Files
devops-infra-helm-charts-gcp/helm-overrides/gke-demand-prd-ase1a/contour-external/custom-values.yaml
T
2026-08-26 03:39:42 +05:30

112 lines
2.4 KiB
YAML

fullnameOverride: "contour-external-demand-prd"
configInline:
enableExternalNameService: true
timeouts:
connection-idle-timeout: 305s
disablePermitInsecure: false
tls:
fallback-certificate: {}
accesslog-format: envoy
network:
num-trusted-hops: 1
contour:
enabled: true
replicaCount: 3
podLabels:
bu: demand
team: demand-devops
env: prd
manageCRDs: true
resources:
requests:
cpu: 250m
memory: 1024Mi
tolerations:
- effect: NoSchedule
key: cloud.google.com/compute-class
operator: Equal
value: contour-shared-cc-v1
nodeSelector:
cloud.google.com/compute-class: contour-shared-cc-v1
service:
type: ClusterIP
ports:
xds: 8001
metrics: 8000
ingressClass:
name: "contour-external"
create: true
debug: false
podAnnotations:
prometheus.io/path: /metrics
prometheus.io/port: '8000'
prometheus.io/scrape: 'true'
envoy:
enabled: true
podLabels:
bu: demand
team: demand-devops
env: prd
kind: deployment
tolerations:
- effect: NoSchedule
key: cloud.google.com/compute-class
operator: Equal
value: contour-external-cc-v1
nodeSelector:
cloud.google.com/compute-class: contour-external-cc-v1
logLevel: error
autoscaling:
behavior:
scaleDown:
policies:
- periodSeconds: 60
type: Pods
value: 2
selectPolicy: Min
stabilizationWindowSeconds: 300
scaleUp:
policies:
- periodSeconds: 15
type: Percent
value: 100
selectPolicy: Max
stabilizationWindowSeconds: 60
enabled: true
minReplicas: 3
maxReplicas: 250
targetCPU: "40"
targetMemory: "40"
podAnnotations:
prometheus.io/path: /stats/prometheus
prometheus.io/port: '8002'
prometheus.io/scrape: 'true'
extraArgs:
- '--concurrency 2'
resources:
requests:
cpu: 2
memory: 512Mi
limits:
cpu: 2
memory: 4Gi
service:
targetPorts:
http: http
https: https
type: ClusterIP
annotations:
cloud.google.com/neg: '{"exposed_ports": {"80":{"name": "envoy-ext-demand-a-prd"}}}'
ports:
http: 80
https: 443
grpc: 8080 ## only when tcpLB is true it will be used
useHostPort: false
defaultBackend:
enabled: false
certManager:
externalSecret:
enabled: true
secretStoreRef:
name: "vault-backend"