# Network Policies  Values

networkPolicies:
  enabled: false
  controlPlaneCidr: 0.0.0.0/0
  ingressLabels:
    app: istio-ingressgateway
    istio: ingressgateway

istio:
  enabled: false

openshift: false

monitoring:
  enabled: false
  namespace: monitoring

# Default values for minio-operator.
operator:
  ## DEPRECATED: Please use the "CLUSTER_DOMAIN" or "WATCHED_NAMESPACE" env variable
  ## set kubernetes cluster domain where minio is running
  # clusterDomain: ""
  # nsToWatch: set to blank to enable watching all namespaces
  # nsToWatch: ""
  env:
  ## instead of clusterDomain and nsToWatch.
  ## set kubernetes cluster domain where minio is running
    - name: CLUSTER_DOMAIN
      value: "cluster.local"
  ## set to blank to enable watching all namespaces
    - name: WATCHED_NAMESPACE
      value: ""
  image:
    repository: registry1.dso.mil/ironbank/opensource/minio/operator
    tag: v4.2.3
    pullPolicy: IfNotPresent
  initcontainers: []
  replicaCount: 1
  securityContext:
    runAsUser: 1000
    runAsGroup: 1000
    runAsNonRoot: true
    fsGroup: 1000
  nodeSelector: {}
  affinity: {}
  tolerations: []
  resources:
    requests:
      cpu: 200m
      memory: 256Mi
      ephemeral-storage: 500Mi
    limits:
      cpu: 200m
      memory: 256Mi

imagePullSecrets: []
#nameOverride: ""
#fullnameOverride: ""
## set kubernetes cluster domain where minio is running
##
#clusterDomain:
# watchedNamespace: set to blank to enable watching all namespaces
#watchedNamespace:

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

nodeSelector: {}

affinity: {}

tolerations: []

annotations: {}
  # bigbang.dev/istioVersion

console:
  image:
    repository: minio/console
    tag: v0.6.3
    pullPolicy: IfNotPresent
  replicaCount: 1