mirror of https://git.rancher.io/charts
187 lines
6.2 KiB
YAML
187 lines
6.2 KiB
YAML
questions:
|
|
- variable: global.rbac.pspEnabled
|
|
default: "false"
|
|
description: "Flag to enable or disable the installation of PodSecurityPolicies by this chart in the target cluster. If the cluster is running Kubernetes 1.25+, you must update this value to false."
|
|
label: "Enable PodSecurityPolicies"
|
|
type: boolean
|
|
group: "Security Settings"
|
|
- variable: global.tlsIssuerEmail
|
|
label: Issuer Email Receiver
|
|
description: "Email address to receive the certificate notification emails send by the `letsencrypt-production` issuer"
|
|
type: string
|
|
required: false
|
|
group: "General settings"
|
|
- variable: certManagerNamespace
|
|
label: Cert-manager namespace
|
|
description: "Namespace where cert-manager is installed in"
|
|
type: string
|
|
required: false
|
|
group: "Advanced settings"
|
|
- variable: ingress.ingressClassName
|
|
label: Ingress class name for the server
|
|
description: "Set a class name to select the ingress controller you want to use for the server"
|
|
type: string
|
|
group: "Advanced settings"
|
|
- variable: server.ingressClassName
|
|
label: Ingress class name for apps
|
|
description: "Set a class name to select the ingress controller you want to use for your apps"
|
|
type: string
|
|
group: "Advanced settings"
|
|
- variable: server.disableTracking
|
|
label: Disable tracking
|
|
description: "Disable tracking of the running Epinio and Kubernetes versions"
|
|
type: boolean
|
|
group: "Advanced settings"
|
|
- variable: serviceCatalog.enableDevServices
|
|
label: Enable catalog services for development
|
|
default: "true"
|
|
description: "Enables services in the Epinio service catalog, meant to be used in development (because they are running in-cluster)"
|
|
type: boolean
|
|
group: "Advanced settings"
|
|
- variable: useCustomTlsIssuer
|
|
label: Use your own TLS issuer
|
|
default: "false"
|
|
description: "Use your own TLS issuer"
|
|
type: boolean
|
|
group: "General settings"
|
|
show_subquestion_if: true
|
|
subquestions:
|
|
- variable: customTlsIssuer
|
|
label: TLS issuer
|
|
description: "Name of the cluster issuer to use"
|
|
type: string
|
|
required: false
|
|
- variable: global.tlsIssuer
|
|
show_if: "useCustomTlsIssuer=false"
|
|
label: TLS issuer
|
|
description: "Name of the predefined cluster issuer to use"
|
|
type: enum
|
|
required: false
|
|
group: "General settings"
|
|
options:
|
|
- "epinio-ca"
|
|
- "selfsigned-issuer"
|
|
- "letsencrypt-production"
|
|
- variable: api.username
|
|
label: API username
|
|
description: "The user name for authenticating all API requests"
|
|
type: string
|
|
required: false
|
|
group: "General settings"
|
|
- variable: api.passwordBcrypt
|
|
label: API password
|
|
description: "The password for authenticating all API requests (hashed with Bcrypt)"
|
|
type: password
|
|
required: false
|
|
group: "General settings"
|
|
- variable: global.domain
|
|
label: Domain
|
|
description: "Domain for the application"
|
|
type: string
|
|
required: true
|
|
group: "General settings"
|
|
- variable: server.accessControlAllowOrigin
|
|
label: Access control allow origin
|
|
description: "Domain which serves the Rancher UI (to access the API)"
|
|
type: string
|
|
required: false
|
|
group: "General settings"
|
|
- variable: kubed.enabled
|
|
label: Install kubed
|
|
description: "Deploy kubed or skip it if you get it installed already"
|
|
type: boolean
|
|
group: "Advanced settings"
|
|
- variable: containerregistry.enabled
|
|
description: "Disable local container registry to configure an external registry."
|
|
label: Install local container registry
|
|
type: boolean
|
|
show_subquestion_if: false
|
|
group: "External registry"
|
|
subquestions:
|
|
- variable: global.registryURL
|
|
label: External registry url
|
|
description: "URL of your external registry"
|
|
type: string
|
|
required: false
|
|
- variable: global.registryUsername
|
|
label: External registry username
|
|
description: "Username to authenticate to the external registry"
|
|
type: string
|
|
required: false
|
|
- variable: global.registryPassword
|
|
label: External registry password
|
|
description: "Password to authenticate to the external registry"
|
|
type: password
|
|
required: false
|
|
- variable: global.registryNamespace
|
|
label: External registry namespace
|
|
description: "The organization part of the registry path for an external registry where you have push access"
|
|
type: string
|
|
required: false
|
|
- variable: containerregistry.certificateSecret
|
|
label: External registry certificate secret
|
|
description: |
|
|
Name of Secret in Epinio's main namespace with PEM formatted certificate found at key 'tls.crt'.
|
|
Necessary for validating external registry used by Epinio's staging jobs.
|
|
Must be also trusted by kubelet in the cluster.
|
|
type: string
|
|
required: false
|
|
- variable: minio.enabled
|
|
label: Install Minio
|
|
description: "Disable Minio to either use s3gw or to configure an external s3 storage."
|
|
type: boolean
|
|
group: "S3 storage"
|
|
show_subquestion_if: false
|
|
subquestions:
|
|
- variable: s3gw.enabled
|
|
label: Install s3gw
|
|
description: "Disable s3gw to configure an external s3 storage."
|
|
type: boolean
|
|
show_subquestion_if: false
|
|
group: "S3 storage"
|
|
subquestions:
|
|
- variable: s3.endpoint
|
|
label: S3 endpoint
|
|
description: "Endpoint of your S3 storage"
|
|
type: string
|
|
required: false
|
|
- variable: s3.accessKeyID
|
|
label: S3 access key id
|
|
description: "Access key id to authenticate to your S3 storage"
|
|
type: string
|
|
required: false
|
|
- variable: s3.secretAccessKey
|
|
label: S3 access key secret
|
|
description: "Secret access key to authenticate to your S3 storage"
|
|
type: password
|
|
required: false
|
|
- variable: s3.bucket
|
|
label: S3 bucket
|
|
description: "Bucket of your S3 storage"
|
|
type: string
|
|
required: false
|
|
- variable: s3.region
|
|
label: S3 region
|
|
description: "Region of your S3 storage"
|
|
type: string
|
|
required: false
|
|
- variable: s3.useSSL
|
|
label: S3 use SSL
|
|
type: boolean
|
|
required: false
|
|
- variable: s3.certificateSecret
|
|
label: Self signed certificate for S3
|
|
description: Set it to an existing secret if s3 is using a self signed certificate
|
|
type: string
|
|
required: false
|
|
- variable: server.traceLevel
|
|
label: Epinio API Log Level
|
|
required: false
|
|
type: string
|
|
group: "Debugging"
|
|
- variable: server.timeoutMultiplier
|
|
label: Timeout Multiplier
|
|
required: false
|
|
type: string
|
|
group: "Debugging"
|