Helm Values
Discover all values supported by the latest CAP Operator helm chart
4 minute read
Values
| Key | Type | Default | Description |
|---|---|---|---|
| image.tag | string | "" | Default image tag (can be overwritten on component level) |
| image.pullPolicy | string | "" | Default image pull policy (can be overwritten on component level) |
| imagePullSecrets | list | [] | Default image pull secrets (can be overwritten on component level) |
| podSecurityContext | object | {} | Default pod security content (can be overwritten on component level) |
| nodeSelector | object | {} | Default node selector (can be overwritten on component level) |
| affinity | object | {} | Default affinity settings (can be overwritten on component level) |
| tolerations | list | [] | Default tolerations (can be overwritten on component level) |
| priorityClassName | string | "" | Default priority class (can be overwritten on component level) |
| topologySpreadConstraints | list | [] | Default topology spread constraints (can be overwritten on component level) |
| podLabels | object | {} | Additional pod labels for all components |
| podAnnotations | object | {} | Additional pod annotations for all components |
| monitoring | object | {"enabled":false,"grafana":{"dashboard":{"configMapLabels":{"grafana_dashboard":"1"}}},"serviceMonitorSelectorLabels":{}} | Monitoring configuration for all components |
| monitoring.enabled | bool | false | Optionally enable Prometheus monitoring for all components (disabled by default) |
| monitoring.serviceMonitorSelectorLabels | object | {} | Prometheus service monitor selector labels |
| monitoring.grafana | object | {"dashboard":{"configMapLabels":{"grafana_dashboard":"1"}}} | Grafana configuration |
| monitoring.grafana.dashboard.configMapLabels | object | {"grafana_dashboard":"1"} | Labels for selecting ConfigMaps with dashboards in Grafana |
| controller.replicas | int | 1 | Replicas |
| controller.image.repository | string | "ghcr.io/sap/cap-operator/controller" | Image repository |
| controller.image.tag | string | "" | Image tag |
| controller.image.pullPolicy | string | "" | Image pull policy |
| controller.imagePullSecrets | list | [] | Image pull secrets |
| controller.podLabels | object | {} | Additional labels for controller pods |
| controller.podAnnotations | object | {} | Additional annotations for controller pods |
| controller.podSecurityContext | object | {} | Pod security content |
| controller.nodeSelector | object | {} | Node selector |
| controller.affinity | object | {} | Affinity settings |
| controller.tolerations | list | [] | Tolerations |
| controller.priorityClassName | string | "" | Priority class |
| controller.topologySpreadConstraints | list | [] | Topology spread constraints |
| controller.securityContext | object | {} | Security context |
| controller.resources.limits.memory | string | "500Mi" | Memory limit |
| controller.resources.limits.cpu | float | 0.2 | CPU limit |
| controller.resources.requests.memory | string | "50Mi" | Memory request |
| controller.resources.requests.cpu | float | 0.02 | CPU request |
| controller.volumes | list | [] | Optionally specify list of additional volumes for the controller pod(s) |
| controller.volumeMounts | list | [] | Optionally specify list of additional volumeMounts for the controller container(s) |
| controller.dnsTarget | string | "" | The dns target mentioned on the public ingress gateway service used in the cluster |
| controller.detailedOperationalMetrics | bool | false | Optionally enable detailed opertational metrics for the controller by setting this to true |
| controller.versionMonitoring.prometheusAddress | string | "" | The URL of the Prometheus server from which metrics related to managed application versions can be queried |
| controller.versionMonitoring.metricsEvaluationInterval | string | "1h" | The duration (example 2h) after which versions are evaluated for deletion; based on specified workload metrics |
| controller.versionMonitoring.promClientAcquireRetryDelay | string | "1h" | The duration (example 10m) to wait before retrying to acquire Prometheus client and verify connection, after a failed attempt |
| subscriptionServer.replicas | int | 1 | Replicas |
| subscriptionServer.image.repository | string | "ghcr.io/sap/cap-operator/server" | Image repository |
| subscriptionServer.image.tag | string | "" | Image tag |
| subscriptionServer.image.pullPolicy | string | "" | Image pull policy |
| subscriptionServer.imagePullSecrets | list | [] | Image pull secrets |
| subscriptionServer.podLabels | object | {} | Additional labels for subscription server pods |
| subscriptionServer.podAnnotations | object | {} | Additional annotations for subscription server pods |
| subscriptionServer.podSecurityContext | object | {} | Pod security content |
| subscriptionServer.nodeSelector | object | {} | Node selector |
| subscriptionServer.affinity | object | {} | Affinity settings |
| subscriptionServer.tolerations | list | [] | Tolerations |
| subscriptionServer.priorityClassName | string | "" | Priority class |
| subscriptionServer.topologySpreadConstraints | list | [] | Topology spread constraints |
| subscriptionServer.securityContext | object | {} | Security context |
| subscriptionServer.resources.limits.memory | string | "200Mi" | Memory limit |
| subscriptionServer.resources.limits.cpu | float | 0.1 | CPU limit |
| subscriptionServer.resources.requests.memory | string | "20Mi" | Memory request |
| subscriptionServer.resources.requests.cpu | float | 0.01 | CPU request |
| subscriptionServer.volumes | list | [] | Optionally specify list of additional volumes for the server pod(s) |
| subscriptionServer.volumeMounts | list | [] | Optionally specify list of additional volumeMounts for the server container(s) |
| subscriptionServer.port | int | 4000 | Service port |
| subscriptionServer.istioSystemNamespace | string | "istio-system" | The namespace in the cluster where istio system components are installed |
| subscriptionServer.ingressGatewayLabels | object | {"app":"istio-ingressgateway","istio":"ingressgateway"} | Labels used to identify the istio ingress-gateway component |
| subscriptionServer.dnsTarget | string | "public-ingress.clusters.cs.services.sap" | The dns target mentioned on the public ingress gateway service used in the cluster |
| subscriptionServer.domain | string | "cap-operator.clusters.cs.services.sap" | The domain under which the cap operator subscription server would be available |
| subscriptionServer.certificateManager | string | "Gardener" | Certificate manager which can be either Gardener or CertManager |
| subscriptionServer.certificateConfig | object | {"additionalCACertificate":"-----BEGIN CERTIFICATE-----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\nLvHPhNDM3rMsLu06agF4JTbO8ANYtWQTx0PVrZKJu+8fcIaUp7MVBIVZ\n-----END CERTIFICATE-----\n","certManager":{"issuerGroup":"","issuerKind":"","issuerName":""},"gardener":{"issuerName":"","issuerNamespace":""}} | Certificate configuration |
| subscriptionServer.certificateConfig.gardener | object | {"issuerName":"","issuerNamespace":""} | Optionally specify the corresponding certificate configuration |
| subscriptionServer.certificateConfig.gardener.issuerName | string | "" | Issuer name |
| subscriptionServer.certificateConfig.gardener.issuerNamespace | string | "" | Issuer namespace |
| subscriptionServer.certificateConfig.certManager | object | {"issuerGroup":"","issuerKind":"","issuerName":""} | Cert Manager configuration |
| subscriptionServer.certificateConfig.certManager.issuerGroup | string | "" | Issuer group |
| subscriptionServer.certificateConfig.certManager.issuerKind | string | "" | Issuer kind |
| subscriptionServer.certificateConfig.certManager.issuerName | string | "" | Issuer name |
| subscriptionServer.certificateConfig.additionalCACertificate | string | "-----BEGIN CERTIFICATE-----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\nLvHPhNDM3rMsLu06agF4JTbO8ANYtWQTx0PVrZKJu+8fcIaUp7MVBIVZ\n-----END CERTIFICATE-----\n" | Optionally specify additional CA Certificate |
| webhook.sidecar | bool | false | Side car to mount admission review |
| webhook.replicas | int | 1 | Replicas |
| webhook.image.repository | string | "ghcr.io/sap/cap-operator/web-hooks" | Image repository |
| webhook.image.tag | string | "" | Image tag |
| webhook.image.pullPolicy | string | "" | Image pull policy |
| webhook.imagePullSecrets | list | [] | Image pull secrets |
| webhook.podLabels | object | {} | Additional labels for validating webhook pods |
| webhook.podAnnotations | object | {} | Additional annotations for validating webhook pods |
| webhook.podSecurityContext | object | {} | Pod security content |
| webhook.nodeSelector | object | {} | Node selector |
| webhook.affinity | object | {} | Affinity settings |
| webhook.tolerations | list | [] | Tolerations |
| webhook.priorityClassName | string | "" | Priority class |
| webhook.topologySpreadConstraints | list | [] | Topology spread constraints |
| webhook.securityContext | object | {} | Security context |
| webhook.resources.limits.memory | string | "200Mi" | Memory limit |
| webhook.resources.limits.cpu | float | 0.1 | CPU limit |
| webhook.resources.requests.memory | string | "20Mi" | Memory request |
| webhook.resources.requests.cpu | float | 0.01 | CPU request |
| webhook.service | object | {"port":443,"targetPort":1443,"type":"ClusterIP"} | Service port |
| webhook.service.type | string | "ClusterIP" | Service type |
| webhook.service.port | int | 443 | Service port |
| webhook.service.targetPort | int | 1443 | Target port |
| webhook.certificateManager | string | "Default" | Certificate manager which can be either Default or CertManager |
| webhook.certificateConfig | object | {"certManager":{"issuerGroup":"","issuerKind":"","issuerName":""}} | Optionally specify the corresponding certificate configuration |
| webhook.certificateConfig.certManager.issuerGroup | string | "" | Issuer group |
| webhook.certificateConfig.certManager.issuerKind | string | "" | Issuer kind |
| webhook.certificateConfig.certManager.issuerName | string | "" | Issuer name |