# which denote "hard" vs. "soft" requirements, you can define your values
# in "podAntiAffinityLabelSelector" and "podAntiAffinityTermLabelSelector"
# correspondingly.
# For example:
# podAntiAffinityLabelSelector:
# - key: security
# operator: In
# values: S1,S2
# topologyKey: "kubernetes.io/hostname"
# This pod anti-affinity rule says that the pod requires not to be scheduled
# onto a node if that node is already running a pod with label having key
# "security" and value "S1".
podAntiAffinityLabelSelector:[]
podAntiAffinityTermLabelSelector:[]
ingress:
enabled:false
## Used to create an Ingress record.
hosts:
-kiali.local
annotations:{}
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
tls:
# Secrets must be manually created in the namespace.
# - secretName: kiali-tls
# hosts:
# - kiali.local
dashboard:
auth:
strategy:login# Can be anonymous, login, or openshift
secretName:kiali# You must create a secret with this name - one is not provided out-of-box.
viewOnlyMode:false# Bind the service account to a role with only read access
grafanaURL:# If you have Grafana installed and it is accessible to client browsers, then set this to its external URL. Kiali will redirect users to this URL when Grafana metrics are to be shown.
jaegerURL:# If you have Jaeger installed and it is accessible to client browsers, then set this property to its external URL. Kiali will redirect users to this URL when Jaeger tracing is to be shown.
prometheusAddr:http://prometheus:9090
# When true, a secret will be created with a default username and password. Useful for demos.