values.yaml

# Default values for raven-agent.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

image:
  repository: openyurt/raven-agent
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: 0.4.3

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""
healthyBindAddr: ":10275"

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: "raven-agent-account"

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext:
  privileged: true

nodeSelector:
  kubernetes.io/os: linux

tolerations: [{"operator": "Exists"}]

affinity:
  nodeAffinity:
    requiredDuringSchedulingIgnoredDuringExecution:
      nodeSelectorTerms:
        - matchExpressions:
            - key: type
              operator: NotIn
              values:
                - virtual-kubelet

containerEnv:
    - name: NODE_NAME
      valueFrom:
        fieldRef:
          fieldPath: spec.nodeName
    - name: NODE_IP
      valueFrom:
        fieldRef:
          fieldPath: status.hostIP
    - name: VPN_CONNECTION_PSK
      valueFrom:
        secretKeyRef:
          key: vpn-connection-psk
          name: raven-agent-secret
sync:
  syncRule: true
  syncPeriod: 30m

vpn:
  driver: libreswan
  forwardNodeIP: false
  natTraversal: false
  keepAliveInterval: 15
  keepAliveTimeout: 30
  # raven-agent requires a unique vpn psk
  # You can generate one with the command:
  # 'openssl rand -hex 64'
  # Pass it to helm with '--set vpn.psk=`openssl rand -hex 64`'
  # IMPORTANT: You should NOT use the example psk for a production deployment!
  psk: OPENYURT-RAVEN-AGENT-VPN-PSK
  metricBindAddr: ":10265"
  tunnelAddr: ":4500"

controller:
  enableProxy: true
  enableTunnel: true

proxy:
  externalAddr: ":10262"
  internalInsecureAddr: ":10264"
  internalSecureAddr: ":10263"
  metricsBindAddr: ":10266"

rollingUpdate:
  maxUnavailable: 20%