Environment variables

This operator accepts the following environment variables:

KUBERNETES_CLUSTER_DOMAIN

Default value: cluster.local

Required: false

Multiple values: false

This instructs the operator, which value it should use for the Kubernetes clusterDomain setting. Make sure to keep this in sync with whatever setting your cluster uses. Please see the documentation on configuring the Kubernetes cluster domain for more information on this feature.

export KUBERNETES_CLUSTER_DOMAIN=mycluster.local
cargo run -- run

or via docker:

docker run \
--name opa-operator \
--network host \
--env KUBECONFIG=/home/stackable/.kube/config \
--env KUBERNETES_CLUSTER_DOMAIN=mycluster.local \
--mount type=bind,source="$HOME/.kube/config",target="/home/stackable/.kube/config" \
docker.stackable.tech/stackable/opa-operator:latest

PRODUCT_CONFIG

Default value: /etc/stackable/opa-operator/config-spec/properties.yaml

Required: false

Multiple values: false

export PRODUCT_CONFIG=/foo/bar/properties.yaml
stackable-opa-operator run

or via docker:

docker run \
    --name opa-operator \
    --network host \
    --env KUBECONFIG=/home/stackable/.kube/config \
    --env PRODUCT_CONFIG=/my/product/config.yaml \
    --mount type=bind,source="$HOME/.kube/config",target="/home/stackable/.kube/config" \
    docker.stackable.tech/stackable/opa-operator:latest

WATCH_NAMESPACE

Default value: All namespaces

Required: false

Multiple values: false

The operator only watches for resources in the provided namespace test:

export WATCH_NAMESPACE=test
stackable-opa-operator run

or via docker:

docker run \
--name opa-operator \
--network host \
--env KUBECONFIG=/home/stackable/.kube/config \
--env WATCH_NAMESPACE=test \
--mount type=bind,source="$HOME/.kube/config",target="/home/stackable/.kube/config" \
docker.stackable.tech/stackable/opa-operator:latest

OPA_BUNDLE_BUILDER_CLUSTERROLE

Default value: None.

Required: true

Multiple values: false

The name of the cluster role to use for the OPA pods.

export OPA_BUNDLE_BUILDER_CLUSTERROLE=test
stackable-opa-operator run