6e80ce79b0
This PR contains the following updates: | Package | Update | Change | |---|---|---| | registry.k8s.io/sig-storage/snapshot-controller | minor | `74ca61a` → `81e79f2` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9zbmFwc2hvdC1jb250cm9sbGVyIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==-->
131 lines
3.6 KiB
YAML
131 lines
3.6 KiB
YAML
# yaml-language-server: $schema=./values.schema.json
|
|
image:
|
|
pullPolicy: IfNotPresent
|
|
repository: registry.k8s.io/sig-storage/snapshot-controller
|
|
tag: v8.6.0@sha256:81e79f205083f105e573ba2ebfe5964ede7f69a154e8627f53ebbbccd3ed9f70
|
|
service:
|
|
main:
|
|
enabled: true
|
|
ports:
|
|
main:
|
|
enabled: true
|
|
port: 8080
|
|
protocol: http
|
|
webhook:
|
|
enabled: true
|
|
ports:
|
|
webhook:
|
|
enabled: true
|
|
port: 8443
|
|
protocol: https
|
|
|
|
podOptions:
|
|
automountServiceAccountToken: true
|
|
|
|
workload:
|
|
main:
|
|
podSpec:
|
|
containers:
|
|
main:
|
|
args:
|
|
- "--http-endpoint=:{{ .Values.service.main.ports.main.port }}"
|
|
- "--leader-election=true"
|
|
- "--leader-election-namespace={{ .Release.Namespace }}"
|
|
probes:
|
|
liveness:
|
|
path: /metrics
|
|
readiness:
|
|
path: /metrics
|
|
startup:
|
|
path: /metrics
|
|
webhook:
|
|
enabled: false
|
|
podSpec:
|
|
containers:
|
|
webhook:
|
|
enabled: false
|
|
args:
|
|
- "--tlsPrivateKeyFile=/etc/snapshot-validation/tls.key"
|
|
- "--tlsCertFile=/etc/snapshot-validation/tls.crt"
|
|
- "--port={{ .Values.service.webhook.ports.webhook.port }}"
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
type: https
|
|
path: /readyz
|
|
port: 8443
|
|
readiness:
|
|
enabled: true
|
|
type: https
|
|
path: /readyz
|
|
port: 8443
|
|
startup:
|
|
enabled: true
|
|
type: https
|
|
path: /readyz
|
|
port: 8443
|
|
|
|
metrics:
|
|
main:
|
|
enabled: true
|
|
type: servicemonitor
|
|
endpoints:
|
|
- port: main
|
|
path: /metrics
|
|
targetSelector: main
|
|
|
|
serviceAccount:
|
|
main:
|
|
enabled: true
|
|
primary: true
|
|
targetSelectAll: true
|
|
|
|
rbac:
|
|
main:
|
|
enabled: true
|
|
primary: true
|
|
clusterWide: true
|
|
rules:
|
|
- apiGroups: [""]
|
|
resources: ["persistentvolumes"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: [""]
|
|
resources: ["persistentvolumeclaims"]
|
|
verbs: ["get", "list", "watch", "update"]
|
|
- apiGroups: ["storage.k8s.io"]
|
|
resources: ["storageclasses"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: [""]
|
|
resources: ["events"]
|
|
verbs: ["list", "watch", "create", "update", "patch"]
|
|
- apiGroups: ["snapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshotclasses"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: ["snapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshotcontents"]
|
|
verbs: ["create", "get", "list", "watch", "update", "patch", "delete"]
|
|
- apiGroups: ["snapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshotcontents/status"]
|
|
verbs: ["patch"]
|
|
- apiGroups: ["snapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshots"]
|
|
verbs: ["get", "list", "watch", "update", "patch"]
|
|
- apiGroups: ["snapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshots/status"]
|
|
verbs: ["update", "patch"]
|
|
- apiGroups: [""]
|
|
resources: ["nodes"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: ["snapshot.storage.k8s.io", "groupsnapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshotclasses", "volumegroupsnapshotclasses"]
|
|
verbs: ["list", "watch"]
|
|
role:
|
|
enabled: true
|
|
primary: false
|
|
clusterWide: false
|
|
serviceAccounts: ["main"]
|
|
rules:
|
|
- apiGroups: ["coordination.k8s.io"]
|
|
resources: ["leases"]
|
|
verbs: ["get", "watch", "list", "delete", "update", "create"]
|