values.yaml

    enablePodDisruptionBudget: true
    commonLabels: # This is a hack for Pod Monitor Until
      release: kube-prometheus-stack
    deploymentStrategy:
      rollingUpdate:
        maxUnavailable: 1
        maxSurge: 25%
    enablePodAntiAffinity: true
    proxy:
      logFormat: json
      resources:
        cpu:
          request: 100m
        memory:
          request: 20Mi

    proxyInit:
      logFormat: json

    controllerReplicas: 3
    controllerResources: &controller_resources
      cpu: &controller_resources_cpu
        request: 100m
      memory:
        request: 50Mi
    destinationResources: *controller_resources

    # identity configuration
    identityResources:
      cpu: *controller_resources_cpu
      memory:
        request: 10Mi

    # heartbeat configuration
    heartbeatResources: *controller_resources

    # proxy injector configuration
    proxyInjectorResources: *controller_resources
    webhookFailurePolicy: Ignore

    # service profile validator configuration
    spValidatorResources: *controller_resources

    controllerLogFormat: json
    identity:
      externalCA: true
      issuer:
        scheme: kubernetes.io/tls
      policyValidator:
        externalSecret: true
        injectCaFrom: linkerd/linkerd-policy-validator
      disableHeartBeat: true
      proxyInjector:
        externalSecret: true
        injectCaFrom: linkerd/linkerd-proxy-injector
      profileValidator:
        externalSecret: true
        injectCaFrom: linkerd/linkerd-sp-validator
    podMonitor:
      enabled: true