167 lines
3.9 KiB
YAML
167 lines
3.9 KiB
YAML
rbac:
|
|
create: true
|
|
## Use an existing ClusterRole/Role (depending on rbac.namespaced false/true)
|
|
# useExistingRole: name-of-some-role
|
|
# useExistingClusterRole: name-of-some-clusterRole
|
|
pspEnabled: false
|
|
pspUseAppArmor: false
|
|
namespaced: false
|
|
extraRoleRules: []
|
|
# - apiGroups: []
|
|
# resources: []
|
|
# verbs: []
|
|
extraClusterRoleRules: []
|
|
# - apiGroups: []
|
|
# resources: []
|
|
# verbs: []
|
|
serviceAccount:
|
|
create: true
|
|
name:
|
|
nameTest:
|
|
## ServiceAccount labels.
|
|
labels: {}
|
|
## Service account annotations. Can be templated.
|
|
# annotations:
|
|
# eks.amazonaws.com/role-arn: arn:aws:iam::123456789000:role/iam-role-name-here
|
|
|
|
## autoMount is deprecated in favor of automountServiceAccountToken
|
|
# autoMount: false
|
|
automountServiceAccountToken: false
|
|
|
|
replicas: 1
|
|
|
|
## Create a headless service for the deployment
|
|
headlessService: false
|
|
|
|
## Should the service account be auto mounted on the pod
|
|
automountServiceAccountToken: true
|
|
|
|
## Create HorizontalPodAutoscaler object for deployment type
|
|
#
|
|
autoscaling:
|
|
enabled: false
|
|
minReplicas: 1
|
|
maxReplicas: 5
|
|
targetCPU: "60"
|
|
targetMemory: ""
|
|
behavior: {}
|
|
|
|
## See `kubectl explain poddisruptionbudget.spec` for more
|
|
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
|
podDisruptionBudget: {}
|
|
# apiVersion: ""
|
|
# minAvailable: 1
|
|
# maxUnavailable: 1
|
|
|
|
## See `kubectl explain deployment.spec.strategy` for more
|
|
## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
|
|
deploymentStrategy:
|
|
type: RollingUpdate
|
|
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /api/health
|
|
port: 3000
|
|
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /api/health
|
|
port: 3000
|
|
initialDelaySeconds: 60
|
|
timeoutSeconds: 30
|
|
failureThreshold: 10
|
|
|
|
# dns configuration for pod
|
|
dnsPolicy: ~
|
|
dnsConfig: {}
|
|
# nameservers:
|
|
# - 8.8.8.8
|
|
# options:
|
|
# - name: ndots
|
|
# value: "2"
|
|
# - name: edns0
|
|
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 472
|
|
runAsGroup: 472
|
|
fsGroup: 472
|
|
|
|
containerSecurityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
# Enable creating the grafana configmap
|
|
createConfigmap: true
|
|
|
|
## Pod Labels
|
|
# podLabels: {}
|
|
|
|
podPortName: grafana
|
|
gossipPortName: gossip
|
|
## Deployment annotations
|
|
# annotations: {}
|
|
|
|
## Expose the grafana service to be accessed from outside the cluster (LoadBalancer service).
|
|
## or access it from within the cluster (ClusterIP service). Set the service type and the port to serve it.
|
|
## ref: http://kubernetes.io/docs/user-guide/services/
|
|
##
|
|
service:
|
|
enabled: true
|
|
|
|
|
|
gettype: ClusterIP
|
|
#type: NodePort
|
|
|
|
# Set the ip family policy to configure dual-stack see [Configure dual-stack](https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services)
|
|
ipFamilyPolicy: ""
|
|
# Sets the families that should be supported and the order in which they should be applied to ClusterIP as well. Can be IPv4 and/or IPv6.
|
|
ipFamilies: []
|
|
loadBalancerIP: ""
|
|
loadBalancerClass: ""
|
|
loadBalancerSourceRanges: []
|
|
#port: 90
|
|
port: 3000
|
|
targetPort: 3000
|
|
#targetPort: 90
|
|
# targetPort: 4181 To be used with a proxy extraContainer
|
|
## Service annotations. Can be templated.
|
|
annotations: {}
|
|
labels: {}
|
|
portName: service
|
|
# Adds the appProtocol field to the service. This allows to work with istio protocol selection. Ex: "http" or "tcp"
|
|
appProtocol: ""
|
|
|
|
dashboardProviders: {}
|
|
|
|
dashboards: {}
|
|
|
|
|
|
grafana.ini:
|
|
server:
|
|
domain: cnoe.localtest.me
|
|
root_url: "%(protocol)s://%(domain)s/grafana"
|
|
serve_from_sub_path: true
|
|
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: nginx
|
|
hosts:
|
|
- cnoe.localtest.me
|
|
path: /grafana
|
|
|
|
|
|
#TODO: not yet!
|
|
#datasources:
|
|
# datasources.yaml:
|
|
# apiVersion: 1
|
|
# datasources:
|
|
# - name: Prometheus
|
|
# type: prometheus
|
|
# url: http://prometheus-server.prometheus.svc.cluster.local
|
|
# access: proxy
|
|
# isDefault: true
|