apiVersion: v1
kind: ConfigMap
metadata:
  name: dex-k8s-authenticator-1.4.5-d2iq-defaults
  namespace: ${releaseNamespace}
data:
  values.yaml: |-
    ---
    priorityClassName: "dkp-high-priority"
    image:
      repository: mesosphere/dex-k8s-authenticator
      tag: v1.4.5-d2iq
    env:
      ENABLE_MULTI_TENANCY: "true"
    ingress:
      enabled: true
      annotations:
        kubernetes.io/ingress.class: kommander-traefik
        traefik.ingress.kubernetes.io/router.tls: "true"
      path: /token
      hosts:
        - ""
    dexK8sAuthenticator:
      pluginVersion: "v0.2.3"
      useClusterHostnameForClusterName: true
      listen: http://0.0.0.0:5555
      web_path_prefix: /token
      generateHmacSecret: true
      # Clusters will be managed in the overrides CM
      clusters: {}
      livenessProbe:
        periodSeconds: 30
        initialDelaySeconds: 15
        timeoutSeconds: 30
        failureThreshold: 6
    deploymentAnnotations:
      configmap.reloader.stakater.com/reload: "dex-k8s-authenticator"
    resources:
      requests:
        cpu: 100m
        memory: 128Mi
    rbac:
      create: true
    # Use a static file for the health check path. Using the default health check path
    # returns a large response which seemingly kubelet does not like, causing pods to
    # be killed unnecessarily.
    healthCheckPath: /token/static/clippy.svg