values.yaml

# Default values for libchart.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

name: ""
appVersion: v1

image:
  repository: ""
  tag: ""
  # pullSecrets:
  #   - secret1
  #   - secret2

nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}
podLabels: {}

podSecurityContext:
  runAsNonRoot: true
  runAsUser: 65534
  fsGroup: 65534

securityContext:
  readOnlyRootFilesystem: true
  allowPrivilegeEscalation: false
  capabilities:
    drop:
    - ALL

environment: {}
secrets: {}

csi: {}
#  name: secret-pv
#  storage: 20Mi
#  mountPath: /mnt/secrets-store
#  providerName: azure
#  usePodIdentity: false
#  keyvaultName: mazevault-test
#  resourceGroup: resGroup
#  subscriptionId: subId
#  tenantId: tenantId
#  storageClassName: mazecsistorage
#  array:
#    - |
#      objectName: secret1
#      objectType: secret
#      objectVersion: ""
#    - |
#      objectName: key1
#      objectType: key
#      objectVersion: ""

resources:
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  limits:
    cpu: 200m
    memory: 512Mi
  requests:
    cpu: 200m
    memory: 512Mi

nodeSelector: {}

tolerations: []

podDisruptionBudget: {}
  # maxUnavailable: 1
  # minAvailable: 2

## Pod affinity
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
##
podAntiAffinity: soft
podAntiAffinityTopologyKey: "kubernetes.io/hostname"

## Custom Affinity settings
## Defining 'affinity' will disable any podAntiAffinity settings.
## If you still need anti-affinity, you must include the configuration here.
affinity: {}

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

extraContainerPorts: []

liveness:
  port: 8080
  enabled: true
  delay: 15
  timeout: 15
  periodSeconds: 15
readiness:
  port: 8080
  enabled: true
  delay: 15
  timeout: 15
  periodSeconds: 15

# Service
service:
  type: ClusterIP
  port: 80
  targetPort: 8080
  name: http
  extraPorts: []
  annotations: {}

# Ingress
ingress:
  enabled: false
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  path: /
  hosts:
    - chart-example.local
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - chart-example.local

traefikV2:
  enabled: false
  annotations: {}
  middlewares: []
  ingressRoutes: []

istio:
  enabled: false
  ingress:
    enabled: false
    gateways: []
    hosts:
      - chart-example.local
    tls:
      enabled: true
      httpsRedirect: false
      # secretName: chart-example-tls

metrics:
  enabled: true
  prometheusInstance: default # Select the default prometheus instance.

  prometheusIstioSecret: default
  prometheusIstioMtlsEnabled: true

  # endpoints:
  # - targetPort: 8080
  #   path: /metrics

alertRules: []

cert:
  enabled: true
  annotations: {}
  hosts: []
  issuer: letsencrypt-prod
  issuerKind: ClusterIssuer
  # secretName: java-appname-tls
  # duration: 2160h # 90d (Maximum 90d)
  renewBefore: 360h0m0s # 15d

volumeMounts: []
# - name: secret-volume
#   mountPath: /app/secrets
#   readOnly: true

volumes: []
#  - name: secret-volume
#    secret:
#      secretName: custom-secret
#      items:
#      - key: ssh-pub-key
#        path: id_rsa.pub

deployKind: deployment

autoscaling:
  enabled: false

# https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/
dnsConfig: {}