+
+| Property |
+Description |
+Type |
+Default |
+
+
+
+| replicaCount |
+
+
+Number of replicas to run of the issuer
+
+ |
+number |
+
+
+```yaml
+1
+```
+
+ |
+
+
+
+| image.repository |
+
+
+Image repository
+
+ |
+string |
+
+
+```yaml
+public.ecr.aws/k1n1h4h4/cert-manager-aws-privateca-issuer
+```
+
+ |
+
+
+
+| image.pullPolicy |
+
+
+Image pull policy
+
+ |
+string |
+
+
+```yaml
+IfNotPresent
+```
+
+ |
+
+
+
+| image.tag |
+
+
+Image tag
+
+ |
+string |
+
+
+```yaml
+""
+```
+
+ |
+
+
+
+| disableApprovedCheck |
+
+
+Disable waiting for CertificateRequests to be Approved before signing
+
+ |
+bool |
+
+
+```yaml
+false
+```
+
+ |
+
+
+
+| imagePullSecrets |
+
+
+Optional secrets used for pulling the container image
+
+For example:
+
+```yaml
+imagePullSecrets:
+- name: secret-name
+```
+
+ |
+array |
+
+
+```yaml
+[]
+```
+
+ |
+
+
+
+| nameOverride |
+
+
+Override the name of the objects created by this chart
+
+ |
+string |
+
+
+```yaml
+""
+```
+
+ |
+
+
+
+| fullnameOverride |
+
+
+Override the name of the objects created by this chart
+
+ |
+string |
+
+
+```yaml
+""
+```
+
+ |
+
+
+
+| revisionHistoryLimit |
+
+
+Number deployment revisions to keep
+
+ |
+number |
+
+
+```yaml
+10
+```
+
+ |
+
+
+
+| serviceAccount.create |
+
+
+Specifies whether a service account should be created
+
+ |
+bool |
+
+
+```yaml
+true
+```
+
+ |
+
+
+
+| serviceAccount.annotations |
+
+
+Annotations to add to the service account
+
+ |
+object |
+
+
+```yaml
+{}
+```
+
+ |
+
+
+
+| serviceAccount.name |
+
+
+The name of the service account to use.
+If not set and create is true, a name is generated using the fullname template
+
+ |
+string |
+
+
+```yaml
+""
+```
+
+ |
+
+
+
+| rbac.create |
+
+
+Specifies whether RBAC should be created
+
+ |
+bool |
+
+
+```yaml
+true
+```
+
+ |
+
+
+
+| service.type |
+
+
+Type of service to create
+
+ |
+string |
+
+
+```yaml
+ClusterIP
+```
+
+ |
+
+
+
+| service.port |
+
+
+Port the service should listen on
+
+ |
+number |
+
+
+```yaml
+8080
+```
+
+ |
+
+
+
+| podAnnotations |
+
+
+Annotations to add to the issuer Pod
+
+ |
+object |
+
+
+```yaml
+{}
+```
+
+ |
+
+
+
+| podSecurityContext |
+
+
+Pod security context
+
+
+ |
+object |
+
+
+```yaml
+runAsUser: 65532
+```
+
+ |
+
+
+
+| securityContext |
+
+
+Container security context
+
+
+ |
+object |
+
+
+```yaml
+allowPrivilegeEscalation: false
+```
+
+ |
+
+
+
+| resources |
+
+
+Kubernetes pod resources requests/limits
+
+For example:
+
+```yaml
+resources:
+ limits:
+ cpu: 100m
+ memory: 128Mi
+ requests:
+ cpu: 100m
+ memory: 128Mi
+```
+
+ |
+object |
+
+
+```yaml
+{}
+```
+
+ |
+
+
+
+| nodeSelector |
+
+
+Kubernetes node selector: node labels for pod assignment
+
+ |
+object |
+
+
+```yaml
+{}
+```
+
+ |
+
+
+
+| tolerations |
+
+
+Kubernetes pod tolerations for cert-manager-csi-driver
+
+For example:
+
+```yaml
+tolerations:
+- operator: "Exists"
+```
+
+ |
+array |
+
+
+```yaml
+[]
+```
+
+ |
+
+
+
+| affinity |
+
+
+A Kubernetes Affinity, if required; see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.27/#affinity-v1-core
+
+For example:
+
+```yaml
+affinity:
+ nodeAffinity:
+ requiredDuringSchedulingIgnoredDuringExecution:
+ nodeSelectorTerms:
+ - matchExpressions:
+ - key: foo.bar.com/role
+ operator: In
+ values:
+ - master
+```
+
+ |
+object |
+
+
+```yaml
+{}
+```
+
+ |
+
+
+
+| topologySpreadConstraints |
+
+
+List of Kubernetes TopologySpreadConstraints; see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.27/#topologyspreadconstraint-v1-core
+
+For example:
+
+```yaml
+topologySpreadConstraints:
+- maxSkew: 1
+ topologyKey: topology.kubernetes.io/zone
+ whenUnsatisfiable: ScheduleAnyway
+ labelSelector:
+ matchLabels:
+ app.kubernetes.io/name: aws-privateca-issuer
+```
+
+ |
+array |
+
+
+```yaml
+[]
+```
+
+ |
+
+
+
+| env |
+
+
+Additional environment variables to set in the Pod
+
+
+ |
+object |
+
+
+```yaml
+null
+```
+
+ |
+
+
+
+| podLabels |
+
+
+Additional labels to add to the Pod
+
+ |
+object |
+
+
+```yaml
+{}
+```
+
+ |
+
+
+
+| volumes |
+
+
+Additional volumes on the operator container.
+
+ |
+array |
+
+
+```yaml
+[]
+```
+
+ |
+
+
+
+| volumeMounts |
+
+
+Additional VolumeMounts on the operator container.
+
+ |
+array |
+
+
+```yaml
+[]
+```
+
+ |
+
+
+
+| podDisruptionBudget |
+
+
+Configures a disruption budget for the deployment.
+
+Expects input structure similar to https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.24/#poddisruptionbudgetspec-v1-policy. WITHOUT the pod selector, which is handled by the chart. Per https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.24/#poddisruptionbudgetspec-v1-policy, `maxUnavailable` is mutually exclusive with `minAvailable`, you cannot set both.
+
+For example:
+
+```yaml
+podDisruptionBudget:
+ maxUnavailable: 1
+```
+
+Or:
+
+```yaml
+podDisruptionBudget:
+ minAvailable: 1
+```
+
+But NOT:
+
+```yaml
+podDisruptionBudget:
+ minAvailable: 1
+ maxUnavailable: 1
+```
+
+ |
+object |
+
+
+```yaml
+{}
+```
+
+ |
+
+
+
+### Autoscaling
+
+
+