UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects
Commit 89f146ad authored by olelink's avatar olelink
Browse files

Generated README

parent 3633bbeb
No related branches found
No related tags found
1 merge request!65Resolve "Fix security context capability violations for jaeger"
Pipeline #1017194 passed
# jaeger-operator
![Version: 2.36.0-bb.0](https://img.shields.io/badge/Version-2.36.0--bb.0-informational?style=flat-square) ![AppVersion: 1.38.0](https://img.shields.io/badge/AppVersion-1.38.0-informational?style=flat-square)
![Version: 2.36.0-bb.1](https://img.shields.io/badge/Version-2.36.0--bb.1-informational?style=flat-square) ![AppVersion: 1.38.0](https://img.shields.io/badge/AppVersion-1.38.0-informational?style=flat-square)
jaeger-operator Helm chart for Kubernetes
......@@ -48,14 +48,14 @@ helm install jaeger-operator chart/
| istio.mtls | object | `{"mode":"STRICT"}` | Default jaeger peer authentication |
| istio.mtls.mode | string | `"STRICT"` | STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic |
| cleanSvcMonitor | object | `{"enabled":false,"image":{"repository":"registry1.dso.mil/ironbank/big-bang/base","tag":"2.0.0"}}` | Only needed for upgrade from pre-1.29.x, Deletes the servicemonitor that targetted deprecated metrics endpoints |
| webhookCertGen | object | `{"affinity":{},"cleanupProxy":{"image":{"pullPolicy":"IfNotPresent","repository":"registry1.dso.mil/ironbank/big-bang/base","tag":"2.0.0"}},"enabled":true,"image":{"pullPolicy":"IfNotPresent","repository":"registry1.dso.mil/ironbank/opensource/ingress-nginx/kube-webhook-certgen","tag":"v1.3.0"},"nodeSelector":{},"resources":{"limits":{"cpu":"50m","memory":"50Mi"},"requests":{"cpu":"50m","memory":"50Mi"}},"securityContext":{"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532},"tolerations":{}}` | Job to generate and patch webhooks with certificate |
| webhookCertGen | object | `{"affinity":{},"cleanupProxy":{"image":{"pullPolicy":"IfNotPresent","repository":"registry1.dso.mil/ironbank/big-bang/base","tag":"2.0.0"}},"containerSecurityContext":{"capabilities":{"drop":["ALL"]}},"enabled":true,"image":{"pullPolicy":"IfNotPresent","repository":"registry1.dso.mil/ironbank/opensource/ingress-nginx/kube-webhook-certgen","tag":"v1.3.0"},"nodeSelector":{},"resources":{"limits":{"cpu":"50m","memory":"50Mi"},"requests":{"cpu":"50m","memory":"50Mi"}},"securityContext":{"runAsGroup":65532,"runAsNonRoot":true,"runAsUser":65532},"tolerations":{}}` | Job to generate and patch webhooks with certificate |
| webhookCertGen.enabled | bool | `true` | If disabled must use cert manager and manually patch webhook |
| image.repository | string | `"registry1.dso.mil/ironbank/opensource/jaegertracing/jaeger-operator"` | |
| image.tag | string | `"1.38.0"` | |
| image.pullPolicy | string | `"Always"` | |
| image.imagePullSecrets[0] | string | `"private-registry"` | |
| elasticsearch.enabled | bool | `false` | |
| elasticsearch.indexTemplateCreation | object | `{"enabled":true,"image":{"repository":"registry1.dso.mil/ironbank/big-bang/base","tag":"2.0.0"},"servicePriority":10,"spanPriority":11}` | Custom BB job to create required index templates for ES 8.x |
| elasticsearch.indexTemplateCreation | object | `{"containerSecurityContext":{"capabilities":{"drop":["ALL"]}},"enabled":true,"image":{"repository":"registry1.dso.mil/ironbank/big-bang/base","tag":"2.0.0"},"servicePriority":10,"spanPriority":11}` | Custom BB job to create required index templates for ES 8.x |
| elasticsearch.indexTemplateCreation.servicePriority | int | `10` | Priority to add to the service index template, cannot conflict with existing templates |
| elasticsearch.indexTemplateCreation.spanPriority | int | `11` | Priority to add to the span index template, cannot conflict with existing templates |
| elasticsearch.username | string | `"elastic"` | |
......@@ -87,6 +87,7 @@ helm install jaeger-operator chart/
| jaeger.spec.allInOne.securityContext.runAsNonRoot | bool | `true` | |
| jaeger.spec.allInOne.securityContext.runAsUser | int | `1001` | |
| jaeger.spec.allInOne.securityContext.runAsGroup | int | `1001` | |
| jaeger.spec.allInOne.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
| jaeger.spec.allInOne.strategy.type | string | `"RollingUpdate"` | |
| jaeger.spec.agent.maxReplicas | int | `5` | |
| jaeger.spec.agent.image | string | `"registry1.dso.mil/ironbank/opensource/jaegertracing/jaeger-agent:1.38.0"` | |
......@@ -95,7 +96,7 @@ helm install jaeger-operator chart/
| jaeger.spec.agent.securityContext.runAsNonRoot | bool | `true` | |
| jaeger.spec.agent.securityContext.runAsUser | int | `1001` | |
| jaeger.spec.agent.securityContext.runAsGroup | int | `1001` | |
| jaeger.spec.agent.securityContext.capabilities.drop[0] | string | `"ALL"` | |
| jaeger.spec.agent.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
| jaeger.spec.agent.strategy.type | string | `"RollingUpdate"` | |
| jaeger.spec.ingester.maxReplicas | int | `5` | |
| jaeger.spec.ingester.image | string | `"registry1.dso.mil/ironbank/opensource/jaegertracing/jaeger-ingester:1.38.0"` | |
......@@ -103,7 +104,7 @@ helm install jaeger-operator chart/
| jaeger.spec.ingester.securityContext.runAsNonRoot | bool | `true` | |
| jaeger.spec.ingester.securityContext.runAsUser | int | `1001` | |
| jaeger.spec.ingester.securityContext.runAsGroup | int | `1001` | |
| jaeger.spec.ingester.securityContext.capabilities.drop[0] | string | `"ALL"` | |
| jaeger.spec.ingester.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
| jaeger.spec.ingester.strategy.type | string | `"RollingUpdate"` | |
| jaeger.spec.query.replicas | int | `5` | |
| jaeger.spec.query.image | string | `"registry1.dso.mil/ironbank/opensource/jaegertracing/jaeger-query:1.38.0"` | |
......@@ -111,6 +112,7 @@ helm install jaeger-operator chart/
| jaeger.spec.query.securityContext.runAsNonRoot | bool | `true` | |
| jaeger.spec.query.securityContext.runAsUser | int | `1001` | |
| jaeger.spec.query.securityContext.runAsGroup | int | `1001` | |
| jaeger.spec.query.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
| jaeger.spec.query.strategy.type | string | `"RollingUpdate"` | |
| jaeger.spec.collector.maxReplicas | int | `5` | |
| jaeger.spec.collector.image | string | `"registry1.dso.mil/ironbank/opensource/jaegertracing/jaeger-collector:1.38.0"` | |
......@@ -122,6 +124,7 @@ helm install jaeger-operator chart/
| jaeger.spec.collector.securityContext.runAsNonRoot | bool | `true` | |
| jaeger.spec.collector.securityContext.runAsUser | int | `1001` | |
| jaeger.spec.collector.securityContext.runAsGroup | int | `1001` | |
| jaeger.spec.collector.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
| jaeger.spec.collector.strategy.type | string | `"RollingUpdate"` | |
| jaeger.spec.volumeMounts[0].name | string | `"certificates"` | |
| jaeger.spec.volumeMounts[0].mountPath | string | `"/es/certificates/"` | |
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment