helm-charts
application
Generic helm chart for all kind of applications
Homepage: https://github.com/stakater/application
Maintainers
| Name | Url | |
|---|---|---|
| Stakater | hello@stakater.com |
Values
Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| additionalLabels | tpl/object | nil |
Additional labels for all resources. |
| applicationName | string | `` | Application name. |
| componentOverride | string | "" |
Override the component label for all resources. |
| extraObjects | [list or object] of [tpl/object or tpl/string] | nil |
Extra K8s manifests to deploy. Can be of type list or object. If object, keys are ignored and only values are used. The used values can be defined as object or string and are passed through tpl to render. |
| namespaceOverride | string | "" |
Override the namespace for all resources. |
| partOfOverride | string | "" |
Override the partOf label for all resources. |
AlertmanagerConfig Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| alertmanagerConfig.enabled | bool | false |
Deploy an AlertmanagerConfig (Prometheus Operator) resource. |
| alertmanagerConfig.selectionLabels | object | {"alertmanagerConfig":"workload"} |
Labels to be picked up by Alertmanager to add it to base config. Read more about it at https://docs.openshift.com/container-platform/4.7/rest_api/monitoring_apis/alertmanager-monitoring-coreos-com-v1.html under .spec.alertmanagerConfigSelector. |
| alertmanagerConfig.spec | object | {"inhibitRules":[],"receivers":[],"route":null} |
AlertmanagerConfig spec. Read more about it at https://docs.openshift.com/container-platform/4.7/rest_api/monitoring_apis/alertmanagerconfig-monitoring-coreos-com-v1alpha1.html. |
| alertmanagerConfig.spec.inhibitRules | list | [] |
Inhibition rules that allows to mute alerts when other alerts are already firing. |
| alertmanagerConfig.spec.receivers | list | [] |
List of receivers. |
| alertmanagerConfig.spec.route | object | nil |
Route definition for alerts matching the resource’s namespace. It will be added to the generated Alertmanager configuration as a first-level route. |
Autoscaling - Horizontal Pod Autoscaling Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| autoscaling.additionalLabels | object | nil |
Additional labels for HPA. |
| autoscaling.annotations | object | nil |
Annotations for HPA. |
| autoscaling.enabled | bool | false |
Enable Horizontal Pod Autoscaling. |
| autoscaling.maxReplicas | int | 10 |
Maximum number of replicas. |
| autoscaling.metrics | list | [{"resource":{"name":"cpu","target":{"averageUtilization":60,"type":"Utilization"}},"type":"Resource"},{"resource":{"name":"memory","target":{"averageUtilization":60,"type":"Utilization"}},"type":"Resource"}] |
Metrics used for autoscaling. |
| autoscaling.minReplicas | int | 1 |
Minimum number of replicas. |
Backup Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| backup.additionalLabels | object | nil |
Additional labels for Backup. |
| backup.annotations | object | nil |
Annotations for Backup. |
| backup.defaultVolumesToRestic | bool | true |
Whether to use Restic to take snapshots of all pod volumes by default. |
| backup.enabled | bool | false |
Deploy a Velero/OADP Backup resource. |
| backup.excludedResources | list | nil |
List of resource types to exclude from the backup. |
| backup.includedNamespaces | tpl/list | [ ] |
List of namespaces to include objects from. |
| backup.includedResources | list | nil |
List of resource types to include in the backup. |
| backup.namespace | string | `` | Namespace for Backup. |
| backup.snapshotVolumes | bool | true |
Whether to take snapshots of persistent volumes as part of the backup. |
| backup.storageLocation | string | nil |
Name of the backup storage location where the backup should be stored. |
| backup.ttl | string | "1h0m0s" |
How long the Backup should be retained for. |
cert-manager Certificate Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| certificate.additionalLabels | object | nil |
Additional labels for Certificate. |
| certificate.annotations | object | nil |
Annotations for Certificate. |
| certificate.commonName | tpl/string | nil |
Common name as specified on the DER encoded CSR. This field is not recommended in cases when this certificate is an end-entity certificate. More information can be found in the cert-manager documentation. |
| certificate.dnsNames | tpl/list | nil |
List of DNS subjectAltNames to be set on the certificate. |
| certificate.duration | string | "8760h0m0s" |
The requested “duration” (i.e. lifetime) of the Certificate. |
| certificate.emailSANs | list | nil |
List of email subjectAltNames to be set on the Certificate. |
| certificate.enabled | bool | false |
Deploy a cert-manager Certificate resource. |
| certificate.ipAddresses | list | nil |
List of IP address subjectAltNames to be set on the certificate. |
| certificate.isCA | bool | false |
Mark this Certificate as valid for certificate signing. |
| certificate.issuerRef.group | string | "cert-manager.io" |
Group of the issuer resource being refered to. |
| certificate.issuerRef.kind | string | "ClusterIssuer" |
Kind of the issuer being referred to. |
| certificate.issuerRef.name | string | "ca-issuer" |
Reference to the issuer for this certificate. |
| certificate.keyAlgorithm | string | "rsa" |
Private key algorithm of the corresponding private key for this certificate. |
| certificate.keyEncoding | string | "pkcs1" |
Private key cryptography standards (PKCS) for this certificate’s private key to be encoded in. |
| certificate.keySize | int | 2048 |
Key bit size of the corresponding private key for this certificate. |
| certificate.keystores.enabled | bool | false |
Enables keystore configuration. Keystores configures additional keystore output formats stored in the spec.secretName Secret resource. |
| certificate.keystores.jks.create | bool | false |
Enables jks keystore creation for the Certificate. JKS configures options for storing a JKS keystore in the spec.secretName Secret resource. |
| certificate.keystores.jks.key | tpl/string | "test_key" |
Key of the entry in the Secret resource’s data field to be used. |
| certificate.keystores.jks.name | string | "test-creds" |
Name of the Secret resource being referred to. |
| certificate.keystores.pkcs12.create | bool | true |
Enables PKCS12 keystore creation for the Certificate. PKCS12 configures options for storing a PKCS12 keystore in the spec.secretName Secret resource. |
| certificate.keystores.pkcs12.key | string | "test_key" |
Key of the entry in the Secret resource’s data field to be used. |
| certificate.keystores.pkcs12.name | string | "test-creds" |
Name of the Secret resource being referred to. |
| certificate.privateKey.enabled | bool | false |
Enable Private Key for the certificate. |
| certificate.privateKey.rotationPolicy | string | "Always" |
Denotes how private keys should be generated or sourced when a certificate is being issued. |
| certificate.renewBefore | string | "720h0m0s" |
The amount of time before the currently issued certificate’s notAfter time that cert-manager will begin to attempt to renew the certificate. |
| certificate.secretName | tpl/string | "tls-cert" |
Name of the secret resource that will be automatically created and managed by this Certificate resource. |
| certificate.subject | tpl/object | nil |
Full X509 name specification for certificate. |
| certificate.uriSANs | list | nil |
List of URI subjectAltNames to be set on the certificate. |
| certificate.usages | list | nil |
Set of x509 usages that are requested for the certificate. |
ConfigMap Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| configMap.additionalLabels | object | nil |
Additional labels for ConfigMaps. |
| configMap.annotations | object | nil |
Annotations for ConfigMaps. |
| configMap.enabled | bool | false |
Deploy additional ConfigMaps. |
| configMap.files | object | nil |
List of ConfigMap entries. Key will be used as a name suffix for the ConfigMap. Value is the ConfigMap content. |
CronJob Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| cronJob.enabled | bool | false |
Deploy CronJob resources. |
| cronJob.jobs | object | nil |
Map of CronJob resources. Key will be used as a name suffix for the CronJob. Value is the CronJob configuration. See values for more details. |
Deployment Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| deployment.additionalContainers | list | nil |
Additional containers besides init and app containers (without templating). |
| deployment.additionalLabels | object | nil |
Additional labels for Deployment. |
| deployment.additionalPodAnnotations | object | nil |
Additional pod annotations. |
| deployment.affinity | object | nil |
Affinity for the pods. |
| deployment.annotations | object | nil |
Annotations for Deployment. |
| deployment.args | list | [] |
Args for the app container. |
| deployment.command | list | [] |
Command for the app container. |
| deployment.containerSecurityContext | object | {"readOnlyRootFilesystem":true,"runAsNonRoot":true} |
Security Context at Container Level. |
| deployment.dnsConfig | object | nil |
DNS config for the pods. |
| deployment.dnsPolicy | string | "" |
DNS Policy. |
| deployment.enabled | bool | true |
Enable Deployment. |
| deployment.env | object | nil |
Environment variables to be added to the pod. See the README “Consuming environment variable in application chart” section for more details. |
| deployment.envFrom | object | nil |
Mount environment variables from ConfigMap or Secret to the pod. See the README “Consuming environment variable in application chart” section for more details. |
| deployment.fluentdConfigAnnotations | object | nil |
Configuration details for fluentdConfigurations. Only works for specific setup, see https://medium.com/stakater/dynamic-log-processing-with-fluentd-konfigurator-and-slack-935a5de4eddb. |
| deployment.hostAliases | list | nil |
Mapping between IP and hostnames that will be injected as entries in the pod’s hosts files. |
| deployment.hostNetwork | bool | nil |
Host network connectivity. |
| deployment.image.digest | tpl/string | "" |
Image digest. If resolved to a non-empty value, digest takes precedence on the tag. |
| deployment.image.pullPolicy | string | "IfNotPresent" |
Image pull policy. |
| deployment.image.repository | tpl/string | "" |
Repository. |
| deployment.image.tag | tpl/string | "" |
Tag. |
| deployment.imagePullSecrets | list | [] |
List of secrets to be used for pulling the images. |
| deployment.initContainers | object | nil |
Add init containers to the pods. |
| deployment.lifecycle | object | {} |
Lifecycle configuration for the pod. |
| deployment.livenessProbe | object | See below | Liveness probe. Must specify either one of the following field when enabled: httpGet, exec, tcpSocket, grpc |
| deployment.livenessProbe.enabled | bool | false |
Enable Liveness probe. |
| deployment.livenessProbe.exec | object | {} |
Exec probe. |
| deployment.livenessProbe.failureThreshold | int | 30 |
Number of retries before marking the pod as failed. |
| deployment.livenessProbe.grpc | object | {} |
gRPC probe. |
| deployment.livenessProbe.httpGet | object | {} |
HTTP Get probe. |
| deployment.livenessProbe.periodSeconds | int | 10 |
Time between retries. |
| deployment.livenessProbe.successThreshold | int | 1 |
Number of successful probes before marking the pod as ready. |
| deployment.livenessProbe.tcpSocket | object | {} |
TCP Socket probe. |
| deployment.livenessProbe.timeoutSeconds | int | 1 |
Time before the probe times out. |
| deployment.minReadySeconds | int | nil |
Minimum number of seconds for which a newly created Pod should be ready without any of its containers crashing. |
| deployment.nodeSelector | object | nil |
Select the node where the pods should be scheduled. |
| deployment.openshiftOAuthProxy.disableTLSArg | bool | false |
If disabled --http-address=:8081 will be used instead of --https-address=:8443. It can be useful when an ingress is enabled for the application. |
| deployment.openshiftOAuthProxy.enabled | bool | false |
Enable OpenShift OAuth Proxy. |
| deployment.openshiftOAuthProxy.image | string | "openshift/oauth-proxy:latest" |
Image for the OAuth Proxy. |
| deployment.openshiftOAuthProxy.port | int | 8080 |
Port on which application is running inside container. |
| deployment.openshiftOAuthProxy.secretName | string | "openshift-oauth-proxy-tls" |
Secret name for the OAuth Proxy TLS certificate. |
| deployment.podLabels | object | nil |
Additional pod labels which are used in Service’s Label Selector. |
| deployment.ports | list | nil |
List of ports for the app container. |
| deployment.priorityClassName | string | "" |
Define the priority class for the pod. |
| deployment.readinessProbe | object | See below | Readiness probe. Must specify either one of the following field when enabled: httpGet, exec, tcpSocket, grpc |
| deployment.readinessProbe.enabled | bool | false |
Enable Readiness probe. |
| deployment.readinessProbe.exec | object | {} |
Exec probe. |
| deployment.readinessProbe.failureThreshold | int | 30 |
Number of retries before marking the pod as failed. |
| deployment.readinessProbe.grpc | object | {} |
gRPC probe. |
| deployment.readinessProbe.httpGet | object | {} |
HTTP Get probe. |
| deployment.readinessProbe.periodSeconds | int | 10 |
Time between retries. |
| deployment.readinessProbe.successThreshold | int | 1 |
Number of successful probes before marking the pod as ready. |
| deployment.readinessProbe.tcpSocket | object | {} |
TCP Socket probe. |
| deployment.readinessProbe.timeoutSeconds | int | 1 |
Time before the probe times out. |
| deployment.reloadOnChange | bool | true |
Reload deployment if attached Secret/ConfigMap changes. |
| deployment.replicas | int | nil |
Number of replicas. |
| deployment.resources | object | {} |
Resource limits and requests for the pod. |
| deployment.revisionHistoryLimit | int | 2 |
Number of ReplicaSet revisions to retain. |
| deployment.runtimeClassName | string | "" |
Set the runtimeClassName for the deployment’s pods. |
| deployment.securityContext | object | nil |
Security Context for the pod. |
| deployment.startupProbe | object | See below | Startup probe. Must specify either one of the following field when enabled: httpGet, exec, tcpSocket, grpc |
| deployment.startupProbe.enabled | bool | false |
Enable Startup probe. |
| deployment.startupProbe.exec | object | {} |
Exec probe. |
| deployment.startupProbe.failureThreshold | int | 30 |
Number of retries before marking the pod as failed. |
| deployment.startupProbe.grpc | object | {} |
gRPC probe. |
| deployment.startupProbe.httpGet | object | {} |
HTTP Get probe. |
| deployment.startupProbe.periodSeconds | int | 10 |
Time between retries. |
| deployment.startupProbe.successThreshold | int | 1 |
Number of successful probes before marking the pod as ready. |
| deployment.startupProbe.tcpSocket | object | {} |
TCP Socket probe. |
| deployment.startupProbe.timeoutSeconds | int | 1 |
Time before the probe times out. |
| deployment.strategy.type | string | "RollingUpdate" |
Type of deployment strategy. |
| deployment.terminationGracePeriodSeconds | int | nil |
Gracefull termination period. |
| deployment.tolerations | list | nil |
Taint tolerations for the pods. |
| deployment.topologySpreadConstraints | list | nil |
Topology spread constraints for the pods. |
| deployment.volumeMounts | object | nil |
Mount path for Volumes. Key is the name of the volume. Value is the volume mount definition. |
| deployment.volumes | object | nil |
Volumes to be added to the pod. Key is the name of the volume. Value is the volume definition. |
| persistence.accessMode | string | "ReadWriteOnce" |
Access mode for volume. |
| persistence.additionalLabels | object | nil |
Additional labels for persistent volume. |
| persistence.annotations | object | nil |
Annotations for persistent volume. |
| persistence.enabled | bool | false |
Enable persistence. |
| persistence.mountPVC | bool | false |
Whether to mount the created PVC to the deployment. |
| persistence.mountPath | string | "/" |
If persistence.mountPVC is enabled, where to mount the volume in the containers. |
| persistence.name | string | -data |
Name of the PVC. |
| persistence.storageClass | string | nil |
Storage class for volume. If defined, use that value If set to “-“ or “”, disable dynamic provisioning If undefined or set to null (the default), no storageClass spec is set, choosing the default provisioner. |
| persistence.storageSize | string | "8Gi" |
Size of the persistent volume. |
| persistence.volumeMode | string | "" |
PVC Volume Mode. |
| persistence.volumeName | string | "" |
Name of the volume. |
EndpointMonitor Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| endpointMonitor.additionalLabels | object | nil |
Additional labels for EndpointMonitor. |
| endpointMonitor.annotations | object | nil |
Annotations for EndpointMonitor. |
| endpointMonitor.enabled | bool | false |
Deploy an IMC EndpointMonitor resource. |
ExternalSecret Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| externalSecret.additionalLabels | object | nil |
Additional labels for ExternalSecret. |
| externalSecret.annotations | object | nil |
Annotations for ExternalSecret. |
| externalSecret.enabled | bool | false |
Deploy ExternalSecret resources. |
| externalSecret.files | object | nil |
List of ExternalSecret entries. Key will be used as a name suffix for the ExternalSecret. There a two allowed modes: - data: Data defines the connection between the Kubernetes Secret keys and the Provider data - dataFrom: Used to fetch all properties from the Provider key |
| externalSecret.refreshInterval | string | "1m" |
RefreshInterval is the amount of time before the values are read again from the SecretStore provider. |
| externalSecret.secretStore | object | {"kind":"SecretStore","name":"tenant-vault-secret-store"} |
Default values for the SecretStore. Can be overriden per ExternalSecret in the externalSecret.files object. |
| externalSecret.secretStore.kind | string | "SecretStore" |
Kind of the SecretStore being refered to. |
| externalSecret.secretStore.name | string | "tenant-vault-secret-store" |
Name of the SecretStore to use. |
ForecastleApp Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| forecastle.additionalLabels | object | nil |
Additional labels for ForecastleApp. |
| forecastle.displayName | string | "" |
Application Name. Required if forecastle.enabled is set to true. |
| forecastle.enabled | bool | false |
Deploy a ForecastleApp resource. |
| forecastle.group | string | `` | Application Group. |
| forecastle.icon | string | "https://raw.githubusercontent.com/stakater/ForecastleIcons/master/stakater-big.png" |
Icon URL. |
| forecastle.networkRestricted | bool | false |
Is application network restricted?. |
| forecastle.properties | object | nil |
Custom properties. |
GrafanaDashboard Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| grafanaDashboard.additionalLabels | object | nil |
Additional labels for GrafanaDashboard. |
| grafanaDashboard.annotations | object | nil |
Annotations for GrafanaDashboard. |
| grafanaDashboard.contents | object | nil |
List of GrafanaDashboard entries. Key will be used as a name suffix for the GrafanaDashboard. Value is the GrafanaDashboard content. According to GrafanaDashboard behavior, url field takes precedence on the json field. |
| grafanaDashboard.enabled | bool | false |
Deploy GrafanaDashboard resources. |
HTTPRoute Parameters
| Key | Type | Default | Description | |
|---|---|---|---|---|
| httpRoute.additionalLabels | object | {} |
Additional labels for HTTPRoute. | |
| httpRoute.annotations | object | {} |
Annotations for HTTPRoute. | |
| httpRoute.enabled | bool | false |
Enable HTTPRoute (Gateway API). | |
| httpRoute.gatewayNamespace | string | "" |
Namespace of the Gateway to attach this HTTPRoute to. If not set, the HTTPRoute will be attached to the Gateway in the same namespace as the HTTPRoute. | |
| httpRoute.hostnames | tpl/list | nil |
Hostnames for the HTTPRoute. | |
| httpRoute.parentRefs | tpl/list | nil |
Parent references for the HTTPRoute. | |
| httpRoute.rules | tpl/list | [{"backendRefs":[{"name":"","port":"page{"permalink"=>"/charts/application/", "layout"=>"page", "title"=>"application", "content"=>"# application\n\n \n\nGeneric helm chart for all kind of applications\n\n**Homepage:** <https://github.com/stakater/application>\n\n## Maintainers\n\n| Name | Email | Url |\n| ---- | ------ | --- |\n| Stakater | <hello@stakater.com> | |\n\n## Values\n\n### Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| additionalLabels | tpl/object | nil | Additional labels for all resources. |\n| applicationName | string | {{ .Chart.Name }} | Application name. |\n| componentOverride | string | "" | Override the component label for all resources. |\n| extraObjects | [list or object] of [tpl/object or tpl/string] | nil | Extra K8s manifests to deploy. Can be of type list or object. If object, keys are ignored and only values are used. The used values can be defined as object or string and are passed through tpl to render. |\n| namespaceOverride | string | "" | Override the namespace for all resources. |\n| partOfOverride | string | "" | Override the partOf label for all resources. |\n\n### AlertmanagerConfig Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| alertmanagerConfig.enabled | bool | false | Deploy an AlertmanagerConfig (Prometheus Operator) resource. |\n| alertmanagerConfig.selectionLabels | object | {"alertmanagerConfig":"workload"} | Labels to be picked up by Alertmanager to add it to base config. Read more about it at [https://docs.openshift.com/container-platform/4.7/rest_api/monitoring_apis/alertmanager-monitoring-coreos-com-v1.html](OpenShift's AlermanagerConfig documentation) under .spec.alertmanagerConfigSelector. |\n| alertmanagerConfig.spec | object | {"inhibitRules":[],"receivers":[],"route":null} | AlertmanagerConfig spec. Read more about it at [https://docs.openshift.com/container-platform/4.7/rest_api/monitoring_apis/alertmanagerconfig-monitoring-coreos-com-v1alpha1.html](OpenShift's AlermanagerConfig documentation). |\n| alertmanagerConfig.spec.inhibitRules | list | [] | Inhibition rules that allows to mute alerts when other alerts are already firing. |\n| alertmanagerConfig.spec.receivers | list | [] | List of receivers. |\n| alertmanagerConfig.spec.route | object | nil | Route definition for alerts matching the resource’s namespace. It will be added to the generated Alertmanager configuration as a first-level route. |\n\n### Autoscaling - Horizontal Pod Autoscaling Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| autoscaling.additionalLabels | object | nil | Additional labels for HPA. |\n| autoscaling.annotations | object | nil | Annotations for HPA. |\n| autoscaling.enabled | bool | false | Enable Horizontal Pod Autoscaling. |\n| autoscaling.maxReplicas | int | 10 | Maximum number of replicas. |\n| autoscaling.metrics | list | [{"resource":{"name":"cpu","target":{"averageUtilization":60,"type":"Utilization"}},"type":"Resource"},{"resource":{"name":"memory","target":{"averageUtilization":60,"type":"Utilization"}},"type":"Resource"}] | Metrics used for autoscaling. |\n| autoscaling.minReplicas | int | 1 | Minimum number of replicas. |\n\n### Backup Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| backup.additionalLabels | object | nil | Additional labels for Backup. |\n| backup.annotations | object | nil | Annotations for Backup. |\n| backup.defaultVolumesToRestic | bool | true | Whether to use Restic to take snapshots of all pod volumes by default. |\n| backup.enabled | bool | false | Deploy a [Velero/OADP Backup](https://velero.io/docs/main/api-types/backup/) resource. |\n| backup.excludedResources | list | nil | List of resource types to exclude from the backup. |\n| backup.includedNamespaces | tpl/list | [ {{ include "application.namespace" $ }} ] | List of namespaces to include objects from. |\n| backup.includedResources | list | nil | List of resource types to include in the backup. |\n| backup.namespace | string | {{ .Release.Namespace }} | Namespace for Backup. |\n| backup.snapshotVolumes | bool | true | Whether to take snapshots of persistent volumes as part of the backup. |\n| backup.storageLocation | string | nil | Name of the backup storage location where the backup should be stored. |\n| backup.ttl | string | "1h0m0s" | How long the Backup should be retained for. |\n\n### cert-manager Certificate Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| certificate.additionalLabels | object | nil | Additional labels for Certificate. |\n| certificate.annotations | object | nil | Annotations for Certificate. |\n| certificate.commonName | tpl/string | nil | Common name as specified on the DER encoded CSR. This field is not recommended in cases when this certificate is an end-entity certificate. More information can be found in the [cert-manager documentation](https://cert-manager.io/docs/usage/certificate/#:~:text=%23%20Avoid%20using%20commonName,%3A%20example.com). |\n| certificate.dnsNames | tpl/list | nil | List of DNS subjectAltNames to be set on the certificate. |\n| certificate.duration | string | "8760h0m0s" | The requested \"duration\" (i.e. lifetime) of the Certificate. |\n| certificate.emailSANs | list | nil | List of email subjectAltNames to be set on the Certificate. |\n| certificate.enabled | bool | false | Deploy a [cert-manager Certificate](https://cert-manager.io) resource. |\n| certificate.ipAddresses | list | nil | List of IP address subjectAltNames to be set on the certificate. |\n| certificate.isCA | bool | false | Mark this Certificate as valid for certificate signing. |\n| certificate.issuerRef.group | string | "cert-manager.io" | Group of the issuer resource being refered to. |\n| certificate.issuerRef.kind | string | "ClusterIssuer" | Kind of the issuer being referred to. |\n| certificate.issuerRef.name | string | "ca-issuer" | Reference to the issuer for this certificate. |\n| certificate.keyAlgorithm | string | "rsa" | Private key algorithm of the corresponding private key for this certificate. |\n| certificate.keyEncoding | string | "pkcs1" | Private key cryptography standards (PKCS) for this certificate's private key to be encoded in. |\n| certificate.keySize | int | 2048 | Key bit size of the corresponding private key for this certificate. |\n| certificate.keystores.enabled | bool | false | Enables keystore configuration. Keystores configures additional keystore output formats stored in the spec.secretName Secret resource. |\n| certificate.keystores.jks.create | bool | false | Enables jks keystore creation for the Certificate. JKS configures options for storing a JKS keystore in the spec.secretName Secret resource. |\n| certificate.keystores.jks.key | tpl/string | "test_key" | Key of the entry in the Secret resource's data field to be used. |\n| certificate.keystores.jks.name | string | "test-creds" | Name of the Secret resource being referred to. |\n| certificate.keystores.pkcs12.create | bool | true | Enables PKCS12 keystore creation for the Certificate. PKCS12 configures options for storing a PKCS12 keystore in the spec.secretName Secret resource. |\n| certificate.keystores.pkcs12.key | string | "test_key" | Key of the entry in the Secret resource's data field to be used. |\n| certificate.keystores.pkcs12.name | string | "test-creds" | Name of the Secret resource being referred to. |\n| certificate.privateKey.enabled | bool | false | Enable Private Key for the certificate. |\n| certificate.privateKey.rotationPolicy | string | "Always" | Denotes how private keys should be generated or sourced when a certificate is being issued. |\n| certificate.renewBefore | string | "720h0m0s" | The amount of time before the currently issued certificate's notAfter time that cert-manager will begin to attempt to renew the certificate. |\n| certificate.secretName | tpl/string | "tls-cert" | Name of the secret resource that will be automatically created and managed by this Certificate resource. |\n| certificate.subject | tpl/object | nil | Full X509 name specification for certificate. |\n| certificate.uriSANs | list | nil | List of URI subjectAltNames to be set on the certificate. |\n| certificate.usages | list | nil | Set of x509 usages that are requested for the certificate. |\n\n### ConfigMap Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| configMap.additionalLabels | object | nil | Additional labels for ConfigMaps. |\n| configMap.annotations | object | nil | Annotations for ConfigMaps. |\n| configMap.enabled | bool | false | Deploy additional ConfigMaps. |\n| configMap.files | object | nil | List of ConfigMap entries. Key will be used as a name suffix for the ConfigMap. Value is the ConfigMap content. |\n\n### CronJob Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| cronJob.enabled | bool | false | Deploy CronJob resources. |\n| cronJob.jobs | object | nil | Map of CronJob resources. Key will be used as a name suffix for the CronJob. Value is the CronJob configuration. See values for more details. |\n\n### Deployment Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| deployment.additionalContainers | list | nil | Additional containers besides init and app containers (without templating). |\n| deployment.additionalLabels | object | nil | Additional labels for Deployment. |\n| deployment.additionalPodAnnotations | object | nil | Additional pod annotations. |\n| deployment.affinity | object | nil | Affinity for the pods. |\n| deployment.annotations | object | nil | Annotations for Deployment. |\n| deployment.args | list | [] | Args for the app container. |\n| deployment.command | list | [] | Command for the app container. |\n| deployment.containerSecurityContext | object | {"readOnlyRootFilesystem":true,"runAsNonRoot":true} | Security Context at Container Level. |\n| deployment.dnsConfig | object | nil | DNS config for the pods. |\n| deployment.dnsPolicy | string | "" | DNS Policy. |\n| deployment.enabled | bool | true | Enable Deployment. |\n| deployment.env | object | nil | Environment variables to be added to the pod. See the README \"Consuming environment variable in application chart\" section for more details. |\n| deployment.envFrom | object | nil | Mount environment variables from ConfigMap or Secret to the pod. See the README \"Consuming environment variable in application chart\" section for more details. |\n| deployment.fluentdConfigAnnotations | object | nil | Configuration details for fluentdConfigurations. Only works for specific setup, see <https://medium.com/stakater/dynamic-log-processing-with-fluentd-konfigurator-and-slack-935a5de4eddb>. |\n| deployment.hostAliases | list | nil | Mapping between IP and hostnames that will be injected as entries in the pod's hosts files. |\n| deployment.hostNetwork | bool | nil | Host network connectivity. |\n| deployment.image.digest | tpl/string | "" | Image digest. If resolved to a non-empty value, digest takes precedence on the tag. |\n| deployment.image.pullPolicy | string | "IfNotPresent" | Image pull policy. |\n| deployment.image.repository | tpl/string | "" | Repository. |\n| deployment.image.tag | tpl/string | "" | Tag. |\n| deployment.imagePullSecrets | list | [] | List of secrets to be used for pulling the images. |\n| deployment.initContainers | object | nil | Add init containers to the pods. |\n| deployment.lifecycle | object | {} | Lifecycle configuration for the pod. |\n| deployment.livenessProbe | object | See below | Liveness probe. Must specify either one of the following field when enabled: httpGet, exec, tcpSocket, grpc |\n| deployment.livenessProbe.enabled | bool | false | Enable Liveness probe. |\n| deployment.livenessProbe.exec | object | {} | Exec probe. |\n| deployment.livenessProbe.failureThreshold | int | 30 | Number of retries before marking the pod as failed. |\n| deployment.livenessProbe.grpc | object | {} | gRPC probe. |\n| deployment.livenessProbe.httpGet | object | {} | HTTP Get probe. |\n| deployment.livenessProbe.periodSeconds | int | 10 | Time between retries. |\n| deployment.livenessProbe.successThreshold | int | 1 | Number of successful probes before marking the pod as ready. |\n| deployment.livenessProbe.tcpSocket | object | {} | TCP Socket probe. |\n| deployment.livenessProbe.timeoutSeconds | int | 1 | Time before the probe times out. |\n| deployment.minReadySeconds | int | nil | Minimum number of seconds for which a newly created Pod should be ready without any of its containers crashing. |\n| deployment.nodeSelector | object | nil | Select the node where the pods should be scheduled. |\n| deployment.openshiftOAuthProxy.disableTLSArg | bool | false | If disabled –http-address=:8081 will be used instead of –https-address=:8443. It can be useful when an ingress is enabled for the application. |\n| deployment.openshiftOAuthProxy.enabled | bool | false | Enable [OpenShift OAuth Proxy](https://github.com/openshift/oauth-proxy). |\n| deployment.openshiftOAuthProxy.image | string | "openshift/oauth-proxy:latest" | Image for the OAuth Proxy. |\n| deployment.openshiftOAuthProxy.port | int | 8080 | Port on which application is running inside container. |\n| deployment.openshiftOAuthProxy.secretName | string | "openshift-oauth-proxy-tls" | Secret name for the OAuth Proxy TLS certificate. |\n| deployment.podLabels | object | nil | Additional pod labels which are used in Service's Label Selector. |\n| deployment.ports | list | nil | List of ports for the app container. |\n| deployment.priorityClassName | string | "" | Define the priority class for the pod. |\n| deployment.readinessProbe | object | See below | Readiness probe. Must specify either one of the following field when enabled: httpGet, exec, tcpSocket, grpc |\n| deployment.readinessProbe.enabled | bool | false | Enable Readiness probe. |\n| deployment.readinessProbe.exec | object | {} | Exec probe. |\n| deployment.readinessProbe.failureThreshold | int | 30 | Number of retries before marking the pod as failed. |\n| deployment.readinessProbe.grpc | object | {} | gRPC probe. |\n| deployment.readinessProbe.httpGet | object | {} | HTTP Get probe. |\n| deployment.readinessProbe.periodSeconds | int | 10 | Time between retries. |\n| deployment.readinessProbe.successThreshold | int | 1 | Number of successful probes before marking the pod as ready. |\n| deployment.readinessProbe.tcpSocket | object | {} | TCP Socket probe. |\n| deployment.readinessProbe.timeoutSeconds | int | 1 | Time before the probe times out. |\n| deployment.reloadOnChange | bool | true | Reload deployment if attached Secret/ConfigMap changes. |\n| deployment.replicas | int | nil | Number of replicas. |\n| deployment.resources | object | {} | Resource limits and requests for the pod. |\n| deployment.revisionHistoryLimit | int | 2 | Number of ReplicaSet revisions to retain. |\n| deployment.runtimeClassName | string | "" | Set the runtimeClassName for the deployment's pods. |\n| deployment.securityContext | object | nil | Security Context for the pod. |\n| deployment.startupProbe | object | See below | Startup probe. Must specify either one of the following field when enabled: httpGet, exec, tcpSocket, grpc |\n| deployment.startupProbe.enabled | bool | false | Enable Startup probe. |\n| deployment.startupProbe.exec | object | {} | Exec probe. |\n| deployment.startupProbe.failureThreshold | int | 30 | Number of retries before marking the pod as failed. |\n| deployment.startupProbe.grpc | object | {} | gRPC probe. |\n| deployment.startupProbe.httpGet | object | {} | HTTP Get probe. |\n| deployment.startupProbe.periodSeconds | int | 10 | Time between retries. |\n| deployment.startupProbe.successThreshold | int | 1 | Number of successful probes before marking the pod as ready. |\n| deployment.startupProbe.tcpSocket | object | {} | TCP Socket probe. |\n| deployment.startupProbe.timeoutSeconds | int | 1 | Time before the probe times out. |\n| deployment.strategy.type | string | "RollingUpdate" | Type of deployment strategy. |\n| deployment.terminationGracePeriodSeconds | int | nil | Gracefull termination period. |\n| deployment.tolerations | list | nil | Taint tolerations for the pods. |\n| deployment.topologySpreadConstraints | list | nil | Topology spread constraints for the pods. |\n| deployment.volumeMounts | object | nil | Mount path for Volumes. Key is the name of the volume. Value is the volume mount definition. |\n| deployment.volumes | object | nil | Volumes to be added to the pod. Key is the name of the volume. Value is the volume definition. |\n| persistence.accessMode | string | "ReadWriteOnce" | Access mode for volume. |\n| persistence.additionalLabels | object | nil | Additional labels for persistent volume. |\n| persistence.annotations | object | nil | Annotations for persistent volume. |\n| persistence.enabled | bool | false | Enable persistence. |\n| persistence.mountPVC | bool | false | Whether to mount the created PVC to the deployment. |\n| persistence.mountPath | string | "/" | If persistence.mountPVC is enabled, where to mount the volume in the containers. |\n| persistence.name | string | {{ include "application.name" $ }}-data | Name of the PVC. |\n| persistence.storageClass | string | nil | Storage class for volume. If defined, use that value If set to \"-\" or \"\", disable dynamic provisioning If undefined or set to null (the default), no storageClass spec is set, choosing the default provisioner. |\n| persistence.storageSize | string | "8Gi" | Size of the persistent volume. |\n| persistence.volumeMode | string | "" | PVC Volume Mode. |\n| persistence.volumeName | string | "" | Name of the volume. |\n\n### EndpointMonitor Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| endpointMonitor.additionalLabels | object | nil | Additional labels for EndpointMonitor. |\n| endpointMonitor.annotations | object | nil | Annotations for EndpointMonitor. |\n| endpointMonitor.enabled | bool | false | Deploy an [IMC EndpointMonitor](https://github.com/stakater/IngressMonitorController) resource. |\n\n### ExternalSecret Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| externalSecret.additionalLabels | object | nil | Additional labels for ExternalSecret. |\n| externalSecret.annotations | object | nil | Annotations for ExternalSecret. |\n| externalSecret.enabled | bool | false | Deploy [ExternalSecret](https://external-secrets.io/latest/) resources. |\n| externalSecret.files | object | nil | List of ExternalSecret entries. Key will be used as a name suffix for the ExternalSecret. There a two allowed modes: - data: Data defines the connection between the Kubernetes Secret keys and the Provider data - dataFrom: Used to fetch all properties from the Provider key |\n| externalSecret.refreshInterval | string | "1m" | RefreshInterval is the amount of time before the values are read again from the SecretStore provider. |\n| externalSecret.secretStore | object | {"kind":"SecretStore","name":"tenant-vault-secret-store"} | Default values for the SecretStore. Can be overriden per ExternalSecret in the externalSecret.files object. |\n| externalSecret.secretStore.kind | string | "SecretStore" | Kind of the SecretStore being refered to. |\n| externalSecret.secretStore.name | string | "tenant-vault-secret-store" | Name of the SecretStore to use. |\n\n### ForecastleApp Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| forecastle.additionalLabels | object | nil | Additional labels for ForecastleApp. |\n| forecastle.displayName | string | "" | Application Name. Required if forecastle.enabled is set to true. |\n| forecastle.enabled | bool | false | Deploy a [ForecastleApp](https://github.com/stakater/Forecastle) resource. |\n| forecastle.group | string | {{ .Release.Namespace }} | Application Group. |\n| forecastle.icon | string | "https://raw.githubusercontent.com/stakater/ForecastleIcons/master/stakater-big.png" | Icon URL. |\n| forecastle.networkRestricted | bool | false | Is application network restricted?. |\n| forecastle.properties | object | nil | Custom properties. |\n\n### GrafanaDashboard Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| grafanaDashboard.additionalLabels | object | nil | Additional labels for GrafanaDashboard. |\n| grafanaDashboard.annotations | object | nil | Annotations for GrafanaDashboard. |\n| grafanaDashboard.contents | object | nil | List of GrafanaDashboard entries. Key will be used as a name suffix for the GrafanaDashboard. Value is the GrafanaDashboard content. According to GrafanaDashboard behavior, url field takes precedence on the json field. |\n| grafanaDashboard.enabled | bool | false | Deploy [GrafanaDashboard](https://github.com/grafana/grafana-operator) resources. |\n\n### HTTPRoute Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| httpRoute.additionalLabels | object | {} | Additional labels for HTTPRoute. |\n| httpRoute.annotations | object | {} | Annotations for HTTPRoute. |\n| httpRoute.enabled | bool | false | Enable HTTPRoute (Gateway API). |\n| httpRoute.gatewayNamespace | string | "" | Namespace of the Gateway to attach this HTTPRoute to. If not set, the HTTPRoute will be attached to the Gateway in the same namespace as the HTTPRoute. |\n| httpRoute.hostnames | tpl/list | nil | Hostnames for the HTTPRoute. |\n| httpRoute.parentRefs | tpl/list | nil | Parent references for the HTTPRoute. |\n| httpRoute.rules | tpl/list | [{"backendRefs":[{"name":"{{ include \"application.name\" $ }}","port":"{{ (first $.Values.service.ports).port |
int }}"}],"matches":[{"path":{"type":"PathPrefix","value":"/"}}]}] | Rules for HTTPRoute. |\n| httpRoute.useDefaultGateways | string | nil | The default Gateway scope to use for this Route. If unset (the default) or set to None, the Route will not be attached to any default Gateway; if set, it will be attached to any default Gateway supporting the named scope, subject to the usual rules about which Routes a Gateway is allowed to claim. |\n\n### Ingress Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| ingress.additionalLabels | object | nil | Additional labels for ingress. |\n| ingress.annotations | object | nil | Annotations for ingress. |\n| ingress.enabled | bool | false | Enable Ingress. |\n| ingress.hosts[0].host | tpl/string | "chart-example.local" | Hostname. |\n| ingress.hosts[0].paths[0].path | string | "/" | Path. |\n| ingress.hosts[0].paths[0].pathType | string | ImplementationSpecific | Path type. |\n| ingress.hosts[0].paths[0].serviceName | string | {{ include "application.name" $ }} | Service name. |\n| ingress.hosts[0].paths[0].servicePort | string | http | Service port. |\n| ingress.ingressClassName | string | "" | Name of the ingress class. |\n| ingress.tls | list | nil | TLS configuration for ingress. Secrets must exist in the namespace. You may also configure Certificate resource to generate the secret. |\n\n### Job Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| job.enabled | bool | false | Deploy Job resources. |\n| job.jobs | object | nil | Map of Job resources. Key will be used as a name suffix for the Job. Value is the Job configuration. See values for more details. |\n\n### NetworkPolicy Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| networkPolicy.additionalLabels | object | nil | Additional labels for Network Policy. |\n| networkPolicy.annotations | object | nil | Annotations for Network Policy. |\n| networkPolicy.egress | list | nil | Egress rules for Network Policy. |\n| networkPolicy.enabled | bool | false | Enable Network Policy. |\n| networkPolicy.ingress | list | nil | Ingress rules for Network Policy. |\n\n### PodDisruptionBudget Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| pdb.enabled | bool | false | Enable Pod Disruption Budget. |\n| pdb.maxUnavailable | int | nil | Maximum number of unavailable pods during voluntary disruptions. |\n| pdb.minAvailable | int | 1 | Minimum number of pods that must be available after eviction. |\n\n### PrometheusRule Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| prometheusRule.additionalLabels | object | nil | Additional labels for PrometheusRule. |\n| prometheusRule.enabled | bool | false | Deploy a PrometheusRule (Prometheus Operator) resource. |\n| prometheusRule.groups | list | [] | Groups with alerting rules. Read more about it at [https://docs.openshift.com/container-platform/4.7/rest_api/monitoring_apis/prometheusrule-monitoring-coreos-com-v1.html](OpenShift's PrometheusRule documentation). |\n\n### RBAC Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| rbac.enabled | bool | true | Enable RBAC. |\n| rbac.roles | list | nil | Namespaced Roles. |\n| rbac.serviceAccount.additionalLabels | object | nil | Additional labels for Service Account. |\n| rbac.serviceAccount.annotations | object | nil | Annotations for Service Account. |\n| rbac.serviceAccount.enabled | bool | false | Deploy Service Account. |\n| rbac.serviceAccount.name | string | {{ include "application.name" $ }} | Service Account Name. |\n\n### Route Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| route.additionalLabels | object | nil | Additional labels for Route. |\n| route.alternateBackends | list | nil | Alternate backend with it's weight. |\n| route.annotations | object | nil | Annotations for Route. |\n| route.enabled | bool | false | Deploy a Route (OpenShift) resource. |\n| route.host | string | nil | Explicit host. If no host is added then openshift inserts the default hostname. |\n| route.path | string | nil | Path. |\n| route.port | object | {"targetPort":"http"} | Service port. |\n| route.tls.insecureEdgeTerminationPolicy | string | "Redirect" | TLS insecure termination policy. |\n| route.tls.termination | string | "edge" | TLS termination strategy. |\n| route.to.weight | int | 100 | Service weight. |\n| route.wildcardPolicy | string | "None" | Wildcard policy. |\n\n### SealedSecret Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| sealedSecret.additionalLabels | object | nil | Additional labels for SealedSecret. |\n| sealedSecret.annotations | object | nil | Annotations for SealedSecret. |\n| sealedSecret.enabled | bool | false | Deploy [SealedSecret](https://github.com/bitnami-labs/sealed-secrets) resources. |\n| sealedSecret.files | object | nil | List of SealedSecret entries. Key will be used as a name suffix for the SealedSecret. Value is the SealedSecret content. |\n\n### Secret Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| secret.additionalLabels | object | nil | Additional labels for Secret. |\n| secret.annotations | object | nil | Annotations for Secret. |\n| secret.enabled | bool | false | Deploy additional Secret resources. |\n| secret.files | object | nil | List of Secrets entries. Key will be used as a name suffix for the Secret. There a three allowed modes: - data: Data is base64 encoded by the chart - encodedData: Use raw values (already base64ed) inside the data map - stringData: Use raw values inside the stringData map |\n\n### SecretProviderClass Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| secretProviderClass.enabled | bool | false | Deploy a [Secrets Store CSI Driver SecretProviderClass](https://secrets-store-csi-driver.sigs.k8s.io/) resource. |\n| secretProviderClass.name | string | "" | Name of the SecretProviderClass. Required if secretProviderClass.enabled is set to true. |\n| secretProviderClass.objects | list | nil | Objects definitions. |\n| secretProviderClass.provider | string | "" | Name of the provider. Required if secretProviderClass.enabled is set to true. |\n| secretProviderClass.roleName | tpl/string | "" | Vault Role Name. Required if secretProviderClass.provider is set to vault. |\n| secretProviderClass.secretObjects | list | nil | Objects mapping. |\n| secretProviderClass.vaultAddress | string | "" | Vault Address. Required if secretProviderClass.provider is set to vault. |\n\n### Service Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| service.additionalLabels | object | nil | Additional labels for service. |\n| service.annotations | object | nil | Annotations for service. |\n| service.clusterIP | string | nil | Fixed IP for a ClusterIP service. Set to None for an headless service |\n| service.enabled | bool | true | Enable Service. |\n| service.loadBalancerClass | string | nil | LoadBalancer class name for LoadBalancer type services. |\n| service.ports | list | [{"name":"http","port":8080,"protocol":"TCP","targetPort":8080}] | Ports for applications service. |\n| service.type | string | "ClusterIP" | Type of service. |\n\n### ServiceMonitor Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| serviceMonitor.additionalLabels | object | nil | Additional labels for ServiceMonitor. |\n| serviceMonitor.annotations | object | nil | Annotations for ServiceMonitor. |\n| serviceMonitor.enabled | bool | false | Deploy a ServiceMonitor (Prometheus Operator) resource. |\n| serviceMonitor.endpoints | list | [{"interval":"5s","path":"/actuator/prometheus","port":"http"}] | Service endpoints from which prometheus will scrape data. |\n\n### VPA - Vertical Pod Autoscaler Parameters\n\n| Key | Type | Default | Description |\n|-----|------|---------|-------------|\n| vpa.additionalLabels | object | nil | Additional labels for VPA. |\n| vpa.annotations | object | nil | Annotations for VPA. |\n| vpa.containerPolicies | list | [] | Container policies for individual containers. |\n| vpa.enabled | bool | false | Enable Vertical Pod Autoscaling. |\n| vpa.updatePolicy | object | {"updateMode":"Auto"} | Update policy. |\n\n----------------------------------------------\nAutogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)\n", "dir"=>"/charts/application/", "name"=>"README.md", "path"=>"charts/application/README.md", "url"=>"/charts/application/"}"}],"matches":[{"path":{"type":"PathPrefix","value":"/"}}]}] |
Rules for HTTPRoute. |
| httpRoute.useDefaultGateways | string | nil |
The default Gateway scope to use for this Route. If unset (the default) or set to None, the Route will not be attached to any default Gateway; if set, it will be attached to any default Gateway supporting the named scope, subject to the usual rules about which Routes a Gateway is allowed to claim. |
Ingress Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| ingress.additionalLabels | object | nil |
Additional labels for ingress. |
| ingress.annotations | object | nil |
Annotations for ingress. |
| ingress.enabled | bool | false |
Enable Ingress. |
| ingress.hosts[0].host | tpl/string | "chart-example.local" |
Hostname. |
| ingress.hosts[0].paths[0].path | string | "/" |
Path. |
| ingress.hosts[0].paths[0].pathType | string | ImplementationSpecific |
Path type. |
| ingress.hosts[0].paths[0].serviceName | string | `` | Service name. |
| ingress.hosts[0].paths[0].servicePort | string | http |
Service port. |
| ingress.ingressClassName | string | "" |
Name of the ingress class. |
| ingress.tls | list | nil |
TLS configuration for ingress. Secrets must exist in the namespace. You may also configure Certificate resource to generate the secret. |
Job Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| job.enabled | bool | false |
Deploy Job resources. |
| job.jobs | object | nil |
Map of Job resources. Key will be used as a name suffix for the Job. Value is the Job configuration. See values for more details. |
NetworkPolicy Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| networkPolicy.additionalLabels | object | nil |
Additional labels for Network Policy. |
| networkPolicy.annotations | object | nil |
Annotations for Network Policy. |
| networkPolicy.egress | list | nil |
Egress rules for Network Policy. |
| networkPolicy.enabled | bool | false |
Enable Network Policy. |
| networkPolicy.ingress | list | nil |
Ingress rules for Network Policy. |
PodDisruptionBudget Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| pdb.enabled | bool | false |
Enable Pod Disruption Budget. |
| pdb.maxUnavailable | int | nil |
Maximum number of unavailable pods during voluntary disruptions. |
| pdb.minAvailable | int | 1 |
Minimum number of pods that must be available after eviction. |
PrometheusRule Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| prometheusRule.additionalLabels | object | nil |
Additional labels for PrometheusRule. |
| prometheusRule.enabled | bool | false |
Deploy a PrometheusRule (Prometheus Operator) resource. |
| prometheusRule.groups | list | [] |
Groups with alerting rules. Read more about it at https://docs.openshift.com/container-platform/4.7/rest_api/monitoring_apis/prometheusrule-monitoring-coreos-com-v1.html. |
RBAC Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| rbac.enabled | bool | true |
Enable RBAC. |
| rbac.roles | list | nil |
Namespaced Roles. |
| rbac.serviceAccount.additionalLabels | object | nil |
Additional labels for Service Account. |
| rbac.serviceAccount.annotations | object | nil |
Annotations for Service Account. |
| rbac.serviceAccount.enabled | bool | false |
Deploy Service Account. |
| rbac.serviceAccount.name | string | `` | Service Account Name. |
Route Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| route.additionalLabels | object | nil |
Additional labels for Route. |
| route.alternateBackends | list | nil |
Alternate backend with it’s weight. |
| route.annotations | object | nil |
Annotations for Route. |
| route.enabled | bool | false |
Deploy a Route (OpenShift) resource. |
| route.host | string | nil |
Explicit host. If no host is added then openshift inserts the default hostname. |
| route.path | string | nil |
Path. |
| route.port | object | {"targetPort":"http"} |
Service port. |
| route.tls.insecureEdgeTerminationPolicy | string | "Redirect" |
TLS insecure termination policy. |
| route.tls.termination | string | "edge" |
TLS termination strategy. |
| route.to.weight | int | 100 |
Service weight. |
| route.wildcardPolicy | string | "None" |
Wildcard policy. |
SealedSecret Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| sealedSecret.additionalLabels | object | nil |
Additional labels for SealedSecret. |
| sealedSecret.annotations | object | nil |
Annotations for SealedSecret. |
| sealedSecret.enabled | bool | false |
Deploy SealedSecret resources. |
| sealedSecret.files | object | nil |
List of SealedSecret entries. Key will be used as a name suffix for the SealedSecret. Value is the SealedSecret content. |
Secret Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| secret.additionalLabels | object | nil |
Additional labels for Secret. |
| secret.annotations | object | nil |
Annotations for Secret. |
| secret.enabled | bool | false |
Deploy additional Secret resources. |
| secret.files | object | nil |
List of Secrets entries. Key will be used as a name suffix for the Secret. There a three allowed modes: - data: Data is base64 encoded by the chart - encodedData: Use raw values (already base64ed) inside the data map - stringData: Use raw values inside the stringData map |
SecretProviderClass Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| secretProviderClass.enabled | bool | false |
Deploy a Secrets Store CSI Driver SecretProviderClass resource. |
| secretProviderClass.name | string | "" |
Name of the SecretProviderClass. Required if secretProviderClass.enabled is set to true. |
| secretProviderClass.objects | list | nil |
Objects definitions. |
| secretProviderClass.provider | string | "" |
Name of the provider. Required if secretProviderClass.enabled is set to true. |
| secretProviderClass.roleName | tpl/string | "" |
Vault Role Name. Required if secretProviderClass.provider is set to vault. |
| secretProviderClass.secretObjects | list | nil |
Objects mapping. |
| secretProviderClass.vaultAddress | string | "" |
Vault Address. Required if secretProviderClass.provider is set to vault. |
Service Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| service.additionalLabels | object | nil |
Additional labels for service. |
| service.annotations | object | nil |
Annotations for service. |
| service.clusterIP | string | nil |
Fixed IP for a ClusterIP service. Set to None for an headless service |
| service.enabled | bool | true |
Enable Service. |
| service.loadBalancerClass | string | nil |
LoadBalancer class name for LoadBalancer type services. |
| service.ports | list | [{"name":"http","port":8080,"protocol":"TCP","targetPort":8080}] |
Ports for applications service. |
| service.type | string | "ClusterIP" |
Type of service. |
ServiceMonitor Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| serviceMonitor.additionalLabels | object | nil |
Additional labels for ServiceMonitor. |
| serviceMonitor.annotations | object | nil |
Annotations for ServiceMonitor. |
| serviceMonitor.enabled | bool | false |
Deploy a ServiceMonitor (Prometheus Operator) resource. |
| serviceMonitor.endpoints | list | [{"interval":"5s","path":"/actuator/prometheus","port":"http"}] |
Service endpoints from which prometheus will scrape data. |
VPA - Vertical Pod Autoscaler Parameters
| Key | Type | Default | Description |
|---|---|---|---|
| vpa.additionalLabels | object | nil |
Additional labels for VPA. |
| vpa.annotations | object | nil |
Annotations for VPA. |
| vpa.containerPolicies | list | [] |
Container policies for individual containers. |
| vpa.enabled | bool | false |
Enable Vertical Pod Autoscaling. |
| vpa.updatePolicy | object | {"updateMode":"Auto"} |
Update policy. |
Autogenerated from chart metadata using helm-docs v1.14.2