stable/apm-server/values.yaml - master - githubmirror/charts

stable/apm-server/values.yaml
200 строк6 KB
Clément Loiselet
[stable/apm-server] Use a non-root user (#18366)
26 окт 2019, 01:31
26 окт 2019, 01:31cedffd5
image:
  repository: docker.elastic.co/apm/apm-server
  tag: 7.0.0
  pullPolicy: IfNotPresent

# DaemonSet or Deployment
kind: DaemonSet

# Number of replicas when kind is Deployment
replicaCount: 1

# Create HorizontalPodAutoscaler object when kind is Deployment
autoscaling:
  enabled: false
  minReplicas: 2
  maxReplicas: 10
  metrics:
  - type: Resource
    resource:
      name: cpu
      targetAverageUtilization: 60
  - type: Resource
    resource:
      name: memory
      targetAverageUtilization: 60

# The update strategy to apply to the Deployment or DaemonSet
updateStrategy: {}
  # rollingUpdate:
  #   maxUnavailable: 1
  # type: RollingUpdate

service:
  enabled: false
  type: ClusterIP
  port: 8200
  # portName: apm-server-svc
  # clusterIP: None
  ## External IP addresses of service
  ## Default: nil
  # externalIPs:
  # - 192.168.0.1
  #
  ## LoadBalancer IP if service.type is LoadBalancer
  ## Default: nil
  # loadBalancerIP: 10.2.2.2
  ## Limit load balancer source ips to list of CIDRs (where available)
  # loadBalancerSourceRanges: []

  annotations: {}
    # Annotation example: setup ssl with aws cert when service.type is LoadBalancer
    # service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:us-east-1:EXAMPLE_CERT
  labels: {}
    ## Label example: show service URL in `kubectl cluster-info`
    # kubernetes.io/cluster-service: "true"

ingress:
  enabled: false
  annotations: {}
    # Annotation example: set nginx ingress type
    # kubernetes.io/ingress.class: nginx-public
  labels: {}
  hosts:
    - apm-server-ingress.example.com
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - chart-example.local

config:
  apm-server:
    ### Defines the host and port the server is listening on
    host: "0.0.0.0:8200"

    ## Maximum permitted size in bytes of an unzipped request accepted by the server to be processed.
    # max_unzipped_size: 52428800
    ## Maximum permitted size in bytes of a request's header accepted by the server to be processed.
    # max_header_size: 1048576

    ## Maximum permitted duration in seconds for reading an entire request.
    # read_timeout: 2s
    ## Maximum permitted duration in seconds for writing a response.
    # write_timeout: 2s

    ## Maximum duration in seconds before releasing resources when shutting down the server.
    # shutdown_timeout: 5s

    ## Maximum number of requests permitted to be sent to the server concurrently.
    # concurrent_requests: 40

    ## Authorization token to be checked. If a token is set here the agents must
    ## send their token in the following format: Authorization: Bearer <secret-token>.
    ## It is recommended to use an authorization token in combination with SSL enabled.
    # secret_token:
    # ssl.enabled: false
    # ssl.certificate : "path/to/cert"
    # ssl.key : "path/to/private_key"

  queue: {}
    ## Queue type by name (default 'mem')
    ## The memory queue will present all available events (up to the outputs
    ## bulk_max_size) to the output, the moment the output is ready to server
    ## another batch of events.
    # mem:
      ## Max number of events the queue can buffer.
      # events: 4096

      ## Hints the minimum number of events stored in the queue,
      ## before providing a batch of events to the outputs.
      ## A value of 0 (the default) ensures events are immediately available
      ## to be sent to the outputs.
      # flush.min_events: 2048

      ## Maximum duration after which events are available to the outputs,
      ## if the number of events stored in the queue is < min_flush_events.
      # flush.timeout: 1s

  # When a key contains a period, use this format for setting values on the command line:
  # --set config."output\.file".enabled=false
  output.file:
    # enabled: false
    path: "/usr/share/apm-server/data"
    filename: apm-server
    rotate_every_kb: 10000
    number_of_files: 5

  ## Set output.file.enabled to false to enable elasticsearch
  # output.elasticsearch:
  #  hosts: ["elasticsearch:9200"]
  #  protocol: "https"
  #  username: "elastic"
  #  password: "changeme"

# List of beat plugins
plugins: []
  # - kinesis.so

# User used to run the container. 1000 = apm-server
runAsUser: 1000
runAsGroup: 1000

# Additional container arguments
extraArgs: []
  # - -d
  # - *

# A map of additional environment variables
extraVars: {}
  # test1: "test2"

# Add additional volumes and mounts, for example to read other log files on the host
extraVolumes: []
  # - hostPath:
  #     path: /var/log
  #   name: varlog
extraVolumeMounts: []
  # - name: varlog
  #   mountPath: /host/var/log
  #   readOnly: true

## Labels to be added to pods
podLabels: {}

## Annotations to be added to pods
podAnnotations: {}

resources: {}
  ## We usually recommend not to specify default resources and to leave this as a conscious
  ## choice for the user. This also increases chances charts run on environments with little
  ## resources, such as Minikube. If you do want to specify resources, uncomment the following
  ## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #  cpu: 100m
  #  memory: 200Mi
  # requests:
  #  cpu: 100m
  #  memory: 100Mi

## Node labels for pod assignment
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
nodeSelector: {}

# Tolerations for pod assignment
# Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
tolerations: []

## Affinity configuration for pod assignment
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
affinity: {}

rbac:
  # Specifies whether RBAC resources should be created
  create: true

serviceAccount:
  # Specifies whether a ServiceAccount should be created
  create: true
  # The name of the ServiceAccount to use.
  # If not set and create is true, a name is generated using the fullname template
  name: