values.cn.yaml

global:
  imagePullPolicy: IfNotPresent # empty pull policy means k8s default is used ("always" if tag == ":latest", "ifnotpresent" else)
  setSecurityContext: true # Force non-privileged containers to run as non-root users
# Dependency charts
etcd:
  persistentVolume:
    enabled: true
    storage: 1Gi
  replicas: 1 # How many instances of etcd will be added to the initial cluster.
  resources: {} # resource requirements for etcd containers
  image:
    repository: daocloud.io/piraeus/etcd
    tag: v3.4.9
csi-snapshotter:
  enabled: true # <- enable to add k8s snapshotting CRDs and controller. Needed for CSI snapshotting
  image: daocloud.io/piraeus/snapshot-controller:v3.0.2
  replicas: 1
  resources: {} # resource requirements for the cluster snapshot controller.
stork:
  enabled: true
  storkImage: daocloud.io/piraeus/stork:2.5.0
  schedulerImage: daocloud.io/piraeus/kube-scheduler-amd64
  schedulerTag: ""
  replicas: 1
  storkResources: {} # resources requirements for the stork plugin containers
  schedulerResources: {} # resource requirements for the kube-scheduler containers
  podsecuritycontext: {}
csi:
  enabled: true
  pluginImage: daocloud.io/piraeus/piraeus-csi:v0.10.0
  csiAttacherImage: daocloud.io/piraeus/csi-attacher:v3.0.2
  csiLivenessProbeImage: daocloud.io/piraeus/livenessprobe:v2.1.0
  csiNodeDriverRegistrarImage: daocloud.io/piraeus/csi-node-driver-registrar:v2.0.1
  csiProvisionerImage: daocloud.io/piraeus/csi-provisioner:v2.0.4
  csiSnapshotterImage: daocloud.io/piraeus/csi-snapshotter:v3.0.2
  csiResizerImage: daocloud.io/piraeus/csi-resizer:v1.0.1
  controllerReplicas: 1
  nodeAffinity: {}
  nodeTolerations: []
  controllerAffinity: {}
  controllerTolerations: []
  enableTopology: false
  resources: {}
priorityClassName: ""
drbdRepoCred: "" # <- Specify the kubernetes secret name here
linstorHttpsControllerSecret: "" # <- name of secret containing linstor server certificates+key. See docs/security.md
linstorHttpsClientSecret: "" # <- name of secret containing linstor client certificates+key. See docs/security.md
controllerEndpoint: "" # <- override to the generated controller endpoint. use if controller is not deployed via operator
psp:
  privilegedRole: ""
  unprivilegedRole: ""
operator:
  replicas: 1 # <- number of replicas for the operator deployment
  image: daocloud.io/piraeus/piraeus-operator:latest
  affinity: {}
  tolerations: []
  resources: {}
  podsecuritycontext: {}
  controller:
    enabled: true
    controllerImage: daocloud.io/piraeus/piraeus-server:v1.10.0
    luksSecret: ""
    dbCertSecret: ""
    dbUseClientCert: false
    sslSecret: ""
    affinity: {}
    tolerations:
      - key: node-role.kubernetes.io/master
        operator: "Exists"
        effect: "NoSchedule"
    resources: {}
    replicas: 1
  satelliteSet:
    enabled: true
    satelliteImage: daocloud.io/piraeus/piraeus-server:v1.10.0
    storagePools: {}
    sslSecret: ""
    automaticStorageType: None
    affinity: {}
    tolerations: []
    resources: {}
    kernelModuleInjectionImage: daocloud.io/piraeus/drbd9-bionic:v9.0.25
    kernelModuleInjectionMode: Compile
    kernelModuleInjectionResources: {}