-
Notifications
You must be signed in to change notification settings - Fork 4
/
helmrelease.yaml
75 lines (72 loc) · 1.53 KB
/
helmrelease.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: cert-manager
namespace: security
spec:
releaseName: cert-manager
chart:
spec:
chart: cert-manager
sourceRef:
kind: HelmRepository
name: jetstack
namespace: flux-system
version: "v1.15.0"
interval: 2m0s
install:
createNamespace: true
remediation:
retries: 3
values:
fullnameOverride: "cert-manager"
global:
logLevel: 2
leaderElection:
namespace: "security"
installCRDs: false
resources:
limits:
cpu: 300m
memory: 150Mi
securityContext:
fsGroup: 1001
containerSecurityContext:
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
prometheus:
enabled: true
servicemonitor:
enabled: true
labels:
prometheus-instance: main
webhook:
replicaCount: 1
timeoutSeconds: 10
containerSecurityContext:
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
resources:
limits:
cpu: 100m
memory: 80Mi
cainjector:
enabled: true
replicaCount: 1
containerSecurityContext:
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
resources:
limits:
cpu: 300m
memory: 250Mi
featureGates: ExperimentalGatewayAPISupport=true