values.yaml

# -- Time Zone in container
TimeZone: "CET"
# -- Log level
logLevel: "INFO"
# -- flask environment: production or development
flaskConfig: "production"

# -- Enable ClusterRole creation. Disable if the role already exists.
createClusterRole: true

serviceAccount:
  # -- Enable automatic serviceAccount creation
  create: true
  # -- Configure the name of the serviceAccount
  name: "kubedash-admin"

image:
  # -- The docker image repository to use
  repository: devopstales/kubedash
  # -- The docker image pull policy
  pullPolicy: Always
  # -- The docker image tag to use
  tag: 3.1.0
  statsdExporter:
    # -- The docker image repository to use
    repository: prom/statsd-exporter
    # -- The docker image tag to use
    tag: v0.22.4

# -- Service configuration
service:
  # -- Service port for the KubeDash application
  port: 8000

# -- pullsecrets
imagePullSecrets: []

# -- replica number - for multiple replicas you need to enable externalDatabase support
replicas: 1

# -- enable external postgresql support
externalDatabase:
  # -- Enable external postgresql
  enabled: false
  # -- External postgresql host
  host: ""
  # -- External postgresql port
  port: 5432
  # -- External postgresql database
  database: "kubedash"
  # -- External postgresql username
  username: "kubedash"
  # -- External postgresql password
  password: "kubedash"
  secret:
    # -- Name of the secret storing EXTERNAL_DATABASE_PASSWORD.
    name: "kubedash-postgresql"
    # -- Secret must provide the following variables: EXTERNAL_DATABASE_PASSWORD.
    useExistingSecret: false

metrics:
  # -- Enable metrics
  enabled: true
  serviceMonitor:
    # -- Enable prometheus service monitor
    enabled: false
    # -- Prometheus service monitor namespace
    #namespace: "monitoring"
    # -- Prometheus service monitor labels
    labels:
      release: kube-prometheus-stack
    # -- Prometheus service monitor job labels
    jobLabel: ""
    # -- Prometheus service monitor annotations
    annotations: {}
    # -- Prometheus service monitor interval
    interval: "30s"
    # -- Prometheus service monitor scrape timeout
    scrapeTimeout: "10s"
    relabelings: []
    metricRelabelings: []
    honorLabels: false
  grafana:
    # -- Enable grafana dashboard deploy
    enabled: true 
    # -- Grafana dashboard namespace
    namespace: "monitoring-system"
    annotations:
      grafana_folder: "KubeDash"
    labels:
      grafana_dashboard: "1"

# -- deploy ui for db
dbui:
  image:
    # -- adminer image
    repository: sosedoff/pgweb
    # -- adminer image tag
    tag: latest
    # -- adminer image pull policy
    pullPolicy: IfNotPresent
    # -- adminer plugins
    plugins: "tables-filter,adminer-auto-login"

# -- deploy postgresql (CloudPirates chart)
postgresql:
  # -- Enable postgresql
  enabled: true
  
  auth:
    # -- Postgresql database
    database: "kubedash"
    # -- Postgresql username
    username: "kubedash"
    # -- Postgresql password
    password: "kubedash"
    # -- Name of existing secret to use for PostgreSQL credentials
    existingSecret: ""

  persistence:
    # -- Enable persistence using Persistent Volume Claims
    enabled: true
    # -- Persistent Volume storage class
    storageClass: ""
    # -- Persistent Volume size
    size: 10Gi
    # -- Persistent Volume access mode
    accessModes:
      - ReadWriteOnce

  ingress:
    # -- Enable ingress for PostgreSQL
    enabled: false
    # -- Ingress TLS configuration (array format as expected by schema)
    tls:
      - secretName: ""
        hosts:
          - ""

  metrics:
    # -- Enable postgresql metrics
    enabled: true
    serviceMonitor:
      # -- Enable prometheus service monitor
      enabled: true
      # -- Prometheus service monitor namespace
      namespace: ""
      # -- Prometheus service monitor interval
      interval: 30s
      # -- Prometheus service monitor scrape timeout
      scrapeTimeout: 10s
      # -- Prometheus service monitor selector labels
      selector: {}
      # -- Prometheus service monitor annotations
      annotations: {}
      # -- Honor metrics labels (boolean)
      honorLabels: false
      # -- Prometheus service monitor relabelings
      relabelings: []
      # -- Prometheus service monitor metric relabelings
      metricRelabelings: []
      # -- Prometheus service monitor namespace selector
      namespaceSelector: {}
# https://artifacthub.io/packages/helm/cloudpirates-postgres/postgres

# -- redis ui
redisui:
  image:
      repository: patrikx3/p3x-redis-ui
      tag: latest
      pullPolicy: Always
  resources: {}
    # requests:
    #   cpu: 100m
    #   memory: 100M
    # limits:
    #   cpu: 200m
  #   memory: 200M

# -- enable redis for caching (CloudPirates chart)
redis:
  # -- Enable redis
  enabled: true
  # -- Redis cluster architecture (standalone, replication, cluster)
  architecture: standalone
  # -- Number of Redis instances to deploy (only when architecture=(replication|cluster))
  replicaCount: 1
  auth:
    # -- Enable Redis authentication
    enabled: false
    # -- Redis password (if empty, random password will be generated)
    password: ""
    # -- Name of existing secret containing Redis password
    existingSecret: ""
  persistence:
    # -- Enable persistence using Persistent Volume Claims
    enabled: true
    # -- Persistent Volume storage class
    storageClass: ""
    # -- Persistent Volume size
    size: 8Gi
    # -- Persistent Volume access mode
    accessModes:
      - ReadWriteOnce
  metrics:
    # -- Enable redis metrics
    enabled: true
    serviceMonitor:
      # -- Enable prometheus service monitor
      enabled: true
      # -- Prometheus service monitor namespace
      namespace: ""
      # -- Prometheus service monitor interval
      interval: 30s
      # -- Prometheus service monitor scrape timeout
      scrapeTimeout: ""
      # -- Prometheus service monitor relabelings
      relabelings: []
      # -- Prometheus service monitor metric relabelings
      metricRelabelings: []
      # -- Honor metrics labels (boolean)
      honorLabels: false
      # -- Prometheus instance selector labels
      selector: {}
      # -- Prometheus service monitor annotations
      annotations: {}
      # -- Prometheus service monitor namespace selector
      namespaceSelector: {}
# https://artifacthub.io/packages/helm/cloudpirates-redis/redis

# -- enable metrics-server
metricsServer:
  enabled: false
  args:
    - --kubelet-preferred-address-types=InternalIP
    - --kubelet-insecure-tls

# -- k8s connection information.
cluster:
  # -- k8s api url
  name: "k8s-cluster"
  # -- k8s api url
  apiUrl: "https://kubernetes.mydomain.intra:6443"
  # `apiServer` is the url for kubectl
  #   This is typically  https://api.fqdn
  # -- k8s ca cert
  # IMPORTANT: If you dose not set the caCert option, the app will read from the pod
  #caCert: |-
  #  -----BEGIN CERTIFICATE-----
  #  cert data here
  #  -----END CERTIFICATE-----
  # `caCrt` is the public / CA cert for the cluster
  # cat /etc/kubernetes/pki/ca.crt

# -- oidc connection information
oidc:
  # -- Enable oidc authentication
  enabled: false
  provider:
    # -- oidc issuer url
    oidcUrl: "https://sso.mydomain.intra/auth/realms/k8s"
    # -- oidc scope
    oidcScopes: "openid email"
    # -- oidc client id
    oidcClientId: ""
    # -- oidc client secret
    oidcSecret: ""
  secret:
    # -- Name of the secret storing OIDC_CLIENT_ID and OIDC_SECRET.
    name: "kubedash-oidc"
    # -- Secret must provide the following variables: OIDC_CLIENT_ID and OIDC_SECRET.
    useExistingSecret: false

# -- Jaeger tracing configuration
jaeger:
  # -- Jaeger name
  fullnameOverride: kubedash-jaeger
  # -- Enable Jaeger tracing
  enabled: false
  # -- External jaeger 
  external: false
  # -- Jaeger HTTP endpoint URL for externel
  httpEndpoint: "http://127.0.0.1:4318"
  # -- Jaeger all-in-one deployment configuration
  allInOne:
    # -- Enable all-in-one deployment
    enabled: true
  # -- Disable provisioned data stores (Cassandra, Elasticsearch, Kafka)
  provisionDataStore:
    cassandra: false
    elasticsearch: false
    kafka: false
  # -- Disable standalone components (all-in-one includes everything)
  collector:
    enabled: false
  agent:
    enabled: false
  query:
    enabled: false
  storage:
    # -- Storage type (cassandra, elasticsearch, grpc-plugin, badger, memory)
    type: badger
    badger:
      # -- Use ephemeral storage (true = no persistence, false = requires useExistingPvcName)
      ephemeral: true
      persistence:
        # -- Mount path for badger data
        mountPath: /mnt/data
        # -- Use existing PVC name (required if ephemeral: false)
        useExistingPvcName: ""
        # -- Extra environment variables
        extraEnv: []

# -- enable plugins
plugins:
  registryUi:
    # -- Enable registry UI plugin
    enabled: true
  helmDashboard:
    # -- Enable helm dashboard plugin
    enabled: true
  certManager:
    # -- Enable helm dashboard plugin
    enabled: true
  externalLoadbalancer:
    # -- Enable external loadbalancer plugin
    enabled: true
  flux:
    # -- Enable flux plugin
    enabled: true

# -- enable persistence
persistence:
  # -- Volumes for the pod
  enabled: true
  # -- Volumes mode
  accessMode: "ReadWriteOnce"
  # -- Volumes size
  size: "1Gi"
  # -- Volumes annotations
  annotations: {}
  ## database data Persistent Volume Storage Class
  ## If defined, storageClassName: <storageClass>
  ## If set to "-", storageClassName: "", which disables dynamic provisioning
  ## If undefined (the default) or set to null, no storageClassName spec is
  ##   set, choosing the default provisioner.  (gp2 on AWS, standard on
  ##   GKE, AWS & OpenStack)
  ##
  storageClass: "-"

ingress:
  # -- Enable Ingress object creation
  enabled: true
  # -- Ingress class name
  className: "nginx"
  # -- URL of the Ingress object
  url: "kubedash.mydomain.intra"
  # -- Extra annotation to the Ingress object
  annotations:
    nginx.ingress.kubernetes.io/proxy-body-size: "10m"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
    nginx.ingress.kubernetes.io/server-snippets: |
      location / {
        proxy_set_header Upgrade $http_upgrade;
        proxy_http_version 1.1;
        proxy_set_header X-Forwarded-Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header Connection "upgrade";
        proxy_cache_bypass $http_upgrade;
      }
  tls:
    # -- Enable tls on Ingress object
    enabled: true
    # -- Name of the secret storing tls cert
    tlsSecret: ""
    certManager:
       # -- Enable certManager
      enabled: false
      # -- Name of the certManager cluster issuer to use
      clusterIssuer: "letsencrypt"
  whitelist:
    # -- Enable ip blocking on ingress
    enabled: false
    # -- List of ips to allow communication
    ips: []
  
route:
  # -- Enable OpenShift Route object creation
  enabled: false
  # -- URL of the OpenShift Route object
  url: "kubedash.mydomain.intra"
  # -- Extra annotation to the OpenShift Route object
  annotations: {}

# -- list of the pos's SecurityContexts
podSecurityContext:
  runAsNonRoot: true
  runAsUser: 10001
  fsGroup: 10001
  fsGroupChangePolicy: "OnRootMismatch"

# -- list of the container's SecurityContexts
containerSecurityContext:
  allowPrivilegeEscalation: false
  capabilities:
    drop: ["all"]

## Define which Nodes the Pods are scheduled on.
## ref: https://kubernetes.io/docs/user-guide/node-selection/
# -- Set nodeSelector for the pod
nodeSelector: {}

## Tolerations for use with node taints
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
# -- Set tolerations for the pod
tolerations: []
# - key: "key"
#   operator: "Equal"
#   value: "value"
#   effect: "NoSchedule"

## Assign custom affinity rules to the trivy operator
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
##

## Assign custom affinity rules to the deployment
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
# -- Set the affinity for the pod.
affinity: {}
# nodeAffinity:
#   requiredDuringSchedulingIgnoredDuringExecution:
#     nodeSelectorTerms:
#     - matchExpressions:
#       - key: kubernetes.io/e2e-az-name
#         operator: In
#         values:
#         - e2e-az1
#         - e2e-az2