ot-container-kit-redis-operator

redisOperator:

name: redis-operator

imageName: cgr.dev/chainguard-private/redis-operator-fips

# Overrides the image tag whose default is the chart appVersion.

imageTag: 0.27.0-r4@sha256:43959e90665a4548b3817ac30d6930b3971704b1735ff7562d6013dece2364c3

# -- initContainerImageTag is the init-config init container image tag.

# If not specified, defaults to imageTag, then falls back to chart appVersion.

# Typically only needs to be set when using a different version for the init container.

initContainerImageTag: 0.27.0-r4@sha256:43959e90665a4548b3817ac30d6930b3971704b1735ff7562d6013dece2364c3

imagePullPolicy: Always

imagePullSecrets: []

# Update strategy

# strategy:

# type: RollingUpdate

# rollingUpdate:

# maxSurge: 25%

# maxUnavailable: 25%

strategy: {}

# Additional pod annotations

podAnnotations: {}

# Additional Pod labels (e.g. for filtering Pod by custom labels)

podLabels: {}

# Additional arguments for redis-operator container

extraArgs: []

# When not specified, the operator will watch all namespaces. It can be set to a specific namespace or multiple namespaces separated by commas.

watchNamespace: ""

# -- The DNS domain suffix used for Kubernetes service discovery.

# Default is "cluster.local". Change this if your cluster uses a custom DNS domain.

serviceDNSDomain: "cluster.local"

env: []

# If set to true, webhook server will be enabled for masterSlaveAntiAffinity feature

# Certificate handling:

# - If certmanager.enabled=true: cert-manager will automatically create and manage the webhook certificate

# - If certmanager.enabled=false: A self-signed certificate will be automatically generated by Helm

webhook: false

automountServiceAccountToken: true

# pprof configuration for performance profiling

pprof:

# Enable pprof server for performance profiling

enabled: false

# The address the pprof endpoint binds to

bindAddress: ":6060"

# metrics configuration for monitoring

metrics:

# Enable metrics server

enabled: true

# The address the metrics endpoint binds to

bindAddress: ":8080"

resources:

limits:

cpu: 500m

memory: 500Mi

requests:

cpu: 500m

memory: 500Mi

replicas: 1

rbac:

# -- Enable RBAC resources creation

enabled: true

# -- RBAC scope: "cluster" for ClusterRole/ClusterRoleBinding or "namespace" for Role/RoleBinding.

# "cluster" lets the operator manage Redis resources across all namespaces (default behavior).

# "namespace" restricts the operator to its own release namespace; set redisOperator.watchNamespace

# accordingly and ensure the CRDs are installed separately (CRDs are cluster-scoped).

scope: "cluster"

# -- Aggregate the Redis CRs into the builtin view, edit and admin ClusterRoles.

# Only rendered when rbac.scope is "cluster".

aggregate: true

serviceAccountName: redis-operator

serviceAccount:

automountServiceAccountToken: true

service:

name: webhook-service

namespace: redis-operator

certificate:

name: serving-cert

secretName: webhook-server-cert

issuer:

# Whether to create the issuer or not. You might want to disable this if instead you

# want to use a ClusterIssuer that you simply want to provide.

create: true

# You can choose Issuer or ClusterIssuer here. The first one is namespaced, the second one

# is available for global usage.

kind: Issuer

type: selfSigned

name: redis-operator-issuer

email: shubham.gupta@opstree.com

server: https://acme-v02.api.letsencrypt.org/directory

privateKeySecretName: letsencrypt-prod

solver:

enabled: true

ingressClass: nginx

certmanager:

# Whether to use cert-manager for certificate management

# Only effective when webhook=true

# If webhook=true and certmanager.enabled=false, a self-signed certificate is automatically generated

enabled: false

# API version of the cert-manager CRDs

apiVersion: "cert-manager.io/v1"

priorityClassName: ""

nodeSelector: {}

tolerateAllTaints: false

tolerations: []

affinity: {}

podSecurityContext: {}

# fsGroup: 2000

securityContext: {}

# capabilities:

# drop:

# - ALL

# readOnlyRootFilesystem: true

# runAsNonRoot: true

# runAsUser: 1000

# -- Feature gates for alpha/experimental features.

# Only set gates that are supported by the deployed operator image; passing an

# unknown gate makes the operator exit at startup.

featureGates: {}

# Never execute redis-cli -a <password>, even if authentication cannot succeed without it

# AvoidCommandLinePassword: false

# Enable generating Redis configuration using an init container instead of a regular container

# GenerateConfigInInitContainer: false

manager:

# config values for the operator manager

config:

kubeClientTimeout: 60s

# -- If value > 0, it will override the default value in the operator

kubeClientQPS: 0.0

# Set to 0 to use the operator's built-in default.

maxConcurrentReconciles: 3

# Accepts a Go duration (e.g. "30s", "5m"). Empty uses the operator's built-in default.

execCommandTimeout: ""