cloudfoundry/stratos

# Tag for images - do not edit
consoleVersion: latest
dockerRegistrySecret: regsecret

# Provide Proxy settings if required
#httpProxy: proxy.corp.net
#httpsProxy: proxy.corp.net
#noProxy: localhost
#ftpProxy: proxy.corp.net
#socksProxy: sock-proxy.corp.net
imagePullPolicy: Always

console:
  cookieDomain:
  # externalIP deprecated - use console.service.externalIPs
# externalIP: 127.0.0.1
  backendLogLevel: info
  ssoLogin: false
  ssoOptions:
  # Session Store Secret
  sessionStoreSecret:
  # Stratos Services
  service:
    annotations: {}
    extraLabels: {}
    externalIPs: []
    loadBalancerIP:
    loadBalancerSourceRanges: []
    servicePort: 443
    # nodePort: 30000
    type: ClusterIP
    externalName:
    ingress:
      ## If true, Ingress will be created
      enabled: false

      ## Additional annotations
      annotations: {}

      ## Additional labels
      extraLabels: {}

      ## Host for the ingress
      # Defaults to console.[env.Domain] if env.Domain is set and host is not
      host:

      # Name of secret containing TLS certificate
      secretName:

      # crt and key for TLS Certificate (this chart will create the secret based on these)
      tls:
        crt:
        key:

    http:
      enabled: false
      servicePort: 80
      # nodePort: 30001


  # Name of config map that provides the template files for user invitation emails
  templatesConfigMapName:

  # Email subject of the user invitation message 
  userInviteSubject: ~

  # Enable/disable Tech Preview
  techPreview: false

  # Enable/disable API key-based access to Stratos API
  apiKeysEnabled: admin_only

  # Enable/disable user endpoints
  userEndpointsEnabled: disabled

  ui:
    # Override the default maximum number of entities that a configured list can fetch. When a list meets this amount additional pages are not fetched 
    listMaxSize:
    # If the maximum list size is met give the user the option to fetch all results regardless
    listAllowLoadMaxed: false

  # Use local admin user instead of UAA - set to a password to enable
  localAdminPassword: ~

  # Secret containing certificate for the Console
  tlsSecretName:

  # URL of a Cloud Foundry to use for authentication and to auto-register on login
  # Deprecated
  autoRegisterCF: ~

  # Custom annotations to apply to Stateful sets
  statefulSetAnnotations: {}

  # Extra labels to apply to Stateful sets
  statefulSetExtraLabels: {}

  # Custom annotations to apply to Deployments
  deploymentAnnotations: {}

  # Extra labels to apply to Deployments
  deploymentExtraLabels: {}

  # Custom annotations to apply to Jobs
  jobAnnotations: {}

  # Extra labels to apply to Jobs
  jobExtraLabels: {}

  # Custom annotations to apply to Pods
  podAnnotations: {}

  # Extra labels to apply to Pods
  podExtraLabels: {}

  # Whether PodSecurityPolicy is enabled
  pspEnabled: false

  # Optional name of a PodSecurityPolicy to use - if not specified, a default will be created
  pspName:  

  # Custom annotations to apply to Pod Security Policies
  pspAnnotations: {}  

  # Extra labels to apply to Pod Security Policies
  pspExtraLabels: {}  

  # Node Selector for console Pod
  nodeSelector: {}

  # Download link when installing the Kubernetes Dashboard in a targetted Kube Endpoint
  kubeDashboardImage:

  # Enable Artifact Hub
  artifactHubEnabled: true

  # Size for analysis reports volume
  reportsVolumeSize: 1Gi

  # Do not use a persistent volume for analysis reports
  reportsVolumeDisabled: false

  # ssl protocols and ciphers overrides - leave empty for defaults
  sslProtocols:
  sslCiphers:
  
  # Number of replicas to deploy
  replicaCount: 1

images:
  console: stratos-console
  proxy: stratos-jetstream
  mariadb: stratos-mariadb
  configInit: stratos-config-init
  analyzers: stratos-analyzers

# Specify which storage class should be used for PVCs
#storageClass: default

# Database configuration
mariadb:
  # Whether or not to use an external database in place of the in-build MariaDB
  external: false
  database: console
  user: console
  # Leave password blank to auto-generate
  userPassword:
  # Leave password blank to auto-generate (not needed for external database)
  rootPassword:
  # DB Host (when using an external database)
  host:
  # Override port (default 3306) (when using an external database)
  port:
  # TLS Mode - can be true, false, skip-verify or preferred
  tls:
  # Override DB type - default is mysql
  type:

  resources:
    requests:
      memory: 256Mi
      cpu: 250m
  persistence:
    enabled: true
    accessMode: ReadWriteOnce
    size: 1Gi
    storageClass:
  # Node selector for the database pod
  nodeSelector: {}

configInit:
  # Node selector for the config init pod
  nodeSelector: {}
  
# UAA configuration
uaa:
  # UAA endpoint (e.g. https://uaa.domain:2793)
  endpoint: ~
  # Client to use when authenticating (default is 'cf')
  consoleClient: 
  # Client Secret to use when authenticating (default is '')
  consoleClientSecret: 
  # Scope that determines if a user is a Stratos admin
  consoleAdminIdentifier:
  # Skip SSL validation when communicating with the UAA
  skipSSLValidation: false

# SCF values compatability 
env:
  DOMAIN:
  UAA_HOST: 
  UAA_PORT: 2793
  # UAA Zone (namespace cf is deployed to when deployed to Kubernetes)
  UAA_ZONE: scf

  # SMTP Settings for Email Sending (User Invites)
  # If true, authenticate against the SMTP server using AUTH command.
  SMTP_AUTH: "false"

  # SMTP from address
  SMTP_FROM_ADDRESS: ~

  # SMTP server username
  SMTP_USER: ~

  # SMTP server password
  SMTP_PASSWORD: ~

  # SMTP server host address
  SMTP_HOST: ~

  # SMTP server port
  SMTP_PORT: "25"

kube:
  # Whether RBAC is enabled in the Kubernetes cluster
  auth: "rbac"
  external_console_https_port: 8443
  storage_class:
    persistent:
  organization: splatform
  registry:
    hostname: docker.io
    username:
    password:
    email: default

# ================================================================================
# Values below are for internal use only - do not use
# ================================================================================

autoCleanup: false

services:
  loadbalanced: false

# useLb is deprecated - use console.service.type
useLb: false