cert-manager helm release

cert-manager helm

cert-manager is a certificate management controller for Kubernetes. It automates the management and issuance of TLS certificates from various issuing sources. It will ensure certificates are valid and up to date periodically, and attempt to renew certificates at an appropriate time before expiry.

Install

Install with:

helm repo add jetstack https://charts.jetstack.io/
helm install cert-manager jetstack/cert-manager -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (5 out of 173)

Name	Repo	Stars	Version	Timestamp
cert-manager	rafaribe/home-ops	71	v1.18.1	3 days ago
cert-manager	Diaoul/home-ops	74	v1.18.1	5 days ago
cert-manager	qjoly/GitOps	64	v1.18.1	6 days ago
cert-manager	angelnu/k8s-gitops	171	v1.18.1	6 days ago
cert-manager	coolguy1771/home-ops	71	v1.18.1	6 days ago

Name

Repo

Stars

Version

Timestamp

cert-manager

rafaribe/home-ops

v1.18.1

3 days ago

cert-manager

Diaoul/home-ops

v1.18.1

5 days ago

cert-manager

qjoly/GitOps

v1.18.1

6 days ago

cert-manager

angelnu/k8s-gitops

171

v1.18.1

6 days ago

cert-manager

coolguy1771/home-ops

v1.18.1

6 days ago

Values

See the most popular values for this chart:

Key	Types
prometheus.enabled (104) `true`	boolean, string
prometheus.servicemonitor.enabled (104) `true`	boolean, string
prometheus.servicemonitor.prometheusInstance (41) `monitoring`	string
prometheus.servicemonitor.endpointAdditionalProperties.relabelings[].replacement (2)	string
prometheus.servicemonitor.endpointAdditionalProperties.relabelings[].sourceLabels[] (2)	string
prometheus.servicemonitor.endpointAdditionalProperties.relabelings[].targetLabel (2)	string
prometheus.servicemonitor.endpointAdditionalProperties.relabelings[].action (1)	string
prometheus.servicemonitor.endpointAdditionalProperties.relabelings[].regex (1)	string
prometheus.servicemonitor.honorLabels (2)	boolean
prometheus.servicemonitor.scrapeTimeout (2)	string
prometheus.servicemonitor.interval (1)	string
prometheus.servicemonitor.namespace (1)	string
prometheus.servicemonitor.path (1)	string
prometheus.servicemonitor.targetPort (1)	number
prometheus.podmonitor.enabled (3) `true`	boolean
prometheus.podmonitor.prometheusInstance (2)	string
installCRDs (100) `true`	boolean
podDnsConfig.nameservers[] (77) `- "1.1.1.1" - "9.9.9.9"`	string
podDnsPolicy (73) `None`	string
dns01RecursiveNameservers (66) `https://1.1.1.1:443/dns-query,https://1.0.0.1:443/dns-query`	string
dns01RecursiveNameserversOnly (66) `true`	boolean
extraArgs[] (66) `- --dns01-recursive-nameservers=1.1.1.1:53,9.9.9.9:53 - --dns01-recursive-nameservers-only`	string
crds.enabled (43) `true`	boolean
crds.keep (6) `true`	boolean
replicaCount (39) `1`	number
cainjector.replicaCount (25) `1`	number
cainjector.resources.requests.cpu (5) `15m`	string
cainjector.resources.requests.memory (5)	string
cainjector.resources.requests.ephemeral-storage (1)	string
cainjector.resources.limits.memory (4)	string
cainjector.resources.limits.cpu (1)	string
cainjector.resources.limits.ephemeral-storage (1)	string
cainjector.tolerations[].key (3)	string
cainjector.tolerations[].effect (2)	string
cainjector.tolerations[].operator (2)	string
cainjector.extraEnv[].name (2)	string
cainjector.extraEnv[].value (2)	string
cainjector.podDisruptionBudget.enabled (2)	boolean
cainjector.podDisruptionBudget.minAvailable (2)	number
cainjector.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)	string
cainjector.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)	string
cainjector.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
cainjector.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1)	string
cainjector.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)	number
cainjector.automountServiceAccountToken (1)	boolean
cainjector.extraArgs[] (1)	string
cainjector.featureGates (1)	string
cainjector.image.pullPolicy (1)	string
cainjector.podLabels."egress.home.arpa/apiserver" (1)	string
cainjector.podLabels."egress.home.arpa/kubedns" (1)	string
cainjector.podLabels."policy.gabe565.com/egress-kubeapi" (1)	string
cainjector.serviceAccount.automountServiceAccountToken (1)	boolean
cainjector.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (1)	string
cainjector.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
cainjector.topologySpreadConstraints[].maxSkew (1)	number
cainjector.topologySpreadConstraints[].topologyKey (1)	string
cainjector.topologySpreadConstraints[].whenUnsatisfiable (1)	string
cainjector.volumeMounts[].mountPath (1)	string
cainjector.volumeMounts[].name (1)	string
cainjector.volumeMounts[].readOnly (1)	boolean
cainjector.volumes[].name (1)	string
cainjector.volumes[].projected.defaultMode (1)	number
cainjector.volumes[].projected.sources[].configMap.items[].key (1)	string
cainjector.volumes[].projected.sources[].configMap.items[].path (1)	string
cainjector.volumes[].projected.sources[].configMap.name (1)	string
cainjector.volumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)	string
cainjector.volumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)	string
cainjector.volumes[].projected.sources[].downwardAPI.items[].path (1)	string
cainjector.volumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)	number
cainjector.volumes[].projected.sources[].serviceAccountToken.path (1)	string
webhook.replicaCount (16) `3`	number
webhook.enabled (11) `true`	boolean
webhook.resources.requests.cpu (6) `10m`	string
webhook.resources.requests.memory (6)	string
webhook.resources.requests.ephemeral-storage (1)	string
webhook.resources.limits.memory (5)	string
webhook.resources.limits.cpu (2)	string
webhook.resources.limits.ephemeral-storage (1)	string
webhook.extraArgs[] (3)	string
webhook.tolerations[].key (3)	string
webhook.tolerations[].effect (2)	string
webhook.tolerations[].operator (2)	string
webhook.extraEnv[].name (2)	string
webhook.extraEnv[].value (2)	string
webhook.podDisruptionBudget.enabled (2)	boolean
webhook.podDisruptionBudget.minAvailable (2)	number
webhook.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)	string
webhook.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)	string
webhook.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
webhook.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1)	string
webhook.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)	number
webhook.automountServiceAccountToken (1)	boolean
webhook.image.pullPolicy (1)	string
webhook.podLabels."policy.gabe565.com/egress-kubeapi" (1)	string
webhook.serviceAccount.automountServiceAccountToken (1)	boolean
webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (1)	string
webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
webhook.topologySpreadConstraints[].maxSkew (1)	number
webhook.topologySpreadConstraints[].topologyKey (1)	string
webhook.topologySpreadConstraints[].whenUnsatisfiable (1)	string
webhook.volumeMounts[].mountPath (1)	string
webhook.volumeMounts[].name (1)	string
webhook.volumeMounts[].readOnly (1)	boolean
webhook.volumes[].name (1)	string
webhook.volumes[].projected.defaultMode (1)	number
webhook.volumes[].projected.sources[].configMap.items[].key (1)	string
webhook.volumes[].projected.sources[].configMap.items[].path (1)	string
webhook.volumes[].projected.sources[].configMap.name (1)	string
webhook.volumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)	string
webhook.volumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)	string
webhook.volumes[].projected.sources[].downwardAPI.items[].path (1)	string
webhook.volumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)	number
webhook.volumes[].projected.sources[].serviceAccountToken.path (1)	string
resources.requests.cpu (8) `10m`	string
resources.requests.memory (8)	string
resources.requests.ephemeral-storage (1)	string
resources.limits.memory (7)	string
resources.limits.cpu (3)	string
resources.limits.ephemeral-storage (1)	string
ingressShim.defaultIssuerKind (7) `ClusterIssuer`	string
ingressShim.defaultIssuerName (7) `letsencrypt-production`	string
ingressShim.defaultIssuerGroup (5) `cert-manager.io`	string
enableCertificateOwnerRef (4) `true`	boolean
extraEnv[].name (4)	string
extraEnv[].value (4)	string
podDisruptionBudget.enabled (4) `true`	boolean
podDisruptionBudget.minAvailable (2)	number
tolerations[].key (4) `node-role.kubernetes.io/control-plane`	string
tolerations[].effect (3) `NoSchedule`	string
tolerations[].operator (3) `Exists`	string
featureGates (3)	string
affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (2)	string
affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (2)	string
affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1)	string
affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)	number
global.leaderElection.namespace (2)	string
global.priorityClassName (2)	string
global.rbac.disableHTTPChallengesRole (2)	boolean
global.revisionHistoryLimit (2)	number
global.nodeSelector."node-role.kubernetes.io/control-plane" (1)	string
image.tag (2)	string
image.pullPolicy (1)	string
image.repository (1)	string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (2)	string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (2)	string
topologySpreadConstraints[].maxSkew (2)	number
topologySpreadConstraints[].topologyKey (2)	string
topologySpreadConstraints[].whenUnsatisfiable (2)	string
volumeMounts[].mountPath (2)	string
volumeMounts[].name (2)	string
volumeMounts[].readOnly (2)	boolean
volumes[].name (2)	string
volumes[].projected.defaultMode (1)	number
volumes[].projected.sources[].configMap.items[].key (1)	string
volumes[].projected.sources[].configMap.items[].path (1)	string
volumes[].projected.sources[].configMap.name (1)	string
volumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)	string
volumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)	string
volumes[].projected.sources[].downwardAPI.items[].path (1)	string
volumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)	number
volumes[].projected.sources[].serviceAccountToken.path (1)	string
volumes[].secret.secretName (1)	string
automountServiceAccountToken (1)	boolean
clusterResourceNamespace (1)	string
config.featureGates.ACMEHTTP01IngressPathTypeExact (1)	boolean
disableAutoApproval (1)	boolean
fullnameOverride (1)	string
podLabels."policy.gabe565.com/egress-kubeapi" (1)	string
podLabels."policy.gabe565.com/egress-namespace" (1)	string
podLabels."policy.gabe565.com/egress-world" (1)	string
podLabels."policy.gabe565.com/ingress-namespace" (1)	string
securityContext.runAsNonRoot (1)	boolean
serviceAccount.automountServiceAccountToken (1)	boolean
startupapicheck.automountServiceAccountToken (1)	boolean
startupapicheck.serviceAccount.automountServiceAccountToken (1)	boolean
startupapicheck.tolerations[].effect (1)	string
startupapicheck.tolerations[].key (1)	string
startupapicheck.volumeMounts[].mountPath (1)	string
startupapicheck.volumeMounts[].name (1)	string
startupapicheck.volumeMounts[].readOnly (1)	boolean
startupapicheck.volumes[].name (1)	string
startupapicheck.volumes[].projected.defaultMode (1)	number
startupapicheck.volumes[].projected.sources[].configMap.items[].key (1)	string
startupapicheck.volumes[].projected.sources[].configMap.items[].path (1)	string
startupapicheck.volumes[].projected.sources[].configMap.name (1)	string
startupapicheck.volumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)	string
startupapicheck.volumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)	string
startupapicheck.volumes[].projected.sources[].downwardAPI.items[].path (1)	string
startupapicheck.volumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)	number
startupapicheck.volumes[].projected.sources[].serviceAccountToken.path (1)	string

Key

Types

prometheus.enabled (104)

true

boolean, string

prometheus.servicemonitor.enabled (104)

true

boolean, string

prometheus.servicemonitor.prometheusInstance (41)

monitoring

string

prometheus.servicemonitor.endpointAdditionalProperties.relabelings[].replacement (2)

string

prometheus.servicemonitor.endpointAdditionalProperties.relabelings[].sourceLabels[] (2)

string

prometheus.servicemonitor.endpointAdditionalProperties.relabelings[].targetLabel (2)

string

prometheus.servicemonitor.endpointAdditionalProperties.relabelings[].action (1)

string

prometheus.servicemonitor.endpointAdditionalProperties.relabelings[].regex (1)

string

prometheus.servicemonitor.honorLabels (2)

boolean

prometheus.servicemonitor.scrapeTimeout (2)

string

prometheus.servicemonitor.interval (1)

string

prometheus.servicemonitor.namespace (1)

string

prometheus.servicemonitor.path (1)

string

prometheus.servicemonitor.targetPort (1)

number

prometheus.podmonitor.enabled (3)

true

boolean

prometheus.podmonitor.prometheusInstance (2)

string

installCRDs (100)

true

boolean

podDnsConfig.nameservers[] (77)

- "1.1.1.1"
- "9.9.9.9"

string

podDnsPolicy (73)

None

string

dns01RecursiveNameservers (66)

https://1.1.1.1:443/dns-query,https://1.0.0.1:443/dns-query

string

dns01RecursiveNameserversOnly (66)

true

boolean

extraArgs[] (66)

- --dns01-recursive-nameservers=1.1.1.1:53,9.9.9.9:53
- --dns01-recursive-nameservers-only

string

crds.enabled (43)

true

boolean

crds.keep (6)

true

boolean

replicaCount (39)

number

cainjector.replicaCount (25)

number

cainjector.resources.requests.cpu (5)

15m

string

cainjector.resources.requests.memory (5)

string

cainjector.resources.requests.ephemeral-storage (1)

string

cainjector.resources.limits.memory (4)

string

cainjector.resources.limits.cpu (1)

string

cainjector.resources.limits.ephemeral-storage (1)

string

cainjector.tolerations[].key (3)

string

cainjector.tolerations[].effect (2)

string

cainjector.tolerations[].operator (2)

string

cainjector.extraEnv[].name (2)

string

cainjector.extraEnv[].value (2)

string

cainjector.podDisruptionBudget.enabled (2)

boolean

cainjector.podDisruptionBudget.minAvailable (2)

number

cainjector.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)

string

cainjector.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)

string

cainjector.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."app.kubernetes.io/instance" (1)

string

cainjector.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1)

string

cainjector.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)

number

cainjector.automountServiceAccountToken (1)

boolean

cainjector.extraArgs[] (1)

string

cainjector.featureGates (1)

string

cainjector.image.pullPolicy (1)

string

cainjector.podLabels."egress.home.arpa/apiserver" (1)

string

cainjector.podLabels."egress.home.arpa/kubedns" (1)

string

cainjector.podLabels."policy.gabe565.com/egress-kubeapi" (1)

string

cainjector.serviceAccount.automountServiceAccountToken (1)

boolean

cainjector.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (1)

string

cainjector.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)

string

cainjector.topologySpreadConstraints[].maxSkew (1)

number

cainjector.topologySpreadConstraints[].topologyKey (1)

string

cainjector.topologySpreadConstraints[].whenUnsatisfiable (1)

string

cainjector.volumeMounts[].mountPath (1)

string

cainjector.volumeMounts[].name (1)

string

cainjector.volumeMounts[].readOnly (1)

boolean

cainjector.volumes[].name (1)

string

cainjector.volumes[].projected.defaultMode (1)

number

cainjector.volumes[].projected.sources[].configMap.items[].key (1)

string

cainjector.volumes[].projected.sources[].configMap.items[].path (1)

string

cainjector.volumes[].projected.sources[].configMap.name (1)

string

cainjector.volumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)

string

cainjector.volumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)

string

cainjector.volumes[].projected.sources[].downwardAPI.items[].path (1)

string

cainjector.volumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)

number

cainjector.volumes[].projected.sources[].serviceAccountToken.path (1)

string

webhook.replicaCount (16)

number

webhook.enabled (11)

true

boolean

webhook.resources.requests.cpu (6)

10m

string

webhook.resources.requests.memory (6)

string

webhook.resources.requests.ephemeral-storage (1)

string

webhook.resources.limits.memory (5)

string

webhook.resources.limits.cpu (2)

string

webhook.resources.limits.ephemeral-storage (1)

string

webhook.extraArgs[] (3)

string

webhook.tolerations[].key (3)

string

webhook.tolerations[].effect (2)

string

webhook.tolerations[].operator (2)

string

webhook.extraEnv[].name (2)

string

webhook.extraEnv[].value (2)

string

webhook.podDisruptionBudget.enabled (2)

boolean

webhook.podDisruptionBudget.minAvailable (2)

number

webhook.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)

string

webhook.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)

string

webhook.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."app.kubernetes.io/instance" (1)

string

webhook.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1)

string

webhook.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)

number

webhook.automountServiceAccountToken (1)

boolean

webhook.image.pullPolicy (1)

string

webhook.podLabels."policy.gabe565.com/egress-kubeapi" (1)

string

webhook.serviceAccount.automountServiceAccountToken (1)

boolean

webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (1)

string

webhook.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)

string

webhook.topologySpreadConstraints[].maxSkew (1)

number

webhook.topologySpreadConstraints[].topologyKey (1)

string

webhook.topologySpreadConstraints[].whenUnsatisfiable (1)

string

webhook.volumeMounts[].mountPath (1)

string

webhook.volumeMounts[].name (1)

string

webhook.volumeMounts[].readOnly (1)

boolean

webhook.volumes[].name (1)

string

webhook.volumes[].projected.defaultMode (1)

number

webhook.volumes[].projected.sources[].configMap.items[].key (1)

string

webhook.volumes[].projected.sources[].configMap.items[].path (1)

string

webhook.volumes[].projected.sources[].configMap.name (1)

string

webhook.volumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)

string

webhook.volumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)

string

webhook.volumes[].projected.sources[].downwardAPI.items[].path (1)

string

webhook.volumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)

number

webhook.volumes[].projected.sources[].serviceAccountToken.path (1)

string

resources.requests.cpu (8)

10m

string

resources.requests.memory (8)

string

resources.requests.ephemeral-storage (1)

string

resources.limits.memory (7)

string

resources.limits.cpu (3)

string

resources.limits.ephemeral-storage (1)

string

ingressShim.defaultIssuerKind (7)

ClusterIssuer

string

ingressShim.defaultIssuerName (7)

letsencrypt-production

string

ingressShim.defaultIssuerGroup (5)

cert-manager.io

string

enableCertificateOwnerRef (4)

true

boolean

extraEnv[].name (4)

string

extraEnv[].value (4)

string

podDisruptionBudget.enabled (4)

true

boolean

podDisruptionBudget.minAvailable (2)

number

tolerations[].key (4)

node-role.kubernetes.io/control-plane

string

tolerations[].effect (3)

NoSchedule

string

tolerations[].operator (3)

Exists

string

featureGates (3)

string

affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (2)

string

affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (2)

string

affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."app.kubernetes.io/instance" (1)

string

affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1)

string

affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)

number

global.leaderElection.namespace (2)

string

global.priorityClassName (2)

string

global.rbac.disableHTTPChallengesRole (2)

boolean

global.revisionHistoryLimit (2)

number

global.nodeSelector."node-role.kubernetes.io/control-plane" (1)

string

image.tag (2)

string

image.pullPolicy (1)

string

image.repository (1)

string

topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (2)

string

topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (2)

string

topologySpreadConstraints[].maxSkew (2)

number

topologySpreadConstraints[].topologyKey (2)

string

topologySpreadConstraints[].whenUnsatisfiable (2)

string

volumeMounts[].mountPath (2)

string

volumeMounts[].name (2)

string

volumeMounts[].readOnly (2)

boolean

volumes[].name (2)

string

volumes[].projected.defaultMode (1)

number

volumes[].projected.sources[].configMap.items[].key (1)

string

volumes[].projected.sources[].configMap.items[].path (1)

string

volumes[].projected.sources[].configMap.name (1)

string

volumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)

string

volumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)

string

volumes[].projected.sources[].downwardAPI.items[].path (1)

string

volumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)

number

volumes[].projected.sources[].serviceAccountToken.path (1)

string

volumes[].secret.secretName (1)

string

automountServiceAccountToken (1)

boolean

clusterResourceNamespace (1)

string

config.featureGates.ACMEHTTP01IngressPathTypeExact (1)

boolean

disableAutoApproval (1)

boolean

fullnameOverride (1)

string

podLabels."policy.gabe565.com/egress-kubeapi" (1)

string

podLabels."policy.gabe565.com/egress-namespace" (1)

string

podLabels."policy.gabe565.com/egress-world" (1)

string

podLabels."policy.gabe565.com/ingress-namespace" (1)

string

securityContext.runAsNonRoot (1)

boolean

serviceAccount.automountServiceAccountToken (1)

boolean

startupapicheck.automountServiceAccountToken (1)

boolean

startupapicheck.serviceAccount.automountServiceAccountToken (1)

boolean

startupapicheck.tolerations[].effect (1)

string

startupapicheck.tolerations[].key (1)

string

startupapicheck.volumeMounts[].mountPath (1)

string

startupapicheck.volumeMounts[].name (1)

string

startupapicheck.volumeMounts[].readOnly (1)

boolean

startupapicheck.volumes[].name (1)

string

startupapicheck.volumes[].projected.defaultMode (1)

number

startupapicheck.volumes[].projected.sources[].configMap.items[].key (1)

string

startupapicheck.volumes[].projected.sources[].configMap.items[].path (1)

string

startupapicheck.volumes[].projected.sources[].configMap.name (1)

string

startupapicheck.volumes[].projected.sources[].downwardAPI.items[].fieldRef.apiVersion (1)

string

startupapicheck.volumes[].projected.sources[].downwardAPI.items[].fieldRef.fieldPath (1)

string

startupapicheck.volumes[].projected.sources[].downwardAPI.items[].path (1)

string

startupapicheck.volumes[].projected.sources[].serviceAccountToken.expirationSeconds (1)

number

startupapicheck.volumes[].projected.sources[].serviceAccountToken.path (1)

string