mirror of
https://github.com/helm/charts.git
synced 2026-08-20 21:08:12 +00:00
* RBAC support added * adding ingress support * fixed typos * Adding OWNERS file and moved chart to stable * Adding Rimusz as owner * replaced kube-lego with cert-manager * reverted change in artifactory-ha * Changing Deployment to Statefulsets * Fixing OWNERS and maintainers * keeping old version in Incubator * bumping up chart version * changing incubator to stable
200 lines
5.2 KiB
YAML
200 lines
5.2 KiB
YAML
# Default values for distribution.
|
|
# This is a YAML-formatted file.
|
|
# Beware when changing values here. You should know what you are doing!
|
|
# Access the values with {{ .Values.key.subkey }}
|
|
|
|
# Common
|
|
initContainerImage: "alpine:3.6"
|
|
|
|
# For supporting pulling from private registries
|
|
imagePullSecrets:
|
|
|
|
## Role Based Access Control
|
|
## Ref: https://kubernetes.io/docs/admin/authorization/rbac/
|
|
rbac:
|
|
create: true
|
|
role:
|
|
## Rules to create. It follows the role specification
|
|
rules:
|
|
- apiGroups:
|
|
- ''
|
|
resources:
|
|
- services
|
|
- endpoints
|
|
- pods
|
|
verbs:
|
|
- get
|
|
- watch
|
|
- list
|
|
|
|
## Service Account
|
|
## Ref: https://kubernetes.io/docs/admin/service-accounts-admin/
|
|
##
|
|
serviceAccount:
|
|
create: true
|
|
## The name of the ServiceAccount to use.
|
|
## If not set and create is true, a name is generated using the fullname template
|
|
name:
|
|
|
|
ingress:
|
|
enabled: false
|
|
# Used to create an Ingress record.
|
|
hosts:
|
|
- distribution.domain.example
|
|
annotations:
|
|
# kubernetes.io/ingress.class: nginx
|
|
# kubernetes.io/tls-acme: "true"
|
|
tls:
|
|
# Secrets must be manually created in the namespace.
|
|
# - secretName: chart-example-tls
|
|
# hosts:
|
|
# - distribution.domain.example
|
|
|
|
# Sub charts
|
|
## Configuration values for the mongodb dependency
|
|
## ref: https://github.com/kubernetes/charts/blob/master/stable/mongodb/README.md
|
|
##
|
|
mongodb:
|
|
enabled: true
|
|
image:
|
|
tag: 3.6.3
|
|
pullPolicy: IfNotPresent
|
|
persistence:
|
|
enabled: true
|
|
size: 10Gi
|
|
resources: {}
|
|
# requests:
|
|
# memory: "2Gi"
|
|
# cpu: "100m"
|
|
# limits:
|
|
# memory: "2Gi"
|
|
# cpu: "250m"
|
|
## Make sure the --wiredTigerCacheSizeGB is no more than half the memory limit!
|
|
## This is critical to protect against OOMKill by Kubernetes!
|
|
mongodbExtraFlags:
|
|
- "--wiredTigerCacheSizeGB=1"
|
|
mongodbRootPassword:
|
|
mongodbUsername: distribution
|
|
mongodbPassword:
|
|
mongodbDatabase: bintray
|
|
livenessProbe:
|
|
initialDelaySeconds: 40
|
|
readinessProbe:
|
|
initialDelaySeconds: 30
|
|
|
|
## Configuration values for the redis dependency
|
|
## ref: https://github.com/kubernetes/charts/blob/master/stable/redis/README.md
|
|
##
|
|
redis:
|
|
enabled: true
|
|
redisPassword:
|
|
persistence:
|
|
enabled: true
|
|
size: 10Gi
|
|
master:
|
|
port: 6379
|
|
resources: {}
|
|
# requests:
|
|
# memory: "1Gi"
|
|
# cpu: "100m"
|
|
# limits:
|
|
# memory: "2Gi"
|
|
# cpu: "250m"
|
|
|
|
# For setting up external services, must pass the connection URL for them
|
|
global:
|
|
mongoUrl:
|
|
mongoAuditUrl:
|
|
redisUrl:
|
|
|
|
distribution:
|
|
replicaCount: 1
|
|
name: distribution
|
|
image:
|
|
repository: "docker.bintray.io/jfrog/distribution-distribution"
|
|
## Note that by default we use appVersion to get image tag
|
|
# version: 1.1.0
|
|
imagePullPolicy: IfNotPresent
|
|
internalPort: 8080
|
|
externalPort: 80
|
|
masterKey: BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
|
|
env:
|
|
artifactoryUrl:
|
|
btServerUrl:
|
|
artifactoryCi1Url:
|
|
artifactoryEdge1Url:
|
|
artifactoryEdge2Url:
|
|
artifactoryEdge3Url:
|
|
service:
|
|
type: LoadBalancer
|
|
resources: {}
|
|
# requests:
|
|
# memory: "2Gi"
|
|
# cpu: "500m"
|
|
# limits:
|
|
# memory: "4Gi"
|
|
# cpu: "2"
|
|
## Control Java options (JAVA_OPTIONS)
|
|
## IMPORTANT: keep javaOpts.xmx no higher than resources.limits.memory
|
|
javaOpts:
|
|
xms:
|
|
xmx:
|
|
persistence:
|
|
enabled: true
|
|
## A manually managed Persistent Volume and Claim
|
|
## Requires persistence.enabled: true
|
|
## If defined, PVC must be created manually before volume will be bound
|
|
# existingClaim:
|
|
|
|
accessMode: ReadWriteOnce
|
|
mountPath: "/var/opt/jfrog/distribution"
|
|
size: 50Gi
|
|
## distribution data Persistent Volume Storage Class
|
|
## If defined, storageClassName: <storageClass>
|
|
## If set to "-", storageClassName: "", which disables dynamic provisioning
|
|
## If undefined (the default) or set to null, no storageClassName spec is
|
|
## set, choosing the default provisioner. (gp2 on AWS, standard on
|
|
## GKE, AWS & OpenStack)
|
|
##
|
|
# storageClass: "-"
|
|
|
|
distributor:
|
|
replicaCount: 1
|
|
name: distributor
|
|
image:
|
|
repository: "docker.bintray.io/jfrog/distribution-distributor"
|
|
## Note that by default we use appVersion to get image tag
|
|
# version: 1.1.0
|
|
imagePullPolicy: IfNotPresent
|
|
token:
|
|
resources: {}
|
|
# requests:
|
|
# memory: "2Gi"
|
|
# cpu: "500m"
|
|
# limits:
|
|
# memory: "4Gi"
|
|
# cpu: "2"
|
|
## Control Java options (JAVA_OPTIONS)
|
|
## IMPORTANT: keep javaOpts.xmx no higher than resources.limits.memory
|
|
javaOpts:
|
|
xms:
|
|
xmx:
|
|
persistence:
|
|
enabled: true
|
|
## A manually managed Persistent Volume and Claim
|
|
## Requires persistence.enabled: true
|
|
## If defined, PVC must be created manually before volume will be bound
|
|
# existingClaim:
|
|
|
|
accessMode: ReadWriteOnce
|
|
mountPath: "/var/opt/jfrog/distributor"
|
|
size: 50Gi
|
|
## distribution data Persistent Volume Storage Class
|
|
## If defined, storageClassName: <storageClass>
|
|
## If set to "-", storageClassName: "", which disables dynamic provisioning
|
|
## If undefined (the default) or set to null, no storageClassName spec is
|
|
## set, choosing the default provisioner. (gp2 on AWS, standard on
|
|
## GKE, AWS & OpenStack)
|
|
##
|
|
# storageClass: "-"
|