b6588e85b8
* Chart Grooming - Changed the default `workflow-controller` installation to use the `ServiceAccount` that is created and bound. - Customized the instanceID logic: - No longer defaults to installed (this was very difficult to see/understand when coming from starter tutorials) - Kept logic to allow for release name or explicit mappings but changed structure a bit - Added in optional configuration for: - CRD Install hook's ServiceAccount to allow clean install if your default roles aren't privledged - Optional Pod and Service annotations - Controller logging level configuration - Minio Customizations - Changed the Secret configuration to properly represent the path of a secret instead of the actual contents - Changed the names of the secret and service that are represented to mirror that of the underlying chart * Adding in role bindings for minio secrets if installed
68 lines
2.1 KiB
YAML
68 lines
2.1 KiB
YAML
images:
|
|
namespace: argoproj
|
|
controller: workflow-controller
|
|
ui: argoui
|
|
executor: argoexec
|
|
tag: v2.1.1
|
|
|
|
crdVersion: v1alpha1
|
|
|
|
init:
|
|
# By default the installation will not set an explicit one, which will mean it uses `default` for the namespace the chart is
|
|
# being deployed to. In RBAC clusters, that will almost certainly fail. See the NOTES: section of the readme for more info.
|
|
serviceAccount: ""
|
|
|
|
controller:
|
|
# podAnnotations is an optional map of annotations to be applied to the controller Pods
|
|
podAnnotations: {}
|
|
serviceAccount: argo
|
|
name: workflow-controller
|
|
workflowNamespaces:
|
|
- default
|
|
instanceID:
|
|
# `instanceID.enabled` configures the controller to filter workflow submissions
|
|
# to only those which have a matching instanceID attribute.
|
|
enabled: false
|
|
# NOTE: If `instanceID.enabled` is set to `true` then either `instanceID.userReleaseName`
|
|
# or `instanceID.explicitID` must be defined.
|
|
# useReleaseName: true
|
|
# explicitID: unique-argo-controller-identifier
|
|
logging:
|
|
level: info
|
|
globallevel: "0"
|
|
|
|
ui:
|
|
# optional map of annotations to be applied to the ui Pods
|
|
podAnnotations: {}
|
|
name: ui
|
|
# Enables ability to SSH into pod using web UI
|
|
enableWebConsole: false
|
|
serviceType: LoadBalancer
|
|
serviceAccount: argo-ui
|
|
# Annotations to be applied to the UI Service
|
|
serviceAnnotations: {}
|
|
|
|
# Influences the creation of the ConfigMap for the workflow-controller itself.
|
|
useDefaultArtifactRepo: false
|
|
useStaticCredentials: true
|
|
artifactRepository:
|
|
s3:
|
|
# Note the `key` attribute is not the actual secret, it's the PATH to
|
|
# the contents in the associated secret, as defined by the `name` attribute.
|
|
accessKeySecret:
|
|
# name: <releaseName>-minio (default)
|
|
key: accesskey
|
|
secretKeySecret:
|
|
# name: <releaseName>-minio
|
|
key: secretkey
|
|
insecure: true
|
|
# bucket:
|
|
# endpoint:
|
|
|
|
# NOTE: These are setting attributes for the `minio` optional dependency
|
|
minio:
|
|
# If set to true then chart installs minio and generate according artifactRepository section in workflow controller config map
|
|
install: false
|
|
defaultBucket:
|
|
enabled: true
|
|
name: argo-artifacts
|