headlamp values.yaml📜
domain📜
Type: string
"dev.bigbang.mil"
Description: Domain used for BigBang created exposed services
global.imagePullSecrets[0].name📜
Type: string
"private-registry"
istio.enabled📜
Type: bool
false
istio.hardened📜
Type: object
customAuthorizationPolicies: []
customServiceEntries: []
enabled: false
outboundTrafficPolicyMode: REGISTRY_ONLY
Description: Default peer authentication values
istio.mtls.mode📜
Type: string
"STRICT"
Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
istio.headlamp📜
Type: object
annotations: {}
enabled: true
gateways:
- istio-system/public
hosts:
- headlamp.{{ .Values.domain }}
labels: {}
Description: Headlamp UI specific VirtualService values
istio.headlamp.enabled📜
Type: bool
true
Description: Toggle VirtualService creation
networkPolicies.enabled📜
Type: bool
false
networkPolicies.controlPlaneCidr📜
Type: string
"0.0.0.0/0"
networkPolicies.ingressLabels.app📜
Type: string
"public-ingressgateway"
networkPolicies.ingressLabels.istio📜
Type: string
"ingressgateway"
networkPolicies.additionalPolicies📜
Type: list
[]
openshift📜
Type: bool
false
monitoring📜
Type: object
enabled: false
serviceMonitor:
scheme: ''
tlsConfig: {}
Description: Monitoring toggle, affects servicemonitor and networkPolicies
metrics.enabled📜
Type: bool
false
Description: Toggle Prometheus Blackbox Exporter Installation
metrics.port📜
Type: int
9115
metrics.global📜
Type: object
imagePullSecrets:
- name: private-registry
Description: Exporter imagePullSecrets
metrics.image.registry📜
Type: string
"registry1.dso.mil"
metrics.image.repository📜
Type: string
"ironbank/opensource/prometheus/blackbox_exporter"
metrics.image.tag📜
Type: string
"v0.27.0"
metrics.image.pullSecret📜
Type: string
"private-registry"
metrics.podSecurityContext📜
Type: object
runAsGroup: 1000
Description: Pod securityContext
metrics.securityContext📜
Type: object
runAsGroup: 1000
runAsUser: 1000
Description: Container securityContext
metrics.config.modules.http_2xx.prober📜
Type: string
"http"
metrics.config.modules.http_2xx.timeout📜
Type: string
"5s"
metrics.config.modules.http_2xx.http.method📜
Type: string
"GET"
bbtests.enabled📜
Type: bool
false
bbtests.cypress.artifacts📜
Type: bool
true
bbtests.cypress.envs.cypress_url📜
Type: string
"http://headlamp.headlamp.svc.cluster.local:4466"
bbtests.cypress.resources.requests.cpu📜
Type: string
"1"
bbtests.cypress.resources.requests.memory📜
Type: string
"2Gi"
bbtests.cypress.resources.limits.cpu📜
Type: string
"1"
bbtests.cypress.resources.limits.memory📜
Type: string
"2Gi"
upstream.image.registry📜
Type: string
"registry1.dso.mil"
Description: Container image registry
upstream.image.repository📜
Type: string
"ironbank/opensource/headlamp-k8s/headlamp"
Description: Container image name
upstream.image.pullPolicy📜
Type: string
"IfNotPresent"
Description: Image pull policy. One of Always, Never, IfNotPresent
upstream.image.tag📜
Type: string
"v0.34.0"
Description: Container image tag, If “” uses appVersion in Chart.yaml
upstream.image.pullSecrets[0]📜
Type: string
"private-registry"
upstream.imagePullSecrets📜
Type: list
- name: private-registry
Description: An optional list of references to secrets in the same namespace to use for pulling any of the images used
upstream.nameOverride📜
Type: string
"headlamp"
Description: Overrides the name of the chart
upstream.config.baseURL📜
Type: string
""
Description: base url path at which headlamp should run Note: Do not include a trailing slash in the baseURL configuration. Example: “/headlamp”
upstream.config.oidc.clientID📜
Type: string
""
Description: OIDC client ID Change to your respective IDP endpoints
upstream.securityContext📜
Type: object
privileged: false
runAsGroup: 101
runAsNonRoot: true
runAsUser: 100
Description: Headlamp containers Security Context
upstream.service.port📜
Type: int
4466
Description: Kubernetes Service port