victoria-metrics-operator

global:

# -- Image pull secrets, that can be shared across multiple helm charts

imagePullSecrets: []

image:

# -- Image registry, that can be shared across multiple helm charts

registry: ""

# -- Openshift security context compatibility configuration

compatibility:

openshift:

adaptSecurityContext: "auto"

cluster:

# -- K8s cluster domain suffix, uses for building storage pods' FQDN. Details are [here](https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/)

dnsDomain: cluster.local.

# -- Labels added to all resources

extraLabels: {}

# -- Annotations added to all resources

extraAnnotations: {}

# -- Default component versions, populate VM_METRICS_VERSION/VM_LOGS_VERSION/VM_TRACES_VERSION/VM_ANOMALY_VERSION/VM_VMALERTMANAGER_ALERTMANAGERVERSION

# env vars unless already set via `env`, or an empty string to leave the operator's own built-in default in effect

versions:

metrics: ""

logs: ""

traces: ""

anomaly: ""

alertmanager: ""

# Default values for victoria-metrics.

# This is a YAML-formatted file.

# Declare variables to be passed into your templates.

# -- operator image configuration

image:

# -- Image registry

registry: cgr.dev

# -- Image repository

repository: chainguard-private/victoriametrics-operator

# -- Image tag

# override Chart.AppVersion

tag: 0.75.1-r0@sha256:8149b419fa860f310d02eb19808840680101ecbc6386921db9d8b7bc06531e79

# Variant of the image to use.

# e.g. scratch

variant: ""

# -- Image pull policy

pullPolicy: IfNotPresent

# -- Override default container command. Use when the VictoriaMetrics binary is available at a custom path

command: []

configReloader:

image: {}

# registry: ""

# repository: ""

# tag: ""

crds:

# -- manages CRD creation. Disables CRD creation only in combination with `crds.plain: false` due to helm dependency conditions limitation

enabled: true

# -- check if plain or templated CRDs should be created.

# with this option set to `false`, all CRDs will be rendered from templates.

# with this option set to `true`, all CRDs are immutable and require manual upgrade.

plain: false

# -- additional CRD annotations, when `.Values.crds.plain: false`

annotations: {}

cleanup:

# -- Tells helm to clean up all the vm resources under this release's namespace when uninstalling

enabled: false

# -- Image configuration for CRD cleanup Job

image:

repository: registry.k8s.io/kubectl

# use image tag that matches k8s API version by default

tag: ""

pullPolicy: IfNotPresent

# -- Cleanup hook resources

resources:

limits:

cpu: "500m"

memory: "256Mi"

requests:

cpu: "100m"

memory: "56Mi"

upgrade:

# -- Enables CRD upgrade job

enabled: false

# -- Adds `--force-conflics` argument to kubectl

forceConflicts: false

busybox:

image:

repository: busybox

tag: latest

pullPolicy: IfNotPresent

kubectl:

image:

repository: registry.k8s.io/kubectl

# use image tag that matches k8s API version by default

tag: ""

pullPolicy: IfNotPresent

# -- Extra settings for CRD upgrade job

env: []

# -- Upgrade job resources.

resources: {}

# limits:

# cpu: 120m

# memory: 320Mi

# requests:

# cpu: 80m

# memory: 120Mi

# -- Additional upgrade job volumes

extraVolumes: []

# -- Additional upgrade job volume mounts

extraVolumeMounts: []

# -- Pod's node selector. Details are [here](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector)

nodeSelector: {}

# -- Upgrade job pod affinity

affinity: {}

# nodeAffinity:

# requiredDuringSchedulingIgnoredDuringExecution:

# nodeSelectorTerms:

# - matchExpressions:

# - key: kubernetes.io/e2e-az-name

# operator: In

# values:

# - e2e-az1

# - e2e-az2

# -- Array of upgrade job tolerations object. Spec is [here](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/)

tolerations: []

# - key: "key"

# operator: "Equal"

# value: "value"

# effect: "NoSchedule"

# -- Upgrade job Pod Topology Spread Constraints. Spec is [here](https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/)

topologySpreadConstraints: []

# - maxSkew: 1

# topologyKey: topology.kubernetes.io/zone

# whenUnsatisfiable: DoNotSchedule

# labelSelector:

# matchLabels:

# app.kubernetes.io/component: alertmanager

# -- Labels to add to the upgrade job

labels: {}

# -- Annotations to add to the upgrade job

annotations: {}

# -- Labels to add to the upgrade job pod

podLabels: {}

# -- Annotations to add to the upgrade job pod

podAnnotations: {}

# -- Service account for upgrade CRD job to use.

serviceAccount:

create: true

name: ""

annotations: {}

labels: {}

automountServiceAccountToken: true

# -- Container-specific security context configuration. Details are [here](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)

securityContext:

allowPrivilegeEscalation: false

readOnlyRootFilesystem: true

capabilities:

drop:

- ALL

# -- Pod's security context. Details are [here](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)

podSecurityContext:

enabled: true

fsGroup: 65534

runAsGroup: 65534

runAsNonRoot: true

runAsUser: 65534

seccompProfile:

type: RuntimeDefault

# -- Number of operator replicas

replicaCount: 1

# -- Secret to pull images

imagePullSecrets: []

# -- Override chart name

nameOverride: ""

# -- Overrides the full name of server component resources

fullnameOverride: ""

# -- VM operator log level. Possible values: info and error.

logLevel: "info"

allowedMetricsEndpoints:

- /metrics

- /metrics/resources

- /metrics/slis

rbac:

# -- Specifies whether the RBAC resources should be created

create: true

# -- Create aggregated clusterRoles for CRD readonly and admin permissions

aggregatedClusterRoles:

enabled: true

# -- Labels attached to according clusterRole

labels:

view:

rbac.authorization.k8s.io/aggregate-to-view: "true"

admin:

rbac.authorization.k8s.io/aggregate-to-admin: "true"

# -- Labels to be added to the all resources

extraLabels: {}

# -- extra Labels for Pods only

podLabels: {}

# -- Annotations to be added to the all resources

annotations: {}

# -- Pod's security context. Details are [here](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)

podSecurityContext:

enabled: true

fsGroup: 2000

runAsNonRoot: true

runAsUser: 1000

# -- Security context to be added to server pods

securityContext:

enabled: true

allowPrivilegeEscalation: false

capabilities:

drop:

- ALL

readOnlyRootFilesystem: true

operator:

# -- By default, operator converts prometheus-operator objects.

disable_prometheus_converter: false

# -- Compare-options and sync-options for prometheus objects converted by operator for properly use with ArgoCD

prometheus_converter_add_argocd_ignore_annotations: false

# -- Enables ownership reference for converted prometheus-operator objects,

# it will remove corresponding victoria-metrics objects in case of deletion prometheus one.

enable_converter_ownership: false

# -- Enables OpenShift compatibility mode for the operator (supported since v0.73.0).

# When enabled, operator automatically adjusts security contexts and permissions for OpenShift clusters.

openshift_compatibility: false

# -- Enable VPA support

vpa_support: false

# -- Enable Gateway API support

gateway_support: false

# -- By default, the operator will watch all the namespaces

# If you want to override this behavior, specify the namespace.

# Operator supports multiple namespaces for watching.

watchNamespaces: []

serviceAccount:

# -- Specifies whether a service account should be created

create: true

# -- The name of the service account to use. If not set and create is true, a name is generated using the fullname template

name: ""

# -- Whether to automount the service account token. Note that token needs to be mounted manually if this is disabled.

automountServiceAccountToken: true

service:

# -- Service traffic distribution. Details are [here](https://kubernetes.io/docs/concepts/services-networking/service/#traffic-distribution)

trafficDistribution: ""

# -- Service annotations

annotations: {}

# -- Service labels

labels: {}

# -- Service ClusterIP

clusterIP: ""

# -- Service external IPs. Check [here](https://kubernetes.io/docs/concepts/services-networking/service/#external-ips) for details

externalIPs: ""

# -- Service load balancer IP

loadBalancerIP: ""

# -- Load balancer source range

loadBalancerSourceRanges: []

# -- Service type

type: ClusterIP

# -- Health check node port for a service. Check [here](https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip) for details

healthCheckNodePort: ""

# -- Service external traffic policy. Check [here](https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip) for details

externalTrafficPolicy: ""

# -- Service IP family policy. Check [here](https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services) for details.

ipFamilyPolicy: ""

# -- List of service IP families. Check [here](https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services) for details.

ipFamilies: []

# -- Service port

servicePort: 8080

# -- Service node port

nodePort: ""

# -- Service webhook port

webhookPort: 9443

# -- See `kubectl explain poddisruptionbudget.spec` for more or check [these docs](https://kubernetes.io/docs/tasks/run-application/configure-pdb/)

podDisruptionBudget:

enabled: false

# -- min number or percentage of pods that can be unavailable

minAvailable: 0

# -- max number or percentage of pods that can be unavailable

maxUnavailable: 0

# -- Defines criteria when unhealthy pods should be considered for eviction

unhealthyPodEvictionPolicy:

labels: {}

# -- Graceful pod termination timeout. See [this article](https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#hook-handler-execution) for details.

terminationGracePeriodSeconds: 30

# -- Operator lifecycle. See [this article](https://kubernetes.io/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/) for details.

lifecycle: {}

# -- Resource object

resources: {}

# limits:

# cpu: 120m

# memory: 320Mi

# requests:

# cpu: 80m

# memory: 120Mi

# -- Custom DNS config for pod. Details are [here](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-config)

dnsConfig: {}

# -- Pod's node selector. Details are [here](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector)

nodeSelector: {}

# -- Deployment strategy, set to standard k8s default

strategy:

type: RollingUpdate

rollingUpdate:

maxSurge: 25%

maxUnavailable: 25%

# -- Name of Priority Class

priorityClassName: ""

# -- Name of the [RuntimeClass](https://kubernetes.io/docs/concepts/containers/runtime-class/) used to run the pod, e.g. "gvisor"

runtimeClassName: ""

# -- Array of tolerations object. Spec is [here](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/)

tolerations: []

# -- Pod affinity

affinity: {}

# -- Pod Topology Spread Constraints. Spec is [here](https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/)

topologySpreadConstraints: []

# -- Operator container additional commandline arguments

extraArgs: {}

# -- Extra settings for the operator deployment. Full list [here](https://docs.victoriametrics.com/operator/configuration/#environment-variables)

env: []

# - name: VM_VMSINGLEDEFAULT_VERSION

# value: v1.43.0

# -- Specify alternative source for env variables

envFrom: []

#- configMapRef:

# name: special-config

# -- Additional hostPath mounts

extraHostPathMounts: []

# - name: certs-dir

# mountPath: /etc/kubernetes/certs

# subPath: ""

# hostPath: /etc/kubernetes/certs

# readOnly: true

# -- Extra Volumes for the pod

extraVolumes: []

# - name: example

# configMap:

# name: example

# -- Extra Volume Mounts for the container

extraVolumeMounts: []

# - name: example

# mountPath: /example

# -- Extra containers to run in a pod with operator

extraContainers: []

# - name: config-reloader

# image: reloader-image

# -- Enable hostNetwork on operator deployment

hostNetwork: false

# -- DNS policy for operator pod. If not set and hostNetwork is enabled, defaults to ClusterFirstWithHostNet.

# @default -- ""

dnsPolicy: ""

# -- Enable sharing process Namespace between Containers in a Pod. This only makes sense with extraContainers

shareProcessNamespace: false

# -- Configures resource validation

admissionWebhooks:

# -- Enables validation webhook.

enabled: true

# -- Annotations for webhook. Can be used to define Helm or ArgoCD annotations.

annotations: {}

# -- List of CRD names to disable validation for

disabledFor: []

# - vmagent

# - vmsingle

# -- What to do in case, when operator not available to validate request.

policy: Fail

# -- Enables custom ca bundle, if you are not using cert-manager. In case of custom ca, you have to create secret - {chart-name}-validation with keys: tls.key, tls.crt, ca.crt

certManager:

# -- Enables cert creation and injection by cert-manager.

enabled: false

# --If needed, provide own issuer. Operator will create self-signed if empty.

issuer: {}

# -- Certificate Authority parameters

ca:

secretTemplate: {}

subject: {}

duration: 63800h0m0s

commonName: ca.validation.victoriametrics

# -- Certificate parameters

cert:

secretTemplate: {}

subject: {}

duration: 45800h0m0s

commonName: ""

keepTLSSecret: true

# tls specifies TLS cert/key for the webhook

tls:

caCert:

cert:

key:

# -- Configures monitoring with serviceScrape using either `VMServiceScrape` or `ServiceMonitor`. For latter [Prometheus Operator CRDs](https://artifacthub.io/packages/helm/prometheus-community/prometheus-operator-crds) should be preinstalled

serviceMonitor:

enabled: false

# -- Creates `VMServiceScrape` if `true` and `ServiceMonitor` otherwise. Make sure [Prometheus Operator CRDs](https://artifacthub.io/packages/helm/prometheus-community/prometheus-operator-crds) are installed if it's set to `false`

vm: true

extraLabels: {}

annotations: {}

relabelings: []

scheme: ""

interval: ""

scrapeTimeout: ""

tlsConfig: {}

basicAuth: {}

probe:

# -- Readiness probe

readiness:

httpGet:

port: probe

initialDelaySeconds: 5

periodSeconds: 15

timeoutSeconds: 5

failureThreshold: 3

# -- Liveness probe

liveness:

tcpSocket:

port: probe

initialDelaySeconds: 5

periodSeconds: 15

timeoutSeconds: 5

failureThreshold: 3

# -- Startup probe

startup: {}

# -- Add extra specs dynamically to this chart

extraObjects: []