diff --git a/chart/README.md b/chart/README.md index e0bef13..4ef88a6 100644 --- a/chart/README.md +++ b/chart/README.md @@ -15,7 +15,7 @@ Helm chart to deploy AtomiCloud's Cluster policy engine, Kyverno | Key | Type | Default | Description | |-----|------|---------|-------------| -| kyverno | object | `{"admissionController":{"createSelfSignedCert":true,"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"admission-controller","drop_log":"true"},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"admission-controller"},"replicas":1,"serviceMonitor":{"enabled":true,"interval":"60s"},"topologySpreadConstraints":[{"labelSelector":{"matchLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"admission-controller"}},"maxSkew":1,"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}]},"backgroundController":{"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"background-controller","drop_log":"true"},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"background-controller"},"replicas":1,"resources":{"limits":{"cpu":1,"memory":"1Gi"},"requests":{"cpu":"25m","memory":"64Mi"}},"serviceMonitor":{"enabled":true,"interval":"60s"},"topologySpreadConstraints":[{"labelSelector":{"matchLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"background-controller"}},"maxSkew":1,"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}]},"cleanupController":{"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"cleanup-controller","drop_log":"true"},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"cleanup-controller"},"replicas":1,"resources":{"limits":{"cpu":1,"memory":"1Gi"},"requests":{"cpu":"25m","memory":"64Mi"}},"serviceMonitor":{"enabled":true,"interval":"60s"},"topologySpreadConstraints":[{"labelSelector":{"matchLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"cleanup-controller"}},"maxSkew":1,"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}]},"config":{"webhooks":[{"namespaceSelector":{"matchExpressions":[{"key":"kubernetes.io/metadata.name","operator":"NotIn","values":["kube-system","kube-node-lease","kube-public","kyverno"]}]}}]},"container":{"resources":{"limits":{"cpu":"250m","memory":"512Mi"},"requests":{"cpu":"100m","memory":"128Mi"}}},"reportsController":{"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"reports-controller","drop_log":"true"},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"reports-controller"},"replicas":1,"resources":{"limits":{"cpu":1,"memory":"1Gi"},"requests":{"cpu":"100m","memory":"128Mi"}},"serviceMonitor":{"enabled":true,"interval":"60s"},"topologySpreadConstraints":[{"labelSelector":{"matchLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"reports-controller"}},"maxSkew":1,"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}]}}` | Kyverno Configuration. See [Kyverno](https://github.com/kyverno/kyverno/tree/main/charts/kyverno) | +| kyverno | object | `{"admissionController":{"container":{"resources":{"limits":{"cpu":"250m","memory":"512Mi"},"requests":{"cpu":"100m","memory":"128Mi"}}},"createSelfSignedCert":true,"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"admission-controller","drop_log":"true"},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"admission-controller"},"replicas":1,"serviceMonitor":{"enabled":true,"interval":"60s"},"topologySpreadConstraints":[{"labelSelector":{"matchLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"admission-controller"}},"maxSkew":1,"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}]},"backgroundController":{"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"background-controller","drop_log":"true"},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"background-controller"},"replicas":1,"resources":{"limits":{"cpu":1,"memory":"1Gi"},"requests":{"cpu":"25m","memory":"64Mi"}},"serviceMonitor":{"enabled":true,"interval":"60s"},"topologySpreadConstraints":[{"labelSelector":{"matchLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"background-controller"}},"maxSkew":1,"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}]},"cleanupController":{"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"cleanup-controller","drop_log":"true"},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"cleanup-controller"},"replicas":1,"resources":{"limits":{"cpu":1,"memory":"1Gi"},"requests":{"cpu":"25m","memory":"64Mi"}},"serviceMonitor":{"enabled":true,"interval":"60s"},"topologySpreadConstraints":[{"labelSelector":{"matchLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"cleanup-controller"}},"maxSkew":1,"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}]},"config":{"webhooks":[{"namespaceSelector":{"matchExpressions":[{"key":"kubernetes.io/metadata.name","operator":"NotIn","values":["kube-system","kube-node-lease","kube-public","kyverno"]}]}}]},"reportsController":{"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"reports-controller","drop_log":"true"},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"reports-controller"},"replicas":1,"resources":{"limits":{"cpu":1,"memory":"1Gi"},"requests":{"cpu":"100m","memory":"128Mi"}},"serviceMonitor":{"enabled":true,"interval":"60s"},"topologySpreadConstraints":[{"labelSelector":{"matchLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"reports-controller"}},"maxSkew":1,"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}]}}` | Kyverno Configuration. See [Kyverno](https://github.com/kyverno/kyverno/tree/main/charts/kyverno) | | policy-reporter | object | `{"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"reporter","drop_log":"true"},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"reporter"},"resources":{"limits":{"cpu":1,"memory":"1Gi"},"requests":{"cpu":"100m","memory":"128Mi"}},"topologySpreadConstraints":[{"labelSelector":{"matchLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"reporter"}},"maxSkew":1,"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}],"ui":{"enabled":true,"podAnnotations":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"ui","drop_log":"true"},"podLabels":{"<<":{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"},"atomi.cloud/module":"ui"},"resources":{"limits":{"cpu":1,"memory":"1Gi"},"requests":{"cpu":"100m","memory":"128Mi"}}}}` | Kyverno Policy Reporter Configuration. See [Policy Reporter](https://github.com/kyverno/policy-reporter) | | serviceTree | object | `{"layer":"1","platform":"sulfoxide","service":"argon"}` | AtomiCloud Service Tree. See [ServiceTree](https://atomicloud.larksuite.com/wiki/OkfJwTXGFiMJkrk6W3RuwRrZs64?theme=DARK&contentTheme=DARK#MHw5d76uDo2tBLx86cduFQMRsBb) | | tags | object | `{"atomi.cloud/layer":"1","atomi.cloud/platform":"sulfoxide","atomi.cloud/service":"argon"}` | Kubernetes labels and annotations, following Service Tree | diff --git a/chart/values.yaml b/chart/values.yaml index 6eeb26d..89c77bf 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -87,14 +87,14 @@ kyverno: serviceMonitor: enabled: true interval: 60s - container: - resources: - limits: - memory: 512Mi - cpu: 250m - requests: - cpu: 100m - memory: 128Mi + container: + resources: + limits: + memory: 512Mi + cpu: 250m + requests: + cpu: 100m + memory: 128Mi reportsController: topologySpreadConstraints: - maxSkew: 1