vertical-pod-autoscaler
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
1
# Default values for vertical-pod-autoscaler.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
5
## @section Global parameters
6
7
global:
8
## @param global.imageRegistry Global Docker image registry
9
imageRegistry: ""
10
## @param global.imagePullSecrets Global Docker registry secret names as an array
11
imagePullSecrets: []
12
## @section Common parameters
13
14
## @param kubeVersion Override Kubernetes version
15
kubeVersion: ""
16
## @param nameOverride Partially override `vertical-pod-autoscaler.fullname` template with a string (will prepend the release name)
17
nameOverride: ""
18
## @param fullnameOverride Fully override `vertical-pod-autoscaler.fullname` template with a string
19
fullnameOverride: ""
20
## @param namespaceOverride Fully override `common.names.namespace` template with a string
21
namespaceOverride: ""
22
## @param commonAnnotations Annotations to add to all deployed objects
23
commonAnnotations: {}
24
## @param commonLabels Labels to add to all deployed objects
25
commonLabels: {}
26
## @param extraDeploy Array of extra objects to deploy with the release
27
extraDeploy: []
28
## @section Admission controller parameters
29
admissionController:
30
## @param admissionController.enabled Enable the component
31
enabled: true
32
## @param admissionController.replicaCount Number of replicas
33
replicaCount: 1
34
## @param admissionController.revisionHistoryLimit Number of old history to retain to allow rollback
35
revisionHistoryLimit: 10
36
image:
37
## @param admissionController.image.registry Image registry
38
registry: cgr.dev
39
## @param admissionController.image.repository Image repository
40
repository: scratch-images/test-tmp/vertical-pod-autoscaler-admission-controller
41
## @param admissionController.image.tag Image tag
42
tag: 1.7.1-r0
43
## @param admissionController.image.digest Image digest
44
digest: sha256:40af156edbfcd5c951ead0cb5a610c9ca2edf9fec67acfd450bebe33a9e2e939
45
## @param admissionController.image.pullPolicy Image pull policy
46
pullPolicy: IfNotPresent
47
pdb:
48
## @param admissionController.pdb.create Specifies whether a pod disruption budget should be created
49
create: false
50
## @param admissionController.pdb.minAvailable Minimum number/percentage of pods that should remain scheduled
51
minAvailable: 1
52
## @param admissionController.pdb.maxUnavailable Maximum number/percentage of pods that may be made unavailable
53
maxUnavailable:
54
# maxUnavailable: 1
55
serviceAccount:
56
## @param admissionController.serviceAccount.create Specifies whether a service account should be created
57
create: true
58
## @param admissionController.serviceAccount.annotations Service account annotations
59
annotations: {}
60
## @param admissionController.serviceAccount.name The name of the service account to use (Generated using the `vertical-pod-autoscaler.fullname` template if not set)
61
name:
62
## @param admissionController.enableServiceLinks Whether information about services should be injected into pod's environment variable
63
enableServiceLinks: false
64
## @param admissionController.hostAliases Pod host aliases
65
hostAliases: []
66
## @param admissionController.deploymentAnnotations Additional deployment annotations
67
deploymentAnnotations: {}
68
## @param admissionController.podAnnotations Additional pod annotations
69
podAnnotations: {}
70
## @param admissionController.podLabels Additional pod labels
71
podLabels: {}
72
## @extra admissionController.podSecurityContext Pod security context
73
## @param admissionController.podSecurityContext.seccompProfile.type Set pod's Security Context seccomp profile
74
podSecurityContext:
75
seccompProfile:
76
type: RuntimeDefault
77
## @param admissionController.hostNetwork Use the host network
78
hostNetwork: false
79
## @param admissionController.priorityClassName Priority class name
80
priorityClassName:
81
# priorityClassName : high-priority
82
83
## @param admissionController.runtimeClassName Runtime class name
84
runtimeClassName: ""
85
## @param admissionController.topologySpreadConstraints Topology Spread Constraints for pod assignment
86
topologySpreadConstraints: []
87
## @extra admissionController.securityContext Container security context
88
## @param admissionController.securityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
89
## @param admissionController.securityContext.capabilities.drop List of capabilities to be dropped
90
## @param admissionController.securityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
91
## @param admissionController.securityContext.runAsNonRoot Whether the container must run as a non-root user
92
## @param admissionController.securityContext.runAsUser The UID to run the entrypoint of the container process
93
## @param admissionController.securityContext.runAsGroup The GID to run the entrypoint of the container process
94
securityContext:
95
allowPrivilegeEscalation: false
96
capabilities:
97
drop:
98
- ALL
99
readOnlyRootFilesystem: true
100
runAsNonRoot: true
101
runAsUser: 65534
102
runAsGroup: 65534
103
containerPorts:
104
## @param admissionController.containerPorts.https Container port for HTTPS
105
https: 8000
106
## @param admissionController.containerPorts.metrics Container port for Metrics
107
metrics: 8944
108
livenessProbe:
109
## @param admissionController.livenessProbe.enabled Enable liveness probe
110
enabled: true
111
## @param admissionController.livenessProbe.initialDelaySeconds Delay before the liveness probe is initiated
112
initialDelaySeconds: 0
113
## @param admissionController.livenessProbe.periodSeconds How often to perform the liveness probe
114
periodSeconds: 10
115
## @param admissionController.livenessProbe.timeoutSeconds When the liveness probe times out
116
timeoutSeconds: 1
117
## @param admissionController.livenessProbe.failureThreshold Minimum consecutive failures for the liveness probe to be considered failed after having succeeded
118
failureThreshold: 3
119
## @param admissionController.livenessProbe.successThreshold Minimum consecutive successes for the liveness probe to be considered successful after having failed
120
successThreshold: 1
121
readinessProbe:
122
## @param admissionController.readinessProbe.enabled Enable readiness probe
123
enabled: true
124
## @param admissionController.readinessProbe.initialDelaySeconds Delay before the readiness probe is initiated
125
initialDelaySeconds: 0
126
## @param admissionController.readinessProbe.periodSeconds How often to perform the readiness probe
127
periodSeconds: 10
128
## @param admissionController.readinessProbe.timeoutSeconds When the readiness probe times out
129
timeoutSeconds: 1
130
## @param admissionController.readinessProbe.failureThreshold Minimum consecutive failures for the readiness probe to be considered failed after having succeeded
131
failureThreshold: 3
132
## @param admissionController.readinessProbe.successThreshold Minimum consecutive successes for the readiness probe to be considered successful after having failed
133
successThreshold: 1
134
startupProbe:
135
## @param admissionController.startupProbe.enabled Enable startup probe
136
enabled: false
137
## @param admissionController.startupProbe.initialDelaySeconds Delay before the startup probe is initiated
138
initialDelaySeconds: 0
139
## @param admissionController.startupProbe.periodSeconds How often to perform the startup probe
140
periodSeconds: 10
141
## @param admissionController.startupProbe.timeoutSeconds When the startup probe times out
142
timeoutSeconds: 1
143
## @param admissionController.startupProbe.failureThreshold Minimum consecutive failures for the startup probe to be considered failed after having succeeded
144
failureThreshold: 3
145
## @param admissionController.startupProbe.successThreshold Minimum consecutive successes for the startup probe to be considered successful after having failed
146
successThreshold: 1
147
service:
148
## @param admissionController.service.annotations Service annotations
149
annotations: {}
150
## @param admissionController.service.type Service type
151
type: ClusterIP
152
## @param admissionController.service.clusterIP Static cluster IP address or None for headless service when service type is ClusterIP
153
clusterIP:
154
# clusterIP: 10.43.0.100
155
156
## @param admissionController.service.ipFamilyPolicy Service IP family policy
157
ipFamilyPolicy: ""
158
## @param admissionController.service.ipFamilies Service IP families
159
ipFamilies: []
160
## @param admissionController.service.sessionAffinity Control where client requests go, to the same pod or round-robin
161
sessionAffinity: None
162
## @param admissionController.service.sessionAffinityConfig Additional settings for the sessionAffinity
163
sessionAffinityConfig: {}
164
ports:
165
## @param admissionController.service.ports.https Service port for HTTPS (do not change it)
166
https: 443
167
## @param admissionController.resources CPU/Memory resource requests/limits
168
resources: {}
169
# requests:
170
# cpu: 50m
171
# memory: 256Mi
172
# limits:
173
# cpu: 200m
174
# memory: 512Mi
175
176
## @param admissionController.nodeSelector Node labels for pod assignment
177
nodeSelector: {}
178
## @param admissionController.tolerations Tolerations for pod assignment
179
tolerations: []
180
## @param admissionController.affinity Map of node/pod affinities
181
affinity: {}
182
## @extra admissionController.extraArgs [object] Additional container arguments
183
## @param admissionController.extraArgs.v Number for the log level verbosity
184
extraArgs:
185
# kube-api-burst: 100
186
# kube-api-qps: 50
187
v: 2
188
# vpa-object-namespace: ""
189
# webhook-timeout-seconds: 30
190
## @param admissionController.extraEnvVars Additional container environment variables
191
extraEnvVars: []
192
# - name: MY-NAME
193
# value: "MY-VALUE"
194
195
## @param admissionController.extraEnvVarsCM Name of existing ConfigMap containing additional container environment variables
196
extraEnvVarsCM:
197
## @param admissionController.extraEnvVarsSecret Name of existing Secret containing additional container environment variables
198
extraEnvVarsSecret:
199
## @param admissionController.extraVolumes Optionally specify extra list of additional volumes
200
extraVolumes: []
201
## @param admissionController.extraVolumeMounts Optionally specify extra list of additional volumeMounts
202
extraVolumeMounts: []
203
metrics:
204
service:
205
## @param admissionController.metrics.service.annotations Metrics service annotations
206
annotations: {}
207
## @param admissionController.metrics.service.type Metrics service type
208
type: ClusterIP
209
## @param admissionController.metrics.service.clusterIP Metrics static cluster IP address or None for headless service when service type is ClusterIP
210
clusterIP:
211
# clusterIP: 10.43.0.100
212
213
## @param admissionController.metrics.service.ipFamilyPolicy Metrics service IP family policy
214
ipFamilyPolicy: ""
215
## @param admissionController.metrics.service.ipFamilies Metrics service IP families
216
ipFamilies: []
217
ports:
218
## @param admissionController.metrics.service.ports.metrics Metrics service port for Metrics
219
metrics: 8944
220
serviceMonitor:
221
## @param admissionController.metrics.serviceMonitor.enabled Specifies whether a service monitor should be created
222
enabled: false
223
## @param admissionController.metrics.serviceMonitor.namespace Namespace in which to create the service monitor
224
namespace: ""
225
## @param admissionController.metrics.serviceMonitor.annotations Service monitor annotations
226
annotations: {}
227
## @param admissionController.metrics.serviceMonitor.labels Additional service monitor labels
228
labels: {}
229
## @param admissionController.metrics.serviceMonitor.jobLabel The name of the label on the target service to use as the job name in Prometheus
230
jobLabel: ""
231
## @param admissionController.metrics.serviceMonitor.honorLabels Whether to choose the metric’s labels on collisions with target labels
232
honorLabels: false
233
## @param admissionController.metrics.serviceMonitor.interval Interval at which metrics should be scraped
234
interval: ""
235
## @param admissionController.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended
236
scrapeTimeout: ""
237
## @param admissionController.metrics.serviceMonitor.metricRelabelings Specify additional relabeling of metrics
238
metricRelabelings: []
239
## @param admissionController.metrics.serviceMonitor.relabelings Specify general relabeling
240
relabelings: []
241
tls:
242
## @param admissionController.tls.caCert TLS CA certificate (Generated using the `genCA` function if not set)
243
caCert: ""
244
## @param admissionController.tls.cert TLS certificate (Generated using the `genSignedCert` function if not set)
245
cert: ""
246
## @param admissionController.tls.key TLS private key (Generated using the `genSignedCert` function if not set)
247
key: ""
248
## @param admissionController.tls.existingSecret Name of existing TLS Secret to use
249
existingSecret: ""
250
## @section Recommender parameters
251
recommender:
252
## @param recommender.replicaCount Number of replicas
253
replicaCount: 1
254
## @param recommender.revisionHistoryLimit Number of old history to retain to allow rollback
255
revisionHistoryLimit: 10
256
image:
257
## @param recommender.image.registry Image registry
258
registry: cgr.dev
259
## @param recommender.image.repository Image repository
260
repository: scratch-images/test-tmp/vertical-pod-autoscaler-recommender
261
## @param recommender.image.tag Image tag
262
tag: 1.7.1-r0
263
## @param recommender.image.digest Image digest
264
digest: sha256:c539b30543b33ece91f32edea8abc5c497a6e1bfc825303d1e2cc798aacf1842
265
## @param recommender.image.pullPolicy Image pull policy
266
pullPolicy: IfNotPresent
267
pdb:
268
## @param recommender.pdb.create Specifies whether a pod disruption budget should be created
269
create: false
270
## @param recommender.pdb.minAvailable Minimum number/percentage of pods that should remain scheduled
271
minAvailable: 1
272
## @param recommender.pdb.maxUnavailable Maximum number/percentage of pods that may be made unavailable
273
maxUnavailable:
274
# maxUnavailable: 1
275
serviceAccount:
276
## @param recommender.serviceAccount.create Specifies whether a service account should be created
277
create: true
278
## @param recommender.serviceAccount.annotations Service account annotations
279
annotations: {}
280
## @param recommender.serviceAccount.name The name of the service account to use (Generated using the `vertical-pod-autoscaler.fullname` template if not set)
281
name:
282
## @param recommender.enableServiceLinks Whether information about services should be injected into pod's environment variable
283
enableServiceLinks: false
284
## @param recommender.hostAliases Pod host aliases
285
hostAliases: []
286
## @param recommender.deploymentAnnotations Additional deployment annotations
287
deploymentAnnotations: {}
288
## @param recommender.podAnnotations Additional pod annotations
289
podAnnotations: {}
290
## @param recommender.podLabels Additional pod labels
291
podLabels: {}
292
## @extra recommender.podSecurityContext Pod security context
293
## @param recommender.podSecurityContext.seccompProfile.type Set pod's Security Context seccomp profile
294
podSecurityContext:
295
seccompProfile:
296
type: RuntimeDefault
297
## @param recommender.priorityClassName Priority class name
298
priorityClassName:
299
# priorityClassName : high-priority
300
301
## @param recommender.runtimeClassName Runtime class name
302
runtimeClassName: ""
303
## @param recommender.topologySpreadConstraints Topology Spread Constraints for pod assignment
304
topologySpreadConstraints: []
305
## @extra recommender.securityContext Container security context
306
## @param recommender.securityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
307
## @param recommender.securityContext.capabilities.drop List of capabilities to be dropped
308
## @param recommender.securityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
309
## @param recommender.securityContext.runAsNonRoot Whether the container must run as a non-root user
310
## @param recommender.securityContext.runAsUser The UID to run the entrypoint of the container process
311
## @param recommender.securityContext.runAsGroup The GID to run the entrypoint of the container process
312
securityContext:
313
allowPrivilegeEscalation: false
314
capabilities:
315
drop:
316
- ALL
317
readOnlyRootFilesystem: true
318
runAsNonRoot: true
319
runAsUser: 65534
320
runAsGroup: 65534
321
containerPorts:
322
## @param recommender.containerPorts.metrics Container port for Metrics
323
metrics: 8942
324
livenessProbe:
325
## @param recommender.livenessProbe.enabled Enable liveness probe
326
enabled: true
327
## @param recommender.livenessProbe.initialDelaySeconds Delay before the liveness probe is initiated
328
initialDelaySeconds: 0
329
## @param recommender.livenessProbe.periodSeconds How often to perform the liveness probe
330
periodSeconds: 10
331
## @param recommender.livenessProbe.timeoutSeconds When the liveness probe times out
332
timeoutSeconds: 1
333
## @param recommender.livenessProbe.failureThreshold Minimum consecutive failures for the liveness probe to be considered failed after having succeeded
334
failureThreshold: 3
335
## @param recommender.livenessProbe.successThreshold Minimum consecutive successes for the liveness probe to be considered successful after having failed
336
successThreshold: 1
337
readinessProbe:
338
## @param recommender.readinessProbe.enabled Enable readiness probe
339
enabled: true
340
## @param recommender.readinessProbe.initialDelaySeconds Delay before the readiness probe is initiated
341
initialDelaySeconds: 0
342
## @param recommender.readinessProbe.periodSeconds How often to perform the readiness probe
343
periodSeconds: 10
344
## @param recommender.readinessProbe.timeoutSeconds When the readiness probe times out
345
timeoutSeconds: 1
346
## @param recommender.readinessProbe.failureThreshold Minimum consecutive failures for the readiness probe to be considered failed after having succeeded
347
failureThreshold: 3
348
## @param recommender.readinessProbe.successThreshold Minimum consecutive successes for the readiness probe to be considered successful after having failed
349
successThreshold: 1
350
startupProbe:
351
## @param recommender.startupProbe.enabled Enable startup probe
352
enabled: false
353
## @param recommender.startupProbe.initialDelaySeconds Delay before the startup probe is initiated
354
initialDelaySeconds: 0
355
## @param recommender.startupProbe.periodSeconds How often to perform the startup probe
356
periodSeconds: 10
357
## @param recommender.startupProbe.timeoutSeconds When the startup probe times out
358
timeoutSeconds: 1
359
## @param recommender.startupProbe.failureThreshold Minimum consecutive failures for the startup probe to be considered failed after having succeeded
360
failureThreshold: 3
361
## @param recommender.startupProbe.successThreshold Minimum consecutive successes for the startup probe to be considered successful after having failed
362
successThreshold: 1
363
## @param recommender.resources CPU/Memory resource requests/limits
364
resources: {}
365
# requests:
366
# cpu: 50m
367
# memory: 512Mi
368
# limits:
369
# cpu: 200m
370
# memory: 1024Mi
371
372
## @param recommender.nodeSelector Node labels for pod assignment
373
nodeSelector: {}
374
## @param recommender.tolerations Tolerations for pod assignment
375
tolerations: []
376
## @param recommender.affinity Map of node/pod affinities
377
affinity: {}
378
## @extra recommender.extraArgs [object] Additional container arguments
379
## @param recommender.extraArgs.v Number for the log level verbosity
380
extraArgs:
381
# checkpoints-gc-interval: 10m0s
382
# checkpoints-timeout: 1m0s
383
# container-name-label: name
384
# container-namespace-label: namespace
385
# container-pod-name-label: pod_name
386
# cpu-histogram-decay-half-life: 24h0m0s
387
# cpu-integer-post-processor-enabled: false
388
# external-metrics-cpu-metric: ""
389
# external-metrics-memory-metric: ""
390
# history-length: 8d
391
# history-resolution: 1h
392
# ignored-vpa-object-namespaces: ""
393
# kube-api-burst: 100
394
# kube-api-qps: 50
395
# leader-elect: false
396
# leader-elect-lease-duration: 15s
397
# leader-elect-renew-deadline: 10s
398
# leader-elect-resource-lock: leases
399
# leader-elect-resource-name: vpa-recommender
400
# leader-elect-resource-namespace: kube-system
401
# leader-elect-retry-period: 2s
402
# memory-aggregation-interval: 24h0m0s
403
# memory-aggregation-interval-count: 8
404
# memory-histogram-decay-half-life: 24h0m0s
405
# memory-saver: false
406
# metric-for-pod-labels: up{job="kubernetes-pods"}
407
# oom-bump-up-ratio: 1.2
408
# oom-min-bump-up-bytes: 104857600
409
# password: ""
410
# pod-label-prefix: pod_label_
411
# pod-name-label: kubernetes_pod_name
412
# pod-namespace-label: kubernetes_namespace
413
# pod-recommendation-min-cpu-millicores: 25
414
# pod-recommendation-min-memory-mb: 250
415
# prometheus-address: ""
416
# prometheus-cadvisor-job-name: kubernetes-cadvisor
417
# prometheus-query-timeout: 5m
418
# recommendation-lower-bound-cpu-percentile: 0.5
419
# recommendation-lower-bound-memory-percentile: 0.5
420
# recommendation-margin-fraction: 0.15
421
# recommendation-upper-bound-cpu-percentile: 0.95
422
# recommendation-upper-bound-memory-percentile: 0.95
423
# recommender-interval: 1m0s
424
# recommender-name: default
425
# storage: checkpoint
426
# target-cpu-percentile: 0.9
427
# target-memory-percentile: 0.9
428
# update-worker-count: 10
429
# use-external-metrics: false
430
# username: ""
431
v: 2
432
# vpa-object-namespace: ""
433
## @param recommender.extraEnvVars Additional container environment variables
434
extraEnvVars: []
435
# - name: MY-NAME
436
# value: "MY-VALUE"
437
438
## @param recommender.extraEnvVarsCM Name of existing ConfigMap containing additional container environment variables
439
extraEnvVarsCM:
440
## @param recommender.extraEnvVarsSecret Name of existing Secret containing additional container environment variables
441
extraEnvVarsSecret:
442
## @param recommender.extraVolumes Optionally specify extra list of additional volumes
443
extraVolumes: []
444
## @param recommender.extraVolumeMounts Optionally specify extra list of additional volumeMounts
445
extraVolumeMounts: []
446
metrics:
447
service:
448
## @param recommender.metrics.service.annotations Metrics service annotations
449
annotations: {}
450
## @param recommender.metrics.service.type Metrics service type
451
type: ClusterIP
452
## @param recommender.metrics.service.clusterIP Metrics static cluster IP address or None for headless service when service type is ClusterIP
453
clusterIP:
454
# clusterIP: 10.43.0.100
455
456
## @param recommender.metrics.service.ipFamilyPolicy Metrics service IP family policy
457
ipFamilyPolicy: ""
458
## @param recommender.metrics.service.ipFamilies Metrics service IP families
459
ipFamilies: []
460
ports:
461
## @param recommender.metrics.service.ports.metrics Metrics service port for Metrics
462
metrics: 8942
463
serviceMonitor:
464
## @param recommender.metrics.serviceMonitor.enabled Specifies whether a service monitor should be created
465
enabled: false
466
## @param recommender.metrics.serviceMonitor.namespace Namespace in which to create the service monitor
467
namespace: ""
468
## @param recommender.metrics.serviceMonitor.annotations Service monitor annotations
469
annotations: {}
470
## @param recommender.metrics.serviceMonitor.labels Additional service monitor labels
471
labels: {}
472
## @param recommender.metrics.serviceMonitor.jobLabel The name of the label on the target service to use as the job name in Prometheus
473
jobLabel: ""
474
## @param recommender.metrics.serviceMonitor.honorLabels Whether to choose the metric’s labels on collisions with target labels
475
honorLabels: false
476
## @param recommender.metrics.serviceMonitor.interval Interval at which metrics should be scraped
477
interval: ""
478
## @param recommender.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended
479
scrapeTimeout: ""
480
## @param recommender.metrics.serviceMonitor.metricRelabelings Specify additional relabeling of metrics
481
metricRelabelings: []
482
## @param recommender.metrics.serviceMonitor.relabelings Specify general relabeling
483
relabelings: []
484
## @section Updater parameters
485
updater:
486
## @param updater.enabled Enable the component
487
enabled: true
488
## @param updater.replicaCount Number of replicas
489
replicaCount: 1
490
## @param updater.revisionHistoryLimit Number of old history to retain to allow rollback
491
revisionHistoryLimit: 10
492
image:
493
## @param updater.image.registry Image registry
494
registry: cgr.dev
495
## @param updater.image.repository Image repository
496
repository: scratch-images/test-tmp/vertical-pod-autoscaler-updater
497
## @param updater.image.tag Image tag
498
tag: 1.7.1-r0
499
## @param updater.image.digest Image digest
500
digest: sha256:cede584ecf411c6db1b29cda22835e6b6994b9ec13b39ea1f9135359faf00282
501
## @param updater.image.pullPolicy Image pull policy
502
pullPolicy: IfNotPresent
503
pdb:
504
## @param updater.pdb.create Specifies whether a pod disruption budget should be created
505
create: false
506
## @param updater.pdb.minAvailable Minimum number/percentage of pods that should remain scheduled
507
minAvailable: 1
508
## @param updater.pdb.maxUnavailable Maximum number/percentage of pods that may be made unavailable
509
maxUnavailable:
510
# maxUnavailable: 1
511
serviceAccount:
512
## @param updater.serviceAccount.create Specifies whether a service account should be created
513
create: true
514
## @param updater.serviceAccount.annotations Service account annotations
515
annotations: {}
516
## @param updater.serviceAccount.name The name of the service account to use (Generated using the `vertical-pod-autoscaler.fullname` template if not set)
517
name:
518
## @param updater.enableServiceLinks Whether information about services should be injected into pod's environment variable
519
enableServiceLinks: false
520
## @param updater.hostAliases Pod host aliases
521
hostAliases: []
522
## @param updater.deploymentAnnotations Additional deployment annotations
523
deploymentAnnotations: {}
524
## @param updater.podAnnotations Additional pod annotations
525
podAnnotations: {}
526
## @param updater.podLabels Additional pod labels
527
podLabels: {}
528
## @extra updater.podSecurityContext Pod security context
529
## @param updater.podSecurityContext.seccompProfile.type Set pod's Security Context seccomp profile
530
podSecurityContext:
531
seccompProfile:
532
type: RuntimeDefault
533
## @param updater.priorityClassName Priority class name
534
priorityClassName:
535
# priorityClassName : high-priority
536
537
## @param updater.runtimeClassName Runtime class name
538
runtimeClassName: ""
539
## @param updater.topologySpreadConstraints Topology Spread Constraints for pod assignment
540
topologySpreadConstraints: []
541
## @extra updater.securityContext Container security context
542
## @param updater.securityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
543
## @param updater.securityContext.capabilities.drop List of capabilities to be dropped
544
## @param updater.securityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
545
## @param updater.securityContext.runAsNonRoot Whether the container must run as a non-root user
546
## @param updater.securityContext.runAsUser The UID to run the entrypoint of the container process
547
## @param updater.securityContext.runAsGroup The GID to run the entrypoint of the container process
548
securityContext:
549
allowPrivilegeEscalation: false
550
capabilities:
551
drop:
552
- ALL
553
readOnlyRootFilesystem: true
554
runAsNonRoot: true
555
runAsUser: 65534
556
runAsGroup: 65534
557
containerPorts:
558
## @param updater.containerPorts.metrics Container port for Metrics
559
metrics: 8943
560
livenessProbe:
561
## @param updater.livenessProbe.enabled Enable liveness probe
562
enabled: true
563
## @param updater.livenessProbe.initialDelaySeconds Delay before the liveness probe is initiated
564
initialDelaySeconds: 0
565
## @param updater.livenessProbe.periodSeconds How often to perform the liveness probe
566
periodSeconds: 10
567
## @param updater.livenessProbe.timeoutSeconds When the liveness probe times out
568
timeoutSeconds: 1
569
## @param updater.livenessProbe.failureThreshold Minimum consecutive failures for the liveness probe to be considered failed after having succeeded
570
failureThreshold: 3
571
## @param updater.livenessProbe.successThreshold Minimum consecutive successes for the liveness probe to be considered successful after having failed
572
successThreshold: 1
573
readinessProbe:
574
## @param updater.readinessProbe.enabled Enable readiness probe
575
enabled: true
576
## @param updater.readinessProbe.initialDelaySeconds Delay before the readiness probe is initiated
577
initialDelaySeconds: 0
578
## @param updater.readinessProbe.periodSeconds How often to perform the readiness probe
579
periodSeconds: 10
580
## @param updater.readinessProbe.timeoutSeconds When the readiness probe times out
581
timeoutSeconds: 1
582
## @param updater.readinessProbe.failureThreshold Minimum consecutive failures for the readiness probe to be considered failed after having succeeded
583
failureThreshold: 3
584
## @param updater.readinessProbe.successThreshold Minimum consecutive successes for the readiness probe to be considered successful after having failed
585
successThreshold: 1
586
startupProbe:
587
## @param updater.startupProbe.enabled Enable startup probe
588
enabled: false
589
## @param updater.startupProbe.initialDelaySeconds Delay before the startup probe is initiated
590
initialDelaySeconds: 0
591
## @param updater.startupProbe.periodSeconds How often to perform the startup probe
592
periodSeconds: 10
593
## @param updater.startupProbe.timeoutSeconds When the startup probe times out
594
timeoutSeconds: 1
595
## @param updater.startupProbe.failureThreshold Minimum consecutive failures for the startup probe to be considered failed after having succeeded
596
failureThreshold: 3
597
## @param updater.startupProbe.successThreshold Minimum consecutive successes for the startup probe to be considered successful after having failed
598
successThreshold: 1
599
## @param updater.resources CPU/Memory resource requests/limits
600
resources: {}
601
# requests:
602
# cpu: 50m
603
# memory: 512Mi
604
# limits:
605
# cpu: 200m
606
# memory: 1024Mi
607
608
## @param updater.nodeSelector Node labels for pod assignment
609
nodeSelector: {}
610
## @param updater.tolerations Tolerations for pod assignment
611
tolerations: []
612
## @param updater.affinity Map of node/pod affinities
613
affinity: {}
614
## @extra updater.extraArgs [object] Additional container arguments
615
## @param updater.extraArgs.v Number for the log level verbosity
616
extraArgs:
617
# evict-after-oom-threshold: 10m0s
618
# eviction-rate-burst: 1
619
# eviction-rate-limit: -1
620
# eviction-tolerance: 0.5
621
# ignored-vpa-object-namespaces: ""
622
# in-recommendation-bounds-eviction-lifetime-threshold: 12h0m0s
623
# kube-api-burst: 100
624
# kube-api-qps: 50
625
# leader-elect: false
626
# leader-elect-lease-duration: 15s
627
# leader-elect-renew-deadline: 10s
628
# leader-elect-resource-lock: leases
629
# leader-elect-resource-name: vpa-updater
630
# leader-elect-resource-namespace: kube-system
631
# leader-elect-retry-period: 2s
632
# min-replicas: 2
633
# pod-update-threshold: 0.1
634
# updater-interval: 1m0s
635
# use-admission-controller-status: true
636
v: 2
637
# vpa-object-namespace: ""
638
## @param updater.extraEnvVars Additional container environment variables
639
extraEnvVars: []
640
# - name: MY-NAME
641
# value: "MY-VALUE"
642
643
## @param updater.extraEnvVarsCM Name of existing ConfigMap containing additional container environment variables
644
extraEnvVarsCM:
645
## @param updater.extraEnvVarsSecret Name of existing Secret containing additional container environment variables
646
extraEnvVarsSecret:
647
## @param updater.extraVolumes Optionally specify extra list of additional volumes
648
extraVolumes: []
649
## @param updater.extraVolumeMounts Optionally specify extra list of additional volumeMounts
650
extraVolumeMounts: []
651
metrics:
652
service:
653
## @param updater.metrics.service.annotations Metrics service annotations
654
annotations: {}
655
## @param updater.metrics.service.type Metrics service type
656
type: ClusterIP
657
## @param updater.metrics.service.clusterIP Metrics static cluster IP address or None for headless service when service type is ClusterIP
658
clusterIP:
659
# clusterIP: 10.43.0.100
660
661
## @param updater.metrics.service.ipFamilyPolicy Metrics service IP family policy
662
ipFamilyPolicy: ""
663
## @param updater.metrics.service.ipFamilies Metrics service IP families
664
ipFamilies: []
665
ports:
666
## @param updater.metrics.service.ports.metrics Metrics service port for Metrics
667
metrics: 8943
668
serviceMonitor:
669
## @param updater.metrics.serviceMonitor.enabled Specifies whether a service monitor should be created
670
enabled: false
671
## @param updater.metrics.serviceMonitor.namespace Namespace in which to create the service monitor
672
namespace: ""
673
## @param updater.metrics.serviceMonitor.annotations Service monitor annotations
674
annotations: {}
675
## @param updater.metrics.serviceMonitor.labels Additional service monitor labels
676
labels: {}
677
## @param updater.metrics.serviceMonitor.jobLabel The name of the label on the target service to use as the job name in Prometheus
678
jobLabel: ""
679
## @param updater.metrics.serviceMonitor.honorLabels Whether to choose the metric’s labels on collisions with target labels
680
honorLabels: false
681
## @param updater.metrics.serviceMonitor.interval Interval at which metrics should be scraped
682
interval: ""
683
## @param updater.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended
684
scrapeTimeout: ""
685
## @param updater.metrics.serviceMonitor.metricRelabelings Specify additional relabeling of metrics
686
metricRelabelings: []
687
## @param updater.metrics.serviceMonitor.relabelings Specify general relabeling
688
relabelings: []
689
## @section CRDs parameters
690
crds:
691
## @param crds.enabled Enable CRDs
692
enabled: true
693
image:
694
## @param crds.image.registry Image registry
695
registry: cgr.dev
696
## @param crds.image.repository Image repository
697
repository: chainguard-private/kubectl
698
## @param crds.image.tag Image tag
699
tag: latest
700
## @param crds.image.digest Image digest
701
digest: sha256:a56de917c0c555cd0bf7fccdd953ef26b87276392963b9562a483ed67e373901
702
## @param crds.image.pullPolicy Image pull policy
703
pullPolicy: IfNotPresent
704
## @param crds.podAnnotations Additional pod annotations
705
podAnnotations: {}
706
## @param crds.podLabels Additional pod labels
707
podLabels: {}
708
## @extra crds.podSecurityContext Pod security context
709
## @param crds.podSecurityContext.seccompProfile.type Set pod's Security Context seccomp profile
710
podSecurityContext:
711
seccompProfile:
712
type: RuntimeDefault
713
## @extra crds.securityContext Container security context
714
## @param crds.securityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
715
## @param crds.securityContext.capabilities.drop List of capabilities to be dropped
716
## @param crds.securityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
717
## @param crds.securityContext.runAsNonRoot Whether the container must run as a non-root user
718
## @param crds.securityContext.runAsUser The UID to run the entrypoint of the container process
719
## @param crds.securityContext.runAsGroup The GID to run the entrypoint of the container process
720
securityContext:
721
allowPrivilegeEscalation: false
722
capabilities:
723
drop:
724
- ALL
725
readOnlyRootFilesystem: true
726
runAsNonRoot: true
727
runAsUser: 65534
728
runAsGroup: 65534
729
## @param crds.resources CPU/Memory resource requests/limits
730
resources: {}
731
# requests:
732
# cpu: 100m
733
# memory: 128Mi
734
# limits:
735
# cpu: 100m
736
# memory: 128Mi
737
738
## @param crds.nodeSelector Node labels for pod assignment
739
nodeSelector: {}
740
## @param crds.tolerations Tolerations for pod assignment
741
tolerations: []
742
## @param crds.affinity Map of node/pod affinities
743
affinity: {}
744
## @section Tests parameters
745
tests:
746
image:
747
## @param tests.image.registry Image registry
748
registry: ghcr.io
749
## @param tests.image.repository Image repository
750
repository: cowboysysop/pytest
751
## @param tests.image.tag Image tag
752
tag: 1.2.0
753
## @param tests.image.digest Image digest
754
digest: ""
755
## @param tests.image.pullPolicy Image pull policy
756
pullPolicy: IfNotPresent
757
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.