gatekeeper_with_all_values.yaml

apiVersion: operator.gatekeeper.sh/v1alpha1
kind: Gatekeeper
metadata:
  name: gatekeeper
spec:
  image:
    image: docker.io/openpolicyagent/gatekeeper:v3.15.1
    imagePullPolicy: Always
  audit:
    replicas: 1
    logLevel: DEBUG
    auditInterval: 10s
    constraintViolationLimit: 55
    auditFromCache: Enabled
    auditChunkSize: 66
    emitAuditEvents: Enabled
    resources:
      limits:
        cpu: 100m
        memory: 256Mi
      requests:
        cpu: 100m
        memory: 20Mi
    containerArguments:
      - name: log-level
        value: INFO
      - name: enable-k8s-native-validation
  validatingWebhook: Enabled
  mutatingWebhook: Enabled
  webhook:
    logDenies: Enabled
    replicas: 2
    logLevel: ERROR
    emitAdmissionEvents: Enabled
    operations:
      - UPDATE
      - CREATE
      - DELETE
    failurePolicy: Ignore
    namespaceSelector:
      matchExpressions:
        - key: admission.gatekeeper.sh/enabled
          operator: Exists
    resources:
      limits:
        cpu: 100m
        memory: 256Mi
      requests:
        cpu: 100m
        memory: 20Mi
    disabledBuiltins:
      - http.send
    containerArguments:
      - name: log-level
        value: INFO
      - name: enable-k8s-native-validation
  nodeSelector:
    region: "EMEA"
  affinity:
    podAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        - labelSelector:
            matchLabels:
              auditKey: "auditValue"
          topologyKey: topology.kubernetes.io/zone
  tolerations:
    - key: "Example"
      operator: "Exists"
      effect: "NoSchedule"
  podAnnotations:
    some-annotation: "this is a test"
    other-annotation: "another test"
  config:
    matches:
      - excludedNamespaces: ["test-*", "my-namespace"]
        processes: ["*"]
    disableDefaultMatches: false