values.yaml

# uninstallVPA -- Enabling this flag will remove a vpa installation that was previously managed with this chart. It is considered deprecated and will be removed in a later release.
uninstallVPA: false

vpa:
  # vpa.enabled -- If true, the vpa will be installed as a sub-chart
  enabled: false
  updater:
    enabled: false

metrics-server:
  # metrics-server.enabled -- If true, the metrics-server will be installed as a sub-chart
  enabled: false
  apiService:
    create: true

image:
  # image.repository -- Repository for the goldilocks image
  repository: us-docker.pkg.dev/fairwinds-ops/oss/goldilocks
  # image.tag -- The goldilocks image tag to use
  tag: v4.16.2
  # image.pullPolicy -- imagePullPolicy - Highly recommended to leave this as `Always`
  pullPolicy: Always

# imagePullSecrets -- A list of image pull secret names to use
imagePullSecrets: []

nameOverride: ""
fullnameOverride: ""

controller:
  # controller.enabled -- Whether or not to install the controller deployment
  enabled: true
  # controller.revisionHistoryLimit -- Number of old replicasets to retain, default is 10, 0 will garbage-collect old replicasets
  revisionHistoryLimit: 10
  rbac:
    # controller.rbac.create -- If set to true, rbac resources will be created for the controller
    create: true
    # controller.rbac.enableArgoproj -- If set to true, the clusterrole will give access to argoproj.io resources
    enableArgoproj: true
    # controller.rbac.extraRules -- Extra rbac rules for the controller clusterrole
    extraRules: []
    # controller.rbac.extraClusterRoleBindings -- A list of ClusterRoles for which ClusterRoleBindings will be created for the ServiceAccount, if enabled
    extraClusterRoleBindings: []
  serviceAccount:
    # controller.serviceAccount.create -- If true, a service account will be created for the controller. If set to false, you must set `controller.serviceAccount.name`
    create: true
    # controller.serviceAccount.name -- The name of an existing service account to use for the controller. Combined with `controller.serviceAccount.create`
    name:
  # controller.flags -- A map of additional flags to pass to the controller. For monitoring all namespaces out of the box, add the following flag "on-by-default: true"
  flags: {}
  # controller.logVerbosity -- Controller log verbosity. Can be set from 1-10 with 10 being extremely verbose
  logVerbosity: "2"
  # controller.nodeSelector -- Node selector for the controller pod
  nodeSelector: {}
  # controller.tolerations -- Tolerations for the controller pod
  tolerations: []
  # controller.affinity -- Affinity for the controller pods
  affinity: {}
  # controller.topologySpreadConstraints -- Topology spread constraints for the controller pods
  topologySpreadConstraints: []
  # controller.resources -- The resources block for the controller pods
  resources:
    limits: {}
    requests:
      cpu: 25m
      memory: 256Mi
  # controller.podSecurityContext -- Defines the podSecurityContext for the controller pod
  podSecurityContext:
    seccompProfile:
      type: RuntimeDefault
  # controller.securityContext -- The container securityContext for the controller container
  securityContext:
    readOnlyRootFilesystem: true
    allowPrivilegeEscalation: false
    runAsNonRoot: true
    runAsUser: 10324
    capabilities:
      drop:
        - ALL

  deployment:
    # controller.deployment.extraVolumeMounts -- Extra volume mounts for the controller container
    extraVolumeMounts: []
    # controller.deployment.extraVolumes -- Extra volumes for the controller pod
    extraVolumes: []
    # controller.deployment.annotations -- Extra annotations for the controller deployment
    annotations: {}
    # controller.deployment.additionalLabels -- Extra labels for the controller deployment
    additionalLabels: {}

    # controller.deployment.podAnnotations -- Extra annotations for the controller pod
    podAnnotations: {}

dashboard:
  # dashboard.basePath -- Path on which the dashboard is served. Defaults to `/`
  basePath: null
  # dashboard.enabled -- If true, the dashboard component will be installed
  enabled: true
  # dashboard.revisionHistoryLimit -- Number of old replicasets to retain, default is 10, 0 will garbage-collect old replicasets
  revisionHistoryLimit: 10
  # dashboard.replicaCount -- Number of dashboard pods to run
  replicaCount: 2
  service:
    # dashboard.service.type -- The type of the dashboard service
    type: ClusterIP
    # dashboard.service.port -- The port to run the dashboard service on
    port: 80
    # dashboard.service.annotations -- Extra annotations for the dashboard service
    annotations: {}
  # dashboard.flags -- A map of additional flags to pass to the dashboard. For monitoring all namespaces out of the box, add the following flag "on-by-default: true".
  flags: {}
  # dashboard.logVerbosity -- Dashboard log verbosity. Can be set from 1-10 with 10 being extremely verbose
  logVerbosity: "2"
  # dashboard.excludeContainers -- Container names to exclude from displaying in the Goldilocks dashboard
  excludeContainers: "linkerd-proxy,istio-proxy"
  rbac:
    # dashboard.rbac.create -- If set to true, rbac resources will be created for the dashboard
    create: true
    # dashboard.rbac.enableArgoproj -- If set to true, the clusterrole will give access to argoproj.io resources
    enableArgoproj: true
    # controller.rbac.extraRules -- Extra rbac rules for the controller clusterrole
    extraRules: []
    # controller.rbac.extraClusterRoleBindings -- A list of ClusterRoles for which ClusterRoleBindings will be created for the ServiceAccount, if enabled
    extraClusterRoleBindings: []
  serviceAccount:
    # dashboard.serviceAccount.create -- If true, a service account will be created for the dashboard. If set to false, you must set `dashboard.serviceAccount.name`
    create: true
    # dashboard.serviceAccount.name -- The name of an existing service account to use for the controller. Combined with `dashboard.serviceAccount.create`
    name:

  deployment:
    # dashboard.deployment.annotations -- Extra annotations for the dashboard deployment
    annotations: {}
    # dashboard.deployment.additionalLabels -- Extra labels for the dashboard deployment
    additionalLabels: {}
    # dashboard.deployment.extraVolumeMounts -- Extra volume mounts for the dashboard container
    extraVolumeMounts: []
    # dashboard.deployment.extraVolumes -- Extra volumes for the dashboard pod
    extraVolumes: []

    # dashboard.deployment.podAnnotations -- Extra annotations for the dashboard pod
    podAnnotations: {}

  ingress:
    # dashboard.ingress.enabled -- Enables an ingress object for the dashboard.
    enabled: false

    # dashboard.ingress.ingressClassName -- From Kubernetes 1.18+ this field is supported in case your ingress controller supports it. When set, you do not need to add the ingress class as annotation.
    ingressClassName:
    annotations: {}
      # kubernetes.io/ingress.class: nginx
      # kubernetes.io/tls-acme: "true"
    hosts:
      - host: chart-example.local
        paths:
          - path: /
            type: ImplementationSpecific

    tls: []
    #  - secretName: chart-example-tls
    #    hosts:
    #      - chart-example.local

  healthCheckPolicy:
    # dashboard.healthCheckPolicy.enabled -- Enables a GKE HealthCheckPolicy for the dashboard service. Only applicable when using GKE Gateway API (httpRoute.enabled: true). Required because the dashboard returns 301 on `/`, which GKE LB treats as unhealthy.
    enabled: false
    # dashboard.healthCheckPolicy.requestPath -- The path the GKE load balancer health check will use
    requestPath: /health
    # dashboard.healthCheckPolicy.checkIntervalSec -- How often (in seconds) to send a health check
    # checkIntervalSec: 15
    # dashboard.healthCheckPolicy.timeoutSec -- How long (in seconds) to wait before claiming failure
    # timeoutSec: 15
    # dashboard.healthCheckPolicy.healthyThreshold -- Number of consecutive successes before considering healthy
    # healthyThreshold: 1
    # dashboard.healthCheckPolicy.unhealthyThreshold -- Number of consecutive failures before considering unhealthy
    # unhealthyThreshold: 2

  httpRoute:
    # dashboard.httpRoute.enabled -- Enables an HTTPRoute object for the dashboard (Gateway API).
    enabled: false
    # dashboard.httpRoute.annotations -- Extra annotations for the HTTPRoute
    annotations: {}
    # dashboard.httpRoute.labels -- Extra labels for the HTTPRoute
    labels: {}
    # dashboard.httpRoute.parentRefs -- Parent references for the HTTPRoute (required when enabled)
    parentRefs: []
      # - name: gateway
      #   namespace: gateway-namespace
      #   sectionName: https
    # dashboard.httpRoute.hostnames -- Hostnames for the HTTPRoute
    hostnames: []
      # - chart-example.local
    # dashboard.httpRoute.matches -- Matching rules for the HTTPRoute
    matches:
      - path:
          type: PathPrefix
          value: /

  # dashboard.resources -- A resources block for the dashboard.
  resources:
    limits: {}
    requests:
      cpu: 25m
      memory: 256Mi
  # dashboard.podSecurityContext -- Defines the podSecurityContext for the dashboard pod
  podSecurityContext:
    seccompProfile:
      type: RuntimeDefault
  # dashboard.securityContext -- The container securityContext for the dashboard container
  securityContext:
    readOnlyRootFilesystem: true
    allowPrivilegeEscalation: false
    runAsNonRoot: true
    runAsUser: 10324
    capabilities:
      drop:
        - ALL
  nodeSelector: {}
  tolerations: []
  affinity: {}
  # dashboard.topologySpreadConstraints -- Topology spread constraints for the dashboard pods
  topologySpreadConstraints: []