operator-lifecycle-manager/deploy/chart/values.yaml at 4294f1fb831afa980e6bc65bf30135df5d029ade · operator-framework/operator-lifecycle-manager · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
rbacApiVersion: rbac.authorization.k8s.io
namespace: operator-lifecycle-manager
# see https://kubernetes.io/docs/concepts/security/pod-security-admission/ for more details
namespace_psa:
  enforceLevel: baseline
  enforceVersion: latest
  auditLevel: restricted
  auditVersion: latest
  warnLevel: restricted
  warnVersion: latest
catalog_namespace: operator-lifecycle-manager
operator_namespace: operators
# see https://kubernetes.io/docs/concepts/security/pod-security-admission/ for more details
operator_namespace_psa:
  enforceLevel: baseline
  enforceVersion: latest
minKubeVersion: 1.11.0
writeStatusName: '""'
imagestream: false
debug: false
installType: upstream
catalogGrpcPodPort: 50051

olm:
  replicaCount: 1
  image:
    ref: quay.io/operator-framework/olm:master
    pullPolicy: Always
  service:
    name: olm-operator-metrics
    internalPort: 8080
    internalPortHttps: 8443
    externalPort: metrics
  nodeSelector:
    kubernetes.io/os: linux
  resources:
    requests:
     cpu: 10m
     memory: 160Mi

catalog:
  setWorkloadUserID: true
  replicaCount: 1
  commandArgs: --configmapServerImage=quay.io/operator-framework/configmap-operator-registry:latest
  opmImageArgs: --opmImage=quay.io/operator-framework/opm:latest
  image:
    ref: quay.io/operator-framework/olm:master
    pullPolicy: Always
  service:
    name: catalog-operator-metrics
    internalPort: 8080
    internalPortHttps: 8443
    externalPort: metrics
  nodeSelector:
    kubernetes.io/os: linux
  resources:
    requests:
     cpu: 10m
     memory: 80Mi

package:
  replicaCount: 2
  maxUnavailable: 1
  maxSurge: 1
  image:
    ref: quay.io/operator-framework/olm:master
    pullPolicy: Always
  service:
    internalPort: 5443
  nodeSelector:
    kubernetes.io/os: linux
  resources:
    requests:
     cpu: 10m
     memory: 50Mi

monitoring:
  enabled: false
  namespace: monitoring

certManager:
  enabled: false
  issuer:
    name: olm-ca-issuer
    selfSigned: true
    ca:
      secretName: ""
  certificate:
    name: olm-cert
    secretName: olm-cert
    extraDnsNames: []
    extraIpAddresses: []

# OpenShift service-ca configuration
# When enabled, uses OpenShift service-ca-operator for certificate management
# This is mutually exclusive with certManager - only one should be enabled
serviceCa:
  enabled: false
  # Secret names are left empty in upstream, to be filled by downstream values.yaml
  # Service names are taken from olm.service.name and catalog.service.name
  olmOperator:
    secretName: ""
  catalogOperator:
    secretName: ""

networkPolicy:
  enabled: true
  dns:
    ports:
      - protocol: TCP
        port: 53
      - protocol: UDP
        port: 53
      - protocol: TCP
        port: 5353
      - protocol: UDP
        port: 5353
  kubeAPIServer: {}
  metrics:
    ports:
      - protocol: TCP
        port: metrics