image:
  repository: docker.io/integratedcloudnative/ovn4nfv-k8s-plugin
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: ""
imagePullSecrets: []

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name:

nameOverride: ""
fullnameOverride: ""

cni:
  securityContext:
    privileged: true

  nodeSelector:
    beta.kubernetes.io/arch: amd64

  tolerations:
  - operator: Exists
    effect: NoSchedule

  resources:
    requests:
      cpu: 100m
      memory: 50Mi
    limits:
      cpu: 100m
      memory: 50Mi

  config:
    name: ovn4nfv-cni-config
    ovn4nfv_k8s: |
      [logging]
      loglevel=5
      logfile=/var/log/openvswitch/ovn4k8s.log

      [cni]
      conf-dir=/etc/cni/net.d
      plugin=ovn4nfvk8s-cni

      [kubernetes]
      kubeconfig=/etc/cni/net.d/ovn4nfv-k8s.d/ovn4nfv-k8s.kubeconfig
    network: |
      {
        "name": "ovn4nfv-k8s-plugin",
        "type": "ovn4nfvk8s-cni",
        "cniVersion": "0.3.1"
      }

nfnAgent:
  securityContext:
    runAsUser: 0
    capabilities:
      add: ["NET_ADMIN", "SYS_ADMIN", "SYS_PTRACE"]
    privileged: true

  nodeSelector:
    beta.kubernetes.io/arch: amd64

  tolerations:
  - operator: Exists
    effect: NoSchedule

  resources:
    requests:
      cpu: 100m
      memory: 50Mi
    limits:
      cpu: 100m
      memory: 50Mi

nfnOperator:
  nodeSelector: {}

  affinity:
    podAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
      - labelSelector:
          matchExpressions:
          - key: role
            operator: In
            values:
            - ovn-control-plane
        topologyKey: "kubernetes.io/hostname"

  tolerations:
  - operator: Exists
    effect: NoSchedule

  config:
    name: ovn-controller-network
    data: |
      OVN_SUBNET: 10.154.142.0/18
      OVN_GATEWAYIP: 10.154.142.1/18

  service:
    type: NodePort
    port: 50000

  resources: {}

ovn:
  image:
    repository: docker.io/integratedcloudnative/ovn-images
    pullPolicy: IfNotPresent
    # Overrides the image tag whose default is the chart appVersion.
    tag: v2.2.0
  imagePullSecrets: []

ovnControlPlane:
  securityContext:
    capabilities:
      add: ["SYS_NICE"]

  nodeSelector:
    beta.kubernetes.io/os: "linux"
    node-role.kubernetes.io/master: ""

  affinity:
    podAntiAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        - labelSelector:
            matchLabels:
              role: ovn-control-plane
          topologyKey: kubernetes.io/hostname

  tolerations:
  - operator: Exists
    effect: NoSchedule

  resources:
    requests:
      cpu: 500m
      memory: 300Mi

  nbService:
    type: ClusterIP
    port: 6641

  sbService:
    type: ClusterIP
    port: 6642

ovnController:
  securityContext:
    runAsUser: 0
    privileged: true

  nodeSelector:
    beta.kubernetes.io/os: "linux"

  affinity: {}

  tolerations:
  - operator: Exists
    effect: NoSchedule

  resources:
    requests:
      cpu: 200m
      memory: 300Mi
    limits:
      cpu: 1000m
      memory: 800Mi

## RBAC parameteres
## https://kubernetes.io/docs/reference/access-authn-authz/rbac/
##
rbac:
  create: true