forked from github-mirrorer/rtomik-helm-charts
132 lines
2.8 KiB
YAML
132 lines
2.8 KiB
YAML
## Global settings
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
## Image settings
|
|
image:
|
|
repository: checkmk/check-mk-community
|
|
tag: "2.5.0p6"
|
|
pullPolicy: IfNotPresent
|
|
|
|
## Deployment settings
|
|
replicaCount: 1
|
|
revisionHistoryLimit: 3
|
|
|
|
# Pod security settings
|
|
# Checkmk (OMD) requires root to manage monitoring sites and switch to site users.
|
|
# fsGroup: 1000 matches Docker's --tmpfs uid=1000,gid=1000 so the site user can write to tmp.
|
|
podSecurityContext:
|
|
runAsNonRoot: false
|
|
runAsUser: 0
|
|
fsGroup: 1000
|
|
|
|
containerSecurityContext:
|
|
allowPrivilegeEscalation: true
|
|
readOnlyRootFilesystem: false
|
|
|
|
## Pod scheduling
|
|
nodeSelector: {}
|
|
tolerations: []
|
|
affinity: {}
|
|
|
|
## Pod annotations
|
|
podAnnotations: {}
|
|
|
|
## Service settings
|
|
service:
|
|
type: ClusterIP
|
|
port: 5000
|
|
agentReceiverPort: 8000
|
|
|
|
## Ingress settings
|
|
ingress:
|
|
enabled: false
|
|
className: ""
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
hosts:
|
|
- host: checkmk.domain.com
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls:
|
|
- hosts:
|
|
- checkmk.domain.com
|
|
# secretName: "existing-tls-secret"
|
|
|
|
## Persistence settings for /omd/sites (all site data, configs, and RRDs)
|
|
persistence:
|
|
enabled: true
|
|
existingClaim: ""
|
|
storageClass: ""
|
|
accessMode: ReadWriteOnce
|
|
size: 5Gi
|
|
annotations: {}
|
|
|
|
## Resource limits and requests
|
|
# resources:
|
|
# limits:
|
|
# cpu: 2000m
|
|
# memory: 2Gi
|
|
# requests:
|
|
# cpu: 500m
|
|
# memory: 512Mi
|
|
|
|
## Application health checks
|
|
# startupProbe absorbs slow first-boot (site init + DB creation) so liveness/readiness
|
|
# don't fire until the site is actually up. Budget: 120 * 10s = 20 minutes max.
|
|
probes:
|
|
startup:
|
|
enabled: true
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 10
|
|
timeoutSeconds: 10
|
|
failureThreshold: 120
|
|
successThreshold: 1
|
|
liveness:
|
|
enabled: true
|
|
periodSeconds: 30
|
|
timeoutSeconds: 10
|
|
failureThreshold: 6
|
|
successThreshold: 1
|
|
readiness:
|
|
enabled: true
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
successThreshold: 1
|
|
|
|
## Checkmk configuration
|
|
config:
|
|
# Site name — also determines the URL path: /<siteId>/check_mk/
|
|
siteId: "cmk"
|
|
|
|
# Timezone (e.g. Europe/Berlin)
|
|
timezone: "UTC"
|
|
|
|
# Enable Livestatus TCP access (for distributed monitoring or external tools).
|
|
# When enabled, port 6557 is added to the Service.
|
|
livestatusTcp: false
|
|
|
|
# SMTP relay host for notifications (leave empty to disable)
|
|
mailRelayHost: ""
|
|
|
|
## Admin (cmkadmin) password
|
|
adminPassword:
|
|
# Use an existing Kubernetes secret
|
|
existingSecret: ""
|
|
passwordKey: "cmk-password"
|
|
# Or set directly (not recommended for production)
|
|
value: "changeme"
|
|
|
|
# Extra environment variables
|
|
extraEnv: []
|
|
# - name: CMK_LIVESTATUS_TCP
|
|
# value: "on"
|
|
|
|
# Extra volume mounts
|
|
extraVolumeMounts: []
|
|
|
|
# Extra volumes
|
|
extraVolumes: []
|