values.yaml

clusterName: ""
organization: ""
managementCluster: ""

userConfig:
  certExporter:
    configMap:
      values:
        ciliumNetworkPolicy:
          enabled: true
  certManager:
    configMap:
      values:
        ciliumNetworkPolicy:
          enabled: true
        # cert-manager-app v2.x.x
        controller:
          defaultIssuer:
            name: letsencrypt-giantswarm
        # cert-manager-app v3.x.x
        ingressShim:
          defaultIssuerName: letsencrypt-giantswarm
          defaultIssuerKind: ClusterIssuer
          defaultIssuerGroup: cert-manager.io
        enableServiceLinks: true
  etcdKubernetesResourceCountExporter:
    configMap:
      values:
        etcd:
          hostPath: "/etc/kubernetes/pki/etcd/"
          cacertpath: "/certs/ca.crt"
          certpath: "/certs/server.crt"
          keypath: "/certs/server.key"
          prefix: "/registry/"
        events:
          prefix: "/registry/events/"
  metricsServer:
    configMap:
      values:
        ciliumNetworkPolicy:
          enabled: true
  netExporter:
    configMap:
      values:
        ciliumNetworkPolicy:
          enabled: true
  nodeExporter:
    configMap:
      values:
        disableConntrackCollector: true
        disableNvmeCollector: true
        # remove the pod annotation once we use flatcar images
        podAnnotations:
          container.apparmor.security.beta.kubernetes.io/node-exporter: "unconfined"
  vpa:
    configMap:
      values:
        ciliumNetworkPolicy:
          enabled: true

apps:
  capi-node-labeler:
    appName: capi-node-labeler
    chartName: capi-node-labeler
    catalog: default
    clusterValues:
      configMap: true
      secret: false
    forceUpgrade: false
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/capi-node-labeler-app
    version: 0.5.0
  certExporter:
    appName: cert-exporter
    chartName: cert-exporter
    catalog: default
    clusterValues:
      configMap: true
      secret: false
    forceUpgrade: true
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/cert-exporter
    version: 2.9.0
  certManager:
    appName: cert-manager
    chartName: cert-manager-app
    catalog: default
    clusterValues:
      configMap: true
      secret: true
    forceUpgrade: true
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/cert-manager-app
    version: 3.7.4
  chartOperatorExtensions:
    appName: chart-operator-extensions
    chartName: chart-operator-extensions
    catalog: default
    clusterValues:
      configMap: false
      secret: false
    dependsOn: prometheus-operator-crd
    namespace: giantswarm
    # used by renovate
    # repo: giantswarm/chart-operator-extensions
    version: 1.1.2
  ciliumServiceMonitors:
    appName: cilium-servicemonitors
    chartName: cilium-servicemonitors
    catalog: default
    clusterValues:
      configMap: false
      secret: false
    dependsOn: prometheus-operator-crd
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/cilium-servicemonitors-app
    version: 0.1.2
  etcdKubernetesResourceCountExporter:
    appName: etcd-k8s-res-count-exporter
    chartName: etcd-kubernetes-resources-count-exporter
    catalog: default
    clusterValues:
      configMap: true
      secret: false
    forceUpgrade: false
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/etcd-kubernetes-resources-count-exporter
    version: 1.10.0
  k8sDnsNodeCache:
    appName: k8s-dns-node-cache
    chartName: k8s-dns-node-cache-app
    catalog: default
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/k8s-dns-node-cache-app
    version: 2.6.1
  metricsServer:
    appName: metrics-server
    chartName: metrics-server-app
    catalog: default
    clusterValues:
      configMap: true
      secret: false
    forceUpgrade: true
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/metrics-server-app
    version: 2.4.2
  netExporter:
    appName: net-exporter
    chartName: net-exporter
    catalog: default
    clusterValues:
      configMap: true
      secret: false
    forceUpgrade: true
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/net-exporter
    version: 1.19.0
  nodeExporter:
    appName: node-exporter
    chartName: node-exporter-app
    catalog: default
    clusterValues:
      configMap: true
      secret: false
    forceUpgrade: true
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/node-exporter-app
    version: 1.19.0
  observabilityBundle:
    appName: observability-bundle
    chartName: observability-bundle
    catalog: default
    clusterValues:
      configMap: true
      secret: false
    forceUpgrade: false
    inCluster: true
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/observability-bundle
    version: 1.3.4
  securityBundle:
    appName: security-bundle
    chartName: security-bundle
    catalog: giantswarm
    clusterValues:
      configMap: true
      secret: false
    forceUpgrade: false
    inCluster: true
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/security-bundle
    version: 1.6.5
  teleportKubeAgent:
    appName: teleport-kube-agent
    chartName: teleport-kube-agent
    catalog: default
    clusterValues:
      configMap: true
      secret: true
    forceUpgrade: true
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/teleport-kube-agent-app
    version: 0.9.0
    extraConfigs:
    # created by giantswarm/teleport-operator
    - kind: configMap
      name: "{{ $.Values.clusterName }}-teleport-kube-agent-config"
  vpa:
    appName: vertical-pod-autoscaler
    chartName: vertical-pod-autoscaler-app
    catalog: default
    dependsOn: vertical-pod-autoscaler-crd
    clusterValues:
      configMap: true
      secret: false
    forceUpgrade: false
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/vertical-pod-autoscaler-app
    version: 5.2.1
  vpaCRD:
    appName: vertical-pod-autoscaler-crd
    chartName: vertical-pod-autoscaler-crd
    catalog: default
    clusterValues:
      configMap: true
      secret: false
    forceUpgrade: false
    namespace: kube-system
    # used by renovate
    # repo: giantswarm/vertical-pod-autoscaler-crd
    version: 3.1.0