DirectorySecurity AdvisoriesPricing
/
Sign in
Directory
jaeger logoHELM

jaeger

Helm chart
Last changed
Request a free trial

Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.

Overview
Chart versions
Default values
Chart metadata
Images

Tag:

1
# This file has been modified by Chainguard, Inc.
2
#
3
# Copyright Chainguard, Inc. All Rights Reserved.
4
# Chainguard, Inc. modifications are subject to the license
5
# available at: https://www.chainguard.dev/legal/software-license-agreement
6
#
7
# Copyright Broadcom, Inc. All Rights Reserved.
8
# SPDX-License-Identifier: APACHE-2.0
9
10
## @section Global parameters
11
## Global Docker image parameters
12
## Please, note that this will override the image parameters, including dependencies, configured to use the global value
13
## Current available global Docker image parameters: imageRegistry, imagePullSecrets, defaultStorageClass and compatibility.
14
##
15
16
## @param global.imageRegistry Global Docker image registry
17
## @param global.imagePullSecrets Global Docker registry secret names as an array
18
## @param global.defaultStorageClass Global default StorageClass for Persistent Volume(s)
19
##
20
global:
21
imageRegistry: ""
22
## E.g.
23
## imagePullSecrets:
24
## - myRegistryKeySecretName
25
##
26
imagePullSecrets: []
27
defaultStorageClass: ""
28
## Security parameters
29
##
30
security:
31
## @param global.security.allowInsecureImages Allows skipping image verification
32
allowInsecureImages: false
33
## Compatibility adaptations for Kubernetes platforms
34
##
35
compatibility:
36
## Compatibility adaptations for Openshift
37
##
38
openshift:
39
## @param global.compatibility.openshift.adaptSecurityContext Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation)
40
##
41
adaptSecurityContext: auto
42
org: ""
43
## @section Common parameters
44
##
45
46
## @param nameOverride String to partially override common.names.fullname
47
##
48
nameOverride: ""
49
## @param fullnameOverride String to fully override common.names.fullname
50
##
51
fullnameOverride: ""
52
## @param kubeVersion Force target Kubernetes version (using Helm capabilities if not set)
53
##
54
kubeVersion: ""
55
## @param commonLabels Labels to add to all deployed objects (sub-charts are not considered)
56
##
57
commonLabels: {}
58
## @param commonAnnotations Annotations to add to all deployed objects
59
##
60
commonAnnotations: {}
61
## Enable diagnostic mode in the deployment
62
##
63
diagnosticMode:
64
## @param diagnosticMode.enabled Enable diagnostic mode (all probes will be disabled and the command will be overridden)
65
##
66
enabled: false
67
## @param diagnosticMode.command Command to override all containers in the deployment
68
##
69
command:
70
- sleep
71
## @param diagnosticMode.args Args to override all containers in the deployment
72
##
73
args:
74
- infinity
75
## @section Jaeger parameters
76
##
77
78
## Iamguarded Jaeger image
79
## @param image.registry [default: REGISTRY_NAME] Jaeger image registry
80
## @param image.repository [default: REPOSITORY_NAME/jaeger] Jaeger image repository
81
## @skip image.tag Jaeger image tag (immutable tags are recommended)
82
## @param image.digest Jaeger image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
83
## @param image.pullPolicy image pull policy
84
## @param image.pullSecrets Jaeger image pull secrets
85
## @param image.debug Enable image debug mode
86
##
87
image:
88
registry: cgr.dev
89
repository: chainguard-private/jaeger-iamguarded
90
tag: 2.15.1
91
digest: ""
92
## Specify a imagePullPolicy
93
## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
94
##
95
pullPolicy: IfNotPresent
96
## Optionally specify an array of imagePullSecrets.
97
## Secrets must be manually created in the namespace.
98
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
99
## e.g:
100
## pullSecrets:
101
## - myRegistryKeySecretName
102
##
103
pullSecrets: []
104
## Enable debug mode
105
##
106
debug: false
107
## @section Query deployment parameters
108
##
109
query:
110
## @param query.command Command for running the container (set to default if not set). Use array form
111
##
112
command: []
113
## @param query.args Args for running the container (set to default if not set). Use array form
114
##
115
args: []
116
## @param query.automountServiceAccountToken Mount Service Account token in pod
117
##
118
automountServiceAccountToken: false
119
## @param query.hostAliases Set pod host aliases
120
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
121
##
122
hostAliases: []
123
## @param query.lifecycleHooks [object] Override default etcd container hooks
124
##
125
lifecycleHooks: {}
126
## @param query.extraEnvVars Extra environment variables to be set on jaeger container
127
## For example:
128
## - name: FOO
129
## value: BAR
130
##
131
extraEnvVars: []
132
## @param query.extraEnvVarsCM Name of existing ConfigMap containing extra env vars
133
##
134
extraEnvVarsCM: ""
135
## @param query.extraEnvVarsSecret Name of existing Secret containing extra env vars
136
##
137
extraEnvVarsSecret: ""
138
## @param query.replicaCount Number of Jaeger replicas
139
##
140
replicaCount: 1
141
## Configure extra options for container's liveness, readiness and startup probes
142
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes
143
## @param query.livenessProbe.enabled Enable livenessProbe on Query nodes
144
## @param query.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
145
## @param query.livenessProbe.periodSeconds Period seconds for livenessProbe
146
## @param query.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
147
## @param query.livenessProbe.failureThreshold Failure threshold for livenessProbe
148
## @param query.livenessProbe.successThreshold Success threshold for livenessProbe
149
##
150
livenessProbe:
151
enabled: true
152
failureThreshold: 3
153
initialDelaySeconds: 10
154
periodSeconds: 10
155
successThreshold: 1
156
timeoutSeconds: 1
157
## @param query.startupProbe.enabled Enable startupProbe on Query containers
158
## @param query.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
159
## @param query.startupProbe.periodSeconds Period seconds for startupProbe
160
## @param query.startupProbe.timeoutSeconds Timeout seconds for startupProbe
161
## @param query.startupProbe.failureThreshold Failure threshold for startupProbe
162
## @param query.startupProbe.successThreshold Success threshold for startupProbe
163
##
164
startupProbe:
165
enabled: false
166
initialDelaySeconds: 10
167
periodSeconds: 10
168
timeoutSeconds: 1
169
failureThreshold: 15
170
successThreshold: 1
171
## @param query.readinessProbe.enabled Enable readinessProbe
172
## @param query.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
173
## @param query.readinessProbe.periodSeconds Period seconds for readinessProbe
174
## @param query.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
175
## @param query.readinessProbe.failureThreshold Failure threshold for readinessProbe
176
## @param query.readinessProbe.successThreshold Success threshold for readinessProbe
177
##
178
readinessProbe:
179
enabled: true
180
initialDelaySeconds: 10
181
periodSeconds: 10
182
timeoutSeconds: 1
183
failureThreshold: 15
184
successThreshold: 1
185
## @param query.customLivenessProbe Custom livenessProbe that overrides the default one
186
##
187
customLivenessProbe: {}
188
## @param query.customStartupProbe [object] Override default startup probe
189
##
190
customStartupProbe: {}
191
## @param query.customReadinessProbe [object] Override default readiness probe
192
##
193
customReadinessProbe: {}
194
## Jaeger pods' resource requests and limits
195
## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
196
## Minimum memory for development is 4GB and 2 CPU cores
197
## Minimum memory for production is 8GB and 4 CPU cores
198
## ref: http://docs.datastax.com/en/archived/jaeger/2.0/jaeger/architecture/architecturePlanningHardware_c.html
199
##
200
## We usually recommend not to specify default resources and to leave this as a conscious
201
## choice for the user. This also increases chances charts run on environments with little
202
## resources, such as Minikube. If you do want to specify resources, uncomment the following
203
## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
204
## @param query.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if query.resources is set (query.resources is recommended for production).
205
##
206
resourcesPreset: "small"
207
## @param query.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
208
## Example:
209
## resources:
210
## requests:
211
## cpu: 2
212
## memory: 512Mi
213
## limits:
214
## cpu: 3
215
## memory: 1024Mi
216
##
217
resources: {}
218
## @param query.extraVolumeMounts Optionally specify extra list of additional volumeMounts for jaeger container
219
##
220
extraVolumeMounts: []
221
## @param query.configuration Specify content for Jaeger collector configuration (auto-generated based on other values otherwise)
222
##
223
configuration: {}
224
## @param query.overrideConfiguration Jaeger query common configuration override. Values defined here takes precedence over the ones defined at `query.configuration`
225
##
226
overrideConfiguration: {}
227
## @param query.existingConfigmap The name of an existing ConfigMap with your custom configuration for Jaeger collector
228
##
229
existingConfigmap: ""
230
## Container ports to expose
231
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
232
containerPorts:
233
## @param query.containerPorts.grpc Port for GRPC API
234
##
235
grpc: 16685
236
## @param query.containerPorts.http Port for HTTP API
237
##
238
http: 16686
239
## @param query.containerPorts.metrics Jaeger query prometheus metrics port
240
##
241
metrics: 8888
242
## @param query.containerPorts.healthcheck Jaeger query healthcheck port
243
##
244
healthcheck: 13133
245
## Jaeger query.service parameters
246
##
247
service:
248
## @param query.service.type Jaeger service type
249
##
250
type: ClusterIP
251
## Ports to expose
252
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
253
ports:
254
## @param query.service.ports.grpc Port for gRPC API
255
##
256
grpc: 16685
257
## @param query.service.ports.http Port for API
258
##
259
http: 16686
260
## @param query.service.ports.metrics Jaeger query prometheus metrics port
261
##
262
metrics: 8888
263
## Node ports to expose
264
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
265
nodePorts:
266
## @param query.service.nodePorts.grpc Port for gRPC API
267
##
268
grpc: ""
269
## @param query.service.nodePorts.http Node port for API
270
##
271
http: ""
272
## @param query.service.nodePorts.metrics Jaeger query prometheus metrics port
273
##
274
metrics: ""
275
## @param query.service.extraPorts Extra ports to expose in the service (normally used with the `sidecar` value)
276
##
277
extraPorts: []
278
## @param query.service.loadBalancerIP LoadBalancerIP if service type is `LoadBalancer`
279
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
280
##
281
loadBalancerIP: ""
282
## @param query.service.loadBalancerSourceRanges Service Load Balancer sources
283
## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
284
## e.g:
285
## loadBalancerSourceRanges:
286
## - 10.10.10.0/24
287
##
288
loadBalancerSourceRanges: []
289
## @param query.service.clusterIP Service Cluster IP
290
## e.g.:
291
## clusterIP: None
292
##
293
clusterIP: ""
294
## @param query.service.externalTrafficPolicy Service external traffic policy
295
## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
296
##
297
externalTrafficPolicy: Cluster
298
## @param query.service.annotations Provide any additional annotations which may be required.
299
## This can be used to set the LoadBalancer service type to internal only.
300
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
301
##
302
annotations: {}
303
## @param query.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP"
304
## If "ClientIP", consecutive client requests will be directed to the same Pod
305
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
306
##
307
sessionAffinity: None
308
## @param query.service.sessionAffinityConfig Additional settings for the sessionAffinity
309
## sessionAffinityConfig:
310
## clientIP:
311
## timeoutSeconds: 300
312
##
313
sessionAffinityConfig: {}
314
## @param query.service.metrics.annotations [object] Annotations for Prometheus metrics
315
metrics:
316
annotations:
317
prometheus.io/scrape: "true"
318
prometheus.io/port: "{{ .Values.query.service.ports.metrics }}"
319
prometheus.io/path: "/metrics"
320
## Network Policies
321
## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
322
##
323
networkPolicy:
324
## @param query.networkPolicy.enabled Specifies whether a NetworkPolicy should be created
325
##
326
enabled: true
327
## @param query.networkPolicy.allowExternal Don't require server label for connections
328
## The Policy model to apply. When set to false, only pods with the correct
329
## server label will have network access to the ports server is listening
330
## on. When true, server will accept connections from any source
331
## (with the correct destination port).
332
##
333
allowExternal: true
334
## @param query.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations.
335
##
336
allowExternalEgress: true
337
## @param query.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy
338
## e.g:
339
## extraIngress:
340
## - ports:
341
## - port: 1234
342
## from:
343
## - podSelector:
344
## - matchLabels:
345
## - role: frontend
346
## - podSelector:
347
## - matchExpressions:
348
## - key: role
349
## operator: In
350
## values:
351
## - frontend
352
extraIngress: []
353
## @param query.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy
354
## e.g:
355
## extraEgress:
356
## - ports:
357
## - port: 1234
358
## to:
359
## - podSelector:
360
## - matchLabels:
361
## - role: frontend
362
## - podSelector:
363
## - matchExpressions:
364
## - key: role
365
## operator: In
366
## values:
367
## - frontend
368
##
369
extraEgress: []
370
## @param query.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces
371
## @param query.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces
372
##
373
ingressNSMatchLabels: {}
374
ingressNSPodMatchLabels: {}
375
## Jaeger Query serviceAccount parameters
376
##
377
serviceAccount:
378
## @param query.serviceAccount.create Enables ServiceAccount
379
##
380
create: true
381
## @param query.serviceAccount.name ServiceAccount name
382
##
383
name: ""
384
## @param query.serviceAccount.annotations Annotations to add to all deployed objects
385
##
386
annotations: {}
387
## @param query.serviceAccount.automountServiceAccountToken Automount API credentials for a service account.
388
##
389
automountServiceAccountToken: false
390
## Pod security context
391
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
392
## @param query.podSecurityContext.enabled Enabled Jaeger pods' Security Context
393
## @param query.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy
394
## @param query.podSecurityContext.sysctls Set kernel settings using the sysctl interface
395
## @param query.podSecurityContext.supplementalGroups Set filesystem extra groups
396
## @param query.podSecurityContext.fsGroup Set Jaeger pod's Security Context fsGroup
397
##
398
podSecurityContext:
399
enabled: true
400
fsGroupChangePolicy: Always
401
sysctls: []
402
supplementalGroups: []
403
fsGroup: 1001
404
## Configure Container Security Context (only main container)
405
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
406
## @param query.containerSecurityContext.enabled Enabled containers' Security Context
407
## @param query.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
408
## @param query.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
409
## @param query.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
410
## @param query.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
411
## @param query.containerSecurityContext.privileged Set container's Security Context privileged
412
## @param query.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
413
## @param query.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
414
## @param query.containerSecurityContext.capabilities.drop List of capabilities to be dropped
415
## @param query.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
416
##
417
containerSecurityContext:
418
enabled: true
419
seLinuxOptions: {}
420
runAsUser: 1001
421
runAsGroup: 1001
422
runAsNonRoot: true
423
privileged: false
424
readOnlyRootFilesystem: true
425
allowPrivilegeEscalation: false
426
capabilities:
427
drop: ["ALL"]
428
seccompProfile:
429
type: "RuntimeDefault"
430
## @param query.podAnnotations Additional pod annotations
431
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
432
##
433
podAnnotations: {}
434
## @param query.podLabels Additional pod labels
435
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
436
##
437
podLabels: {}
438
## @param query.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
439
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
440
##
441
podAffinityPreset: ""
442
## @param query.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
443
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
444
##
445
podAntiAffinityPreset: soft
446
## Node affinity preset
447
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
448
##
449
nodeAffinityPreset:
450
## @param query.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
451
##
452
type: ""
453
## @param query.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set
454
##
455
key: ""
456
## @param query.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set
457
## E.g.
458
## values:
459
## - e2e-az1
460
## - e2e-az2
461
##
462
values: []
463
## @param query.priorityClassName Server priorityClassName
464
## Ref: https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/
465
##
466
priorityClassName: ""
467
## @param query.affinity Affinity for pod assignment
468
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
469
## NOTE: podAffinityPreset, podAntiAffinityPreset, and nodeAffinityPreset will be ignored when it's set
470
##
471
affinity: {}
472
## @param query.nodeSelector Node labels for pod assignment
473
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/
474
##
475
nodeSelector: {}
476
## @param query.tolerations Tolerations for pod assignment
477
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
478
##
479
tolerations: []
480
## @param query.topologySpreadConstraints Topology Spread Constraints for pod assignment
481
## https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
482
## The value is evaluated as a template
483
##
484
topologySpreadConstraints: []
485
## @param query.schedulerName Alternative scheduler
486
## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
487
##
488
schedulerName: ""
489
## @param query.updateStrategy.type Jaeger query deployment strategy type
490
## @param query.updateStrategy.rollingUpdate Jaeger query deployment rolling update configuration parameters
491
## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
492
##
493
updateStrategy:
494
type: RollingUpdate
495
rollingUpdate: {}
496
## @param query.extraVolumes Optionally specify extra list of additional volumes for jaeger container
497
##
498
extraVolumes: []
499
## @param query.initContainers Add additional init containers to the jaeger pods
500
##
501
initContainers: []
502
## Pod Disruption Budget configuration
503
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb
504
## @param query.pdb.create Enable/disable a Pod Disruption Budget creation
505
## @param query.pdb.minAvailable Minimum number/percentage of pods that should remain scheduled
506
## @param query.pdb.maxUnavailable Maximum number/percentage of pods that may be made unavailable. Defaults to `1` if both `query.pdb.minAvailable` and `query.pdb.maxUnavailable` are empty.
507
##
508
pdb:
509
create: true
510
minAvailable: ""
511
maxUnavailable: ""
512
## @param query.sidecars Add additional sidecar containers to the jaeger pods
513
##
514
sidecars: []
515
## @section Collector deployment parameters
516
##
517
collector:
518
## @param collector.command Command for running the container (set to default if not set). Use array form
519
##
520
command: []
521
## @param collector.args Args for running the container (set to default if not set). Use array form
522
##
523
args: []
524
## @param collector.automountServiceAccountToken Mount Service Account token in pod
525
##
526
automountServiceAccountToken: false
527
## @param collector.hostAliases Set pod host aliases
528
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
529
##
530
hostAliases: []
531
## @param collector.lifecycleHooks [object] Override default etcd container hooks
532
##
533
lifecycleHooks: {}
534
## @param collector.extraEnvVars Extra environment variables to be set on jaeger container
535
## For example:
536
## - name: FOO
537
## value: BAR
538
##
539
extraEnvVars: []
540
## @param collector.extraEnvVarsCM Name of existing ConfigMap containing extra env vars
541
##
542
extraEnvVarsCM: ""
543
## @param collector.extraEnvVarsSecret Name of existing Secret containing extra env vars
544
##
545
extraEnvVarsSecret: ""
546
## @param collector.replicaCount Number of Jaeger replicas
547
##
548
replicaCount: 1
549
## Configure extra options for container's liveness, readiness and startup probes
550
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes
551
## @param collector.livenessProbe.enabled Enable livenessProbe on collector nodes
552
## @param collector.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
553
## @param collector.livenessProbe.periodSeconds Period seconds for livenessProbe
554
## @param collector.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
555
## @param collector.livenessProbe.failureThreshold Failure threshold for livenessProbe
556
## @param collector.livenessProbe.successThreshold Success threshold for livenessProbe
557
##
558
livenessProbe:
559
enabled: true
560
failureThreshold: 3
561
initialDelaySeconds: 10
562
periodSeconds: 10
563
successThreshold: 1
564
timeoutSeconds: 1
565
## @param collector.startupProbe.enabled Enable startupProbe on collector containers
566
## @param collector.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
567
## @param collector.startupProbe.periodSeconds Period seconds for startupProbe
568
## @param collector.startupProbe.timeoutSeconds Timeout seconds for startupProbe
569
## @param collector.startupProbe.failureThreshold Failure threshold for startupProbe
570
## @param collector.startupProbe.successThreshold Success threshold for startupProbe
571
##
572
startupProbe:
573
enabled: false
574
initialDelaySeconds: 10
575
periodSeconds: 10
576
timeoutSeconds: 1
577
failureThreshold: 15
578
successThreshold: 1
579
## @param collector.readinessProbe.enabled Enable readinessProbe
580
## @param collector.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
581
## @param collector.readinessProbe.periodSeconds Period seconds for readinessProbe
582
## @param collector.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
583
## @param collector.readinessProbe.failureThreshold Failure threshold for readinessProbe
584
## @param collector.readinessProbe.successThreshold Success threshold for readinessProbe
585
##
586
readinessProbe:
587
enabled: true
588
initialDelaySeconds: 10
589
periodSeconds: 10
590
timeoutSeconds: 1
591
failureThreshold: 15
592
successThreshold: 1
593
## @param collector.customLivenessProbe Custom livenessProbe that overrides the default one
594
##
595
customLivenessProbe: {}
596
## @param collector.customStartupProbe [object] Override default startup probe
597
##
598
customStartupProbe: {}
599
## @param collector.customReadinessProbe [object] Override default readiness probe
600
##
601
customReadinessProbe: {}
602
## Jaeger pods' resource requests and limits
603
## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
604
## Minimum memory for development is 4GB and 2 CPU cores
605
## Minimum memory for production is 8GB and 4 CPU cores
606
## ref: http://docs.datastax.com/en/archived/jaeger/2.0/jaeger/architecture/architecturePlanningHardware_c.html
607
##
608
## We usually recommend not to specify default resources and to leave this as a conscious
609
## choice for the user. This also increases chances charts run on environments with little
610
## resources, such as Minikube. If you do want to specify resources, uncomment the following
611
## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
612
## @param collector.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if collector.resources is set (collector.resources is recommended for production).
613
##
614
resourcesPreset: "small"
615
## @param collector.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
616
## Example:
617
## resources:
618
## requests:
619
## cpu: 2
620
## memory: 512Mi
621
## limits:
622
## cpu: 3
623
## memory: 1024Mi
624
##
625
resources: {}
626
## @param collector.extraVolumeMounts Optionally specify extra list of additional volumeMounts for jaeger container
627
##
628
extraVolumeMounts: []
629
## @param collector.configuration Specify content for Jaeger collector configuration (auto-generated based on other values otherwise)
630
##
631
configuration: {}
632
## @param collector.overrideConfiguration Jaeger collector common configuration override. Values defined here takes precedence over the ones defined at `query.configuration`
633
##
634
overrideConfiguration: {}
635
## @param collector.existingConfigmap The name of an existing ConfigMap with your custom configuration for Jaeger collector
636
##
637
existingConfigmap: ""
638
## @param collector.receivers Sets the jaeger collector receivers that will be enabled
639
##
640
receivers:
641
- otlp
642
- jaeger
643
- zipkin
644
## Jaeger collector container ports to expose
645
## ref: https://www.jaegertracing.io/docs/latest/architecture/apis/
646
containerPorts:
647
## Otlp ports to expose
648
##
649
otlp:
650
## @param collector.containerPorts.otlp.grpc Accepts traces in OpenTelemetry OTLP format over gRPC
651
##
652
grpc: 4317
653
## @param collector.containerPorts.otlp.http Accepts traces in OpenTelemetry OTLP format over HTTP
654
##
655
http: 4318
656
## Legacy Jaeger Write API. Maintained for backward-compatibility
657
##
658
jaeger:
659
## @param collector.containerPorts.jaeger.grpc Legacy Jaeger protobuf via gRPC API port
660
##
661
grpc: 14250
662
## @param collector.containerPorts.jaeger.thrift_http Legacy Jaeger Thrift over HTTP API port
663
##
664
thrift_http: 14268
665
## @param collector.containerPorts.zipkin can accept Zipkin spans in Thrift, JSON and Proto (disabled by default)
666
##
667
zipkin: 9411
668
## @param collector.containerPorts.metrics Jaeger collector prometheus metrics port
669
##
670
metrics: 8888
671
## @param collector.containerPorts.healthcheck Jaeger collector healthcheck port
672
##
673
healthcheck: 13133
674
## Jaeger collector.service parameters
675
##
676
service:
677
## @param collector.service.type Jaeger service type
678
##
679
type: ClusterIP
680
## Jaeger collector ports to expose
681
## ref: https://www.jaegertracing.io/docs/latest/architecture/apis/
682
ports:
683
## Otlp ports to expose
684
##
685
otlp:
686
## @param collector.service.ports.otlp.grpc Accepts traces in OpenTelemetry OTLP format over gRPC
687
##
688
grpc: 4317
689
## @param collector.service.ports.otlp.http Accepts traces in OpenTelemetry OTLP format over HTTP
690
##
691
http: 4318
692
## Legacy Jaeger Write API. Maintained for backward-compatibility
693
##
694
jaeger:
695
## @param collector.service.ports.jaeger.grpc Legacy Jaeger protobuf via gRPC API port
696
##
697
grpc: 14250
698
## @param collector.service.ports.jaeger.thrift_http Legacy Jaeger Thrift over HTTP API port
699
##
700
thrift_http: 14268
701
## @param collector.service.ports.zipkin can accept Zipkin spans in Thrift, JSON and Proto (disabled by default)
702
##
703
zipkin: 9411
704
## @param collector.service.ports.metrics Jaeger collector prometheus metrics port
705
##
706
metrics: 8888
707
## Node ports to expose
708
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
709
nodePorts:
710
## Otlp ports to expose
711
##
712
otlp:
713
## @param collector.service.nodePorts.otlp.grpc Accepts traces in OpenTelemetry OTLP format over gRPC
714
##
715
grpc: ""
716
## @param collector.service.nodePorts.otlp.http Accepts traces in OpenTelemetry OTLP format over HTTP
717
##
718
http: ""
719
## Legacy Jaeger Write API. Maintained for backward-compatibility
720
##
721
jaeger:
722
## @param collector.service.nodePorts.jaeger.grpc Legacy Jaeger protobuf via gRPC API port
723
##
724
grpc: ""
725
## @param collector.service.nodePorts.jaeger.thrift_http Legacy Jaeger Thrift over HTTP API port
726
##
727
thrift_http: ""
728
## @param collector.service.nodePorts.zipkin can accept Zipkin spans in Thrift, JSON and Proto (disabled by default)
729
##
730
zipkin: ""
731
## @param collector.service.nodePorts.metrics Jaeger collector prometheus metrics port
732
##
733
metrics: ""
734
## @param collector.service.extraPorts Extra ports to expose in the service (normally used with the `sidecar` value)
735
##
736
extraPorts: []
737
## @param collector.service.loadBalancerIP LoadBalancerIP if service type is `LoadBalancer`
738
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
739
##
740
loadBalancerIP: ""
741
## @param collector.service.loadBalancerSourceRanges Service Load Balancer sources
742
## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
743
## e.g:
744
## loadBalancerSourceRanges:
745
## - 10.10.10.0/24
746
##
747
loadBalancerSourceRanges: []
748
## @param collector.service.clusterIP Service Cluster IP
749
## e.g.:
750
## clusterIP: None
751
##
752
clusterIP: ""
753
## @param collector.service.externalTrafficPolicy Service external traffic policy
754
## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
755
##
756
externalTrafficPolicy: Cluster
757
## @param collector.service.annotations Provide any additional annotations which may be required.
758
## This can be used to set the LoadBalancer service type to internal only.
759
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
760
##
761
annotations: {}
762
## @param collector.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP"
763
## If "ClientIP", consecutive client requests will be directed to the same Pod
764
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
765
##
766
sessionAffinity: None
767
## @param collector.service.sessionAffinityConfig Additional settings for the sessionAffinity
768
## sessionAffinityConfig:
769
## clientIP:
770
## timeoutSeconds: 300
771
##
772
sessionAffinityConfig: {}
773
## @param collector.service.metrics.annotations [object] Annotations for Prometheus metrics
774
metrics:
775
annotations:
776
prometheus.io/scrape: "true"
777
prometheus.io/port: "{{ .Values.collector.service.ports.metrics }}"
778
prometheus.io/path: "/metrics"
779
## Network Policies
780
## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
781
##
782
networkPolicy:
783
## @param collector.networkPolicy.enabled Specifies whether a NetworkPolicy should be created
784
##
785
enabled: true
786
## @param collector.networkPolicy.allowExternal Don't require server label for connections
787
## The Policy model to apply. When set to false, only pods with the correct
788
## server label will have network access to the ports server is listening
789
## on. When true, server will accept connections from any source
790
## (with the correct destination port).
791
##
792
allowExternal: true
793
## @param collector.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations.
794
##
795
allowExternalEgress: true
796
## @param collector.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy
797
## e.g:
798
## extraIngress:
799
## - ports:
800
## - port: 1234
801
## from:
802
## - podSelector:
803
## - matchLabels:
804
## - role: frontend
805
## - podSelector:
806
## - matchExpressions:
807
## - key: role
808
## operator: In
809
## values:
810
## - frontend
811
extraIngress: []
812
## @param collector.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy
813
## e.g:
814
## extraEgress:
815
## - ports:
816
## - port: 1234
817
## to:
818
## - podSelector:
819
## - matchLabels:
820
## - role: frontend
821
## - podSelector:
822
## - matchExpressions:
823
## - key: role
824
## operator: In
825
## values:
826
## - frontend
827
##
828
extraEgress: []
829
## @param collector.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces
830
## @param collector.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces
831
##
832
ingressNSMatchLabels: {}
833
ingressNSPodMatchLabels: {}
834
## Jaeger collector serviceAccount parameters
835
##
836
serviceAccount:
837
## @param collector.serviceAccount.create Enables ServiceAccount
838
##
839
create: true
840
## @param collector.serviceAccount.name ServiceAccount name
841
##
842
name: ""
843
## @param collector.serviceAccount.annotations Annotations to add to all deployed objects
844
##
845
annotations: {}
846
## @param collector.serviceAccount.automountServiceAccountToken Automount API credentials for a service account.
847
##
848
automountServiceAccountToken: false
849
## Pod security context
850
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
851
## @param collector.podSecurityContext.enabled Enabled Jaeger pods' Security Context
852
## @param collector.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy
853
## @param collector.podSecurityContext.sysctls Set kernel settings using the sysctl interface
854
## @param collector.podSecurityContext.supplementalGroups Set filesystem extra groups
855
## @param collector.podSecurityContext.fsGroup Set Jaeger pod's Security Context fsGroup
856
##
857
podSecurityContext:
858
enabled: true
859
fsGroupChangePolicy: Always
860
sysctls: []
861
supplementalGroups: []
862
fsGroup: 1001
863
## Configure Container Security Context (only main container)
864
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
865
## @param collector.containerSecurityContext.enabled Enabled containers' Security Context
866
## @param collector.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
867
## @param collector.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
868
## @param collector.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
869
## @param collector.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
870
## @param collector.containerSecurityContext.privileged Set container's Security Context privileged
871
## @param collector.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
872
## @param collector.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
873
## @param collector.containerSecurityContext.capabilities.drop List of capabilities to be dropped
874
## @param collector.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
875
##
876
containerSecurityContext:
877
enabled: true
878
seLinuxOptions: {}
879
runAsUser: 1001
880
runAsGroup: 1001
881
runAsNonRoot: true
882
privileged: false
883
readOnlyRootFilesystem: true
884
allowPrivilegeEscalation: false
885
capabilities:
886
drop: ["ALL"]
887
seccompProfile:
888
type: "RuntimeDefault"
889
## @param collector.podAnnotations Additional pod annotations
890
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
891
##
892
podAnnotations: {}
893
## @param collector.podLabels Additional pod labels
894
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
895
##
896
podLabels: {}
897
## @param collector.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
898
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
899
##
900
podAffinityPreset: ""
901
## @param collector.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
902
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
903
##
904
podAntiAffinityPreset: soft
905
## Node affinity preset
906
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
907
##
908
nodeAffinityPreset:
909
## @param collector.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
910
##
911
type: ""
912
## @param collector.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set
913
##
914
key: ""
915
## @param collector.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set
916
## E.g.
917
## values:
918
## - e2e-az1
919
## - e2e-az2
920
##
921
values: []
922
## @param collector.priorityClassName Server priorityClassName
923
## Ref: https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/
924
##
925
priorityClassName: ""
926
## @param collector.affinity Affinity for pod assignment
927
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
928
## NOTE: podAffinityPreset, podAntiAffinityPreset, and nodeAffinityPreset will be ignored when it's set
929
##
930
affinity: {}
931
## @param collector.nodeSelector Node labels for pod assignment
932
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/
933
##
934
nodeSelector: {}
935
## @param collector.tolerations Tolerations for pod assignment
936
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
937
##
938
tolerations: []
939
## @param collector.topologySpreadConstraints Topology Spread Constraints for pod assignment
940
## https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
941
## The value is evaluated as a template
942
##
943
topologySpreadConstraints: []
944
## @param collector.schedulerName Alternative scheduler
945
## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
946
##
947
schedulerName: ""
948
## @param collector.updateStrategy.type Jaeger collector deployment strategy type
949
## @param collector.updateStrategy.rollingUpdate Jaeger collector deployment rolling update configuration parameters
950
## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
951
##
952
updateStrategy:
953
type: RollingUpdate
954
rollingUpdate: {}
955
## @param collector.extraVolumes Optionally specify extra list of additional volumes for jaeger container
956
##
957
extraVolumes: []
958
## @param collector.initContainers Add additional init containers to the jaeger pods
959
##
960
initContainers: []
961
## Pod Disruption Budget configuration
962
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb
963
## @param collector.pdb.create Enable/disable a Pod Disruption Budget creation
964
## @param collector.pdb.minAvailable Minimum number/percentage of pods that should remain scheduled
965
## @param collector.pdb.maxUnavailable Maximum number/percentage of pods that may be made unavailable. Defaults to `1` if both `collector.pdb.minAvailable` and `collector.pdb.maxUnavailable` are empty.
966
##
967
pdb:
968
create: true
969
minAvailable: ""
970
maxUnavailable: ""
971
## @param collector.sidecars Add additional sidecar containers to the jaeger pods
972
##
973
sidecars: []
974
migration:
975
## @param migration.podLabels Additional pod labels
976
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
977
##
978
podLabels: {}
979
## @param migration.podAnnotations Additional pod annotations
980
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
981
##
982
podAnnotations: {}
983
## @param migration.annotations Provide any additional annotations which may be required.
984
## This can be used to set the LoadBalancer service type to internal only.
985
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
986
##
987
annotations: {}
988
## Pod security context
989
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
990
## @param migration.podSecurityContext.enabled Enabled Jaeger pods' Security Context
991
## @param migration.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy
992
## @param migration.podSecurityContext.sysctls Set kernel settings using the sysctl interface
993
## @param migration.podSecurityContext.supplementalGroups Set filesystem extra groups
994
## @param migration.podSecurityContext.fsGroup Set Jaeger pod's Security Context fsGroup
995
##
996
podSecurityContext:
997
enabled: true
998
fsGroupChangePolicy: Always
999
sysctls: []
1000
supplementalGroups: []
1001
fsGroup: 1001
1002
## @param migration.containerSecurityContext.enabled Enabled containers' Security Context
1003
## @param migration.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
1004
## @param migration.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
1005
## @param migration.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
1006
## @param migration.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
1007
## @param migration.containerSecurityContext.privileged Set container's Security Context privileged
1008
## @param migration.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
1009
## @param migration.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
1010
## @param migration.containerSecurityContext.capabilities.drop List of capabilities to be dropped
1011
## @param migration.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
1012
containerSecurityContext:
1013
enabled: true
1014
seLinuxOptions: {}
1015
runAsUser: 1001
1016
runAsGroup: 1001
1017
runAsNonRoot: true
1018
privileged: false
1019
readOnlyRootFilesystem: true
1020
allowPrivilegeEscalation: false
1021
capabilities:
1022
drop: ["ALL"]
1023
seccompProfile:
1024
type: "RuntimeDefault"
1025
## @param migration.extraEnvVars Extra environment variables to be set on jaeger migration container
1026
## For example:
1027
## - name: FOO
1028
## value: BAR
1029
##
1030
extraEnvVars: []
1031
## @param migration.extraEnvVarsCM Name of existing ConfigMap containing extra env vars
1032
##
1033
extraEnvVarsCM: ""
1034
## @param migration.extraEnvVarsSecret Name of existing Secret containing extra env vars
1035
##
1036
extraEnvVarsSecret: ""
1037
## @param migration.extraVolumeMounts Optionally specify extra list of additional volumeMounts for jaeger container
1038
##
1039
extraVolumeMounts: []
1040
## Jaeger pods' resource requests and limits
1041
## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
1042
## Minimum memory for development is 4GB and 2 CPU cores
1043
## Minimum memory for production is 8GB and 4 CPU cores
1044
## ref: http://docs.datastax.com/en/archived/jaeger/2.0/jaeger/architecture/architecturePlanningHardware_c.html
1045
##
1046
## We usually recommend not to specify default resources and to leave this as a conscious
1047
## choice for the user. This also increases chances charts run on environments with little
1048
## resources, such as Minikube. If you do want to specify resources, uncomment the following
1049
## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
1050
## @param migration.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if migration.resources is set (migration.resources is recommended for production).
1051
##
1052
resourcesPreset: "small"
1053
## @param migration.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
1054
## Example:
1055
## resources:
1056
## requests:
1057
## cpu: 2
1058
## memory: 512Mi
1059
## limits:
1060
## cpu: 3
1061
## memory: 1024Mi
1062
##
1063
resources: {}
1064
initContainer:
1065
## Migration job init container resource requests and limits
1066
## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
1067
##
1068
## We usually recommend not to specify default resources and to leave this as a conscious
1069
## choice for the user. This also increases chances charts run on environments with little
1070
## resources, such as Minikube. If you do want to specify resources, uncomment the following
1071
## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
1072
## @param migration.initContainer.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if migration.resources is set (migration.resources is recommended for production).
1073
##
1074
resourcesPreset: "nano"
1075
## @param migration.initContainer.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
1076
## Example:
1077
## resources:
1078
## requests:
1079
## cpu: 2
1080
## memory: 512Mi
1081
## limits:
1082
## cpu: 3
1083
## memory: 1024Mi
1084
##
1085
resources: {}
1086
## Network Policies
1087
## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
1088
##
1089
networkPolicy:
1090
## @param migration.networkPolicy.enabled Specifies whether a NetworkPolicy should be created
1091
##
1092
enabled: true
1093
## @param migration.networkPolicy.allowExternal Don't require server label for connections
1094
## The Policy model to apply. When set to false, only pods with the correct
1095
## server label will have network access to the ports server is listening
1096
## on. When true, server will accept connections from any source
1097
## (with the correct destination port).
1098
##
1099
allowExternal: true
1100
## @param migration.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations.
1101
##
1102
allowExternalEgress: true
1103
## @param migration.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy
1104
## e.g:
1105
## extraIngress:
1106
## - ports:
1107
## - port: 1234
1108
## from:
1109
## - podSelector:
1110
## - matchLabels:
1111
## - role: frontend
1112
## - podSelector:
1113
## - matchExpressions:
1114
## - key: role
1115
## operator: In
1116
## values:
1117
## - frontend
1118
extraIngress: []
1119
## @param migration.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy
1120
## e.g:
1121
## extraEgress:
1122
## - ports:
1123
## - port: 1234
1124
## to:
1125
## - podSelector:
1126
## - matchLabels:
1127
## - role: frontend
1128
## - podSelector:
1129
## - matchExpressions:
1130
## - key: role
1131
## operator: In
1132
## values:
1133
## - frontend
1134
##
1135
extraEgress: []
1136
## @param migration.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces
1137
## @param migration.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces
1138
##
1139
ingressNSMatchLabels: {}
1140
ingressNSPodMatchLabels: {}
1141
## @param migration.extraVolumes Optionally specify extra list of additional volumes for jaeger container
1142
##
1143
extraVolumes: []
1144
## @section Set the image to use for the migration job
1145
## @param cqlshImage.registry [default: REGISTRY_NAME] Cassandra image registry
1146
## @param cqlshImage.repository [default: REPOSITORY_NAME/cassandra] Cassandra image repository
1147
## @skip cqlshImage.tag Cassandra image tag (immutable tags are recommended)
1148
## @param cqlshImage.digest Cassandra image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
1149
## @param cqlshImage.pullPolicy image pull policy
1150
## @param cqlshImage.pullSecrets Cassandra image pull secrets
1151
## @param cqlshImage.debug Enable image debug mode
1152
##
1153
cqlshImage:
1154
registry: cgr.dev
1155
repository: chainguard-private/cassandra-iamguarded
1156
tag: 5.0.6
1157
digest: ""
1158
## Specify a imagePullPolicy
1159
## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
1160
##
1161
pullPolicy: IfNotPresent
1162
## Optionally specify an array of imagePullSecrets.
1163
## Secrets must be manually created in the namespace.
1164
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
1165
## e.g:
1166
## pullSecrets:
1167
## - myRegistryKeySecretName
1168
##
1169
pullSecrets: []
1170
## cqlshImage container resource requests and limits
1171
## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
1172
##
1173
## We usually recommend not to specify default resources and to leave this as a conscious
1174
## choice for the user. This also increases chances charts run on environments with little
1175
## resources, such as Minikube. If you do want to specify resources, uncomment the following
1176
## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
1177
## @param cqlshImage.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if resources is set (resources is recommended for production).
1178
##
1179
resourcesPreset: "nano"
1180
## @param cqlshImage.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
1181
## Example:
1182
## resources:
1183
## requests:
1184
## cpu: 2
1185
## memory: 512Mi
1186
## limits:
1187
## cpu: 3
1188
## memory: 1024Mi
1189
##
1190
resources: {}
1191
## Enable debug mode
1192
##
1193
debug: false
1194
externalDatabase:
1195
## @param externalDatabase.host External database host
1196
host: ""
1197
## @param externalDatabase.port External database port
1198
port: 9042
1199
## Database credentials
1200
## @param externalDatabase.dbUser.user Cassandra admin user
1201
## @param externalDatabase.dbUser.password Password for `dbUser.user`. Randomly generated if empty
1202
##
1203
dbUser:
1204
user: ig_jaeger
1205
password: ""
1206
## @param externalDatabase.existingSecret Name of existing secret containing the database secret
1207
##
1208
existingSecret: ""
1209
## @param externalDatabase.existingSecretPasswordKey Name of existing secret key containing the database password secret key
1210
##
1211
existingSecretPasswordKey: ""
1212
## Cluster parameters
1213
## @param externalDatabase.cluster.datacenter Name for cassandra's jaeger datacenter
1214
##
1215
cluster:
1216
datacenter: "dc1"
1217
## @param externalDatabase.keyspace Name for cassandra's jaeger keyspace
1218
##
1219
keyspace: "iamguarded_jaeger"
1220
## @section Cassandra storage sub-chart
1221
##
1222
cassandra:
1223
## @param cassandra.enabled Enables cassandra storage pod
1224
##
1225
enabled: true
1226
## Cluster parameters
1227
## @param cassandra.cluster.datacenter Name for cassandra's jaeger datacenter
1228
##
1229
cluster:
1230
datacenter: "dc1"
1231
## @param cassandra.keyspace Name for cassandra's jaeger keyspace
1232
##
1233
keyspace: "iamguarded_jaeger"
1234
## Database credentials
1235
## @param cassandra.dbUser.user Cassandra admin user
1236
## @param cassandra.dbUser.password Password for `dbUser.user`. Randomly generated if empty
1237
## @param cassandra.dbUser.existingSecret Name of an existing secret containing the user password.
1238
##
1239
dbUser:
1240
user: ig_jaeger
1241
password: ""
1242
existingSecret: ""
1243
## Cassandra service port
1244
## @param cassandra.service.ports.cql Cassandra cql port
1245
service:
1246
ports:
1247
cql: 9042
1248
## @param cassandra.initDB [object] Init script for initializing the instance
1249
##
1250
initDB:
1251
create_keyspace.cql: |
1252
CREATE KEYSPACE {{ include "jaeger.cassandra.keyspace" . }} WITH REPLICATION = { 'class' : 'SimpleStrategy', 'replication_factor' : 1 };
1253
## Cassandra pods' resource requests and limits
1254
## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
1255
## Minimum memory for development is 4GB and 2 CPU cores
1256
## Minimum memory for production is 8GB and 4 CPU cores
1257
## ref: http://docs.datastax.com/en/archived/cassandra/2.0/cassandra/architecture/architecturePlanningHardware_c.html
1258
##
1259
## We usually recommend not to specify default resources and to leave this as a conscious
1260
## choice for the user. This also increases chances charts run on environments with little
1261
## resources, such as Minikube. If you do want to specify resources, uncomment the following
1262
## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
1263
## @param cassandra.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if resources is set (resources is recommended for production).
1264
##
1265
resourcesPreset: "large"
1266
## @param cassandra.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
1267
## Example:
1268
## resources:
1269
## requests:
1270
## cpu: 2
1271
## memory: 512Mi
1272
## limits:
1273
## cpu: 3
1274
## memory: 1024Mi
1275
##
1276
resources: {}
1277
image:
1278
registry: cgr.dev
1279
repository: chainguard-private/cassandra-iamguarded
1280
tag: 5.0.6
1281
digest: ""
1282
dynamicSeedDiscovery:
1283
image:
1284
registry: cgr.dev
1285
repository: chainguard-private/os-shell-cassandra-iamguarded
1286
tag: 1.0.0
1287
digest: ""
1288
metrics:
1289
image:
1290
registry: cgr.dev
1291
repository: chainguard-private/jmx-exporter-iamguarded
1292
tag: 1.5.0
1293
digest: ""
1294
volumePermissions:
1295
image:
1296
registry: cgr.dev
1297
repository: chainguard-private/os-shell-iamguarded
1298
tag: 1.0.0
1299
digest: ""
1300

The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing