mattermost-operator values.yaml
📜
image.imagePullPolicy📜
Type: string
"IfNotPresent"
Description: Default image pull policy
image.repository📜
Type: string
"registry1.dso.mil/ironbank/opensource/mattermost/mattermost-operator"
Description: Full image name
image.tag📜
Type: string
"v1.20.1"
Description: Image tag
replicas.count📜
Type: int
1
Description: Mattermost operator desired replicas
imagePullSecrets📜
Type: list
[{"name":"private-registry"}]
Default value (formatted)
[
{
"name": "private-registry"
}
]
Description: Image pull secrets
resources📜
Type: object
{"limits":{"cpu":"100m","memory":"512Mi"},"requests":{"cpu":"100m","memory":"512Mi"}}
Default value (formatted)
{
"limits": {
"cpu": "100m",
"memory": "512Mi"
},
"requests": {
"cpu": "100m",
"memory": "512Mi"
}
}
Description: Resources for operator pod(s)
securityContext📜
Type: object
{"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532}
Default value (formatted)
{
"runAsGroup": 65532,
"runAsNonRoot": true,
"runAsUser": 65532
}
Description: securityContext for Kubernetes pod(s)
containerSecurityContext📜
Type: object
{"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true}
Default value (formatted)
{
"capabilities": {
"drop": [
"ALL"
]
},
"privileged": false,
"readOnlyRootFilesystem": true
}
Description: containerSecurityContext for operator container
affinity📜
Type: object
{}
Default value (formatted)
{}
Description: Affinity for operator pod(s)
nodeSelector📜
Type: object
{}
Default value (formatted)
{}
Description: Node selector for operator pod(s)
tolerations📜
Type: object
{}
Default value (formatted)
{}
Description: Tolerations for operator pod(s)
podAnnotations📜
Type: object
{}
Default value (formatted)
{}
Description: Annotations for operator pod(s)
networkPolicies.enabled📜
Type: bool
false
Description: Toggle on/off Big Bang provided network policies
networkPolicies.controlPlaneCidr📜
Type: string
"0.0.0.0/0"
Description: See kubectl cluster-info
and then resolve to IP
istio.enabled📜
Type: bool
false
Description: Toggle on/off istio interaction, used for network policies and mTLS
istio.hardened.enabled📜
Type: bool
false
istio.hardened.customAuthorizationPolicies📜
Type: list
[]
Default value (formatted)
[]
istio.hardened.monitoring.enabled📜
Type: bool
true
istio.hardened.monitoring.namespaces[0]📜
Type: string
"monitoring"
istio.hardened.monitoring.principals[0]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-grafana"
istio.hardened.monitoring.principals[1]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-alertmanager"
istio.hardened.monitoring.principals[2]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-operator"
istio.hardened.monitoring.principals[3]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus"
istio.hardened.monitoring.principals[4]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-state-metrics"
istio.hardened.monitoring.principals[5]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-prometheus-node-exporter"
istio.mtls📜
Type: object
{"mode":"STRICT"}
Default value (formatted)
{
"mode": "STRICT"
}
Description: Default peer authentication
istio.mtls.mode📜
Type: string
"STRICT"
Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
monitoring.enabled📜
Type: bool
false
Description: Toggle on/off monitoring interaction, used for network policies
openshift📜
Type: bool
false
Description: Openshift feature toggle, used for DNS network policy