34549b779b
- Also continue renaming things related to the concierge app - Enhance the uninstall test to also test uninstalling the supervisor and local-user-authenticator apps
39 lines
1.8 KiB
YAML
39 lines
1.8 KiB
YAML
#! Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
|
#! SPDX-License-Identifier: Apache-2.0
|
|
|
|
#@data/values
|
|
---
|
|
|
|
app_name: pinniped-concierge
|
|
namespace: pinniped-concierge
|
|
|
|
#! Specify how many replicas of the Pinniped server to run.
|
|
replicas: 2
|
|
|
|
#! Specify either an image_digest or an image_tag. If both are given, only image_digest will be used.
|
|
image_repo: docker.io/getpinniped/pinniped-server
|
|
image_digest: #! e.g. sha256:f3c4fdfd3ef865d4b97a1fd295d94acc3f0c654c46b6f27ffad5cf80216903c8
|
|
image_tag: latest
|
|
|
|
#! Optionally specify a different image for the "kube-cert-agent" pod which is scheduled
|
|
#! on the control plane. This image needs only to include `sleep` and `cat` binaries.
|
|
#! By default, the same image specified for image_repo/image_digest/image_tag will be re-used.
|
|
kube_cert_agent_image:
|
|
|
|
#! Specifies a secret to be used when pulling the above container image.
|
|
#! Can be used when the above image_repo is a private registry.
|
|
#! Typically the value would be the output of: kubectl create secret docker-registry x --docker-server=https://example.io --docker-username="USERNAME" --docker-password="PASSWORD" --dry-run=client -o json | jq -r '.data[".dockerconfigjson"]'
|
|
#! Optional.
|
|
image_pull_dockerconfigjson: #! e.g. {"auths":{"https://registry.example.com":{"username":"USERNAME","password":"PASSWORD","auth":"BASE64_ENCODED_USERNAME_COLON_PASSWORD"}}}
|
|
|
|
#! Pinniped will try to guess the right K8s API URL for sharing that information with potential clients.
|
|
#! This settings allows the guess to be overridden.
|
|
#! Optional.
|
|
discovery_url: #! e.g., https://example.com
|
|
|
|
#! Specify the duration and renewal interval for the API serving certificate.
|
|
#! The defaults are set to expire the cert about every 30 days, and to rotate it
|
|
#! about every 25 days.
|
|
api_serving_certificate_duration_seconds: 2592000
|
|
api_serving_certificate_renew_before_seconds: 2160000
|