0
Fork 0
mirror of https://github.com/penpot/penpot-helm.git synced 2024-12-22 05:32:59 -05:00
penpot-helm/charts/penpot/values.yaml

623 lines
26 KiB
YAML
Raw Permalink Normal View History

2024-08-02 06:02:50 -05:00
# yaml-language-server: $schema=values.schema.json
2024-06-11 06:46:03 -05:00
## Default values for Penpot
global:
# -- Whether to deploy the Bitnami PostgreSQL chart as subchart. Check [the official chart](https://artifacthub.io/packages/helm/bitnami/postgresql) for configuration.
# @section -- Global parameters
2024-06-11 06:46:03 -05:00
postgresqlEnabled: false
# -- Whether to deploy the Bitnami Redis chart as subchart. Check [the official chart](https://artifacthub.io/packages/helm/bitnami/redis) for configuration.
# @section -- Global parameters
2024-06-11 06:46:03 -05:00
redisEnabled: false
# -- Global Docker registry secret names.
# E.g.
# imagePullSecrets:
# - myRegistryKeySecretName
# @section -- Global parameters
2024-06-11 06:46:03 -05:00
imagePullSecrets: []
# -- To partially override common.names.fullname
# @section -- Common parameters
2024-06-11 06:46:03 -05:00
nameOverride: ""
# -- To fully override common.names.fullname
# @section -- Common parameters
2024-06-11 06:46:03 -05:00
fullnameOverride: ""
serviceAccount:
# -- Specifies whether a ServiceAccount should be created.
# @section -- Common parameters
2024-06-11 06:46:03 -05:00
enabled: true
# -- Annotations for service account. Evaluated as a template.
# @section -- Common parameters
2024-06-11 06:46:03 -05:00
annotations: {}
# -- The name of the ServiceAccount to use. If not set and enabled is true, a name is generated using the fullname template.
# @section -- Common parameters
2024-06-11 06:46:03 -05:00
name: "penpot"
config:
# -- The public domain to serve Penpot on.
# **IMPORTANT:** Set `disable-secure-session-cookies` in the flags if you plan on serving it on a non HTTPS domain.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
publicUri: "http://penpot.example.com"
# -- The feature flags to enable. Check [the official docs](https://help.penpot.app/technical-guide/configuration/) for more info.
# @section -- Configuration parameters
2024-11-15 14:47:28 -05:00
flags: "enable-registration enable-login-with-password disable-email-verification enable-smtp"
# -- A random secret key needed for persistent user sessions. Generate with `python3 -c "import secrets; print(secrets.token_urlsafe(64))"` for example.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
apiSecretKey: "kmZ96pAxhTgk3HZvvBkPeVTspGBneKVLEpO_3ecORs_gwACENZ77z05zCe7skvPsQ3jI3QgkULQOWCuLjmjQsg"
# -- Comma separated list of allowed domains to register. Empty to allow all domains.
# @section -- Configuration parameters
registrationDomainWhitelist: ""
# -- Whether to enable sending of anonymous telemetry data.
# @section -- Configuration parameters
telemetryEnabled: true
2024-06-11 06:46:03 -05:00
postgresql:
# -- The PostgreSQL host to connect to. Empty to use dependencies.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
host: "" # Ex.: "postgresql.penpot.svc.cluster.local"
# -- The PostgreSQL host port to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
port: 5432
# -- The database username to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
username: "penpot"
# -- The database password to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
password: "penpot"
# -- The PostgreSQL database to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
database: "penpot"
# -- The name of an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
existingSecret: ""
secretKeys:
# -- The username key to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
usernameKey: ""
# -- The password key to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
passwordKey: ""
2024-06-11 06:46:03 -05:00
redis:
# -- The Redis host to connect to. Empty to use dependencies
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
host: "" # Ex.: "redis-headless.penpot.svc.cluster.local"
# -- The Redis host port to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
port: 6379
# -- The Redis database to connect to.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
database: "0"
2024-06-11 06:46:03 -05:00
assets:
# -- The storage backend for assets to use. Use `assets-fs` for filesystem, and `assets-s3` for S3.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
storageBackend: "assets-fs"
filesystem:
# -- The storage directory to use if you chose the filesystem storage backend.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
directory: "/opt/data/assets"
s3:
# -- The S3 access key ID to use if you chose the S3 storage backend.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
accessKeyID: ""
# -- The S3 secret access key to use if you chose the S3 storage backend.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
secretAccessKey: ""
# -- The S3 region to use if you chose the S3 storage backend.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
region: ""
# -- The name of the S3 bucket to use if you chose the S3 storage backend.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
bucket: ""
# -- The S3 endpoint URI to use if you chose the S3 storage backend.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
endpointURI: ""
# -- The name of an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
existingSecret: ""
secretKeys:
# -- The S3 access key ID to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
accessKeyIDKey: ""
# -- The S3 secret access key to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
secretAccessKey: ""
# -- The S3 endpoint URI to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
endpointURIKey: ""
2024-06-11 06:46:03 -05:00
smtp:
# -- Whether to enable SMTP configuration. You also need to add the 'enable-smtp' flag to the PENPOT_FLAGS variable.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
enabled: false
# -- The SMTP default email to send from.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
defaultFrom: ""
# -- The SMTP default email to reply to.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
defaultReplyTo: ""
# -- The SMTP host to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
host: ""
# -- The SMTP host port to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
port: ""
# -- The SMTP username to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
username: ""
# -- The SMTP password to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
password: ""
# -- Whether to use TLS for the SMTP connection.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
tls: true
# -- Whether to use SSL for the SMTP connection.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
ssl: false
# -- The name of an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
existingSecret: ""
secretKeys:
# -- The SMTP username to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
usernameKey: ""
# -- The SMTP password to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
passwordKey: ""
2024-06-11 06:46:03 -05:00
providers:
google:
# -- Whether to enable Google configuration. To enable Google auth, add `enable-login-with-google` to the flags.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
enabled: false
# -- The Google client ID to use. To enable Google auth, add `enable-login-with-google` to the flags.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
clientID: ""
# -- The Google client secret to use. To enable Google auth, add `enable-login-with-google` to the flags.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
clientSecret: ""
github:
# -- Whether to enable GitHub configuration. To enable GitHub auth, also add `enable-login-with-github` to the flags.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
enabled: false
# -- The GitHub client ID to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
clientID: ""
# -- The GitHub client secret to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
clientSecret: ""
gitlab:
# -- Whether to enable GitLab configuration. To enable GitLab auth, also add `enable-login-with-gitlab` to the flags.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
enabled: false
# -- The GitLab base URI to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
baseURI: "https://gitlab.com"
# -- The GitLab client ID to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
clientID: ""
# -- The GitLab client secret to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
clientSecret: ""
oidc:
# -- Whether to enable OIDC configuration. To enable OpenID Connect auth, also add `enable-login-with-oidc` to the flags.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
enabled: false
# -- The OpenID Connect base URI to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
baseURI: ""
# -- The OpenID Connect client ID to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
clientID: ""
# -- The OpenID Connect client secret to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
clientSecret: ""
# -- Optional OpenID Connect auth URI to use. Auto discovered if not provided.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
authURI: ""
# -- Optional OpenID Connect token URI to use. Auto discovered if not provided.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
tokenURI: ""
# -- Optional OpenID Connect user URI to use. Auto discovered if not provided.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
userURI: ""
# -- Optional OpenID Connect roles to use. If no role is provided, roles checking disabled.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
roles: "role1 role2"
# -- Optional OpenID Connect roles attribute to use. If not provided, the roles checking will be disabled.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
rolesAttribute: ""
# -- Optional OpenID Connect scopes to use. This settings allow overwrite the required scopes, use with caution because penpot requres at least `name` and `email` attrs found on the user info. Optional, defaults to `openid profile`.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
scopes: "scope1 scope2"
# -- Optional OpenID Connect name attribute to use. If not provided, the `name` prop will be used.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
nameAttribute: ""
# -- Optional OpenID Connect email attribute to use. If not provided, the `email` prop will be used.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
emailAttribute: ""
ldap:
# -- Whether to enable LDAP configuration. To enable LDAP, also add `enable-login-with-ldap` to the flags.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
enabled: false
# -- The LDAP host to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
host: "ldap"
# -- The LDAP port to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
port: 10389
# -- Whether to use SSL for the LDAP connection.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
ssl: false
# -- Whether to utilize StartTLS for the LDAP connection.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
startTLS: false
# -- The LDAP base DN to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
baseDN: "ou=people,dc=planetexpress,dc=com"
# -- The LDAP bind DN to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
bindDN: "cn=admin,dc=planetexpress,dc=com"
# -- The LDAP bind password to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
bindPassword: "GoodNewsEveryone"
# -- The LDAP user query to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
userQuery: "(&(|(uid=:username)(mail=:username))(memberOf=cn=penpot,ou=groups,dc=my-domain,dc=com))"
# -- The LDAP attributes username to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
attributesUsername: "uid"
# -- The LDAP attributes email to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
attributesEmail: "mail"
# -- The LDAP attributes fullname to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
attributesFullname: "cn"
# -- The LDAP attributes photo format to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
attributesPhoto: "jpegPhoto"
# -- The name of an existing secret to use.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
existingSecret: ""
secretKeys:
# -- The Google client ID key to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
googleClientIDKey: ""
# -- The Google client secret key to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
googleClientSecretKey: ""
# -- The GitHub client ID key to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
githubClientIDKey: ""
# -- The GitHub client secret key to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
githubClientSecretKey: ""
# -- The GitLab client ID key to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
gitlabClientIDKey: ""
# -- The GitLab client secret key to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
gitlabClientSecretKey: ""
# -- The OpenID Connect client ID key to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
oidcClientIDKey: ""
# -- The OpenID Connect client secret key to use from an existing secret.
# @section -- Configuration parameters
2024-06-11 06:46:03 -05:00
oidcClientSecretKey: ""
backend:
image:
# -- The Docker repository to pull the image from.
# @section -- Backend parameters
2024-06-11 06:46:03 -05:00
repository: penpotapp/backend
# -- The image tag to use.
# @section -- Backend parameters
2024-11-15 14:47:28 -05:00
tag: 2.3.3
# -- The image pull policy to use.
# @section -- Backend parameters
2024-06-11 06:46:03 -05:00
pullPolicy: IfNotPresent
# -- The number of replicas to deploy.
# @section -- Backend parameters
2024-06-11 06:46:03 -05:00
replicaCount: 1
service:
2024-07-09 11:08:53 -05:00
# -- The http service type to create.
# @section -- Backend parameters
type: ClusterIP
# -- The http service port to use.
# @section -- Backend parameters
port: 6060
# -- An optional map of annotations to be applied to the controller Deployment
# @section -- Backend parameters
deploymentAnnotations: {}
2024-07-10 08:24:35 -05:00
# -- An optional map of labels to be applied to the controller Pods
# @section -- Backend parameters
podLabels: {}
# -- An optional map of annotations to be applied to the controller Pods
# @section -- Backend parameters
podAnnotations: {}
# -- Configure Pods Security Context. Check [the official doc](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod)
# @section -- Backend parameters
2024-06-11 06:46:03 -05:00
podSecurityContext:
fsGroup: 1001
# -- Configure Container Security Context. Check [the official doc](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod)
# @section -- Backend parameters
2024-06-11 06:46:03 -05:00
containerSecurityContext:
runAsUser: 1001
allowPrivilegeEscalation: false
capabilities:
drop:
- all
readOnlyRootFilesystem: false
runAsNonRoot: true
# -- Affinity for Penpot pods assignment. Check [the official doc](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity)
# @section -- Backend parameters
2024-06-11 06:46:03 -05:00
affinity: {}
# -- Node labels for Penpot pods assignment. Check [the official doc](https://kubernetes.io/docs/user-guide/node-selection/)
# @section -- Backend parameters
2024-06-11 06:46:03 -05:00
nodeSelector: {}
# -- Tolerations for Penpot pods assignment. Check [the official doc](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/)
# @section -- Backend parameters
2024-06-11 06:46:03 -05:00
tolerations: []
# -- Penpot backend resource requests and limits. Check [the official doc](https://kubernetes.io/docs/user-guide/compute-resources/)
# @section -- Backend parameters
2024-06-11 06:46:03 -05:00
resources:
# -- The resources limits for the Penpot backend containers
# @section -- Backend parameters
2024-06-11 06:46:03 -05:00
limits: {}
# -- The requested resources for the Penpot backend containers
# @section -- Backend parameters
2024-06-11 06:46:03 -05:00
requests: {}
# -- Configure Pod Disruption Budget for the backend pods. Check [the official doc](https://kubernetes.io/docs/tasks/run-application/configure-pdb/)
# @section -- Backend parameters
pdb:
# -- Enable Pod Disruption Budget for the backend pods.
# @section -- Backend parameters
enabled: false
# -- (int,string) The number or percentage of pods from that set that must still be available after the eviction (e.g.: 3, "10%").
# @section -- Backend parameters
minAvailable:
# -- (int,string) The number or percentage of pods from that set that can be unavailable after the eviction (e.g.: 3, "10%").
# @section -- Backend parameters
maxUnavailable:
2024-06-11 06:46:03 -05:00
frontend:
image:
# -- The Docker repository to pull the image from.
# @section -- Frontend parameters
2024-06-11 06:46:03 -05:00
repository: penpotapp/frontend
# -- The image tag to use.
# @section -- Frontend parameters
2024-11-15 14:47:28 -05:00
tag: 2.3.3
# -- The image pull policy to use.
# @section -- Frontend parameters
2024-06-11 06:46:03 -05:00
pullPolicy: IfNotPresent
# -- The number of replicas to deploy.
# @section -- Frontend parameters
2024-06-11 06:46:03 -05:00
replicaCount: 1
service:
# -- The service type to create.
# @section -- Frontend parameters
2024-06-11 06:46:03 -05:00
type: ClusterIP
# -- The service port to use.
# @section -- Frontend parameters
2024-06-11 06:46:03 -05:00
port: 80
# -- An optional map of annotations to be applied to the controller Deployment
# @section -- Frontend parameters
deploymentAnnotations: {}
2024-07-10 08:24:35 -05:00
# -- An optional map of labels to be applied to the controller Pods
# @section -- Frontend parameters
podLabels: {}
# -- An optional map of annotations to be applied to the controller Pods
# @section -- Frontend parameters
podAnnotations: {}
# -- Configure Pods Security Context. Check [the official doc](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod)
# @section -- Frontend parameters
podSecurityContext: {}
# -- Configure Container Security Context. Check [the official doc](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod)
# @section -- Frontend parameters
containerSecurityContext: {}
# -- Affinity for Penpot pods assignment. Check [the official doc](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity)
# @section -- Frontend parameters
2024-06-11 06:46:03 -05:00
affinity: {}
# -- Node labels for Penpot pods assignment. Check [the official doc](https://kubernetes.io/docs/user-guide/node-selection/)
# @section -- Frontend parameters
2024-06-11 06:46:03 -05:00
nodeSelector: {}
# -- Tolerations for Penpot pods assignment. Check [the official doc](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/)
# @section -- Frontend parameters
2024-06-11 06:46:03 -05:00
tolerations: []
# -- Penpot frontend resource requests and limits. Check [the official doc](https://kubernetes.io/docs/user-guide/compute-resources/)
# @section -- Frontend parameters
2024-06-11 06:46:03 -05:00
resources:
# -- The resources limits for the Penpot frontend containers
# @section -- Frontend parameters
2024-06-11 06:46:03 -05:00
limits: {}
# -- The requested resources for the Penpot frontend containers
# @section -- Frontend parameters
2024-06-11 06:46:03 -05:00
requests: {}
# -- Configure Pod Disruption Budget for the frontend pods. Check [the official doc](https://kubernetes.io/docs/tasks/run-application/configure-pdb/)
# @section -- Frontend parameters
pdb:
# -- Enable Pod Disruption Budget for the frontend pods.
# @section -- Frontend parameters
enabled: false
# -- (int,string) The number or percentage of pods from that set that must still be available after the eviction (e.g.: 3, "10%").
# @section -- Frontend parameters
minAvailable:
# -- (int,string) The number or percentage of pods from that set that can be unavailable after the eviction (e.g.: 3, "10%").
# @section -- Frontend parameters
maxUnavailable:
2024-06-11 06:46:03 -05:00
exporter:
image:
# -- The Docker repository to pull the image from.
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
repository: penpotapp/exporter
# -- The image tag to use.
# @section -- Exporter parameters
2024-11-15 14:47:28 -05:00
tag: 2.3.3
# -- The image pull policy to use.
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
imagePullPolicy: IfNotPresent
# -- The number of replicas to deploy. Enable persistence.exporter if you use more than 1 replicaCount
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
replicaCount: 1
service:
# -- The service type to create.
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
type: ClusterIP
# -- The service port to use.
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
port: 6061
# -- An optional map of annotations to be applied to the controller Deployment
# @section -- Exporter parameters
deploymentAnnotations: {}
2024-07-10 08:24:35 -05:00
# -- An optional map of labels to be applied to the controller Pods
# @section -- Exporter parameters
podLabels: {}
# -- An optional map of annotations to be applied to the controller Pods
# @section -- Exporter parameters
podAnnotations: {}
# -- Configure Pods Security Context. Check [the official doc](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod)
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
podSecurityContext:
fsGroup: 1001
# -- Configure Container Security Context. Check [the official doc](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod)
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
containerSecurityContext:
runAsUser: 1001
allowPrivilegeEscalation: false
capabilities:
drop:
- all
2024-06-11 06:46:03 -05:00
readOnlyRootFilesystem: false
runAsNonRoot: true
# -- Affinity for Penpot pods assignment. Check [the official doc](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity)
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
affinity: {}
# -- Node labels for Penpot pods assignment. Check [the official doc](https://kubernetes.io/docs/user-guide/node-selection/)
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
nodeSelector: {}
# -- Tolerations for Penpot pods assignment. Check [the official doc](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/)
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
tolerations: []
# -- Penpot frontend resource requests and limits. Check [the official doc](https://kubernetes.io/docs/user-guide/compute-resources/)
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
resources:
# -- The resources limits for the Penpot frontend containers
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
limits: {}
# -- The requested resources for the Penpot frontend containers
# @section -- Exporter parameters
2024-06-11 06:46:03 -05:00
requests: {}
# -- Configure Pod Disruption Budget for the exporter pods. Check [the official doc](https://kubernetes.io/docs/tasks/run-application/configure-pdb/)
# @section -- Exporter parameters
pdb:
# -- Enable Pod Disruption Budget for the exporter pods.
# @section -- Exporter parameters
enabled: false
# -- (int,string) The number or percentage of pods from that set that must still be available after the eviction (e.g.: 3, "10%").
# @section -- Exporter parameters
minAvailable:
# -- (int,string) The number or percentage of pods from that set that can be unavailable after the eviction (e.g.: 3, "10%").
# @section -- Exporter parameters
maxUnavailable:
2024-06-11 06:46:03 -05:00
# @section -- Persistence parameters
2024-06-11 06:46:03 -05:00
persistence:
assets:
# -- Enable assets persistence using Persistent Volume Claims.
# @section -- Persistence parameters
2024-08-02 06:02:50 -05:00
enabled: false
# -- Assets persistent Volume storage class.
# If defined, storageClassName: <storageClass>.
# If undefined (the default) or set to null, no storageClassName spec is set, choosing the default provisioner.
# @section -- Persistence parameters
storageClass: ""
# -- Assets persistent Volume size.
# @section -- Persistence parameters
size: 20Gi
# -- The name of an existing PVC to use for assets persistence.
# @section -- Persistence parameters
existingClaim: ""
# -- Assets persistent Volume access modes.
# @section -- Persistence parameters
accessModes:
- ReadWriteOnce
# -- Assetsp ersistent Volume Claim annotations.
# @section -- Persistence parameters
annotations: {}
exporter:
# -- Enable exporter persistence using Persistent Volume Claims. If exporter.replicaCount you have to enable it.
# @section -- Persistence parameters
enabled: false
# -- Exporter persistent Volume storage class. Empty is choosing the default provisioner by the provider.
# @section -- Persistence parameters
storageClass: ""
# -- Exporter persistent Volume size.
# @section -- Persistence parameters
size: 10Gi
# -- The name of an existing PVC to use for persistence.
# @section -- Persistence parameters
existingClaim: ""
# -- Exporter persistent Volume access modes.
# @section -- Persistence parameters
accessModes:
- ReadWriteOnce
# -- Exporter persistent Volume Claim annotations.
# @section -- Persistence parameters
annotations: {}
2024-06-11 06:46:03 -05:00
ingress:
# -- Enable (frontend) Ingress Controller.
# @section -- Ingress parameters
2024-06-11 06:46:03 -05:00
enabled: false
# -- The Ingress className.
# @section -- Ingress parameters
2024-06-11 06:46:03 -05:00
className: ""
# -- Mapped annotations for the ingress crontroller.
# E.g.
# annotations:
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
# @section -- Ingress parameters
2024-06-11 06:46:03 -05:00
annotations: {}
# -- Root path for every hosts.
# @section -- Ingress parameters
2024-06-11 06:46:03 -05:00
path: "/"
# -- Array style hosts for the (frontend) ingress crontroller.
# @section -- Ingress parameters
2024-06-11 06:46:03 -05:00
hosts:
# -- The default external hostname to access to the penpot app.
# @section -- Ingress parameters
2024-08-13 00:52:46 -05:00
- "penpot.example.com"
# -- Array style TLS secrets for the (frontend) ingress crontroller.
# E.g.
# tls:
# - secretName: penpot.example.com-tls
# hosts:
# - penpot.example.com
# @section -- Ingress parameters
2024-06-11 06:46:03 -05:00
tls: []
# -- PostgreSQL configuration (Check for [more parameters here](https://artifacthub.io/packages/helm/bitnami/postgresql))
# @section -- PostgreSQL Dependencie parameters
2024-06-11 06:46:03 -05:00
postgresql:
auth:
# -- Name for a custom user to create.
# @section -- PostgreSQL Dependencie parameters
2024-06-11 06:46:03 -05:00
username: "penpot"
# -- Password for the custom user to create.
# @section -- PostgreSQL Dependencie parameters
2024-06-11 06:46:03 -05:00
password: "penpot"
# -- Name for a custom database to create.
# @section -- PostgreSQL Dependencie parameters
2024-06-11 06:46:03 -05:00
database: "penpot"
# -- Redis configuration (Check for [more parameters here](https://artifacthub.io/packages/helm/bitnami/redis))
# @section -- Redis Dependencie parameters
2024-06-11 06:46:03 -05:00
redis:
auth:
# -- Whether to enable password authentication.
# @section -- Redis Dependencie parameters
2024-06-11 06:46:03 -05:00
enabled: false