167 lines
4.2 KiB
YAML
167 lines
4.2 KiB
YAML
image:
|
|
repository: ghcr.io/spegel-org/spegel
|
|
pullPolicy: IfNotPresent
|
|
tag: v0.3.0
|
|
|
|
securityContext:
|
|
container:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
readOnlyRootFilesystem: false
|
|
pod:
|
|
fsGroup: 0
|
|
|
|
service:
|
|
main:
|
|
ports:
|
|
main:
|
|
port: 5000
|
|
targetPort: 5000
|
|
hostPort: 30020
|
|
nodePort: 30021
|
|
router:
|
|
enabled: true
|
|
clusterIP: None
|
|
publishNotReadyAddresses: true
|
|
ports:
|
|
router:
|
|
enabled: true
|
|
port: 5001
|
|
targetPort: 5001
|
|
metrics:
|
|
enabled: true
|
|
ports:
|
|
metrics:
|
|
enabled: true
|
|
port: 9090
|
|
targetPort: 9090
|
|
|
|
workload:
|
|
main:
|
|
type: DaemonSet
|
|
podSpec:
|
|
initContainers:
|
|
configuration:
|
|
enabled: true
|
|
type: init
|
|
args: []
|
|
env:
|
|
NODE_IP:
|
|
fieldRef:
|
|
fieldPath: status.hostIP
|
|
containers:
|
|
main:
|
|
args: []
|
|
env:
|
|
NODE_IP:
|
|
fieldRef:
|
|
fieldPath: status.hostIP
|
|
probes:
|
|
liveness:
|
|
path: /healthz
|
|
readiness:
|
|
path: /healthz
|
|
startup:
|
|
path: /healthz
|
|
|
|
configmap:
|
|
dashboard:
|
|
enabled: true
|
|
labels:
|
|
grafana_dashboard: "1"
|
|
data:
|
|
spegel.json: >-
|
|
{{ .Files.Get "dashboard.json" | indent 8 }}
|
|
|
|
podOptions:
|
|
automountServiceAccountToken: true
|
|
priorityClassName: "system-node-critical"
|
|
nodeSelector:
|
|
kubernetes.io/arch: ""
|
|
tolerations:
|
|
- key: CriticalAddonsOnly
|
|
operator: Exists
|
|
- effect: NoExecute
|
|
operator: Exists
|
|
- effect: NoSchedule
|
|
operator: Exists
|
|
|
|
metrics:
|
|
main:
|
|
enabled: true
|
|
type: servicemonitor
|
|
endpoints:
|
|
- port: metrics
|
|
targetSelector: metrics
|
|
|
|
persistence:
|
|
containerd-sock:
|
|
enabled: true
|
|
type: hostPath
|
|
mountPath: "{{ .Values.spegel.containerdSock }}"
|
|
hostPath: "{{ .Values.spegel.containerdSock }}"
|
|
hostPathType: Socket
|
|
containerd-content:
|
|
enabled: true
|
|
type: hostPath
|
|
mountPath: "{{ .Values.spegel.containerdContentPath }}"
|
|
hostPath: "{{ .Values.spegel.containerdContentPath }}"
|
|
hostPathType: Directory
|
|
readOnly: true
|
|
containerd-config:
|
|
enabled: true
|
|
type: hostPath
|
|
hostPath: "{{ .Values.spegel.containerdRegistryConfigPath }}"
|
|
hostPathType: DirectoryOrCreate
|
|
targetSelector:
|
|
main:
|
|
configuration:
|
|
mountPath: "{{ .Values.spegel.containerdRegistryConfigPath }}"
|
|
|
|
spegel:
|
|
# -- Minimum log level to output. Value should be DEBUG, INFO, WARN, or ERROR.
|
|
logLevel: "INFO"
|
|
# -- Registries for which mirror configuration will be created.
|
|
## NOTE: If using Talos, Talos does NOT fall-back to the main url for talos containers
|
|
## Include main url in mirror list in that case!
|
|
mirroredRegistries:
|
|
- https://cgr.dev
|
|
- https://docker.io
|
|
- https://ghcr.io
|
|
- https://quay.io
|
|
- https://mcr.microsoft.com
|
|
- https://public.ecr.aws
|
|
- https://gcr.io
|
|
- https://registry.k8s.io
|
|
- https://k8s.gcr.io
|
|
- https://tccr.io
|
|
- https://factory.talos.dev
|
|
# -- Additional target mirror registries other than Spegel.
|
|
additionalMirrorTargets: []
|
|
# -- Max ammount of mirrors to attempt.
|
|
mirrorResolveRetries: 3
|
|
# -- Max duration spent finding a mirror.
|
|
mirrorResolveTimeout: "20ms"
|
|
# -- Path to Containerd socket.
|
|
containerdSock: "/run/containerd/containerd.sock"
|
|
# -- Containerd namespace where images are stored.
|
|
containerdNamespace: "k8s.io"
|
|
# -- Path to Containerd mirror configuration.
|
|
containerdRegistryConfigPath: "/etc/cri/conf.d/hosts"
|
|
# -- Path to Containerd content store..
|
|
containerdContentPath: "/var/lib/containerd/io.containerd.content.v1.content"
|
|
# -- If true Spegel will add mirror configuration to the node.
|
|
containerdMirrorAdd: true
|
|
# -- When true Spegel will resolve tags to digests.
|
|
resolveTags: true
|
|
# -- When true latest tags will be resolved to digests.
|
|
resolveLatestTag: true
|
|
# -- When true existing mirror configuration will be appended to instead of replaced.
|
|
prependExisting: true
|
|
|
|
# -- The service account the pods will use to interact with the Kubernetes API
|
|
serviceAccount:
|
|
main:
|
|
enabled: true
|
|
primary: true
|