mirror of https://github.com/linkerd/linkerd2.git
143 lines
3.3 KiB
YAML
143 lines
3.3 KiB
YAML
# Default values for linkerd.
|
|
# This is a YAML-formatted file.
|
|
# Declare variables to be passed into your templates.
|
|
|
|
ClusterDomain: &cluster_domain cluster.local
|
|
EnableH2Upgrade: true
|
|
ImagePullPolicy: &image_pull_policy IfNotPresent
|
|
|
|
# control plane version. See Proxy section for proxy version
|
|
LinkerdVersion: &linkerd_version edge-19.10.4
|
|
|
|
Namespace: linkerd
|
|
OmitWebhookSideEffects: false
|
|
WebhookFailurePolicy: Ignore
|
|
|
|
# controller configuration
|
|
ControllerImage: gcr.io/linkerd-io/controller
|
|
ControllerLogLevel: &controller_log_level info
|
|
ControllerReplicas: 1
|
|
ControllerUID: 2103
|
|
|
|
# identity configuration
|
|
Identity:
|
|
Issuer:
|
|
ClockSkewAllowance: 20s
|
|
|
|
# must match the expiry date in CrtPEM
|
|
CrtExpiry:
|
|
|
|
# control plane annotation - do not edit
|
|
CrtExpiryAnnotation: linkerd.io/identity-issuer-expiry
|
|
|
|
IssuanceLifeTime: 86400s
|
|
|
|
TLS:
|
|
# PEM-encoded certificate
|
|
CrtPEM: |
|
|
|
|
# PEM-encoded ECDSA private key
|
|
KeyPEM: |
|
|
|
|
TrustAnchorsPEM: |
|
|
|
|
TrustDomain: *cluster_domain
|
|
|
|
# grafana configuration
|
|
GrafanaImage: gcr.io/linkerd-io/grafana
|
|
|
|
# heartbeat configuration
|
|
DisableHeartBeat: false
|
|
HeartbeatSchedule: "0 0 * * *"
|
|
|
|
# prometheus configuration
|
|
PrometheusImage: prom/prometheus:v2.11.1
|
|
PrometheusLogLevel: *controller_log_level
|
|
|
|
# proxy configuration
|
|
Proxy:
|
|
EnableExternalProfiles: false
|
|
Image:
|
|
Name: gcr.io/linkerd-io/proxy
|
|
PullPolicy: *image_pull_policy
|
|
Version: *linkerd_version
|
|
LogLevel: warn,linkerd2_proxy=info
|
|
Ports:
|
|
Admin: 4191
|
|
Control: 4190
|
|
Inbound: 4143
|
|
Outbound: 4140
|
|
Resources:
|
|
CPU:
|
|
Limit: ""
|
|
Request: ""
|
|
Memory:
|
|
Limit: ""
|
|
Request: ""
|
|
Trace:
|
|
CollectorSvcAddr: ""
|
|
CollectorSvcAccount: default
|
|
UID: 2102
|
|
|
|
# proxy-init configuration
|
|
ProxyInit:
|
|
IgnoreInboundPorts: ""
|
|
IgnoreOutboundPorts: ""
|
|
Image:
|
|
Name: gcr.io/linkerd-io/proxy-init
|
|
PullPolicy: *image_pull_policy
|
|
Version: v1.1.0
|
|
Resources:
|
|
CPU:
|
|
Limit: 100m
|
|
Request: 10m
|
|
Memory:
|
|
Limit: 50Mi
|
|
Request: 10Mi
|
|
|
|
# proxy injector configuration
|
|
ProxyInjector:
|
|
# if empty, Helm will auto-generate these fields
|
|
CrtPEM: |
|
|
|
|
KeyPEM: |
|
|
|
|
# service profile validator configuration
|
|
ProfileValidator:
|
|
# if empty, Helm will auto-generate these fields
|
|
CrtPEM: |
|
|
|
|
KeyPEM: |
|
|
|
|
# tap configuration
|
|
Tap:
|
|
# if empty, Helm will auto-generate these fields
|
|
CrtPEM: |
|
|
|
|
KeyPEM: |
|
|
|
|
# web configuration
|
|
WebImage: gcr.io/linkerd-io/web
|
|
|
|
# control plane annotations - do not edit
|
|
CreatedByAnnotation: linkerd.io/created-by
|
|
ProxyInjectAnnotation: linkerd.io/inject
|
|
ProxyInjectDisabled: disabled
|
|
|
|
# control plane labels - do not edit
|
|
ControllerComponentLabel: linkerd.io/control-plane-component
|
|
ControllerNamespaceLabel: linkerd.io/control-plane-ns
|
|
LinkerdNamespaceLabel: linkerd.io/is-control-plane
|
|
|
|
# If the namespace is controlled by an external tool or can't be installed with Helm
|
|
# you can disable its installation. In this case:
|
|
# - The namespace created by the external tool must match the Namespace value above
|
|
# - The external tool needs to create the namespace with the label:
|
|
# config.linkerd.io/admission-webhooks: disabled
|
|
InstallNamespace: true
|
|
|
|
# Node selection constraints for control-plane components
|
|
# https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector.
|
|
NodeSelector:
|
|
beta.kubernetes.io/os: linux
|