Markus Pesch
4cd6988b38
All checks were successful
continuous-integration/drone/push Build is passing
535 lines
24 KiB
YAML
535 lines
24 KiB
YAML
# Declare variables to be passed into your templates.
|
|
## @section Global
|
|
## @param nameOverride Individual release name suffix.
|
|
## @param fullnameOverride Override the complete release name logic.
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
## @section Configuration
|
|
config:
|
|
database:
|
|
## @param config.database.existingSecret.enabled Mount an existing secret containing the application specific `DATA_SOURCE_` prefixed environment variables.
|
|
## @param config.database.existingSecret.secretName Name of the existing secret containing the application specific `DATA_SOURCE_` prefixed environment variables.
|
|
existingSecret:
|
|
enabled: false
|
|
secretName: ""
|
|
|
|
## @param config.database.secret.annotations Additional annotations of the secret containing the database credentials.
|
|
## @param config.database.secret.labels Additional labels of the secret containing the database credentials.
|
|
## @param config.database.secret.databaseUsername Database username. Will be defined as env `DATA_SOURCE_USER` as part of a secret.
|
|
## @param config.database.secret.databasePassword Database password. Will be defined as env `DATA_SOURCE_PASS` as part of a secret.
|
|
## @param config.database.secret.databaseConnectionUrl Complex database connection URL. Will be defined as env `DATA_SOURCE_URI` as part of a secret.
|
|
secret:
|
|
annotations: {}
|
|
labels: {}
|
|
databaseUsername: ""
|
|
databasePassword: ""
|
|
databaseConnectionUrl: ""
|
|
|
|
exporterConfig:
|
|
## @param config.exporterConfig.existingSecret.enabled Mount an existing secret containing the key `exporterConfig.yaml`.
|
|
## @param config.exporterConfig.existingSecret.secretName Name of the existing secret containing the key `exporterConfig.yaml`.
|
|
existingSecret:
|
|
enabled: false
|
|
secretName: ""
|
|
|
|
## @param config.exporterConfig.secret.annotations Additional annotations of the secret containing the `exporterConfig.yaml`.
|
|
## @param config.exporterConfig.secret.labels Additional labels of the secret containing the `exporterConfig.yaml`.
|
|
## @param config.exporterConfig.secret.exporterConfig Content of the `exporterConfig.yaml`. Further information can be found [here](https://github.com/prometheus-community/postgres_exporter?tab=readme-ov-file#multi-target-support-beta).
|
|
## @skip config.exporterConfig.secret.exporterConfig Skip individual postgres exporter configuration.
|
|
secret:
|
|
annotations: {}
|
|
labels: {}
|
|
exporterConfig: {}
|
|
# auth_modules:
|
|
# first:
|
|
# options:
|
|
# sslmode: disable
|
|
# type: userpass
|
|
# userpass:
|
|
# password: first_password
|
|
# username: first_username
|
|
|
|
webConfig:
|
|
## @param config.webConfig.existingSecret.enabled Mount an existing secret containing the key `webConfig.yaml`.
|
|
## @param config.webConfig.existingSecret.secretName Name of the existing secret containing the key `webConfig.yaml`.
|
|
existingSecret:
|
|
enabled: false
|
|
secretName: ""
|
|
|
|
## @param config.webConfig.secret.annotations Additional annotations of the secret containing the `webConfig.yaml`.
|
|
## @param config.webConfig.secret.labels Additional labels of the secret containing the `webConfig.yaml`.
|
|
## @param config.webConfig.secret.webConfig Content of the `webConfig.yaml`. Further information can be found [here](https://prometheus.io/docs/prometheus/latest/configuration/https/).
|
|
## @skip config.webConfig.secret.webConfig Skip individual web configuration.
|
|
secret:
|
|
annotations: {}
|
|
labels: {}
|
|
webConfig: {}
|
|
# basic_auth_users:
|
|
# prom: <bcrypted password>
|
|
# http_server_config:
|
|
# http2: true
|
|
# tls_server_config:
|
|
# cert_file: /path/to/cert.pem
|
|
# client_allowed_sans:
|
|
# - postgres.example.local
|
|
# client_ca_file: /path/to/ca.pem
|
|
# key_file: /path/to/key.pem
|
|
# max_version: TLS13
|
|
# min_version: TLS12
|
|
|
|
## @section Deployment
|
|
deployment:
|
|
## @param deployment.annotations Additional deployment annotations.
|
|
## @param deployment.labels Additional deployment labels.
|
|
annotations: {}
|
|
labels: {}
|
|
|
|
## @param deployment.additionalContainers List of additional containers.
|
|
additionalContainers: []
|
|
# - command: [ "sh", "-c", "echo hello world" ]
|
|
# image: "docker.io/library/busybox:latest"
|
|
# name: side-car
|
|
|
|
## @param deployment.affinity Affinity for the postgres-exporter deployment.
|
|
affinity: {}
|
|
|
|
## @param deployment.initContainers List of additional init containers.
|
|
initContainers: []
|
|
# - command: [ "sh", "-c", "echo hello world" ]
|
|
# image: "docker.io/library/busybox:latest"
|
|
# name: init
|
|
|
|
## @param deployment.dnsConfig dnsConfig of the postgres-exporter deployment.
|
|
dnsConfig: {}
|
|
# nameservers:
|
|
# - 192.0.2.1 # this is an example
|
|
# searches:
|
|
# - ns1.svc.cluster-domain.example
|
|
# - my.dns.search.suffix
|
|
# options:
|
|
# - name: ndots
|
|
# value: "2"
|
|
# - name: edns0
|
|
|
|
## @param deployment.dnsPolicy dnsPolicy of the postgres-exporter deployment.
|
|
dnsPolicy: ""
|
|
|
|
## @param deployment.hostname Individual hostname of the pod.
|
|
## @param deployment.subdomain Individual domain of the pod.
|
|
hostname: ""
|
|
subdomain: ""
|
|
|
|
## @param deployment.hostNetwork Use the kernel network namespace of the host system.
|
|
hostNetwork: false
|
|
|
|
## @param deployment.imagePullSecrets Secret to use for pulling the image.
|
|
imagePullSecrets: []
|
|
# - name: "my-custom-secret"
|
|
|
|
postgresExporter:
|
|
## @param deployment.postgresExporter.args Arguments passed to the postgres-exporter container.
|
|
args: []
|
|
|
|
## @param deployment.postgresExporter.env List of environment variables for the postgres-exporter container.
|
|
env: []
|
|
# - name: SPECIAL_ENV_A
|
|
# value: special-key
|
|
# - name: SPECIAL_ENV
|
|
# valueFrom:
|
|
# configMapKeyRef:
|
|
# name: special-config
|
|
# key: special-key
|
|
# - name: SPECIAL_ENV
|
|
# valueFrom:
|
|
# secretKeyRef:
|
|
# name: special-secret
|
|
# key: special-key
|
|
|
|
## @param deployment.postgresExporter.envFrom List of environment variables mounted from configMaps or secrets for the postgres-exporter container.
|
|
envFrom: []
|
|
# - configMapRef:
|
|
# name: special-config
|
|
# - secretRef:
|
|
# name: special-secret
|
|
|
|
## @param deployment.postgresExporter.image.registry Image registry, eg. `docker.io`.
|
|
## @param deployment.postgresExporter.image.repository Image repository, eg. `library/busybox`.
|
|
## @param deployment.postgresExporter.image.tag Custom image tag, eg. `0.1.0`. Defaults to `appVersion`.
|
|
## @param deployment.postgresExporter.image.pullPolicy Image pull policy.
|
|
image:
|
|
registry: quay.io
|
|
repository: prometheuscommunity/postgres-exporter
|
|
tag: ""
|
|
pullPolicy: IfNotPresent
|
|
|
|
## @param deployment.postgresExporter.resources CPU and memory resources of the pod.
|
|
resources: {}
|
|
# limits:
|
|
# cpu:
|
|
# ephemeral-storage:
|
|
# memory:
|
|
# requests:
|
|
# cpu:
|
|
# ephemeral-storage:
|
|
# memory:
|
|
|
|
## @param deployment.postgresExporter.securityContext Security context of the container of the deployment.
|
|
securityContext: {}
|
|
# capabilities:
|
|
# add:
|
|
# - NET_RAW
|
|
# drop:
|
|
# - ALL
|
|
# privileged: false
|
|
# readOnlyRootFilesystem: true
|
|
# runAsNonRoot: true
|
|
# runAsUser: 1000
|
|
|
|
## @param deployment.postgresExporter.volumeMounts Additional volume mounts.
|
|
volumeMounts: []
|
|
# - name: my-configmap-volume
|
|
# mountPath: /configmap
|
|
# readOnly: true
|
|
|
|
## @param deployment.nodeSelector NodeSelector of the postgres-exporter deployment.
|
|
nodeSelector: {}
|
|
|
|
## @param deployment.priorityClassName PriorityClassName of the postgres-exporter deployment.
|
|
priorityClassName: ""
|
|
|
|
## @param deployment.replicaCount Number of replicas for the postgres-exporter deployment.
|
|
replicaCount: 1
|
|
|
|
## @param deployment.restartPolicy Restart policy of the postgres-exporter deployment.
|
|
restartPolicy: ""
|
|
|
|
## @param deployment.securityContext Security context of the postgres-exporter deployment.
|
|
securityContext: {}
|
|
# fsGroup: 2000
|
|
|
|
## @param deployment.strategy.type Strategy type - `Recreate` or `Rollingupdate`.
|
|
## @param deployment.strategy.rollingUpdate.maxSurge The maximum number of pods that can be scheduled above the desired number of pods during a rolling update.
|
|
## @param deployment.strategy.rollingUpdate.maxUnavailable The maximum number of pods that can be unavailable during a rolling update.
|
|
strategy:
|
|
type: "Recreate"
|
|
rollingUpdate:
|
|
maxSurge: 1
|
|
maxUnavailable: 1
|
|
|
|
## @param deployment.terminationGracePeriodSeconds How long to wait until forcefully kill the pod.
|
|
terminationGracePeriodSeconds: 60
|
|
|
|
## @param deployment.tolerations Tolerations of the postgres-exporter deployment.
|
|
tolerations: []
|
|
# - key: database/type
|
|
# operator: Equal
|
|
# value: postgres
|
|
# effect: NoSchedule
|
|
|
|
## @param deployment.topologySpreadConstraints TopologySpreadConstraints of the postgres-exporter deployment.
|
|
topologySpreadConstraints: []
|
|
# - topologyKey: kubernetes.io/hostname
|
|
# whenUnsatisfiable: DoNotSchedule
|
|
# labelSelector:
|
|
# matchLabels:
|
|
# app.kubernetes.io/instance: prometheus-postgres-exporter
|
|
|
|
## @param deployment.volumes Additional volumes to mount into the pods of the prometheus-exporter deployment.
|
|
volumes: []
|
|
# - name: my-configmap-volume
|
|
# config:
|
|
# name: my-configmap
|
|
# - name: my-secret-volume
|
|
# secret:
|
|
# secretName: my-secret
|
|
|
|
## @section Grafana
|
|
## @param grafana.enabled Enable integration into Grafana. Require the Prometheus operator deployment.
|
|
grafana:
|
|
enabled: false
|
|
|
|
## @param grafana.dashboardDiscoveryLabels Labels that Grafana uses to discover resources. The labels may vary depending on the Grafana deployment.
|
|
## @skip grafana.dashboardDiscoveryLabels
|
|
dashboardDiscoveryLabels:
|
|
grafana_dashboard: "1"
|
|
|
|
dashboards:
|
|
## @param grafana.dashboards.postgresExporter.enabled Enable deployment of Grafana dashboard `postgresExporter`.
|
|
## @param grafana.dashboards.postgresExporter.annotations Additional configmap annotations.
|
|
## @param grafana.dashboards.postgresExporter.labels Additional configmap labels.
|
|
postgresExporter:
|
|
enabled: true
|
|
annotations: {}
|
|
labels: {}
|
|
|
|
## @section Ingress
|
|
ingress:
|
|
## @param ingress.enabled Enable creation of an ingress resource. Requires, that the http service is also enabled.
|
|
## @param ingress.className Ingress class.
|
|
## @param ingress.annotations Additional ingress annotations.
|
|
## @param ingress.labels Additional ingress labels.
|
|
enabled: false
|
|
className: "nginx"
|
|
annotations: {}
|
|
labels: {}
|
|
|
|
## @param ingress.hosts Ingress specific configuration. Specification only required when another ingress controller is used instead of `t1k.
|
|
## @skip ingress.hosts Skip individual host configuration.
|
|
hosts: []
|
|
# - host: postgres-exporter.example.local
|
|
# paths:
|
|
# - path: /
|
|
# pathType: Prefix
|
|
|
|
## @param ingress.tls Ingress TLS settings. Specification only required when another ingress controller is used instead of `t1k``.
|
|
## @skip ingress.tls Skip individual TLS configuration.
|
|
tls: []
|
|
# - secretName: postgres-exporter-http-tls
|
|
# hosts:
|
|
# - postgres-exporter.example.local
|
|
|
|
## @section Pod disruption
|
|
## @param podDisruptionBudget Pod disruption budget.
|
|
podDisruptionBudget: {}
|
|
# maxUnavailable: 1
|
|
# minAvailable: 1
|
|
|
|
## @section Network
|
|
## @param networkPolicies Deploy network policies based on the used container network interface (CNI) implementation - like calico or weave.
|
|
networkPolicies: {}
|
|
|
|
## @section Prometheus
|
|
prometheus:
|
|
## @param prometheus.metrics.enabled Enable of scraping metrics by Prometheus.
|
|
metrics:
|
|
enabled: true
|
|
|
|
## @param prometheus.metrics.podMonitor.enabled Enable creation of a podMonitor. Excludes the existence of a serviceMonitor resource.
|
|
## @param prometheus.metrics.podMonitor.annotations Additional podMonitor annotations.
|
|
## @param prometheus.metrics.podMonitor.enableHttp2 Enable HTTP2.
|
|
## @param prometheus.metrics.podMonitor.followRedirects FollowRedirects configures whether scrape requests follow HTTP 3xx redirects.
|
|
## @param prometheus.metrics.podMonitor.honorLabels Honor labels.
|
|
## @param prometheus.metrics.podMonitor.labels Additional podMonitor labels.
|
|
## @param prometheus.metrics.podMonitor.interval Interval at which metrics should be scraped. If not specified Prometheus' global scrape interval is used.
|
|
## @param prometheus.metrics.podMonitor.path HTTP path for scraping Prometheus metrics.
|
|
## @param prometheus.metrics.podMonitor.relabelings RelabelConfigs to apply to samples before scraping. Prometheus Operator automatically adds relabelings for a few standard Kubernetes fields.
|
|
## @param prometheus.metrics.podMonitor.scrapeTimeout Timeout after which the scrape is ended. If not specified, global Prometheus scrape timeout is used.
|
|
## @param prometheus.metrics.podMonitor.scheme HTTP scheme to use for scraping. For example `http` or `https`.
|
|
## @param prometheus.metrics.podMonitor.tlsConfig TLS configuration to use when scraping the metric endpoint by Prometheus.
|
|
## @skip prometheus.metrics.podMonitor.tlsConfig Skip individual TLS configuration.
|
|
podMonitor:
|
|
enabled: false
|
|
annotations: {}
|
|
enableHttp2: true
|
|
followRedirects: false
|
|
honorLabels: false
|
|
labels: {}
|
|
interval: "60s"
|
|
path: "/metrics"
|
|
relabelings: []
|
|
scrapeTimeout: "30s"
|
|
scheme: "http"
|
|
tlsConfig: {}
|
|
|
|
## @param prometheus.metrics.serviceMonitor.enabled Enable creation of a serviceMonitor. Excludes the existence of a podMonitor resource.
|
|
## @param prometheus.metrics.serviceMonitor.annotations Additional serviceMonitor annotations.
|
|
## @param prometheus.metrics.serviceMonitor.labels Additional serviceMonitor labels.
|
|
## @param prometheus.metrics.serviceMonitor.enableHttp2 Enable HTTP2.
|
|
## @param prometheus.metrics.serviceMonitor.followRedirects FollowRedirects configures whether scrape requests follow HTTP 3xx redirects.
|
|
## @param prometheus.metrics.serviceMonitor.honorLabels Honor labels.
|
|
## @param prometheus.metrics.serviceMonitor.interval Interval at which metrics should be scraped. If not specified Prometheus' global scrape interval is used.
|
|
## @param prometheus.metrics.serviceMonitor.path HTTP path for scraping Prometheus metrics.
|
|
## @param prometheus.metrics.serviceMonitor.relabelings RelabelConfigs to apply to samples before scraping. Prometheus Operator automatically adds relabelings for a few standard Kubernetes fields.
|
|
## @param prometheus.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended. If not specified, global Prometheus scrape timeout is used.
|
|
## @param prometheus.metrics.serviceMonitor.scheme HTTP scheme to use for scraping. For example `http` or `https`.
|
|
## @param prometheus.metrics.serviceMonitor.tlsConfig TLS configuration to use when scraping the metric endpoint by Prometheus.
|
|
## @skip prometheus.metrics.serviceMonitor.tlsConfig Skip individual TLS configuration.
|
|
serviceMonitor:
|
|
enabled: false
|
|
annotations: {}
|
|
labels: {}
|
|
enableHttp2: true
|
|
followRedirects: false
|
|
honorLabels: false
|
|
interval: "60s"
|
|
path: "/metrics"
|
|
relabelings: []
|
|
scrapeTimeout: "30s"
|
|
scheme: "http"
|
|
tlsConfig: {}
|
|
|
|
## @param prometheus.rules Array of Prometheus rules for monitoring the application and triggering alerts.
|
|
## @skip prometheus.rules Skip individual Prometheus rules.
|
|
rules: []
|
|
# - alert: ExporterErrors
|
|
# expr: pg_exporter_last_scrape_error == 1
|
|
# for: 10m
|
|
# labels:
|
|
# service: PostgreSQL
|
|
# severity: critical
|
|
# annotations:
|
|
# description: The Postgres Exporter is not running or it is showing errors {{ $labels.instance }}
|
|
# summary: Postgres Exporter is down or is showing errors
|
|
# - alert: InstanceDown
|
|
# expr: pg_up == 0
|
|
# for: 1m
|
|
# labels:
|
|
# service: PostgreSQL
|
|
# severity: critical
|
|
# annotations:
|
|
# description: Postgres server has not been responding for the past 1 minutes on {{ $labels.instance }}
|
|
# summary: Postgres server instance is down
|
|
# title: Postgres server instance {{ $labels.instance}} is down
|
|
# - alert: InactiveReplicationSlots
|
|
# expr: pg_replication_slots_active == 0
|
|
# for: 30m
|
|
# labels:
|
|
# severity: warning
|
|
# service: PostgreSQL
|
|
# annotations:
|
|
# summary: There are inactive replications slots
|
|
# description: The are some inactive replication slots on {{$labels.instance}} in cluster {{$labels.cluster_name}}
|
|
# - alert: NotEnoughConnections
|
|
# expr: sum by (datname) (pg_stat_activity_count{datname!~"template.*|postgres"}) < 5
|
|
# for: 5m
|
|
# labels:
|
|
# severity: warning
|
|
# annotations:
|
|
# summary: Postgresql not enough connections (instance {{ $labels.instance }} in cluster {{$labels.cluster_name}})
|
|
# description: "PostgreSQL instance should have more connections (> 5)\n VALUE = {{ $value }}\n LABELS: {{ $labels }}"
|
|
# - alert: PromotedNode
|
|
# expr: pg_replication_is_replica and changes(pg_replication_is_replica[1m]) > 0
|
|
# for: 5m
|
|
# labels:
|
|
# severity: warning
|
|
# annotations:
|
|
# summary: Postgresql promoted node (instance {{ $labels.instance }}, cluster {{ $labels.cluster_name }})
|
|
# description: "Postgresql standby server has been promoted as primary node\n VALUE = {{ $value }}\n LABELS: {{ $labels }}"
|
|
# - alert: ReplicationLagSizeTooLarge
|
|
# expr: pg_replication_status_lag_size > 1e+09
|
|
# for: 5m
|
|
# labels:
|
|
# service: PostgreSQL
|
|
# severity: critical
|
|
# annotations:
|
|
# summary: Postgres replication lag size is to large
|
|
# description: Replication lag size on server {{ $labels.instance }} ({{ $labels.application_name }}) is currently {{ $value }} behind the leader in cluster {{ $labels.cluster_name }}
|
|
# - alert: TooManyDeadTuples
|
|
# expr: ((pg_stat_user_tables_n_dead_tup > 1e+06) / (pg_stat_user_tables_n_live_tup + pg_stat_user_tables_n_dead_tup)) >= 0.05
|
|
# for: 30m
|
|
# labels:
|
|
# service: PostgreSQL
|
|
# severity: warning
|
|
# annotations:
|
|
# description: The dead tuple ratio of {{ $labels.relname }} on database {{ $labels.datname }} is greater than 5% in cluster {{ $labels.cluster_name }}
|
|
# summary: PostgreSQL dead tuples is too large
|
|
# - alert: TooManyConnections
|
|
# expr: sum by (datname) (pg_stat_activity_count{datname!~"template.*|postgres"}) > pg_settings_max_connections * 0.9
|
|
# for: 5m
|
|
# labels:
|
|
# severity: warning
|
|
# annotations:
|
|
# summary: Postgresql too many connections (instance {{ $labels.instance }} in cluster {{$labels.cluster_name}})
|
|
# description: "PostgreSQL instance has too many connections\n VALUE = {{ $value }}\n LABELS: {{ $labels }}"
|
|
|
|
## Connection Pooling alerts
|
|
####
|
|
|
|
# - alert: BouncerAvgWaitTimeTooHigh
|
|
# expr: pgbouncer_show_stats_avg_wait_time > 1e+6
|
|
# for: 5m
|
|
# labels:
|
|
# severity: warning
|
|
# annotations:
|
|
# description: "PgBouncer wait for a server connections is too high = {{ $value }}"
|
|
# summary: PgBouncer time spent by clients waiting for a connections is too high on {{ $labels.instance }} in cluster {{$labels.cluster_name}})
|
|
# - alert: BouncerNotEnoughConnections
|
|
# expr: (sum by (database,instance) (pgbouncer_show_pools_cl_active{database!~"template.*|postgres|pgbouncer"}) + sum by (database, instance) (pgbouncer_show_pools_cl_waiting{database!~"template.*|postgres|pgbouncer"})) - on (database,instance) (pgbouncer_show_databases_pool_size{database!~"template.*|postgres|pgbouncer"}) > 0
|
|
# for: 10m
|
|
# labels:
|
|
# severity: critical
|
|
# annotations:
|
|
# description: "PgBouncer is getting more connections than the pool size, extra connections = {{ $value }}"
|
|
# summary: PgBouncer pool size is not enough for the current connections on {{ $labels.instance }} in cluster {{$labels.cluster_name}})
|
|
# - alert: BouncerPoolFillingUp
|
|
# expr: (sum by (database,instance) (pgbouncer_show_databases_pool_size{database!~"template.*|postgres|pgbouncer"}) - on (database,instance) pgbouncer_show_databases_current_connections) <= 15
|
|
# for: 5m
|
|
# labels:
|
|
# severity: warning
|
|
# annotations:
|
|
# description: "PgBouncer pool is filling up, remaining connections = {{ $value }}"
|
|
# summary: PgBouncer pool is filling up on {{ $labels.instance }} in cluster {{$labels.cluster_name}})
|
|
# - alert: BouncerQueryTimeTooHigh
|
|
# expr: pgbouncer_show_stats_avg_query_time > 5e+6
|
|
# for: 5m
|
|
# labels:
|
|
# severity: warning
|
|
# annotations:
|
|
# description: "PgBouncer average query duration more than 5 seconds = {{ $value }}"
|
|
# summary: PgBouncer average query duration more than 5 seconds on {{ $labels.instance }} in cluster {{$labels.cluster_name}})
|
|
# - alert: BouncerWaitingClients
|
|
# expr: pgbouncer_show_pools_cl_waiting > 0
|
|
# for: 5m
|
|
# labels:
|
|
# severity: warning
|
|
# annotations:
|
|
# description: "PgBouncer instance has waiting clients\n VALUE = {{ $value }}\n LABELS: {{ $labels }}"
|
|
# summary: PgBouncer has waiting clients on instance {{ $labels.instance }} in cluster {{$labels.cluster_name}})
|
|
|
|
## @section Service
|
|
## @param services.http.enabled Enable the service.
|
|
## @param services.http.annotations Additional service annotations.
|
|
## @param services.http.externalIPs External IPs for the service.
|
|
## @param services.http.externalTrafficPolicy If `service.type` is `NodePort` or `LoadBalancer`, set this to `Local` to tell kube-proxy to only use node local endpoints for cluster external traffic. Furthermore, this enables source IP preservation.
|
|
## @param services.http.internalTrafficPolicy If `service.type` is `NodePort` or `LoadBalancer`, set this to `Local` to tell kube-proxy to only use node local endpoints for cluster internal traffic.
|
|
## @param services.http.ipFamilies IPFamilies is list of IP families (e.g. `IPv4`, `IPv6`) assigned to this service. This field is usually assigned automatically based on cluster configuration and only required for customization.
|
|
## @param services.http.labels Additional service labels.
|
|
## @param services.http.loadBalancerClass LoadBalancerClass is the class of the load balancer implementation this Service belongs to. Requires service from type `LoadBalancer`.
|
|
## @param services.http.loadBalancerIP LoadBalancer will get created with the IP specified in this field. Requires service from type `LoadBalancer`.
|
|
## @param services.http.loadBalancerSourceRanges Source range filter for LoadBalancer. Requires service from type `LoadBalancer`.
|
|
## @param services.http.port Port to forward the traffic to.
|
|
## @param services.http.sessionAffinity Supports `ClientIP` and `None`. Enable client IP based session affinity via `ClientIP`.
|
|
## @param services.http.sessionAffinityConfig Contains the configuration of the session affinity.
|
|
## @param services.http.type Kubernetes service type for the traffic.
|
|
services:
|
|
http:
|
|
enabled: true
|
|
annotations: {}
|
|
externalIPs: []
|
|
externalTrafficPolicy: "Cluster"
|
|
internalTrafficPolicy: "Cluster"
|
|
ipFamilies: []
|
|
labels: {}
|
|
loadBalancerClass: ""
|
|
loadBalancerIP: ""
|
|
loadBalancerSourceRanges: []
|
|
port: 9187
|
|
sessionAffinity: "None"
|
|
sessionAffinityConfig: {}
|
|
type: "ClusterIP"
|
|
|
|
## @section ServiceAccount
|
|
serviceAccount:
|
|
## @param serviceAccount.existing.enabled Use an existing service account instead of creating a new one. Assumes that the user has all the necessary kubernetes API authorizations.
|
|
## @param serviceAccount.existing.serviceAccountName Name of the existing service account.
|
|
existing:
|
|
enabled: false
|
|
serviceAccountName: ""
|
|
|
|
## @param serviceAccount.new.annotations Additional service account annotations.
|
|
## @param serviceAccount.new.labels Additional service account labels.
|
|
## @param serviceAccount.new.automountServiceAccountToken Enable/disable auto mounting of the service account token.
|
|
## @param serviceAccount.new.imagePullSecrets ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in pods that reference this serviceAccount.
|
|
## @param serviceAccount.new.secrets Secrets is the list of secrets allowed to be used by pods running using this ServiceAccount.
|
|
new:
|
|
annotations: {}
|
|
labels: {}
|
|
automountServiceAccountToken: true
|
|
imagePullSecrets: []
|
|
# - name: "my-image-pull-secret"
|
|
secrets: []
|
|
# - name: "my-secret"
|
|
# namespace: "my-namespace"
|
|
# fieldPath: "my-field"
|