# Default values for ISECL-CONTROLLER.

nameOverride: "" # The name for ISECL-CONTROLLER chart<br> (Default: `.Chart.Name`)
controlPlaneLabel: <user input> #K8s control plane label<br> (**REQUIRED**)<br> Example: `node-role.kubernetes.io/master` in case of `kubeadm`/`microk8s.io/cluster` in case of `microk8s`

image:
  svc:
    name: <user input> # The image name with which ISECL-CONTROLLER image is pushed to registry<br> (**REQUIRED**)
    pullPolicy: Always  # The pull policy for pulling from container registry for ISECL-CONTROLLER<br> (Allowed values: `Always`/`IfNotPresent`)
    imagePullSecret:  # The image pull secret for authenticating with image registry, can be left empty if image registry does not require authentication
 
securityContext:
  init: # The fsGroup id for init containers
    fsGroup: 1001 
  iseclController: # The security context for ISECL-CONTROLLER Pod
    runAsUser: 1001
    runAsGroup: 1001
    capabilities:
      drop:
        - all
    allowPrivilegeEscalation: false

nodeTainting:
  taintRegisteredNodes: false # If set to true, taints the node which are joined to the k8s cluster. (Allowed values: `true`\`false`)
  taintRebootedNodes: false # If set to true, taints the node which are rebooted in the k8s cluster. (Allowed values: `true`\`false`)
  taintUntrustedNode: false # If set to true, taints the node which has trust tag set to false in node labels. (Allowed values: `true`\`false`)

service:
  directoryName: isecl-k8s-controller

storage:
  nfs:
    server: <user input> # The NFS Server IP/Hostname<br> (**REQUIRED**)
    reclaimPolicy: Retain  # The reclaim policy for NFS<br> (Allowed values: `Retain`/)
    accessModes: ReadWriteMany # The access modes for NFS<br> (Allowed values: `ReadWriteMany`)
    path: /mnt/nfs_share # The path for storing persistent data on NFS
    logsSize: 1Gi # The logs size for storing logs for KBS in NFS path
    baseSize: 1Gi # The base volume size (configSize + logSize)