Skip to content

eck-operator values.yaml📜

nameOverride📜

Type: string

Default value
"elastic-operator"

fullnameOverride📜

Type: string

Default value
"elastic-operator"

managedNamespaces📜

Type: list

Default value
[]

installCRDs📜

Type: bool

Default value
true

replicaCount📜

Type: int

Default value
1

image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/elastic/eck-operator/eck-operator"

image.tag📜

Type: string

Default value
"2.12.1"

image.pullPolicy📜

Type: string

Default value
"IfNotPresent"

priorityClassName📜

Type: string

Default value
""

imagePullSecrets📜

Type: list

Default value
[]

resources.limits.cpu📜

Type: string

Default value
"200m"

resources.limits.memory📜

Type: string

Default value
"256Mi"

resources.requests.cpu📜

Type: string

Default value
"200m"

resources.requests.memory📜

Type: string

Default value
"256Mi"

podAnnotations📜

Type: object

Default value
{}

podLabels📜

Type: object

Default value
{}

podSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

podSecurityContext.fsGroup📜

Type: int

Default value
1001

podSecurityContext.supplementalGroups[0]📜

Type: int

Default value
1001

securityContext.allowPrivilegeEscalation📜

Type: bool

Default value
false

securityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

securityContext.readOnlyRootFilesystem📜

Type: bool

Default value
true

securityContext.runAsNonRoot📜

Type: bool

Default value
true

securityContext.runAsUser📜

Type: int

Default value
1001

securityContext.runAsGroup📜

Type: int

Default value
1001

nodeSelector📜

Type: object

Default value
{}

tolerations📜

Type: list

Default value
[]

affinity📜

Type: object

Default value
{}

podDisruptionBudget.enabled📜

Type: bool

Default value
false

podDisruptionBudget.minAvailable📜

Type: int

Default value
1

env📜

Type: list

Default value
[]

volumeMounts📜

Type: list

Default value
[]

volumes📜

Type: list

Default value
[]

createClusterScopedResources📜

Type: bool

Default value
true

serviceAccount.create📜

Type: bool

Default value
true

serviceAccount.annotations📜

Type: object

Default value
{}

serviceAccount.name📜

Type: string

Default value
""

tracing.enabled📜

Type: bool

Default value
false

tracing.config.ELASTIC_APM_SERVER_URL📜

Type: string

Default value
"http://localhost:8200"

tracing.config.ELASTIC_APM_SERVER_TIMEOUT📜

Type: string

Default value
"30s"

refs.enforceRBAC📜

Type: bool

Default value
false

webhook.enabled📜

Type: bool

Default value
true

webhook.caBundle📜

Type: string

Default value
"Cg=="

webhook.certManagerCert📜

Type: string

Default value
nil

webhook.certsDir📜

Type: string

Default value
"/tmp/k8s-webhook-server/serving-certs"

webhook.failurePolicy📜

Type: string

Default value
"Ignore"

webhook.manageCerts📜

Type: bool

Default value
true

webhook.namespaceSelector📜

Type: object

Default value
{}

webhook.objectSelector📜

Type: object

Default value
{}

webhook.port📜

Type: int

Default value
9443

webhook.secret📜

Type: string

Default value
""

hostNetwork📜

Type: bool

Default value
false

softMultiTenancy.enabled📜

Type: bool

Default value
false

kubeAPIServerIP📜

Type: string

Default value
nil

telemetry.disabled📜

Type: bool

Default value
false

telemetry.distributionChannel📜

Type: string

Default value
"helm"

config.logVerbosity📜

Type: string

Default value
"0"

config.metricsPort📜

Type: string

Default value
"0"

config.metrics.port📜

Type: string

Default value
"4321"

config.metrics.secureMode.enabled📜

Type: bool

Default value
false

config.metrics.secureMode.tls.certificateSecret📜

Type: string

Default value
""

config.metrics.secureMode.tls.caSecret📜

Type: string

Default value
""

config.metrics.secureMode.tls.caMountDirectory📜

Type: string

Default value
"/etc/prometheus/secrets/"

config.metrics.secureMode.tls.insecureSkipVerify📜

Type: bool

Default value
true

config.containerRegistry📜

Type: string

Default value
"docker.elastic.co"

config.maxConcurrentReconciles📜

Type: string

Default value
"3"

config.caValidity📜

Type: string

Default value
"8760h"

config.caRotateBefore📜

Type: string

Default value
"24h"

config.caDir📜

Type: string

Default value
""

config.certificatesValidity📜

Type: string

Default value
"8760h"

config.certificatesRotateBefore📜

Type: string

Default value
"24h"

config.disableConfigWatch📜

Type: bool

Default value
false

config.exposedNodeLabels[0]📜

Type: string

Default value
"topology.kubernetes.io/.*"

config.exposedNodeLabels[1]📜

Type: string

Default value
"failure-domain.beta.kubernetes.io/.*"

config.ipFamily📜

Type: string

Default value
""

config.setDefaultSecurityContext📜

Type: string

Default value
"auto-detect"

config.kubeClientTimeout📜

Type: string

Default value
"60s"

config.elasticsearchClientTimeout📜

Type: string

Default value
"180s"

config.validateStorageClass📜

Type: bool

Default value
true

config.enableLeaderElection📜

Type: bool

Default value
true

config.elasticsearchObservationInterval📜

Type: string

Default value
"10s"

config.ubiOnly📜

Type: bool

Default value
false

podMonitor.enabled📜

Type: bool

Default value
false

podMonitor.labels📜

Type: object

Default value
{}

podMonitor.annotations📜

Type: object

Default value
{}

podMonitor.interval📜

Type: string

Default value
"5m"

podMonitor.scrapeTimeout📜

Type: string

Default value
"30s"

podMonitor.podTargetLabels📜

Type: list

Default value
[]

podMonitor.podMetricsEndpointConfig📜

Type: object

Default value
{}

serviceMonitor📜

Type: object

Default value
{}

global.manifestGen📜

Type: bool

Default value
false

global.createOperatorNamespace📜

Type: bool

Default value
true

global.kubeVersion📜

Type: string

Default value
"1.21.0"

license.trial📜

Type: bool

Default value
false

license.keyJSON📜

Type: string

Default value
""

networkPolicies.enabled📜

Type: bool

Default value
false

networkPolicies.controlPlaneCidr📜

Type: string

Default value
"0.0.0.0/0"

networkPolicies.additionalPolicies📜

Type: list

Default value
[]

monitoring.enabled📜

Type: bool

Default value
false

openshift📜

Type: bool

Default value
false

istio.enabled📜

Type: bool

Default value
false

istio.hardened.enabled📜

Type: bool

Default value
false

istio.hardened.customAuthorizationPolicies📜

Type: list

Default value
[]

istio.hardened.outboundTrafficPolicyMode📜

Type: string

Default value
"REGISTRY_ONLY"

istio.hardened.customServiceEntries📜

Type: list

Default value
[]

istio.hardened.tempo.enabled📜

Type: bool

Default value
false

istio.hardened.tempo.namespaces[0]📜

Type: string

Default value
"tempo"

istio.hardened.tempo.principals[0]📜

Type: string

Default value
"cluster.local/ns/tempo/sa/tempo-tempo"

istio.mtls.mode📜

Type: string

Default value
"STRICT"

upgradeCrds.enabled📜

Type: bool

Default value
false

upgradeCrds.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/big-bang/base"

upgradeCrds.image.tag📜

Type: string

Default value
"2.1.0"