genieacs-container/charts/genieacs/values.yaml at main · GeiserX/genieacs-container · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
image:
  repository: drumsergio/genieacs
  pullPolicy: IfNotPresent
  tag: "1.2.16.0"

replicaCount: 1

service_http:
  type: ClusterIP
  port_http: 3000

service_cwmp:
  type: ClusterIP
  port_cwmp: 7547

service_nbi:
  type: ClusterIP
  port_nbi: 7557

service_fs:
  type: ClusterIP
  port_fs: 7567

ingress:
  enabled: false
  className: ""
  annotations: {}
  hosts:
    - host: genieacs.local
      paths:
        - path: /
          pathType: ImplementationSpecific
  tls: []

env:
  GENIEACS_UI_JWT_SECRET: changeme
  GENIEACS_CWMP_ACCESS_LOG_FILE: /var/log/genieacs/genieacs-cwmp-access.log
  GENIEACS_NBI_ACCESS_LOG_FILE: /var/log/genieacs/genieacs-nbi-access.log
  GENIEACS_FS_ACCESS_LOG_FILE: /var/log/genieacs/genieacs-fs-access.log
  GENIEACS_UI_ACCESS_LOG_FILE: /var/log/genieacs/genieacs-ui-access.log
  GENIEACS_DEBUG_FILE: /var/log/genieacs/genieacs-debug.yaml
  GENIEACS_EXT_DIR: /opt/genieacs/ext

envFrom: []
# - secretRef:
#     name: genieacs-secrets

extraEnvVars: []
# - name: GENIEACS_UI_JWT_SECRET
#   valueFrom:
#     secretKeyRef:
#       name: genieacs-jwt-secret
#       key: GENIEACS_UI_JWT_SECRET

resources:
  limits:
    memory: 4Gi
  requests:
    cpu: 500m
    memory: 2Gi

mongodb:
  enabled: true
  auth:
    enabled: false
    # When auth.enabled is true, the chart auto-constructs an authenticated URI.
    # If rootPassword is set here, the password is URL-encoded at template time
    # (safe for special characters like @, :, /, %). If left empty, the subchart
    # auto-generates an alphanumeric password resolved at runtime via secretKeyRef.
    # rootPassword: ""
    # existingSecret: ""  # Use a pre-existing secret instead of the subchart's
  persistence:
    enabled: true
    size: 8Gi

# Used when mongodb.enabled is false (bring your own MongoDB)
# Must include credentials if the external MongoDB requires auth
externalMongodb:
  url: ""

persistence:
  enabled: true
  accessModes:
    - ReadWriteOnce
  size: 5Gi
  # storageClass: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podSecurityContext:
  fsGroup: 999
  runAsNonRoot: false
  runAsUser: 0

securityContext:
  allowPrivilegeEscalation: false
  capabilities:
    drop:
      - ALL
    add:
      - SETUID
      - SETGID
  readOnlyRootFilesystem: false
  # Note: Container starts as root for cron, then drops to genieacs via gosu
  runAsNonRoot: false
  runAsUser: 0

livenessProbe:
  enabled: true
  httpGet:
    path: /
    port: http
  initialDelaySeconds: 60
  periodSeconds: 10
  timeoutSeconds: 5
  failureThreshold: 3

readinessProbe:
  enabled: true
  httpGet:
    path: /
    port: http
  initialDelaySeconds: 30
  periodSeconds: 10
  timeoutSeconds: 5
  failureThreshold: 3

podDisruptionBudget:
  enabled: false
  minAvailable: 1
  # maxUnavailable: 1

nodeSelector: {}

tolerations: []

affinity: {}