diff --git a/helm/charts/hydra-maester/README.md b/helm/charts/hydra-maester/README.md index 09d0b37fb9..639b061067 100644 --- a/helm/charts/hydra-maester/README.md +++ b/helm/charts/hydra-maester/README.md @@ -12,12 +12,15 @@ A Helm chart for Kubernetes | adminService.name | string | `nil` | Service name | | adminService.port | string | `nil` | Service port | | affinity | object | `{}` | Configure node affinity | -| deployment.annotations | object | `{}` | | | deployment.args | object | `{"syncPeriod":""}` | Arguments to be passed to the program | | deployment.args.syncPeriod | string | `""` | The minimum frequency at which watched resources are reconciled | | deployment.automountServiceAccountToken | bool | `true` | | +| deployment.extraAnnotations | object | `{}` | Deployment level extra annotations | +| deployment.extraLabels | object | `{}` | Deployment level extra labels | | deployment.nodeSelector | object | `{}` | Node labels for pod assignment. | -| deployment.podLabels | object | `{}` | | +| deployment.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| deployment.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| deployment.podMetadata.labels | object | `{}` | Extra pod level labels | | deployment.resources | object | `{}` | | | deployment.securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":1000}` | Default security context | | deployment.tolerations | list | `[]` | Configure node tolerations. | diff --git a/helm/charts/hydra/README.md b/helm/charts/hydra/README.md index 9c18b2e225..ede4f78d69 100644 --- a/helm/charts/hydra/README.md +++ b/helm/charts/hydra/README.md @@ -29,7 +29,7 @@ A Helm chart for deploying ORY Hydra in Kubernetes |-----|------|---------|-------------| | affinity | object | `{}` | Configure node affinity | | configmap.hashSumEnabled | bool | `true` | switch to false to prevent checksum annotations being maintained and propogated to the pods | -| deployment.annotations | object | `{}` | | +| deployment.annotations | object | `{}` | Set custom deployment level annotations | | deployment.automountServiceAccountToken | bool | `true` | | | deployment.autoscaling.enabled | bool | `false` | | | deployment.autoscaling.maxReplicas | int | `3` | | @@ -39,10 +39,13 @@ A Helm chart for deploying ORY Hydra in Kubernetes | deployment.extraInitContainers | object | `{}` | If you want to add extra init containers. | | deployment.extraVolumeMounts | list | `[]` | | | deployment.extraVolumes | list | `[]` | If you want to mount external volume | -| deployment.labels | object | `{}` | | +| deployment.labels | object | `{}` | Set custom deployment level labels | | deployment.lifecycle | object | `{}` | | | deployment.livenessProbe | object | `{"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":10}` | Configure the probes for when the deployment is considered ready and ongoing health check | | deployment.nodeSelector | object | `{}` | Node labels for pod assignment. | +| deployment.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| deployment.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| deployment.podMetadata.labels | object | `{}` | Extra pod level labels | | deployment.readinessProbe.failureThreshold | int | `5` | | | deployment.readinessProbe.initialDelaySeconds | int | `30` | | | deployment.readinessProbe.periodSeconds | int | `10` | | @@ -75,13 +78,17 @@ A Helm chart for deploying ORY Hydra in Kubernetes | ingress.admin.enabled | bool | `false` | En-/Disable the api ingress. | | ingress.public | object | `{"annotations":{},"className":"","enabled":false,"hosts":[{"host":"public.hydra.localhost","paths":[{"path":"/","pathType":"ImplementationSpecific"}]}]}` | Configure ingress for the proxy port. | | ingress.public.enabled | bool | `false` | En-/Disable the proxy ingress. | -| job | object | `{"annotations":{},"automountServiceAccountToken":true,"extraContainers":{},"extraInitContainers":{},"lifecycle":{},"nodeSelector":{},"serviceAccount":{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"},"create":true,"name":""},"shareProcessNamespace":false,"spec":{"backoffLimit":10}}` | Values for initialization job | +| job | object | `{"annotations":{},"automountServiceAccountToken":true,"extraContainers":{},"extraInitContainers":{},"labels":{},"lifecycle":{},"nodeSelector":{},"podMetadata":{"annotations":{},"labels":{}},"serviceAccount":{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"},"create":true,"name":""},"shareProcessNamespace":false,"spec":{"backoffLimit":10}}` | Values for initialization job | | job.annotations | object | `{}` | If you do want to specify annotations, uncomment the following lines, adjust them as necessary, and remove the curly braces after 'annotations:'. | | job.automountServiceAccountToken | bool | `true` | Set automounting of the SA token | | job.extraContainers | object | `{}` | If you want to add extra sidecar containers. | | job.extraInitContainers | object | `{}` | If you want to add extra init containers. extraInitContainers: | - name: ... image: ... | +| job.labels | object | `{}` | Set custom deployment level labels | | job.lifecycle | object | `{}` | If you want to add lifecycle hooks. | | job.nodeSelector | object | `{}` | Node labels for pod assignment. | +| job.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| job.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| job.podMetadata.labels | object | `{}` | Extra pod level labels | | job.serviceAccount | object | `{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"},"create":true,"name":""}` | Specify the serviceAccountName value. In some situations it is needed to provides specific permissions to Hydra deployments Like for example installing Hydra on a cluster with a PosSecurityPolicy and Istio. Uncoment if it is needed to provide a ServiceAccount for the Hydra deployment. | | job.serviceAccount.annotations | object | `{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"}` | Annotations to add to the service account | | job.serviceAccount.create | bool | `true` | Specifies whether a service account should be created | @@ -119,7 +126,11 @@ A Helm chart for deploying ORY Hydra in Kubernetes | serviceMonitor.scrapeInterval | string | `"60s"` | Interval at which metrics should be scraped | | serviceMonitor.scrapeTimeout | string | `"30s"` | Timeout after which the scrape is ended | | serviceMonitor.tlsConfig | object | `{}` | TLS configuration to use when scraping the endpoint | -| watcher | object | `{"enabled":false,"image":"oryd/k8s-toolbox:0.0.4","mountFile":""}` | Sidecar watcher configuration | +| watcher | object | `{"enabled":false,"image":"oryd/k8s-toolbox:0.0.4","mountFile":"","podMetadata":{"annotations":{},"labels":{}}}` | Sidecar watcher configuration | +| watcher.mountFile | string | `""` | Path to mounted file, which wil be monitored for changes. eg: /etc/secrets/my-secret/foo | +| watcher.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| watcher.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| watcher.podMetadata.labels | object | `{}` | Extra pod level labels | ---------------------------------------------- Autogenerated from chart metadata using [helm-docs v1.5.0](https://github.com/norwoodj/helm-docs/releases/v1.5.0) diff --git a/helm/charts/keto/README.md b/helm/charts/keto/README.md index 7c8e5c3284..00696807dc 100644 --- a/helm/charts/keto/README.md +++ b/helm/charts/keto/README.md @@ -22,7 +22,7 @@ Access Control Policies as a Server | Key | Type | Default | Description | |-----|------|---------|-------------| | configmap.hashSumEnabled | bool | `true` | switch to false to prevent checksum annotations being maintained and propogated to the pods | -| deployment | object | `{"affinity":{},"annotations":{},"automountServiceAccountToken":true,"autoscaling":{"enabled":false,"maxReplicas":100,"minReplicas":1,"targetCPUUtilizationPercentage":80},"extraContainers":{},"extraEnv":[],"extraInitContainers":{},"extraLabels":{},"extraVolumeMounts":[],"extraVolumes":[],"livenessProbe":{"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":10},"nodeSelector":{},"podAnnotations":{},"podSecurityContext":{},"readinessProbe":{"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":10},"resources":{},"tolerations":[],"tracing":{"datadog":{"enabled":false}}}` | Configure the probes for when the deployment is considered ready and ongoing health check | +| deployment | object | `{"affinity":{},"annotations":{},"automountServiceAccountToken":true,"autoscaling":{"enabled":false,"maxReplicas":100,"minReplicas":1,"targetCPUUtilizationPercentage":80},"extraContainers":{},"extraEnv":[],"extraInitContainers":{},"extraLabels":{},"extraVolumeMounts":[],"extraVolumes":[],"livenessProbe":{"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":10},"nodeSelector":{},"podAnnotations":{},"podMetadata":{"annotations":{},"labels":{}},"podSecurityContext":{},"readinessProbe":{"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":10},"resources":{},"tolerations":[],"tracing":{"datadog":{"enabled":false}}}` | Configure the probes for when the deployment is considered ready and ongoing health check | | deployment.annotations | object | `{}` | Add custom annotations to the deployment | | deployment.autoscaling | object | `{"enabled":false,"maxReplicas":100,"minReplicas":1,"targetCPUUtilizationPercentage":80}` | Autoscaling for keto deployment | | deployment.extraContainers | object | `{}` | If you want to add extra sidecar containers. | @@ -31,7 +31,10 @@ Access Control Policies as a Server | deployment.extraLabels | object | `{}` | Extra labels to be added to the deployment, and pods. K8s object format expected foo: bar my.special.label/type: value | | deployment.extraVolumeMounts | list | `[]` | Array of extra VolumeMounts to be added to the deployment. K8s format expected - name: my-volume mountPath: /etc/secrets/my-secret readOnly: true | | deployment.extraVolumes | list | `[]` | Array of extra Volumes to be added to the deployment. K8s format expected - name: my-volume secret: secretName: my-secret | -| deployment.podAnnotations | object | `{}` | Set custom pod annotations | +| deployment.podAnnotations | object | `{}` | DEPRECATED Set custom pod annotations | +| deployment.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| deployment.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| deployment.podMetadata.labels | object | `{}` | Extra pod level labels | | deployment.podSecurityContext | object | `{}` | Set custom security context for pods | | deployment.tracing | object | `{"datadog":{"enabled":false}}` | Configuration for tracing providers. Only datadog is currently supported through this block. If you need to use a different tracing provider, please manually set the configuration values via "keto.config" or via "extraEnv". | | fullnameOverride | string | `""` | | @@ -40,12 +43,15 @@ Access Control Policies as a Server | image.tag | string | `"v0.8.0-alpha.2"` | | | imagePullSecrets | list | `[]` | | | ingress | object | `{"read":{"annotations":{},"className":"","enabled":false,"hosts":[{"host":"chart-example.local","paths":[{"path":"/read","pathType":"Prefix"}]}],"tls":[]},"write":{"annotations":{},"className":"","enabled":false,"hosts":[{"host":"chart-example.local","paths":[{"path":"/write","pathType":"Prefix"}]}],"tls":[]}}` | Ingress definitions | -| job | object | `{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation,hook-succeeded","helm.sh/hook-weight":"1"},"automountServiceAccountToken":true,"extraContainers":{},"lifecycle":{},"nodeSelector":{},"serviceAccount":{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"},"create":true,"name":""},"shareProcessNamespace":false,"spec":{"backoffLimit":10}}` | Values for initialization job | +| job | object | `{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation,hook-succeeded","helm.sh/hook-weight":"1"},"automountServiceAccountToken":true,"extraContainers":{},"lifecycle":{},"nodeSelector":{},"podMetadata":{"annotations":{},"labels":{}},"serviceAccount":{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"},"create":true,"name":""},"shareProcessNamespace":false,"spec":{"backoffLimit":10}}` | Values for initialization job | | job.annotations | object | `{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation,hook-succeeded","helm.sh/hook-weight":"1"}` | If you do want to specify annotations, uncomment the following lines, adjust them as necessary, and remove the curly braces after 'annotations:'. | | job.automountServiceAccountToken | bool | `true` | Set automounting of the SA token | | job.extraContainers | object | `{}` | If you want to add extra sidecar containers. | | job.lifecycle | object | `{}` | If you want to add lifecycle hooks. | | job.nodeSelector | object | `{}` | Node labels for pod assignment. | +| job.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| job.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| job.podMetadata.labels | object | `{}` | Extra pod level labels | | job.serviceAccount | object | `{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"},"create":true,"name":""}` | Specify the serviceAccountName value. In some situations it is needed to provides specific permissions to Hydra deployments Like for example installing Hydra on a cluster with a PosSecurityPolicy and Istio. Uncoment if it is needed to provide a ServiceAccount for the Hydra deployment. | | job.serviceAccount.annotations | object | `{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"}` | Annotations to add to the service account | | job.serviceAccount.create | bool | `true` | Specifies whether a service account should be created | @@ -77,7 +83,11 @@ Access Control Policies as a Server | serviceMonitor.scrapeInterval | string | `"60s"` | Interval at which metrics should be scraped | | serviceMonitor.scrapeTimeout | string | `"30s"` | Timeout after which the scrape is ended | | serviceMonitor.tlsConfig | object | `{}` | TLS configuration to use when scraping the endpoint | -| watcher | object | `{"enabled":false,"image":"oryd/k8s-toolbox:0.0.4","mountFile":""}` | Watcher sidecar configuration | +| watcher | object | `{"enabled":false,"image":"oryd/k8s-toolbox:0.0.4","mountFile":"","podMetadata":{"annotations":{},"labels":{}}}` | Watcher sidecar configuration | +| watcher.mountFile | string | `""` | Path to mounted file, which wil be monitored for changes. eg: /etc/secrets/my-secret/foo | +| watcher.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| watcher.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| watcher.podMetadata.labels | object | `{}` | Extra pod level labels | ---------------------------------------------- Autogenerated from chart metadata using [helm-docs v1.5.0](https://github.com/norwoodj/helm-docs/releases/v1.5.0) diff --git a/helm/charts/kratos/README.md b/helm/charts/kratos/README.md index 3d96cac663..e237755303 100644 --- a/helm/charts/kratos/README.md +++ b/helm/charts/kratos/README.md @@ -12,7 +12,7 @@ A ORY Kratos Helm chart for Kubernetes | autoscaling | object | `{"enabled":false,"maxReplicas":3,"minReplicas":1,"targetCPUUtilizationPercentage":80}` | Horizontal pod autoscaling configuration | | configmap.annotations | object | `{}` | If you do want to specify annotations for configmap, uncomment the following lines, adjust them as necessary, and remove the curly braces after 'annotations:'. | | configmap.hashSumEnabled | bool | `true` | switch to false to prevent checksum annotations being maintained and propogated to the pods | -| deployment | object | `{"annotations":{},"automountServiceAccountToken":true,"customLivenessProbe":{},"customReadinessProbe":{},"extraArgs":[],"extraContainers":{},"extraEnv":[],"extraInitContainers":{},"extraVolumeMounts":[],"extraVolumes":[],"labels":{},"livenessProbe":{"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":10},"nodeSelector":{},"readinessProbe":{"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":10},"resources":{},"serviceAccount":{"annotations":{},"create":true,"name":""},"tolerations":[],"tracing":{"datadog":{"enabled":false}}}` | Configuration options for the k8s deployment | +| deployment | object | `{"annotations":{},"automountServiceAccountToken":true,"customLivenessProbe":{},"customReadinessProbe":{},"extraArgs":[],"extraContainers":{},"extraEnv":[],"extraInitContainers":{},"extraVolumeMounts":[],"extraVolumes":[],"labels":{},"livenessProbe":{"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":10},"nodeSelector":{},"podMetadata":{"annotations":{},"labels":{}},"readinessProbe":{"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":10},"resources":{},"serviceAccount":{"annotations":{},"create":true,"name":""},"tolerations":[],"tracing":{"datadog":{"enabled":false}}}` | Configuration options for the k8s deployment | | deployment.customLivenessProbe | object | `{}` | Configure a custom livenessProbe. This overwrites the default object | | deployment.customReadinessProbe | object | `{}` | Configure a custom readinessProbe. This overwrites the default object | | deployment.extraArgs | list | `[]` | Array of extra arguments to be passed down to the deployment. Kubernetes args format is expected - --foo - --sqa-opt-out | @@ -21,6 +21,9 @@ A ORY Kratos Helm chart for Kubernetes | deployment.extraVolumes | list | `[]` | If you want to mount external volume For example, mount a secret containing Certificate root CA to verify database TLS connection. | | deployment.livenessProbe | object | `{"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":10}` | Configure the livenessProbe parameters | | deployment.nodeSelector | object | `{}` | Node labels for pod assignment. | +| deployment.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| deployment.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| deployment.podMetadata.labels | object | `{}` | Extra pod level labels | | deployment.readinessProbe | object | `{"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":10}` | Configure the readinessProbe parameters | | deployment.serviceAccount | object | `{"annotations":{},"create":true,"name":""}` | The secret specified here will be used to load environment variables with envFrom. This allows arbitrary environment variables to be provided to the application which is useful for sensitive values which should not be in a configMap. This secret is not created by the helm chart and must already exist in the namespace. https://kubernetes.io/docs/tasks/inject-data-application/distribute-credentials-secure/#configure-all-key-value-pairs-in-a-secret-as-container-environment-variables environmentSecretsName: -- Specify the serviceAccountName value. In some situations it is needed to provide specific permissions to Kratos deployments. Like for example installing Kratos on a cluster with a PosSecurityPolicy and Istio. Uncomment if it is needed to provide a ServiceAccount for the Kratos deployment. | | deployment.serviceAccount.annotations | object | `{}` | Annotations to add to the service account | @@ -47,12 +50,15 @@ A ORY Kratos Helm chart for Kubernetes | ingress.public.hosts[0].paths[0].path | string | `"/"` | | | ingress.public.hosts[0].paths[0].pathType | string | `"ImplementationSpecific"` | | | ingress.public.tls | list | `[]` | | -| job | object | `{"annotations":{},"automountServiceAccountToken":true,"extraContainers":{},"lifecycle":{},"nodeSelector":{},"serviceAccount":{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"},"create":true,"name":""},"shareProcessNamespace":false,"spec":{"backoffLimit":10}}` | Values for initialization job | +| job | object | `{"annotations":{},"automountServiceAccountToken":true,"extraContainers":{},"lifecycle":{},"nodeSelector":{},"podMetadata":{"annotations":{},"labels":{}},"serviceAccount":{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"},"create":true,"name":""},"shareProcessNamespace":false,"spec":{"backoffLimit":10}}` | Values for initialization job | | job.annotations | object | `{}` | If you do want to specify annotations, uncomment the following lines, adjust them as necessary, and remove the curly braces after 'annotations:'. | | job.automountServiceAccountToken | bool | `true` | Set automounting of the SA token | | job.extraContainers | object | `{}` | If you want to add extra sidecar containers. | | job.lifecycle | object | `{}` | If you want to add lifecycle hooks. | | job.nodeSelector | object | `{}` | Node labels for pod assignment. | +| job.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| job.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| job.podMetadata.labels | object | `{}` | Extra pod level labels | | job.serviceAccount | object | `{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"},"create":true,"name":""}` | Specify the serviceAccountName value. In some situations it is needed to provides specific permissions to Hydra deployments Like for example installing Hydra on a cluster with a PosSecurityPolicy and Istio. Uncoment if it is needed to provide a ServiceAccount for the Hydra deployment. | | job.serviceAccount.annotations | object | `{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"before-hook-creation","helm.sh/hook-weight":"0"}` | Annotations to add to the service account | | job.serviceAccount.create | bool | `true` | Specifies whether a service account should be created | @@ -115,10 +121,16 @@ A ORY Kratos Helm chart for Kubernetes | statefulSet.log.format | string | `"json"` | | | statefulSet.log.level | string | `"trace"` | | | statefulSet.nodeSelector | object | `{}` | Node labels for pod assignment. | +| statefulSet.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| statefulSet.podMetadata.labels | object | `{}` | Extra pod level labels | | statefulSet.resources | object | `{}` | | | strategy | object | `{"rollingUpdate":{"maxSurge":"30%","maxUnavailable":0},"type":"RollingUpdate"}` | Deployment update strategy | | tolerations | list | `[]` | If you do want to specify node labels, uncomment the following lines, adjust them as necessary, and remove the curly braces after 'annotations:'. foo: bar Configure node tolerations. | -| watcher | object | `{"enabled":false,"image":"oryd/k8s-toolbox:0.0.4","mountFile":""}` | Configuration of the watcher sidecar | +| watcher | object | `{"enabled":false,"image":"oryd/k8s-toolbox:0.0.4","mountFile":"","podMetadata":{"annotations":{},"labels":{}}}` | Configuration of the watcher sidecar | +| watcher.mountFile | string | `""` | Path to mounted file, which wil be monitored for changes. eg: /etc/secrets/my-secret/foo | +| watcher.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| watcher.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| watcher.podMetadata.labels | object | `{}` | Extra pod level labels | ---------------------------------------------- Autogenerated from chart metadata using [helm-docs v1.5.0](https://github.com/norwoodj/helm-docs/releases/v1.5.0) diff --git a/helm/charts/oathkeeper-maester/README.md b/helm/charts/oathkeeper-maester/README.md index a3cbd70ff6..ae227aee04 100644 --- a/helm/charts/oathkeeper-maester/README.md +++ b/helm/charts/oathkeeper-maester/README.md @@ -26,6 +26,9 @@ A Helm chart for deploying ORY Oathkeeper Rule Controller in Kubernetes | deployment.automountServiceAccountToken | bool | `true` | | | deployment.envs | object | `{}` | Configure environment variables. | | deployment.nodeSelector | object | `{}` | Node labels for pod assignment. | +| deployment.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| deployment.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| deployment.podMetadata.labels | object | `{}` | Extra pod level labels | | deployment.resources | object | `{}` | | | deployment.securityContext.allowPrivilegeEscalation | bool | `false` | | | deployment.securityContext.capabilities.drop[0] | string | `"ALL"` | | diff --git a/helm/charts/oathkeeper/README.md b/helm/charts/oathkeeper/README.md index 9a77bdd575..41e8785d07 100644 --- a/helm/charts/oathkeeper/README.md +++ b/helm/charts/oathkeeper/README.md @@ -39,6 +39,9 @@ A Helm chart for deploying ORY Oathkeeper in Kubernetes | deployment.extraVolumes | list | `[]` | Extra volumes you can attach to the pod. | | deployment.labels | object | `{}` | | | deployment.nodeSelector | object | `{}` | Node labels for pod assignment. | +| deployment.podMetadata | object | `{"annotations":{},"labels":{}}` | Specify pod metadata, this metadata is added directly to the pod, and not higher objects | +| deployment.podMetadata.annotations | object | `{}` | Extra pod level annotations | +| deployment.podMetadata.labels | object | `{}` | Extra pod level labels | | deployment.resources | object | `{}` | | | deployment.securityContext.allowPrivilegeEscalation | bool | `false` | | | deployment.securityContext.capabilities.drop[0] | string | `"ALL"` | |