diff --git a/charts/airbyte/templates/airbyte-db.yaml b/charts/airbyte/templates/airbyte-db.yaml index 91cbd658928..b3c9908282c 100644 --- a/charts/airbyte/templates/airbyte-db.yaml +++ b/charts/airbyte/templates/airbyte-db.yaml @@ -81,5 +81,5 @@ spec: accessModes: [ "ReadWriteOnce" ] resources: requests: - storage: 500Mi + storage: {{ .Values.postgresql.storage.volumeClaimValue }} {{- end }} diff --git a/charts/airbyte/values.yaml b/charts/airbyte/values.yaml index 206079ee8ba..5a78dd6a5cd 100644 --- a/charts/airbyte/values.yaml +++ b/charts/airbyte/values.yaml @@ -1,6 +1,5 @@ ### TEST FOR RELEASE WORKFLOW - # Global params that are overwritten with umbrella chart global: # -- Service Account name override @@ -41,12 +40,12 @@ global: # -- The first name of the initial user firstName: "" # -- The last name of the initial user - lastName: "" + lastName: "" # -- The key within `emailSecretName` where the initial user's email is stored emailSecretKey: "instance-admin-email" # -- The key within `passwordSecretName` where the initial user's password is stored passwordSecretKey: "instance-admin-password" - + # -- SSO Identify Provider configuration; (requires Enterprise) #identityProvider: # # -- Secret name where the OIDC configuration is stored @@ -93,8 +92,6 @@ global: # -- The key within `secretName` where the password is stored #passwordSecretKey: "" # e.g."database-password" - - storage: # -- The storage backend type. Supports s3, gcs, azure, minio (default) type: minio # default storage used @@ -237,7 +234,7 @@ webapp: fsGroup: 1000 containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true runAsUser: 1000 runAsGroup: 1000 @@ -463,7 +460,7 @@ server: fsGroup: 1000 containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true # uid=1000(airbyte) runAsUser: 1000 @@ -645,7 +642,7 @@ worker: fsGroup: 1000 containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true # uid=1000(airbyte) runAsUser: 1000 @@ -780,7 +777,7 @@ workload-launcher: fsGroup: 1000 containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true # uid=1000(airbyte) runAsUser: 1000 @@ -1080,7 +1077,7 @@ metrics: fsGroup: 1000 containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true # uid=1000(airbyte) runAsUser: 1000 @@ -1202,7 +1199,7 @@ airbyte-bootloader: fsGroup: 1000 containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true # uid=1000(airbyte) runAsUser: 1000 @@ -1333,7 +1330,7 @@ temporal: fsGroup: 1000 containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true # uid=1000(temporal) runAsUser: 1000 @@ -1562,6 +1559,9 @@ postgresql: ## image.repository Repository for airbyte-db statefulset image: repository: airbyte/db + storage: + volumeClaimValue: 500Mi + # -- Airbyte Postgresql username postgresqlUsername: airbyte # -- Airbyte Postgresql password @@ -1577,7 +1577,7 @@ postgresql: fsGroup: 70 containerSecurityContext: # -- Ensures the container will run with a non-root user - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true # uid=70(postgres) runAsUser: 70 @@ -1627,12 +1627,12 @@ minio: affinity: {} resources: - requests: - memory: 1Gi - cpu: 250m - limits: - cpu: 300m - memory: 2Gi + requests: + memory: 1Gi + cpu: 250m + limits: + cpu: 300m + memory: 2Gi ## @section cron parameters cron: enabled: true @@ -1656,7 +1656,7 @@ cron: fsGroup: 1000 containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true # uid=1000(airbyte) runAsUser: 1000 @@ -1827,7 +1827,7 @@ connector-builder-server: fsGroup: 1000 containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true # uid=1000(airbyte) runAsUser: 1000 @@ -1926,7 +1926,7 @@ keycloak: image: "postgres:13-alpine" initContainerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true runAsUser: 1000 runAsGroup: 1000 @@ -1935,9 +1935,9 @@ keycloak: drop: ["ALL"] seccompProfile: type: RuntimeDefault - + containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true runAsUser: 1000 runAsGroup: 1000 @@ -1971,7 +1971,7 @@ keycloak-setup: fsGroup: 1000 initContainerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true runAsUser: 1000 runAsGroup: 1000 @@ -1982,7 +1982,7 @@ keycloak-setup: type: RuntimeDefault containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true # uid=1000(airbyte) runAsUser: 1000 @@ -2024,7 +2024,7 @@ workload-api-server: fsGroup: 1000 containerSecurityContext: - allowPrivilegeEscalation: false + allowPrivilegeEscalation: false runAsNonRoot: true # uid=1000(airbyte) runAsUser: 1000 diff --git a/charts/airbyte/values.yaml.test b/charts/airbyte/values.yaml.test index b1960303b88..e7658427fce 100644 --- a/charts/airbyte/values.yaml.test +++ b/charts/airbyte/values.yaml.test @@ -1237,6 +1237,8 @@ postgresql: ## image.repository Repository for airbyte-db statefulset image: repository: airbyte/db + storage: + volumeClaimValue: 500Mi postgresqlUsername: airbyte postgresqlPassword: airbyte