Files
kyverno-2026-example/01-introduction/02-installation/values-production.yaml
T
2026-04-08 20:22:14 +07:00

74 lines
1.4 KiB
YAML

# values-production.yaml
# Production-ready конфигурация с HA и мониторингом
replicaCount: 3
admissionController:
replicas: 3
podDisruptionBudget:
enabled: true
minAvailable: 2
resources:
limits:
cpu: 1000m
memory: 512Mi
requests:
cpu: 100m
memory: 128Mi
# Распределение по разным нодам
topologySpreadConstraints:
- maxSkew: 1
topologyKey: kubernetes.io/hostname
whenUnsatisfiable: DoNotSchedule
labelSelector:
matchLabels:
app.kubernetes.io/component: admission-controller
# Метрики для Prometheus Operator
serviceMonitor:
enabled: true
metricsService:
create: true
port: 8000
extraArgs:
- --v=2
- --loggingFormat=json
backgroundController:
replicas: 2
resources:
limits:
cpu: 500m
memory: 256Mi
requests:
cpu: 100m
memory: 128Mi
extraArgs:
- --v=2
- --loggingFormat=json
reportsController:
replicas: 2
resources:
limits:
cpu: 200m
memory: 128Mi
extraArgs:
- --v=2
cleanupController:
replicas: 2
config:
webhooks:
# Если Kyverno не ответил за 10 секунд — API Server применяет failurePolicy
timeoutSeconds: 10
# Автоматическая очистка webhook-конфигураций при удалении Kyverno
webhooksCleanup:
enabled: true