KubeZero/charts/kubezero-kiam/values.yaml

annotateKubeSystemNameSpace: false

kiam:
  enabled: true
  server:
    # kiam.server.assumeRoleArn --  kiam server IAM role to assume, required as we run the agents next to the servers normally, eg. arn:aws:iam::123456789012:role/kiam-server-role
    assumeRoleArn: ''
    useHostNetwork: true
    sslCertHostPath: /etc/ssl/certs
    tlsSecret: kiam-server-tls
    tlsCerts:
      certFileName: tls.crt
      keyFileName:  tls.key
      caFileName:   ca.crt
    service:
      port: 6444
      targetPort: 6444
    deployment:
      enabled: true
      replicas: 1
    updateStrategy: RollingUpdate
    resources:
     requests:
       memory: "64Mi"
       cpu: "50m"
     limits:
       memory: "128Mi"
       # cpu: "300m"
    tolerations:
    - key: node-role.kubernetes.io/master
      effect: NoSchedule
    nodeSelector:
      node-role.kubernetes.io/master: ""
    priorityClassName: system-cluster-critical
    prometheus:
      servicemonitor:
        enabled: false
        interval: 30s
        labels:
          release: metrics
    log:
      level: info

  agent:
    gatewayTimeoutCreation: "5s"
    updateStrategy: RollingUpdate
    # IP tables set on each node at boot, see CloudBender
    host:
      iptables: false
      interface: "cali+"
    allowRouteRegexp: '^/latest/(meta-data/instance-id|dynamic)'
    sslCertHostPath: /etc/ssl/certs
    tlsSecret: kiam-agent-tls
    tlsCerts:
      certFileName: tls.crt
      keyFileName:  tls.key
      caFileName:   ca.crt
    resources:
     requests:
       memory: "16Mi"
       cpu: "50m"
     limits:
       memory: "64Mi"
       # cpu: "50m"
    tolerations:
    - key: node-role.kubernetes.io/master
      effect: NoSchedule
    - key: kubezero-workergroup
      effect: NoSchedule
      operator: Exists
    priorityClassName: system-node-critical
    prometheus:
      servicemonitor:
        enabled: false
        interval: 30s
        labels:
          release: metrics
    log:
      level: info
  #  extraEnv:
  #  - name: GRPC_GO_LOG_SEVERITY_LEVEL
  #    value: "info"
  #  - name: GRPC_GO_LOG_VERBOSITY_LEVEL
  #    value: "8"
Make the kiam annotate namespace job optional 2020-09-18 15:18:59 +00:00			`annotateKubeSystemNameSpace: false`

First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`kiam:`
New bootstrap flow 2020-09-14 15:06:53 +00:00			`enabled: true`
First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`server:`
First version of aws-ebs-csi-driver umbrella chart, updated docs 2020-05-19 14:13:41 +00:00			`# kiam.server.assumeRoleArn -- kiam server IAM role to assume, required as we run the agents next to the servers normally, eg. arn:aws:iam::123456789012:role/kiam-server-role`
			`assumeRoleArn: ''`
First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`useHostNetwork: true`
			`sslCertHostPath: /etc/ssl/certs`
			`tlsSecret: kiam-server-tls`
Fix secret names to match cert-manager 2020-05-15 15:35:33 +00:00			`tlsCerts:`
			`certFileName: tls.crt`
			`keyFileName: tls.key`
			`caFileName: ca.crt`
First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`service:`
			`port: 6444`
			`targetPort: 6444`
			`deployment:`
			`enabled: true`
First kiam implementation incl. docs 2020-05-15 15:07:01 +00:00			`replicas: 1`
Enable rollingUpdate support kiam, turn off iptables support 2020-05-15 16:23:25 +00:00			`updateStrategy: RollingUpdate`
Add resources to Kiam 2020-09-10 13:22:47 +00:00			`resources:`
			`requests:`
fix: loosen kiam memory limits slightly to prevent OOM endless loops 2021-04-09 11:44:48 +00:00			`memory: "64Mi"`
remove default cpu limmits for kiam 2021-03-05 09:22:54 +00:00			`cpu: "50m"`
Add resources to Kiam 2020-09-10 13:22:47 +00:00			`limits:`
fix: loosen kiam memory limits slightly to prevent OOM endless loops 2021-04-09 11:44:48 +00:00			`memory: "128Mi"`
remove default cpu limmits for kiam 2021-03-05 09:22:54 +00:00			`# cpu: "300m"`
First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`tolerations:`
			`- key: node-role.kubernetes.io/master`
			`effect: NoSchedule`
			`nodeSelector:`
			`node-role.kubernetes.io/master: ""`
Update of various components, new aroless bootstrap working 2020-11-21 12:24:57 +00:00			`priorityClassName: system-cluster-critical`
First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`prometheus:`
			`servicemonitor:`
			`enabled: false`
Adjust scrape internal for kiam to match others, and servicemonitor for agents 2020-08-14 21:31:34 +00:00			`interval: 30s`
Add proper label for kiam servicemonitors 2020-08-14 16:39:05 +00:00			`labels:`
			`release: metrics`
First kiam implementation incl. docs 2020-05-15 15:07:01 +00:00			`log:`
Update of various components, new aroless bootstrap working 2020-11-21 12:24:57 +00:00			`level: info`
First kiam implementation incl. docs 2020-05-15 15:07:01 +00:00
First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`agent:`
Enable rollingUpdate support kiam, turn off iptables support 2020-05-15 16:23:25 +00:00			`gatewayTimeoutCreation: "5s"`
			`updateStrategy: RollingUpdate`
			`# IP tables set on each node at boot, see CloudBender`
First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`host:`
Enable rollingUpdate support kiam, turn off iptables support 2020-05-15 16:23:25 +00:00			`iptables: false`
			`interface: "cali+"`
Fix changed key for kiam 2021-01-21 13:35:20 +00:00			`allowRouteRegexp: '^/latest/(meta-data/instance-id\|dynamic)'`
First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`sslCertHostPath: /etc/ssl/certs`
			`tlsSecret: kiam-agent-tls`
Fix secret names to match cert-manager 2020-05-15 15:35:33 +00:00			`tlsCerts:`
			`certFileName: tls.crt`
			`keyFileName: tls.key`
			`caFileName: ca.crt`
Add resources to Kiam 2020-09-10 13:22:47 +00:00			`resources:`
			`requests:`
fix: loosen kiam memory limits slightly to prevent OOM endless loops 2021-04-09 11:44:48 +00:00			`memory: "16Mi"`
Add resources to Kiam 2020-09-10 13:22:47 +00:00			`cpu: "50m"`
			`limits:`
fix: loosen kiam memory limits slightly to prevent OOM endless loops 2021-04-09 11:44:48 +00:00			`memory: "64Mi"`
remove default cpu limmits for kiam 2021-03-05 09:22:54 +00:00			`# cpu: "50m"`
First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`tolerations:`
			`- key: node-role.kubernetes.io/master`
			`effect: NoSchedule`
Feat: add workergroup toleration to kiam-agents 2021-07-19 14:21:20 +00:00			`- key: kubezero-workergroup`
			`effect: NoSchedule`
fix: fix toleration 2021-07-19 14:36:07 +00:00			`operator: Exists`
Update of various components, new aroless bootstrap working 2020-11-21 12:24:57 +00:00			`priorityClassName: system-node-critical`
First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`prometheus:`
			`servicemonitor:`
			`enabled: false`
Adjust scrape internal for kiam to match others, and servicemonitor for agents 2020-08-14 21:31:34 +00:00			`interval: 30s`
Add proper label for kiam servicemonitors 2020-08-14 16:39:05 +00:00			`labels:`
			`release: metrics`
First kiam implementation incl. docs 2020-05-15 15:07:01 +00:00			`log:`
Update of various components, new aroless bootstrap working 2020-11-21 12:24:57 +00:00			`level: info`
First draft of Kiam chart, various fixes and improvements, cascade delete enabled by default 2020-05-14 17:24:51 +00:00			`# extraEnv:`
			`# - name: GRPC_GO_LOG_SEVERITY_LEVEL`
			`# value: "info"`
			`# - name: GRPC_GO_LOG_VERBOSITY_LEVEL`
			`# value: "8"`