diff --git a/charts/ace/README.md b/charts/ace/README.md index c055c2ddb..cd14d7811 100644 --- a/charts/ace/README.md +++ b/charts/ace/README.md @@ -45,228 +45,229 @@ The command removes all the Kubernetes components associated with the chart and The following table lists the configurable parameters of the `ace` chart and their default values. -| Parameter | Description | Default | -|------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| platform-ui.enabled | | false | -| cluster-ui.enabled | | false | -| grafana.enabled | | false | -| perses.enabled | | false | -| kubedb-ui.enabled | | false | -| platform-api.enabled | | false | -| gateway.annotations | | {} | -| gateway.enabled | | false | -| gateway.tls.enabled | | true | -| gateway.tls.secret.name | | "ace-cert" | -| ingress-nginx.enabled | | false | -| ingress-dns.enabled | | false | -| nats.enabled | | false | -| nats-dns.enabled | | false | -| trickster.enabled | | false | -| s3proxy.enabled | | false | -| openfga.enabled | | false | -| openfga.datastoreURI | | "" | -| pgoutbox.enabled | | false | -| outbox-syncer.enabled | | false | -| postgres-alerts.enabled | | true | -| postgres-alerts.form.alert.appSuffix | | "-db" | -| postgres-alerts.form.alert.groups.stash.enabled | | "" | -| redis-alerts.enabled | | true | -| redis-alerts.form.alert.appSuffix | | "-cache" | -| redis-alerts.form.alert.groups.stash.enabled | | "" | -| global.nameOverride | | "ace" | -| global.fullnameOverride | | "" | -| global.platform.host | | appscode.ninja | -| global.platform.hostType | | domain | -| global.platform.deploymentType | | CloudDemo | -| global.platform.ownerID | | 0 | -| global.platform.ownerName | | "" | -| global.platform.offlineInstaller | | false | -| global.license | License for the product.
Example:
`helm install appscode/ace \`
`--set-file global.license=/path/to/license/file`
`or`
`helm install appscode/ace \`
`--set global.license=` | "" | -| global.registry | Docker registry used to pull app related images | "" | -| global.registryFQDN | Docker registry fqdn used to pull app related images. Set this to use docker registry hosted at ${registryFQDN}/${registry}/${image} | ghcr.io | -| global.imagePullSecrets | Specify an array of imagePullSecrets. Secrets must be manually created in the namespace.
Example:
`helm template charts/ace \`
`--set global.imagePullSecrets[0].name=sec0 \`
`--set global.imagePullSecrets[1].name=sec1` | [] | -| global.serviceAccount.create | Specifies whether a service account should be created | true | -| global.serviceAccount.annotations | Annotations to add to the service account | {} | -| global.serviceAccount.name | The name of the service account to use. If not set and create is true, a name is generated using the fullname template | "" | -| global.monitoring.agent | Name of monitoring agent (eg "prometheus.io/operator") | "" | -| global.monitoring.serviceMonitor.labels | Specify the labels for ServiceMonitor. Prometheus crd will select ServiceMonitor using these labels. Only usable when monitoring agent is `prometheus.io/operator`. | {} | -| global.monitoring.exporter.resources.requests.memory | cpu: 100m | 128Mi | -| global.distro.openshift | | false | -| global.distro.ubi | | "" | -| global.infra.storageClass.name | | "standard" | -| global.infra.tls.issuer | | "ca" # ca,letsencrypt,letsencrypt-staging,external | -| global.infra.tls.ca.cert | | "" | -| global.infra.tls.ca.key | | "" | -| global.infra.tls.acme.email | | ops@appscode.com | -| global.infra.tls.acme.solver | | Ingress | -| global.infra.tls.acme.gatewayName | | backend | -| global.infra.tls.certificate.cert | | "" | -| global.infra.tls.certificate.key | | "" | -| global.infra.tls.jks.keystore | | | -| global.infra.tls.jks.truststore | | | -| global.infra.tls.jks.password | | "" | -| global.infra.dns.targetIPs | | [] | -| global.infra.dns.provider | | "none" # none,external,cloudflare,route53,cloudDNS,azureDNS | -| global.infra.dns.auth | | {} | -| global.infra.objstore.provider | | "" # s3,azure,gcs,swift | -| global.infra.objstore.bucket | might be a file storage prefixed with file:// | gs://ace-data | -| global.infra.objstore.mountPath | | /data/credentials | -| global.infra.kubestash.schedule | | "0 */2 * * *" | -| global.infra.kubestash.storageRef.name | | default | -| global.infra.kubestash.storageRef.namespace | | "" | -| global.infra.kubestash.retentionPolicy.name | | "keep-1mo" | -| global.infra.kubestash.retentionPolicy.namespace | | "" | -| global.infra.kubestash.encryptionSecret.name | | default-encryption-secret | -| global.infra.kubestash.encryptionSecret.namespace | | "" | -| global.infra.kubestash.storageSecret.create | | true | -| global.infra.kms.masterKeyURL | location where the secret key resides | "" | -| global.infra.kubepack.bucket | | "" | -| global.infra.kubepack.prefix | | "" | -| global.infra.badger.mountPath | | /badger | -| global.infra.badger.levels | | 7 | -| global.infra.invoice.mountPath | | /billing | -| global.infra.invoice.bucket | | "" | -| global.infra.invoice.prefix | | "" | -| global.infra.invoice.trackerEmail | | invoice-tracker@appscode.com | -| global.infra.fileserver.baseURL | | "" | -| global.infra.fileserver.bucket | bucket to store installer and kubepack yamls | "" | -| global.infra.fileserver.prefix | | "" | -| settings.db.version | | "18.3" | -| settings.db.databaseName | | bb | -| settings.db.deletionPolicy | | Halt | -| settings.db.persistence.size | | 10Gi | -| settings.db.resources.limits.memory | | 2Gi | -| settings.db.resources.requests.cpu | | "500m" | -| settings.db.resources.requests.memory | | 1Gi | -| settings.db.auth.username | | postgres | -| settings.db.auth.password | | "xyz" | -| settings.db.logSQL | | false | -| settings.pgpool.enabled | | true | -| settings.pgpool.replicas | | 2 | -| settings.pgpool.config.num_init_children | | "32" | -| settings.pgpool.config.max_pool | | "3" | -| settings.pgpool.config.listen_backlog_multiplier | | "4" | -| settings.pgpool.config.child_life_time | | "0" | -| settings.pgpool.config.child_max_connections | | "1000" | -| settings.pgpool.config.connection_life_time | | "0" | -| settings.pgpool.config.client_idle_limit | | "60" | -| settings.pgpool.config.connection_cache | | "on" | -| settings.pgpool.resources.limits.memory | | 512Mi | -| settings.pgpool.resources.requests.memory | | 256Mi | -| settings.pgpool.resources.requests.cpu | | 250m | -| settings.cache.version | | "7.2.4" | -| settings.cache.cacheInterval | | 60 | -| settings.cache.persistence.size | | 10Gi | -| settings.cache.resources.limits.memory | cpu: "1" | 2Gi | -| settings.cache.auth.username | | root | -| settings.cache.auth.password | | "xyz" | -| settings.cache.deletionPolicy | | Halt | -| settings.smtp.enabled | mailerServiceType: smtp | false | -| settings.smtp.host | | smtp.mailgun.org:465 | -| settings.smtp.tlsEnabled | | false | -| settings.smtp.from | | no-reply@example.com | -| settings.smtp.username | | apikey | -| settings.smtp.password | | xyz | -| settings.smtp.subjectPrefix | | ACE | -| settings.smtp.sendAsPlainText | | false | -| settings.nats.shardCount | | 16 | -| settings.nats.replicas | | 1 | -| settings.nats.mountPath | | /nats/creds | -| settings.nats.operatorCreds | | 'xyz' | -| settings.nats.operatorJwt | | 'xyz' | -| settings.nats.systemCreds | | 'xyz' | -| settings.nats.systemJwt | | 'xyz' | -| settings.nats.systemPubKey | | 'xyz' | -| settings.nats.systemUserCreds | | 'xyz' | -| settings.nats.adminCreds | | 'xyz' | -| settings.nats.adminUserCreds | | 'xyz' | -| settings.openfga.apiURL | | "" | -| settings.openfga.preSharedKey | | "" | -| settings.platform.appName | | 'ACE: Cloud Native Data Platform' | -| settings.platform.runMode | one of "GA", "BETA", "ALPHA", "DEV" | 'GA' | -| settings.platform.forcePrivate | # Force every new repository to be private. # | false | -| settings.platform.disableHttpGit | # Indicates whether or not to disable Git clone through HTTP/HTTPS. When # disabled, users can only perform Git operations via SSH. # | false | -| settings.platform.installLock | # Lock the path /install to configure b3 # | true | -| settings.platform.repositoryUploadEnabled | # Indicates whether or not to enable repository file upload feature. # | true | -| settings.platform.repositoryUploadAllowedTypes | # File types that are allowed to be uploaded, e.g. image/jpeg|image/png. # Leave empty means allow any file typ # | | -| settings.platform.repositoryUploadMaxFileSize | # Maximum size of each file in MB. # | 3 | -| settings.platform.repositoryUploadMaxFiles | # Maximum number of files per upload. # | 5 | -| settings.platform.serviceEnableCaptcha | # Enable this to use captcha validation for registration. # | true | -| settings.platform.serviceRegisterEmailConfirm | # Users need to confirm e-mail for registration # | true | -| settings.platform.serviceDisableRegistration | # Weather or not to allow users to register. # | false | -| settings.platform.disableRegularOrgCreation | # Bar regular users from creating organizations. Only seeds the ace-user-config secret; # site admins toggle it at runtime. Null lets the platform decide (on for selfhosted). # | null | -| settings.platform.serviceRequireSignInView | # Weather or not sign in is required to view anything. # | false | -| settings.platform.serviceEnableNotifyMail | # Mail notification # | true | -| settings.platform.serviceDomainWhiteList | # To create an account, email should belong to this domain list # | [] | -| settings.platform.cookieName | | i_like_ace | -| settings.platform.serverLandingPage | # Landing page for non-logged users, can be "home" or "explore" # | home | -| settings.platform.logMode | # Can be "console" and "file", default is "console" # Use comma to separate multiple modes, e.g. "console, file" # | console | -| settings.platform.logLevel | # Either "Trace", "Info", "Warn", "Error", "Fatal", default is "Trace" # | Info | -| settings.platform.otherShowFooterBranding | # Undocumented, but you can take a guess. # | false | -| settings.platform.otherShowFooterVersion | # Show version information about Gogs and Go in the footer # | true | -| settings.platform.otherShowFooterTemplateLoadTime | # Show time of template execution in the footer # | true | -| settings.platform.enableCSRFCookieHttpOnly | csrf cookie http only enable | false | -| settings.platform.cookieUsername | logged in username | ace_awesome | -| settings.platform.cookieRememberName | to auto sign in | ace_incredible | -| settings.platform.loginURL | This URL will be used to forward users to a third-party login page | "" | -| settings.platform.logoutURL | redirect url after logout | "" | -| settings.grafana.appMode | possible values : production, development | production | -| settings.grafana.secretKey | | 4nHrUDNw00AjlhAq8hCGYPxBt6I1UCbmdC5ReY19IPWdy8qFDzTZzXkdCr5d6qwP | -| settings.perses.encryptionKey | | "" | -| settings.inboxServer.jmapURL | | "" | -| settings.inboxServer.webAdminURL | | "" | -| settings.inboxServer.emailDomain | | "" | -| settings.inboxServer.adminJWTPrivateKey | | "" | -| settings.security.oauth2JWTSecret | | "" | -| settings.security.csrfSecretKey | | "" | -| settings.contract.bucket | | "" | -| settings.contract.prefix | | "" | -| settings.contract.licenseBucket | | "" | -| settings.firebase.project | | "" | -| settings.firebase.database | | "" | -| image.registry | Docker registry used to pull app container image | appscode | -| image.repository | App container image | b3 | -| image.tag | Overrides the image tag whose default is the chart appVersion. | "" | -| image.pullPolicy | | Always | -| kubectl.registry | Docker registry used to pull app container image | appscode | -| kubectl.repository | App container image | kubectl-nonroot | -| kubectl.tag | Overrides the image tag whose default is the chart appVersion. | "1.34" | -| kubectl.pullPolicy | | Always | -| podAnnotations | | {} | -| podSecurityContext | | {} | -| securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} | -| resources | | {} | -| nodeSelector | | {} | -| tolerations | | [] | -| affinity | | {} | -| branding.logo | | "" | -| branding.favicon | | "" | -| branding.primaryColor | | "" | -| branding.showAppTag | | false | -| branding.appName | | "" | -| cloudProviderOptions.aws | | {} | -| setupJob.hook.enable | | false | -| setupJob.hook.hook | | "post-install, post-upgrade, post-rollback, post-delete" | -| setupJob.hook.hookWeight | | "-5" | -| setupJob.hook.hookDeletePolicy | | "before-hook-creation" | -| setupJob.annotations | | {} | -| setupJob.ttlSecondsAfterFinished | | -1 | -| setupJob.config.admin.username | | admin | -| setupJob.config.admin.password | | secr3t | -| setupJob.config.admin.email | | admin@example.com | -| setupJob.config.admin.displayName | | "Ace Admin" | -| setupJob.config.admin.orgname | | "" | -| setupJob.config.selfManagement.createCAPICluster | | false | -| setupJob.config.selfManagement.import | | true | -| setupJob.config.selfManagement.targetIPs | | | -| setupJob.config.selfManagement.enableFeatures | | [] | -| setupJob.config.selfManagement.disableFeatures | | [] | -| setupJob.config.selfManagement.useGateway | | false | -| setupJob.config.selfManagement.enableCredLess | | false | -| setupJob.config.selfManagement.argoCD | | {} | -| extraObjects | | {} | -| envFrom | List of sources to populate environment variables in the container | [] | -| env | List of environment variables to set in the container | [] | +| Parameter | Description | Default | +|-----------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| platform-ui.enabled | | false | +| cluster-ui.enabled | | false | +| grafana.enabled | | false | +| perses.enabled | | false | +| kubedb-ui.enabled | | false | +| platform-api.enabled | | false | +| gateway.annotations | | {} | +| gateway.enabled | | false | +| gateway.tls.enabled | | true | +| gateway.tls.secret.name | | "ace-cert" | +| ingress-nginx.enabled | | false | +| ingress-dns.enabled | | false | +| nats.enabled | | false | +| nats-dns.enabled | | false | +| trickster.enabled | | false | +| s3proxy.enabled | | false | +| openfga.enabled | | false | +| openfga.datastoreURI | | "" | +| pgoutbox.enabled | | false | +| outbox-syncer.enabled | | false | +| postgres-alerts.enabled | | true | +| postgres-alerts.form.alert.appSuffix | | "-db" | +| postgres-alerts.form.alert.groups.stash.enabled | | "" | +| redis-alerts.enabled | | true | +| redis-alerts.form.alert.appSuffix | | "-cache" | +| redis-alerts.form.alert.groups.stash.enabled | | "" | +| global.nameOverride | | "ace" | +| global.fullnameOverride | | "" | +| global.platform.host | | appscode.ninja | +| global.platform.hostType | | domain | +| global.platform.deploymentType | | CloudDemo | +| global.platform.ownerID | | 0 | +| global.platform.ownerName | | "" | +| global.platform.offlineInstaller | | false | +| global.license | License for the product.
Example:
`helm install appscode/ace \`
`--set-file global.license=/path/to/license/file`
`or`
`helm install appscode/ace \`
`--set global.license=` | "" | +| global.registry | Docker registry used to pull app related images | "" | +| global.registryFQDN | Docker registry fqdn used to pull app related images. Set this to use docker registry hosted at ${registryFQDN}/${registry}/${image} | ghcr.io | +| global.imagePullSecrets | Specify an array of imagePullSecrets. Secrets must be manually created in the namespace.
Example:
`helm template charts/ace \`
`--set global.imagePullSecrets[0].name=sec0 \`
`--set global.imagePullSecrets[1].name=sec1` | [] | +| global.serviceAccount.create | Specifies whether a service account should be created | true | +| global.serviceAccount.annotations | Annotations to add to the service account | {} | +| global.serviceAccount.name | The name of the service account to use. If not set and create is true, a name is generated using the fullname template | "" | +| global.monitoring.agent | Name of monitoring agent (eg "prometheus.io/operator") | "" | +| global.monitoring.serviceMonitor.labels | Specify the labels for ServiceMonitor. Prometheus crd will select ServiceMonitor using these labels. Only usable when monitoring agent is `prometheus.io/operator`. | {} | +| global.monitoring.exporter.resources.requests.memory | cpu: 100m | 128Mi | +| global.distro.openshift | | false | +| global.distro.ubi | | "" | +| global.infra.storageClass.name | | "standard" | +| global.infra.tls.issuer | | "ca" # ca,letsencrypt,letsencrypt-staging,external | +| global.infra.tls.ca.cert | | "" | +| global.infra.tls.ca.key | | "" | +| global.infra.tls.acme.email | | ops@appscode.com | +| global.infra.tls.acme.solver | | Ingress | +| global.infra.tls.acme.gatewayName | | backend | +| global.infra.tls.certificate.cert | | "" | +| global.infra.tls.certificate.key | | "" | +| global.infra.tls.jks.keystore | | | +| global.infra.tls.jks.truststore | | | +| global.infra.tls.jks.password | | "" | +| global.infra.dns.targetIPs | | [] | +| global.infra.dns.provider | | "none" # none,external,cloudflare,route53,cloudDNS,azureDNS | +| global.infra.dns.auth | | {} | +| global.infra.objstore.provider | | "" # s3,azure,gcs,swift | +| global.infra.objstore.bucket | might be a file storage prefixed with file:// | gs://ace-data | +| global.infra.objstore.mountPath | | /data/credentials | +| global.infra.kubestash.schedule | | "0 */2 * * *" | +| global.infra.kubestash.storageRef.name | | default | +| global.infra.kubestash.storageRef.namespace | | "" | +| global.infra.kubestash.retentionPolicy.name | | "keep-1mo" | +| global.infra.kubestash.retentionPolicy.namespace | | "" | +| global.infra.kubestash.encryptionSecret.name | | default-encryption-secret | +| global.infra.kubestash.encryptionSecret.namespace | | "" | +| global.infra.kubestash.storageSecret.create | | true | +| global.infra.kms.masterKeyURL | location where the secret key resides | "" | +| global.infra.kubepack.bucket | | "" | +| global.infra.kubepack.prefix | | "" | +| global.infra.badger.mountPath | | /badger | +| global.infra.badger.levels | | 7 | +| global.infra.invoice.mountPath | | /billing | +| global.infra.invoice.bucket | | "" | +| global.infra.invoice.prefix | | "" | +| global.infra.invoice.trackerEmail | | invoice-tracker@appscode.com | +| global.infra.fileserver.baseURL | | "" | +| global.infra.fileserver.bucket | bucket to store installer and kubepack yamls | "" | +| global.infra.fileserver.prefix | | "" | +| settings.db.version | | "18.3" | +| settings.db.databaseName | | bb | +| settings.db.deletionPolicy | | Halt | +| settings.db.persistence.size | | 10Gi | +| settings.db.resources.limits.memory | | 2Gi | +| settings.db.resources.requests.cpu | | "500m" | +| settings.db.resources.requests.memory | | 1Gi | +| settings.db.auth.username | | postgres | +| settings.db.auth.password | | "xyz" | +| settings.db.logSQL | | false | +| settings.pgpool.enabled | | true | +| settings.pgpool.replicas | | 2 | +| settings.pgpool.config.num_init_children | | "32" | +| settings.pgpool.config.max_pool | | "3" | +| settings.pgpool.config.listen_backlog_multiplier | | "4" | +| settings.pgpool.config.child_life_time | | "0" | +| settings.pgpool.config.child_max_connections | | "1000" | +| settings.pgpool.config.connection_life_time | | "0" | +| settings.pgpool.config.client_idle_limit | | "60" | +| settings.pgpool.config.connection_cache | | "on" | +| settings.pgpool.config.primary_routing_query_pattern_list | | "'.*cluster_info.*;.*cluster_user_auth.*'" | +| settings.pgpool.resources.limits.memory | | 512Mi | +| settings.pgpool.resources.requests.memory | | 256Mi | +| settings.pgpool.resources.requests.cpu | | 250m | +| settings.cache.version | | "7.2.4" | +| settings.cache.cacheInterval | | 60 | +| settings.cache.persistence.size | | 10Gi | +| settings.cache.resources.limits.memory | cpu: "1" | 2Gi | +| settings.cache.auth.username | | root | +| settings.cache.auth.password | | "xyz" | +| settings.cache.deletionPolicy | | Halt | +| settings.smtp.enabled | mailerServiceType: smtp | false | +| settings.smtp.host | | smtp.mailgun.org:465 | +| settings.smtp.tlsEnabled | | false | +| settings.smtp.from | | no-reply@example.com | +| settings.smtp.username | | apikey | +| settings.smtp.password | | xyz | +| settings.smtp.subjectPrefix | | ACE | +| settings.smtp.sendAsPlainText | | false | +| settings.nats.shardCount | | 16 | +| settings.nats.replicas | | 1 | +| settings.nats.mountPath | | /nats/creds | +| settings.nats.operatorCreds | | 'xyz' | +| settings.nats.operatorJwt | | 'xyz' | +| settings.nats.systemCreds | | 'xyz' | +| settings.nats.systemJwt | | 'xyz' | +| settings.nats.systemPubKey | | 'xyz' | +| settings.nats.systemUserCreds | | 'xyz' | +| settings.nats.adminCreds | | 'xyz' | +| settings.nats.adminUserCreds | | 'xyz' | +| settings.openfga.apiURL | | "" | +| settings.openfga.preSharedKey | | "" | +| settings.platform.appName | | 'ACE: Cloud Native Data Platform' | +| settings.platform.runMode | one of "GA", "BETA", "ALPHA", "DEV" | 'GA' | +| settings.platform.forcePrivate | # Force every new repository to be private. # | false | +| settings.platform.disableHttpGit | # Indicates whether or not to disable Git clone through HTTP/HTTPS. When # disabled, users can only perform Git operations via SSH. # | false | +| settings.platform.installLock | # Lock the path /install to configure b3 # | true | +| settings.platform.repositoryUploadEnabled | # Indicates whether or not to enable repository file upload feature. # | true | +| settings.platform.repositoryUploadAllowedTypes | # File types that are allowed to be uploaded, e.g. image/jpeg|image/png. # Leave empty means allow any file typ # | | +| settings.platform.repositoryUploadMaxFileSize | # Maximum size of each file in MB. # | 3 | +| settings.platform.repositoryUploadMaxFiles | # Maximum number of files per upload. # | 5 | +| settings.platform.serviceEnableCaptcha | # Enable this to use captcha validation for registration. # | true | +| settings.platform.serviceRegisterEmailConfirm | # Users need to confirm e-mail for registration # | true | +| settings.platform.serviceDisableRegistration | # Weather or not to allow users to register. # | false | +| settings.platform.disableRegularOrgCreation | # Bar regular users from creating organizations. Only seeds the ace-user-config secret; # site admins toggle it at runtime. Null lets the platform decide (on for selfhosted). # | null | +| settings.platform.serviceRequireSignInView | # Weather or not sign in is required to view anything. # | false | +| settings.platform.serviceEnableNotifyMail | # Mail notification # | true | +| settings.platform.serviceDomainWhiteList | # To create an account, email should belong to this domain list # | [] | +| settings.platform.cookieName | | i_like_ace | +| settings.platform.serverLandingPage | # Landing page for non-logged users, can be "home" or "explore" # | home | +| settings.platform.logMode | # Can be "console" and "file", default is "console" # Use comma to separate multiple modes, e.g. "console, file" # | console | +| settings.platform.logLevel | # Either "Trace", "Info", "Warn", "Error", "Fatal", default is "Trace" # | Info | +| settings.platform.otherShowFooterBranding | # Undocumented, but you can take a guess. # | false | +| settings.platform.otherShowFooterVersion | # Show version information about Gogs and Go in the footer # | true | +| settings.platform.otherShowFooterTemplateLoadTime | # Show time of template execution in the footer # | true | +| settings.platform.enableCSRFCookieHttpOnly | csrf cookie http only enable | false | +| settings.platform.cookieUsername | logged in username | ace_awesome | +| settings.platform.cookieRememberName | to auto sign in | ace_incredible | +| settings.platform.loginURL | This URL will be used to forward users to a third-party login page | "" | +| settings.platform.logoutURL | redirect url after logout | "" | +| settings.grafana.appMode | possible values : production, development | production | +| settings.grafana.secretKey | | 4nHrUDNw00AjlhAq8hCGYPxBt6I1UCbmdC5ReY19IPWdy8qFDzTZzXkdCr5d6qwP | +| settings.perses.encryptionKey | | "" | +| settings.inboxServer.jmapURL | | "" | +| settings.inboxServer.webAdminURL | | "" | +| settings.inboxServer.emailDomain | | "" | +| settings.inboxServer.adminJWTPrivateKey | | "" | +| settings.security.oauth2JWTSecret | | "" | +| settings.security.csrfSecretKey | | "" | +| settings.contract.bucket | | "" | +| settings.contract.prefix | | "" | +| settings.contract.licenseBucket | | "" | +| settings.firebase.project | | "" | +| settings.firebase.database | | "" | +| image.registry | Docker registry used to pull app container image | appscode | +| image.repository | App container image | b3 | +| image.tag | Overrides the image tag whose default is the chart appVersion. | "" | +| image.pullPolicy | | Always | +| kubectl.registry | Docker registry used to pull app container image | appscode | +| kubectl.repository | App container image | kubectl-nonroot | +| kubectl.tag | Overrides the image tag whose default is the chart appVersion. | "1.34" | +| kubectl.pullPolicy | | Always | +| podAnnotations | | {} | +| podSecurityContext | | {} | +| securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} | +| resources | | {} | +| nodeSelector | | {} | +| tolerations | | [] | +| affinity | | {} | +| branding.logo | | "" | +| branding.favicon | | "" | +| branding.primaryColor | | "" | +| branding.showAppTag | | false | +| branding.appName | | "" | +| cloudProviderOptions.aws | | {} | +| setupJob.hook.enable | | false | +| setupJob.hook.hook | | "post-install, post-upgrade, post-rollback, post-delete" | +| setupJob.hook.hookWeight | | "-5" | +| setupJob.hook.hookDeletePolicy | | "before-hook-creation" | +| setupJob.annotations | | {} | +| setupJob.ttlSecondsAfterFinished | | -1 | +| setupJob.config.admin.username | | admin | +| setupJob.config.admin.password | | secr3t | +| setupJob.config.admin.email | | admin@example.com | +| setupJob.config.admin.displayName | | "Ace Admin" | +| setupJob.config.admin.orgname | | "" | +| setupJob.config.selfManagement.createCAPICluster | | false | +| setupJob.config.selfManagement.import | | true | +| setupJob.config.selfManagement.targetIPs | | | +| setupJob.config.selfManagement.enableFeatures | | [] | +| setupJob.config.selfManagement.disableFeatures | | [] | +| setupJob.config.selfManagement.useGateway | | false | +| setupJob.config.selfManagement.enableCredLess | | false | +| setupJob.config.selfManagement.argoCD | | {} | +| extraObjects | | {} | +| envFrom | List of sources to populate environment variables in the container | [] | +| env | List of environment variables to set in the container | [] | Specify each parameter using the `--set key=value[,key=value]` argument to `helm upgrade -i`. For example: diff --git a/charts/ace/values.yaml b/charts/ace/values.yaml index 8bbff9e2f..81e85c130 100644 --- a/charts/ace/values.yaml +++ b/charts/ace/values.yaml @@ -306,6 +306,7 @@ settings: connection_life_time: "0" client_idle_limit: "60" connection_cache: "on" + primary_routing_query_pattern_list: "'.*cluster_info.*;.*cluster_user_auth.*'" resources: limits: memory: 512Mi