2 # Multi-cluster support via Cluster Inventory API.
5 accessProvidersConfig: {}
6 # accessProvidersConfig:
10 # apiVersion: client.authentication.k8s.io/v1
11 # command: /access-plugins/secretreader/bin/secretreader-plugin
12 # interactiveMode: Never
13 # provideClusterInfo: true
14 # - name: kubeconfig-secretreader
16 # apiVersion: client.authentication.k8s.io/v1
17 # command: /access-plugins/kubeconfig-secretreader/bin/kubeconfig-secretreader-plugin
18 # interactiveMode: Never
19 # provideClusterInfo: true
20 # plugins[] uses the Kubernetes "image" volume type. Each mountPath must be
21 # absolute, and each execConfig.command must point under one of these paths.
24 # - name: secretreader
25 # image: registry.k8s.io/cluster-inventory-api/secretreader:v0.2.0
26 # mountPath: /access-plugins/secretreader
27 # - name: kubeconfig-secretreader
28 # image: registry.k8s.io/cluster-inventory-api/kubeconfig-secretreader:v0.2.0
29 # mountPath: /access-plugins/kubeconfig-secretreader
30 # Polling cadence for spoke deployment readiness.
31 remoteDeploymentsPollInterval: 10s
33 image: cgr.dev/chainguard-private/knative-operator
34 tag: 1.22.3-r14@sha256:edd70fae0f6533167e1aeb0ca9bebb32783e80d33ed0584977ba7f00a1f51367
38 containerSecurityContext:
39 allowPrivilegeEscalation: false
40 readOnlyRootFilesystem: true
50 image: cgr.dev/chainguard-private/knative-operator-webhook
51 tag: 1.22.3-r14@sha256:8717c67da2f9c002d921b3f2b487a53360b9e0fd443c4ecae991642e88e64c28
54 # To avoid node becoming SPOF, spread our replicas to different nodes.
56 preferredDuringSchedulingIgnoredDuringExecution:
61 topologyKey: kubernetes.io/hostname
65 containerSecurityContext:
66 allowPrivilegeEscalation: false
67 readOnlyRootFilesystem: true
76 kubernetes_min_version: v1.25.0
77# extraObjects renders arbitrary manifests alongside the operator, e.g. extra
78# RBAC or platform-specific resources such as OpenShift SCC bindings or