3 imageName: cgr.dev/chainguard-private/redis-operator-fips
4 # Overrides the image tag whose default is the chart appVersion.
5 imageTag: latest@sha256:e93ef56ebc33256b8f285697b31b191ccc28e348899d19e90fa2826185406d8d
6 # -- initContainerImageTag is the init-config init container image tag.
7 # If not specified, defaults to imageTag, then falls back to chart appVersion.
8 # Typically only needs to be set when using a different version for the init container.
9 initContainerImageTag: latest@sha256:e93ef56ebc33256b8f285697b31b191ccc28e348899d19e90fa2826185406d8d
10 imagePullPolicy: Always
19 # Additional pod annotations
21 # Additional Pod labels (e.g. for filtering Pod by custom labels)
23 # Additional arguments for redis-operator container
25 # When not specified, the operator will watch all namespaces. It can be set to a specific namespace or multiple namespaces separated by commas.
27 # -- The DNS domain suffix used for Kubernetes service discovery.
28 # Default is "cluster.local". Change this if your cluster uses a custom DNS domain.
29 serviceDNSDomain: "cluster.local"
31 # If set to true, webhook server will be enabled for masterSlaveAntiAffinity feature
32 # Certificate handling:
33 # - If certmanager.enabled=true: cert-manager will automatically create and manage the webhook certificate
34 # - If certmanager.enabled=false: A self-signed certificate will be automatically generated by Helm
36 automountServiceAccountToken: true
37 # pprof configuration for performance profiling
39 # Enable pprof server for performance profiling
41 # The address the pprof endpoint binds to
43 # metrics configuration for monitoring
45 # Enable metrics server
47 # The address the metrics endpoint binds to
58 # -- Enable RBAC resources creation
60 # -- RBAC scope: "cluster" for ClusterRole/ClusterRoleBinding or "namespace" for Role/RoleBinding.
61 # "cluster" lets the operator manage Redis resources across all namespaces (default behavior).
62 # "namespace" restricts the operator to its own release namespace; set redisOperator.watchNamespace
63 # accordingly and ensure the CRDs are installed separately (CRDs are cluster-scoped).
65serviceAccountName: redis-operator
67 automountServiceAccountToken: true
70 namespace: redis-operator
73 secretName: webhook-server-cert
75 # Whether to create the issuer or not. You might want to disable this if instead you
76 # want to use a ClusterIssuer that you simply want to provide.
78 # You can choose Issuer or ClusterIssuer here. The first one is namespaced, the second one
79 # is available for global usage.
82 name: redis-operator-issuer
83 email: shubham.gupta@opstree.com
84 server: https://acme-v02.api.letsencrypt.org/directory
85 privateKeySecretName: letsencrypt-prod
90 # Whether to use cert-manager for certificate management
91 # Only effective when webhook=true
92 # If webhook=true and certmanager.enabled=false, a self-signed certificate is automatically generated
94 # API version of the cert-manager CRDs
95 apiVersion: "cert-manager.io/v1"
98tolerateAllTaints: false
101podSecurityContext: {}
108# readOnlyRootFilesystem: true
112# Feature gates for alpha/experimental features
114 # Enable generating Redis configuration using an init container instead of a regular container
115 GenerateConfigInInitContainer: false
117 # config values for the operator manager
119 kubeClientTimeout: 60s
120 # -- If value > 0, it will override the default value in the operator
122 # Set to 0 to use the operator's built-in default.
123 maxConcurrentReconciles: 3
124 # Accepts a Go duration (e.g. "30s", "5m"). Empty uses the operator's built-in default.
125 execCommandTimeout: ""