Praveen M
449d1baeb7
Update ceph-csi to v3.17.0 and CSI sidecars: - csi-provisioner v6.1.1 -> v6.2.0 - csi-attacher v4.11.0 -> v4.12.0 - csi-node-driver-registrar v2.16.0 -> v2.17.0 Signed-off-by: Praveen M <m.praveen@ibm.com>
241 lines
8.0 KiB
YAML
241 lines
8.0 KiB
YAML
# Default values for rook-ceph-operator
|
|
# This is a YAML-formatted file.
|
|
# Declare variables to be passed into your templates.
|
|
|
|
image:
|
|
# -- Image
|
|
repository: docker.io/rook/ceph
|
|
# -- Image tag
|
|
# @default -- `master`
|
|
tag: master
|
|
# -- Image pull policy
|
|
pullPolicy: IfNotPresent
|
|
|
|
crds:
|
|
# -- Whether the helm chart should create and update the CRDs. If false, the CRDs must be
|
|
# managed independently with deploy/examples/crds.yaml.
|
|
# **WARNING** Only set during first deployment. If later disabled the cluster may be DESTROYED.
|
|
# If the CRDs are deleted in this case, see
|
|
# [the disaster recovery guide](https://rook.io/docs/rook/latest/Troubleshooting/disaster-recovery/#restoring-crds-after-deletion)
|
|
# to restore them.
|
|
enabled: true
|
|
|
|
# -- Pod resource requests & limits
|
|
resources:
|
|
limits:
|
|
memory: 512Mi
|
|
requests:
|
|
cpu: 200m
|
|
memory: 128Mi
|
|
|
|
# -- Kubernetes [`nodeSelector`](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector) to add to the Deployment.
|
|
nodeSelector: {}
|
|
# Constraint rook-ceph-operator Deployment to nodes with label `disktype: ssd`.
|
|
# For more info, see https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
|
|
# disktype: ssd
|
|
|
|
# -- List of Kubernetes [`tolerations`](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) to add to the Deployment.
|
|
tolerations: []
|
|
|
|
# -- Delay to use for the `node.kubernetes.io/unreachable` pod failure toleration to override
|
|
# the Kubernetes default of 5 minutes
|
|
unreachableNodeTolerationSeconds: 5
|
|
|
|
# -- Whether the operator should watch cluster CRD in its own namespace or not
|
|
currentNamespaceOnly: false
|
|
|
|
# -- Number of clusters the operator reconciles concurrently
|
|
reconcileConcurrentClusters: 1
|
|
|
|
# -- Custom pod labels for the operator
|
|
operatorPodLabels: {}
|
|
|
|
# -- Pod annotations
|
|
annotations: {}
|
|
|
|
# -- Global log level for the operator.
|
|
# Options: `ERROR`, `WARNING`, `INFO`, `DEBUG`
|
|
logLevel: INFO
|
|
|
|
# -- If true, create & use RBAC resources
|
|
rbacEnable: true
|
|
|
|
rbacAggregate:
|
|
# -- If true, create a ClusterRole aggregated to [user facing roles](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles) for objectbucketclaims
|
|
enableOBCs: false
|
|
|
|
# -- Set the priority class for the rook operator deployment if desired
|
|
priorityClassName:
|
|
|
|
# -- Set the container security context for the operator
|
|
containerSecurityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 2016
|
|
runAsGroup: 2016
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
# -- If true, loop devices are allowed to be used for osds in test clusters
|
|
allowLoopDevices: false
|
|
|
|
# -- If true, ceph mon pods will be run as root
|
|
monRunAsRoot: false
|
|
|
|
# -- If true, delete unused generated CRUSH rules after the mgr starts
|
|
deleteUnusedCrushRules: true
|
|
|
|
ceph-csi-operator:
|
|
nameOverride: ceph-csi
|
|
fullnameOverride: ceph-csi
|
|
controllerManager:
|
|
manager:
|
|
env:
|
|
csiServiceAccountPrefix: ""
|
|
csi:
|
|
# -- When true, install the ceph-csi-operator subchart (see Chart.yaml `condition`).
|
|
installCsiOperator: true
|
|
|
|
cephcsi:
|
|
# -- Ceph CSI image repository
|
|
repository: quay.io/cephcsi/cephcsi
|
|
# -- Ceph CSI image tag
|
|
tag: v3.17.0
|
|
|
|
registrar:
|
|
# -- Kubernetes CSI registrar image repository
|
|
repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
|
|
# -- Registrar image tag
|
|
tag: v2.17.0
|
|
|
|
provisioner:
|
|
# -- Kubernetes CSI provisioner image repository
|
|
repository: registry.k8s.io/sig-storage/csi-provisioner
|
|
# -- Provisioner image tag
|
|
tag: v6.2.0
|
|
|
|
snapshotter:
|
|
# -- Kubernetes CSI snapshotter image repository
|
|
repository: registry.k8s.io/sig-storage/csi-snapshotter
|
|
# -- Snapshotter image tag
|
|
tag: v8.5.0
|
|
|
|
attacher:
|
|
# -- Kubernetes CSI Attacher image repository
|
|
repository: registry.k8s.io/sig-storage/csi-attacher
|
|
# -- Attacher image tag
|
|
tag: v4.12.0
|
|
|
|
resizer:
|
|
# -- Kubernetes CSI resizer image repository
|
|
repository: registry.k8s.io/sig-storage/csi-resizer
|
|
# -- Resizer image tag
|
|
tag: v2.1.0
|
|
|
|
csiAddons:
|
|
# -- CSIAddons sidecar image repository
|
|
repository: quay.io/csiaddons/k8s-sidecar
|
|
# -- CSIAddons sidecar image tag
|
|
tag: v0.14.0
|
|
|
|
serviceMonitor:
|
|
# -- Enable ServiceMonitor for CSI metrics
|
|
enabled: false
|
|
# -- Namespace in which to deploy the ServiceMonitor
|
|
# @default -- the release namespace
|
|
namespace:
|
|
# -- Additional labels for the ServiceMonitor
|
|
labels: {}
|
|
# -- Interval at which metrics should be scraped
|
|
interval: 5s
|
|
|
|
# -- Enable discovery daemon
|
|
enableDiscoveryDaemon: false
|
|
# -- Set the discovery daemon device discovery interval (default to 60m)
|
|
discoveryDaemonInterval: 60m
|
|
|
|
# -- The timeout for ceph commands in seconds
|
|
cephCommandsTimeoutSeconds: "15"
|
|
|
|
# -- If true, run rook operator on the host network
|
|
useOperatorHostNetwork:
|
|
|
|
# -- If true, scale down the rook operator.
|
|
# This is useful for administrative actions where the rook operator must be scaled down, while using gitops style tooling
|
|
# to deploy your helm charts.
|
|
scaleDownOperator: false
|
|
|
|
## Rook Discover configuration
|
|
## toleration: NoSchedule, PreferNoSchedule or NoExecute
|
|
## tolerationKey: Set this to the specific key of the taint to tolerate
|
|
## tolerations: Array of tolerations in YAML format which will be added to agent deployment
|
|
## nodeAffinity: Set to labels of the node to match
|
|
|
|
discover:
|
|
# -- Toleration for the discover pods.
|
|
# Options: `NoSchedule`, `PreferNoSchedule` or `NoExecute`
|
|
toleration:
|
|
# -- The specific key of the taint to tolerate
|
|
tolerationKey:
|
|
# -- Array of tolerations in YAML format which will be added to discover deployment
|
|
tolerations:
|
|
# - key: key
|
|
# operator: Exists
|
|
# effect: NoSchedule
|
|
# -- The node labels for affinity of `discover-agent` [^1]
|
|
nodeAffinity:
|
|
# key1=value1,value2; key2=value3
|
|
#
|
|
# or
|
|
#
|
|
# requiredDuringSchedulingIgnoredDuringExecution:
|
|
# nodeSelectorTerms:
|
|
# - matchExpressions:
|
|
# - key: storage-node
|
|
# operator: Exists
|
|
# -- Labels to add to the discover pods
|
|
podLabels: # "key1=value1,key2=value2"
|
|
# -- Add resources to discover daemon pods
|
|
resources:
|
|
# resources: |
|
|
# '{"resources":{"requests":{"memory":"128Mi","cpu":"100m"},"limits":{"memory":"512Mi"}}}'
|
|
|
|
# -- Custom label to identify node hostname. If not set `kubernetes.io/hostname` will be used
|
|
customHostnameLabel:
|
|
|
|
# -- Runs Ceph Pods as privileged to be able to write to `hostPaths` in OpenShift with SELinux restrictions.
|
|
hostpathRequiresPrivileged: false
|
|
|
|
# -- Whether to create all Rook pods to run on the host network, for example in environments where a CNI is not enabled
|
|
enforceHostNetwork: false
|
|
|
|
# -- Disable automatic orchestration when new devices are discovered.
|
|
disableDeviceHotplug: false
|
|
|
|
# -- The revision history limit for all pods created by Rook. If blank, the K8s default is 10.
|
|
revisionHistoryLimit:
|
|
|
|
# -- Blacklist certain disks according to the regex provided.
|
|
discoverDaemonUdev:
|
|
|
|
# -- imagePullSecrets option allow to pull docker images from private docker registry. Option will be passed to all service accounts.
|
|
imagePullSecrets:
|
|
# - name: my-registry-secret
|
|
|
|
# -- Whether the OBC provisioner should watch on the operator namespace or not, if not the namespace of the cluster will be used
|
|
enableOBCWatchOperatorNamespace: true
|
|
|
|
# -- Specify the prefix for the OBC provisioner in place of the cluster namespace
|
|
# @default -- `ceph cluster namespace`
|
|
obcProvisionerNamePrefix:
|
|
|
|
# -- Many OBC additional config fields may be risky for administrators to allow users control over.
|
|
# The safe and default-allowed fields are 'maxObjects' and 'maxSize'.
|
|
# Other fields should be considered risky. To allow all additional configs, use this value:
|
|
# "maxObjects,maxSize,bucketMaxObjects,bucketMaxSize,bucketPolicy,bucketLifecycle,bucketOwner"
|
|
# @default -- "maxObjects,maxSize"
|
|
obcAllowAdditionalConfigFields: "maxObjects,maxSize"
|
|
|
|
monitoring:
|
|
# -- Enable monitoring. Requires Prometheus to be pre-installed.
|
|
# Enabling will also create RBAC rules to allow Operator to create ServiceMonitors
|
|
enabled: false
|