Update folder location
This commit is contained in:
278
master/gatekeeper/values.yaml
Normal file
278
master/gatekeeper/values.yaml
Normal file
@@ -0,0 +1,278 @@
|
||||
#gatekeeper:
|
||||
# replicas: 3
|
||||
# revisionHistoryLimit: 10
|
||||
# auditInterval: 60
|
||||
# metricsBackends: ["prometheus"]
|
||||
# auditMatchKindOnly: false
|
||||
# constraintViolationsLimit: 20
|
||||
# auditFromCache: false
|
||||
# disableMutation: false
|
||||
# disableValidatingWebhook: false
|
||||
# validatingWebhookName: gatekeeper-validating-webhook-configuration
|
||||
# validatingWebhookTimeoutSeconds: 3
|
||||
# validatingWebhookFailurePolicy: Ignore
|
||||
# validatingWebhookAnnotations: {}
|
||||
# validatingWebhookExemptNamespacesLabels: {}
|
||||
# validatingWebhookObjectSelector: {}
|
||||
# validatingWebhookCheckIgnoreFailurePolicy: Fail
|
||||
# validatingWebhookCustomRules: {}
|
||||
# validatingWebhookURL: null
|
||||
# enableDeleteOperations: false
|
||||
# enableExternalData: true
|
||||
# enableGeneratorResourceExpansion: true
|
||||
# enableTLSHealthcheck: false
|
||||
# maxServingThreads: -1
|
||||
# mutatingWebhookName: gatekeeper-mutating-webhook-configuration
|
||||
# mutatingWebhookFailurePolicy: Ignore
|
||||
# mutatingWebhookReinvocationPolicy: Never
|
||||
# mutatingWebhookAnnotations: {}
|
||||
# mutatingWebhookExemptNamespacesLabels: {}
|
||||
# mutatingWebhookObjectSelector: {}
|
||||
# mutatingWebhookTimeoutSeconds: 1
|
||||
# mutatingWebhookCustomRules: {}
|
||||
# mutatingWebhookURL: null
|
||||
# mutationAnnotations: false
|
||||
# auditChunkSize: 500
|
||||
# logLevel: INFO
|
||||
# logDenies: false
|
||||
# logMutations: false
|
||||
# emitAdmissionEvents: false
|
||||
# emitAuditEvents: false
|
||||
# admissionEventsInvolvedNamespace: false
|
||||
# auditEventsInvolvedNamespace: false
|
||||
# resourceQuota: true
|
||||
# externaldataProviderResponseCacheTTL: 3m
|
||||
# image:
|
||||
# repository: openpolicyagent/gatekeeper
|
||||
# crdRepository: openpolicyagent/gatekeeper-crds
|
||||
# release: v3.15.0-beta.0
|
||||
# pullPolicy: Always
|
||||
# pullSecrets: []
|
||||
# preInstall:
|
||||
# crdRepository:
|
||||
# image:
|
||||
# repository: null
|
||||
# tag: v3.15.0-beta.0
|
||||
# postUpgrade:
|
||||
# labelNamespace:
|
||||
# enabled: false
|
||||
# image:
|
||||
# repository: openpolicyagent/gatekeeper-crds
|
||||
# tag: v3.15.0-beta.0
|
||||
# pullPolicy: IfNotPresent
|
||||
# pullSecrets: []
|
||||
# extraNamespaces: []
|
||||
# podSecurity: ["pod-security.kubernetes.io/audit=restricted",
|
||||
# "pod-security.kubernetes.io/audit-version=latest",
|
||||
# "pod-security.kubernetes.io/warn=restricted",
|
||||
# "pod-security.kubernetes.io/warn-version=latest",
|
||||
# "pod-security.kubernetes.io/enforce=restricted",
|
||||
# "pod-security.kubernetes.io/enforce-version=v1.24"]
|
||||
# extraAnnotations: {}
|
||||
# priorityClassName: ""
|
||||
# affinity: {}
|
||||
# tolerations: []
|
||||
# nodeSelector: {kubernetes.io/os: linux}
|
||||
# resources: {}
|
||||
# securityContext:
|
||||
# allowPrivilegeEscalation: false
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsGroup: 999
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
# postInstall:
|
||||
# labelNamespace:
|
||||
# enabled: true
|
||||
# extraRules: []
|
||||
# image:
|
||||
# repository: openpolicyagent/gatekeeper-crds
|
||||
# tag: v3.15.0-beta.0
|
||||
# pullPolicy: IfNotPresent
|
||||
# pullSecrets: []
|
||||
# extraNamespaces: []
|
||||
# podSecurity: ["pod-security.kubernetes.io/audit=restricted",
|
||||
# "pod-security.kubernetes.io/audit-version=latest",
|
||||
# "pod-security.kubernetes.io/warn=restricted",
|
||||
# "pod-security.kubernetes.io/warn-version=latest",
|
||||
# "pod-security.kubernetes.io/enforce=restricted",
|
||||
# "pod-security.kubernetes.io/enforce-version=v1.24"]
|
||||
# extraAnnotations: {}
|
||||
# priorityClassName: ""
|
||||
# probeWebhook:
|
||||
# enabled: true
|
||||
# image:
|
||||
# repository: curlimages/curl
|
||||
# tag: 7.83.1
|
||||
# pullPolicy: IfNotPresent
|
||||
# pullSecrets: []
|
||||
# waitTimeout: 60
|
||||
# httpTimeout: 2
|
||||
# insecureHTTPS: false
|
||||
# priorityClassName: ""
|
||||
# affinity: {}
|
||||
# tolerations: []
|
||||
# nodeSelector: {kubernetes.io/os: linux}
|
||||
# securityContext:
|
||||
# allowPrivilegeEscalation: false
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsGroup: 999
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
# preUninstall:
|
||||
# deleteWebhookConfigurations:
|
||||
# extraRules: []
|
||||
# enabled: false
|
||||
# image:
|
||||
# repository: openpolicyagent/gatekeeper-crds
|
||||
# tag: v3.15.0-beta.0
|
||||
# pullPolicy: IfNotPresent
|
||||
# pullSecrets: []
|
||||
# priorityClassName: ""
|
||||
# affinity: {}
|
||||
# tolerations: []
|
||||
# nodeSelector: {kubernetes.io/os: linux}
|
||||
# resources: {}
|
||||
# securityContext:
|
||||
# allowPrivilegeEscalation: false
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsGroup: 999
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
# podAnnotations: {}
|
||||
# auditPodAnnotations: {}
|
||||
# podLabels: {}
|
||||
# podCountLimit: "100"
|
||||
# secretAnnotations: {}
|
||||
# enableRuntimeDefaultSeccompProfile: true
|
||||
# controllerManager:
|
||||
# exemptNamespaces: []
|
||||
# exemptNamespacePrefixes: []
|
||||
# hostNetwork: false
|
||||
# dnsPolicy: ClusterFirst
|
||||
# port: 8443
|
||||
# metricsPort: 8888
|
||||
# healthPort: 9090
|
||||
# readinessTimeout: 1
|
||||
# livenessTimeout: 1
|
||||
# priorityClassName: system-cluster-critical
|
||||
# disableCertRotation: false
|
||||
# tlsMinVersion: 1.3
|
||||
# clientCertName: ""
|
||||
# strategyType: RollingUpdate
|
||||
# affinity:
|
||||
# podAntiAffinity:
|
||||
# preferredDuringSchedulingIgnoredDuringExecution:
|
||||
# - podAffinityTerm:
|
||||
# labelSelector:
|
||||
# matchExpressions:
|
||||
# - key: gatekeeper.sh/operation
|
||||
# operator: In
|
||||
# values:
|
||||
# - webhook
|
||||
# topologyKey: kubernetes.io/hostname
|
||||
# weight: 100
|
||||
# topologySpreadConstraints: []
|
||||
# tolerations: []
|
||||
# nodeSelector: {kubernetes.io/os: linux}
|
||||
# resources:
|
||||
# limits:
|
||||
# memory: 512Mi
|
||||
# requests:
|
||||
# cpu: 100m
|
||||
# memory: 512Mi
|
||||
# securityContext:
|
||||
# allowPrivilegeEscalation: false
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsGroup: 999
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
# podSecurityContext:
|
||||
# fsGroup: 999
|
||||
# supplementalGroups:
|
||||
# - 999
|
||||
# extraRules: []
|
||||
# networkPolicy:
|
||||
# enabled: false
|
||||
# ingress: { }
|
||||
# # - from:
|
||||
# # - ipBlock:
|
||||
# # cidr: 0.0.0.0/0
|
||||
# audit:
|
||||
# enablePubsub: false
|
||||
# connection: audit-connection
|
||||
# channel: audit-channel
|
||||
# hostNetwork: false
|
||||
# dnsPolicy: ClusterFirst
|
||||
# metricsPort: 8888
|
||||
# healthPort: 9090
|
||||
# readinessTimeout: 1
|
||||
# livenessTimeout: 1
|
||||
# priorityClassName: system-cluster-critical
|
||||
# disableCertRotation: false
|
||||
# affinity: {}
|
||||
# tolerations: []
|
||||
# nodeSelector: {kubernetes.io/os: linux}
|
||||
# resources:
|
||||
# limits:
|
||||
# memory: 512Mi
|
||||
# requests:
|
||||
# cpu: 100m
|
||||
# memory: 512Mi
|
||||
# securityContext:
|
||||
# allowPrivilegeEscalation: false
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsGroup: 999
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
# podSecurityContext:
|
||||
# fsGroup: 999
|
||||
# supplementalGroups:
|
||||
# - 999
|
||||
# writeToRAMDisk: false
|
||||
# extraRules: []
|
||||
# crds:
|
||||
# affinity: {}
|
||||
# tolerations: []
|
||||
# nodeSelector: {kubernetes.io/os: linux}
|
||||
# resources: {}
|
||||
# securityContext:
|
||||
# allowPrivilegeEscalation: false
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsGroup: 65532
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 65532
|
||||
# pdb:
|
||||
# controllerManager:
|
||||
# minAvailable: 1
|
||||
# service: {}
|
||||
# disabledBuiltins: ["{http.send}"]
|
||||
# psp:
|
||||
# enabled: true
|
||||
# upgradeCRDs:
|
||||
# enabled: true
|
||||
# extraRules: []
|
||||
# priorityClassName: ""
|
||||
# rbac:
|
||||
# create: true
|
||||
# externalCertInjection:
|
||||
# enabled: false
|
||||
# secretName: gatekeeper-webhook-server-cert
|
||||
#
|
||||
Reference in New Issue
Block a user