rabbitmq-cluster-operator
Helm chart
iamguarded
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
1
# This file has been modified by Chainguard, Inc.
2
#
3
# Copyright Chainguard, Inc. All Rights Reserved.
4
# Chainguard, Inc. modifications are subject to the license
5
# available at: https://www.chainguard.dev/legal/software-license-agreement
6
#
7
# Copyright Broadcom, Inc. All Rights Reserved.
8
# SPDX-License-Identifier: APACHE-2.0
9
10
## @section Global parameters
11
## Global Docker image parameters
12
## Please, note that this will override the image parameters, including dependencies, configured to use the global value
13
## Current available global Docker image parameters: imageRegistry, imagePullSecrets and storageClass
14
##
15
16
## @param global.imageRegistry Global Docker image registry
17
## @param global.imagePullSecrets Global Docker registry secret names as an array
18
## @param global.defaultStorageClass Global default StorageClass for Persistent Volume(s)
19
## @param global.storageClass DEPRECATED: use global.defaultStorageClass instead
20
##
21
global:
22
imageRegistry: ""
23
## E.g.
24
## imagePullSecrets:
25
## - myRegistryKeySecretName
26
##
27
imagePullSecrets: []
28
defaultStorageClass: ""
29
storageClass: ""
30
## Security parameters
31
##
32
security:
33
## @param global.security.allowInsecureImages Allows skipping image verification
34
allowInsecureImages: false
35
## Compatibility adaptations for Kubernetes platforms
36
##
37
compatibility:
38
## Compatibility adaptations for Openshift
39
##
40
openshift:
41
## @param global.compatibility.openshift.adaptSecurityContext Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation)
42
##
43
adaptSecurityContext: auto
44
org: ""
45
## @section Common parameters
46
##
47
48
## @param kubeVersion Override Kubernetes version
49
##
50
kubeVersion: ""
51
## @param nameOverride String to partially override common.names.fullname
52
##
53
nameOverride: ""
54
## @param fullnameOverride String to fully override common.names.fullname
55
##
56
fullnameOverride: ""
57
## @param commonLabels Labels to add to all deployed objects
58
##
59
commonLabels: {}
60
## @param commonAnnotations Annotations to add to all deployed objects
61
##
62
commonAnnotations: {}
63
## @param clusterDomain Kubernetes cluster domain name
64
##
65
clusterDomain: cluster.local
66
## @param extraDeploy Array of extra objects to deploy with the release
67
##
68
extraDeploy: []
69
## Enable diagnostic mode in the deployment(s)/statefulset(s)
70
##
71
diagnosticMode:
72
## @param diagnosticMode.enabled Enable diagnostic mode (all probes will be disabled)
73
##
74
enabled: false
75
## @section RabbitMQ Cluster Operator Parameters
76
##
77
78
## Iamguarded RabbitMQ Image
79
## @param rabbitmqImage.registry [default: REGISTRY_NAME] RabbitMQ Image registry
80
## @param rabbitmqImage.repository [default: REPOSITORY_NAME/rabbitmq] RabbitMQ Image repository
81
## @skip rabbitmqImage.tag RabbitMQ Image tag (immutable tags are recommended)
82
## @param rabbitmqImage.digest RabbitMQ image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
83
## @param rabbitmqImage.pullSecrets RabbitMQ Image pull secrets
84
##
85
rabbitmqImage:
86
registry: cgr.dev
87
repository: chainguard-private/rabbitmq-iamguarded
88
tag: 4.3.4
89
digest: ""
90
## Optionally specify an array of imagePullSecrets.
91
## Secrets must be manually created in the namespace.
92
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-rabbitmqImage-private-registry/
93
## e.g:
94
## pullSecrets:
95
## - myRegistryKeySecretName
96
##
97
pullSecrets: []
98
## Iamguarded RabbitMQ Default User Credential Updater Image
99
## @param credentialUpdaterImage.registry [default: REGISTRY_NAME] RabbitMQ Default User Credential Updater image registry
100
## @param credentialUpdaterImage.repository [default: REPOSITORY_NAME/rmq-default-credential-updater] RabbitMQ Default User Credential Updater image repository
101
## @skip credentialUpdaterImage.tag RabbitMQ Default User Credential Updater image tag (immutable tags are recommended)
102
## @param credentialUpdaterImage.digest RabbitMQ Default User Credential Updater image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
103
## @param credentialUpdaterImage.pullSecrets RabbitMQ Default User Credential Updater image pull secrets
104
##
105
credentialUpdaterImage:
106
registry: cgr.dev
107
repository: chainguard-private/rabbitmq-default-user-credential-updater-iamguarded
108
tag: 1.0.16
109
digest: ""
110
## Optionally specify an array of imagePullSecrets.
111
## Secrets must be manually created in the namespace.
112
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-credentialUpdaterImage-private-registry/
113
## e.g:
114
## pullSecrets:
115
## - myRegistryKeySecretName
116
##
117
pullSecrets: []
118
clusterOperator:
119
## Iamguarded RabbitMQ Cluster Operator image
120
## @param clusterOperator.image.registry [default: REGISTRY_NAME] RabbitMQ Cluster Operator image registry
121
## @param clusterOperator.image.repository [default: REPOSITORY_NAME/rabbitmq-cluster-operator] RabbitMQ Cluster Operator image repository
122
## @skip clusterOperator.image.tag RabbitMQ Cluster Operator image tag (immutable tags are recommended)
123
## @param clusterOperator.image.digest RabbitMQ Cluster Operator image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
124
## @param clusterOperator.image.pullPolicy RabbitMQ Cluster Operator image pull policy
125
## @param clusterOperator.image.pullSecrets RabbitMQ Cluster Operator image pull secrets
126
##
127
image:
128
registry: cgr.dev
129
repository: chainguard-private/rabbitmq-cluster-operator-iamguarded
130
tag: 2.22.3
131
digest: ""
132
## Specify a imagePullPolicy
133
## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
134
##
135
pullPolicy: IfNotPresent
136
## Optionally specify an array of imagePullSecrets.
137
## Secrets must be manually created in the namespace.
138
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
139
## e.g:
140
## pullSecrets:
141
## - myRegistryKeySecretName
142
##
143
pullSecrets: []
144
## @param clusterOperator.revisionHistoryLimit sets number of replicaset to keep in k8s
145
##
146
revisionHistoryLimit: 10
147
## @param clusterOperator.watchAllNamespaces Watch for resources in all namespaces
148
##
149
watchAllNamespaces: true
150
## @param clusterOperator.watchNamespaces [array] Watch for resources in the given namespaces (ignored if watchAllNamespaces=true)
151
##
152
watchNamespaces: []
153
## @param clusterOperator.replicaCount Number of RabbitMQ Cluster Operator replicas to deploy
154
##
155
replicaCount: 1
156
## @param clusterOperator.schedulerName Alternative scheduler
157
##
158
schedulerName: ""
159
## @param clusterOperator.topologySpreadConstraints Topology Spread Constraints for pod assignment
160
## https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
161
## The value is evaluated as a template
162
##
163
topologySpreadConstraints: []
164
## @param clusterOperator.terminationGracePeriodSeconds In seconds, time the given to the %%MAIN_CONTAINER_NAME%% pod needs to terminate gracefully
165
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods
166
##
167
terminationGracePeriodSeconds: ""
168
## Configure extra options for RabbitMQ Cluster Operator containers' liveness and readiness probes
169
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes
170
## @param clusterOperator.livenessProbe.enabled Enable livenessProbe on RabbitMQ Cluster Operator nodes
171
## @param clusterOperator.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
172
## @param clusterOperator.livenessProbe.periodSeconds Period seconds for livenessProbe
173
## @param clusterOperator.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
174
## @param clusterOperator.livenessProbe.failureThreshold Failure threshold for livenessProbe
175
## @param clusterOperator.livenessProbe.successThreshold Success threshold for livenessProbe
176
##
177
livenessProbe:
178
enabled: true
179
initialDelaySeconds: 5
180
periodSeconds: 30
181
timeoutSeconds: 5
182
successThreshold: 1
183
failureThreshold: 5
184
## @param clusterOperator.readinessProbe.enabled Enable readinessProbe on RabbitMQ Cluster Operator nodes
185
## @param clusterOperator.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
186
## @param clusterOperator.readinessProbe.periodSeconds Period seconds for readinessProbe
187
## @param clusterOperator.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
188
## @param clusterOperator.readinessProbe.failureThreshold Failure threshold for readinessProbe
189
## @param clusterOperator.readinessProbe.successThreshold Success threshold for readinessProbe
190
##
191
readinessProbe:
192
enabled: true
193
initialDelaySeconds: 5
194
periodSeconds: 30
195
timeoutSeconds: 5
196
successThreshold: 1
197
failureThreshold: 5
198
## @param clusterOperator.startupProbe.enabled Enable startupProbe on RabbitMQ Cluster Operator nodes
199
## @param clusterOperator.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
200
## @param clusterOperator.startupProbe.periodSeconds Period seconds for startupProbe
201
## @param clusterOperator.startupProbe.timeoutSeconds Timeout seconds for startupProbe
202
## @param clusterOperator.startupProbe.failureThreshold Failure threshold for startupProbe
203
## @param clusterOperator.startupProbe.successThreshold Success threshold for startupProbe
204
##
205
startupProbe:
206
enabled: false
207
initialDelaySeconds: 5
208
periodSeconds: 30
209
timeoutSeconds: 5
210
successThreshold: 1
211
failureThreshold: 5
212
## @param clusterOperator.customLivenessProbe Custom livenessProbe that overrides the default one
213
##
214
customLivenessProbe: {}
215
## @param clusterOperator.customReadinessProbe Custom readinessProbe that overrides the default one
216
##
217
customReadinessProbe: {}
218
## @param clusterOperator.customStartupProbe Custom startupProbe that overrides the default one
219
##
220
customStartupProbe: {}
221
## RabbitMQ Cluster Operator resource requests and limits
222
## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
223
## @param clusterOperator.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if clusterOperator.resources is set (clusterOperator.resources is recommended for production).
224
##
225
resourcesPreset: "nano"
226
## @param clusterOperator.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
227
## Example:
228
## resources:
229
## requests:
230
## cpu: 2
231
## memory: 512Mi
232
## limits:
233
## cpu: 3
234
## memory: 1024Mi
235
##
236
resources: {}
237
## Pod Disruption Budget configuration
238
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
239
## @param clusterOperator.pdb.create Enable a Pod Disruption Budget creation
240
## @param clusterOperator.pdb.minAvailable Minimum number/percentage of pods that should remain scheduled
241
## @param clusterOperator.pdb.maxUnavailable Maximum number/percentage of pods that may be made unavailable
242
##
243
pdb:
244
create: true
245
minAvailable: ""
246
maxUnavailable: ""
247
## Configure Pods Security Context
248
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
249
## @param clusterOperator.podSecurityContext.enabled Enabled RabbitMQ Cluster Operator pods' Security Context
250
## @param clusterOperator.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy
251
## @param clusterOperator.podSecurityContext.sysctls Set kernel settings using the sysctl interface
252
## @param clusterOperator.podSecurityContext.supplementalGroups Set filesystem extra groups
253
## @param clusterOperator.podSecurityContext.fsGroup Set RabbitMQ Cluster Operator pod's Security Context fsGroup
254
##
255
podSecurityContext:
256
enabled: true
257
fsGroupChangePolicy: Always
258
sysctls: []
259
supplementalGroups: []
260
fsGroup: 1001
261
## Configure Container Security Context
262
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
263
## @param clusterOperator.containerSecurityContext.enabled Enabled containers' Security Context
264
## @param clusterOperator.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
265
## @param clusterOperator.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
266
## @param clusterOperator.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
267
## @param clusterOperator.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
268
## @param clusterOperator.containerSecurityContext.privileged Set container's Security Context privileged
269
## @param clusterOperator.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
270
## @param clusterOperator.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
271
## @param clusterOperator.containerSecurityContext.capabilities.drop List of capabilities to be dropped
272
## @param clusterOperator.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
273
##
274
containerSecurityContext:
275
enabled: true
276
seLinuxOptions: {}
277
runAsUser: 1001
278
runAsGroup: 1001
279
runAsNonRoot: true
280
privileged: false
281
readOnlyRootFilesystem: true
282
allowPrivilegeEscalation: false
283
capabilities:
284
drop: ["ALL"]
285
seccompProfile:
286
type: "RuntimeDefault"
287
## @param clusterOperator.command Override default container command (useful when using custom images)
288
##
289
command: []
290
## @param clusterOperator.args Override default container args (useful when using custom images)
291
##
292
args: []
293
## @param clusterOperator.automountServiceAccountToken Mount Service Account token in pod
294
##
295
automountServiceAccountToken: true
296
## @param clusterOperator.hostAliases RabbitMQ Cluster Operator pods host aliases
297
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
298
##
299
hostAliases: []
300
## @param clusterOperator.podLabels Extra labels for RabbitMQ Cluster Operator pods
301
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
302
##
303
podLabels: {}
304
## @param clusterOperator.podAnnotations Annotations for RabbitMQ Cluster Operator pods
305
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
306
##
307
podAnnotations: {}
308
## @param clusterOperator.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
309
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
310
##
311
podAffinityPreset: ""
312
## @param clusterOperator.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
313
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
314
##
315
podAntiAffinityPreset: soft
316
## Node affinity preset
317
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
318
##
319
nodeAffinityPreset:
320
## @param clusterOperator.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
321
##
322
type: ""
323
## @param clusterOperator.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set
324
##
325
key: ""
326
## @param clusterOperator.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set
327
## E.g.
328
## values:
329
## - e2e-az1
330
## - e2e-az2
331
##
332
values: []
333
## @param clusterOperator.affinity Affinity for RabbitMQ Cluster Operator pods assignment
334
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
335
## NOTE: `podAffinityPreset`, `podAntiAffinityPreset`, and `nodeAffinityPreset` will be ignored when it's set
336
##
337
affinity: {}
338
## @param clusterOperator.nodeSelector Node labels for RabbitMQ Cluster Operator pods assignment
339
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/
340
##
341
nodeSelector: {}
342
## @param clusterOperator.tolerations Tolerations for RabbitMQ Cluster Operator pods assignment
343
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
344
##
345
tolerations: []
346
## @param clusterOperator.updateStrategy.type RabbitMQ Cluster Operator statefulset strategy type
347
## ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies
348
##
349
updateStrategy:
350
## StrategyType
351
## Can be set to RollingUpdate or OnDelete
352
##
353
type: RollingUpdate
354
## @param clusterOperator.priorityClassName RabbitMQ Cluster Operator pods' priorityClassName
355
##
356
priorityClassName: ""
357
## @param clusterOperator.lifecycleHooks for the RabbitMQ Cluster Operator container(s) to automate configuration before or after startup
358
##
359
lifecycleHooks: {}
360
## @param clusterOperator.containerPorts.metrics RabbitMQ Cluster Operator container port (used for metrics)
361
## @param clusterOperator.containerPorts.webhook RabbitMQ Cluster Operator container port (used for the admission webhook server)
362
##
363
containerPorts:
364
metrics: 9782
365
webhook: 9443
366
## Cluster Operator admission webhook service parameters (operator >= 2.22.0)
367
##
368
service:
369
## @param clusterOperator.service.ports.webhook RabbitMQ Cluster Operator webhook service port
370
##
371
ports:
372
webhook: 443
373
## @param clusterOperator.existingWebhookCertSecret name of a secret containing the webhook certificates (use it to avoid the chart/cert-manager creating one)
374
##
375
existingWebhookCertSecret: ""
376
## @param clusterOperator.existingWebhookCertCABundle PEM-encoded CA Bundle of the existing secret provided in existingWebhookCertSecret (only if useCertManager=false)
377
##
378
existingWebhookCertCABundle: ""
379
## @param clusterOperator.extraEnvVars Array with extra environment variables to add to RabbitMQ Cluster Operator nodes
380
## e.g:
381
## extraEnvVars:
382
## - name: FOO
383
## value: "bar"
384
##
385
extraEnvVars: []
386
## @param clusterOperator.extraEnvVarsCM Name of existing ConfigMap containing extra env vars for RabbitMQ Cluster Operator nodes
387
##
388
extraEnvVarsCM: ""
389
## @param clusterOperator.extraEnvVarsSecret Name of existing Secret containing extra env vars for RabbitMQ Cluster Operator nodes
390
##
391
extraEnvVarsSecret: ""
392
## @param clusterOperator.extraVolumes Optionally specify extra list of additional volumes for the RabbitMQ Cluster Operator pod(s)
393
##
394
extraVolumes: []
395
## @param clusterOperator.extraVolumeMounts Optionally specify extra list of additional volumeMounts for the RabbitMQ Cluster Operator container(s)
396
##
397
extraVolumeMounts: []
398
## @param clusterOperator.sidecars Add additional sidecar containers to the RabbitMQ Cluster Operator pod(s)
399
## e.g:
400
## sidecars:
401
## - name: your-image-name
402
## image: your-image
403
## imagePullPolicy: Always
404
## ports:
405
## - name: portname
406
## containerPort: 1234
407
##
408
sidecars: []
409
## @param clusterOperator.initContainers Add additional init containers to the RabbitMQ Cluster Operator pod(s)
410
## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
411
## e.g:
412
## initContainers:
413
## - name: your-image-name
414
## image: your-image
415
## imagePullPolicy: Always
416
## command: ['sh', '-c', 'echo "hello world"']
417
##
418
initContainers: []
419
## Network Policies
420
## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
421
##
422
networkPolicy:
423
## @param clusterOperator.networkPolicy.enabled Specifies whether a NetworkPolicy should be created
424
##
425
enabled: true
426
## @param clusterOperator.networkPolicy.kubeAPIServerPorts [array] List of possible endpoints to kube-apiserver (limit to your cluster settings to increase security)
427
##
428
kubeAPIServerPorts: [443, 6443, 8443]
429
## @param clusterOperator.networkPolicy.allowExternal Don't require injector label for connections
430
## The Policy model to apply. When set to false, only pods with the correct
431
## injector label will have network access to the ports injector is listening
432
## on. When true, injector will accept connections from any source
433
## (with the correct destination port).
434
##
435
allowExternal: true
436
## @param clusterOperator.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations.
437
##
438
allowExternalEgress: true
439
## @param clusterOperator.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy
440
## e.g:
441
## extraIngress:
442
## - ports:
443
## - port: 1234
444
## from:
445
## - podSelector:
446
## - matchLabels:
447
## - role: frontend
448
## - podSelector:
449
## - matchExpressions:
450
## - key: role
451
## operator: In
452
## values:
453
## - frontend
454
extraIngress: []
455
## @param clusterOperator.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy
456
## e.g:
457
## extraEgress:
458
## - ports:
459
## - port: 1234
460
## to:
461
## - podSelector:
462
## - matchLabels:
463
## - role: frontend
464
## - podSelector:
465
## - matchExpressions:
466
## - key: role
467
## operator: In
468
## values:
469
## - frontend
470
##
471
extraEgress: []
472
## @param clusterOperator.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces
473
## @param clusterOperator.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces
474
##
475
ingressNSMatchLabels: {}
476
ingressNSPodMatchLabels: {}
477
## RBAC configuration
478
##
479
rbac:
480
## @param clusterOperator.rbac.create Specifies whether RBAC resources should be created
481
##
482
create: true
483
## ClusterRole parameters
484
##
485
clusterRole:
486
## @param clusterOperator.rbac.clusterRole.customRules Define custom access rules for the ClusterRole
487
## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole
488
## e.g:
489
## customRules:
490
## - apiGroups: A list of API groups (e.g., [""], ["apps"]).
491
## - resources: A list of resource names (e.g., ["configmaps", "pods"]).
492
## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]).
493
customRules: []
494
## @param clusterOperator.rbac.clusterRole.extraRules Define extra access rules for the ClusterRole. This has no effect if customerRules is a non-empty array.
495
## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole
496
## e.g:
497
## extraRules:
498
## - apiGroups: A list of API groups (e.g., [""], ["apps"]).
499
## - resources: A list of resource names (e.g., ["configmaps", "pods"]).
500
## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]).
501
extraRules: []
502
## ServiceAccount configuration
503
##
504
serviceAccount:
505
## @param clusterOperator.serviceAccount.create Specifies whether a ServiceAccount should be created
506
##
507
create: true
508
## @param clusterOperator.serviceAccount.name The name of the ServiceAccount to use.
509
## If not set and create is true, a name is generated using the common.names.fullname template
510
##
511
name: ""
512
## @param clusterOperator.serviceAccount.annotations Add annotations
513
##
514
annotations: {}
515
## @param clusterOperator.serviceAccount.automountServiceAccountToken Automount API credentials for a service account.
516
##
517
automountServiceAccountToken: false
518
## @section RabbitMQ Cluster Operator Metrics parameters
519
##
520
metrics:
521
## Metrics service parameters
522
##
523
service:
524
## @param clusterOperator.metrics.service.enabled Create a service for accessing the metrics endpoint
525
##
526
enabled: false
527
## @param clusterOperator.metrics.service.type RabbitMQ Cluster Operator metrics service type
528
##
529
type: ClusterIP
530
## @param clusterOperator.metrics.service.ports.http RabbitMQ Cluster Operator metrics service HTTP port
531
##
532
ports:
533
http: 80
534
## Node ports to expose
535
## @param clusterOperator.metrics.service.nodePorts.http Node port for HTTP
536
## NOTE: choose port between <30000-32767>
537
##
538
nodePorts:
539
http: ""
540
## @param clusterOperator.metrics.service.clusterIP RabbitMQ Cluster Operator metrics service Cluster IP
541
## e.g.:
542
## clusterIP: None
543
##
544
clusterIP: ""
545
## @param clusterOperator.metrics.service.extraPorts Extra ports to expose (normally used with the `sidecar` value)
546
##
547
extraPorts: []
548
## @param clusterOperator.metrics.service.loadBalancerIP RabbitMQ Cluster Operator metrics service Load Balancer IP
549
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-loadbalancer
550
##
551
loadBalancerIP: ""
552
## @param clusterOperator.metrics.service.loadBalancerSourceRanges RabbitMQ Cluster Operator metrics service Load Balancer sources
553
## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
554
## e.g:
555
## loadBalancerSourceRanges:
556
## - 10.10.10.0/24
557
##
558
loadBalancerSourceRanges: []
559
## @param clusterOperator.metrics.service.externalTrafficPolicy RabbitMQ Cluster Operator metrics service external traffic policy
560
## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
561
##
562
externalTrafficPolicy: Cluster
563
## @param clusterOperator.metrics.service.annotations [object] Additional custom annotations for RabbitMQ Cluster Operator metrics service
564
##
565
annotations:
566
prometheus.io/scrape: "true"
567
prometheus.io/port: "{{ .Values.clusterOperator.metrics.service.ports.http }}"
568
## @param clusterOperator.metrics.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP"
569
## If "ClientIP", consecutive client requests will be directed to the same Pod
570
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
571
##
572
sessionAffinity: None
573
## @param clusterOperator.metrics.service.sessionAffinityConfig Additional settings for the sessionAffinity
574
## sessionAffinityConfig:
575
## clientIP:
576
## timeoutSeconds: 300
577
##
578
sessionAffinityConfig: {}
579
serviceMonitor:
580
## @param clusterOperator.metrics.serviceMonitor.enabled Specify if a servicemonitor will be deployed for prometheus-operator
581
##
582
enabled: false
583
## @param clusterOperator.metrics.serviceMonitor.namespace Namespace which Prometheus is running in
584
## e.g:
585
## namespace: monitoring
586
##
587
namespace: ""
588
## @param clusterOperator.metrics.serviceMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator
589
##
590
jobLabel: app.kubernetes.io/name
591
## @param clusterOperator.metrics.serviceMonitor.honorLabels Honor metrics labels
592
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint
593
##
594
honorLabels: false
595
## @param clusterOperator.metrics.serviceMonitor.selector Prometheus instance selector labels
596
## e.g:
597
## selector:
598
## prometheus: my-prometheus
599
##
600
selector: {}
601
## @param clusterOperator.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended
602
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint
603
## e.g:
604
## scrapeTimeout: 10s
605
##
606
scrapeTimeout: ""
607
## @param clusterOperator.metrics.serviceMonitor.interval Scrape interval. If not set, the Prometheus default scrape interval is used
608
##
609
interval: ""
610
## DEPRECATED: Use clusterOperator.metrics.serviceMonitor.labels instead
611
## This value will be removed in a future release
612
## additionalLabels: {}
613
614
## @param clusterOperator.metrics.serviceMonitor.metricRelabelings Specify additional relabeling of metrics
615
##
616
metricRelabelings: []
617
## @param clusterOperator.metrics.serviceMonitor.relabelings Specify general relabeling
618
##
619
relabelings: []
620
## @param clusterOperator.metrics.serviceMonitor.labels Extra labels for the ServiceMonitor
621
##
622
labels: {}
623
## @param clusterOperator.metrics.serviceMonitor.path Define the path used by ServiceMonitor to scrap metrics
624
## Could be /metrics for aggregated metrics or /metrics/per-object for more details
625
##
626
path: ""
627
## @param clusterOperator.metrics.serviceMonitor.params Define the HTTP URL parameters used by ServiceMonitor
628
##
629
params: {}
630
podMonitor:
631
## @param clusterOperator.metrics.podMonitor.enabled Create PodMonitor Resource for scraping metrics using PrometheusOperator
632
##
633
enabled: false
634
## @param clusterOperator.metrics.podMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator
635
##
636
jobLabel: app.kubernetes.io/name
637
## @param clusterOperator.metrics.podMonitor.namespace Namespace which Prometheus is running in
638
##
639
namespace: ""
640
## @param clusterOperator.metrics.podMonitor.honorLabels Honor metrics labels
641
##
642
honorLabels: false
643
## @param clusterOperator.metrics.podMonitor.selector Prometheus instance selector labels
644
selector: {}
645
## @param clusterOperator.metrics.podMonitor.interval Specify the interval at which metrics should be scraped
646
##
647
interval: 30s
648
## @param clusterOperator.metrics.podMonitor.scrapeTimeout Specify the timeout after which the scrape is ended
649
##
650
scrapeTimeout: 30s
651
## @param clusterOperator.metrics.podMonitor.additionalLabels [object] Additional labels that can be used so PodMonitors will be discovered by Prometheus
652
##
653
additionalLabels: {}
654
## @param clusterOperator.metrics.podMonitor.path Define HTTP path to scrape for metrics.
655
##
656
path: ""
657
## @param clusterOperator.metrics.podMonitor.relabelings Specify general relabeling
658
##
659
relabelings: []
660
## @param clusterOperator.metrics.podMonitor.metricRelabelings Specify additional relabeling of metrics
661
##
662
metricRelabelings: []
663
## @param clusterOperator.metrics.podMonitor.params Define the HTTP URL parameters used by PodMonitor
664
##
665
params: {}
666
## @section RabbitMQ Messaging Topology Operator Parameters
667
##
668
msgTopologyOperator:
669
## @param msgTopologyOperator.enabled Deploy RabbitMQ Messaging Topology Operator as part of the installation
670
##
671
enabled: true
672
## Iamguarded RabbitMQ Messaging Topology Operator image
673
## @param msgTopologyOperator.image.registry [default: REGISTRY_NAME] RabbitMQ Messaging Topology Operator image registry
674
## @param msgTopologyOperator.image.repository [default: REPOSITORY_NAME/rmq-messaging-topology-operator] RabbitMQ Messaging Topology Operator image repository
675
## @skip msgTopologyOperator.image.tag RabbitMQ Messaging Topology Operator image tag (immutable tags are recommended)
676
## @param msgTopologyOperator.image.digest RabbitMQ Messaging Topology Operator image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
677
## @param msgTopologyOperator.image.pullPolicy RabbitMQ Messaging Topology Operator image pull policy
678
## @param msgTopologyOperator.image.pullSecrets RabbitMQ Messaging Topology Operator image pull secrets
679
##
680
image:
681
registry: cgr.dev
682
repository: chainguard-private/rabbitmq-messaging-topology-operator-iamguarded
683
tag: 1.20.0
684
digest: ""
685
## Specify a imagePullPolicy
686
## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
687
##
688
pullPolicy: IfNotPresent
689
## Optionally specify an array of imagePullSecrets.
690
## Secrets must be manually created in the namespace.
691
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
692
## e.g:
693
## pullSecrets:
694
## - myRegistryKeySecretName
695
##
696
pullSecrets: []
697
## @param msgTopologyOperator.revisionHistoryLimit sets number of replicaset to keep in k8s
698
##
699
revisionHistoryLimit: 10
700
## @param msgTopologyOperator.watchAllNamespaces Watch for resources in all namespaces
701
##
702
watchAllNamespaces: true
703
## @param msgTopologyOperator.watchNamespaces [array] Watch for resources in the given namespaces ## @param clusterOperator.watchNamespaces [array] Watch for resources in the given namespaces (ignored if watchAllNamespaces=true)
704
##
705
watchNamespaces: []
706
## @param msgTopologyOperator.replicaCount Number of RabbitMQ Messaging Topology Operator replicas to deploy
707
##
708
replicaCount: 1
709
## @param msgTopologyOperator.topologySpreadConstraints Topology Spread Constraints for pod assignment
710
## https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
711
## The value is evaluated as a template
712
##
713
topologySpreadConstraints: []
714
## @param msgTopologyOperator.schedulerName Alternative scheduler
715
##
716
schedulerName: ""
717
## @param msgTopologyOperator.terminationGracePeriodSeconds In seconds, time the given to the %%MAIN_CONTAINER_NAME%% pod needs to terminate gracefully
718
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods
719
##
720
terminationGracePeriodSeconds: ""
721
## @param msgTopologyOperator.hostNetwork Boolean
722
##
723
hostNetwork: "false"
724
## @param msgTopologyOperator.dnsPolicy Alternative DNS policy
725
##
726
dnsPolicy: "ClusterFirst"
727
## Configure extra options for RabbitMQ Messaging Topology Operator containers' liveness and readiness probes
728
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes
729
## @param msgTopologyOperator.livenessProbe.enabled Enable livenessProbe on RabbitMQ Messaging Topology Operator nodes
730
## @param msgTopologyOperator.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
731
## @param msgTopologyOperator.livenessProbe.periodSeconds Period seconds for livenessProbe
732
## @param msgTopologyOperator.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
733
## @param msgTopologyOperator.livenessProbe.failureThreshold Failure threshold for livenessProbe
734
## @param msgTopologyOperator.livenessProbe.successThreshold Success threshold for livenessProbe
735
##
736
livenessProbe:
737
enabled: true
738
initialDelaySeconds: 5
739
periodSeconds: 30
740
timeoutSeconds: 5
741
successThreshold: 1
742
failureThreshold: 5
743
## @param msgTopologyOperator.readinessProbe.enabled Enable readinessProbe on RabbitMQ Messaging Topology Operator nodes
744
## @param msgTopologyOperator.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
745
## @param msgTopologyOperator.readinessProbe.periodSeconds Period seconds for readinessProbe
746
## @param msgTopologyOperator.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
747
## @param msgTopologyOperator.readinessProbe.failureThreshold Failure threshold for readinessProbe
748
## @param msgTopologyOperator.readinessProbe.successThreshold Success threshold for readinessProbe
749
##
750
readinessProbe:
751
enabled: true
752
initialDelaySeconds: 5
753
periodSeconds: 30
754
timeoutSeconds: 5
755
successThreshold: 1
756
failureThreshold: 5
757
## @param msgTopologyOperator.startupProbe.enabled Enable startupProbe on RabbitMQ Messaging Topology Operator nodes
758
## @param msgTopologyOperator.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
759
## @param msgTopologyOperator.startupProbe.periodSeconds Period seconds for startupProbe
760
## @param msgTopologyOperator.startupProbe.timeoutSeconds Timeout seconds for startupProbe
761
## @param msgTopologyOperator.startupProbe.failureThreshold Failure threshold for startupProbe
762
## @param msgTopologyOperator.startupProbe.successThreshold Success threshold for startupProbe
763
##
764
startupProbe:
765
enabled: false
766
initialDelaySeconds: 5
767
periodSeconds: 30
768
timeoutSeconds: 5
769
successThreshold: 1
770
failureThreshold: 5
771
## @param msgTopologyOperator.customLivenessProbe Custom livenessProbe that overrides the default one
772
##
773
customLivenessProbe: {}
774
## @param msgTopologyOperator.customReadinessProbe Custom readinessProbe that overrides the default one
775
##
776
customReadinessProbe: {}
777
## @param msgTopologyOperator.customStartupProbe Custom startupProbe that overrides the default one
778
##
779
customStartupProbe: {}
780
## @param msgTopologyOperator.skipCreateAdmissionWebhookConfig skip creation of ValidationWebhookConfiguration
781
##
782
skipCreateAdmissionWebhookConfig: false
783
## @param msgTopologyOperator.existingWebhookCertSecret name of a secret containing the certificates (use it to avoid certManager creating one)
784
##
785
existingWebhookCertSecret: ""
786
## @param msgTopologyOperator.existingWebhookCertCABundle PEM-encoded CA Bundle of the existing secret provided in existingWebhookCertSecret (only if useCertManager=false)
787
##
788
existingWebhookCertCABundle: ""
789
## RabbitMQ Messaging Topology Operator resource requests and limits
790
## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
791
## @param msgTopologyOperator.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if msgTopologyOperator.resources is set (msgTopologyOperator.resources is recommended for production).
792
##
793
resourcesPreset: "nano"
794
## @param msgTopologyOperator.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
795
## Example:
796
## resources:
797
## requests:
798
## cpu: 2
799
## memory: 512Mi
800
## limits:
801
## cpu: 3
802
## memory: 1024Mi
803
##
804
resources: {}
805
## Pod Disruption Budget configuration
806
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
807
## @param msgTopologyOperator.pdb.create Enable a Pod Disruption Budget creation
808
## @param msgTopologyOperator.pdb.minAvailable Minimum number/percentage of pods that should remain scheduled
809
## @param msgTopologyOperator.pdb.maxUnavailable Maximum number/percentage of pods that may be made unavailable
810
##
811
pdb:
812
create: true
813
minAvailable: ""
814
maxUnavailable: ""
815
## Configure Pods Security Context
816
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
817
## @param msgTopologyOperator.podSecurityContext.enabled Enabled RabbitMQ Messaging Topology Operator pods' Security Context
818
## @param msgTopologyOperator.podSecurityContext.fsGroupChangePolicy Set filesystem group change policy
819
## @param msgTopologyOperator.podSecurityContext.sysctls Set kernel settings using the sysctl interface
820
## @param msgTopologyOperator.podSecurityContext.supplementalGroups Set filesystem extra groups
821
## @param msgTopologyOperator.podSecurityContext.fsGroup Set RabbitMQ Messaging Topology Operator pod's Security Context fsGroup
822
##
823
podSecurityContext:
824
enabled: true
825
fsGroupChangePolicy: Always
826
sysctls: []
827
supplementalGroups: []
828
fsGroup: 1001
829
## Configure Container Security Context
830
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
831
## @param msgTopologyOperator.containerSecurityContext.enabled Enabled containers' Security Context
832
## @param msgTopologyOperator.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
833
## @param msgTopologyOperator.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
834
## @param msgTopologyOperator.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
835
## @param msgTopologyOperator.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
836
## @param msgTopologyOperator.containerSecurityContext.privileged Set container's Security Context privileged
837
## @param msgTopologyOperator.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
838
## @param msgTopologyOperator.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
839
## @param msgTopologyOperator.containerSecurityContext.capabilities.drop List of capabilities to be dropped
840
## @param msgTopologyOperator.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
841
##
842
containerSecurityContext:
843
enabled: true
844
seLinuxOptions: {}
845
runAsUser: 1001
846
runAsGroup: 1001
847
runAsNonRoot: true
848
privileged: false
849
readOnlyRootFilesystem: true
850
allowPrivilegeEscalation: false
851
capabilities:
852
drop: ["ALL"]
853
seccompProfile:
854
type: "RuntimeDefault"
855
## @param msgTopologyOperator.fullnameOverride String to fully override rmqco.msgTopologyOperator.fullname template
856
##
857
fullnameOverride: ""
858
## @param msgTopologyOperator.command Override default container command (useful when using custom images)
859
##
860
command: []
861
## @param msgTopologyOperator.args Override default container args (useful when using custom images)
862
##
863
args: []
864
## @param msgTopologyOperator.automountServiceAccountToken Mount Service Account token in pod
865
##
866
automountServiceAccountToken: true
867
## @param msgTopologyOperator.hostAliases RabbitMQ Messaging Topology Operator pods host aliases
868
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
869
##
870
hostAliases: []
871
## @param msgTopologyOperator.podLabels Extra labels for RabbitMQ Messaging Topology Operator pods
872
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
873
##
874
podLabels: {}
875
## @param msgTopologyOperator.podAnnotations Annotations for RabbitMQ Messaging Topology Operator pods
876
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
877
##
878
podAnnotations: {}
879
## @param msgTopologyOperator.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
880
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
881
##
882
podAffinityPreset: ""
883
## @param msgTopologyOperator.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
884
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
885
##
886
podAntiAffinityPreset: soft
887
## Node affinity preset
888
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
889
##
890
nodeAffinityPreset:
891
## @param msgTopologyOperator.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
892
##
893
type: ""
894
## @param msgTopologyOperator.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set
895
##
896
key: ""
897
## @param msgTopologyOperator.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set
898
## E.g.
899
## values:
900
## - e2e-az1
901
## - e2e-az2
902
##
903
values: []
904
## @param msgTopologyOperator.affinity Affinity for RabbitMQ Messaging Topology Operator pods assignment
905
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
906
## NOTE: `podAffinityPreset`, `podAntiAffinityPreset`, and `nodeAffinityPreset` will be ignored when it's set
907
##
908
affinity: {}
909
## @param msgTopologyOperator.nodeSelector Node labels for RabbitMQ Messaging Topology Operator pods assignment
910
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/
911
##
912
nodeSelector: {}
913
## @param msgTopologyOperator.tolerations Tolerations for RabbitMQ Messaging Topology Operator pods assignment
914
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
915
##
916
tolerations: []
917
## @param msgTopologyOperator.updateStrategy.type RabbitMQ Messaging Topology Operator statefulset strategy type
918
## ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies
919
##
920
updateStrategy:
921
## StrategyType
922
## Can be set to RollingUpdate or OnDelete
923
##
924
type: RollingUpdate
925
## @param msgTopologyOperator.priorityClassName RabbitMQ Messaging Topology Operator pods' priorityClassName
926
##
927
priorityClassName: ""
928
## @param msgTopologyOperator.lifecycleHooks for the RabbitMQ Messaging Topology Operator container(s) to automate configuration before or after startup
929
##
930
lifecycleHooks: {}
931
## @param msgTopologyOperator.containerPorts.metrics RabbitMQ Messaging Topology Operator container port (used for metrics)
932
## @param msgTopologyOperator.containerPorts.health RabbitMQ Messaging Topology Operator container port (used for health probes)
933
##
934
containerPorts:
935
metrics: 8080
936
health: 8081
937
## @param msgTopologyOperator.extraEnvVars Array with extra environment variables to add to RabbitMQ Messaging Topology Operator nodes
938
## e.g:
939
## extraEnvVars:
940
## - name: FOO
941
## value: "bar"
942
##
943
extraEnvVars: []
944
## @param msgTopologyOperator.extraEnvVarsCM Name of existing ConfigMap containing extra env vars for RabbitMQ Messaging Topology Operator nodes
945
##
946
extraEnvVarsCM: ""
947
## @param msgTopologyOperator.extraEnvVarsSecret Name of existing Secret containing extra env vars for RabbitMQ Messaging Topology Operator nodes
948
##
949
extraEnvVarsSecret: ""
950
## @param msgTopologyOperator.extraVolumes Optionally specify extra list of additional volumes for the RabbitMQ Messaging Topology Operator pod(s)
951
##
952
extraVolumes: []
953
## @param msgTopologyOperator.extraVolumeMounts Optionally specify extra list of additional volumeMounts for the RabbitMQ Messaging Topology Operator container(s)
954
##
955
extraVolumeMounts: []
956
## @param msgTopologyOperator.sidecars Add additional sidecar containers to the RabbitMQ Messaging Topology Operator pod(s)
957
## e.g:
958
## sidecars:
959
## - name: your-image-name
960
## image: your-image
961
## imagePullPolicy: Always
962
## ports:
963
## - name: portname
964
## containerPort: 1234
965
##
966
sidecars: []
967
## @param msgTopologyOperator.initContainers Add additional init containers to the RabbitMQ Messaging Topology Operator pod(s)
968
## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
969
## e.g:
970
## initContainers:
971
## - name: your-image-name
972
## image: your-image
973
## imagePullPolicy: Always
974
## command: ['sh', '-c', 'echo "hello world"']
975
##
976
initContainers: []
977
## Webhook service parameters
978
##
979
service:
980
## @param msgTopologyOperator.service.type RabbitMQ Messaging Topology Operator webhook service type
981
##
982
type: ClusterIP
983
## @param msgTopologyOperator.service.ports.webhook RabbitMQ Messaging Topology Operator webhook service HTTP port
984
##
985
ports:
986
webhook: 443
987
## Node ports to expose
988
## @param msgTopologyOperator.service.nodePorts.http Node port for HTTP
989
## NOTE: choose port between <30000-32767>
990
##
991
nodePorts:
992
http: ""
993
## @param msgTopologyOperator.service.clusterIP RabbitMQ Messaging Topology Operator webhook service Cluster IP
994
## e.g.:
995
## clusterIP: None
996
##
997
clusterIP: ""
998
## @param msgTopologyOperator.service.loadBalancerIP RabbitMQ Messaging Topology Operator webhook service Load Balancer IP
999
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-loadbalancer
1000
##
1001
loadBalancerIP: ""
1002
## @param msgTopologyOperator.service.extraPorts Extra ports to expose (normally used with the `sidecar` value)
1003
##
1004
extraPorts: []
1005
## @param msgTopologyOperator.service.loadBalancerSourceRanges RabbitMQ Messaging Topology Operator webhook service Load Balancer sources
1006
## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
1007
## e.g:
1008
## loadBalancerSourceRanges:
1009
## - 10.10.10.0/24
1010
##
1011
loadBalancerSourceRanges: []
1012
## @param msgTopologyOperator.service.externalTrafficPolicy RabbitMQ Messaging Topology Operator webhook service external traffic policy
1013
## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
1014
##
1015
externalTrafficPolicy: Cluster
1016
## @param msgTopologyOperator.service.annotations Additional custom annotations for RabbitMQ Messaging Topology Operator webhook service
1017
##
1018
annotations: {}
1019
## @param msgTopologyOperator.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP"
1020
## If "ClientIP", consecutive client requests will be directed to the same Pod
1021
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
1022
##
1023
sessionAffinity: None
1024
## @param msgTopologyOperator.service.sessionAffinityConfig Additional settings for the sessionAffinity
1025
## sessionAffinityConfig:
1026
## clientIP:
1027
## timeoutSeconds: 300
1028
##
1029
sessionAffinityConfig: {}
1030
## Network Policies
1031
## Ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
1032
##
1033
networkPolicy:
1034
## @param msgTopologyOperator.networkPolicy.enabled Specifies whether a NetworkPolicy should be created
1035
##
1036
enabled: true
1037
## @param msgTopologyOperator.networkPolicy.kubeAPIServerPorts [array] List of possible endpoints to kube-apiserver (limit to your cluster settings to increase security)
1038
##
1039
kubeAPIServerPorts: [443, 6443, 8443]
1040
## @param msgTopologyOperator.networkPolicy.allowExternal Don't require injector label for connections
1041
## The Policy model to apply. When set to false, only pods with the correct
1042
## injector label will have network access to the ports injector is listening
1043
## on. When true, injector will accept connections from any source
1044
## (with the correct destination port).
1045
##
1046
allowExternal: true
1047
## @param msgTopologyOperator.networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations.
1048
##
1049
allowExternalEgress: true
1050
## @param msgTopologyOperator.networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolicy
1051
## e.g:
1052
## extraIngress:
1053
## - ports:
1054
## - port: 1234
1055
## from:
1056
## - podSelector:
1057
## - matchLabels:
1058
## - role: frontend
1059
## - podSelector:
1060
## - matchExpressions:
1061
## - key: role
1062
## operator: In
1063
## values:
1064
## - frontend
1065
extraIngress: []
1066
## @param msgTopologyOperator.networkPolicy.extraEgress [array] Add extra ingress rules to the NetworkPolicy
1067
## e.g:
1068
## extraEgress:
1069
## - ports:
1070
## - port: 1234
1071
## to:
1072
## - podSelector:
1073
## - matchLabels:
1074
## - role: frontend
1075
## - podSelector:
1076
## - matchExpressions:
1077
## - key: role
1078
## operator: In
1079
## values:
1080
## - frontend
1081
##
1082
extraEgress: []
1083
## @param msgTopologyOperator.networkPolicy.ingressNSMatchLabels [object] Labels to match to allow traffic from other namespaces
1084
## @param msgTopologyOperator.networkPolicy.ingressNSPodMatchLabels [object] Pod labels to match to allow traffic from other namespaces
1085
##
1086
ingressNSMatchLabels: {}
1087
ingressNSPodMatchLabels: {}
1088
## RBAC configuration
1089
##
1090
rbac:
1091
## @param msgTopologyOperator.rbac.create Specifies whether RBAC resources should be created
1092
##
1093
create: true
1094
## ClusterRole parameters
1095
##
1096
clusterRole:
1097
## @param msgTopologyOperator.rbac.clusterRole.customRules Define custom access rules for the ClusterRole
1098
## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole
1099
## e.g:
1100
## customRules:
1101
## - apiGroups: A list of API groups (e.g., [""], ["apps"]).
1102
## - resources: A list of resource names (e.g., ["configmaps", "pods"]).
1103
## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]).
1104
customRules: []
1105
## @param msgTopologyOperator.rbac.clusterRole.extraRules Define extra access rules for the ClusterRole. This has no effect if customerRules is a non-empty array.
1106
## ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole
1107
## e.g:
1108
## extraRules:
1109
## - apiGroups: A list of API groups (e.g., [""], ["apps"]).
1110
## - resources: A list of resource names (e.g., ["configmaps", "pods"]).
1111
## - verbs: A list of allowed access verbs (e.g., ["create", "get", "list"]).
1112
extraRules: []
1113
## ServiceAccount configuration
1114
##
1115
serviceAccount:
1116
## @param msgTopologyOperator.serviceAccount.create Specifies whether a ServiceAccount should be created
1117
##
1118
create: true
1119
## @param msgTopologyOperator.serviceAccount.name The name of the ServiceAccount to use.
1120
## If not set and create is true, a name is generated using the common.names.fullname template
1121
##
1122
name: ""
1123
## @param msgTopologyOperator.serviceAccount.annotations Add annotations
1124
##
1125
annotations: {}
1126
## @param msgTopologyOperator.serviceAccount.automountServiceAccountToken Automount API credentials for a service account.
1127
##
1128
automountServiceAccountToken: false
1129
## @section RabbitMQ Messaging Topology Operator parameters
1130
##
1131
metrics:
1132
## Metrics service parameters
1133
##
1134
service:
1135
## @param msgTopologyOperator.metrics.service.enabled Create a service for accessing the metrics endpoint
1136
##
1137
enabled: false
1138
## @param msgTopologyOperator.metrics.service.type RabbitMQ Cluster Operator metrics service type
1139
##
1140
type: ClusterIP
1141
## @param msgTopologyOperator.metrics.service.ports.http RabbitMQ Cluster Operator metrics service HTTP port
1142
##
1143
ports:
1144
http: 80
1145
## Node ports to expose
1146
## @param msgTopologyOperator.metrics.service.nodePorts.http Node port for HTTP
1147
## NOTE: choose port between <30000-32767>
1148
##
1149
nodePorts:
1150
http: ""
1151
## @param msgTopologyOperator.metrics.service.clusterIP RabbitMQ Cluster Operator metrics service Cluster IP
1152
## e.g.:
1153
## clusterIP: None
1154
##
1155
clusterIP: ""
1156
## @param msgTopologyOperator.metrics.service.extraPorts Extra ports to expose (normally used with the `sidecar` value)
1157
##
1158
extraPorts: []
1159
## @param msgTopologyOperator.metrics.service.loadBalancerIP RabbitMQ Cluster Operator metrics service Load Balancer IP
1160
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-loadbalancer
1161
##
1162
loadBalancerIP: ""
1163
## @param msgTopologyOperator.metrics.service.loadBalancerSourceRanges RabbitMQ Cluster Operator metrics service Load Balancer sources
1164
## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
1165
## e.g:
1166
## loadBalancerSourceRanges:
1167
## - 10.10.10.0/24
1168
##
1169
loadBalancerSourceRanges: []
1170
## @param msgTopologyOperator.metrics.service.externalTrafficPolicy RabbitMQ Cluster Operator metrics service external traffic policy
1171
## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
1172
##
1173
externalTrafficPolicy: Cluster
1174
## @param msgTopologyOperator.metrics.service.annotations [object] Additional custom annotations for RabbitMQ Cluster Operator metrics service
1175
##
1176
annotations:
1177
prometheus.io/scrape: "true"
1178
prometheus.io/port: "{{ .Values.msgTopologyOperator.metrics.service.ports.http }}"
1179
## @param msgTopologyOperator.metrics.service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP"
1180
## If "ClientIP", consecutive client requests will be directed to the same Pod
1181
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
1182
##
1183
sessionAffinity: None
1184
## @param msgTopologyOperator.metrics.service.sessionAffinityConfig Additional settings for the sessionAffinity
1185
## sessionAffinityConfig:
1186
## clientIP:
1187
## timeoutSeconds: 300
1188
##
1189
sessionAffinityConfig: {}
1190
serviceMonitor:
1191
## @param msgTopologyOperator.metrics.serviceMonitor.enabled Specify if a servicemonitor will be deployed for prometheus-operator
1192
##
1193
enabled: false
1194
## @param msgTopologyOperator.metrics.serviceMonitor.namespace Namespace which Prometheus is running in
1195
## e.g:
1196
## namespace: monitoring
1197
##
1198
namespace: ""
1199
## @param msgTopologyOperator.metrics.serviceMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator
1200
##
1201
jobLabel: app.kubernetes.io/name
1202
## DEPRECATED: Use msgTopologyOperator.metrics.serviceMonitor.labels instead.
1203
## This value will be removed in a future release
1204
## additionalLabels: {}
1205
1206
## @param msgTopologyOperator.metrics.serviceMonitor.selector Prometheus instance selector labels
1207
## e.g:
1208
## selector:
1209
## prometheus: my-prometheus
1210
##
1211
selector: {}
1212
## @param msgTopologyOperator.metrics.serviceMonitor.honorLabels Honor metrics labels
1213
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint
1214
##
1215
honorLabels: false
1216
## @param msgTopologyOperator.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended
1217
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint
1218
## e.g:
1219
## scrapeTimeout: 10s
1220
##
1221
scrapeTimeout: ""
1222
## @param msgTopologyOperator.metrics.serviceMonitor.interval Scrape interval. If not set, the Prometheus default scrape interval is used
1223
##
1224
interval: ""
1225
## @param msgTopologyOperator.metrics.serviceMonitor.metricRelabelings Specify additional relabeling of metrics
1226
##
1227
metricRelabelings: []
1228
## @param msgTopologyOperator.metrics.serviceMonitor.relabelings Specify general relabeling
1229
##
1230
relabelings: []
1231
## @param msgTopologyOperator.metrics.serviceMonitor.labels Extra labels for the ServiceMonitor
1232
##
1233
labels: {}
1234
podMonitor:
1235
## @param msgTopologyOperator.metrics.podMonitor.enabled Create PodMonitor Resource for scraping metrics using PrometheusOperator
1236
##
1237
enabled: false
1238
## @param msgTopologyOperator.metrics.podMonitor.jobLabel Specify the jobLabel to use for the prometheus-operator
1239
##
1240
jobLabel: app.kubernetes.io/name
1241
## @param msgTopologyOperator.metrics.podMonitor.namespace Namespace which Prometheus is running in
1242
##
1243
namespace: ""
1244
## @param msgTopologyOperator.metrics.podMonitor.honorLabels Honor metrics labels
1245
##
1246
honorLabels: false
1247
## @param msgTopologyOperator.metrics.podMonitor.selector Prometheus instance selector labels
1248
selector: {}
1249
## @param msgTopologyOperator.metrics.podMonitor.interval Specify the interval at which metrics should be scraped
1250
##
1251
interval: 30s
1252
## @param msgTopologyOperator.metrics.podMonitor.scrapeTimeout Specify the timeout after which the scrape is ended
1253
##
1254
scrapeTimeout: 30s
1255
## @param msgTopologyOperator.metrics.podMonitor.additionalLabels [object] Additional labels that can be used so PodMonitors will be discovered by Prometheus
1256
##
1257
additionalLabels: {}
1258
## @param msgTopologyOperator.metrics.podMonitor.relabelings Specify general relabeling
1259
##
1260
relabelings: []
1261
## @param msgTopologyOperator.metrics.podMonitor.metricRelabelings Specify additional relabeling of metrics
1262
##
1263
metricRelabelings: []
1264
## @section cert-manager parameters
1265
##
1266
1267
## @param useCertManager Deploy cert-manager objects (Issuer and Certificate) for webhooks
1268
##
1269
useCertManager: false
1270
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.