Files
Pedro Henrique a1de38d24d [incubator/jaeger] feature: Cassandra TLS option (#19376)
* [incubator/jaeger] feature: Cassandra TLS option

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>

* [incubator/jaeger] feature: CASSANDRA_TLS_CA and cassandra-schema-job extra config mounts

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>

* [incubator/jaeger] fixing typo

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>

* [incubator/jaeger] fixing typo again

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>

* [incubator/jaeger] including Cassandra TLS options

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>

* [incubator/jaeger] bumping version

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>

* [incubator/jaeger] mounting certificate for Cassandra at specific directory

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>

* [incubator/jaeger] mounting cqlshrc

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>

* [incubator/jaeger] better documentation for cassandra tls secret

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>

* [incubator/jaeger] kebab-case, better organization of values

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>

* [incubator/jaeger] fix typo

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>

* [incubator/jaeger] using Cassandra TLS as backing store README

Signed-off-by: Pedro Silva <pedro.silva@softruck.com>
2019-12-06 06:46:50 -08:00

345 lines
9.1 KiB
YAML

# Default values for jaeger.
# This is a YAML-formatted file.
# Jaeger values are grouped by component. Cassandra values override subchart values
provisionDataStore:
cassandra: true
elasticsearch: false
tag: 1.15.1
nameOverride: ""
fullnameOverride: ""
serviceAccounts:
cassandraSchema:
create: true
name:
agent:
create: true
name:
collector:
create: true
name:
query:
create: true
name:
spark:
create: true
name:
hotrod:
create: true
name:
storage:
# allowed values (cassandra, elasticsearch)
type: cassandra
cassandra:
host: cassandra
port: 9042
tls:
enabled: false
secretName: cassandra-tls-secret
user: user
usePassword: true
password: password
## Use existing secret (ignores previous password)
# existingSecret:
elasticsearch:
scheme: http
host: elasticsearch
port: 9200
user: elastic
usePassword: true
password: changeme
## Use existing secret (ignores previous password)
# existingSecret:
nodesWanOnly: false
# Begin: Override values on the Cassandra subchart to customize for Jaeger
cassandra:
persistence:
# To enable persistence, please see the documentation for the Cassandra chart
enabled: false
config:
cluster_name: jaeger
seed_size: 1
dc_name: dc1
rack_name: rack1
endpoint_snitch: GossipingPropertyFileSnitch
# End: Override values on the Cassandra subchart to customize for Jaeger
# Begin: Default values for the various components of Jaeger
# This chart has been based on the Kubernetes integration found in the following repo:
# https://github.com/jaegertracing/jaeger-kubernetes/blob/master/production/jaeger-production-template.yml
#
# This is the jaeger-cassandra-schema Job which sets up the Cassandra schema for
# use by Jaeger
schema:
annotations: {}
image: jaegertracing/jaeger-cassandra-schema
pullPolicy: IfNotPresent
# Acceptable values are test and prod. Default is for production use.
mode: prod
resources: {}
# limits:
# cpu: 500m
# memory: 512Mi
# requests:
# cpu: 256m
# memory: 128Mi
## Additional pod labels
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
podLabels: {}
## Deadline for cassandra schema creation job
activeDeadlineSeconds: 120
# traceTtl: 172800
# dependenciesTtl: 0
# Begin: Override values on the Elasticsearch subchart to customize for Jaeger
elasticsearch:
cluster:
name: "tracing"
data:
persistence:
enabled: false
agent:
enabled: true
annotations: {}
image: jaegertracing/jaeger-agent
pullPolicy: IfNotPresent
collector:
host: null
port: null
cmdlineParams: {}
daemonset:
useHostPort: false
service:
annotations: {}
# List of IP ranges that are allowed to access the load balancer (if supported)
loadBalancerSourceRanges: []
type: ClusterIP
# zipkinThriftPort :accept zipkin.thrift over compact thrift protocol
zipkinThriftPort: 5775
# compactPort: accept jaeger.thrift over compact thrift protocol
compactPort: 6831
# binaryPort: accept jaeger.thrift over binary thrift protocol
binaryPort: 6832
# samplingPort: (HTTP) serve configs, sampling strategies
samplingPort: 5778
resources: {}
# limits:
# cpu: 500m
# memory: 512Mi
# requests:
# cpu: 256m
# memory: 128Mi
nodeSelector: {}
podAnnotations: {}
## Additional pod labels
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
podLabels: {}
## Allow the scheduling on tainted nodes (requires Kubernetes >= 1.6)
## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
tolerations: []
useHostNetwork: false
dnsPolicy: ClusterFirst
collector:
enabled: true
annotations: {}
image: jaegertracing/jaeger-collector
pullPolicy: IfNotPresent
dnsPolicy: ClusterFirst
cmdlineParams: {}
replicaCount: 1
autoscaling:
enabled: false
minReplicas: 2
maxReplicas: 10
# targetCPUUtilizationPercentage: 80
# targetMemoryUtilizationPercentage: 80
service:
annotations: {}
# List of IP ranges that are allowed to access the load balancer (if supported)
loadBalancerSourceRanges: []
type: ClusterIP
grpcPort: 14250
# tchannelPort: used by jaeger-agent to send spans in jaeger.thrift format
tchannelPort: 14267
# httpPort: can accept spans directly from clients in jaeger.thrift format
httpPort: 14268
# can accept Zipkin spans in JSON or Thrift
zipkinPort: 9411
resources: {}
# limits:
# cpu: 1
# memory: 1Gi
# requests:
# cpu: 500m
# memory: 512Mi
nodeSelector: {}
podAnnotations: {}
## Additional pod labels
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
podLabels: {}
## Allow the scheduling on tainted nodes (requires Kubernetes >= 1.6)
## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
tolerations: []
extraConfigmapMounts: []
# - name: jaeger-tls
# mountPath: /tls
# subPath: ""
# configMap: jaeger-tls
# readOnly: true
# samplingConfig: |-
# {
# "service_strategies": [
# {
# "service": "foo",
# "type": "probabilistic",
# "param": 0.8,
# "operation_strategies": [
# {
# "operation": "op1",
# "type": "probabilistic",
# "param": 0.2
# },
# {
# "operation": "op2",
# "type": "probabilistic",
# "param": 0.4
# }
# ]
# },
# {
# "service": "bar",
# "type": "ratelimiting",
# "param": 5
# }
# ],
# "default_strategy": {
# "type": "probabilistic",
# "param": 1
# }
# }
query:
enabled: true
agentSidecar:
enabled: true
annotations: {}
image: jaegertracing/jaeger-query
pullPolicy: IfNotPresent
dnsPolicy: ClusterFirst
cmdlineParams: {}
replicaCount: 1
service:
annotations: {}
type: ClusterIP
# List of IP ranges that are allowed to access the load balancer (if supported)
loadBalancerSourceRanges: []
port: 80
ingress:
enabled: false
annotations: {}
# Used to create an Ingress record.
# hosts:
# - chart-example.local
# annotations:
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
# tls:
# Secrets must be manually created in the namespace.
# - secretName: chart-example-tls
# hosts:
# - chart-example.local
resources: {}
# limits:
# cpu: 500m
# memory: 512Mi
# requests:
# cpu: 256m
# memory: 128Mi
nodeSelector: {}
podAnnotations: {}
## Additional pod labels
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
podLabels: {}
## Allow the scheduling on tainted nodes (requires Kubernetes >= 1.6)
## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
tolerations: []
extraConfigmapMounts: []
# - name: jaeger-tls
# mountPath: /tls
# subPath: ""
# configMap: jaeger-tls
# readOnly: true
spark:
enabled: false
annotations: {}
image: jaegertracing/spark-dependencies
tag: latest
pullPolicy: Always
schedule: "49 23 * * *"
successfulJobsHistoryLimit: 5
failedJobsHistoryLimit: 5
resources: {}
# limits:
# cpu: 500m
# memory: 512Mi
# requests:
# cpu: 256m
# memory: 128Mi
nodeSelector: {}
## Additional pod labels
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
podLabels: {}
## Allow the scheduling on tainted nodes (requires Kubernetes >= 1.6)
## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
tolerations: []
# End: Default values for the various components of Jaeger
hotrod:
enabled: false
replicaCount: 1
image:
repository: jaegertracing/example-hotrod
pullPolicy: Always
service:
annotations: {}
name: hotrod
type: ClusterIP
# List of IP ranges that are allowed to access the load balancer (if supported)
loadBalancerSourceRanges: []
port: 80
ingress:
enabled: false
# Used to create Ingress record (should be used with service.type: ClusterIP).
hosts:
- chart-example.local
annotations: {}
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
tls:
# Secrets must be manually created in the namespace.
# - secretName: chart-example-tls
# hosts:
# - chart-example.local
resources: {}
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little
# resources, such as Minikube. If you do want to specify resources, uncomment the following
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
tracing:
host: null
port: 6831