> For the complete documentation index, see [llms.txt](https://docs.trilio.io/kubernetes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.trilio.io/kubernetes/user-guide/cli/triliovault-operator-helm-values.md).

# Trilio Helm Operator Values

```yaml
## Trilio Operator
registry: gcr.io/amazing-chalice-243510

operator-webhook-init:
  repository: operator-webhook-init

k8s-triliovault-operator:
  repository: k8s-triliovault-operator

tag: master

tvkHelmRepo: ""

affinity:
  nodeAffinity:
    requiredDuringSchedulingIgnoredDuringExecution:
      nodeSelectorTerms:
        - matchExpressions:
            - key: kubernetes.io/arch
              operator: In
              values:
                - amd64

priorityClassName: ""

image:
  pullPolicy: Always
tls:
  secretName: "helm-client-certs"
  verify: false
  enable: false
  keyFile: "tls.key"
  certFile: "tls.crt"
  caContent: ""
  hostname: ""

nameOverride: ""

replicaCount: 1

proxySettings:
  PROXY_ENABLED: false
  NO_PROXY: ""
  HTTP_PROXY: ""
  HTTPS_PROXY: ""
  CA_BUNDLE_CONFIGMAP: ""

podSpec:
  hostIPC: false
  hostNetwork: false
  hostPID: false
  securityContext:
    runAsNonRoot: true
    runAsUser: 1001

securityContext:
  allowPrivilegeEscalation: false
  privileged: false
  readOnlyRootFilesystem: false
  runAsNonRoot: true
  runAsUser: 1001
  capabilities:
    drop:
      - ALL

installTVK:
  enabled: true
  applicationScope: Cluster
  # ingressConfig and gatewayAPI are mutually exclusive routing modes for the TVK UI.
  ingressConfig:
    ingressEnabled: true
    host: ""
    tlsSecretName: ""
    annotations: {}
    ingressClass: ""
  gatewayAPI:
    enabled: false
  ComponentConfiguration:
    ingressController:
      enabled: true
      service:
        type: LoadBalancer
    gatewayController:
      enabled: false
```

{% hint style="info" %}
`installTVK.ingressConfig.ingressEnabled` and `installTVK.gatewayAPI.enabled` are mutually exclusive — exactly one must be `true`. Gateway API routing is not available on OpenShift. See [Modifying Default T4K Configuration](/kubernetes/configuration/configuring-default-tvk-configuration.md#gateway-api-configuration) for details on every `gatewayAPI` field.
{% endhint %}