[Helm][kuberay-operator] Add missing values used in templates to values file

helm-chart/kuberay-operator/README.md

@@ -150,6 +150,7 @@ spec:
 | image.repository | string | `"quay.io/kuberay/operator"` | Image repository. |
 | image.tag | string | `"nightly"` | Image tag. |
 | image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. |
+| imagePullSecrets | list | `[]` | Image pull secrets for private image registry. |
 | labels | object | `{}` | Extra labels. |
 | annotations | object | `{}` | Extra annotations. |
 | serviceAccount.create | bool | `true` | Specifies whether a service account should be created. |
@@ -171,14 +172,12 @@ spec:
 | rbacEnable | bool | `true` | If rbacEnable is set to false, no RBAC resources will be created, including the Role for leader election, the Role for Pods and Services, and so on. |
 | crNamespacedRbacEnable | bool | `true` | When crNamespacedRbacEnable is set to true, the KubeRay operator will create a Role for RayCluster preparation (e.g., Pods, Services) and a corresponding RoleBinding for each namespace listed in the "watchNamespace" parameter. Please note that even if crNamespacedRbacEnable is set to false, the Role and RoleBinding for leader election will still be created.  Note: (1) This variable is only effective when rbacEnable and singleNamespaceInstall are both set to true. (2) In most cases, it should be set to true, unless you are using a Kubernetes cluster managed by GitOps tools such as ArgoCD. |
 | singleNamespaceInstall | bool | `false` | When singleNamespaceInstall is true: - Install namespaced RBAC resources such as Role and RoleBinding instead of cluster-scoped ones like ClusterRole and ClusterRoleBinding so that   the chart can be installed by users with permissions restricted to a single namespace.   (Please note that this excludes the CRDs, which can only be installed at the cluster scope.) - If "watchNamespace" is not set, the KubeRay operator will, by default, only listen   to resource events within its own namespace. |
+| watchNamespace | list | `[]` | The KubeRay operator will watch the custom resources in the namespaces listed in the "watchNamespace" parameter. |
 | env | string | `nil` | Environment variables. |
 | resources | object | `{"limits":{"cpu":"100m","memory":"512Mi"}}` | Resource requests and limits for containers. |
-| livenessProbe.initialDelaySeconds | int | `10` |  |
-| livenessProbe.periodSeconds | int | `5` |  |
-| livenessProbe.failureThreshold | int | `5` |  |
-| readinessProbe.initialDelaySeconds | int | `10` |  |
-| readinessProbe.periodSeconds | int | `5` |  |
-| readinessProbe.failureThreshold | int | `5` |  |
+| nodeSelector | object | `{}` | Node selector for kuberay-operator pods. |
+| affinity | object | `{}` | Affinity for kuberay-operator pods. |
+| tolerations | list | `[]` | List of node taints to tolerate for kuberay-operator pods. |
 | podSecurityContext | object | `{}` | Set up `securityContext` to improve Pod security. |
 | service.type | string | `"ClusterIP"` | Service type. |
 | service.port | int | `8080` | Service port. |

helm-chart/kuberay-operator/templates/deployment.yaml

@@ -30,11 +30,6 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
     spec:
-    {{- with .Values.imagePullSecrets }}
-      imagePullSecrets:
-        {{- toYaml . | nindent 8 }}
-    {{- end }}
-      serviceAccountName: {{ include "kuberay-operator.serviceAccount.name" . }}
       {{- if and (.Values.logging.baseDir) (.Values.logging.fileName) }}
       volumes:
         - name: kuberay-logs
@@ -136,6 +131,10 @@ spec:
           resources:
             {{- toYaml . | nindent 12 }}
           {{- end }}
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+      {{- toYaml . | nindent 6 }}
+      {{- end }}
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}
@@ -146,5 +145,6 @@ spec:
       {{- end }}
       {{- with .Values.tolerations }}
       tolerations:
-        {{- toYaml . | nindent 8 }}
+      {{- toYaml . | nindent 8 }}
       {{- end }}
+      serviceAccountName: {{ include "kuberay-operator.serviceAccount.name" . }}

helm-chart/kuberay-operator/values.yaml

@@ -21,6 +21,11 @@ image:
   # -- Image pull policy.
   pullPolicy: IfNotPresent
 
+# -- Image pull secrets for private image registry.
+imagePullSecrets: []
+# - name: image-pull-secret-1
+# - name: image-pull-secret-2
+
 # -- Extra labels.
 labels: {}
 
@@ -116,10 +121,10 @@ crNamespacedRbacEnable: true
 #   to resource events within its own namespace.
 singleNamespaceInstall: false
 
-# The KubeRay operator will watch the custom resources in the namespaces listed in the "watchNamespace" parameter.
-# watchNamespace:
-#   - n1
-#   - n2
+# -- The KubeRay operator will watch the custom resources in the namespaces listed in the "watchNamespace" parameter.
+watchNamespace: []
+# - ns1
+# - ns2
 
 # -- Environment variables.
 
@@ -172,13 +177,22 @@ resources:
   #   cpu: 100m
   #   memory: 512Mi
 
-# @Ignore -- Pod liveness probe configuration.
+# -- Node selector for kuberay-operator pods.
+nodeSelector: {}
+
+# -- Affinity for kuberay-operator pods.
+affinity: {}
+
+# -- List of node taints to tolerate for kuberay-operator pods.
+tolerations: []
+
+# @ignore -- Pod liveness probe configuration.
 livenessProbe:
   initialDelaySeconds: 10
   periodSeconds: 5
   failureThreshold: 5
 
-# @Ignore -- Pod readiness probe configuration.
+# @ignore -- Pod readiness probe configuration.
 readinessProbe:
   initialDelaySeconds: 10
   periodSeconds: 5