-
Notifications
You must be signed in to change notification settings - Fork 49
Expand file tree
/
Copy pathconfigmap-config-file.yaml
More file actions
1200 lines (1199 loc) · 67.4 KB
/
Copy pathconfigmap-config-file.yaml
File metadata and controls
1200 lines (1199 loc) · 67.4 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
{{- if .Values.openlane.config.create }}
---
apiVersion: v1
kind: ConfigMap
metadata:
name: openlane-config-file
namespace: openlane
labels:
app: openlane
component: config
data:
config.yaml: |-
{{- if .Values.openlane.coreConfiguration.domain }}
domain: {{ .Values.openlane.coreConfiguration.domain | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.refreshinterval }}
refreshinterval: {{ .Values.openlane.coreConfiguration.refreshinterval | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server }}
server:
{{- if .Values.openlane.coreConfiguration.server.dev }}
dev: {{ .Values.openlane.coreConfiguration.server.dev }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.listen }}
listen: {{ .Values.openlane.coreConfiguration.server.listen | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.metricsport }}
metricsport: {{ .Values.openlane.coreConfiguration.server.metricsport | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.shutdowngraceperiod }}
shutdowngraceperiod: {{ .Values.openlane.coreConfiguration.server.shutdowngraceperiod | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.readtimeout }}
readtimeout: {{ .Values.openlane.coreConfiguration.server.readtimeout | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.writetimeout }}
writetimeout: {{ .Values.openlane.coreConfiguration.server.writetimeout | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.idletimeout }}
idletimeout: {{ .Values.openlane.coreConfiguration.server.idletimeout | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.readheadertimeout }}
readheadertimeout: {{ .Values.openlane.coreConfiguration.server.readheadertimeout | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.tls }}
tls:
{{- if .Values.openlane.coreConfiguration.server.tls.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.server.tls.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.tls.certfile }}
certfile: {{ .Values.openlane.coreConfiguration.server.tls.certfile | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.tls.certkey }}
certkey: {{ .Values.openlane.coreConfiguration.server.tls.certkey | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.tls.autocert }}
autocert: {{ .Values.openlane.coreConfiguration.server.tls.autocert }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.cors }}
cors:
{{- if .Values.openlane.coreConfiguration.server.cors.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.server.cors.enabled }}
{{- end }}
{{- $mapValue := (.Values.openlane.coreConfiguration.server.cors.prefixes | default (dict)) }}
{{- if gt (len $mapValue) 0 }}
prefixes:
{{- toYaml $mapValue | nindent 10 }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.cors.alloworigins }}
alloworigins:
{{- toYaml .Values.openlane.coreConfiguration.server.cors.alloworigins | nindent 10 }}
{{- else if .Values.domain }}
alloworigins:
- "https://console.{{ .Values.domain }}"
- "https://docs.{{ .Values.domain }}"
- "https://www.{{ .Values.domain }}"
{{- else }}
alloworigins:
[]
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.cors.cookieinsecure }}
cookieinsecure: {{ .Values.openlane.coreConfiguration.server.cors.cookieinsecure }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.secure }}
secure:
{{- if .Values.openlane.coreConfiguration.server.secure.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.server.secure.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.secure.xssprotection }}
xssprotection: {{ .Values.openlane.coreConfiguration.server.secure.xssprotection | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.secure.contenttypenosniff }}
contenttypenosniff: {{ .Values.openlane.coreConfiguration.server.secure.contenttypenosniff | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.secure.xframeoptions }}
xframeoptions: {{ .Values.openlane.coreConfiguration.server.secure.xframeoptions | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.secure.hstspreloadenabled }}
hstspreloadenabled: {{ .Values.openlane.coreConfiguration.server.secure.hstspreloadenabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.secure.hstsmaxage }}
hstsmaxage: {{ .Values.openlane.coreConfiguration.server.secure.hstsmaxage }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.secure.contentsecuritypolicy }}
contentsecuritypolicy: {{ .Values.openlane.coreConfiguration.server.secure.contentsecuritypolicy | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.secure.referrerpolicy }}
referrerpolicy: {{ .Values.openlane.coreConfiguration.server.secure.referrerpolicy | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.secure.cspreportonly }}
cspreportonly: {{ .Values.openlane.coreConfiguration.server.secure.cspreportonly }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.cachecontrol }}
cachecontrol:
{{- if .Values.openlane.coreConfiguration.server.cachecontrol.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.server.cachecontrol.enabled }}
{{- end }}
{{- $mapValue := (.Values.openlane.coreConfiguration.server.cachecontrol.nocacheheaders | default (dict)) }}
{{- if gt (len $mapValue) 0 }}
nocacheheaders:
{{- toYaml $mapValue | nindent 10 }}
{{- end }}
{{- $sliceValue := (.Values.openlane.coreConfiguration.server.cachecontrol.etagheaders | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
etagheaders:
{{- toYaml $sliceValue | nindent 10 }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.mime }}
mime:
{{- if .Values.openlane.coreConfiguration.server.mime.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.server.mime.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.mime.mimetypesfile }}
mimetypesfile: {{ .Values.openlane.coreConfiguration.server.mime.mimetypesfile | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.mime.defaultcontenttype }}
defaultcontenttype: {{ .Values.openlane.coreConfiguration.server.mime.defaultcontenttype | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.graphpool }}
graphpool:
{{- if .Values.openlane.coreConfiguration.server.graphpool.maxworkers }}
maxworkers: {{ .Values.openlane.coreConfiguration.server.graphpool.maxworkers }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.enablegraphextensions }}
enablegraphextensions: {{ .Values.openlane.coreConfiguration.server.enablegraphextensions }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.enablegraphsubscriptions }}
enablegraphsubscriptions: {{ .Values.openlane.coreConfiguration.server.enablegraphsubscriptions }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.complexitylimit }}
complexitylimit: {{ .Values.openlane.coreConfiguration.server.complexitylimit }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.maxresultlimit }}
maxresultlimit: {{ .Values.openlane.coreConfiguration.server.maxresultlimit }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.csrfprotection }}
csrfprotection:
{{- if .Values.openlane.coreConfiguration.server.csrfprotection.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.server.csrfprotection.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.csrfprotection.header }}
header: {{ .Values.openlane.coreConfiguration.server.csrfprotection.header | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.csrfprotection.cookie }}
cookie: {{ .Values.openlane.coreConfiguration.server.csrfprotection.cookie | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.csrfprotection.secure }}
secure: {{ .Values.openlane.coreConfiguration.server.csrfprotection.secure }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.csrfprotection.samesite }}
samesite: {{ .Values.openlane.coreConfiguration.server.csrfprotection.samesite | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.csrfprotection.cookiehttponly }}
cookiehttponly: {{ .Values.openlane.coreConfiguration.server.csrfprotection.cookiehttponly }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.csrfprotection.cookiedomain }}
cookiedomain: {{ .Values.openlane.coreConfiguration.server.csrfprotection.cookiedomain | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.csrfprotection.cookiepath }}
cookiepath: {{ .Values.openlane.coreConfiguration.server.csrfprotection.cookiepath | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.defaulttrustcenterdomain }}
defaulttrustcenterdomain: {{ .Values.openlane.coreConfiguration.server.defaulttrustcenterdomain | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.trustcentercnametarget }}
trustcentercnametarget: {{ .Values.openlane.coreConfiguration.server.trustcentercnametarget | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.trustcenterpreviewzoneid }}
trustcenterpreviewzoneid: {{ .Values.openlane.coreConfiguration.server.trustcenterpreviewzoneid | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.server.notificationlookbackdays }}
notificationlookbackdays: {{ .Values.openlane.coreConfiguration.server.notificationlookbackdays }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig }}
entconfig:
{{- $sliceValue := (.Values.openlane.coreConfiguration.entconfig.entitytypes | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
entitytypes:
{{- toYaml $sliceValue | nindent 8 }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer }}
summarizer:
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.type }}
type: {{ .Values.openlane.coreConfiguration.entconfig.summarizer.type | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm }}
llm:
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm.provider }}
provider: {{ .Values.openlane.coreConfiguration.entconfig.summarizer.llm.provider | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm.anthropic }}
anthropic:
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm.anthropic.betaheader }}
betaheader: {{ .Values.openlane.coreConfiguration.entconfig.summarizer.llm.anthropic.betaheader | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm.anthropic.legacytextcompletion }}
legacytextcompletion: {{ .Values.openlane.coreConfiguration.entconfig.summarizer.llm.anthropic.legacytextcompletion }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm.anthropic.baseurl }}
baseurl: {{ .Values.openlane.coreConfiguration.entconfig.summarizer.llm.anthropic.baseurl | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm.cloudflare }}
cloudflare:
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm.cloudflare.accountid }}
accountid: {{ .Values.openlane.coreConfiguration.entconfig.summarizer.llm.cloudflare.accountid | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm.cloudflare.serverurl }}
serverurl: {{ .Values.openlane.coreConfiguration.entconfig.summarizer.llm.cloudflare.serverurl | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm.openai }}
openai:
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm.openai.url }}
url: {{ .Values.openlane.coreConfiguration.entconfig.summarizer.llm.openai.url | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.llm.openai.organizationid }}
organizationid: {{ .Values.openlane.coreConfiguration.entconfig.summarizer.llm.openai.organizationid | quote }}
{{- end }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.summarizer.maximumsentences }}
maximumsentences: {{ .Values.openlane.coreConfiguration.entconfig.summarizer.maximumsentences }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.maxpoolsize }}
maxpoolsize: {{ .Values.openlane.coreConfiguration.entconfig.maxpoolsize }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.modules }}
modules:
{{- if .Values.openlane.coreConfiguration.entconfig.modules.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.entconfig.modules.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.modules.usesandbox }}
usesandbox: {{ .Values.openlane.coreConfiguration.entconfig.modules.usesandbox }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.modules.devmode }}
devmode: {{ .Values.openlane.coreConfiguration.entconfig.modules.devmode }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.maxschemaimportsize }}
maxschemaimportsize: {{ .Values.openlane.coreConfiguration.entconfig.maxschemaimportsize }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.emailvalidation }}
emailvalidation:
{{- if .Values.openlane.coreConfiguration.entconfig.emailvalidation.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.entconfig.emailvalidation.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.emailvalidation.enableautoupdatedisposable }}
enableautoupdatedisposable: {{ .Values.openlane.coreConfiguration.entconfig.emailvalidation.enableautoupdatedisposable }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.emailvalidation.enablegravatarcheck }}
enablegravatarcheck: {{ .Values.openlane.coreConfiguration.entconfig.emailvalidation.enablegravatarcheck }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.emailvalidation.enablesmtpcheck }}
enablesmtpcheck: {{ .Values.openlane.coreConfiguration.entconfig.emailvalidation.enablesmtpcheck }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.emailvalidation.allowedemailtypes }}
allowedemailtypes:
{{- if .Values.openlane.coreConfiguration.entconfig.emailvalidation.allowedemailtypes.disposable }}
disposable: {{ .Values.openlane.coreConfiguration.entconfig.emailvalidation.allowedemailtypes.disposable }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.emailvalidation.allowedemailtypes.free }}
free: {{ .Values.openlane.coreConfiguration.entconfig.emailvalidation.allowedemailtypes.free }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.emailvalidation.allowedemailtypes.role }}
role: {{ .Values.openlane.coreConfiguration.entconfig.emailvalidation.allowedemailtypes.role }}
{{- end }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.billing }}
billing:
{{- if .Values.openlane.coreConfiguration.entconfig.billing.requirepaymentmethod }}
requirepaymentmethod: {{ .Values.openlane.coreConfiguration.entconfig.billing.requirepaymentmethod }}
{{- end }}
{{- $sliceValue := (.Values.openlane.coreConfiguration.entconfig.billing.bypassemaildomains | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
bypassemaildomains:
{{- toYaml $sliceValue | nindent 10 }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.notifications }}
notifications:
{{- if .Values.openlane.coreConfiguration.entconfig.notifications.consoleurl }}
consoleurl: {{ .Values.openlane.coreConfiguration.entconfig.notifications.consoleurl | quote }}
{{- else if .Values.domain }}
consoleurl: "https://console.{{ .Values.domain }}"
{{- else }}
consoleurl: "http://localhost:3001"
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.entconfig.questionnaireproducturl }}
questionnaireproducturl: {{ .Values.openlane.coreConfiguration.entconfig.questionnaireproducturl | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth }}
auth:
{{- if .Values.openlane.coreConfiguration.auth.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.auth.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token }}
token:
{{- if .Values.openlane.coreConfiguration.auth.token.kid }}
kid: {{ .Values.openlane.coreConfiguration.auth.token.kid | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.audience }}
audience: {{ .Values.openlane.coreConfiguration.auth.token.audience | quote }}
{{- else if .Values.domain }}
audience: "https://api.{{ .Values.domain }}"
{{- else }}
audience: ""
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.refreshaudience }}
refreshaudience: {{ .Values.openlane.coreConfiguration.auth.token.refreshaudience | quote }}
{{- else if .Values.domain }}
refreshaudience: "https://api.{{ .Values.domain }}"
{{- else }}
refreshaudience: ""
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.issuer }}
issuer: {{ .Values.openlane.coreConfiguration.auth.token.issuer | quote }}
{{- else if .Values.domain }}
issuer: "https://api.{{ .Values.domain }}"
{{- else }}
issuer: ""
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.accessduration }}
accessduration: {{ .Values.openlane.coreConfiguration.auth.token.accessduration | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.refreshduration }}
refreshduration: {{ .Values.openlane.coreConfiguration.auth.token.refreshduration | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.refreshoverlap }}
refreshoverlap: {{ .Values.openlane.coreConfiguration.auth.token.refreshoverlap | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.jwksendpoint }}
jwksendpoint: {{ .Values.openlane.coreConfiguration.auth.token.jwksendpoint | quote }}
{{- else if .Values.domain }}
jwksendpoint: "https://api.{{ .Values.domain }}/.well-known/jwks.json"
{{- else }}
jwksendpoint: ""
{{- end }}
{{- $mapValue := (.Values.openlane.coreConfiguration.auth.token.keys | default (dict)) }}
{{- if gt (len $mapValue) 0 }}
keys:
{{- toYaml $mapValue | nindent 10 }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.generatekeys }}
generatekeys: {{ .Values.openlane.coreConfiguration.auth.token.generatekeys }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.jwkscachettl }}
jwkscachettl: {{ .Values.openlane.coreConfiguration.auth.token.jwkscachettl | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis }}
redis:
{{- if .Values.openlane.coreConfiguration.auth.token.redis.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.auth.token.redis.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config }}
config:
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.address }}
address: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.address | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.name }}
name: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.name | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.username }}
username: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.username | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.password }}
password: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.password | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.db }}
db: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.db }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.dialtimeout }}
dialtimeout: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.dialtimeout | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.readtimeout }}
readtimeout: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.readtimeout | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.writetimeout }}
writetimeout: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.writetimeout | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.maxretries }}
maxretries: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.maxretries }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.minidleconns }}
minidleconns: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.minidleconns }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.maxidleconns }}
maxidleconns: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.maxidleconns }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.config.maxactiveconns }}
maxactiveconns: {{ .Values.openlane.coreConfiguration.auth.token.redis.config.maxactiveconns }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.redis.blacklistprefix }}
blacklistprefix: {{ .Values.openlane.coreConfiguration.auth.token.redis.blacklistprefix | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.apitokens }}
apitokens:
{{- if .Values.openlane.coreConfiguration.auth.token.apitokens.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.auth.token.apitokens.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.apitokens.envprefix }}
envprefix: {{ .Values.openlane.coreConfiguration.auth.token.apitokens.envprefix | quote }}
{{- end }}
{{- $mapValue := (.Values.openlane.coreConfiguration.auth.token.apitokens.keys | default (dict)) }}
{{- if gt (len $mapValue) 0 }}
keys:
{{- toYaml $mapValue | nindent 12 }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.apitokens.secretsize }}
secretsize: {{ .Values.openlane.coreConfiguration.auth.token.apitokens.secretsize }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.apitokens.delimiter }}
delimiter: {{ .Values.openlane.coreConfiguration.auth.token.apitokens.delimiter | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.apitokens.prefix }}
prefix: {{ .Values.openlane.coreConfiguration.auth.token.apitokens.prefix | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.assessmentaccessduration }}
assessmentaccessduration: {{ .Values.openlane.coreConfiguration.auth.token.assessmentaccessduration | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.token.trustcenterndarequestaccessduration }}
trustcenterndarequestaccessduration: {{ .Values.openlane.coreConfiguration.auth.token.trustcenterndarequestaccessduration | quote }}
{{- end }}
{{- end }}
{{- $sliceValue := (.Values.openlane.coreConfiguration.auth.supportedproviders | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
supportedproviders:
{{- toYaml $sliceValue | nindent 8 }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers }}
providers:
{{- if .Values.openlane.coreConfiguration.auth.providers.redirecturl }}
redirecturl: {{ .Values.openlane.coreConfiguration.auth.providers.redirecturl | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.github }}
github:
{{- if .Values.openlane.coreConfiguration.auth.providers.github.clientid }}
clientid: {{ .Values.openlane.coreConfiguration.auth.providers.github.clientid | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.github.clientendpoint }}
clientendpoint: {{ .Values.openlane.coreConfiguration.auth.providers.github.clientendpoint | quote }}
{{- else if .Values.domain }}
clientendpoint: "https://api.{{ .Values.domain }}"
{{- else }}
clientendpoint: ""
{{- end }}
{{- $sliceValue := (.Values.openlane.coreConfiguration.auth.providers.github.scopes | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
scopes:
{{- toYaml $sliceValue | nindent 12 }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.github.redirecturl }}
redirecturl: {{ .Values.openlane.coreConfiguration.auth.providers.github.redirecturl | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.google }}
google:
{{- if .Values.openlane.coreConfiguration.auth.providers.google.clientid }}
clientid: {{ .Values.openlane.coreConfiguration.auth.providers.google.clientid | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.google.clientendpoint }}
clientendpoint: {{ .Values.openlane.coreConfiguration.auth.providers.google.clientendpoint | quote }}
{{- else if .Values.domain }}
clientendpoint: "https://api.{{ .Values.domain }}"
{{- else }}
clientendpoint: ""
{{- end }}
{{- $sliceValue := (.Values.openlane.coreConfiguration.auth.providers.google.scopes | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
scopes:
{{- toYaml $sliceValue | nindent 12 }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.google.redirecturl }}
redirecturl: {{ .Values.openlane.coreConfiguration.auth.providers.google.redirecturl | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.webauthn }}
webauthn:
{{- if .Values.openlane.coreConfiguration.auth.providers.webauthn.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.auth.providers.webauthn.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.webauthn.displayname }}
displayname: {{ .Values.openlane.coreConfiguration.auth.providers.webauthn.displayname | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.webauthn.relyingpartyid }}
relyingpartyid: {{ .Values.openlane.coreConfiguration.auth.providers.webauthn.relyingpartyid | quote }}
{{- else if .Values.domain }}
relyingpartyid: "{{ .Values.domain }}"
{{- else }}
relyingpartyid: ""
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.webauthn.requestorigins }}
requestorigins:
{{- toYaml .Values.openlane.coreConfiguration.auth.providers.webauthn.requestorigins | nindent 12 }}
{{- else if .Values.domain }}
requestorigins:
- "https://console.{{ .Values.domain }}"
{{- else }}
requestorigins:
[]
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.webauthn.maxdevices }}
maxdevices: {{ .Values.openlane.coreConfiguration.auth.providers.webauthn.maxdevices }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.webauthn.enforcetimeout }}
enforcetimeout: {{ .Values.openlane.coreConfiguration.auth.providers.webauthn.enforcetimeout }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.webauthn.timeout }}
timeout: {{ .Values.openlane.coreConfiguration.auth.providers.webauthn.timeout | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.auth.providers.webauthn.debug }}
debug: {{ .Values.openlane.coreConfiguration.auth.providers.webauthn.debug }}
{{- end }}
{{- end }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz }}
authz:
{{- if .Values.openlane.coreConfiguration.authz.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.authz.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.storename }}
storename: {{ .Values.openlane.coreConfiguration.authz.storename | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.hosturl }}
hosturl: {{ .Values.openlane.coreConfiguration.authz.hosturl | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.storeid }}
storeid: {{ .Values.openlane.coreConfiguration.authz.storeid | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.modelid }}
modelid: {{ .Values.openlane.coreConfiguration.authz.modelid | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.createnewmodel }}
createnewmodel: {{ .Values.openlane.coreConfiguration.authz.createnewmodel }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.modelfile }}
modelfile: {{ .Values.openlane.coreConfiguration.authz.modelfile | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.modulefile }}
modulefile: {{ .Values.openlane.coreConfiguration.authz.modulefile | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.credentials }}
credentials:
{{- if .Values.openlane.coreConfiguration.authz.credentials.clientid }}
clientid: {{ .Values.openlane.coreConfiguration.authz.credentials.clientid | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.credentials.audience }}
audience: {{ .Values.openlane.coreConfiguration.authz.credentials.audience | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.credentials.issuer }}
issuer: {{ .Values.openlane.coreConfiguration.authz.credentials.issuer | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.credentials.scopes }}
scopes: {{ .Values.openlane.coreConfiguration.authz.credentials.scopes | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.maxbatchwritesize }}
maxbatchwritesize: {{ .Values.openlane.coreConfiguration.authz.maxbatchwritesize }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.authz.enableparentcontext }}
enableparentcontext: {{ .Values.openlane.coreConfiguration.authz.enableparentcontext }}
{{- end }}
{{- $sliceValue := (.Values.openlane.coreConfiguration.authz.parentcontextskipkinds | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
parentcontextskipkinds:
{{- toYaml $sliceValue | nindent 8 }}
{{- end }}
{{- $sliceValue := (.Values.openlane.coreConfiguration.authz.parentcontextconditions | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
parentcontextconditions:
{{- toYaml $sliceValue | nindent 8 }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.db }}
db:
{{- if .Values.openlane.coreConfiguration.db.debug }}
debug: {{ .Values.openlane.coreConfiguration.db.debug }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.db.databasename }}
databasename: {{ .Values.openlane.coreConfiguration.db.databasename | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.db.drivername }}
drivername: {{ .Values.openlane.coreConfiguration.db.drivername | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.db.multiwrite }}
multiwrite: {{ .Values.openlane.coreConfiguration.db.multiwrite }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.db.cachettl }}
cachettl: {{ .Values.openlane.coreConfiguration.db.cachettl | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.db.runmigrations }}
runmigrations: {{ .Values.openlane.coreConfiguration.db.runmigrations }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.db.migrationprovider }}
migrationprovider: {{ .Values.openlane.coreConfiguration.db.migrationprovider | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.db.enablehistory }}
enablehistory: {{ .Values.openlane.coreConfiguration.db.enablehistory }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.db.maxconnections }}
maxconnections: {{ .Values.openlane.coreConfiguration.db.maxconnections }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.db.maxidleconnections }}
maxidleconnections: {{ .Values.openlane.coreConfiguration.db.maxidleconnections }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.jobqueue }}
jobqueue:
{{- if .Values.openlane.coreConfiguration.jobqueue.runmigrations }}
runmigrations: {{ .Values.openlane.coreConfiguration.jobqueue.runmigrations }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.jobqueue.metrics }}
metrics:
{{- if .Values.openlane.coreConfiguration.jobqueue.metrics.enablemetrics }}
enablemetrics: {{ .Values.openlane.coreConfiguration.jobqueue.metrics.enablemetrics }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.jobqueue.metrics.metricsdurationunit }}
metricsdurationunit: {{ .Values.openlane.coreConfiguration.jobqueue.metrics.metricsdurationunit | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.jobqueue.metrics.enablesemanticmetrics }}
enablesemanticmetrics: {{ .Values.openlane.coreConfiguration.jobqueue.metrics.enablesemanticmetrics }}
{{- end }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis }}
redis:
{{- if .Values.openlane.coreConfiguration.redis.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.redis.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.address }}
address: {{ .Values.openlane.coreConfiguration.redis.address | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.name }}
name: {{ .Values.openlane.coreConfiguration.redis.name | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.username }}
username: {{ .Values.openlane.coreConfiguration.redis.username | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.password }}
password: {{ .Values.openlane.coreConfiguration.redis.password | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.db }}
db: {{ .Values.openlane.coreConfiguration.redis.db }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.dialtimeout }}
dialtimeout: {{ .Values.openlane.coreConfiguration.redis.dialtimeout | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.readtimeout }}
readtimeout: {{ .Values.openlane.coreConfiguration.redis.readtimeout | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.writetimeout }}
writetimeout: {{ .Values.openlane.coreConfiguration.redis.writetimeout | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.maxretries }}
maxretries: {{ .Values.openlane.coreConfiguration.redis.maxretries }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.minidleconns }}
minidleconns: {{ .Values.openlane.coreConfiguration.redis.minidleconns }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.maxidleconns }}
maxidleconns: {{ .Values.openlane.coreConfiguration.redis.maxidleconns }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.redis.maxactiveconns }}
maxactiveconns: {{ .Values.openlane.coreConfiguration.redis.maxactiveconns }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.sessions }}
sessions:
{{- if .Values.openlane.coreConfiguration.sessions.domain }}
domain: {{ .Values.openlane.coreConfiguration.sessions.domain | quote }}
{{- else if .Values.domain }}
domain: "{{ .Values.domain }}"
{{- else }}
domain: ""
{{- end }}
{{- if .Values.openlane.coreConfiguration.sessions.maxage }}
maxage: {{ .Values.openlane.coreConfiguration.sessions.maxage }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.sessions.secure }}
secure: {{ .Values.openlane.coreConfiguration.sessions.secure }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.sessions.httponly }}
httponly: {{ .Values.openlane.coreConfiguration.sessions.httponly }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.sessions.samesite }}
samesite: {{ .Values.openlane.coreConfiguration.sessions.samesite | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.totp }}
totp:
{{- if .Values.openlane.coreConfiguration.totp.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.totp.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.totp.codelength }}
codelength: {{ .Values.openlane.coreConfiguration.totp.codelength }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.totp.issuer }}
issuer: {{ .Values.openlane.coreConfiguration.totp.issuer | quote }}
{{- else if .Values.domain }}
issuer: "{{ .Values.domain }}"
{{- else }}
issuer: ""
{{- end }}
{{- if .Values.openlane.coreConfiguration.totp.redis }}
redis: {{ .Values.openlane.coreConfiguration.totp.redis }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.totp.recoverycodecount }}
recoverycodecount: {{ .Values.openlane.coreConfiguration.totp.recoverycodecount }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.totp.recoverycodelength }}
recoverycodelength: {{ .Values.openlane.coreConfiguration.totp.recoverycodelength }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.ratelimit }}
ratelimit:
{{- if .Values.openlane.coreConfiguration.ratelimit.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.ratelimit.enabled }}
{{- end }}
{{- $sliceValue := (.Values.openlane.coreConfiguration.ratelimit.options | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
options:
{{- toYaml $sliceValue | nindent 8 }}
{{- end }}
{{- $sliceValue := (.Values.openlane.coreConfiguration.ratelimit.headers | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
headers:
{{- toYaml $sliceValue | nindent 8 }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.ratelimit.forwardedindexfrombehind }}
forwardedindexfrombehind: {{ .Values.openlane.coreConfiguration.ratelimit.forwardedindexfrombehind }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.ratelimit.includepath }}
includepath: {{ .Values.openlane.coreConfiguration.ratelimit.includepath }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.ratelimit.includemethod }}
includemethod: {{ .Values.openlane.coreConfiguration.ratelimit.includemethod }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.ratelimit.keyprefix }}
keyprefix: {{ .Values.openlane.coreConfiguration.ratelimit.keyprefix | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.ratelimit.denystatus }}
denystatus: {{ .Values.openlane.coreConfiguration.ratelimit.denystatus }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.ratelimit.denymessage }}
denymessage: {{ .Values.openlane.coreConfiguration.ratelimit.denymessage | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.ratelimit.sendretryafterheader }}
sendretryafterheader: {{ .Values.openlane.coreConfiguration.ratelimit.sendretryafterheader }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.ratelimit.dryrun }}
dryrun: {{ .Values.openlane.coreConfiguration.ratelimit.dryrun }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage }}
objectstorage:
{{- if .Values.openlane.coreConfiguration.objectstorage.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.objectstorage.enabled }}
{{- end }}
{{- $sliceValue := (.Values.openlane.coreConfiguration.objectstorage.keys | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
keys:
{{- toYaml $sliceValue | nindent 8 }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.maxsizemb }}
maxsizemb: {{ .Values.openlane.coreConfiguration.objectstorage.maxsizemb }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.maxmemorymb }}
maxmemorymb: {{ .Values.openlane.coreConfiguration.objectstorage.maxmemorymb }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.devmode }}
devmode: {{ .Values.openlane.coreConfiguration.objectstorage.devmode }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers }}
providers:
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.s3 }}
s3:
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.s3.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.objectstorage.providers.s3.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.s3.ensureavailable }}
ensureavailable: {{ .Values.openlane.coreConfiguration.objectstorage.providers.s3.ensureavailable }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.s3.region }}
region: {{ .Values.openlane.coreConfiguration.objectstorage.providers.s3.region | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.s3.bucket }}
bucket: {{ .Values.openlane.coreConfiguration.objectstorage.providers.s3.bucket | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.s3.endpoint }}
endpoint: {{ .Values.openlane.coreConfiguration.objectstorage.providers.s3.endpoint | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.s3.proxypresignenabled }}
proxypresignenabled: {{ .Values.openlane.coreConfiguration.objectstorage.providers.s3.proxypresignenabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.s3.baseurl }}
baseurl: {{ .Values.openlane.coreConfiguration.objectstorage.providers.s3.baseurl | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.r2 }}
r2:
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.r2.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.objectstorage.providers.r2.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.r2.ensureavailable }}
ensureavailable: {{ .Values.openlane.coreConfiguration.objectstorage.providers.r2.ensureavailable }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.r2.region }}
region: {{ .Values.openlane.coreConfiguration.objectstorage.providers.r2.region | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.r2.bucket }}
bucket: {{ .Values.openlane.coreConfiguration.objectstorage.providers.r2.bucket | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.r2.endpoint }}
endpoint: {{ .Values.openlane.coreConfiguration.objectstorage.providers.r2.endpoint | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.r2.proxypresignenabled }}
proxypresignenabled: {{ .Values.openlane.coreConfiguration.objectstorage.providers.r2.proxypresignenabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.r2.baseurl }}
baseurl: {{ .Values.openlane.coreConfiguration.objectstorage.providers.r2.baseurl | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.disk }}
disk:
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.disk.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.objectstorage.providers.disk.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.disk.ensureavailable }}
ensureavailable: {{ .Values.openlane.coreConfiguration.objectstorage.providers.disk.ensureavailable }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.disk.region }}
region: {{ .Values.openlane.coreConfiguration.objectstorage.providers.disk.region | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.disk.bucket }}
bucket: {{ .Values.openlane.coreConfiguration.objectstorage.providers.disk.bucket | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.disk.endpoint }}
endpoint: {{ .Values.openlane.coreConfiguration.objectstorage.providers.disk.endpoint | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.disk.proxypresignenabled }}
proxypresignenabled: {{ .Values.openlane.coreConfiguration.objectstorage.providers.disk.proxypresignenabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.disk.baseurl }}
baseurl: {{ .Values.openlane.coreConfiguration.objectstorage.providers.disk.baseurl | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.database }}
database:
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.database.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.objectstorage.providers.database.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.database.ensureavailable }}
ensureavailable: {{ .Values.openlane.coreConfiguration.objectstorage.providers.database.ensureavailable }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.database.region }}
region: {{ .Values.openlane.coreConfiguration.objectstorage.providers.database.region | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.database.bucket }}
bucket: {{ .Values.openlane.coreConfiguration.objectstorage.providers.database.bucket | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.database.endpoint }}
endpoint: {{ .Values.openlane.coreConfiguration.objectstorage.providers.database.endpoint | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.database.proxypresignenabled }}
proxypresignenabled: {{ .Values.openlane.coreConfiguration.objectstorage.providers.database.proxypresignenabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.objectstorage.providers.database.baseurl }}
baseurl: {{ .Values.openlane.coreConfiguration.objectstorage.providers.database.baseurl | quote }}
{{- end }}
{{- end }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.subscription }}
subscription:
{{- if .Values.openlane.coreConfiguration.subscription.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.subscription.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.subscription.stripewebhookurl }}
stripewebhookurl: {{ .Values.openlane.coreConfiguration.subscription.stripewebhookurl | quote }}
{{- else if .Values.domain }}
stripewebhookurl: "https://api.{{ .Values.domain }}/v1/stripe/webhook"
{{- else }}
stripewebhookurl: "https://api.theopenlane.io/stripe/webhook"
{{- end }}
{{- if .Values.openlane.coreConfiguration.subscription.stripebillingportalsuccessurl }}
stripebillingportalsuccessurl: {{ .Values.openlane.coreConfiguration.subscription.stripebillingportalsuccessurl | quote }}
{{- else if .Values.domain }}
stripebillingportalsuccessurl: "https://console.{{ .Values.domain }}/organization-settings/billing"
{{- else }}
stripebillingportalsuccessurl: "https://console.theopenlane.io/organization-settings/billing"
{{- end }}
{{- if .Values.openlane.coreConfiguration.subscription.stripecancellationreturnurl }}
stripecancellationreturnurl: {{ .Values.openlane.coreConfiguration.subscription.stripecancellationreturnurl | quote }}
{{- else if .Values.domain }}
stripecancellationreturnurl: "https://console.{{ .Values.domain }}/organization-settings/billing"
{{- else }}
stripecancellationreturnurl: "https://console.theopenlane.io/organization-settings/billing"
{{- end }}
{{- $sliceValue := (.Values.openlane.coreConfiguration.subscription.stripewebhookevents | default (list)) }}
{{- if gt (len $sliceValue) 0 }}
stripewebhookevents:
{{- toYaml $sliceValue | nindent 8 }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.subscription.stripewebhookapiversion }}
stripewebhookapiversion: {{ .Values.openlane.coreConfiguration.subscription.stripewebhookapiversion | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.subscription.stripewebhookdiscardapiversion }}
stripewebhookdiscardapiversion: {{ .Values.openlane.coreConfiguration.subscription.stripewebhookdiscardapiversion | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.keywatcher }}
keywatcher:
{{- if .Values.openlane.coreConfiguration.keywatcher.enabled }}
enabled: {{ .Values.openlane.coreConfiguration.keywatcher.enabled }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.keywatcher.keydir }}
keydir: {{ .Values.openlane.coreConfiguration.keywatcher.keydir | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.integrations }}
integrations:
{{- if .Values.openlane.coreConfiguration.integrations.awssecurityhub }}
awssecurityhub:
{{- if .Values.openlane.coreConfiguration.integrations.awssecurityhub.arn }}
arn: {{ .Values.openlane.coreConfiguration.integrations.awssecurityhub.arn | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.integrations.githubapp }}
githubapp:
{{- if .Values.openlane.coreConfiguration.integrations.githubapp.appslug }}
appslug: {{ .Values.openlane.coreConfiguration.integrations.githubapp.appslug | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.integrations.slack }}
slack:
{{- if .Values.openlane.coreConfiguration.integrations.slack.clientid }}
clientid: {{ .Values.openlane.coreConfiguration.integrations.slack.clientid | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.integrations.slack.redirecturl }}
redirecturl: {{ .Values.openlane.coreConfiguration.integrations.slack.redirecturl | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.integrations.slack.appid }}
appid: {{ .Values.openlane.coreConfiguration.integrations.slack.appid | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.integrations.slackruntime }}
slackruntime:
{{- if .Values.openlane.coreConfiguration.integrations.slackruntime.webhookURL }}
webhookURL: {{ .Values.openlane.coreConfiguration.integrations.slackruntime.webhookURL | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.integrations.slackruntime.botToken }}
botToken: {{ .Values.openlane.coreConfiguration.integrations.slackruntime.botToken | quote }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.integrations.slackruntime.defaultChannel }}
defaultChannel: {{ .Values.openlane.coreConfiguration.integrations.slackruntime.defaultChannel | quote }}
{{- end }}
{{- end }}
{{- if .Values.openlane.coreConfiguration.integrations.googledrive }}
googledrive:
{{- if .Values.openlane.coreConfiguration.integrations.googledrive.clientid }}