diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 06dd9f9d0..15249a18a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -45,21 +45,3 @@ jobs: uses: azure/setup-helm@v4.2.0 with: version: v3.12.1 - - uses: actions/setup-python@v5 - with: - python-version: '3.10' - check-latest: true - - name: Lint chart - run: helm lint --strict helm/trino-gateway - - name: Create kind cluster - uses: helm/kind-action@v1.10.0 - with: - cluster_name: tgw - - name: load images - run: kind load docker-image --name tgw trino-gateway:$(cat ./trino-gateway-version.txt | tr -d '\n')-amd64 - - name: Run chart-testing (install) - run: helm install test helm/trino-gateway --set "image.repository=trino-gateway" --set "image.tag=$(cat ./trino-gateway-version.txt | tr -d '\n')-amd64" --set "limits.memory=100Mi" --set "limits.cpu=0" - - name: wait for deployment - #the deployment name is the name of the installation from the helm install command above, concatenated with the name from Chart.yaml - run: kubectl rollout status deployment test-trino-gateway - timeout-minutes: 2 diff --git a/docs/installation.md b/docs/installation.md index a79596d8a..6997a0609 100644 --- a/docs/installation.md +++ b/docs/installation.md @@ -204,8 +204,16 @@ java -XX:MinRAMPercentage=50 -XX:MaxRAMPercentage=80 \ ### Helm Helm manages the deployment of Kubernetes applications by templating Kubernetes -resources with a set of Helm charts. The Trino Gateway Helm chart consists -of the following components: +resources with a set of Helm charts. The Trino Gateway Helm chart is +available in the [Trino Helm chart project](https://github.com/trinodb/charts). + +Configure the charts repository as a Helm chart repository with the +following command: + +```shell +helm repo add trino https://trinodb.github.io/charts/ +``` +The Trino Gateway chart consists of the following components: * A `config` node for general configuration * `dataStoreSecret`, `backendStateSecret` and `authenticationSecret` for @@ -305,6 +313,9 @@ Standard Helm options such as `replicaCount`, `image`, `imagePullSecrets`, `service`, `ingress` and `resources` are supported. These are defined in `helm/values.yaml`. +More detail about the chart are available in the [values +reference documentation](https://github.com/trinodb/charts/blob/main/charts/gateway/README.md) + ### Health Checks Trino Gateway checks the health of each backend and **deactivates it if diff --git a/docs/release-notes.md b/docs/release-notes.md index ccc5c93ee..fd442ebc7 100644 --- a/docs/release-notes.md +++ b/docs/release-notes.md @@ -9,7 +9,7 @@ Artifacts: * Source code as [tar.gz](https://github.com/trinodb/trino-gateway/archive/refs/tags/12.tar.gz) or [zip](https://github.com/trinodb/trino-gateway/archive/refs/tags/12.zip) -* Helm chart `12.0.0` in `helm/trino-gateway` of the tagged source code +* Helm chart `0.12.0` in [the charts repository](https://github.com/trinodb/charts) Changes: diff --git a/helm/trino-gateway/.helmignore b/helm/trino-gateway/.helmignore deleted file mode 100644 index 0e8a0eb36..000000000 --- a/helm/trino-gateway/.helmignore +++ /dev/null @@ -1,23 +0,0 @@ -# Patterns to ignore when building packages. -# This supports shell glob matching, relative path matching, and -# negation (prefixed with !). Only one pattern per line. -.DS_Store -# Common VCS dirs -.git/ -.gitignore -.bzr/ -.bzrignore -.hg/ -.hgignore -.svn/ -# Common backup files -*.swp -*.bak -*.tmp -*.orig -*~ -# Various IDEs -.project -.idea/ -*.tmproj -.vscode/ diff --git a/helm/trino-gateway/Chart.yaml b/helm/trino-gateway/Chart.yaml deleted file mode 100644 index 67a629364..000000000 --- a/helm/trino-gateway/Chart.yaml +++ /dev/null @@ -1,8 +0,0 @@ -apiVersion: v2 -name: trino-gateway -description: A Helm chart for Trino Gateway -type: application -# Trino Gateway Helm chart version. Should be appVersion with .0.0 appended. -version: "12.0.0" -# Trino Gateway version -appVersion: "12" diff --git a/helm/trino-gateway/templates/NOTES.txt b/helm/trino-gateway/templates/NOTES.txt deleted file mode 100644 index 660b90f92..000000000 --- a/helm/trino-gateway/templates/NOTES.txt +++ /dev/null @@ -1,28 +0,0 @@ -You can get the Trino Gateway endpoints by running these commands: -{{- if .Values.ingress.enabled }} -{{- range $host := .Values.ingress.hosts }} - {{- range .paths }} - http{{ if $.Values.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }} - {{- end }} -{{- end }} -{{- else if contains "NodePort" .Values.service.type }} - export REQUEST_NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath='{.spec.ports[?(@.name == "request")].nodePort}' services {{ include "trino-gateway.fullname" . }}) - export APP_NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath='{.spec.ports[?(@.name == "app")].nodePort}' services {{ include "trino-gateway.fullname" . }}) - export ADMIN_NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath='{.spec.ports[?(@.name == "admin")].nodePort}' services {{ include "trino-gateway.fullname" . }}) - export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath='{.items[0].status.addresses[0].address}') - echo http://$NODE_IP:$REQUEST_NODE_PORT -{{- else if contains "LoadBalancer" .Values.service.type }} - NOTE: It may take a few minutes for the LoadBalancer IP to be available. - You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "trino-gateway.fullname" . }}' - export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "trino-gateway.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}") - echo http://$SERVICE_IP:{{ .Values.service.port }} -{{- else if contains "ClusterIP" .Values.service.type }} - export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "trino-gateway.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}") - export REQUEST_PORT=$(kubectl get pod --namespace test $POD_NAME -o jsonpath='{.spec.containers[0].ports[?(@.name == "request")].containerPort}') - export APP_PORT=$(kubectl get pod --namespace test $POD_NAME -o jsonpath='{.spec.containers[0].ports[?(@.name == "app")].containerPort}') - export ADMIN_PORT=$(kubectl get pod --namespace test $POD_NAME -o jsonpath='{.spec.containers[0].ports[?(@.name == "admin")].containerPort}') - echo "Visit http://127.0.0.1:8080 to use your application" - kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$REQUEST_PORT -{{- end }} - -Happy Helming! diff --git a/helm/trino-gateway/templates/_helpers.tpl b/helm/trino-gateway/templates/_helpers.tpl deleted file mode 100644 index fcf24d7a7..000000000 --- a/helm/trino-gateway/templates/_helpers.tpl +++ /dev/null @@ -1,65 +0,0 @@ -{{/* -Expand the name of the chart. -*/}} -{{- define "trino-gateway.name" -}} -{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} -{{- end }} - -{{/* -Create a default fully qualified app name. -We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). -If release name contains chart name it will be used as a full name. -*/}} -{{- define "trino-gateway.fullname" -}} -{{- if .Values.fullnameOverride }} -{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} -{{- else }} -{{- $name := default .Chart.Name .Values.nameOverride }} -{{- if contains $name .Release.Name }} -{{- .Release.Name | trunc 63 | trimSuffix "-" }} -{{- else }} -{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} -{{- end }} -{{- end }} -{{- end }} - -{{/* -Create chart name and version as used by the chart label. -*/}} -{{- define "trino-gateway.chart" -}} -{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} -{{- end }} - -{{/* -Common labels -*/}} -{{- define "trino-gateway.labels" -}} -helm.sh/chart: {{ include "trino-gateway.chart" . }} -{{ include "trino-gateway.selectorLabels" . }} -{{- if .Chart.AppVersion }} -app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} -{{- end }} -app.kubernetes.io/managed-by: {{ .Release.Service }} -{{- if .Values.commonLabels }} -{{ tpl (toYaml .Values.commonLabels) . }} -{{- end }} -{{- end }} - -{{/* -Selector labels -*/}} -{{- define "trino-gateway.selectorLabels" -}} -app.kubernetes.io/name: {{ include "trino-gateway.name" . }} -app.kubernetes.io/instance: {{ .Release.Name }} -{{- end }} - -{{/* -Create the name of the service account to use -*/}} -{{- define "trino-gateway.serviceAccountName" -}} -{{- if .Values.serviceAccount.create }} -{{- default (include "trino-gateway.fullname" .) .Values.serviceAccount.name }} -{{- else }} -{{- default "default" .Values.serviceAccount.name }} -{{- end }} -{{- end }} diff --git a/helm/trino-gateway/templates/deployment.yaml b/helm/trino-gateway/templates/deployment.yaml deleted file mode 100644 index c2412a6c5..000000000 --- a/helm/trino-gateway/templates/deployment.yaml +++ /dev/null @@ -1,96 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: {{ include "trino-gateway.fullname" . }} - labels: - {{- include "trino-gateway.labels" . | nindent 4 }} -spec: - {{- if not .Values.autoscaling.enabled }} - replicas: {{ .Values.replicaCount }} - {{- end }} - selector: - matchLabels: - {{- include "trino-gateway.selectorLabels" . | nindent 6 }} - template: - metadata: - annotations: - # Include the version of trino-gateway-configuration as an input to the - # deployment checksum. This causes pods to restart on helm update - # whether the chart `config` is updated or if one of the configuration - # secrets is updated. Helm template must be run with the - # --dry-run=server option to prevent a nil pointer. - checksum/config: {{ (coalesce (lookup "v1" "Secret" .Release.Namespace "trino-gateway-configuration").metadata (dict "resourceVersion" "0")).resourceVersion | sha256sum}} - {{- with .Values.podAnnotations }} - {{- toYaml . | nindent 8 }} - {{- end }} - labels: - {{- include "trino-gateway.labels" . | nindent 8 }} - {{- with .Values.podLabels }} - {{- toYaml . | nindent 8 }} - {{- end }} - spec: - {{- with .Values.imagePullSecrets }} - imagePullSecrets: - {{- toYaml . | nindent 8 }} - {{- end }} - serviceAccountName: {{ include "trino-gateway.serviceAccountName" . }} - securityContext: - {{- toYaml .Values.podSecurityContext | nindent 8 }} - containers: - - name: {{ .Chart.Name }} - securityContext: - {{- toYaml .Values.securityContext | nindent 12 }} - image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" - imagePullPolicy: {{ .Values.image.pullPolicy }} - command: - {{- toYaml .Values.command | nindent 12}} - ports: - - name: request - containerPort: {{ index .Values "config" "serverConfig" "http-server.http.port" }} - protocol: TCP - livenessProbe: - httpGet: - path: /trino-gateway - port: {{ index .Values "config" "serverConfig" "http-server.http.port" }} - initialDelaySeconds: {{ .Values.livenessProbe.initialDelaySeconds }} - periodSeconds: {{ .Values.livenessProbe.periodSeconds }} - failureThreshold: {{ .Values.livenessProbe.failureThreshold }} - timeoutSeconds: {{ .Values.livenessProbe.timeoutSeconds }} - readinessProbe: - httpGet: - path: /trino-gateway - port: {{ index .Values "config" "serverConfig" "http-server.http.port" }} - initialDelaySeconds: {{ .Values.readinessProbe.initialDelaySeconds }} - periodSeconds: {{ .Values.readinessProbe.periodSeconds }} - failureThreshold: {{ .Values.readinessProbe.failureThreshold }} - timeoutSeconds: {{ .Values.readinessProbe.timeoutSeconds }} - resources: - {{- toYaml .Values.resources | nindent 12 }} - volumeMounts: - - name: trino-gateway-configuration - mountPath: "/etc/gateway/config.yaml" - subPath: "config.yaml" - readOnly: true - {{- with .Values.volumeMounts }} - {{- toYaml . | nindent 12 }} - {{- end }} - volumes: - - name: trino-gateway-configuration - secret: - secretName: trino-gateway-configuration - optional: false - {{- with .Values.volumes }} - {{- toYaml . | nindent 8 }} - {{- end }} - {{- with .Values.nodeSelector }} - nodeSelector: - {{- toYaml . | nindent 8 }} - {{- end }} - {{- with .Values.affinity }} - affinity: - {{- toYaml . | nindent 8 }} - {{- end }} - {{- with .Values.tolerations }} - tolerations: - {{- toYaml . | nindent 8 }} - {{- end }} diff --git a/helm/trino-gateway/templates/hpa.yaml b/helm/trino-gateway/templates/hpa.yaml deleted file mode 100644 index ccc744020..000000000 --- a/helm/trino-gateway/templates/hpa.yaml +++ /dev/null @@ -1,32 +0,0 @@ -{{- if .Values.autoscaling.enabled }} -apiVersion: autoscaling/v2 -kind: HorizontalPodAutoscaler -metadata: - name: {{ include "trino-gateway.fullname" . }} - labels: - {{- include "trino-gateway.labels" . | nindent 4 }} -spec: - scaleTargetRef: - apiVersion: apps/v1 - kind: Deployment - name: {{ include "trino-gateway.fullname" . }} - minReplicas: {{ .Values.autoscaling.minReplicas }} - maxReplicas: {{ .Values.autoscaling.maxReplicas }} - metrics: - {{- if .Values.autoscaling.targetCPUUtilizationPercentage }} - - type: Resource - resource: - name: cpu - target: - type: Utilization - averageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }} - {{- end }} - {{- if .Values.autoscaling.targetMemoryUtilizationPercentage }} - - type: Resource - resource: - name: memory - target: - type: Utilization - averageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }} - {{- end }} -{{- end }} diff --git a/helm/trino-gateway/templates/ingress.yaml b/helm/trino-gateway/templates/ingress.yaml deleted file mode 100644 index ea8ca2e95..000000000 --- a/helm/trino-gateway/templates/ingress.yaml +++ /dev/null @@ -1,61 +0,0 @@ -{{- if .Values.ingress.enabled -}} -{{- $fullName := include "trino-gateway.fullname" . -}} -{{- $svcPort := .Values.service.port -}} -{{- if and .Values.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }} - {{- if not (hasKey .Values.ingress.annotations "kubernetes.io/ingress.class") }} - {{- $_ := set .Values.ingress.annotations "kubernetes.io/ingress.class" .Values.ingress.className}} - {{- end }} -{{- end }} -{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion -}} -apiVersion: networking.k8s.io/v1 -{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}} -apiVersion: networking.k8s.io/v1beta1 -{{- else -}} -apiVersion: extensions/v1beta1 -{{- end }} -kind: Ingress -metadata: - name: {{ $fullName }} - labels: - {{- include "trino-gateway.labels" . | nindent 4 }} - {{- with .Values.ingress.annotations }} - annotations: - {{- toYaml . | nindent 4 }} - {{- end }} -spec: - {{- if and .Values.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }} - ingressClassName: {{ .Values.ingress.className }} - {{- end }} - {{- if .Values.ingress.tls }} - tls: - {{- range .Values.ingress.tls }} - - hosts: - {{- range .hosts }} - - {{ . | quote }} - {{- end }} - secretName: {{ .secretName }} - {{- end }} - {{- end }} - rules: - {{- range .Values.ingress.hosts }} - - host: {{ .host | quote }} - http: - paths: - {{- range .paths }} - - path: {{ .path }} - {{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }} - pathType: {{ .pathType }} - {{- end }} - backend: - {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }} - service: - name: {{ $fullName }} - port: - number: {{ $svcPort }} - {{- else }} - serviceName: {{ $fullName }} - servicePort: {{ $svcPort }} - {{- end }} - {{- end }} - {{- end }} -{{- end }} diff --git a/helm/trino-gateway/templates/secrets.yaml b/helm/trino-gateway/templates/secrets.yaml deleted file mode 100644 index aab1d575d..000000000 --- a/helm/trino-gateway/templates/secrets.yaml +++ /dev/null @@ -1,22 +0,0 @@ -{{ $dataStoreDict := dict}} -{{ if .Values.dataStoreSecret.name }} -{{ $dataStoreDict = (index (lookup "v1" "Secret" .Release.Namespace .Values.dataStoreSecret.name).data .Values.dataStoreSecret.key) | b64dec | fromYaml }} -{{ end }} -{{ $backendStateDict := dict }} -{{ if .Values.backendStateSecret.name }} -{{ $backendStateDict = (index (lookup "v1" "Secret" .Release.Namespace .Values.backendStateSecret.name).data .Values.backendStateSecret.key) | b64dec | fromYaml }} -{{ end }} -{{ $authenticationDict := dict }} -{{ if .Values.authenticationSecret.name }} -# {{.Values.authenticationSecret.name }} # -# {{ index (lookup "v1" "Secret" .Release.Namespace .Values.authenticationSecret.name).data .Values.authenticationSecret.key }} # -{{ $authenticationDict = (index (lookup "v1" "Secret" .Release.Namespace .Values.authenticationSecret.name).data .Values.authenticationSecret.key) | b64dec | fromYaml }} -{{ end }} - -apiVersion: v1 -kind: Secret -metadata: - name: trino-gateway-configuration -type: "Opaque" -data: - config.yaml: "{{toYaml (merge .Values.config $authenticationDict $dataStoreDict $backendStateDict ) | b64enc}}" diff --git a/helm/trino-gateway/templates/service.yaml b/helm/trino-gateway/templates/service.yaml deleted file mode 100644 index 18fc59537..000000000 --- a/helm/trino-gateway/templates/service.yaml +++ /dev/null @@ -1,14 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: {{ include "trino-gateway.fullname" . }} - labels: - {{- include "trino-gateway.labels" . | nindent 4 }} -spec: - type: {{ .Values.service.type }} - ports: - - port: {{ index .Values "config" "serverConfig" "http-server.http.port" }} - protocol: TCP - name: request - selector: - {{- include "trino-gateway.selectorLabels" . | nindent 4 }} diff --git a/helm/trino-gateway/templates/serviceaccount.yaml b/helm/trino-gateway/templates/serviceaccount.yaml deleted file mode 100644 index 5c6ba208e..000000000 --- a/helm/trino-gateway/templates/serviceaccount.yaml +++ /dev/null @@ -1,13 +0,0 @@ -{{- if .Values.serviceAccount.create -}} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: {{ include "trino-gateway.serviceAccountName" . }} - labels: - {{- include "trino-gateway.labels" . | nindent 4 }} - {{- with .Values.serviceAccount.annotations }} - annotations: - {{- toYaml . | nindent 4 }} - {{- end }} -automountServiceAccountToken: {{ .Values.serviceAccount.automount }} -{{- end }} diff --git a/helm/trino-gateway/templates/tests/test-connection.yaml b/helm/trino-gateway/templates/tests/test-connection.yaml deleted file mode 100644 index cfad670fa..000000000 --- a/helm/trino-gateway/templates/tests/test-connection.yaml +++ /dev/null @@ -1,15 +0,0 @@ -apiVersion: v1 -kind: Pod -metadata: - name: "{{ include "trino-gateway.fullname" . }}-test-connection" - labels: - {{- include "trino-gateway.labels" . | nindent 4 }} - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: busybox - command: ['wget'] - args: ['{{ include "trino-gateway.fullname" . }}:{{ .Values.service.port }}'] - restartPolicy: Never diff --git a/helm/trino-gateway/values.yaml b/helm/trino-gateway/values.yaml deleted file mode 100644 index 7f1e80f06..000000000 --- a/helm/trino-gateway/values.yaml +++ /dev/null @@ -1,151 +0,0 @@ -replicaCount: 1 - -image: - repository: "trinodb/trino-gateway" - pullPolicy: IfNotPresent - # Override the image tag whose default is the chart appVersion. - #tag: "10-SNAPSHOT" - - # For local testing - #repository: "trino-gateway" - #pullPolicy: IfNotPresent - #tag: "8-SNAPSHOT" - -imagePullSecrets: [] - -# Provide configuration for the Trino Gateway dataStore in dataStoreSecret. This node can -# be left undefined if dataStore is defined under the config node. For production deployments -# sensitive values should be stored in a Secret -dataStoreSecret: - name: "" - key: "" - -# Provide configuration for the Trino Gateway backendState in backendStateSecret. This should -# be used with health check configurations that require backend credentials. This node can -# be left undefined if dataStore is defined under the config node. -backendStateSecret: - name: "" - key: "" - -# Provide configuration for the Trino Gateway authentication configuration in authenticationSecret. -# This node can be left undefined if dataStore is defined under the config node. -authenticationSecret: - name: "" - key: "" - -config: - serverConfig: - node.environment: test - http-server.http.port: 8080 - dataStore: - # The connection details for the backend database for Trino Gateway and Trino query history - jdbcUrl: jdbc:postgresql://localhost:5432/gateway - user: postgres - password: mysecretpassword - driver: org.postgresql.Driver - clusterStatsConfiguration: - monitorType: INFO_API - modules: - - io.trino.gateway.ha.module.HaGatewayProviderModule - - io.trino.gateway.ha.module.ClusterStateListenerModule - - io.trino.gateway.ha.module.ClusterStatsMonitorModule - managedApps: - - io.trino.gateway.ha.clustermonitor.ActiveClusterMonitor - -# Startup command for Trino Gateway process. Add additional Java options and other modifications as desired. -command: - - "java" - - "-XX:MinRAMPercentage=80.0" - - "-XX:MaxRAMPercentage=80.0" - - "-jar" - - "/usr/lib/trino/gateway-ha-jar-with-dependencies.jar" - - "/etc/gateway/config.yaml" - -service: - type: ClusterIP - port: 8080 - -ingress: - enabled: false - className: "" - annotations: {} - # kubernetes.io/ingress.class: nginx - # kubernetes.io/tls-acme: "true" - hosts: - - host: chart-example.local - paths: - - path: / - pathType: ImplementationSpecific - tls: [] - # - secretName: chart-example-tls - # hosts: - # - chart-example.local - -resources: - limits: - cpu: 2 - memory: 4Gi - requests: - cpu: 2 - memory: 4Gi - -autoscaling: - enabled: false - minReplicas: 1 - maxReplicas: 100 - targetCPUUtilizationPercentage: 80 - # targetMemoryUtilizationPercentage: 80 - -livenessProbe: - initialDelaySeconds: 30 - periodSeconds: 10 - failureThreshold: 3 - timeoutSeconds: 1 - scheme: HTTP - -readinessProbe: - initialDelaySeconds: 5 - periodSeconds: 5 - failureThreshold: 12 - timeoutSeconds: 1 - scheme: HTTP - -volumes: {} - -volumeMounts: {} - -nodeSelector: {} - -tolerations: [] - -affinity: {} - -# -- Labels that get applied to every resource's metadata -commonLabels: {} - # example: "some label" - -podAnnotations: {} - -podLabels: {} - -podSecurityContext: {} -# fsGroup: 2000 - -securityContext: {} - # capabilities: - # drop: - # - ALL - # readOnlyRootFilesystem: true - # runAsNonRoot: true -# runAsUser: 1000 - -serviceAccount: - # Specifies whether a service account should be created - create: true - # Automatically mount a ServiceAccount's API credentials? - automount: true - # Annotations to add to the service account - annotations: {} - # The name of the service account to use. - # If not set and create is true, a name is generated using the fullname template - name: ""