dapr

global:

registry: ghcr.io/dapr

tag: '1.19.1'

dnsSuffix: ".cluster.local"

logAsJson: false

imagePullPolicy: IfNotPresent

# To help compatibility with other charts which use global.imagePullSecrets.

# Allow either a string with single imagepullsecret or an array of {name: pullSecret} maps (k8s-style) or an array of strings (more common helm-style).

# global:

# imagePullSecrets: "pullSecret"

# or

# global:

# imagePullSecrets:

# - name: pullSecret1

# - name: pullSecret2

# or

# global:

# imagePullSecrets:

# - pullSecret1

# - pullSecret2

imagePullSecrets: ""

priorityClassName: ""

nodeSelector: {}

tolerations: []

rbac:

namespaced: false

ha:

enabled: false

topologyKey: "topology.kubernetes.io/zone"

# Pod anti-affinity scheduling policy: use the full Kubernetes field name.

# Valid values: "preferredDuringSchedulingIgnoredDuringExecution" or "requiredDuringSchedulingIgnoredDuringExecution".

podAntiAffinityPolicy: preferredDuringSchedulingIgnoredDuringExecution

replicaCount: 3

disruption:

minimumAvailable: ""

maximumUnavailable: "25%"

prometheus:

enabled: true

port: 9090

mtls:

enabled: true

workloadCertTTL: 24h

allowedClockSkew: 15m

controlPlaneTrustDomain: "cluster.local"

# If set to true, a bound service account token will be mounted and used to

# authenticate to Sentry.

mountSentryVolume: true

# Used to override `dapr-sentry.{{ .Release.Namespace }}.svc.cluster.local:443`

#sentryAddress:

# extraVolumes and extraVolumeMounts are used to mount additional volumes to

# the Dapr control plane pods. Useful for using alternative authentication

# credentials to sentry.

extraVolumes: {}

# sentry:

# placement:

# operator:

# injector:

# scheduler:

extraVolumeMounts: {}

# sentry:

# placement:

# operator:

# injector:

# scheduler:

# extraContainers are used to add additional sidecar containers to the Dapr

# control plane pods. Useful for compliance, logging, and telemetry agents.

extraContainers: {}

# sentry:

# placement:

# operator:

# injector:

# scheduler:

# initContainers are used to add custom init containers to the Dapr control

# plane pods. Useful for pre-flight setup tasks.

initContainers: {}

# sentry:

# placement:

# operator:

# injector:

# scheduler:

actors:

# Enables actor functionality in the cluster

enabled: true

# Name of the service that provides actor placement services

serviceName: "placement"

reminders:

# Name of the service that provides reminders

# If empty, uses the built-in reminders capabilities in Dapr sidecars

serviceName: ""

scheduler:

# Enables scheduler functionality in the cluster

enabled: true

placement:

# Serves actor placement from the Scheduler service instead of the

# standalone placement service. When enabled, the placement StatefulSet

# is not deployed. Sidecars keep their placement address, which points

# at nothing while placement is undeployed and is what lets them return

# to it without restarts on rollback.

#

# Applications need no configuration of their own: sidecars take

# placement from whichever authority the control plane advertises.

# Enable this only once every sidecar runs a Dapr version which supports

# it: older sidecars can only use the placement service, so with it

# undeployed their Actor and Workflow APIs stall until the pod is

# upgraded. No actor state is lost. This does not block placement for

# sidecars that have already upgraded: the cluster still has exactly

# one placement authority throughout the rollout.

#

# Toggling this in either direction needs no sidecar restarts: on

# enabling, sidecars adopt scheduler placement once the placement

# service is removed, and on disabling they return to the redeployed

# placement service on their own.

enabled: false

daprControlPlaneOs: linux

labels: {}

seccompProfile: ""

k8sLabels:

app.kubernetes.io/name: "{{ .Release.Name }}"

app.kubernetes.io/version: "{{ .Values.global.tag }}"

app.kubernetes.io/part-of: "dapr"

app.kubernetes.io/managed-by: "{{ .Release.Service }}"

app.kubernetes.io/component: "{{ .Values.component }}" # Should be set in each subchart

issuerFilenames: {}

## the issuerFilenames dictionary, if setup, have to contain 3 keys: ca,cert,key

# issuerFilenames:

# ca: "ca.crt"

# cert: "tls.crt"

# key: "tls.key"

argoRolloutServiceReconciler:

enabled: false

operator:

watchdogCanPatchPodLabels: false

dapr_operator:

image:

name: cgr.dev/chainguard-private/dapr-operator:1.19.1-r0@sha256:6d8e69b624b3c569ee001065f0105c95682550f2fbd948a81e0d5233453bf2b7

dapr_placement:

image:

name: cgr.dev/chainguard-private/dapr-placement:1.19.1-r0@sha256:7aaec854a7458b6ff3b0038f98756f18fea44155762adaf7e79599c4b438e464

dapr_sentry:

image:

name: cgr.dev/chainguard-private/dapr-sentry:1.19.1-r0@sha256:20a883fec9055fd3fb39b352088ee29fdf63b6ea3c987b54795fd84ee6839bed

dapr_scheduler:

image:

name: cgr.dev/chainguard-private/dapr-scheduler:1.19.1-r0@sha256:1652b4ad5ad4626afe36ce22f4970e76cc6214446d3dd56c80d26097abe8987c

dapr_sidecar_injector:

image:

name: cgr.dev/chainguard-private/dapr-daprd:1.19.1-r0@sha256:c9f38c017a5ffdac8477608d603d713afac57f8f6c123bcf85db2b1be80f7132

injectorImage:

name: cgr.dev/chainguard-private/dapr-injector:1.19.1-r0@sha256:43a402c5732b430aacd4cbe14f3b64b3d85d87d94e3a523bebb40629a9a76c23