1# This file has been modified by Chainguard, Inc.
3# Copyright Chainguard, Inc. All Rights Reserved.
4# Chainguard, Inc. modifications are subject to the license
5# available at: https://www.chainguard.dev/legal/software-license-agreement
7# Copyright Broadcom, Inc. All Rights Reserved.
8# SPDX-License-Identifier: APACHE-2.0
10## @section Global parameters
11## Global Docker image parameters
12## Please, note that this will override the image parameters, including dependencies, configured to use the global value
13## Current available global Docker image parameters: imageRegistry, imagePullSecrets, defaultStorageClass and compatibility.
16## @param global.imageRegistry Global Docker image registry
17## @param global.imagePullSecrets Global Docker registry secret names as an array
18## @param global.defaultStorageClass Global default StorageClass for Persistent Volume(s)
24 ## - myRegistryKeySecretName
27 defaultStorageClass: ""
28 ## Security parameters
31 ## @param global.security.allowInsecureImages Allows skipping image verification
32 allowInsecureImages: false
33 ## Compatibility adaptations for Kubernetes platforms
36 ## Compatibility adaptations for Openshift
39 ## @param global.compatibility.openshift.adaptSecurityContext Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation)
41 adaptSecurityContext: auto
43## @section Common parameters
46## @param nameOverride String to partially override common.names.fullname
49## @param fullnameOverride String to fully override common.names.fullname
52## @param kubeVersion Force target Kubernetes version (using Helm capabilities if not set)
55## @param commonLabels Labels to add to all deployed objects (sub-charts are not considered)
58## @param commonAnnotations Annotations to add to all deployed objects
61## Enable diagnostic mode in the deployment
64 ## @param diagnosticMode.enabled Enable diagnostic mode (all probes will be disabled and the command will be overridden)
67 ## @param diagnosticMode.command Command to override all containers in the deployment
71 ## @param diagnosticMode.args Args to override all containers in the deployment
75## @section Jaeger parameters
78## Iamguarded Jaeger image
79## @param image.registry [default: REGISTRY_NAME] Jaeger image registry
80## @param image.repository [default: REPOSITORY_NAME/jaeger] Jaeger image repository
81## @skip image.tag Jaeger image tag (immutable tags are recommended)
82## @param image.digest Jaeger image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
83## @param image.pullPolicy image pull policy
84## @param image.pullSecrets Jaeger image pull secrets
85## @param image.debug Enable image debug mode
89 repository: chainguard-private/jaeger-iamguarded
92 ## Specify a imagePullPolicy
93 ## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
95 pullPolicy: IfNotPresent
96 ## Optionally specify an array of imagePullSecrets.
97 ## Secrets must be manually created in the namespace.
98 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
101 ## - myRegistryKeySecretName
107## @section Query deployment parameters
110 ## @param query.command Command for running the container (set to default if not set). Use array form
113 ## @param query.args Args for running the container (set to default if not set). Use array form
116 ## @param query.automountServiceAccountToken Mount Service Account token in pod
118 automountServiceAccountToken: false
119 ## @param query.hostAliases Set pod host aliases
120 ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
123 ## @param query.lifecycleHooks [object] Override default etcd container hooks
126 ## @param query.extraEnvVars Extra environment variables to be set on jaeger container
132 ## @param query.extraEnvVarsCM Name of existing ConfigMap containing extra env vars
135 ## @param query.extraEnvVarsSecret Name of existing Secret containing extra env vars
137 extraEnvVarsSecret: ""
138 ## @param query.replicaCount Number of Jaeger replicas
141 ## Configure extra options for container's liveness, readiness and startup probes
142 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes
143 ## @param query.livenessProbe.enabled Enable livenessProbe on Query nodes
144 ## @param query.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
145 ## @param query.livenessProbe.periodSeconds Period seconds for livenessProbe
146 ## @param query.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
147 ## @param query.livenessProbe.failureThreshold Failure threshold for livenessProbe
148 ## @param query.livenessProbe.successThreshold Success threshold for livenessProbe
153 initialDelaySeconds: 10
157 ## @param query.startupProbe.enabled Enable startupProbe on Query containers
158 ## @param query.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
159 ## @param query.startupProbe.periodSeconds Period seconds for startupProbe
160 ## @param query.startupProbe.timeoutSeconds Timeout seconds for startupProbe
161 ## @param query.startupProbe.failureThreshold Failure threshold for startupProbe
162 ## @param query.startupProbe.successThreshold Success threshold for startupProbe
166 initialDelaySeconds: 10
171 ## @param query.readinessProbe.enabled Enable readinessProbe
172 ## @param query.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
173 ## @param query.readinessProbe.periodSeconds Period seconds for readinessProbe
174 ## @param query.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
175 ## @param query.readinessProbe.failureThreshold Failure threshold for readinessProbe
176 ## @param query.readinessProbe.successThreshold Success threshold for readinessProbe
180 initialDelaySeconds: 10
185 ## @param query.customLivenessProbe Custom livenessProbe that overrides the default one
187 customLivenessProbe: {}
188 ## @param query.customStartupProbe [object] Override default startup probe
190 customStartupProbe: {}
191 ## @param query.customReadinessProbe [object] Override default readiness probe
193 customReadinessProbe: {}
194 ## Jaeger pods' resource requests and limits
195 ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
196 ## Minimum memory for development is 4GB and 2 CPU cores
197 ## Minimum memory for production is 8GB and 4 CPU cores
198 ## ref: http://docs.datastax.com/en/archived/jaeger/2.0/jaeger/architecture/architecturePlanningHardware_c.html
200 ## We usually recommend not to specify default resources and to leave this as a conscious
201 ## choice for the user. This also increases chances charts run on environments with little
202 ## resources, such as Minikube. If you do want to specify resources, uncomment the following
203 ## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
204 ## @param query.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if query.resources is set (query.resources is recommended for production).
206 resourcesPreset: "small"
207 ## @param query.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
218 ## @param query.extraVolumeMounts Optionally specify extra list of additional volumeMounts for jaeger container
220 extraVolumeMounts: []
221 ## @param query.configuration Specify content for Jaeger collector configuration (auto-generated based on other values otherwise)
224 ## @param query.overrideConfiguration Jaeger query common configuration override. Values defined here takes precedence over the ones defined at `query.configuration`
226 overrideConfiguration: {}
227 ## @param query.existingConfigmap The name of an existing ConfigMap with your custom configuration for Jaeger collector
229 existingConfigmap: ""
230 ## Container ports to expose
231 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
233 ## @param query.containerPorts.grpc Port for GRPC API
236 ## @param query.containerPorts.http Port for HTTP API
239 ## @param query.containerPorts.metrics Jaeger query prometheus metrics port
242 ## @param query.containerPorts.healthcheck Jaeger query healthcheck port
245 ## Jaeger query.service parameters
248 ## @param query.service.type Jaeger service type
252 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
254 ## @param query.service.ports.grpc Port for gRPC API
257 ## @param query.service.ports.http Port for API
260 ## @param query.service.ports.metrics Jaeger query prometheus metrics port
263 ## Node ports to expose
264 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
266 ## @param query.service.nodePorts.grpc Port for gRPC API
269 ## @param query.service.nodePorts.http Node port for API
272 ## @param query.service.nodePorts.metrics Jaeger query prometheus metrics port
275 ## @param query.service.extraPorts Extra ports to expose in the service (normally used with the `sidecar` value)
278 ## @param query.service.loadBalancerIP LoadBalancerIP if service type is `LoadBalancer`
279 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
282 ## @param query.service.loadBalancerSourceRanges Service Load Balancer sources
283 ## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
285 ## loadBalancerSourceRanges:
288 loadBalancerSourceRanges: []
289 ## @param query.service.clusterIP Service Cluster IP
294 ## @param query.service.externalTrafficPolicy Service external traffic policy
295 ## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
297 externalTrafficPolicy: Cluster
298 ## @param query.service.annotations Provide any additional annotations which may be required.
299 ## This can be used to set the LoadBalancer service type to internal only.
300 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
303 ## @param query.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP"
304 ## If "ClientIP", consecutive client requests will be directed to the same Pod
305 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
307 sessionAffinity: None
308 ## @param query.service.sessionAffinityConfig Additional settings for the sessionAffinity
309 ## sessionAffinityConfig:
311 ## timeoutSeconds: 300
313 sessionAffinityConfig: {}
314 ## @param query.service.metrics.annotations [object] Annotations for Prometheus metrics
317 prometheus.io/scrape: "true"
318 prometheus.io/port: "{{ .Values.query.service.ports.metrics }}"
319 prometheus.io/path: "/metrics"
321 ## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
324 ## @param query.networkPolicy.enabled Specifies whether a NetworkPolicy should be created
327 ## @param query.networkPolicy.allowExternal Don't require server label for connections
328 ## The Policy model to apply. When set to false, only pods with the correct
329 ## server label will have network access to the ports server is listening
330 ## on. When true, server will accept connections from any source
331 ## (with the correct destination port).
334 ## @param query.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations.
336 allowExternalEgress: true
337 ## @param query.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy
347 ## - matchExpressions:
353 ## @param query.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy
363 ## - matchExpressions:
370 ## @param query.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces
371 ## @param query.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces
373 ingressNSMatchLabels: {}
374 ingressNSPodMatchLabels: {}
375 ## Jaeger Query serviceAccount parameters
378 ## @param query.serviceAccount.create Enables ServiceAccount
381 ## @param query.serviceAccount.name ServiceAccount name
384 ## @param query.serviceAccount.annotations Annotations to add to all deployed objects
387 ## @param query.serviceAccount.automountServiceAccountToken Automount API credentials for a service account.
389 automountServiceAccountToken: false
390 ## Pod security context
391 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
392 ## @param query.podSecurityContext.enabled Enabled Jaeger pods' Security Context
393 ## @param query.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy
394 ## @param query.podSecurityContext.sysctls Set kernel settings using the sysctl interface
395 ## @param query.podSecurityContext.supplementalGroups Set filesystem extra groups
396 ## @param query.podSecurityContext.fsGroup Set Jaeger pod's Security Context fsGroup
400 fsGroupChangePolicy: Always
402 supplementalGroups: []
404 ## Configure Container Security Context (only main container)
405 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
406 ## @param query.containerSecurityContext.enabled Enabled containers' Security Context
407 ## @param query.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
408 ## @param query.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
409 ## @param query.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
410 ## @param query.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
411 ## @param query.containerSecurityContext.privileged Set container's Security Context privileged
412 ## @param query.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
413 ## @param query.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
414 ## @param query.containerSecurityContext.capabilities.drop List of capabilities to be dropped
415 ## @param query.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
417 containerSecurityContext:
424 readOnlyRootFilesystem: true
425 allowPrivilegeEscalation: false
429 type: "RuntimeDefault"
430 ## @param query.podAnnotations Additional pod annotations
431 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
434 ## @param query.podLabels Additional pod labels
435 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
438 ## @param query.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
439 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
441 podAffinityPreset: ""
442 ## @param query.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
443 ## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
445 podAntiAffinityPreset: soft
446 ## Node affinity preset
447 ## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
450 ## @param query.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
453 ## @param query.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set
456 ## @param query.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set
463 ## @param query.priorityClassName Server priorityClassName
464 ## Ref: https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/
466 priorityClassName: ""
467 ## @param query.affinity Affinity for pod assignment
468 ## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
469 ## NOTE: podAffinityPreset, podAntiAffinityPreset, and nodeAffinityPreset will be ignored when it's set
472 ## @param query.nodeSelector Node labels for pod assignment
473 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/
476 ## @param query.tolerations Tolerations for pod assignment
477 ## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
480 ## @param query.topologySpreadConstraints Topology Spread Constraints for pod assignment
481 ## https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
482 ## The value is evaluated as a template
484 topologySpreadConstraints: []
485 ## @param query.schedulerName Alternative scheduler
486 ## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
489 ## @param query.updateStrategy.type Jaeger query deployment strategy type
490 ## @param query.updateStrategy.rollingUpdate Jaeger query deployment rolling update configuration parameters
491 ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
496 ## @param query.extraVolumes Optionally specify extra list of additional volumes for jaeger container
499 ## @param query.initContainers Add additional init containers to the jaeger pods
502 ## Pod Disruption Budget configuration
503 ## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb
504 ## @param query.pdb.create Enable/disable a Pod Disruption Budget creation
505 ## @param query.pdb.minAvailable Minimum number/percentage of pods that should remain scheduled
506 ## @param query.pdb.maxUnavailable Maximum number/percentage of pods that may be made unavailable. Defaults to `1` if both `query.pdb.minAvailable` and `query.pdb.maxUnavailable` are empty.
512 ## @param query.sidecars Add additional sidecar containers to the jaeger pods
515## @section Collector deployment parameters
518 ## @param collector.command Command for running the container (set to default if not set). Use array form
521 ## @param collector.args Args for running the container (set to default if not set). Use array form
524 ## @param collector.automountServiceAccountToken Mount Service Account token in pod
526 automountServiceAccountToken: false
527 ## @param collector.hostAliases Set pod host aliases
528 ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
531 ## @param collector.lifecycleHooks [object] Override default etcd container hooks
534 ## @param collector.extraEnvVars Extra environment variables to be set on jaeger container
540 ## @param collector.extraEnvVarsCM Name of existing ConfigMap containing extra env vars
543 ## @param collector.extraEnvVarsSecret Name of existing Secret containing extra env vars
545 extraEnvVarsSecret: ""
546 ## @param collector.replicaCount Number of Jaeger replicas
549 ## Configure extra options for container's liveness, readiness and startup probes
550 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes
551 ## @param collector.livenessProbe.enabled Enable livenessProbe on collector nodes
552 ## @param collector.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
553 ## @param collector.livenessProbe.periodSeconds Period seconds for livenessProbe
554 ## @param collector.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
555 ## @param collector.livenessProbe.failureThreshold Failure threshold for livenessProbe
556 ## @param collector.livenessProbe.successThreshold Success threshold for livenessProbe
561 initialDelaySeconds: 10
565 ## @param collector.startupProbe.enabled Enable startupProbe on collector containers
566 ## @param collector.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
567 ## @param collector.startupProbe.periodSeconds Period seconds for startupProbe
568 ## @param collector.startupProbe.timeoutSeconds Timeout seconds for startupProbe
569 ## @param collector.startupProbe.failureThreshold Failure threshold for startupProbe
570 ## @param collector.startupProbe.successThreshold Success threshold for startupProbe
574 initialDelaySeconds: 10
579 ## @param collector.readinessProbe.enabled Enable readinessProbe
580 ## @param collector.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
581 ## @param collector.readinessProbe.periodSeconds Period seconds for readinessProbe
582 ## @param collector.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
583 ## @param collector.readinessProbe.failureThreshold Failure threshold for readinessProbe
584 ## @param collector.readinessProbe.successThreshold Success threshold for readinessProbe
588 initialDelaySeconds: 10
593 ## @param collector.customLivenessProbe Custom livenessProbe that overrides the default one
595 customLivenessProbe: {}
596 ## @param collector.customStartupProbe [object] Override default startup probe
598 customStartupProbe: {}
599 ## @param collector.customReadinessProbe [object] Override default readiness probe
601 customReadinessProbe: {}
602 ## Jaeger pods' resource requests and limits
603 ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
604 ## Minimum memory for development is 4GB and 2 CPU cores
605 ## Minimum memory for production is 8GB and 4 CPU cores
606 ## ref: http://docs.datastax.com/en/archived/jaeger/2.0/jaeger/architecture/architecturePlanningHardware_c.html
608 ## We usually recommend not to specify default resources and to leave this as a conscious
609 ## choice for the user. This also increases chances charts run on environments with little
610 ## resources, such as Minikube. If you do want to specify resources, uncomment the following
611 ## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
612 ## @param collector.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if collector.resources is set (collector.resources is recommended for production).
614 resourcesPreset: "small"
615 ## @param collector.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
626 ## @param collector.extraVolumeMounts Optionally specify extra list of additional volumeMounts for jaeger container
628 extraVolumeMounts: []
629 ## @param collector.configuration Specify content for Jaeger collector configuration (auto-generated based on other values otherwise)
632 ## @param collector.overrideConfiguration Jaeger collector common configuration override. Values defined here takes precedence over the ones defined at `query.configuration`
634 overrideConfiguration: {}
635 ## @param collector.existingConfigmap The name of an existing ConfigMap with your custom configuration for Jaeger collector
637 existingConfigmap: ""
638 ## @param collector.receivers Sets the jaeger collector receivers that will be enabled
644 ## Jaeger collector container ports to expose
645 ## ref: https://www.jaegertracing.io/docs/latest/architecture/apis/
647 ## Otlp ports to expose
650 ## @param collector.containerPorts.otlp.grpc Accepts traces in OpenTelemetry OTLP format over gRPC
653 ## @param collector.containerPorts.otlp.http Accepts traces in OpenTelemetry OTLP format over HTTP
656 ## Legacy Jaeger Write API. Maintained for backward-compatibility
659 ## @param collector.containerPorts.jaeger.grpc Legacy Jaeger protobuf via gRPC API port
662 ## @param collector.containerPorts.jaeger.thrift_http Legacy Jaeger Thrift over HTTP API port
665 ## @param collector.containerPorts.zipkin can accept Zipkin spans in Thrift, JSON and Proto (disabled by default)
668 ## @param collector.containerPorts.metrics Jaeger collector prometheus metrics port
671 ## @param collector.containerPorts.healthcheck Jaeger collector healthcheck port
674 ## Jaeger collector.service parameters
677 ## @param collector.service.type Jaeger service type
680 ## Jaeger collector ports to expose
681 ## ref: https://www.jaegertracing.io/docs/latest/architecture/apis/
683 ## Otlp ports to expose
686 ## @param collector.service.ports.otlp.grpc Accepts traces in OpenTelemetry OTLP format over gRPC
689 ## @param collector.service.ports.otlp.http Accepts traces in OpenTelemetry OTLP format over HTTP
692 ## Legacy Jaeger Write API. Maintained for backward-compatibility
695 ## @param collector.service.ports.jaeger.grpc Legacy Jaeger protobuf via gRPC API port
698 ## @param collector.service.ports.jaeger.thrift_http Legacy Jaeger Thrift over HTTP API port
701 ## @param collector.service.ports.zipkin can accept Zipkin spans in Thrift, JSON and Proto (disabled by default)
704 ## @param collector.service.ports.metrics Jaeger collector prometheus metrics port
707 ## Node ports to expose
708 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
710 ## Otlp ports to expose
713 ## @param collector.service.nodePorts.otlp.grpc Accepts traces in OpenTelemetry OTLP format over gRPC
716 ## @param collector.service.nodePorts.otlp.http Accepts traces in OpenTelemetry OTLP format over HTTP
719 ## Legacy Jaeger Write API. Maintained for backward-compatibility
722 ## @param collector.service.nodePorts.jaeger.grpc Legacy Jaeger protobuf via gRPC API port
725 ## @param collector.service.nodePorts.jaeger.thrift_http Legacy Jaeger Thrift over HTTP API port
728 ## @param collector.service.nodePorts.zipkin can accept Zipkin spans in Thrift, JSON and Proto (disabled by default)
731 ## @param collector.service.nodePorts.metrics Jaeger collector prometheus metrics port
734 ## @param collector.service.extraPorts Extra ports to expose in the service (normally used with the `sidecar` value)
737 ## @param collector.service.loadBalancerIP LoadBalancerIP if service type is `LoadBalancer`
738 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
741 ## @param collector.service.loadBalancerSourceRanges Service Load Balancer sources
742 ## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
744 ## loadBalancerSourceRanges:
747 loadBalancerSourceRanges: []
748 ## @param collector.service.clusterIP Service Cluster IP
753 ## @param collector.service.externalTrafficPolicy Service external traffic policy
754 ## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
756 externalTrafficPolicy: Cluster
757 ## @param collector.service.annotations Provide any additional annotations which may be required.
758 ## This can be used to set the LoadBalancer service type to internal only.
759 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
762 ## @param collector.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP"
763 ## If "ClientIP", consecutive client requests will be directed to the same Pod
764 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
766 sessionAffinity: None
767 ## @param collector.service.sessionAffinityConfig Additional settings for the sessionAffinity
768 ## sessionAffinityConfig:
770 ## timeoutSeconds: 300
772 sessionAffinityConfig: {}
773 ## @param collector.service.metrics.annotations [object] Annotations for Prometheus metrics
776 prometheus.io/scrape: "true"
777 prometheus.io/port: "{{ .Values.collector.service.ports.metrics }}"
778 prometheus.io/path: "/metrics"
780 ## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
783 ## @param collector.networkPolicy.enabled Specifies whether a NetworkPolicy should be created
786 ## @param collector.networkPolicy.allowExternal Don't require server label for connections
787 ## The Policy model to apply. When set to false, only pods with the correct
788 ## server label will have network access to the ports server is listening
789 ## on. When true, server will accept connections from any source
790 ## (with the correct destination port).
793 ## @param collector.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations.
795 allowExternalEgress: true
796 ## @param collector.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy
806 ## - matchExpressions:
812 ## @param collector.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy
822 ## - matchExpressions:
829 ## @param collector.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces
830 ## @param collector.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces
832 ingressNSMatchLabels: {}
833 ingressNSPodMatchLabels: {}
834 ## Jaeger collector serviceAccount parameters
837 ## @param collector.serviceAccount.create Enables ServiceAccount
840 ## @param collector.serviceAccount.name ServiceAccount name
843 ## @param collector.serviceAccount.annotations Annotations to add to all deployed objects
846 ## @param collector.serviceAccount.automountServiceAccountToken Automount API credentials for a service account.
848 automountServiceAccountToken: false
849 ## Pod security context
850 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
851 ## @param collector.podSecurityContext.enabled Enabled Jaeger pods' Security Context
852 ## @param collector.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy
853 ## @param collector.podSecurityContext.sysctls Set kernel settings using the sysctl interface
854 ## @param collector.podSecurityContext.supplementalGroups Set filesystem extra groups
855 ## @param collector.podSecurityContext.fsGroup Set Jaeger pod's Security Context fsGroup
859 fsGroupChangePolicy: Always
861 supplementalGroups: []
863 ## Configure Container Security Context (only main container)
864 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
865 ## @param collector.containerSecurityContext.enabled Enabled containers' Security Context
866 ## @param collector.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
867 ## @param collector.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
868 ## @param collector.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
869 ## @param collector.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
870 ## @param collector.containerSecurityContext.privileged Set container's Security Context privileged
871 ## @param collector.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
872 ## @param collector.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
873 ## @param collector.containerSecurityContext.capabilities.drop List of capabilities to be dropped
874 ## @param collector.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
876 containerSecurityContext:
883 readOnlyRootFilesystem: true
884 allowPrivilegeEscalation: false
888 type: "RuntimeDefault"
889 ## @param collector.podAnnotations Additional pod annotations
890 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
893 ## @param collector.podLabels Additional pod labels
894 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
897 ## @param collector.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
898 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
900 podAffinityPreset: ""
901 ## @param collector.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
902 ## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
904 podAntiAffinityPreset: soft
905 ## Node affinity preset
906 ## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
909 ## @param collector.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
912 ## @param collector.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set
915 ## @param collector.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set
922 ## @param collector.priorityClassName Server priorityClassName
923 ## Ref: https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/
925 priorityClassName: ""
926 ## @param collector.affinity Affinity for pod assignment
927 ## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
928 ## NOTE: podAffinityPreset, podAntiAffinityPreset, and nodeAffinityPreset will be ignored when it's set
931 ## @param collector.nodeSelector Node labels for pod assignment
932 ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/
935 ## @param collector.tolerations Tolerations for pod assignment
936 ## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
939 ## @param collector.topologySpreadConstraints Topology Spread Constraints for pod assignment
940 ## https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
941 ## The value is evaluated as a template
943 topologySpreadConstraints: []
944 ## @param collector.schedulerName Alternative scheduler
945 ## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
948 ## @param collector.updateStrategy.type Jaeger collector deployment strategy type
949 ## @param collector.updateStrategy.rollingUpdate Jaeger collector deployment rolling update configuration parameters
950 ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
955 ## @param collector.extraVolumes Optionally specify extra list of additional volumes for jaeger container
958 ## @param collector.initContainers Add additional init containers to the jaeger pods
961 ## Pod Disruption Budget configuration
962 ## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb
963 ## @param collector.pdb.create Enable/disable a Pod Disruption Budget creation
964 ## @param collector.pdb.minAvailable Minimum number/percentage of pods that should remain scheduled
965 ## @param collector.pdb.maxUnavailable Maximum number/percentage of pods that may be made unavailable. Defaults to `1` if both `collector.pdb.minAvailable` and `collector.pdb.maxUnavailable` are empty.
971 ## @param collector.sidecars Add additional sidecar containers to the jaeger pods
975 ## @param migration.podLabels Additional pod labels
976 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
979 ## @param migration.podAnnotations Additional pod annotations
980 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
983 ## @param migration.annotations Provide any additional annotations which may be required.
984 ## This can be used to set the LoadBalancer service type to internal only.
985 ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
988 ## Pod security context
989 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
990 ## @param migration.podSecurityContext.enabled Enabled Jaeger pods' Security Context
991 ## @param migration.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy
992 ## @param migration.podSecurityContext.sysctls Set kernel settings using the sysctl interface
993 ## @param migration.podSecurityContext.supplementalGroups Set filesystem extra groups
994 ## @param migration.podSecurityContext.fsGroup Set Jaeger pod's Security Context fsGroup
998 fsGroupChangePolicy: Always
1000 supplementalGroups: []
1002 ## @param migration.containerSecurityContext.enabled Enabled containers' Security Context
1003 ## @param migration.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
1004 ## @param migration.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
1005 ## @param migration.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
1006 ## @param migration.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
1007 ## @param migration.containerSecurityContext.privileged Set container's Security Context privileged
1008 ## @param migration.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
1009 ## @param migration.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
1010 ## @param migration.containerSecurityContext.capabilities.drop List of capabilities to be dropped
1011 ## @param migration.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
1012 containerSecurityContext:
1019 readOnlyRootFilesystem: true
1020 allowPrivilegeEscalation: false
1024 type: "RuntimeDefault"
1025 ## @param migration.extraEnvVars Extra environment variables to be set on jaeger migration container
1031 ## @param migration.extraEnvVarsCM Name of existing ConfigMap containing extra env vars
1034 ## @param migration.extraEnvVarsSecret Name of existing Secret containing extra env vars
1036 extraEnvVarsSecret: ""
1037 ## @param migration.extraVolumeMounts Optionally specify extra list of additional volumeMounts for jaeger container
1039 extraVolumeMounts: []
1040 ## Jaeger pods' resource requests and limits
1041 ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
1042 ## Minimum memory for development is 4GB and 2 CPU cores
1043 ## Minimum memory for production is 8GB and 4 CPU cores
1044 ## ref: http://docs.datastax.com/en/archived/jaeger/2.0/jaeger/architecture/architecturePlanningHardware_c.html
1046 ## We usually recommend not to specify default resources and to leave this as a conscious
1047 ## choice for the user. This also increases chances charts run on environments with little
1048 ## resources, such as Minikube. If you do want to specify resources, uncomment the following
1049 ## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
1050 ## @param migration.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if migration.resources is set (migration.resources is recommended for production).
1052 resourcesPreset: "small"
1053 ## @param migration.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
1065 ## Migration job init container resource requests and limits
1066 ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
1068 ## We usually recommend not to specify default resources and to leave this as a conscious
1069 ## choice for the user. This also increases chances charts run on environments with little
1070 ## resources, such as Minikube. If you do want to specify resources, uncomment the following
1071 ## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
1072 ## @param migration.initContainer.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if migration.resources is set (migration.resources is recommended for production).
1074 resourcesPreset: "nano"
1075 ## @param migration.initContainer.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
1087 ## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
1090 ## @param migration.networkPolicy.enabled Specifies whether a NetworkPolicy should be created
1093 ## @param migration.networkPolicy.allowExternal Don't require server label for connections
1094 ## The Policy model to apply. When set to false, only pods with the correct
1095 ## server label will have network access to the ports server is listening
1096 ## on. When true, server will accept connections from any source
1097 ## (with the correct destination port).
1100 ## @param migration.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations.
1102 allowExternalEgress: true
1103 ## @param migration.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy
1113 ## - matchExpressions:
1119 ## @param migration.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy
1129 ## - matchExpressions:
1136 ## @param migration.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces
1137 ## @param migration.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces
1139 ingressNSMatchLabels: {}
1140 ingressNSPodMatchLabels: {}
1141 ## @param migration.extraVolumes Optionally specify extra list of additional volumes for jaeger container
1144## @section Set the image to use for the migration job
1145## @param cqlshImage.registry [default: REGISTRY_NAME] Cassandra image registry
1146## @param cqlshImage.repository [default: REPOSITORY_NAME/cassandra] Cassandra image repository
1147## @skip cqlshImage.tag Cassandra image tag (immutable tags are recommended)
1148## @param cqlshImage.digest Cassandra image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
1149## @param cqlshImage.pullPolicy image pull policy
1150## @param cqlshImage.pullSecrets Cassandra image pull secrets
1151## @param cqlshImage.debug Enable image debug mode
1155 repository: chainguard-private/cassandra-iamguarded
1158 ## Specify a imagePullPolicy
1159 ## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
1161 pullPolicy: IfNotPresent
1162 ## Optionally specify an array of imagePullSecrets.
1163 ## Secrets must be manually created in the namespace.
1164 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
1167 ## - myRegistryKeySecretName
1170 ## cqlshImage container resource requests and limits
1171 ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
1173 ## We usually recommend not to specify default resources and to leave this as a conscious
1174 ## choice for the user. This also increases chances charts run on environments with little
1175 ## resources, such as Minikube. If you do want to specify resources, uncomment the following
1176 ## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
1177 ## @param cqlshImage.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if resources is set (resources is recommended for production).
1179 resourcesPreset: "nano"
1180 ## @param cqlshImage.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
1191 ## Enable debug mode
1195 ## @param externalDatabase.host External database host
1197 ## @param externalDatabase.port External database port
1199 ## Database credentials
1200 ## @param externalDatabase.dbUser.user Cassandra admin user
1201 ## @param externalDatabase.dbUser.password Password for `dbUser.user`. Randomly generated if empty
1206 ## @param externalDatabase.existingSecret Name of existing secret containing the database secret
1209 ## @param externalDatabase.existingSecretPasswordKey Name of existing secret key containing the database password secret key
1211 existingSecretPasswordKey: ""
1212 ## Cluster parameters
1213 ## @param externalDatabase.cluster.datacenter Name for cassandra's jaeger datacenter
1217 ## @param externalDatabase.keyspace Name for cassandra's jaeger keyspace
1219 keyspace: "iamguarded_jaeger"
1220## @section Cassandra storage sub-chart
1223 ## @param cassandra.enabled Enables cassandra storage pod
1226 ## Cluster parameters
1227 ## @param cassandra.cluster.datacenter Name for cassandra's jaeger datacenter
1231 ## @param cassandra.keyspace Name for cassandra's jaeger keyspace
1233 keyspace: "iamguarded_jaeger"
1234 ## Database credentials
1235 ## @param cassandra.dbUser.user Cassandra admin user
1236 ## @param cassandra.dbUser.password Password for `dbUser.user`. Randomly generated if empty
1237 ## @param cassandra.dbUser.existingSecret Name of an existing secret containing the user password.
1243 ## Cassandra service port
1244 ## @param cassandra.service.ports.cql Cassandra cql port
1248 ## @param cassandra.initDB [object] Init script for initializing the instance
1251 create_keyspace.cql: |
1252 CREATE KEYSPACE {{ include "jaeger.cassandra.keyspace" . }} WITH REPLICATION = { 'class' : 'SimpleStrategy', 'replication_factor' : 1 };
1253 ## Cassandra pods' resource requests and limits
1254 ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
1255 ## Minimum memory for development is 4GB and 2 CPU cores
1256 ## Minimum memory for production is 8GB and 4 CPU cores
1257 ## ref: http://docs.datastax.com/en/archived/cassandra/2.0/cassandra/architecture/architecturePlanningHardware_c.html
1259 ## We usually recommend not to specify default resources and to leave this as a conscious
1260 ## choice for the user. This also increases chances charts run on environments with little
1261 ## resources, such as Minikube. If you do want to specify resources, uncomment the following
1262 ## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
1263 ## @param cassandra.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if resources is set (resources is recommended for production).
1265 resourcesPreset: "large"
1266 ## @param cassandra.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
1279 repository: chainguard-private/cassandra-iamguarded
1282 dynamicSeedDiscovery:
1285 repository: chainguard-private/os-shell-cassandra-iamguarded
1291 repository: chainguard-private/jmx-exporter-iamguarded
1297 repository: chainguard-private/os-shell-iamguarded