-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathvalues.yaml
124 lines (106 loc) · 4.2 KB
/
values.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
cronjob:
schedule: "@daily"
priorityClassName: ""
ttlSecondsAfterFinished: 7776000
# Optional: Set [nodeSelector](https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/) for
# pods created by the cronjob
# nodeSelector:
# disktype: ssd
# Optional: Set [tolerations](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) for
# pods created by the cronjob
# tolerations:
# - key: "sample"
# operator: "Exists"
# effect: "NoSchedule"
# "ssmsend" or "gratia"
outputFormat: ssmsend
# If true, /cvmfs/grid.cern.ch/etc/grid-security/certificates/ will be mounted as a hostPath volume.
# If false, you will need to set up an alternative way of providing the ca-policy-* packages and CRLs in the ssmsend container.
gridSecurityHostPath: true
# If pspName is defined, this PSP will be used. If gridSecurityHostPath, use of a (read-only) /cvmfs hostPath is required.
# Other than that no special privileges are required so a default PSP should be sufficient.
pspName: ""
# UID and GID for the pod service user
user:
uid: 10000
gid: 10000
# Size of the data volume in which to store intermediate APEL records. outputFormat "gratia"
# outputs individual records rather than summaries, and may require a larger data volume size.
dataVolumeSize: 1000M
# container-level securityContext
containerSecurityContext:
privileged: false
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
processor:
image_repository: "hub.opensciencegrid.org/iris-hep/kuantifier-processor"
# Optionally overwrite container version. Default is chart appVersion.
image_tag: ""
image_pull_policy: "IfNotPresent"
resources:
# very generous estimate: approx 10 KiB memory per job record
limits:
cpu: "1"
memory: "2000Mi"
requests:
cpu: "0.5"
memory: "500Mi"
# Config values for the processor initContainer. See KAPELConfig.py for full details on required configuration.
config:
# Name of the site being reported on
# SITE_NAME: "EXAMPLE-T2"
# Uniquely identifying name for the cluster
# SUBMIT_HOST: "k8s.example.org:6443/namespace"
# Namespace in the cluster where workload pods run
# NAMESPACE: "example-namespace"
# Virtual Organization Name
VO_NAME: "example-vo"
# Works for a default installation of the bitnami/kube-prometheus Helm chart, otherwise use http://<service>.<namespace>:<port>
PROMETHEUS_SERVER: "http://kube-prometheus-prometheus.kube-prometheus:9090"
# Value to use for normalizing by CPU performance. Required for ssmsend output mode only
#BENCHMARK_VALUE: "15.0"
# Authentication secret for Prometheus, if any
prometheus_auth:
secret: null
key: null
ssmsend:
resources:
limits:
cpu: "0.5"
memory: "500Mi"
requests:
cpu: "0.1"
memory: "50Mi"
# Whether to actually send data. Use false for testing.
enabled: true
# Location of ssmsend container. Feel free to instead build your own using the provided Containerfile.
image_repository: "git.computecanada.ca:4567/rptaylor/misc/ssmsend"
# Optionally overwrite container version. Default is chart appVersion.
image_tag: ""
host: "msg.argo.grnet.gr"
# base64-encoded strings of the X509 public cert and private key for APEL publisher.
# Using a base64 encoded string with no line breaks avoids issues of indentation and double YAML encoding if Ansible is used for Helm.
x509cert: aW5zZXJ0IGJhc2U2NC1lbmNvZGVkIHN0cmluZyBvZiB0aGUgWDUwOSBwdWJsaWMgY2VydCBmb3IgQVBFTCBwdWJsaXNoZXIK
x509key: aW5zZXJ0IGJhc2U2NC1lbmNvZGVkIHN0cmluZyBvZiB0aGUgWDUwOSBwcml2YXRlIGtleSBmb3IgQVBFTCBwdWJsaXNoZXIK
gratia:
resources:
limits:
cpu: "0.5"
memory: "500Mi"
requests:
cpu: "0.1"
memory: "50Mi"
# Location of gratia output container.
image_repository: "hub.opensciencegrid.org/iris-hep/kuantifier-gratia-output"
# Optionally overwrite container version. Default is chart appVersion.
image_tag: ""
# Config options for Gratia.
config:
# Location of the Gratia probe config file. Can usually be kept as default
GRATIA_CONFIG_PATH: "/etc/gratia/kubernetes/ProbeConfig"
nameOverride: ""
fullnameOverride: ""