param clusterOperator.metrics.service.externalTrafficPolicy RabbitMQ Cluster Operator metrics service external traffic policy
526 ## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
527 ##
528 externalTrafficPolicy: Cluster
529 ## @param clusterOperator.metrics.service.annotations [object] Additional custom annotations for RabbitMQ Cluster Operator metrics service
530 ##
531 annotations:
532 prometheus.io/scrape: "true"
533 prometheus.io/port: "{{ .Values.clusterOperator.metrics.service.ports.http }}"
534 ## @param clusterOperator.metrics.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP"
535 ## If "ClientIP", consecutive client requests will be directed to the same Pod
536 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
537 ##
538 sessionAffinity: None
539 ## @param clusterOperator.metrics.service.sessionAffinityConfig Additional settings for the sessionAffinity
540 ## sessionAffinityConfig:
541 ## clientIP:
542 ## timeoutSeconds: 300
543 ##
544 sessionAffinityConfig: {}
545 serviceMonitor:
546 ## @param clusterOperator.metrics.serviceMonitor.enabled Specify if a servicemonitor will be deployed for prometheus-operator
547 ##
548 enabled: false
549 ## @param clusterOperator.metrics.serviceMonitor.namespace Namespace which Prometheus is running in
550 ## e.g:
551 ## namespace: monitoring
552 ##
553 namespace: ""
554 ## @param clusterOperator.metrics.serviceMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator
555 ##
556 jobLabel: app.kubernetes.io/name
557 ## @param clusterOperator.metrics.serviceMonitor.honorLabels Honor metrics labels
558 ## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint
559 ##
560 honorLabels: false
561 ## @param clusterOperator.metrics.serviceMonitor.selector Prometheus instance selector labels
Mohammed Naser65cda132024-05-02 14:34:08 -0400562 ## ref: https://github.com/bitnami/charts/tree/main/bitnami/prometheus-operator#prometheus-configuration
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500563 ## e.g:
564 ## selector:
565 ## prometheus: my-prometheus
566 ##
567 selector: {}
568 ## @param clusterOperator.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended
569 ## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint
570 ## e.g:
571 ## scrapeTimeout: 10s
572 ##
573 scrapeTimeout: ""
574 ## @param clusterOperator.metrics.serviceMonitor.interval Scrape interval. If not set, the Prometheus default scrape interval is used
575 ##
576 interval: ""
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500577 ## DEPRECATED: Use clusterOperator.metrics.serviceMonitor.labels instead
578 ## This value will be removed in a future release
579 ## additionalLabels: {}
580
581 ## @param clusterOperator.metrics.serviceMonitor.metricRelabelings Specify additional relabeling of metrics
582 ##
583 metricRelabelings: []
584 ## @param clusterOperator.metrics.serviceMonitor.relabelings Specify general relabeling
585 ##
586 relabelings: []
587 ## @param clusterOperator.metrics.serviceMonitor.labels Extra labels for the ServiceMonitor
588 ##
589 labels: {}
Mohammed Naser65cda132024-05-02 14:34:08 -0400590 ## @param clusterOperator.metrics.serviceMonitor.path Define the path used by ServiceMonitor to scrap metrics
591 ## Could be /metrics for aggregated metrics or /metrics/per-object for more details
592 ##
593 path: ""
594 ## @param clusterOperator.metrics.serviceMonitor.params Define the HTTP URL parameters used by ServiceMonitor
595 ##
596 params: {}
597 podMonitor:
598 ## @param clusterOperator.metrics.podMonitor.enabled Create PodMonitor Resource for scraping metrics using PrometheusOperator
599 ##
600 enabled: false
601 ## @param clusterOperator.metrics.podMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator
602 ##
603 jobLabel: app.kubernetes.io/name
604 ## @param clusterOperator.metrics.podMonitor.namespace Namespace which Prometheus is running in
605 ##
606 namespace: ""
607 ## @param clusterOperator.metrics.podMonitor.honorLabels Honor metrics labels
608 ##
609 honorLabels: false
610 ## @param clusterOperator.metrics.podMonitor.selector Prometheus instance selector labels
611 ## ref: https://github.com/bitnami/charts/tree/main/bitnami/prometheus-operator#prometheus-configuration
612 selector: {}
613 ## @param clusterOperator.metrics.podMonitor.interval Specify the interval at which metrics should be scraped
614 ##
615 interval: 30s
616 ## @param clusterOperator.metrics.podMonitor.scrapeTimeout Specify the timeout after which the scrape is ended
617 ##
618 scrapeTimeout: 30s
619 ## @param clusterOperator.metrics.podMonitor.additionalLabels [object] Additional labels that can be used so PodMonitors will be discovered by Prometheus
620 ##
621 additionalLabels: {}
622 ## @param clusterOperator.metrics.podMonitor.path Define HTTP path to scrape for metrics.
623 ##
624 path: ""
625 ## @param clusterOperator.metrics.podMonitor.relabelings Specify general relabeling
626 ##
627 relabelings: []
628 ## @param clusterOperator.metrics.podMonitor.metricRelabelings Specify additional relabeling of metrics
629 ##
630 metricRelabelings: []
631 ## @param clusterOperator.metrics.podMonitor.params Define the HTTP URL parameters used by PodMonitor
632 ##
633 params: {}
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500634## @section RabbitMQ Messaging Topology Operator Parameters
635##
636msgTopologyOperator:
Mohammed Naser65cda132024-05-02 14:34:08 -0400637 ## @param msgTopologyOperator.enabled Deploy RabbitMQ Messaging Topology Operator as part of the installation
638 ##
639 enabled: true
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500640 ## Bitnami RabbitMQ Messaging Topology Operator image
641 ## ref: https://hub.docker.com/r/bitnami/rmq-messaging-topology-operator/tags/
Mohammed Naser65cda132024-05-02 14:34:08 -0400642 ## @param msgTopologyOperator.image.registry [default: REGISTRY_NAME] RabbitMQ Messaging Topology Operator image registry
643 ## @param msgTopologyOperator.image.repository [default: REPOSITORY_NAME/rmq-messaging-topology-operator] RabbitMQ Messaging Topology Operator image repository
644 ## @skip msgTopologyOperator.image.tag RabbitMQ Messaging Topology Operator image tag (immutable tags are recommended)
645 ## @param msgTopologyOperator.image.digest RabbitMQ Messaging Topology Operator image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500646 ## @param msgTopologyOperator.image.pullPolicy RabbitMQ Messaging Topology Operator image pull policy
647 ## @param msgTopologyOperator.image.pullSecrets RabbitMQ Messaging Topology Operator image pull secrets
648 ##
649 image:
650 registry: docker.io
651 repository: bitnami/rmq-messaging-topology-operator
Mohammed Naser7d1623e2024-06-17 09:12:39 -0400652 tag: 1.14.1-debian-12-r2
Mohammed Naser65cda132024-05-02 14:34:08 -0400653 digest: ""
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500654 ## Specify a imagePullPolicy
655 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
Mohammed Naser65cda132024-05-02 14:34:08 -0400656 ## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500657 ##
658 pullPolicy: IfNotPresent
659 ## Optionally specify an array of imagePullSecrets.
660 ## Secrets must be manually created in the namespace.
661 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
662 ## e.g:
663 ## pullSecrets:
664 ## - myRegistryKeySecretName
665 ##
666 pullSecrets: []
Mohammed Naser65cda132024-05-02 14:34:08 -0400667 ## @param msgTopologyOperator.revisionHistoryLimit sets number of replicaset to keep in k8s
668 ##
669 revisionHistoryLimit: 10
670 ## @param msgTopologyOperator.watchAllNamespaces Watch for resources in all namespaces
671 ##
672 watchAllNamespaces: true
673 ## @param msgTopologyOperator.watchNamespaces [array] Watch for resources in the given namespaces ## @param clusterOperator.watchNamespaces [array] Watch for resources in the given namespaces (ignored if watchAllNamespaces=true)
674 ##
675 watchNamespaces: []
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500676 ## @param msgTopologyOperator.replicaCount Number of RabbitMQ Messaging Topology Operator replicas to deploy
677 ##
678 replicaCount: 1
679 ## @param msgTopologyOperator.topologySpreadConstraints Topology Spread Constraints for pod assignment
680 ## https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
681 ## The value is evaluated as a template
682 ##
683 topologySpreadConstraints: []
684 ## @param msgTopologyOperator.schedulerName Alternative scheduler
685 ##
686 schedulerName: ""
687 ## @param msgTopologyOperator.terminationGracePeriodSeconds In seconds, time the given to the %%MAIN_CONTAINER_NAME%% pod needs to terminate gracefully
688 ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods
689 ##
690 terminationGracePeriodSeconds: ""
Mohammed Naser65cda132024-05-02 14:34:08 -0400691 ## @param msgTopologyOperator.hostNetwork Boolean
692 ##
693 hostNetwork: "false"
694 ## @param msgTopologyOperator.dnsPolicy Alternative DNS policy
695 ##
696 dnsPolicy: "ClusterFirst"
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500697 ## Configure extra options for RabbitMQ Messaging Topology Operator containers' liveness and readiness probes
698 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes
699 ## @param msgTopologyOperator.livenessProbe.enabled Enable livenessProbe on RabbitMQ Messaging Topology Operator nodes
700 ## @param msgTopologyOperator.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
701 ## @param msgTopologyOperator.livenessProbe.periodSeconds Period seconds for livenessProbe
702 ## @param msgTopologyOperator.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
703 ## @param msgTopologyOperator.livenessProbe.failureThreshold Failure threshold for livenessProbe
704 ## @param msgTopologyOperator.livenessProbe.successThreshold Success threshold for livenessProbe
705 ##
706 livenessProbe:
707 enabled: true
708 initialDelaySeconds: 5
709 periodSeconds: 30
710 timeoutSeconds: 5
711 successThreshold: 1
712 failureThreshold: 5
713 ## @param msgTopologyOperator.readinessProbe.enabled Enable readinessProbe on RabbitMQ Messaging Topology Operator nodes
714 ## @param msgTopologyOperator.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
715 ## @param msgTopologyOperator.readinessProbe.periodSeconds Period seconds for readinessProbe
716 ## @param msgTopologyOperator.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
717 ## @param msgTopologyOperator.readinessProbe.failureThreshold Failure threshold for readinessProbe
718 ## @param msgTopologyOperator.readinessProbe.successThreshold Success threshold for readinessProbe
719 ##
720 readinessProbe:
721 enabled: true
722 initialDelaySeconds: 5
723 periodSeconds: 30
724 timeoutSeconds: 5
725 successThreshold: 1
726 failureThreshold: 5
727 ## @param msgTopologyOperator.startupProbe.enabled Enable startupProbe on RabbitMQ Messaging Topology Operator nodes
728 ## @param msgTopologyOperator.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
729 ## @param msgTopologyOperator.startupProbe.periodSeconds Period seconds for startupProbe
730 ## @param msgTopologyOperator.startupProbe.timeoutSeconds Timeout seconds for startupProbe
731 ## @param msgTopologyOperator.startupProbe.failureThreshold Failure threshold for startupProbe
732 ## @param msgTopologyOperator.startupProbe.successThreshold Success threshold for startupProbe
733 ##
734 startupProbe:
735 enabled: false
736 initialDelaySeconds: 5
737 periodSeconds: 30
738 timeoutSeconds: 5
739 successThreshold: 1
740 failureThreshold: 5
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500741 ## @param msgTopologyOperator.customLivenessProbe Custom livenessProbe that overrides the default one
742 ##
743 customLivenessProbe: {}
744 ## @param msgTopologyOperator.customReadinessProbe Custom readinessProbe that overrides the default one
745 ##
746 customReadinessProbe: {}
747 ## @param msgTopologyOperator.customStartupProbe Custom startupProbe that overrides the default one
748 ##
749 customStartupProbe: {}
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500750 ## @param msgTopologyOperator.existingWebhookCertSecret name of a secret containing the certificates (use it to avoid certManager creating one)
751 ##
752 existingWebhookCertSecret: ""
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500753 ## @param msgTopologyOperator.existingWebhookCertCABundle PEM-encoded CA Bundle of the existing secret provided in existingWebhookCertSecret (only if useCertManager=false)
754 ##
755 existingWebhookCertCABundle: ""
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500756 ## RabbitMQ Messaging Topology Operator resource requests and limits
Mohammed Naser65cda132024-05-02 14:34:08 -0400757 ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
758 ## @param msgTopologyOperator.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if msgTopologyOperator.resources is set (msgTopologyOperator.resources is recommended for production).
759 ## More information: https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500760 ##
Mohammed Naser65cda132024-05-02 14:34:08 -0400761 resourcesPreset: "nano"
762 ## @param msgTopologyOperator.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
763 ## Example:
764 ## resources:
765 ## requests:
766 ## cpu: 2
767 ## memory: 512Mi
768 ## limits:
769 ## cpu: 3
770 ## memory: 1024Mi
771 ##
772 resources: {}
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500773 ## Configure Pods Security Context
774 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
775 ## @param msgTopologyOperator.podSecurityContext.enabled Enabled RabbitMQ Messaging Topology Operator pods' Security Context
Mohammed Naser65cda132024-05-02 14:34:08 -0400776 ## @param msgTopologyOperator.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy
777 ## @param msgTopologyOperator.podSecurityContext.sysctls Set kernel settings using the sysctl interface
778 ## @param msgTopologyOperator.podSecurityContext.supplementalGroups Set filesystem extra groups
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500779 ## @param msgTopologyOperator.podSecurityContext.fsGroup Set RabbitMQ Messaging Topology Operator pod's Security Context fsGroup
780 ##
781 podSecurityContext:
782 enabled: true
Mohammed Naser65cda132024-05-02 14:34:08 -0400783 fsGroupChangePolicy: Always
784 sysctls: []
785 supplementalGroups: []
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500786 fsGroup: 1001
787 ## Configure Container Security Context
788 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
Mohammed Naser65cda132024-05-02 14:34:08 -0400789 ## @param msgTopologyOperator.containerSecurityContext.enabled Enabled containers' Security Context
790 ## @param msgTopologyOperator.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
791 ## @param msgTopologyOperator.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
792 ## @param msgTopologyOperator.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
793 ## @param msgTopologyOperator.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
794 ## @param msgTopologyOperator.containerSecurityContext.privileged Set container's Security Context privileged
795 ## @param msgTopologyOperator.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
796 ## @param msgTopologyOperator.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
797 ## @param msgTopologyOperator.containerSecurityContext.capabilities.drop List of capabilities to be dropped
798 ## @param msgTopologyOperator.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500799 ##
800 containerSecurityContext:
801 enabled: true
Mohammed Naser65cda132024-05-02 14:34:08 -0400802 seLinuxOptions: null
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500803 runAsUser: 1001
Mohammed Naser65cda132024-05-02 14:34:08 -0400804 runAsGroup: 1001
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500805 runAsNonRoot: true
Mohammed Naser65cda132024-05-02 14:34:08 -0400806 privileged: false
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500807 readOnlyRootFilesystem: true
Mohammed Naser65cda132024-05-02 14:34:08 -0400808 allowPrivilegeEscalation: false
809 capabilities:
810 drop: ["ALL"]
811 seccompProfile:
812 type: "RuntimeDefault"
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500813 ## @param msgTopologyOperator.fullnameOverride String to fully override rmqco.msgTopologyOperator.fullname template
814 ##
815 fullnameOverride: ""
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500816 ## @param msgTopologyOperator.command Override default container command (useful when using custom images)
817 ##
818 command: []
819 ## @param msgTopologyOperator.args Override default container args (useful when using custom images)
820 ##
821 args: []
Mohammed Naser65cda132024-05-02 14:34:08 -0400822 ## @param msgTopologyOperator.automountServiceAccountToken Mount Service Account token in pod
823 ##
824 automountServiceAccountToken: true
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500825 ## @param msgTopologyOperator.hostAliases RabbitMQ Messaging Topology Operator pods host aliases
826 ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
827 ##
828 hostAliases: []
829 ## @param msgTopologyOperator.podLabels Extra labels for RabbitMQ Messaging Topology Operator pods
830 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
831 ##
832 podLabels: {}
833 ## @param msgTopologyOperator.podAnnotations Annotations for RabbitMQ Messaging Topology Operator pods
834 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
835 ##
836 podAnnotations: {}
837 ## @param msgTopologyOperator.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
838 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
839 ##
840 podAffinityPreset: ""
841 ## @param msgTopologyOperator.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
842 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
843 ##
844 podAntiAffinityPreset: soft
845 ## Node affinity preset
846 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
847 ##
848 nodeAffinityPreset:
849 ## @param msgTopologyOperator.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
850 ##
851 type: ""
852 ## @param msgTopologyOperator.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set
853 ##
854 key: ""
855 ## @param msgTopologyOperator.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set
856 ## E.g.
857 ## values:
858 ## - e2e-az1
859 ## - e2e-az2
860 ##
861 values: []
862 ## @param msgTopologyOperator.affinity Affinity for RabbitMQ Messaging Topology Operator pods assignment
863 ## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
864 ## NOTE: `podAffinityPreset`, `podAntiAffinityPreset`, and `nodeAffinityPreset` will be ignored when it's set
865 ##
866 affinity: {}
867 ## @param msgTopologyOperator.nodeSelector Node labels for RabbitMQ Messaging Topology Operator pods assignment
Mohammed Naser65cda132024-05-02 14:34:08 -0400868 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500869 ##
870 nodeSelector: {}
871 ## @param msgTopologyOperator.tolerations Tolerations for RabbitMQ Messaging Topology Operator pods assignment
872 ## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
873 ##
874 tolerations: []
875 ## @param msgTopologyOperator.updateStrategy.type RabbitMQ Messaging Topology Operator statefulset strategy type
876 ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies
877 ##
878 updateStrategy:
879 ## StrategyType
880 ## Can be set to RollingUpdate or OnDelete
881 ##
882 type: RollingUpdate
883 ## @param msgTopologyOperator.priorityClassName RabbitMQ Messaging Topology Operator pods' priorityClassName
884 ##
885 priorityClassName: ""
886 ## @param msgTopologyOperator.lifecycleHooks for the RabbitMQ Messaging Topology Operator container(s) to automate configuration before or after startup
887 ##
888 lifecycleHooks: {}
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500889 ## @param msgTopologyOperator.containerPorts.metrics RabbitMQ Messaging Topology Operator container port (used for metrics)
890 ##
891 containerPorts:
892 metrics: 8080
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500893 ## @param msgTopologyOperator.extraEnvVars Array with extra environment variables to add to RabbitMQ Messaging Topology Operator nodes
894 ## e.g:
895 ## extraEnvVars:
896 ## - name: FOO
897 ## value: "bar"
898 ##
899 extraEnvVars: []
900 ## @param msgTopologyOperator.extraEnvVarsCM Name of existing ConfigMap containing extra env vars for RabbitMQ Messaging Topology Operator nodes
901 ##
902 extraEnvVarsCM: ""
903 ## @param msgTopologyOperator.extraEnvVarsSecret Name of existing Secret containing extra env vars for RabbitMQ Messaging Topology Operator nodes
904 ##
905 extraEnvVarsSecret: ""
906 ## @param msgTopologyOperator.extraVolumes Optionally specify extra list of additional volumes for the RabbitMQ Messaging Topology Operator pod(s)
907 ##
908 extraVolumes: []
909 ## @param msgTopologyOperator.extraVolumeMounts Optionally specify extra list of additional volumeMounts for the RabbitMQ Messaging Topology Operator container(s)
910 ##
911 extraVolumeMounts: []
912 ## @param msgTopologyOperator.sidecars Add additional sidecar containers to the RabbitMQ Messaging Topology Operator pod(s)
913 ## e.g:
914 ## sidecars:
915 ## - name: your-image-name
916 ## image: your-image
917 ## imagePullPolicy: Always
918 ## ports:
919 ## - name: portname
920 ## containerPort: 1234
921 ##
922 sidecars: []
923 ## @param msgTopologyOperator.initContainers Add additional init containers to the RabbitMQ Messaging Topology Operator pod(s)
924 ## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
925 ## e.g:
926 ## initContainers:
927 ## - name: your-image-name
928 ## image: your-image
929 ## imagePullPolicy: Always
930 ## command: ['sh', '-c', 'echo "hello world"']
931 ##
932 initContainers: []
Mohammed Naser9ad0d462023-01-15 20:36:37 -0500933 ## Webhook service parameters
934 ##
935 service:
936 ## @param msgTopologyOperator.service.type RabbitMQ Messaging Topology Operator webhook service type
937 ##
938 type: ClusterIP
939 ## @param msgTopologyOperator.service.ports.webhook RabbitMQ Messaging Topology Operator webhook service HTTP port
940 ##
941 ports:
942 webhook: 443
943 ## Node ports to expose
944 ## @param msgTopologyOperator.service.nodePorts.http Node port for HTTP
945 ## NOTE: choose port between <30000-32767>
946 ##
947 nodePorts:
948 http: ""
949 ## @param msgTopologyOperator.service.clusterIP RabbitMQ Messaging Topology Operator webhook service Cluster IP
950 ## e.g.:
951 ## clusterIP: None
952 ##
953 clusterIP: ""
954 ## @param msgTopologyOperator.service.loadBalancerIP RabbitMQ Messaging Topology Operator webhook service Load Balancer IP
955 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-loadbalancer
956 ##
957 loadBalancerIP: ""
958 ## @param msgTopologyOperator.service.extraPorts Extra ports to expose (normally used with the `sidecar` value)
959 ##
960 extraPorts: []
961 ## @param msgTopologyOperator.service.loadBalancerSourceRanges RabbitMQ Messaging Topology Operator webhook service Load Balancer sources
962 ## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
963 ## e.g:
964 ## loadBalancerSourceRanges:
965 ## - 10.10.10.0/24
966 ##
967 loadBalancerSourceRanges: []
968 ## @param msgTopologyOperator.service.externalTrafficPolicy RabbitMQ Messaging Topology Operator webhook service external traffic policy
969 ## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
970 ##
971 externalTrafficPolicy: Cluster
972 ## @param msgTopologyOperator.service.annotations Additional custom annotations for RabbitMQ Messaging Topology Operator webhook service
973 ##
974 annotations: {}
975 ## @param msgTopologyOperator.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP"
976 ## If "ClientIP", consecutive client requests will be directed to the same Pod
977 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
978 ##
979 sessionAffinity: None
980 ## @param msgTopologyOperator.service.sessionAffinityConfig Additional settings for the sessionAffinity
981 ## sessionAffinityConfig:
982 ## clientIP:
983 ## timeoutSeconds: 300
984 ##
985 sessionAffinityConfig: {}
Mohammed Naser65cda132024-05-02 14:34:08 -0400986 ## Network Policies
987 ## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
988 ##
989 networkPolicy:
990 ## @param msgTopologyOperator.networkPolicy.enabled Specifies whether a NetworkPolicy should be created
991 ##
992 enabled: true
993 ## @param msgTopologyOperator.networkPolicy.kubeAPIServerPorts [array] List of possible endpoints to kube-apiserver (limit to your cluster settings to increase security)
994 ##
995 kubeAPIServerPorts: [443, 6443, 8443]
996 ## @param msgTopologyOperator.networkPolicy.allowExternal Don't require injector label for connections
997 ## The Policy model to apply. When set to false, only pods with the correct
998 ## injector label will have network access to the ports injector is listening
999 ## on. When true, injector will accept connections from any source
1000 ## (with the correct destination port).
1001 ##
1002 allowExternal: true
1003 ## @param msgTopologyOperator.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations.
1004 ##
1005 allowExternalEgress: true
Mohammed Naser7d1623e2024-06-17 09:12:39 -04001006 ## @param msgTopologyOperator.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy
Mohammed Naser65cda132024-05-02 14:34:08 -04001007 ## e.g:
1008 ## extraIngress:
1009 ## - ports:
1010 ## - port: 1234
1011 ## from:
1012 ## - podSelector:
1013 ## - matchLabels:
1014 ## - role: frontend
1015 ## - podSelector:
1016 ## - matchExpressions:
1017 ## - key: role
1018 ## operator: In
1019 ## values:
1020 ## - frontend
1021 extraIngress: []
1022 ## @param msgTopologyOperator.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy
1023 ## e.g:
1024 ## extraEgress:
1025 ## - ports:
1026 ## - port: 1234
1027 ## to:
1028 ## - podSelector:
1029 ## - matchLabels:
1030 ## - role: frontend
1031 ## - podSelector:
1032 ## - matchExpressions:
1033 ## - key: role
1034 ## operator: In
1035 ## values:
1036 ## - frontend
1037 ##
1038 extraEgress: []
1039 ## @param msgTopologyOperator.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces
1040 ## @param msgTopologyOperator.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces
1041 ##
1042 ingressNSMatchLabels: {}
1043 ingressNSPodMatchLabels: {}
Mohammed Naser9ad0d462023-01-15 20:36:37 -05001044 ## RBAC configuration
1045 ##
1046 rbac:
1047 ## @param msgTopologyOperator.rbac.create Specifies whether RBAC resources should be created
1048 ##
1049 create: true
Mohammed Naser65cda132024-05-02 14:34:08 -04001050 ## ClusterRole parameters
1051 ##
1052 clusterRole:
1053 ## @param msgTopologyOperator.rbac.clusterRole.customRules Define custom access rules for the ClusterRole
1054 ## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole
1055 ## e.g:
1056 ## customRules:
1057 ## - apiGroups: A list of API groups (e.g., [""], ["apps"]).
1058 ## - resources: A list of resource names (e.g., ["configmaps", "pods"]).
1059 ## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]).
1060 customRules: []
1061 ## @param msgTopologyOperator.rbac.clusterRole.extraRules Define extra access rules for the ClusterRole. This has no effect if customerRules is a non-empty array.
1062 ## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole
1063 ## e.g:
1064 ## extraRules:
1065 ## - apiGroups: A list of API groups (e.g., [""], ["apps"]).
1066 ## - resources: A list of resource names (e.g., ["configmaps", "pods"]).
1067 ## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]).
1068 extraRules: []
Mohammed Naser9ad0d462023-01-15 20:36:37 -05001069 ## ServiceAccount configuration
1070 ##
1071 serviceAccount:
1072 ## @param msgTopologyOperator.serviceAccount.create Specifies whether a ServiceAccount should be created
1073 ##
1074 create: true
1075 ## @param msgTopologyOperator.serviceAccount.name The name of the ServiceAccount to use.
1076 ## If not set and create is true, a name is generated using the common.names.fullname template
1077 ##
1078 name: ""
1079 ## @param msgTopologyOperator.serviceAccount.annotations Add annotations
1080 ##
1081 annotations: {}
1082 ## @param msgTopologyOperator.serviceAccount.automountServiceAccountToken Automount API credentials for a service account.
1083 ##
Mohammed Naser65cda132024-05-02 14:34:08 -04001084 automountServiceAccountToken: false
Mohammed Naser9ad0d462023-01-15 20:36:37 -05001085 ## @section RabbitMQ Messaging Topology Operator parameters
1086 ##
1087 metrics:
Mohammed Naser9ad0d462023-01-15 20:36:37 -05001088 ## Metrics service parameters
1089 ##
1090 service:
Mohammed Naser65cda132024-05-02 14:34:08 -04001091 ## @param msgTopologyOperator.metrics.service.enabled Create a service for accessing the metrics endpoint
1092 ##
1093 enabled: false
Mohammed Naser9ad0d462023-01-15 20:36:37 -05001094 ## @param msgTopologyOperator.metrics.service.type RabbitMQ Cluster Operator metrics service type
1095 ##
1096 type: ClusterIP
1097 ## @param msgTopologyOperator.metrics.service.ports.http RabbitMQ Cluster Operator metrics service HTTP port
1098 ##
1099 ports:
1100 http: 80
1101 ## Node ports to expose
1102 ## @param msgTopologyOperator.metrics.service.nodePorts.http Node port for HTTP
1103 ## NOTE: choose port between <30000-32767>
1104 ##
1105 nodePorts:
1106 http: ""
1107 ## @param msgTopologyOperator.metrics.service.clusterIP RabbitMQ Cluster Operator metrics service Cluster IP
1108 ## e.g.:
1109 ## clusterIP: None
1110 ##
1111 clusterIP: ""
1112 ## @param msgTopologyOperator.metrics.service.extraPorts Extra ports to expose (normally used with the `sidecar` value)
1113 ##
1114 extraPorts: []
1115 ## @param msgTopologyOperator.metrics.service.loadBalancerIP RabbitMQ Cluster Operator metrics service Load Balancer IP
1116 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-loadbalancer
1117 ##
1118 loadBalancerIP: ""
1119 ## @param msgTopologyOperator.metrics.service.loadBalancerSourceRanges RabbitMQ Cluster Operator metrics service Load Balancer sources
1120 ## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
1121 ## e.g:
1122 ## loadBalancerSourceRanges:
1123 ## - 10.10.10.0/24
1124 ##
1125 loadBalancerSourceRanges: []
1126 ## @param msgTopologyOperator.metrics.service.externalTrafficPolicy RabbitMQ Cluster Operator metrics service external traffic policy
1127 ## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
1128 ##
1129 externalTrafficPolicy: Cluster
1130 ## @param msgTopologyOperator.metrics.service.annotations [object] Additional custom annotations for RabbitMQ Cluster Operator metrics service
1131 ##
1132 annotations:
1133 prometheus.io/scrape: "true"
1134 prometheus.io/port: "{{ .Values.msgTopologyOperator.metrics.service.ports.http }}"
1135 ## @param msgTopologyOperator.metrics.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP"
1136 ## If "ClientIP", consecutive client requests will be directed to the same Pod
1137 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
1138 ##
1139 sessionAffinity: None
1140 ## @param msgTopologyOperator.metrics.service.sessionAffinityConfig Additional settings for the sessionAffinity
1141 ## sessionAffinityConfig:
1142 ## clientIP:
1143 ## timeoutSeconds: 300
1144 ##
1145 sessionAffinityConfig: {}
1146 serviceMonitor:
1147 ## @param msgTopologyOperator.metrics.serviceMonitor.enabled Specify if a servicemonitor will be deployed for prometheus-operator
1148 ##
1149 enabled: false
1150 ## @param msgTopologyOperator.metrics.serviceMonitor.namespace Namespace which Prometheus is running in
1151 ## e.g:
1152 ## namespace: monitoring
1153 ##
1154 namespace: ""
1155 ## @param msgTopologyOperator.metrics.serviceMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator
1156 ##
1157 jobLabel: app.kubernetes.io/name
Mohammed Naser9ad0d462023-01-15 20:36:37 -05001158 ## DEPRECATED: Use msgTopologyOperator.metrics.serviceMonitor.labels instead.
1159 ## This value will be removed in a future release
1160 ## additionalLabels: {}
1161
1162 ## @param msgTopologyOperator.metrics.serviceMonitor.selector Prometheus instance selector labels
Mohammed Naser65cda132024-05-02 14:34:08 -04001163 ## ref: https://github.com/bitnami/charts/tree/main/bitnami/prometheus-operator#prometheus-configuration
Mohammed Naser9ad0d462023-01-15 20:36:37 -05001164 ## e.g:
1165 ## selector:
1166 ## prometheus: my-prometheus
1167 ##
1168 selector: {}
1169 ## @param msgTopologyOperator.metrics.serviceMonitor.honorLabels Honor metrics labels
1170 ## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint
1171 ##
1172 honorLabels: false
1173 ## @param msgTopologyOperator.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended
1174 ## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint
1175 ## e.g:
1176 ## scrapeTimeout: 10s
1177 ##
1178 scrapeTimeout: ""
1179 ## @param msgTopologyOperator.metrics.serviceMonitor.interval Scrape interval. If not set, the Prometheus default scrape interval is used
1180 ##
1181 interval: ""
1182 ## @param msgTopologyOperator.metrics.serviceMonitor.metricRelabelings Specify additional relabeling of metrics
1183 ##
1184 metricRelabelings: []
1185 ## @param msgTopologyOperator.metrics.serviceMonitor.relabelings Specify general relabeling
1186 ##
1187 relabelings: []
1188 ## @param msgTopologyOperator.metrics.serviceMonitor.labels Extra labels for the ServiceMonitor
1189 ##
1190 labels: {}
Mohammed Naser65cda132024-05-02 14:34:08 -04001191 podMonitor:
1192 ## @param msgTopologyOperator.metrics.podMonitor.enabled Create PodMonitor Resource for scraping metrics using PrometheusOperator
1193 ##
1194 enabled: false
1195 ## @param msgTopologyOperator.metrics.podMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator
1196 ##
1197 jobLabel: app.kubernetes.io/name
1198 ## @param msgTopologyOperator.metrics.podMonitor.namespace Namespace which Prometheus is running in
1199 ##
1200 namespace: ""
1201 ## @param msgTopologyOperator.metrics.podMonitor.honorLabels Honor metrics labels
1202 ##
1203 honorLabels: false
1204 ## @param msgTopologyOperator.metrics.podMonitor.selector Prometheus instance selector labels
1205 ## ref: https://github.com/bitnami/charts/tree/main/bitnami/prometheus-operator#prometheus-configuration
1206 selector: {}
1207 ## @param msgTopologyOperator.metrics.podMonitor.interval Specify the interval at which metrics should be scraped
1208 ##
1209 interval: 30s
1210 ## @param msgTopologyOperator.metrics.podMonitor.scrapeTimeout Specify the timeout after which the scrape is ended
1211 ##
1212 scrapeTimeout: 30s
1213 ## @param msgTopologyOperator.metrics.podMonitor.additionalLabels [object] Additional labels that can be used so PodMonitors will be discovered by Prometheus
1214 ##
1215 additionalLabels: {}
1216 ## @param msgTopologyOperator.metrics.podMonitor.relabelings Specify general relabeling
1217 ##
1218 relabelings: []
1219 ## @param msgTopologyOperator.metrics.podMonitor.metricRelabelings Specify additional relabeling of metrics
1220 ##
1221 metricRelabelings: []
Mohammed Naser9ad0d462023-01-15 20:36:37 -05001222## @section cert-manager parameters
1223##
1224
1225## @param useCertManager Deploy cert-manager objects (Issuer and Certificate) for webhooks
1226##
1227useCertManager: false