values.yaml 1.9 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788
  1. replicaCount: 1
  2. image:
  3. repository: ghcr.io/external-secrets/external-secrets
  4. pullPolicy: IfNotPresent
  5. # -- The image tag to use. The default is the chart appVersion.
  6. tag: ""
  7. # -- If set, install and upgrade CRDs through helm chart.
  8. installCRDs: true
  9. imagePullSecrets: []
  10. nameOverride: ""
  11. fullnameOverride: ""
  12. # -- If true, external-secrets will perform leader election between instances to ensure no more
  13. # than one instance of external-secrets operates at a time.
  14. leaderElect: false
  15. # -- If set external secrets will filter matching
  16. # Secret Stores with the appropriate controller values.
  17. controllerClass: ""
  18. # -- If set external secrets are only reconciled in the
  19. # provided namespace
  20. scopedNamespace: ""
  21. # -- Specifies the number of concurrent ExternalSecret Reconciles external-secret executes at
  22. # a time.
  23. concurrent: 1
  24. serviceAccount:
  25. # -- Specifies whether a service account should be created.
  26. create: true
  27. # -- Annotations to add to the service account.
  28. annotations: {}
  29. # -- The name of the service account to use.
  30. # If not set and create is true, a name is generated using the fullname template.
  31. name: ""
  32. rbac:
  33. # -- Specifies whether role and rolebinding resources should be created.
  34. create: true
  35. ## -- Extra environment variables to add to container.
  36. extraEnv: []
  37. ## -- Map of extra arguments to pass to container.
  38. extraArgs: {}
  39. # -- Annotations to add to Deployment
  40. deploymentAnnotations: {}
  41. # -- Annotations to add to Pod
  42. podAnnotations: {}
  43. podLabels: {}
  44. podSecurityContext: {}
  45. # fsGroup: 2000
  46. securityContext: {}
  47. # capabilities:
  48. # drop:
  49. # - ALL
  50. # readOnlyRootFilesystem: true
  51. # runAsNonRoot: true
  52. # runAsUser: 1000
  53. resources: {}
  54. # requests:
  55. # cpu: 10m
  56. # memory: 32Mi
  57. prometheus:
  58. # -- Specifies whether to expose Service resource for collecting Prometheus metrics
  59. enabled: false
  60. service:
  61. port: 8080
  62. nodeSelector: {}
  63. tolerations: []
  64. affinity: {}
  65. # -- Pod priority class name.
  66. priorityClassName: ""