aws-cloud-controller-manager
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
1
namespace: "kube-system"
2
args:
3
- --v=2
4
- --cloud-provider=aws
5
image:
6
repository: cgr.dev/chainguard-private/cloud-provider-aws-fips
7
tag: 1.35@sha256:9b20a4c38d5e7233416032a350db4f4ab18a4b66adca6346556e6ce5719d5fbe
8
# Specify image pull secrets
9
imagePullSecrets: []
10
# nameOverride overrides `cloud-controller-manager.fullname`
11
nameOverride: "aws-cloud-controller-manager"
12
# nodeSelector -- Node labels for pod assignment. Ref: https://kubernetes.io/docs/user-guide/node-selection/.
13
nodeSelector:
14
node-role.kubernetes.io/control-plane: ""
15
clusterRoleRules:
16
- apiGroups:
17
- ""
18
resources:
19
- events
20
verbs:
21
- create
22
- patch
23
- update
24
- apiGroups:
25
- ""
26
resources:
27
- nodes
28
verbs:
29
- '*'
30
- apiGroups:
31
- ""
32
resources:
33
- nodes/status
34
verbs:
35
- patch
36
- apiGroups:
37
- ""
38
resources:
39
- services
40
verbs:
41
- list
42
- patch
43
- update
44
- watch
45
- apiGroups:
46
- ""
47
resources:
48
- services/status
49
verbs:
50
- list
51
- patch
52
- update
53
- watch
54
- apiGroups:
55
- ""
56
resources:
57
- serviceaccounts
58
verbs:
59
- create
60
- apiGroups:
61
- ""
62
resources:
63
- persistentvolumes
64
verbs:
65
- get
66
- list
67
- update
68
- watch
69
- apiGroups:
70
- ""
71
resources:
72
- endpoints
73
verbs:
74
- create
75
- get
76
- list
77
- watch
78
- update
79
- apiGroups:
80
- coordination.k8s.io
81
resources:
82
- leases
83
verbs:
84
- create
85
- get
86
- list
87
- watch
88
- update
89
- apiGroups:
90
- ""
91
resources:
92
- serviceaccounts/token
93
verbs:
94
- create
95
- apiGroups:
96
- authentication.k8s.io
97
resources:
98
- tokenreviews
99
verbs:
100
- create
101
- apiGroups:
102
- authorization.k8s.io
103
resources:
104
- subjectaccessreviews
105
verbs:
106
- create
107
# resources -- Pod resource requests and limits.
108
resources:
109
# limits:
110
# cpu: 100m
111
# memory: 300Mi
112
requests:
113
cpu: 200m
114
# memory: 300Mi
115
# env -- Pod environment variables
116
env: []
117
# securityContext -- Container Security Context.
118
securityContext: {}
119
# podSecurityContext -- Pods Security Context.
120
podSecurityContext: {}
121
# podAnnotations -- Pods Annotations.
122
podAnnotations: {}
123
# tolerations -- List of node taints to tolerate (requires Kubernetes >= 1.6).
124
tolerations:
125
- key: node.cloudprovider.kubernetes.io/uninitialized
126
value: "true"
127
effect: NoSchedule
128
- key: node-role.kubernetes.io/master
129
effect: NoSchedule
130
- key: node-role.kubernetes.io/control-plane
131
effect: NoSchedule
132
# dnsPolicy -- dnsPolicy of deamonset pods. Should be set to Default if deployed as a deamonset on control-plane nodes to resolve properly
133
dnsPolicy: Default
134
clusterRoleName: system:cloud-controller-manager
135
roleBindingName: cloud-controller-manager:apiserver-authentication-reader
136
serviceAccountName: cloud-controller-manager
137
roleName: extension-apiserver-authentication-reader
138
extraVolumes: []
139
extraVolumeMounts: []
140
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.