Skip to content

eck-operator values.yaml📜

istio.enabled📜

Type: bool

Default value
false

istio.hardened.enabled📜

Type: bool

Default value
false

istio.hardened.customAuthorizationPolicies📜

Type: list

Default value
[]

istio.hardened.outboundTrafficPolicyMode📜

Type: string

Default value
"REGISTRY_ONLY"

istio.hardened.customServiceEntries📜

Type: list

Default value
[]

istio.hardened.tempo.enabled📜

Type: bool

Default value
false

istio.hardened.tempo.namespaces[0]📜

Type: string

Default value
"tempo"

istio.hardened.tempo.principals[0]📜

Type: string

Default value
"cluster.local/ns/tempo/sa/tempo-tempo"

istio.mtls.mode📜

Type: string

Default value
"STRICT"

networkPolicies.enabled📜

Type: bool

Default value
false

networkPolicies.controlPlaneCidr📜

Type: string

Default value
"0.0.0.0/0"

networkPolicies.additionalPolicies📜

Type: list

Default value
[]

monitoring.enabled📜

Type: bool

Default value
false

serviceMonitor.enabled📜

Type: bool

Default value
false

serviceMonitor.additionalLabels📜

Type: object

Default value
{}

Description: Additional labels for the service monitor

serviceMonitor.interval📜

Type: string

Default value
"30s"

Description: Scrape interval. If not set, the Prometheus default scrape interval is used.

serviceMonitor.metricRelabelings📜

Type: list

Default value
[]

Description: MetricRelabelConfigs to apply to samples after scraping, but before ingestion. ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig

serviceMonitor.scheme📜

Type: string

Default value
"https"

Description: Customize tls parameters for the service monitor

serviceMonitor.tlsConfig📜

Type: object

Default value
{}

serviceMonitor.relabelings📜

Type: list

Default value
[]

Description: RelabelConfigs to apply to samples before scraping ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig

serviceMonitor.enableHttp2📜

Type: bool

Default value
false

Description: Enable HTTP/2 for the service monitor scraping endpoint. Default is false for compatibility.

openshift📜

Type: bool

Default value
false

license.trial📜

Type: bool

Default value
false

license.keyJSON📜

Type: string

Default value
""

upgradeCrds.enabled📜

Type: bool

Default value
false

upgradeCrds.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/big-bang/base"

upgradeCrds.image.tag📜

Type: string

Default value
"2.1.0"

upstream.imagePullSecrets[0].name📜

Type: string

Default value
"private-registry"

upstream.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/elastic/eck-operator/eck-operator"

upstream.image.tag📜

Type: string

Default value
"3.0.0"

upstream.image.pullPolicy📜

Type: string

Default value
"IfNotPresent"

upstream.image.fips📜

Type: bool

Default value
false

upstream.resources.limits.cpu📜

Type: string

Default value
"200m"

upstream.resources.limits.memory📜

Type: string

Default value
"256Mi"

upstream.resources.requests.cpu📜

Type: string

Default value
"200m"

upstream.resources.requests.memory📜

Type: string

Default value
"256Mi"

upstream.podSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

upstream.podSecurityContext.fsGroup📜

Type: int

Default value
1001

upstream.podSecurityContext.supplementalGroups[0]📜

Type: int

Default value
1001

upstream.securityContext.allowPrivilegeEscalation📜

Type: bool

Default value
false

upstream.securityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

upstream.securityContext.readOnlyRootFilesystem📜

Type: bool

Default value
true

upstream.securityContext.runAsNonRoot📜

Type: bool

Default value
true

upstream.securityContext.runAsUser📜

Type: int

Default value
1001

upstream.securityContext.runAsGroup📜

Type: int

Default value
1001

upstream.config.metrics.port📜

Type: string

Default value
"8080"