mirror of
https://github.com/bitnami/charts.git
synced 2026-08-10 14:15:55 +08:00
[bitnami/wavefront] Set readOnlyRootFileSystem by default (#9466)
* [bitnami/wavefront] Set readOnlyRootFileSystem by default Signed-off-by: Miguel A. Cabrera Minagorri <mcabrera@vmware.com> * [bitnami/wavefront] Update components versions Signed-off-by: Bitnami Containers <containers@bitnami.com> Co-authored-by: Carlos Rodríguez Hernández <carlosrh@vmware.com> Co-authored-by: Bitnami Containers <containers@bitnami.com>
This commit is contained in:
Miguel Ángel Cabrera Miñagorri
co-authored by
Carlos Rodríguez Hernández
Bitnami Containers
Carlos Rodríguez Hernández
Bitnami Containers
parent
2a1b64c7f4
commit
217548b7fc
@@ -30,4 +30,4 @@ sources:
|
|||||||
- https://github.com/bitnami/bitnami-docker-wavefront-proxy
|
- https://github.com/bitnami/bitnami-docker-wavefront-proxy
|
||||||
- https://github.com/wavefrontHQ/wavefront-collector-for-kubernetes
|
- https://github.com/wavefrontHQ/wavefront-collector-for-kubernetes
|
||||||
- https://github.com/wavefrontHQ/wavefront-proxy
|
- https://github.com/wavefrontHQ/wavefront-proxy
|
||||||
version: 3.2.3
|
version: 3.3.0
|
||||||
|
|||||||
+135
-132
@@ -98,142 +98,145 @@ The command removes all the Kubernetes components associated with the chart and
|
|||||||
|
|
||||||
### Collector parameters
|
### Collector parameters
|
||||||
|
|
||||||
| Name | Description | Value |
|
| Name | Description | Value |
|
||||||
| ------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------- | ---------------------------------------- |
|
| ----------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------- | ---------------------------------------- |
|
||||||
| `collector.enabled` | Setup and enable the Wavefront collector to gather metrics | `true` |
|
| `collector.enabled` | Setup and enable the Wavefront collector to gather metrics | `true` |
|
||||||
| `collector.image.registry` | Wavefront collector Image registry | `docker.io` |
|
| `collector.image.registry` | Wavefront collector Image registry | `docker.io` |
|
||||||
| `collector.image.repository` | Wavefront collector Image repository | `bitnami/wavefront-kubernetes-collector` |
|
| `collector.image.repository` | Wavefront collector Image repository | `bitnami/wavefront-kubernetes-collector` |
|
||||||
| `collector.image.tag` | Wavefront collector Image tag (immutable tags are recommended) | `1.7.5-scratch-r3` |
|
| `collector.image.tag` | Wavefront collector Image tag (immutable tags are recommended) | `1.9.0-scratch-r1` |
|
||||||
| `collector.image.pullPolicy` | Image pull policy | `IfNotPresent` |
|
| `collector.image.pullPolicy` | Image pull policy | `IfNotPresent` |
|
||||||
| `collector.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
|
| `collector.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
|
||||||
| `collector.hostAliases` | Deployment pod host aliases | `[]` |
|
| `collector.hostAliases` | Deployment pod host aliases | `[]` |
|
||||||
| `collector.useDaemonset` | Use Wavefront collector in Daemonset mode | `true` |
|
| `collector.useDaemonset` | Use Wavefront collector in Daemonset mode | `true` |
|
||||||
| `collector.usePKSPrefix` | If installing into a TKGi/PKS environment, set this to true. Prefixes metrics with 'pks.kubernetes.' | `false` |
|
| `collector.usePKSPrefix` | If installing into a TKGi/PKS environment, set this to true. Prefixes metrics with 'pks.kubernetes.' | `false` |
|
||||||
| `collector.maxProcs` | Maximum number of CPUs that can be used simultaneously | `""` |
|
| `collector.maxProcs` | Maximum number of CPUs that can be used simultaneously | `""` |
|
||||||
| `collector.logLevel` | Log level. Allowed values: `info`, `debug` or `trace` | `""` |
|
| `collector.logLevel` | Log level. Allowed values: `info`, `debug` or `trace` | `""` |
|
||||||
| `collector.interval` | Default metrics collection interval | `""` |
|
| `collector.interval` | Default metrics collection interval | `""` |
|
||||||
| `collector.flushInterval` | How often to force a metrics flush | `""` |
|
| `collector.flushInterval` | How often to force a metrics flush | `""` |
|
||||||
| `collector.sinkDelay` | Timeout for exporting data | `""` |
|
| `collector.sinkDelay` | Timeout for exporting data | `""` |
|
||||||
| `collector.useReadOnlyPort` | Use un-authenticated port for kubelet | `false` |
|
| `collector.useReadOnlyPort` | Use un-authenticated port for kubelet | `false` |
|
||||||
| `collector.useProxy` | Use a Wavefront Proxy to send metrics through | `true` |
|
| `collector.useProxy` | Use a Wavefront Proxy to send metrics through | `true` |
|
||||||
| `collector.proxyAddress` | Can be used to specify a specific address for the Wavefront Proxy | `""` |
|
| `collector.proxyAddress` | Can be used to specify a specific address for the Wavefront Proxy | `""` |
|
||||||
| `collector.kubernetesState` | Collect metrics about Kubernetes resource states | `true` |
|
| `collector.kubernetesState` | Collect metrics about Kubernetes resource states | `true` |
|
||||||
| `collector.apiServerMetrics` | Collect metrics about Kubernetes API server | `false` |
|
| `collector.apiServerMetrics` | Collect metrics about Kubernetes API server | `false` |
|
||||||
| `collector.tags` | Map of tags to apply to all metrics collected by the collector | `{}` |
|
| `collector.tags` | Map of tags to apply to all metrics collected by the collector | `{}` |
|
||||||
| `collector.hostOSMetrics` | If set to true, host OS metrics will be collected | `false` |
|
| `collector.hostOSMetrics` | If set to true, host OS metrics will be collected | `false` |
|
||||||
| `collector.filters.metricDenyList` | Optimized metrics collection to omit peripheral metrics. | `[]` |
|
| `collector.filters.metricDenyList` | Optimized metrics collection to omit peripheral metrics. | `[]` |
|
||||||
| `collector.filters.tagExclude` | Filter out generated labels | `[]` |
|
| `collector.filters.tagExclude` | Filter out generated labels | `[]` |
|
||||||
| `collector.events.enabled` | Events can also be collected and sent to Wavefront | `false` |
|
| `collector.events.enabled` | Events can also be collected and sent to Wavefront | `false` |
|
||||||
| `collector.discovery.enabled` | Rules based and Prometheus endpoints auto-discovery | `true` |
|
| `collector.discovery.enabled` | Rules based and Prometheus endpoints auto-discovery | `true` |
|
||||||
| `collector.discovery.annotationPrefix` | When specified, this replaces `prometheus.io` as the prefix for annotations used to auto-discover Prometheus endpoints | `""` |
|
| `collector.discovery.annotationPrefix` | When specified, this replaces `prometheus.io` as the prefix for annotations used to auto-discover Prometheus endpoints | `""` |
|
||||||
| `collector.discovery.enableRuntimeConfigs` | Whether to enable runtime discovery configurations | `true` |
|
| `collector.discovery.enableRuntimeConfigs` | Whether to enable runtime discovery configurations | `true` |
|
||||||
| `collector.discovery.config` | Configuration for rules based auto-discovery | `[]` |
|
| `collector.discovery.config` | Configuration for rules based auto-discovery | `[]` |
|
||||||
| `collector.existingConfigmap` | Name of existing ConfigMap with collector configuration | `""` |
|
| `collector.controlplane.enabled` | Enable metrics for control plane dashboard (default false) | `false` |
|
||||||
| `collector.command` | Override default container command (useful when using custom images) | `[]` |
|
| `collector.existingConfigmap` | Name of existing ConfigMap with collector configuration | `""` |
|
||||||
| `collector.args` | Override default container args (useful when using custom images) | `[]` |
|
| `collector.command` | Override default container command (useful when using custom images) | `[]` |
|
||||||
| `collector.resources.limits` | The resources limits for the collector container | `{}` |
|
| `collector.args` | Override default container args (useful when using custom images) | `[]` |
|
||||||
| `collector.resources.requests` | The requested resources for the collector container | `{}` |
|
| `collector.resources.limits` | The resources limits for the collector container | `{}` |
|
||||||
| `collector.containerSecurityContext.enabled` | Enable Container Security Context configuration | `true` |
|
| `collector.resources.requests` | The requested resources for the collector container | `{}` |
|
||||||
| `collector.containerSecurityContext.runAsUser` | Set Container's Security Context runAsUser | `1001` |
|
| `collector.containerSecurityContext.enabled` | Enable Container Security Context configuration | `true` |
|
||||||
| `collector.containerSecurityContext.runAsNonRoot` | Set Container's Security Context runAsNonRoot | `true` |
|
| `collector.containerSecurityContext.runAsUser` | Set Container's Security Context runAsUser | `1001` |
|
||||||
| `collector.podSecurityContext.enabled` | Enable Pod Security Context configuration | `true` |
|
| `collector.containerSecurityContext.runAsNonRoot` | Set Container's Security Context runAsNonRoot | `true` |
|
||||||
| `collector.podSecurityContext.fsGroup` | Group ID for the volumes of the pod | `1001` |
|
| `collector.containerSecurityContext.readOnlyRootFilesystem` | Mount / (root) as a readonly filesystem on container | `true` |
|
||||||
| `collector.podAffinityPreset` | Wavefront collector pod affinity preset. Ignored if `collector.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
| `collector.podSecurityContext.enabled` | Enable Pod Security Context configuration | `true` |
|
||||||
| `collector.podAntiAffinityPreset` | Wavefront collector pod anti-affinity preset. Ignored if `collector.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
| `collector.podSecurityContext.fsGroup` | Group ID for the volumes of the pod | `1001` |
|
||||||
| `collector.nodeAffinityPreset.type` | Wavefront collector node affinity preset type. Ignored if `collector.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
| `collector.podAffinityPreset` | Wavefront collector pod affinity preset. Ignored if `collector.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||||
| `collector.nodeAffinityPreset.key` | Wavefront collector node label key to match Ignored if `collector.affinity` is set. | `""` |
|
| `collector.podAntiAffinityPreset` | Wavefront collector pod anti-affinity preset. Ignored if `collector.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
||||||
| `collector.nodeAffinityPreset.values` | Wavefront collector node label values to match. Ignored if `collector.affinity` is set. | `[]` |
|
| `collector.nodeAffinityPreset.type` | Wavefront collector node affinity preset type. Ignored if `collector.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||||
| `collector.affinity` | Wavefront collector affinity for pod assignment | `{}` |
|
| `collector.nodeAffinityPreset.key` | Wavefront collector node label key to match Ignored if `collector.affinity` is set. | `""` |
|
||||||
| `collector.nodeSelector` | Wavefront collector node labels for pod assignment | `{}` |
|
| `collector.nodeAffinityPreset.values` | Wavefront collector node label values to match. Ignored if `collector.affinity` is set. | `[]` |
|
||||||
| `collector.tolerations` | Wavefront collector tolerations for pod assignment | `[]` |
|
| `collector.affinity` | Wavefront collector affinity for pod assignment | `{}` |
|
||||||
| `collector.podLabels` | Wavefront collector pod extra labels | `{}` |
|
| `collector.nodeSelector` | Wavefront collector node labels for pod assignment | `{}` |
|
||||||
| `collector.podAnnotations` | Annotations for Wavefront collector pods | `{}` |
|
| `collector.tolerations` | Wavefront collector tolerations for pod assignment | `[]` |
|
||||||
| `collector.priorityClassName` | Wavefront Collector pods' priority | `""` |
|
| `collector.podLabels` | Wavefront collector pod extra labels | `{}` |
|
||||||
| `collector.lifecycleHooks` | Lifecycle hooks for the Wavefront Collector container to automate configuration before or after startup | `{}` |
|
| `collector.podAnnotations` | Annotations for Wavefront collector pods | `{}` |
|
||||||
| `collector.customLivenessProbe` | Override default liveness probe | `{}` |
|
| `collector.priorityClassName` | Wavefront Collector pods' priority | `""` |
|
||||||
| `collector.customReadinessProbe` | Override default readiness probe | `{}` |
|
| `collector.lifecycleHooks` | Lifecycle hooks for the Wavefront Collector container to automate configuration before or after startup | `{}` |
|
||||||
| `collector.updateStrategy.type` | Update strategy - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
| `collector.customLivenessProbe` | Override default liveness probe | `{}` |
|
||||||
| `collector.extraEnvVars` | Extra environment variables to be set on collector container | `[]` |
|
| `collector.customReadinessProbe` | Override default readiness probe | `{}` |
|
||||||
| `collector.extraEnvVarsCM` | Name of existing ConfigMap containing extra environment variables | `""` |
|
| `collector.updateStrategy.type` | Update strategy - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
||||||
| `collector.extraEnvVarsSecret` | Name of existing Secret containing extra environment variables | `""` |
|
| `collector.extraEnvVars` | Extra environment variables to be set on collector container | `[]` |
|
||||||
| `collector.extraVolumes` | Optionally specify extra list of additional volumes for collector container | `[]` |
|
| `collector.extraEnvVarsCM` | Name of existing ConfigMap containing extra environment variables | `""` |
|
||||||
| `collector.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for collector container | `[]` |
|
| `collector.extraEnvVarsSecret` | Name of existing Secret containing extra environment variables | `""` |
|
||||||
| `collector.initContainers` | Add init containers to the Wavefront proxy pods | `[]` |
|
| `collector.extraVolumes` | Optionally specify extra list of additional volumes for collector container | `[]` |
|
||||||
| `collector.sidecars` | Add sidecars to the Wavefront proxy pods | `[]` |
|
| `collector.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for collector container | `[]` |
|
||||||
|
| `collector.initContainers` | Add init containers to the Wavefront proxy pods | `[]` |
|
||||||
|
| `collector.sidecars` | Add sidecars to the Wavefront proxy pods | `[]` |
|
||||||
|
|
||||||
|
|
||||||
### Proxy parameters
|
### Proxy parameters
|
||||||
|
|
||||||
| Name | Description | Value |
|
| Name | Description | Value |
|
||||||
| --------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- | ------------------------- |
|
| ------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- | ------------------------- |
|
||||||
| `proxy.enabled` | Setup and enable Wavefront proxy to send metrics through | `true` |
|
| `proxy.enabled` | Setup and enable Wavefront proxy to send metrics through | `true` |
|
||||||
| `proxy.image.registry` | Wavefront proxy image registry | `docker.io` |
|
| `proxy.image.registry` | Wavefront proxy image registry | `docker.io` |
|
||||||
| `proxy.image.repository` | Wavefront proxy image repository | `bitnami/wavefront-proxy` |
|
| `proxy.image.repository` | Wavefront proxy image repository | `bitnami/wavefront-proxy` |
|
||||||
| `proxy.image.tag` | Wavefront proxy image tag (immutable tags are recommended) | `10.13.0-debian-10-r8` |
|
| `proxy.image.tag` | Wavefront proxy image tag (immutable tags are recommended) | `10.14.0-debian-10-r43` |
|
||||||
| `proxy.image.pullPolicy` | Wavefront proxy image pull policy | `IfNotPresent` |
|
| `proxy.image.pullPolicy` | Wavefront proxy image pull policy | `IfNotPresent` |
|
||||||
| `proxy.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
|
| `proxy.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
|
||||||
| `proxy.hostAliases` | Deployment pod host aliases | `[]` |
|
| `proxy.hostAliases` | Deployment pod host aliases | `[]` |
|
||||||
| `proxy.resources.limits` | The resources limits for the proxy container | `{}` |
|
| `proxy.resources.limits` | The resources limits for the proxy container | `{}` |
|
||||||
| `proxy.resources.requests` | The requested resources for the proxy container | `{}` |
|
| `proxy.resources.requests` | The requested resources for the proxy container | `{}` |
|
||||||
| `proxy.containerSecurityContext.enabled` | Enable Container Security Context configuration | `true` |
|
| `proxy.containerSecurityContext.enabled` | Enable Container Security Context configuration | `true` |
|
||||||
| `proxy.containerSecurityContext.runAsUser` | Set Container's Security Context runAsUser | `1001` |
|
| `proxy.containerSecurityContext.runAsUser` | Set Container's Security Context runAsUser | `1001` |
|
||||||
| `proxy.containerSecurityContext.runAsNonRoot` | Set Container's Security Context runAsNonRoot | `true` |
|
| `proxy.containerSecurityContext.runAsNonRoot` | Set Container's Security Context runAsNonRoot | `true` |
|
||||||
| `proxy.podSecurityContext.enabled` | Enable Pod Security Context configuration | `true` |
|
| `proxy.containerSecurityContext.readOnlyRootFilesystem` | Mount / (root) as a readonly filesystem on Proxy container | `true` |
|
||||||
| `proxy.podSecurityContext.fsGroup` | Group ID for the volumes of the pod | `1001` |
|
| `proxy.podSecurityContext.enabled` | Enable Pod Security Context configuration | `true` |
|
||||||
| `proxy.podAffinityPreset` | Wavefront proxy pod affinity preset. Ignored if `proxy.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
| `proxy.podSecurityContext.fsGroup` | Group ID for the volumes of the pod | `1001` |
|
||||||
| `proxy.podAntiAffinityPreset` | Wavefront proxy pod anti-affinity preset. Ignored if `proxy.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
| `proxy.podAffinityPreset` | Wavefront proxy pod affinity preset. Ignored if `proxy.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||||
| `proxy.nodeAffinityPreset.type` | Wavefront proxy node affinity preset type. Ignored if `proxy.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
| `proxy.podAntiAffinityPreset` | Wavefront proxy pod anti-affinity preset. Ignored if `proxy.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
||||||
| `proxy.nodeAffinityPreset.key` | Wavefront proxy node label key to match Ignored if `proxy.affinity` is set. | `""` |
|
| `proxy.nodeAffinityPreset.type` | Wavefront proxy node affinity preset type. Ignored if `proxy.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||||
| `proxy.nodeAffinityPreset.values` | Wavefront proxy node label values to match. Ignored if `proxy.affinity` is set. | `[]` |
|
| `proxy.nodeAffinityPreset.key` | Wavefront proxy node label key to match Ignored if `proxy.affinity` is set. | `""` |
|
||||||
| `proxy.affinity` | Wavefront proxy affinity for pod assignment | `{}` |
|
| `proxy.nodeAffinityPreset.values` | Wavefront proxy node label values to match. Ignored if `proxy.affinity` is set. | `[]` |
|
||||||
| `proxy.nodeSelector` | Wavefront proxy node labels for pod assignment | `{}` |
|
| `proxy.affinity` | Wavefront proxy affinity for pod assignment | `{}` |
|
||||||
| `proxy.tolerations` | Wavefront proxy tolerations for pod assignment | `[]` |
|
| `proxy.nodeSelector` | Wavefront proxy node labels for pod assignment | `{}` |
|
||||||
| `proxy.podLabels` | Wavefront proxy pod extra labels | `{}` |
|
| `proxy.tolerations` | Wavefront proxy tolerations for pod assignment | `[]` |
|
||||||
| `proxy.podAnnotations` | Annotations for Wavefront proxy pods | `{}` |
|
| `proxy.podLabels` | Wavefront proxy pod extra labels | `{}` |
|
||||||
| `proxy.priorityClassName` | Wavefront proxy pods' priority class name | `""` |
|
| `proxy.podAnnotations` | Annotations for Wavefront proxy pods | `{}` |
|
||||||
| `proxy.lifecycleHooks` | Lifecycle hooks for the Wavefront proxy container to automate configuration before or after startup | `{}` |
|
| `proxy.priorityClassName` | Wavefront proxy pods' priority class name | `""` |
|
||||||
| `proxy.livenessProbe.enabled` | Enable livenessProbe | `true` |
|
| `proxy.lifecycleHooks` | Lifecycle hooks for the Wavefront proxy container to automate configuration before or after startup | `{}` |
|
||||||
| `proxy.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `10` |
|
| `proxy.livenessProbe.enabled` | Enable livenessProbe | `true` |
|
||||||
| `proxy.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `20` |
|
| `proxy.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `10` |
|
||||||
| `proxy.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `1` |
|
| `proxy.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `20` |
|
||||||
| `proxy.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
| `proxy.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `1` |
|
||||||
| `proxy.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
| `proxy.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
||||||
| `proxy.readinessProbe.enabled` | Enable readinessProbe | `true` |
|
| `proxy.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
||||||
| `proxy.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `10` |
|
| `proxy.readinessProbe.enabled` | Enable readinessProbe | `true` |
|
||||||
| `proxy.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `20` |
|
| `proxy.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `10` |
|
||||||
| `proxy.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `1` |
|
| `proxy.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `20` |
|
||||||
| `proxy.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
| `proxy.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `1` |
|
||||||
| `proxy.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
| `proxy.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
||||||
| `proxy.customLivenessProbe` | Override default liveness probe | `{}` |
|
| `proxy.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
||||||
| `proxy.customReadinessProbe` | Override default readiness probe | `{}` |
|
| `proxy.customLivenessProbe` | Override default liveness probe | `{}` |
|
||||||
| `proxy.updateStrategy.type` | Update strategy - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
| `proxy.customReadinessProbe` | Override default readiness probe | `{}` |
|
||||||
| `proxy.extraEnvVars` | Extra environment variables to be set on proxy container | `[]` |
|
| `proxy.updateStrategy.type` | Update strategy - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
||||||
| `proxy.extraEnvVarsCM` | Name of existing ConfigMap containing extra environment variables | `""` |
|
| `proxy.extraEnvVars` | Extra environment variables to be set on proxy container | `[]` |
|
||||||
| `proxy.extraEnvVarsSecret` | Name of existing Secret containing extra environment variables | `""` |
|
| `proxy.extraEnvVarsCM` | Name of existing ConfigMap containing extra environment variables | `""` |
|
||||||
| `proxy.extraVolumes` | Optionally specify extra list of additional volumes for proxy container | `[]` |
|
| `proxy.extraEnvVarsSecret` | Name of existing Secret containing extra environment variables | `""` |
|
||||||
| `proxy.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for proxy container | `[]` |
|
| `proxy.extraVolumes` | Optionally specify extra list of additional volumes for proxy container | `[]` |
|
||||||
| `proxy.initContainers` | Add init containers to the Wavefront proxy pods | `[]` |
|
| `proxy.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for proxy container | `[]` |
|
||||||
| `proxy.sidecars` | Add sidecars to the Wavefront proxy pods | `[]` |
|
| `proxy.initContainers` | Add init containers to the Wavefront proxy pods | `[]` |
|
||||||
| `proxy.replicas` | Replicas to deploy for Wavefront proxy (usually 1) | `1` |
|
| `proxy.sidecars` | Add sidecars to the Wavefront proxy pods | `[]` |
|
||||||
| `proxy.port` | The port number the proxy will listen on for metrics in Wavefront data format | `2878` |
|
| `proxy.replicas` | Replicas to deploy for Wavefront proxy (usually 1) | `1` |
|
||||||
| `proxy.tracePort` | The port number the proxy will listen on for tracing spans in Wavefront trace data format (usually 30000) | `""` |
|
| `proxy.port` | The port number the proxy will listen on for metrics in Wavefront data format | `2878` |
|
||||||
| `proxy.jaegerPort` | The port number the proxy will listen on for tracing spans in Jaeger data format (usually 30001) | `""` |
|
| `proxy.tracePort` | The port number the proxy will listen on for tracing spans in Wavefront trace data format (usually 30000) | `""` |
|
||||||
| `proxy.traceJaegerHttpListenerPort` | TCP ports to receive Jaeger Thrift formatted data via HTTP. The data is then sent to Wavefront in Wavefront span format (usually 30080) | `""` |
|
| `proxy.jaegerPort` | The port number the proxy will listen on for tracing spans in Jaeger data format (usually 30001) | `""` |
|
||||||
| `proxy.traceJaegerGrpcListenerPort` | TCP ports to receive Jaeger GRPC formatted data via HTTP (usually 14250) | `""` |
|
| `proxy.traceJaegerHttpListenerPort` | TCP ports to receive Jaeger Thrift formatted data via HTTP. The data is then sent to Wavefront in Wavefront span format (usually 30080) | `""` |
|
||||||
| `proxy.zipkinPort` | The port number the proxy will listen on for tracing spans in Zipkin data format (usually 9411) | `""` |
|
| `proxy.traceJaegerGrpcListenerPort` | TCP ports to receive Jaeger GRPC formatted data via HTTP (usually 14250) | `""` |
|
||||||
| `proxy.traceSamplingRate` | Sampling rate to apply to tracing spans sent to the proxy | `""` |
|
| `proxy.zipkinPort` | The port number the proxy will listen on for tracing spans in Zipkin data format (usually 9411) | `""` |
|
||||||
| `proxy.traceSamplingDuration` | When set to greater than 0, spans that exceed this duration will force trace to be sampled (ms) | `""` |
|
| `proxy.traceSamplingRate` | Sampling rate to apply to tracing spans sent to the proxy | `""` |
|
||||||
| `proxy.traceJaegerApplicationName` | Custom application name for traces received on Jaeger's traceJaegerListenerPorts or traceJaegerHttpListenerPorts. | `""` |
|
| `proxy.traceSamplingDuration` | When set to greater than 0, spans that exceed this duration will force trace to be sampled (ms) | `""` |
|
||||||
| `proxy.traceZipkinApplicationName` | Custom application name for traces received on Zipkin's traceZipkinListenerPorts. | `""` |
|
| `proxy.traceJaegerApplicationName` | Custom application name for traces received on Jaeger's traceJaegerListenerPorts or traceJaegerHttpListenerPorts. | `""` |
|
||||||
| `proxy.histogramPort` | Port for histogram distribution format data (usually 40000) | `""` |
|
| `proxy.traceZipkinApplicationName` | Custom application name for traces received on Zipkin's traceZipkinListenerPorts. | `""` |
|
||||||
| `proxy.histogramMinutePort` | Port to accumulate 1-minute based histograms on Wavefront data format (usually 40001) | `""` |
|
| `proxy.histogramPort` | Port for histogram distribution format data (usually 40000) | `""` |
|
||||||
| `proxy.histogramHourPort` | Port to accumulate 1-hour based histograms on Wavefront data format (usually 40002) | `""` |
|
| `proxy.histogramMinutePort` | Port to accumulate 1-minute based histograms on Wavefront data format (usually 40001) | `""` |
|
||||||
| `proxy.histogramDayPort` | Port to accumulate 1-day based histograms on Wavefront data format (usually 40003) | `""` |
|
| `proxy.histogramHourPort` | Port to accumulate 1-hour based histograms on Wavefront data format (usually 40002) | `""` |
|
||||||
| `proxy.deltaCounterPort` | Port to accumulate 1-minute delta counters on Wavefront data format (usually 50000) | `""` |
|
| `proxy.histogramDayPort` | Port to accumulate 1-day based histograms on Wavefront data format (usually 40003) | `""` |
|
||||||
| `proxy.args` | Any configuration property can be passed to the proxy via command line args in the format: `--<property_name> <value>` | `""` |
|
| `proxy.deltaCounterPort` | Port to accumulate 1-minute delta counters on Wavefront data format (usually 50000) | `""` |
|
||||||
| `proxy.heap` | Wavefront proxy Java heap maximum usage (java -Xmx command line option) | `""` |
|
| `proxy.args` | Any configuration property can be passed to the proxy via command line args in the format: `--<property_name> <value>` | `""` |
|
||||||
| `proxy.existingConfigmap` | Name of existing ConfigMap with Proxy preprocessor configuration | `""` |
|
| `proxy.heap` | Wavefront proxy Java heap maximum usage (java -Xmx command line option) | `""` |
|
||||||
| `proxy.preprocessor` | Preprocessor rules is a powerful way to apply filtering or to enhance metrics as they flow | `{}` |
|
| `proxy.existingConfigmap` | Name of existing ConfigMap with Proxy preprocessor configuration | `""` |
|
||||||
|
| `proxy.preprocessor` | Preprocessor rules is a powerful way to apply filtering or to enhance metrics as they flow | `{}` |
|
||||||
|
|
||||||
|
|
||||||
### Kube State Metrics parameters
|
### Kube State Metrics parameters
|
||||||
|
|||||||
@@ -91,7 +91,7 @@ collector:
|
|||||||
image:
|
image:
|
||||||
registry: docker.io
|
registry: docker.io
|
||||||
repository: bitnami/wavefront-kubernetes-collector
|
repository: bitnami/wavefront-kubernetes-collector
|
||||||
tag: 1.10.0-scratch-r1
|
tag: 1.10.0-scratch-r2
|
||||||
## Specify a imagePullPolicy
|
## Specify a imagePullPolicy
|
||||||
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
||||||
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
|
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
|
||||||
@@ -318,11 +318,14 @@ collector:
|
|||||||
## @param collector.containerSecurityContext.enabled Enable Container Security Context configuration
|
## @param collector.containerSecurityContext.enabled Enable Container Security Context configuration
|
||||||
## @param collector.containerSecurityContext.runAsUser Set Container's Security Context runAsUser
|
## @param collector.containerSecurityContext.runAsUser Set Container's Security Context runAsUser
|
||||||
## @param collector.containerSecurityContext.runAsNonRoot Set Container's Security Context runAsNonRoot
|
## @param collector.containerSecurityContext.runAsNonRoot Set Container's Security Context runAsNonRoot
|
||||||
|
## @param collector.containerSecurityContext.readOnlyRootFilesystem Mount / (root) as a readonly filesystem on container
|
||||||
##
|
##
|
||||||
containerSecurityContext:
|
containerSecurityContext:
|
||||||
enabled: true
|
enabled: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsNonRoot: true
|
runAsNonRoot: true
|
||||||
|
readOnlyRootFilesystem: true
|
||||||
|
|
||||||
## Pod Security Context configuration
|
## Pod Security Context configuration
|
||||||
## @param collector.podSecurityContext.enabled Enable Pod Security Context configuration
|
## @param collector.podSecurityContext.enabled Enable Pod Security Context configuration
|
||||||
## @param collector.podSecurityContext.fsGroup Group ID for the volumes of the pod
|
## @param collector.podSecurityContext.fsGroup Group ID for the volumes of the pod
|
||||||
@@ -462,7 +465,7 @@ proxy:
|
|||||||
image:
|
image:
|
||||||
registry: docker.io
|
registry: docker.io
|
||||||
repository: bitnami/wavefront-proxy
|
repository: bitnami/wavefront-proxy
|
||||||
tag: 10.14.0-debian-10-r56
|
tag: 10.14.0-debian-10-r57
|
||||||
## Specify a imagePullPolicy
|
## Specify a imagePullPolicy
|
||||||
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
||||||
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
|
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
|
||||||
@@ -507,11 +510,14 @@ proxy:
|
|||||||
## @param proxy.containerSecurityContext.enabled Enable Container Security Context configuration
|
## @param proxy.containerSecurityContext.enabled Enable Container Security Context configuration
|
||||||
## @param proxy.containerSecurityContext.runAsUser Set Container's Security Context runAsUser
|
## @param proxy.containerSecurityContext.runAsUser Set Container's Security Context runAsUser
|
||||||
## @param proxy.containerSecurityContext.runAsNonRoot Set Container's Security Context runAsNonRoot
|
## @param proxy.containerSecurityContext.runAsNonRoot Set Container's Security Context runAsNonRoot
|
||||||
|
## @param proxy.containerSecurityContext.readOnlyRootFilesystem Mount / (root) as a readonly filesystem on Proxy container
|
||||||
##
|
##
|
||||||
containerSecurityContext:
|
containerSecurityContext:
|
||||||
enabled: true
|
enabled: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsNonRoot: true
|
runAsNonRoot: true
|
||||||
|
readOnlyRootFilesystem: true
|
||||||
|
|
||||||
## Pod Security Context configuration
|
## Pod Security Context configuration
|
||||||
## @param proxy.podSecurityContext.enabled Enable Pod Security Context configuration
|
## @param proxy.podSecurityContext.enabled Enable Pod Security Context configuration
|
||||||
## @param proxy.podSecurityContext.fsGroup Group ID for the volumes of the pod
|
## @param proxy.podSecurityContext.fsGroup Group ID for the volumes of the pod
|
||||||
|
|||||||
Reference in New Issue
Block a user