Skip to content

mattermost-operator values.yaml📜

image.imagePullPolicy📜

Type: string

Default value
"IfNotPresent"

Description: Default image pull policy

image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/mattermost/mattermost-operator"

Description: Full image name

image.tag📜

Type: string

Default value
"v1.25.4"

Description: Image tag

replicas.count📜

Type: int

Default value
1

Description: Mattermost operator desired replicas

imagePullSecrets📜

Type: list

Default value
- name: private-registry

Description: Image pull secrets

resources📜

Type: object

Default value
limits:
  cpu: 100m
  memory: 512Mi
requests:
  cpu: 100m
  memory: 512Mi

Description: Resources for operator pod(s)

securityContext📜

Type: object

Default value
runAsGroup: 65532
runAsNonRoot: true
runAsUser: 65532

Description: securityContext for Kubernetes pod(s)

containerSecurityContext📜

Type: object

Default value
capabilities:
  drop:
  - ALL
privileged: false
readOnlyRootFilesystem: true

Description: containerSecurityContext for operator container

affinity📜

Type: object

Default value
{}

Description: Affinity for operator pod(s)

nodeSelector📜

Type: object

Default value
{}

Description: Node selector for operator pod(s)

tolerations📜

Type: object

Default value
{}

Description: Tolerations for operator pod(s)

podAnnotations📜

Type: object

Default value
{}

Description: Annotations for operator pod(s)

podLabels📜

Type: object

Default value
{}

Description: Labels for operator pod(s)

networkPolicies.enabled📜

Type: bool

Default value
true

Description: Toggle on/off Big Bang provided network policies

networkPolicies.egress📜

Type: object

Default value
from:
  mattermost-operator:
    podSelector:
      matchLabels:
        name: mattermost-operator
    to:
      definition:
        kubeAPI: true

Description: Egress policies for the mattermost-operator

networkPolicies.egress.from.mattermost-operator📜

Type: object

Default value
podSelector:
  matchLabels:
    name: mattermost-operator
to:
  definition:
    kubeAPI: true

Description: The mattermost-operator needs access to Kubernetes API to manage CRDs

istio.enabled📜

Type: bool

Default value
false

Description: Toggle on/off istio interaction, used for network policies and mTLS

istio.mtls📜

Type: object

Default value
mode: STRICT

Description: Default peer authentication

istio.mtls.mode📜

Type: string

Default value
"STRICT"

Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic

istio.sidecar📜

Type: object

Default value
enabled: false
outboundTrafficPolicyMode: REGISTRY_ONLY

Description: Sidecar configuration for outbound traffic policy

istio.authorizationPolicies📜

Type: object

Default value
custom: []
enabled: false
generateFromNetpol: true

Description: Authorization policies configuration

istio.authorizationPolicies.generateFromNetpol📜

Type: bool

Default value
true

Description: Generate authorization policies from network policies

istio.authorizationPolicies.custom📜

Type: list

Default value
[]

Description: Custom authorization policies

monitoring.enabled📜

Type: bool

Default value
false

Description: Toggle on/off monitoring interaction, used for network policies

openshift📜

Type: bool

Default value
false

Description: Openshift feature toggle, used for DNS network policy