Files
Clément LoiseletandKubernetes Prow Robot cedffd5231 [stable/apm-server] Use a non-root user (#18366)
* Added runAsUser parameter

Signed-off-by: Clement LOISELET <clement.loiselet@capgemini.com>

* added readme

Signed-off-by: Clement LOISELET <clement.loiselet@capgemini.com>

* chart version bumped to 2.1.5
Signed-of-by: Clément Loiselet <claementi@gmail.com>

Signed-off-by: Clement LOISELET <clement.loiselet@capgemini.com>
2019-10-25 15:31:14 -07:00

201 lines
5.8 KiB
YAML

image:
repository: docker.elastic.co/apm/apm-server
tag: 7.0.0
pullPolicy: IfNotPresent
# DaemonSet or Deployment
kind: DaemonSet
# Number of replicas when kind is Deployment
replicaCount: 1
# Create HorizontalPodAutoscaler object when kind is Deployment
autoscaling:
enabled: false
minReplicas: 2
maxReplicas: 10
metrics:
- type: Resource
resource:
name: cpu
targetAverageUtilization: 60
- type: Resource
resource:
name: memory
targetAverageUtilization: 60
# The update strategy to apply to the Deployment or DaemonSet
updateStrategy: {}
# rollingUpdate:
# maxUnavailable: 1
# type: RollingUpdate
service:
enabled: false
type: ClusterIP
port: 8200
# portName: apm-server-svc
# clusterIP: None
## External IP addresses of service
## Default: nil
# externalIPs:
# - 192.168.0.1
#
## LoadBalancer IP if service.type is LoadBalancer
## Default: nil
# loadBalancerIP: 10.2.2.2
## Limit load balancer source ips to list of CIDRs (where available)
# loadBalancerSourceRanges: []
annotations: {}
# Annotation example: setup ssl with aws cert when service.type is LoadBalancer
# service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:us-east-1:EXAMPLE_CERT
labels: {}
## Label example: show service URL in `kubectl cluster-info`
# kubernetes.io/cluster-service: "true"
ingress:
enabled: false
annotations: {}
# Annotation example: set nginx ingress type
# kubernetes.io/ingress.class: nginx-public
labels: {}
hosts:
- apm-server-ingress.example.com
tls: []
# - secretName: chart-example-tls
# hosts:
# - chart-example.local
config:
apm-server:
### Defines the host and port the server is listening on
host: "0.0.0.0:8200"
## Maximum permitted size in bytes of an unzipped request accepted by the server to be processed.
# max_unzipped_size: 52428800
## Maximum permitted size in bytes of a request's header accepted by the server to be processed.
# max_header_size: 1048576
## Maximum permitted duration in seconds for reading an entire request.
# read_timeout: 2s
## Maximum permitted duration in seconds for writing a response.
# write_timeout: 2s
## Maximum duration in seconds before releasing resources when shutting down the server.
# shutdown_timeout: 5s
## Maximum number of requests permitted to be sent to the server concurrently.
# concurrent_requests: 40
## Authorization token to be checked. If a token is set here the agents must
## send their token in the following format: Authorization: Bearer <secret-token>.
## It is recommended to use an authorization token in combination with SSL enabled.
# secret_token:
# ssl.enabled: false
# ssl.certificate : "path/to/cert"
# ssl.key : "path/to/private_key"
queue: {}
## Queue type by name (default 'mem')
## The memory queue will present all available events (up to the outputs
## bulk_max_size) to the output, the moment the output is ready to server
## another batch of events.
# mem:
## Max number of events the queue can buffer.
# events: 4096
## Hints the minimum number of events stored in the queue,
## before providing a batch of events to the outputs.
## A value of 0 (the default) ensures events are immediately available
## to be sent to the outputs.
# flush.min_events: 2048
## Maximum duration after which events are available to the outputs,
## if the number of events stored in the queue is < min_flush_events.
# flush.timeout: 1s
# When a key contains a period, use this format for setting values on the command line:
# --set config."output\.file".enabled=false
output.file:
# enabled: false
path: "/usr/share/apm-server/data"
filename: apm-server
rotate_every_kb: 10000
number_of_files: 5
## Set output.file.enabled to false to enable elasticsearch
# output.elasticsearch:
# hosts: ["elasticsearch:9200"]
# protocol: "https"
# username: "elastic"
# password: "changeme"
# List of beat plugins
plugins: []
# - kinesis.so
# User used to run the container. 1000 = apm-server
runAsUser: 1000
runAsGroup: 1000
# Additional container arguments
extraArgs: []
# - -d
# - *
# A map of additional environment variables
extraVars: {}
# test1: "test2"
# Add additional volumes and mounts, for example to read other log files on the host
extraVolumes: []
# - hostPath:
# path: /var/log
# name: varlog
extraVolumeMounts: []
# - name: varlog
# mountPath: /host/var/log
# readOnly: true
## Labels to be added to pods
podLabels: {}
## Annotations to be added to pods
podAnnotations: {}
resources: {}
## We usually recommend not to specify default resources and to leave this as a conscious
## choice for the user. This also increases chances charts run on environments with little
## resources, such as Minikube. If you do want to specify resources, uncomment the following
## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
# limits:
# cpu: 100m
# memory: 200Mi
# requests:
# cpu: 100m
# memory: 100Mi
## Node labels for pod assignment
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
nodeSelector: {}
# Tolerations for pod assignment
# Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
tolerations: []
## Affinity configuration for pod assignment
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
affinity: {}
rbac:
# Specifies whether RBAC resources should be created
create: true
serviceAccount:
# Specifies whether a ServiceAccount should be created
create: true
# The name of the ServiceAccount to use.
# If not set and create is true, a name is generated using the fullname template
name: