eck-operator values.yaml¶
istio.enabled¶
Type: bool
false
istio.mtls.mode¶
Type: string
"STRICT"
istio.sidecar.enabled¶
Type: bool
false
istio.sidecar.outboundTrafficPolicyMode¶
Type: string
"REGISTRY_ONLY"
istio.authorizationPolicies.enabled¶
Type: bool
false
istio.authorizationPolicies.generateFromNetpol¶
Type: bool
true
networkPolicies.enabled¶
Type: bool
false
networkPolicies.egress.definitions.elasticsearch.to[0].namespaceSelector¶
Type: object
{}
networkPolicies.egress.definitions.elasticsearch.to[0].podSelector.matchLabels.”common.k8s.elastic.co/type”¶
Type: string
"elasticsearch"
networkPolicies.egress.definitions.elasticsearch.ports[0].port¶
Type: int
9200
networkPolicies.egress.definitions.elasticsearch.ports[0].protocol¶
Type: string
"TCP"
networkPolicies.egress.definitions.kibana.to[0].namespaceSelector¶
Type: object
{}
networkPolicies.egress.definitions.kibana.to[0].podSelector.matchLabels.”common.k8s.elastic.co/type”¶
Type: string
"kibana"
networkPolicies.egress.definitions.kibana.ports[0].port¶
Type: int
5601
networkPolicies.egress.definitions.kibana.ports[0].protocol¶
Type: string
"TCP"
networkPolicies.egress.from.elastic-operator.to.definition.kubeAPI¶
Type: bool
true
networkPolicies.egress.from.elastic-operator.to.definition.elasticsearch¶
Type: bool
true
networkPolicies.egress.from.elastic-operator.to.definition.kibana¶
Type: bool
true
networkPolicies.egress.from.elastic-operator.to.k8s.tempo/tempo:9411¶
Type: bool
true
networkPolicies.ingress.to.elastic-operator:8080.from.k8s.monitoring/prometheus¶
Type: bool
true
networkPolicies.additionalPolicies¶
Type: list
[]
serviceMonitor.enabled¶
Type: bool
false
serviceMonitor.additionalLabels¶
Type: object
{}
Description: Additional labels for the service monitor
serviceMonitor.interval¶
Type: string
"30s"
Description: Scrape interval. If not set, the Prometheus default scrape interval is used.
serviceMonitor.metricRelabelings¶
Type: list
[]
Description: MetricRelabelConfigs to apply to samples after scraping, but before ingestion. ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api-reference/api.md#relabelconfig
serviceMonitor.scheme¶
Type: string
"https"
Description: Customize tls parameters for the service monitor
serviceMonitor.tlsConfig¶
Type: object
{}
serviceMonitor.relabelings¶
Type: list
[]
Description: RelabelConfigs to apply to samples before scraping ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api-reference/api.md#relabelconfig
serviceMonitor.enableHttp2¶
Type: bool
false
Description: Enable HTTP/2 for the service monitor scraping endpoint. Default is false for compatibility.
openshift¶
Type: bool
false
license.trial¶
Type: bool
false
license.keyJSON¶
Type: string
""
upgradeCrds.enabled¶
Type: bool
false
upgradeCrds.image.repository¶
Type: string
"registry1.dso.mil/ironbank/big-bang/base"
upgradeCrds.image.tag¶
Type: string
"2.1.0"
upstream.imagePullSecrets[0].name¶
Type: string
"private-registry"
upstream.image.repository¶
Type: string
"registry1.dso.mil/ironbank/elastic/eck-operator/eck-operator"
upstream.image.tag¶
Type: string
"3.4.1"
upstream.image.pullPolicy¶
Type: string
"IfNotPresent"
upstream.image.fips¶
Type: bool
false
upstream.resources.limits.cpu¶
Type: string
"200m"
upstream.resources.limits.memory¶
Type: string
"256Mi"
upstream.resources.requests.cpu¶
Type: string
"200m"
upstream.resources.requests.memory¶
Type: string
"256Mi"
upstream.podSecurityContext.runAsNonRoot¶
Type: bool
true
upstream.podSecurityContext.fsGroup¶
Type: int
1001
upstream.podSecurityContext.supplementalGroups[0]¶
Type: int
1001
upstream.securityContext.allowPrivilegeEscalation¶
Type: bool
false
upstream.securityContext.capabilities.drop[0]¶
Type: string
"ALL"
upstream.securityContext.readOnlyRootFilesystem¶
Type: bool
true
upstream.securityContext.runAsNonRoot¶
Type: bool
true
upstream.securityContext.runAsUser¶
Type: int
1001
upstream.securityContext.runAsGroup¶
Type: int
1001
upstream.config.metrics.port¶
Type: string
"8080"