ocis-charts/deployments/ocis-nats/helmfile.yaml at 141d0239bfb214c5a331721ed8a42abd6873df7b · owncloud/ocis-charts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
repositories:
  - name: nats
    url: https://nats-io.github.io/k8s/helm/charts

releases:
  - name: nats
    namespace: ocis-nats
    chart: nats/nats
    version: 1.3.3
    labels:
      ci-lint-skip: true # skip linting this chart in CI
    values:
      - config:
          cluster:
            enabled: true
            replicas: 3
            name: "ocis-cluster"
          jetstream:
            enabled: true
            memoryStore:
              enabled: true
              maxSize: 2Gi
          merge:
            00$include: auth.conf
      - configMap:
          merge:
            data:
              # bcrypted password generated with `nats server passwd`:
              # nats-sys: O0Z1O5WG2SIisXUToxUPxQUx
              # ocis-admin: pwnnH3S42D5dZL90paHEsQop
              auth.conf: |
                accounts {
                  $SYS {
                    users = [
                      { user: "nats-sys",
                        pass: "$2a$11$5BJO2C7WJLjuOm8FBjGjCugs//lL.Sp9gVIBWzU.fITE5MfCbHCMK"
                      }
                    ]
                  }
                  $OCIS {
                    jetstream: enabled
                    users = [
                      { user: "ocis"
                      },
                      { user: "ocis-admin",
                        pass: "$2a$11$6SAHUpN.m2TXOMSdSZVWsOjQ69VCQOBUmxD8FZ/aJpdvzSEOfRodC"
                      }
                    ]
                  }
                }
                no_auth_user: ocis

  - name: nack-crds
    namespace: ocis-nack
    chart: ./crds
    labels:
      ci-lint-skip: true # skip linting this chart in CI

  - name: nack-streams
    namespace: ocis-nats
    chart: ./streams
    labels:
      ci-lint-skip: true # skip linting this chart in CI
    needs:
      - ocis-nats/nats
      - ocis-nack/nack-crds

  - name: nack
    namespace: ocis-nack
    chart: nats/nack
    version: 0.33.2
    labels:
      ci-lint-skip: true # skip linting this chart in CI
    values:
      - namespaced: false
      - readOnly: false
    needs:
      - ocis-nack/nack-crds

  - name: ocis
    namespace: ocis
    chart: ../../charts/ocis
    values:
      - externalDomain: ocis.kube.owncloud.test
      - ingress:
          enabled: true
          ingressClassName: nginx
          annotations:
            nginx.ingress.kubernetes.io/proxy-body-size: 1024m
          tls:
            - secretName: ocis-dev-tls
              hosts:
                - ocis.kube.owncloud.test

      - insecure:
          oidcIdpInsecure: true
          ocisHttpApiInsecure: true

      - messagingSystem:
          external:
            enabled: true
            cluster: ocis-cluster
            endpoint: nats.ocis-nats.svc.cluster.local:4222
            tls:
              enabled: false

      - registry:
          type: nats-js-kv
          nodes:
            - nats.ocis-nats.svc.cluster.local:4222

      - store:
          type: nats-js-kv
          nodes:
            - nats.ocis-nats.svc.cluster.local:4222

      - cache:
          type: nats-js-kv
          nodes:
            - nats.ocis-nats.svc.cluster.local:4222

      - services:
          idm:
            persistence:
              enabled: true

          search:
            persistence:
              enabled: true

          storagesystem:
            persistence:
              enabled: true

          storageusers:
            persistence:
              enabled: true

          thumbnails:
            persistence:
              enabled: true

          web:
            persistence:
              enabled: true