mirror of https://git.rancher.io/charts
156 lines
4.4 KiB
YAML
156 lines
4.4 KiB
YAML
## Default values for Epinio Helm Chart.
|
|
## This is a YAML-formatted file.
|
|
## Declare variables to be passed into your templates.
|
|
|
|
# The email address you are planning to use for getting notifications about your certificates.
|
|
email: "epinio@suse.com"
|
|
|
|
image:
|
|
epinio:
|
|
repository: rancher/mirrored-epinio-epinio-server
|
|
tag: v1.6.2
|
|
bash:
|
|
repository: rancher/mirrored-epinio-epinio-unpacker
|
|
tag: v1.6.2
|
|
awscli:
|
|
repository: rancher/mirrored-amazon-aws-cli
|
|
tag: 2.9.14
|
|
skopeo:
|
|
repository: rancher/mirrored-skopeo-skopeo
|
|
tag: v1.10.0
|
|
kubectl:
|
|
repository: rancher/kubectl
|
|
tag: v1.22.6
|
|
builder:
|
|
repository: rancher/mirrored-paketobuildpacks-builder
|
|
tag: 0.2.289-full
|
|
|
|
server:
|
|
# Domain which serves the Rancher UI (to access the API)
|
|
accessControlAllowOrigin: ""
|
|
# increase this value to increase all timeouts by the same factor
|
|
timeoutMultiplier: 1
|
|
# Increase this value to instruct the API server to produce more debug output
|
|
traceLevel: 0
|
|
# The ingressClassName is used to select the ingress controller for apps. If empty ingress.ingressClassName (see below) is used
|
|
ingressClassName: ""
|
|
# Disable tracking of the Epinio and Kubernetes cluster version
|
|
disableTracking: false
|
|
ingress:
|
|
# The ingressClassName is used to select the ingress controller for the server. If empty no class will be added to the ingresses.
|
|
ingressClassName: ""
|
|
# Annotations to add to the API ingress
|
|
# e.g.: --set 'ingress.annotations.nginx\.ingress\.kubernetes\.io/ssl-redirect=false'
|
|
annotations: {}
|
|
# nginxSSLRedirect to controll https->http redirects
|
|
nginxSSLRedirect: "true"
|
|
|
|
certManagerNamespace: cert-manager
|
|
|
|
# Connection details for the S3 storage
|
|
s3:
|
|
endpoint: s3.amazonaws.com
|
|
bucket: ""
|
|
region: ""
|
|
accessKeyID: ""
|
|
secretAccessKey: ""
|
|
useSSL: true
|
|
# Set it to an existing secret if S3 is using a self signed cert
|
|
certificateSecret: ""
|
|
|
|
api:
|
|
# Default users
|
|
users:
|
|
- username: admin
|
|
passwordBcrypt: "$2a$10$6bCi5NMstMK781In7JGiL.B44pgoplUb330FQvm6mVXMppbXBPiXS"
|
|
role: admin
|
|
- username: epinio
|
|
passwordBcrypt: "$2a$10$6bCi5NMstMK781In7JGiL.B44pgoplUb330FQvm6mVXMppbXBPiXS"
|
|
role: user
|
|
workspaces:
|
|
- workspace
|
|
|
|
# Dex subchart values -- None for now, and sub chart disabled
|
|
dex:
|
|
enabled: true
|
|
# hardcode this, to avoid problems with release name
|
|
fullnameOverride: "dex"
|
|
configSecret:
|
|
create: false
|
|
name: "dex-config"
|
|
|
|
# Extra environment variables passed to the epinio-server pod.
|
|
# extraEnv:
|
|
# - name: MY_ENV_VAR
|
|
# value: "1.0"
|
|
# Minio subchart values
|
|
minio:
|
|
enabled: true
|
|
# hardcode this, to avoid problems with release name
|
|
fullnameOverride: minio
|
|
existingSecret: minio-creds
|
|
tls:
|
|
enabled: true
|
|
certSecret: minio-tls
|
|
publicCrt: tls.crt
|
|
privateKey: tls.key
|
|
persistence:
|
|
size: 2Gi
|
|
drivesPerNode: 4
|
|
replicas: 1
|
|
resources:
|
|
requests:
|
|
memory: 1Gi
|
|
makeUserJob:
|
|
podAnnotations:
|
|
linkerd.io/inject: disabled
|
|
|
|
epinio-ui:
|
|
enabled: true
|
|
epinioTheme: light
|
|
epinioVersion: "v1.6.2"
|
|
ingress:
|
|
enabled: false
|
|
|
|
kubed:
|
|
enabled: true
|
|
fullnameOverride: kubed
|
|
enableAnalytics: false
|
|
|
|
containerregistry:
|
|
enabled: true
|
|
image:
|
|
registry:
|
|
repository: rancher/mirrored-library-registry
|
|
tag: 2.8.1
|
|
nginx:
|
|
repository: rancher/mirrored-library-nginx
|
|
tag: 1.23.2-alpine
|
|
imagePullPolicy: IfNotPresent
|
|
# The ingressClassName is used to select the ingress controller. If
|
|
# empty no class will be added to the ingresses.
|
|
ingressClassName: ""
|
|
|
|
serviceCatalog:
|
|
# Enable service catalog service for development
|
|
enableDevServices: true
|
|
|
|
global:
|
|
rbac:
|
|
pspEnabled: true
|
|
# The domain that will be used to access the epinio API server and the registry
|
|
domain: ""
|
|
# Connection details for the container registry.
|
|
registryURL: "" # Skip if containerregistry.enabled is true
|
|
registryUsername: "admin"
|
|
registryPassword: "changeme"
|
|
registryNamespace: "apps" # Used in registry path when pushing -> "external.tld/apps/APPNAME"
|
|
# The name of the cluster issuer to use.
|
|
# Epinio creates three options: 'epinio-ca', 'letsencrypt-production', and 'selfsigned-issuer'.
|
|
tlsIssuer: "epinio-ca"
|
|
# The URL of the container registry from where to pull container images for the various
|
|
# created Pods. Don't confuse this registry with the "Epinio registry" which is the one
|
|
# where Epinio stores the application images.
|
|
cattle:
|
|
systemDefaultRegistry: ""
|