683 lines
21 KiB
YAML
683 lines
21 KiB
YAML
## Global Docker image parameters
|
|
## Please, note that this will override the image parameters, including dependencies, configured to use the global value
|
|
## Current available global Docker image parameters: imageRegistry and imagePullSecrets
|
|
##
|
|
global:
|
|
# imageRegistry: myRegistryName
|
|
# imagePullSecrets:
|
|
# - myRegistryKeySecretName
|
|
# storageClass: myStorageClass
|
|
redis: {}
|
|
|
|
## Bitnami Redis image version
|
|
## ref: https://hub.docker.com/r/bitnami/redis/tags/
|
|
##
|
|
image:
|
|
registry: docker.io
|
|
repository: bitnami/redis
|
|
## Bitnami Redis image tag
|
|
## ref: https://github.com/bitnami/bitnami-docker-redis#supported-tags-and-respective-dockerfile-links
|
|
##
|
|
tag: 5.0.9-debian-10-r0
|
|
## Specify a imagePullPolicy
|
|
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
|
## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
|
|
##
|
|
pullPolicy: IfNotPresent
|
|
## Optionally specify an array of imagePullSecrets.
|
|
## Secrets must be manually created in the namespace.
|
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
|
##
|
|
# pullSecrets:
|
|
# - myRegistryKeySecretName
|
|
|
|
## String to partially override redis.fullname template (will maintain the release name)
|
|
##
|
|
# nameOverride:
|
|
|
|
## String to fully override redis.fullname template
|
|
##
|
|
# fullnameOverride:
|
|
|
|
## Cluster settings
|
|
cluster:
|
|
enabled: true
|
|
slaveCount: 3
|
|
|
|
## Use redis sentinel in the redis pod. This will disable the master and slave services and
|
|
## create one redis service with ports to the sentinel and the redis instances
|
|
sentinel:
|
|
enabled: true
|
|
## Require password authentication on the sentinel itself
|
|
## ref: https://redis.io/topics/sentinel
|
|
usePassword: true
|
|
## Bitnami Redis Sentintel image version
|
|
## ref: https://hub.docker.com/r/bitnami/redis-sentinel/tags/
|
|
##
|
|
image:
|
|
registry: docker.io
|
|
repository: bitnami/redis-sentinel
|
|
## Bitnami Redis image tag
|
|
## ref: https://github.com/bitnami/bitnami-docker-redis-sentinel#supported-tags-and-respective-dockerfile-links
|
|
##
|
|
tag: 5.0.9-debian-10-r0
|
|
## Specify a imagePullPolicy
|
|
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
|
## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
|
|
##
|
|
pullPolicy: IfNotPresent
|
|
## Optionally specify an array of imagePullSecrets.
|
|
## Secrets must be manually created in the namespace.
|
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
|
##
|
|
# pullSecrets:
|
|
# - myRegistryKeySecretName
|
|
masterSet: mymaster
|
|
initialCheckTimeout: 5
|
|
quorum: 2
|
|
downAfterMilliseconds: 60000
|
|
failoverTimeout: 18000
|
|
parallelSyncs: 1
|
|
port: 26379
|
|
## Additional Redis configuration for the sentinel nodes
|
|
## ref: https://redis.io/topics/config
|
|
##
|
|
configmap:
|
|
## Enable or disable static sentinel IDs for each replicas
|
|
## If disabled each sentinel will generate a random id at startup
|
|
## If enabled, each replicas will have a constant ID on each start-up
|
|
##
|
|
staticID: false
|
|
## Configure extra options for Redis Sentinel liveness and readiness probes
|
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes)
|
|
##
|
|
livenessProbe:
|
|
enabled: true
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
timeoutSeconds: 5
|
|
successThreshold: 1
|
|
failureThreshold: 5
|
|
readinessProbe:
|
|
enabled: true
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
timeoutSeconds: 1
|
|
successThreshold: 1
|
|
failureThreshold: 5
|
|
customLivenessProbe: {}
|
|
customReadinessProbe: {}
|
|
## Redis Sentinel resource requests and limits
|
|
## ref: http://kubernetes.io/docs/user-guide/compute-resources/
|
|
# resources:
|
|
# requests:
|
|
# memory: 256Mi
|
|
# cpu: 100m
|
|
## Redis Sentinel Service properties
|
|
service:
|
|
## Redis Sentinel Service type
|
|
type: ClusterIP
|
|
sentinelPort: 26379
|
|
redisPort: 6379
|
|
|
|
## Specify the nodePort value for the LoadBalancer and NodePort service types.
|
|
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
|
|
##
|
|
# sentinelNodePort:
|
|
# redisNodePort:
|
|
|
|
## Provide any additional annotations which may be required. This can be used to
|
|
## set the LoadBalancer service type to internal only.
|
|
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
|
|
##
|
|
annotations: {}
|
|
labels: {}
|
|
loadBalancerIP:
|
|
|
|
## Specifies the Kubernetes Cluster's Domain Name.
|
|
##
|
|
clusterDomain: cluster.local
|
|
|
|
networkPolicy:
|
|
## Specifies whether a NetworkPolicy should be created
|
|
##
|
|
enabled: true
|
|
|
|
## The Policy model to apply. When set to false, only pods with the correct
|
|
## client label will have network access to the port Redis is listening
|
|
## on. When true, Redis will accept connections from any source
|
|
## (with the correct destination port).
|
|
##
|
|
# allowExternal: true
|
|
|
|
## Allow connections from other namespacess. Just set label for namespace and set label for pods (optional).
|
|
##
|
|
ingressNSMatchLabels: {}
|
|
ingressNSPodMatchLabels: {}
|
|
|
|
serviceAccount:
|
|
## Specifies whether a ServiceAccount should be created
|
|
##
|
|
create: false
|
|
## The name of the ServiceAccount to use.
|
|
## If not set and create is true, a name is generated using the fullname template
|
|
name:
|
|
|
|
rbac:
|
|
## Specifies whether RBAC resources should be created
|
|
##
|
|
create: false
|
|
|
|
role:
|
|
## Rules to create. It follows the role specification
|
|
# rules:
|
|
# - apiGroups:
|
|
# - extensions
|
|
# resources:
|
|
# - podsecuritypolicies
|
|
# verbs:
|
|
# - use
|
|
# resourceNames:
|
|
# - gce.unprivileged
|
|
rules: []
|
|
|
|
## Redis pod Security Context
|
|
securityContext:
|
|
enabled: true
|
|
fsGroup: 1001
|
|
runAsUser: 1001
|
|
## sysctl settings for master and slave pods
|
|
##
|
|
## Uncomment the setting below to increase the net.core.somaxconn value
|
|
##
|
|
# sysctls:
|
|
# - name: net.core.somaxconn
|
|
# value: "10000"
|
|
|
|
## Use password authentication
|
|
usePassword: true
|
|
## Redis password (both master and slave)
|
|
## Defaults to a random 10-character alphanumeric string if not set and usePassword is true
|
|
## ref: https://github.com/bitnami/bitnami-docker-redis#setting-the-server-password-on-first-run
|
|
##
|
|
password:
|
|
## Use existing secret (ignores previous password)
|
|
# existingSecret:
|
|
## Password key to be retrieved from Redis secret
|
|
##
|
|
# existingSecretPasswordKey:
|
|
|
|
## Mount secrets as files instead of environment variables
|
|
usePasswordFile: false
|
|
|
|
## Persist data to a persistent volume (Redis Master)
|
|
persistence:
|
|
## A manually managed Persistent Volume and Claim
|
|
## Requires persistence.enabled: true
|
|
## If defined, PVC must be created manually before volume will be bound
|
|
existingClaim:
|
|
|
|
# Redis port
|
|
redisPort: 6379
|
|
|
|
##
|
|
## Redis Master parameters
|
|
##
|
|
master:
|
|
## Redis command arguments
|
|
##
|
|
## Can be used to specify command line arguments, for example:
|
|
##
|
|
command: "/run.sh"
|
|
## Additional Redis configuration for the master nodes
|
|
## ref: https://redis.io/topics/config
|
|
##
|
|
configmap:
|
|
## Redis additional command line flags
|
|
##
|
|
## Can be used to specify command line flags, for example:
|
|
##
|
|
## extraFlags:
|
|
## - "--maxmemory-policy volatile-ttl"
|
|
## - "--repl-backlog-size 1024mb"
|
|
extraFlags: []
|
|
## Comma-separated list of Redis commands to disable
|
|
##
|
|
## Can be used to disable Redis commands for security reasons.
|
|
## Commands will be completely disabled by renaming each to an empty string.
|
|
## ref: https://redis.io/topics/security#disabling-of-specific-commands
|
|
##
|
|
disableCommands:
|
|
- FLUSHDB
|
|
- FLUSHALL
|
|
|
|
## Redis Master additional pod labels and annotations
|
|
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
|
|
podLabels: {}
|
|
podAnnotations: {}
|
|
|
|
## Redis Master resource requests and limits
|
|
## ref: http://kubernetes.io/docs/user-guide/compute-resources/
|
|
# resources:
|
|
# requests:
|
|
# memory: 256Mi
|
|
# cpu: 100m
|
|
## Use an alternate scheduler, e.g. "stork".
|
|
## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
|
|
##
|
|
# schedulerName:
|
|
|
|
## Configure extra options for Redis Master liveness and readiness probes
|
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes)
|
|
##
|
|
livenessProbe:
|
|
enabled: true
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
timeoutSeconds: 5
|
|
successThreshold: 1
|
|
failureThreshold: 5
|
|
readinessProbe:
|
|
enabled: true
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
timeoutSeconds: 1
|
|
successThreshold: 1
|
|
failureThreshold: 5
|
|
|
|
## Configure custom probes for images other images like
|
|
## rhscl/redis-32-rhel7 rhscl/redis-5-rhel7
|
|
## Only used if readinessProbe.enabled: false / livenessProbe.enabled: false
|
|
##
|
|
# customLivenessProbe:
|
|
# tcpSocket:
|
|
# port: 6379
|
|
# initialDelaySeconds: 10
|
|
# periodSeconds: 5
|
|
# customReadinessProbe:
|
|
# initialDelaySeconds: 30
|
|
# periodSeconds: 10
|
|
# timeoutSeconds: 5
|
|
# exec:
|
|
# command:
|
|
# - "container-entrypoint"
|
|
# - "bash"
|
|
# - "-c"
|
|
# - "redis-cli set liveness-probe \"`date`\" | grep OK"
|
|
customLivenessProbe: {}
|
|
customReadinessProbe: {}
|
|
|
|
## Redis Master Node selectors and tolerations for pod assignment
|
|
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
|
|
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#taints-and-tolerations-beta-feature
|
|
##
|
|
# nodeSelector: {"beta.kubernetes.io/arch": "amd64"}
|
|
# tolerations: []
|
|
## Redis Master pod/node affinity/anti-affinity
|
|
##
|
|
affinity: {}
|
|
|
|
## Redis Master Service properties
|
|
service:
|
|
## Redis Master Service type
|
|
type: ClusterIP
|
|
port: 6379
|
|
|
|
## Specify the nodePort value for the LoadBalancer and NodePort service types.
|
|
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
|
|
##
|
|
# nodePort:
|
|
|
|
## Provide any additional annotations which may be required. This can be used to
|
|
## set the LoadBalancer service type to internal only.
|
|
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
|
|
##
|
|
annotations: {}
|
|
labels: {}
|
|
loadBalancerIP:
|
|
# loadBalancerSourceRanges: ["10.0.0.0/8"]
|
|
|
|
## Enable persistence using Persistent Volume Claims
|
|
## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
|
|
##
|
|
persistence:
|
|
enabled: true
|
|
## The path the volume will be mounted at, useful when using different
|
|
## Redis images.
|
|
path: /data
|
|
## The subdirectory of the volume to mount to, useful in dev environments
|
|
## and one PV for multiple services.
|
|
subPath: ""
|
|
## redis data Persistent Volume Storage Class
|
|
## If defined, storageClassName: <storageClass>
|
|
## If set to "-", storageClassName: "", which disables dynamic provisioning
|
|
## If undefined (the default) or set to null, no storageClassName spec is
|
|
## set, choosing the default provisioner. (gp2 on AWS, standard on
|
|
## GKE, AWS & OpenStack)
|
|
##
|
|
# storageClass: "-"
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
size: 8Gi
|
|
## Persistent Volume selectors
|
|
## https://kubernetes.io/docs/concepts/storage/persistent-volumes/#selector
|
|
matchLabels: {}
|
|
matchExpressions: {}
|
|
|
|
## Update strategy, can be set to RollingUpdate or onDelete by default.
|
|
## https://kubernetes.io/docs/tutorials/stateful-application/basic-stateful-set/#updating-statefulsets
|
|
statefulset:
|
|
updateStrategy: RollingUpdate
|
|
## Partition update strategy
|
|
## https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#partitions
|
|
# rollingUpdatePartition:
|
|
|
|
## Redis Master pod priorityClassName
|
|
##
|
|
priorityClassName: {}
|
|
|
|
##
|
|
## Redis Slave properties
|
|
## Note: service.type is a mandatory parameter
|
|
## The rest of the parameters are either optional or, if undefined, will inherit those declared in Redis Master
|
|
##
|
|
slave:
|
|
## Slave Service properties
|
|
service:
|
|
## Redis Slave Service type
|
|
type: ClusterIP
|
|
## Redis port
|
|
port: 6379
|
|
## Specify the nodePort value for the LoadBalancer and NodePort service types.
|
|
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
|
|
##
|
|
# nodePort:
|
|
|
|
## Provide any additional annotations which may be required. This can be used to
|
|
## set the LoadBalancer service type to internal only.
|
|
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
|
|
##
|
|
annotations: {}
|
|
labels: {}
|
|
loadBalancerIP:
|
|
# loadBalancerSourceRanges: ["10.0.0.0/8"]
|
|
|
|
## Redis slave port
|
|
port: 6379
|
|
## Can be used to specify command line arguments, for example:
|
|
##
|
|
command: "/run.sh"
|
|
## Additional Redis configuration for the slave nodes
|
|
## ref: https://redis.io/topics/config
|
|
##
|
|
configmap:
|
|
## Redis extra flags
|
|
extraFlags: []
|
|
## List of Redis commands to disable
|
|
disableCommands:
|
|
- FLUSHDB
|
|
- FLUSHALL
|
|
|
|
## Redis Slave pod/node affinity/anti-affinity
|
|
##
|
|
affinity: {}
|
|
|
|
## Configure extra options for Redis Slave liveness and readiness probes
|
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes)
|
|
##
|
|
livenessProbe:
|
|
enabled: true
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
successThreshold: 1
|
|
failureThreshold: 5
|
|
readinessProbe:
|
|
enabled: true
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 10
|
|
successThreshold: 1
|
|
failureThreshold: 5
|
|
|
|
## Configure custom probes for images other images like
|
|
## rhscl/redis-32-rhel7 rhscl/redis-5-rhel7
|
|
## Only used if readinessProbe.enabled: false / livenessProbe.enabled: false
|
|
##
|
|
# customLivenessProbe:
|
|
# tcpSocket:
|
|
# port: 6379
|
|
# initialDelaySeconds: 10
|
|
# periodSeconds: 5
|
|
# customReadinessProbe:
|
|
# initialDelaySeconds: 30
|
|
# periodSeconds: 10
|
|
# timeoutSeconds: 5
|
|
# exec:
|
|
# command:
|
|
# - "container-entrypoint"
|
|
# - "bash"
|
|
# - "-c"
|
|
# - "redis-cli set liveness-probe \"`date`\" | grep OK"
|
|
customLivenessProbe: {}
|
|
customReadinessProbe: {}
|
|
|
|
## Redis slave Resource
|
|
# resources:
|
|
# requests:
|
|
# memory: 256Mi
|
|
# cpu: 100m
|
|
|
|
## Redis slave selectors and tolerations for pod assignment
|
|
# nodeSelector: {"beta.kubernetes.io/arch": "amd64"}
|
|
# tolerations: []
|
|
|
|
## Use an alternate scheduler, e.g. "stork".
|
|
## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
|
|
##
|
|
# schedulerName:
|
|
|
|
## Redis slave pod Annotation and Labels
|
|
podLabels: {}
|
|
podAnnotations: {}
|
|
|
|
## Redis slave pod priorityClassName
|
|
# priorityClassName: {}
|
|
|
|
## Enable persistence using Persistent Volume Claims
|
|
## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
|
|
##
|
|
persistence:
|
|
enabled: true
|
|
## The path the volume will be mounted at, useful when using different
|
|
## Redis images.
|
|
path: /data
|
|
## The subdirectory of the volume to mount to, useful in dev environments
|
|
## and one PV for multiple services.
|
|
subPath: ""
|
|
## redis data Persistent Volume Storage Class
|
|
## If defined, storageClassName: <storageClass>
|
|
## If set to "-", storageClassName: "", which disables dynamic provisioning
|
|
## If undefined (the default) or set to null, no storageClassName spec is
|
|
## set, choosing the default provisioner. (gp2 on AWS, standard on
|
|
## GKE, AWS & OpenStack)
|
|
##
|
|
# storageClass: "-"
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
size: 8Gi
|
|
## Persistent Volume selectors
|
|
## https://kubernetes.io/docs/concepts/storage/persistent-volumes/#selector
|
|
matchLabels: {}
|
|
matchExpressions: {}
|
|
|
|
## Update strategy, can be set to RollingUpdate or onDelete by default.
|
|
## https://kubernetes.io/docs/tutorials/stateful-application/basic-stateful-set/#updating-statefulsets
|
|
statefulset:
|
|
updateStrategy: RollingUpdate
|
|
## Partition update strategy
|
|
## https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#partitions
|
|
# rollingUpdatePartition:
|
|
|
|
## Prometheus Exporter / Metrics
|
|
##
|
|
metrics:
|
|
enabled: true
|
|
|
|
image:
|
|
registry: docker.io
|
|
repository: bitnami/redis-exporter
|
|
tag: 1.5.3-debian-10-r14
|
|
pullPolicy: IfNotPresent
|
|
## Optionally specify an array of imagePullSecrets.
|
|
## Secrets must be manually created in the namespace.
|
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
|
##
|
|
# pullSecrets:
|
|
# - myRegistryKeySecretName
|
|
|
|
## Metrics exporter resource requests and limits
|
|
## ref: http://kubernetes.io/docs/user-guide/compute-resources/
|
|
##
|
|
# resources: {}
|
|
|
|
## Extra arguments for Metrics exporter, for example:
|
|
## extraArgs:
|
|
## check-keys: myKey,myOtherKey
|
|
# extraArgs: {}
|
|
|
|
## Metrics exporter pod Annotation and Labels
|
|
podAnnotations:
|
|
prometheus.io/scrape: "true"
|
|
prometheus.io/port: "9121"
|
|
# podLabels: {}
|
|
|
|
# Enable this if you're using https://github.com/coreos/prometheus-operator
|
|
serviceMonitor:
|
|
enabled: false
|
|
## Specify a namespace if needed
|
|
# namespace: monitoring
|
|
# fallback to the prometheus default unless specified
|
|
# interval: 10s
|
|
## Defaults to what's used if you follow CoreOS [Prometheus Install Instructions](https://github.com/bitnami/charts/tree/master/bitnami/prometheus-operator#tldr)
|
|
## [Prometheus Selector Label](https://github.com/bitnami/charts/tree/master/bitnami/prometheus-operator#prometheus-operator-1)
|
|
## [Kube Prometheus Selector Label](https://github.com/bitnami/charts/tree/master/bitnami/prometheus-operator#exporters)
|
|
selector:
|
|
prometheus: kube-prometheus
|
|
|
|
## Custom PrometheusRule to be defined
|
|
## The value is evaluated as a template, so, for example, the value can depend on .Release or .Chart
|
|
## ref: https://github.com/coreos/prometheus-operator#customresourcedefinitions
|
|
prometheusRule:
|
|
enabled: false
|
|
additionalLabels: {}
|
|
namespace: ""
|
|
## Redis prometheus rules
|
|
## These are just examples rules, please adapt them to your needs.
|
|
## Make sure to constraint the rules to the current postgresql service.
|
|
# rules:
|
|
# - alert: RedisDown
|
|
# expr: redis_up{service="{{ template "redis.fullname" . }}-metrics"} == 0
|
|
# for: 2m
|
|
# labels:
|
|
# severity: error
|
|
# annotations:
|
|
# summary: Redis instance {{ "{{ $labels.instance }}" }} down
|
|
# description: Redis instance {{ "{{ $labels.instance }}" }} is down
|
|
# - alert: RedisMemoryHigh
|
|
# expr: >
|
|
# redis_memory_used_bytes{service="{{ template "redis.fullname" . }}-metrics"} * 100
|
|
# /
|
|
# redis_memory_max_bytes{service="{{ template "redis.fullname" . }}-metrics"}
|
|
# > 90 =< 100
|
|
# for: 2m
|
|
# labels:
|
|
# severity: error
|
|
# annotations:
|
|
# summary: Redis instance {{ "{{ $labels.instance }}" }} is using too much memory
|
|
# description: |
|
|
# Redis instance {{ "{{ $labels.instance }}" }} is using {{ "{{ $value }}" }}% of its available memory.
|
|
# - alert: RedisKeyEviction
|
|
# expr: |
|
|
# increase(redis_evicted_keys_total{service="{{ template "redis.fullname" . }}-metrics"}[5m]) > 0
|
|
# for: 1s
|
|
# labels:
|
|
# severity: error
|
|
# annotations:
|
|
# summary: Redis instance {{ "{{ $labels.instance }}" }} has evicted keys
|
|
# description: |
|
|
# Redis instance {{ "{{ $labels.instance }}" }} has evicted {{ "{{ $value }}" }} keys in the last 5 minutes.
|
|
rules: []
|
|
|
|
## Metrics exporter pod priorityClassName
|
|
# priorityClassName: {}
|
|
service:
|
|
type: ClusterIP
|
|
## Use serviceLoadBalancerIP to request a specific static IP,
|
|
## otherwise leave blank
|
|
# loadBalancerIP:
|
|
annotations: {}
|
|
labels: {}
|
|
|
|
##
|
|
## Init containers parameters:
|
|
## volumePermissions: Change the owner of the persist volume mountpoint to RunAsUser:fsGroup
|
|
##
|
|
volumePermissions:
|
|
enabled: false
|
|
image:
|
|
registry: docker.io
|
|
repository: bitnami/minideb
|
|
tag: buster
|
|
pullPolicy: Always
|
|
## Optionally specify an array of imagePullSecrets.
|
|
## Secrets must be manually created in the namespace.
|
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
|
##
|
|
# pullSecrets:
|
|
# - myRegistryKeySecretName
|
|
resources: {}
|
|
# resources:
|
|
# requests:
|
|
# memory: 128Mi
|
|
# cpu: 100m
|
|
|
|
## Redis config file
|
|
## ref: https://redis.io/topics/config
|
|
##
|
|
configmap: |-
|
|
# Enable AOF https://redis.io/topics/persistence#append-only-file
|
|
appendonly yes
|
|
# Disable RDB persistence, AOF persistence already enabled.
|
|
save ""
|
|
|
|
## Sysctl InitContainer
|
|
## used to perform sysctl operation to modify Kernel settings (needed sometimes to avoid warnings)
|
|
sysctlImage:
|
|
enabled: false
|
|
command: []
|
|
registry: docker.io
|
|
repository: bitnami/minideb
|
|
tag: buster
|
|
pullPolicy: Always
|
|
## Optionally specify an array of imagePullSecrets.
|
|
## Secrets must be manually created in the namespace.
|
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
|
##
|
|
# pullSecrets:
|
|
# - myRegistryKeySecretName
|
|
mountHostSys: false
|
|
resources: {}
|
|
# resources:
|
|
# requests:
|
|
# memory: 128Mi
|
|
# cpu: 100m
|
|
|
|
## PodSecurityPolicy configuration
|
|
## ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
|
|
##
|
|
podSecurityPolicy:
|
|
## Specifies whether a PodSecurityPolicy should be created
|
|
##
|
|
create: false
|