TrueCharts BotandGitHub
beeec66163
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/postfinance/kubelet-csr-approver](https://images.chainguard.dev/directory/image/static/overview) ([source](https://redirect.github.com/chainguard-images/images/tree/HEAD/images/static)) | patch | -> | Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMzguMCIsInVwZGF0ZWRJblZlciI6IjM5LjIzOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
100 lines
2.1 KiB
YAML
100 lines
2.1 KiB
YAML
image:
|
|
repository: ghcr.io/postfinance/kubelet-csr-approver
|
|
pullPolicy: IfNotPresent
|
|
tag: v1.2.7
|
|
|
|
service:
|
|
main:
|
|
enabled: true
|
|
ports:
|
|
main:
|
|
enabled: true
|
|
port: 8080
|
|
|
|
workload:
|
|
main:
|
|
enabled: true
|
|
replicas: 3
|
|
podSpec:
|
|
containers:
|
|
main:
|
|
args:
|
|
- -metrics-bind-address
|
|
- ":8080"
|
|
- -health-probe-bind-address
|
|
- ":8081"
|
|
- -level
|
|
- "0"
|
|
probes:
|
|
liveness:
|
|
path: "/healthz"
|
|
enabled: true
|
|
type: http
|
|
port: 8081
|
|
readiness:
|
|
path: "/healthz"
|
|
enabled: true
|
|
type: http
|
|
port: 8081
|
|
startup:
|
|
path: "/healthz"
|
|
enabled: true
|
|
type: http
|
|
port: 8081
|
|
env:
|
|
PROVIDER_REGEX: ".*"
|
|
BYPASS_DNS_RESOLUTION: true
|
|
IGNORE_NON_SYSTEM_NODE: false
|
|
ALLOWED_DNS_NAMES: 1
|
|
BYPASS_HOSTNAME_CHECK: false
|
|
LEADER_ELECTION: true
|
|
|
|
rbac:
|
|
main:
|
|
enabled: true
|
|
primary: true
|
|
clusterWide: true
|
|
rules:
|
|
- apiGroups: ["coordination.k8s.io"]
|
|
resources: ["leases"]
|
|
verbs: ["create", "get", "update"]
|
|
- apiGroups: [""]
|
|
resources: ["events"]
|
|
verbs: ["create"]
|
|
- apiGroups: ["certificates.k8s.io"]
|
|
resources: ["certificatesigningrequests"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: ["certificates.k8s.io"]
|
|
resources: ["certificatesigningrequests/approval"]
|
|
verbs: ["update"]
|
|
- apiGroups: ["certificates.k8s.io"]
|
|
resourceNames: ["kubernetes.io/kubelet-serving"]
|
|
resources: ["signers"]
|
|
verbs: ["approve"]
|
|
|
|
serviceAccount:
|
|
main:
|
|
enabled: true
|
|
primary: true
|
|
|
|
metrics:
|
|
main:
|
|
enabled: true
|
|
type: "servicemonitor"
|
|
endpoints:
|
|
- port: main
|
|
path: /metrics
|
|
prometheusRule:
|
|
enabled: false
|
|
labels: {}
|
|
rules: []
|
|
|
|
podOptions:
|
|
automountServiceAccountToken: true
|
|
|
|
operator:
|
|
register: true
|
|
|
|
manifestManager:
|
|
enabled: false
|