OpenShift Routes for cert-manager Helm values¶

replicas¶

1

logLevel¶

5

namespace¶

""

This namespace allows you to define where the services are installed into. If not set then they use the namespace of the release. This is helpful when installing cert manager as a chart dependency (sub chart).

fullnameOverride¶

Override the cert-manager.fullname value. This value is used as part of most of the names of the resources created by this Helm chart.

nameOverride¶

Override the cert-manager.name value, which is used to annotate some of the resources that are created by this Chart (using app.kubernetes.io/name). NOTE: There are some inconsitencies in the Helm chart when it comes to these annotations (some resources use, for example, cainjector.name which resolves to the value cainjector).

image.registry¶

Target image registry. This value is prepended to the target image repository, if set.
For example:

registry: quay.io
repository: jetstack/cert-manager-openshift-routes

image.repository¶

ghcr.io/cert-manager/cert-manager-openshift-routes

Target image repository.

image.tag¶

Override the image tag to deploy by setting this variable. If no value is set, the chart's appVersion is used.

image.digest¶

Target image digest. Override any tag, if set.
For example:

digest: sha256:0e072dddd1f7f8fc8909a2ca6f65e76c5f0d2fcfb8be47935ae3457e8bbceb20

image.pullPolicy¶

IfNotPresent

Kubernetes imagePullPolicy on Deployment.

imagePullSecrets¶

[]

Optional secrets used for pulling the openshift-routes container image.

serviceAccount.create¶

true

Specifies whether a service account should be created.

serviceAccount.name¶

The name of the service account to use.
If not set and create is true, a name is generated using the fullname template.

serviceAccount.annotations¶

Optional additional annotations to add to the controller's Service Account.

rbac.create¶

true

Create (Cluster-) Roles and RoleBindings for the Service Account.

podAnnotations¶

{}

Annotations to add to the openshift-routes pod.

podSecurityContext¶

runAsNonRoot: true
seccompProfile:
  type: RuntimeDefault

Pod Security Context.
For more information, see Configure a Security Context for a Pod or Container.

securityContext¶

allowPrivilegeEscalation: false
capabilities:
  drop:
    - ALL
readOnlyRootFilesystem: true

Container Security Context to be set on the controller component container. For more information, see Configure a Security Context for a Pod or Container.

resources¶

{}

Kubernetes pod resources. For more information, see Resource Management for Pods and Containers.

For example:

resources:
  limits:
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

nodeSelector¶

kubernetes.io/os: linux

The nodeSelector on Pods tells Kubernetes to schedule Pods on the nodes with matching labels. For more information, see Assigning Pods to Nodes.

This default ensures that Pods are only scheduled to Linux nodes. It prevents Pods being scheduled to Windows nodes in a mixed OS cluster.

tolerations¶

[]

A list of Kubernetes Tolerations, if required. For more information, see Toleration v1 core.

For example:

tolerations:
- key: foo.bar.com/role
  operator: Equal
  value: master
  effect: NoSchedule

affinity¶

{}

A Kubernetes Affinity, if required. For more information, see Affinity v1 core.

For example:

affinity:
  nodeAffinity:
   requiredDuringSchedulingIgnoredDuringExecution:
     nodeSelectorTerms:
     - matchExpressions:
       - key: foo.bar.com/role
         operator: In
         values:
         - master

metrics.enabled¶

false

When enabled, a service is created that exposes the metrics endpoint.

metrics.serviceMonitor.enabled¶

false

Create a ServiceMonitor to add openshift-routes to Prometheus.

metrics.serviceMonitor.interval¶

60s

The interval to scrape metrics.

omitHelmLabels¶

false

Omit Helm-specific labels. This is useful when generating a static manifest with helm template.