1# Default values for vSphere CPI.
2# This is a YAML-formatted file.
3# vSphere CPI values are grouped by component
7 name: vsphere-cloud-config
8 vcenter: "vcenter.local"
15 caFile: "" # Path to the ca-file if it has been mounted into the pod.
17 # Select the first address within the provided subnet for the node Internal IP
18 internalNetworkSubnetCidr: ""
19 # Select the first address within the provided subnet for the node External IP
20 externalNetworkSubnetCidr: ""
21 # Select the first address on the VM network matching the provided name for the node Internal IP
22 internalVmNetworkName: ""
23 # Select the first address on the VM network matching the provided name for the node External IP
24 externalVmNetworkName: ""
25 # Never select Internal IP addresses within the provided subnet ranges (highest precedence)
26 excludeInternalNetworkSubnetCidr: ""
27 # Never select External IP addresses within the provided subnet ranges (highest precedence)
28 excludeExternalNetworkSubnetCidr: ""
30 # Specifies whether Secret should be created from config values
32 # The name of the Secret referred to in the vsphere-cloud-config ConfigMap
33 # If your Kubernetes platform provides this secret, set create to false and adjust the secret name
34 name: vsphere-cloud-secret
35## Specify if a Pod Security Policy for kube-state-metrics must be created
36## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
40 # Specify pod annotations
41 # Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#apparmor
42 # Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp
43 # Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl
45 # seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
46 # seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
47 # apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
48# Run containers to have security context. Default is 'nobody' (65534/65534) in distroless
55 # Specifies whether RBAC resources should be created
58 # Specifies whether a ServiceAccount should be created
60 # The name of the ServiceAccount to use.
61 name: cloud-controller-manager
62# Daemonset configuration
65 image: cgr.dev/chainguard-private/cloud-provider-vsphere
66 tag: 1.37.0@sha256:5e5ae6162b3fe6857953b89e89712fb789d87feb358480e07bbb68eb54ec7899
67 pullPolicy: IfNotPresent
68 dnsPolicy: ClusterFirst
71 # Location of the cloud configmap to be mounted on the filesystem
85 ## Additional pod labels
86 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
88 ## Allows for the default tolerations to be updated or replaced with user-defined ones
90 - key: node.cloudprovider.kubernetes.io/uninitialized
93 - key: node-role.kubernetes.io/control-plane
96 - key: node.kubernetes.io/not-ready
99 - key: CriticalAddonsOnly
102 ## Allows for the default affinities to be updated or replaced with user-defined ones
105 requiredDuringSchedulingIgnoredDuringExecution:
108 - key: node-role.kubernetes.io/control-plane
111 extraVolumesMounts: []