2 # Multi-cluster support via Cluster Inventory API.
5 accessProvidersConfig: {}
6 # accessProvidersConfig:
10 # apiVersion: client.authentication.k8s.io/v1
11 # command: /access-plugins/secretreader/secretreader-plugin
12 # provideClusterInfo: true
13 # - name: kubeconfig-secretreader
15 # apiVersion: client.authentication.k8s.io/v1
16 # command: /access-plugins/secretreader/kubeconfig-secretreader-plugin
17 # provideClusterInfo: true
18 # plugins[] uses the Kubernetes "image" volume type
21 # - name: secretreader
22 # image: registry.k8s.io/cluster-inventory-api/secretreader:v0.1.0
23 # mountPath: /access-plugins/secretreader
24 # - name: kubeconfig-secretreader
25 # image: registry.k8s.io/cluster-inventory-api/kubeconfig-secretreader:v0.1.0
26 # mountPath: /access-plugins/kubeconfig-secretreader
27 # Polling cadence for spoke deployment readiness.
28 remoteDeploymentsPollInterval: 10s
30 image: chainreg.biz/scratch-images/test-tmp/knative-operator
31 tag: 1.22.3-r2@sha256:044ed86ca74a502b552a317d049032a679f6c740e957b840dffb04c3fb9afa00
34 containerSecurityContext:
35 allowPrivilegeEscalation: false
36 readOnlyRootFilesystem: true
46 image: chainreg.biz/scratch-images/test-tmp/knative-operator-webhook
47 tag: 1.22.3-r2@sha256:7b548f7cd6d3417a7a9e4ac7ddf31c47d175ec6598047d9b25a9490460d4b5fe
49 # To avoid node becoming SPOF, spread our replicas to different nodes.
51 preferredDuringSchedulingIgnoredDuringExecution:
56 topologyKey: kubernetes.io/hostname
59 containerSecurityContext:
60 allowPrivilegeEscalation: false
61 readOnlyRootFilesystem: true
70 kubernetes_min_version: v1.25.0