Skip to content
Snippets Groups Projects
Verified Commit e333b9b3 authored by Martin Weise's avatar Martin Weise
Browse files

WIP

parent 9ac9ced1
Branches
Tags
4 merge requests!296Dev,!293Dev,!289Dev,!287Dev
Show whitespace changes
Inline Side-by-side
helm/dbrepo/values.yaml
+ 81
− 99
View file @ e333b9b3
...@@ -22,47 +22,43 @@ clusterDomain: cluster.local ...@@ -22,47 +22,43 @@ clusterDomain: cluster.local
## @section Internal Admin User ## @section Internal Admin User
## @param admin.username The internal admin username.
## @param admin.password The internal admin password.
##
admin: admin:
## @param admin.username The internal admin username.
username: admin username: admin
## @param admin.password The internal admin password.
password: admin password: admin
## @section Metadata Database ## @section Metadata Database
## @param metadatadb.enabled Enable the Metadata Database.
## @skip metadatadb.fullnameOverride
## @param metadatadb.image.debug Set the logging level to `trace`. Otherwise, set to `info`.
## @param metadatadb.host The hostname for the microservices.
## @param metadatadb.rootUser.user The root username.
## @param metadatadb.rootUser.password The root user password.
## @param metadatadb.jdbcExtraArgs The extra arguments for JDBC connections in the microservices.
## @param metadatadb.db.name The database name.
## @skip metadatadb.metrics.enabled The Prometheus settings.
## @skip metadatadb.galera The Galera settings.
## @skip metadatadb.initdbScriptsConfigMap The initial database scripts.
## @param metadatadb.extraInitDbScripts Additional init.db scripts that are executed on the first start.
## @skip metadatadb.service The initial database scripts.
## @param metadatadb.persistence.enabled Enable persistent storage. Requires PV-provisioner.
## @param metadatadb.replicaCount The number of replicas, should be uneven (2n+1).
##
metadatadb: metadatadb:
## @param metadatadb.enabled Enable the Metadata Database.
enabled: true enabled: true
## @skip metadatadb.fullnameOverride
fullnameOverride: metadata-db fullnameOverride: metadata-db
image: image:
## @param metadatadb.image.debug Set the logging level to `trace`. Otherwise, set to `info`.
debug: false debug: false
## @param metadatadb.host The hostname for the microservices.
host: metadata-db host: metadata-db
auth: auth:
## @param metadatadb.auth.root The root username.
root: root root: root
## @param metadatadb.auth.rootPassword The root user password.
rootPassword: dbrepo rootPassword: dbrepo
## @param metadatadb.auth.database The database name.
database: dbrepo database: dbrepo
## @param metadatadb.auth.replicationUser The database replication username.
replicationUser: replication replicationUser: replication
## @param metadatadb.auth.replicationPassword The database replication user password
replicationPassword: replication replicationPassword: replication
## @param metadatadb.jdbcExtraArgs The extra arguments for JDBC connections in the microservices.
jdbcExtraArgs: "" jdbcExtraArgs: ""
metrics: metrics:
## @skip metadatadb.metrics.enabled The Prometheus settings.
enabled: false enabled: false
## @skip metadatadb.initdbScriptsConfigMap The initial database scripts.
initdbScriptsConfigMap: metadata-db-setup initdbScriptsConfigMap: metadata-db-setup
## @param metadatadb.extraInitDbScripts Additional init.db scripts that are executed on the first start.
extraInitDbScripts: { } extraInitDbScripts: { }
# 03-additional-data.sql: | # 03-additional-data.sql: |
# BEGIN; # BEGIN;
...@@ -70,94 +66,88 @@ metadatadb: ...@@ -70,94 +66,88 @@ metadatadb:
# VALUES ('MariaDB Galera TEST', 'mariadb_11_1_3', 1, 'data-db', 3306, 'data-db', 80, 'root', 'dbrepo'); # VALUES ('MariaDB Galera TEST', 'mariadb_11_1_3', 1, 'data-db', 3306, 'data-db', 80, 'root', 'dbrepo');
# COMMIT; # COMMIT;
secondary: secondary:
## @param metadatadb.secondary.replicaCount The number of replicas of the secondary database pods.
replicaCount: 2 replicaCount: 2
## @section Auth Service ## @section Auth Service
## @param authservice.enabled Enable the Auth Service.
## @skip authservice.fullnameOverride
## @param authservice.image.debug Set the logging level to `trace`. Otherwise, set to `info`.
## @param authservice.endpoint The hostname for the microservices.
## @param authservice.auth.adminUser The admin username.
## @param authservice.auth.adminPassword The admin user password.
## @skip authservice.postgresql
## @skip authservice.extraStartupArgs
## @param authservice.jwt.pubkey The JWT public key from the `dbrepo-client`.
## @param authservice.tls.enabled Enable TLS/SSL communication. Required for HTTPS.
## @param authservice.tls.existingSecret The secret containing the `tls.crt`, `tls.key` and `ca.crt`.
## @param authservice.tls.usePem Use PEM certificates as input instead of PKS12/JKS stores.
## @param authservice.metrics.enabled Enable the Prometheus metrics export sidecar container.
## @param authservice.client.id The client id for the microservices.
## @param authservice.client.secret The client secret for the microservices.
## @skip authservice.extraEnvVarsCM
## @skip authservice.extraVolumes
## @skip authservice.extraVolumeMounts
## @skip authservice.replicaCount The number of replicas.
##
authservice: authservice:
## @param authservice.enabled Enable the Auth Service.
enabled: true enabled: true
## @skip authservice.fullnameOverride
fullnameOverride: auth-service fullnameOverride: auth-service
image: image:
## @param authservice.image.debug Set the logging level to `trace`. Otherwise, set to `info`.
debug: false debug: false
## @param authservice.endpoint The hostname for the microservices.
endpoint: http://auth-service endpoint: http://auth-service
auth: auth:
## @param authservice.auth.adminUser The admin username.
adminUser: fda adminUser: fda
## @param authservice.auth.adminPassword The admin user password.
adminPassword: fda adminPassword: fda
## @skip authservice.postgresql
postgresql: postgresql:
enabled: true enabled: true
auth: auth:
postgresPassword: postgres postgresPassword: postgres
## @skip authservice.extraStartupArgs
extraStartupArgs: "--import-realm" extraStartupArgs: "--import-realm"
jwt: jwt:
## @param authservice.jwt.pubkey The JWT public key from the `dbrepo-client`.
pubkey: "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqnHQ2BWWW9vDNLRCcxD++xZg/16oqMo/c1l+lcFEjjAIJjJp/HqrPYU/U9GvquGE6PbVFtTzW1KcKawOW+FJNOA3CGo8Q1TFEfz43B8rZpKsFbJKvQGVv1Z4HaKPvLUm7iMm8Hv91cLduuoWx6Q3DPe2vg13GKKEZe7UFghF+0T9u8EKzA/XqQ0OiICmsmYPbwvf9N3bCKsB/Y10EYmZRb8IhCoV9mmO5TxgWgiuNeCTtNCv2ePYqL/U0WvyGFW0reasIK8eg3KrAUj8DpyOgPOVBn3lBGf+3KFSYi+0bwZbJZWqbC/Xlk20Go1YfeJPRIt7ImxD27R/lNjgDO/MwIDAQAB" pubkey: "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqnHQ2BWWW9vDNLRCcxD++xZg/16oqMo/c1l+lcFEjjAIJjJp/HqrPYU/U9GvquGE6PbVFtTzW1KcKawOW+FJNOA3CGo8Q1TFEfz43B8rZpKsFbJKvQGVv1Z4HaKPvLUm7iMm8Hv91cLduuoWx6Q3DPe2vg13GKKEZe7UFghF+0T9u8EKzA/XqQ0OiICmsmYPbwvf9N3bCKsB/Y10EYmZRb8IhCoV9mmO5TxgWgiuNeCTtNCv2ePYqL/U0WvyGFW0reasIK8eg3KrAUj8DpyOgPOVBn3lBGf+3KFSYi+0bwZbJZWqbC/Xlk20Go1YfeJPRIt7ImxD27R/lNjgDO/MwIDAQAB"
tls: tls:
## @param authservice.tls.enabled Enable TLS/SSL communication. Required for HTTPS.
enabled: true enabled: true
## @param authservice.tls.existingSecret The secret containing the `tls.crt`, `tls.key` and `ca.crt`.
existingSecret: ingress-cert existingSecret: ingress-cert
## @skip authservice.tls.usePem
usePem: true usePem: true
metrics: metrics:
## @param authservice.metrics.enabled Enable the Prometheus metrics export sidecar container.
enabled: false enabled: false
client: client:
## @param authservice.client.id The client id for the microservices.
id: dbrepo-client id: dbrepo-client
## @param authservice.client.secret The client secret for the microservices.
secret: MUwRc7yfXSJwX8AdRMWaQC3Nep1VjwgG secret: MUwRc7yfXSJwX8AdRMWaQC3Nep1VjwgG
## @skip authservice.extraEnvVarsCM
extraEnvVarsCM: auth-service-config extraEnvVarsCM: auth-service-config
## @skip authservice.extraVolumes
extraVolumes: extraVolumes:
- name: config-map - name: config-map
configMap: configMap:
name: auth-service-config name: auth-service-config
## @skip authservice.extraVolumeMounts
extraVolumeMounts: extraVolumeMounts:
- name: config-map - name: config-map
mountPath: /opt/bitnami/keycloak/data/import mountPath: /opt/bitnami/keycloak/data/import
## @skip authservice.replicaCount The number of replicas.
replicaCount: 2 replicaCount: 2
## @section Data Database ## @section Data Database
## @param datadb.enabled Enable the Data Database.
## @skip datadb.fullnameOverride
## @param datadb.image.debug Set the logging level to `trace`. Otherwise, set to `info`.
## @skip datadb.extraFlags
## @param datadb.rootUser.user The root username.
## @param datadb.rootUser.password The root user password.
## @skip datadb.metrics.enabled The Prometheus settings.
## @skip datadb.galera The Galera settings.
## @skip datadb.service
## @skip datadb.sidecars
## @skip datadb.extraVolumeMounts
## @skip datadb.extraVolumes
## @param datadb.persistence.enabled Enable persistent storage. Requires PV-provisioner.
## @param datadb.replicaCount The number of replicas, should be uneven (2n+1).
##
datadb: datadb:
## @param datadb.enabled Enable the Data Database.
enabled: true enabled: true
## @skip datadb.fullnameOverride
fullnameOverride: data-db fullnameOverride: data-db
image: image:
## @param datadb.image.debug Set the logging level to `trace`. Otherwise, set to `info`.
debug: false debug: false
## @skip datadb.extraFlags
extraFlags: "--character-set-server=utf8mb4 --collation-server=utf8mb4_general_ci" extraFlags: "--character-set-server=utf8mb4 --collation-server=utf8mb4_general_ci"
auth: auth:
## @param datadb.auth.rootPassword The root user password.
rootPassword: dbrepo rootPassword: dbrepo
## @param datadb.auth.replicationPassword The database replication user password
replicationUser: replication replicationUser: replication
## @param datadb.jdbcExtraArgs The extra arguments for JDBC connections in the microservices.
replicationPassword: replication replicationPassword: replication
metrics: metrics:
## @skip datadb.metrics.enabled
enabled: true enabled: true
## @skip datadb.primary
primary: primary:
service: service:
extraPorts: extraPorts:
...@@ -213,54 +203,41 @@ datadb: ...@@ -213,54 +203,41 @@ datadb:
emptyDir: { } emptyDir: { }
persistence: persistence:
enabled: false enabled: false
## @skip datadb.secondary
secondary: secondary:
replicaCount: 2 replicaCount: 2
## @section Search Database ## @section Search Database
## @param searchdb.enabled Enable the Search Database.
## @skip searchdb.fullnameOverride
## @param searchdb.host The hostname for the microservices.
## @param searchdb.port The port for the microservices.
## @param searchdb.username The admin username.
## @param searchdb.password The admin user password.
## @skip searchdb.clusterName
## @skip searchdb.masterService
## @param searchdb.replicas The number of replicas.
## @skip searchdb.sysctlInit
## @param searchdb.persistence.enabled Enable persistent storage. Requires PV-provisioner.
## @skip searchdb.service
## @skip searchdb.extraEnvs
## @skip searchdb.extraVolumeMounts
## @skip searchdb.extraVolumes
## @skip searchdb.config
##
searchdb: searchdb:
enabled: true enabled: true.
## @skip searchdb.fullnameOverride
fullnameOverride: search-db fullnameOverride: search-db
## @skip searchdb.servicenameOverride
servicenameOverride: search-db servicenameOverride: search-db
## @param searchdb.host The hostname for the microservices.
host: search-db host: search-db
## @param searchdb.port The port for the microservices.
port: 9200 port: 9200
## @skip searchdb.security
security: security:
enabled: false enabled: false
adminPassword: admin adminPassword: admin
## @param searchdb.clusterName The cluster name.
clusterName: search-db clusterName: search-db
## @section Upload Service ## @section Upload Service
## @param uploadservice.enabled Enable the Upload Service.
## @skip uploadservice.fullnameOverride
## @skip uploadservice.image
## @skip uploadservice.containerArgs
## @skip uploadservice.envFrom
## @param uploadservice.replicaCount The number of replicas.
##
uploadservice: uploadservice:
## @param uploadservice.enabled Enable the Upload Service.
enabled: true enabled: true
## @skip uploadservice.fullnameOverride
fullnameOverride: upload-service fullnameOverride: upload-service
## @skip uploadservice.image
image: image:
repository: tusproject/tusd repository: tusproject/tusd
tag: v1.12 tag: v1.12
## @skip uploadservice.securityContext
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
runAsUser: 1000 runAsUser: 1000
...@@ -271,59 +248,58 @@ uploadservice: ...@@ -271,59 +248,58 @@ uploadservice:
capabilities: capabilities:
drop: drop:
- ALL - ALL
## @skip uploadservice.containerArgs
containerArgs: containerArgs:
- "--base-path=/api/upload/files/" - "--base-path=/api/upload/files/"
- "-s3-endpoint=http://storageservice-s3:9000" - "-s3-endpoint=http://storageservice-s3:9000"
- "-s3-bucket=dbrepo-upload" - "-s3-bucket=dbrepo-upload"
## @skip uploadservice.envFrom
envFrom: envFrom:
- secretRef: - secretRef:
name: upload-service-secret name: upload-service-secret
## @param uploadservice.replicaCount The number of replicas.
replicaCount: 2 replicaCount: 2
## @section Broker Service ## @section Broker Service
## @param brokerservice.enabled Enable the Broker Service.
## @skip brokerservice.fullnameOverride
## @skip brokerservice.image
## @param brokerservice.endpoint The management api endpoint for the microservices.
## @param brokerservice.host The hostname for the microservices.
## @param brokerservice.port The port for the microservices.
## @param brokerservice.virtualHost The default virtual host name.
## @param brokerservice.queueName The default queue name.
## @param brokerservice.exchangeName The default exchange name.
## @param brokerservice.routingKey The default routing key binding from the default queue to the default exchange.
## @param brokerservice.connectionTimeout The connection timeout in ms.
## @skip brokerservice.auth
## @skip brokerservice.extraConfiguration
## @skip brokerservice.loadDefinition
## @skip brokerservice.extraVolumes
## @skip brokerservice.extraPlugins
## @param brokerservice.persistence.enabled Enable persistent storage. Requires PV-provisioner.
## @skip brokerservice.service
## @param brokerservice.replicaCount The number of replicas.
##
brokerservice: brokerservice:
## @param brokerservice.enabled Enable the Broker Service.
enabled: true enabled: true
## @skip brokerservice.fullnameOverride
fullnameOverride: broker-service fullnameOverride: broker-service
image: image:
## @param brokerservice.image.debug Set the logging level to `trace`. Otherwise, set to `info`.
debug: true debug: true
## @param brokerservice.endpoint The management api endpoint for the microservices.
endpoint: http://broker-service:15672 endpoint: http://broker-service:15672
## @param brokerservice.host The hostname for the microservices.
host: broker-service host: broker-service
## @param brokerservice.port The port for the microservices.
port: 5672 port: 5672
## @param brokerservice.virtualHost The default virtual host name.
virtualHost: dbrepo virtualHost: dbrepo
## @param brokerservice.queueName The default queue name.
queueName: dbrepo queueName: dbrepo
## @param brokerservice.exchangeName The default exchange name.
exchangeName: dbrepo exchangeName: dbrepo
## @param brokerservice.routingKey The default routing key binding from the default queue to the default exchange.
routingKey: dbrepo.# routingKey: dbrepo.#
## @param brokerservice.connectionTimeout The connection timeout in ms.
connectionTimeout: 60000 connectionTimeout: 60000
auth: auth:
## @skip brokerservice.auth.tls
tls: tls:
enabled: false enabled: false
sslOptionsVerify: true sslOptionsVerify: true
failIfNoPeerCert: true failIfNoPeerCert: true
existingSecret: ingress-cert existingSecret: ingress-cert
## @param brokerservice.auth.username The initial administrator username.
username: broker username: broker
## @param brokerservice.auth.password The initial administrator user password.
password: broker password: broker
## @param brokerservice.auth.passwordHash The initial administrator user password has generated with [`generate-rabbitmq-pw.sh`](https://gitlab.phaidra.org/fair-data-austria-db-repository/fda-services/-/blob/release-1.4.4/helm/dbrepo/hack/generate-rabbitmq-pw.sh).
passwordHash: 1gwjNNTBPKLgyzbsUykfR0JIFC6nNqbNJaxzZ14uPT8JGcTZ passwordHash: 1gwjNNTBPKLgyzbsUykfR0JIFC6nNqbNJaxzZ14uPT8JGcTZ
## @skip brokerservice.extraConfiguration
extraConfiguration: |- extraConfiguration: |-
default_vhost = dbrepo default_vhost = dbrepo
default_user_tags.administrator = true default_user_tags.administrator = true
...@@ -347,20 +323,26 @@ brokerservice: ...@@ -347,20 +323,26 @@ brokerservice:
management.oauth_client_secret = JEC2FexxrX4N65fLeDGukAl6R3Lc9y0u management.oauth_client_secret = JEC2FexxrX4N65fLeDGukAl6R3Lc9y0u
management.oauth_scopes = openid management.oauth_scopes = openid
management.oauth_provider_url = https://example.com/api/auth/realms/dbrepo management.oauth_provider_url = https://example.com/api/auth/realms/dbrepo
## @skip brokerservice.loadDefinition
loadDefinition: loadDefinition:
enabled: true enabled: true
existingSecret: broker-service-secret existingSecret: broker-service-secret
## @skip brokerservice.extraVolumes
extraVolumes: extraVolumes:
- name: secret-map - name: secret-map
secret: secret:
secretName: broker-service-secret secretName: broker-service-secret
## @param brokerservice.extraPlugins The list of plugins to be activated.
extraPlugins: rabbitmq_prometheus rabbitmq_auth_backend_oauth2 rabbitmq_auth_mechanism_ssl extraPlugins: rabbitmq_prometheus rabbitmq_auth_backend_oauth2 rabbitmq_auth_mechanism_ssl
persistence: persistence:
## @param brokerservice.persistence.enabled If set to true, a PVC will be created.
enabled: false enabled: false
## @skip brokerservice.service
service: service:
type: ClusterIP type: ClusterIP
managerPortEnabled: true managerPortEnabled: true
# loadBalancerIP: # loadBalancerIP:
## @param brokerservice.replicaCount The number of replicas.
replicaCount: 1 replicaCount: 1
## @section Analyse Service ## @section Analyse Service
......
values.schema.json
+ 246
− 336
View file @ e333b9b3
...@@ -187,6 +187,9 @@ ...@@ -187,6 +187,9 @@
"password": { "password": {
"type": "string" "type": "string"
}, },
"passwordHash": {
"type": "string"
},
"tls": { "tls": {
"properties": { "properties": {
"enabled": { "enabled": {
...@@ -314,59 +317,28 @@ ...@@ -314,59 +317,28 @@
}, },
"datadb": { "datadb": {
"properties": { "properties": {
"enabled": { "auth": {
"type": "boolean"
},
"extraFlags": {
"type": "string"
},
"extraVolumeMounts": {
"items": {
"properties": { "properties": {
"mountPath": { "replicationPassword": {
"type": "string" "type": "string"
}, },
"name": { "replicationUser": {
"type": "string" "type": "string"
}
},
"type": "object"
}, },
"type": "array" "rootPassword": {
},
"extraVolumes": {
"items": {
"properties": {
"emptyDir": {
"properties": {},
"type": "object"
},
"name": {
"type": "string" "type": "string"
} }
}, },
"type": "object" "type": "object"
}, },
"type": "array" "enabled": {
}, "type": "boolean"
"fullnameOverride": {
"type": "string"
}, },
"galera": { "extraFlags": {
"properties": {
"mariabackup": {
"properties": {
"password": {
"type": "string" "type": "string"
}, },
"user": { "fullnameOverride": {
"type": "string" "type": "string"
}
},
"type": "object"
}
},
"type": "object"
}, },
"image": { "image": {
"properties": { "properties": {
...@@ -384,28 +356,45 @@ ...@@ -384,28 +356,45 @@
}, },
"type": "object" "type": "object"
}, },
"persistence": { "primary": {
"properties": { "properties": {
"enabled": { "extraVolumeMounts": {
"type": "boolean" "items": {
"properties": {
"mountPath": {
"type": "string"
},
"name": {
"type": "string"
} }
}, },
"type": "object" "type": "object"
}, },
"replicaCount": { "type": "array"
"type": "integer"
}, },
"rootUser": { "extraVolumes": {
"items": {
"properties": { "properties": {
"password": { "emptyDir": {
"type": "string" "properties": {},
"type": "object"
}, },
"user": { "name": {
"type": "string" "type": "string"
} }
}, },
"type": "object" "type": "object"
}, },
"type": "array"
},
"persistence": {
"properties": {
"enabled": {
"type": "boolean"
}
},
"type": "object"
},
"service": { "service": {
"properties": { "properties": {
"extraPorts": { "extraPorts": {
...@@ -578,6 +567,17 @@ ...@@ -578,6 +567,17 @@
}, },
"type": "object" "type": "object"
}, },
"secondary": {
"properties": {
"replicaCount": {
"type": "integer"
}
},
"type": "object"
}
},
"type": "object"
},
"dataservice": { "dataservice": {
"properties": { "properties": {
"consumerConcurrentMax": { "consumerConcurrentMax": {
...@@ -762,9 +762,21 @@ ...@@ -762,9 +762,21 @@
}, },
"metadatadb": { "metadatadb": {
"properties": { "properties": {
"db": { "auth": {
"properties": { "properties": {
"name": { "database": {
"type": "string"
},
"replicationPassword": {
"type": "string"
},
"replicationUser": {
"type": "string"
},
"root": {
"type": "string"
},
"rootPassword": {
"type": "string" "type": "string"
} }
}, },
...@@ -780,22 +792,6 @@ ...@@ -780,22 +792,6 @@
"fullnameOverride": { "fullnameOverride": {
"type": "string" "type": "string"
}, },
"galera": {
"properties": {
"mariabackup": {
"properties": {
"password": {
"type": "string"
},
"user": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
},
"host": { "host": {
"type": "string" "type": "string"
}, },
...@@ -821,42 +817,10 @@ ...@@ -821,42 +817,10 @@
}, },
"type": "object" "type": "object"
}, },
"persistence": { "secondary": {
"properties": { "properties": {
"enabled": {
"type": "boolean"
}
},
"type": "object"
},
"replicaCount": { "replicaCount": {
"type": "integer" "type": "integer"
},
"rootUser": {
"properties": {
"password": {
"type": "string"
},
"user": {
"type": "string"
}
},
"type": "object"
},
"service": {
"properties": {
"annotations": {
"properties": {},
"type": "object"
},
"loadBalancerIP": {
"type": "string"
},
"loadBalancerSourceRanges": {
"type": "array"
},
"type": {
"type": "string"
} }
}, },
"type": "object" "type": "object"
...@@ -975,120 +939,30 @@ ...@@ -975,120 +939,30 @@
"clusterName": { "clusterName": {
"type": "string" "type": "string"
}, },
"config": {
"properties": {
"opensearch.yml": {
"type": "string"
}
},
"type": "object"
},
"enabled": { "enabled": {
"type": "boolean" "type": "boolean"
}, },
"extraEnvs": {
"items": {
"properties": {
"name": {
"type": "string"
},
"value": {
"type": "string"
}
},
"type": "object"
},
"type": "array"
},
"extraVolumeMounts": {
"items": {
"properties": {
"mountPath": {
"type": "string"
},
"name": {
"type": "string"
},
"readOnly": {
"type": "boolean"
}
},
"type": "object"
},
"type": "array"
},
"extraVolumes": {
"items": {
"properties": {
"name": {
"type": "string"
},
"secret": {
"properties": {
"secretName": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
},
"type": "array"
},
"fullnameOverride": { "fullnameOverride": {
"type": "string" "type": "string"
}, },
"host": { "host": {
"type": "string" "type": "string"
}, },
"masterService": {
"type": "string"
},
"password": {
"type": "string"
},
"persistence": {
"properties": {
"enabled": {
"type": "boolean"
}
},
"type": "object"
},
"port": { "port": {
"type": "integer" "type": "integer"
}, },
"protocol": { "security": {
"type": "string"
},
"replicas": {
"type": "integer"
},
"service": {
"properties": { "properties": {
"annotations": { "adminPassword": {
"properties": {},
"type": "object"
},
"loadBalancerSourceRanges": {
"type": "array"
},
"type": {
"type": "string" "type": "string"
}
}, },
"type": "object"
},
"sysctlInit": {
"properties": {
"enabled": { "enabled": {
"type": "boolean" "type": "boolean"
} }
}, },
"type": "object" "type": "object"
}, },
"username": { "servicenameOverride": {
"type": "string" "type": "string"
} }
}, },
...@@ -1450,6 +1324,42 @@ ...@@ -1450,6 +1324,42 @@
}, },
"replicaCount": { "replicaCount": {
"type": "integer" "type": "integer"
},
"securityContext": {
"properties": {
"allowPrivilegeEscalation": {
"type": "boolean"
},
"capabilities": {
"properties": {
"drop": {
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"runAsGroup": {
"type": "integer"
},
"runAsNonRoot": {
"type": "boolean"
},
"runAsUser": {
"type": "integer"
},
"seccompProfile": {
"properties": {
"type": {
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
} }
}, },
"type": "object" "type": "object"
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment