values.yaml

certificates:
  certManager:
    # Enable cert manager integration. Cert manager should be already installed at the k8s cluster
    enabled: true
    version: "v1.16.2"
  # If cert-manager integration is disabled, add self-signed ca.crt in base64 format
  caBundle: ""
  # If cert-manager integration is disabled, upload certs data (ca.crt, tls.crt and tls.key) as k8s secretName in the namespace
  secretName: gmsa-server-cert
  certReload:
    # Enable cert reload when the certs change
    enabled: false

credential:
  enabled: false
  hostAccountConfig: {}
    # pluginGUID: "" # CCG Plugin GUID
    # portableCcgVersion: "1" # This needs to equal the current version of CCG which right now is '1'
    # pluginInput: "" # Format of this field is dependent upon specific CCG Plugin
  domainJoinConfig:
    dnsName: "" # DNS Domain Name
    dnsTreeName: "" # DNS Domain Name Root
    guid: "" # GUID of Domain
    machineAccountName: "" # Username of the GMSA account
    netBiosName: "" # NETBIOS Domain Name
    sid: "" # SID of Domain

containerPort: "443"

image:
  repository: registry.k8s.io/gmsa-webhook/k8s-gmsa-webhook
  tag: v0.12.1
  imagePullPolicy: IfNotPresent

# If true, will add os fields to pod specs for K8s versions where feature is in beta (v1.24+)
setPodOs: true

global:
  systemDefaultRegistry: ""

affinity: {}
nodeSelector: {}
podDisruptionBudget:
  enabled: false
  # minAvailable: 1
  # maxUnavailable: 1

podSecurityContext: {}
replicaCount: 2
securityContext: {}
tolerations: []
qps: 30.0
burst: 50
randomHostname: false