values.yaml

##
## Default values for tsuru.
##
replicas:
  router: 1
image:
  repository: tsuru/api
  tag: latest
  pullPolicy: Always
registry:
  enabled: false
  auth:
    enabled: false
gandalf:
  enabled: false
service:
  name: tsuru-api
  type: ClusterIP
  port: 8080
  externalPort: 8080
ingress:
  enabled: true
  # Default tsuru domain name to create vhosts. APPPNAME.DOMAIN
  domain: local
  # Used to create an Ingress record.
  hosts:
    - tsuru
  annotations:
    kubernetes.io/ingress.class: nginx
    kubernetes.io/tls-acme: "true"
    nginx.ingress.kubernetes.io/proxy-body-size: 2000m
  tls:
    # Secrets must be manually created in the namespace.
    - secretName: tsuru-tls
      hosts:
        - tsuru.prod.us.cloud.domain.com
resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #  cpu: 100m
  #  memory: 128Mi
  # requests:
  #  cpu: 100m
  #  memory: 128Mi
rbac:
  create: true


##
## MongoDB Confinguration Values
##
mongodb-replicaset:
  replicaSetName: rs0
  replicas: 3
  port: 27017

  auth:
    enabled: false
    # adminUser: username
    # adminPassword: password
    # key: keycontent
    # existingKeySecret:
    # existingAdminSecret:

  # Specs for the Docker image for the init container that establishes the replica set
  installImage:
    name: k8s.gcr.io/mongodb-install
    tag: 0.6
    pullPolicy: IfNotPresent

  # Specs for the MongoDB image
  image:
    name: mongo
    tag: 3.6
    pullPolicy: IfNotPresent

  # Annotations to be added to MongoDB pods
  podAnnotations: {}

  podAntiAffinity: "soft"

  resources: {}
  # limits:
  #   cpu: 500m
  #   memory: 512Mi
  # requests:
  #   cpu: 100m
  #   memory: 256Mi

  ## Node selector
  ## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
  nodeSelector: {}

  persistentVolume:
    enabled: true
    ## mongodb-replicaset data Persistent Volume Storage Class
    ## If defined, storageClassName: <storageClass>
    ## If set to "-", storageClassName: "", which disables dynamic provisioning
    ## If undefined (the default) or set to null, no storageClassName spec is
    ##   set, choosing the default provisioner.  (gp2 on AWS, standard on
    ##   GKE, AWS & OpenStack)
    ##
    # storageClass: "-"
    accessModes:
      - ReadWriteOnce
    size: 5Gi
    annotations: {}

  # Annotations to be added to the service
  serviceAnnotations: {}

  tls:
    # Enable or disable MongoDB TLS support
    enabled: false
    # Please generate your own TLS CA by generating it via:
    # $ openssl genrsa -out ca.key 2048
    # $ openssl req -x509 -new -nodes -key ca.key -days 10000 -out ca.crt -subj "/CN=mydomain.com"
    # After that you can base64 encode it and paste it here:
    # $ cat ca.key | base64 -w0
    # cacert:
    # cakey:

  # Entries for the MongoDB config file
  configmap:


##
## Docker registry configuration values
##
docker-registry:
  # Default values for docker-registry.
  # This is a YAML-formatted file.
  # Declare variables to be passed into your templates.
  replicaCount: 1
  image:
    repository: registry
    tag: 2.6.2
    pullPolicy: IfNotPresent
  service:
    name: registry
    type: ClusterIP
    port: 5000
  ingress:
    enabled: true
    # Used to create an Ingress record.
    hosts:
      - registry.prod.us.cloud.domain.com
    annotations:
      kubernetes.io/ingress.class: nginx
      kubernetes.io/tls-acme: "true"
      nginx.ingress.kubernetes.io/proxy-body-size: 2000m
    tls:
      # Secrets must be manually created in the namespace.
      - secretName: registry-tls
        hosts:
          - registry.prod.us.cloud.domain.com
  resources: {}
    # We usually recommend not to specify default resources and to leave this as a conscious
    # choice for the user. This also increases chances charts run on environments with little
    # resources, such as Minikube. If you do want to specify resources, uncomment the following
    # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    # limits:
    #  cpu: 100m
    #  memory: 128Mi
    # requests:
    #  cpu: 100m
    #  memory: 128Mi
  persistence:
    accessMode: 'ReadWriteOnce'
    enabled: false
    size: 10Gi
    # storageClass: '-'

  # set the type of filesystem to use
  storage: filesystem

  # Set this to name of secret for tls certs
  # tlsSecretName: registry.docker.example.com
  secrets:
    haSharedSecret: ""
  # Secrets for S3 access and secret keys
  #   s3:
  #     accessKey: ""
  #     secretKey: ""
  configData:
    version: 0.1
    log:
      fields:
        service: registry
    storage:
      cache:
        blobdescriptor: inmemory
    http:
      addr: :5000
      headers:
        X-Content-Type-Options: [nosniff]
    health:
      storagedriver:
        enabled: true
        interval: 10s
  threshold: 3

## nginx configuration
## Ref: https://github.com/kubernetes/ingress/blob/master/controllers/nginx/configuration.md
##
nginx-ingress:
  controller:
    name: controller
    image:
      repository: quay.io/kubernetes-ingress-controller/nginx-ingress-controller
      tag: "0.14.0"
      pullPolicy: IfNotPresent

    config: {}

    # Required for use with CNI based kubernetes installations (such as ones set up by kubeadm),
    # since CNI and hostport don't mix yet. Can be deprecated once https://github.com/kubernetes/kubernetes/issues/23920
    # is merged
    hostNetwork: false

    ## Required only if defaultBackend.enabled = false
    ## Must be <namespace>/<service_name>
    ##
    defaultBackendService: ""

    ## Optionally specify the secret name for default SSL certificate
    ## Must be <namespace>/<secret_name>
    ##
    defaultSSLCertificate: ""

    ## Election ID to use for status update
    ##
    electionID: ingress-controller-leader

    ## Name of the ingress class to route through this controller
    ##
    ingressClass: nginx

    # labels to add to the pod container metadata
    podLabels: {}
    #  key: value

    ## Allows customization of the external service
    ## the ingress will be bound to via DNS
    publishService:
      enabled: true
      ## Allows overriding of the publish service to bind to
      ## Must be <namespace>/<service_name>
      ##
      pathOverride: ""

    ## Limit the scope of the controller
    ##
    scope:
      enabled: false
      namespace: ""   # defaults to .Release.Namespace

    extraArgs: {}

    ## Additional environment variables to set
    ##
    extraEnvs: {}

    ## DaemonSet or Deployment
    ##
    kind: Deployment

    # The update strategy to apply to the Deployment or DaemonSet
    ##
    updateStrategy: {}
    #  rollingUpdate:
    #    maxUnavailable: 1
    #  type: RollingUpdate

    ## Node tolerations for server scheduling to nodes with taints
    ## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
    ##
    tolerations: []
    #  - key: "key"
    #    operator: "Equal|Exists"
    #    value: "value"
    #    effect: "NoSchedule|PreferNoSchedule|NoExecute(1.6 only)"

    ## Node labels for controller pod assignment
    ## Ref: https://kubernetes.io/docs/user-guide/node-selection/
    ##
    nodeSelector: {}

    ## Annotations to be added to controller pods
    ##
    podAnnotations: {}

    replicaCount: 1

    resources: {}
    #  limits:
    #    cpu: 100m
    #    memory: 64Mi
    #  requests:
    #    cpu: 100m
    #    memory: 64Mi

    autoscaling:
      enabled: false
    #  minReplicas: 1
    #  maxReplicas: 11
    #  targetAverageUtilization: 50

    ## Override NGINX template
    customTemplate:
      configMapName: ""
      configMapKey: ""

    service:
      annotations: {}
      clusterIP: ""

      ## List of IP addresses at which the controller services are available
      ## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
      ##
      externalIPs: []

      loadBalancerIP: ""
      loadBalancerSourceRanges: []

      ## Set external traffic policy to: "Local" to preserve source IP on
      ## providers supporting it
      ## Ref: https://kubernetes.io/docs/tutorials/services/source-ip/#source-ip-for-services-with-typeloadbalancer
      externalTrafficPolicy: ""

      healthCheckNodePort: 0

      targetPorts:
        http: 80
        https: 443

      type: LoadBalancer

      # type: NodePort
      nodePorts:
        http: 32080
        https: 32443
      # nodePorts:
      #   http: ""
      #   https: ""

    stats:
      enabled: true

      service:
        annotations: {}
        clusterIP: ""

        ## List of IP addresses at which the stats service is available
        ## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
        ##
        externalIPs: []

        loadBalancerIP: ""
        loadBalancerSourceRanges: []
        servicePort: 18080
        type: ClusterIP

    metrics:
      enabled: true

      service:
        annotations:
          prometheus.io/scrape: "true"
          prometheus.io/port: "10254"

    lifecycle: {}

  ## Rollback limit
  ##
  revisionHistoryLimit: 10

  ## Default 404 backend
  ##
  defaultBackend:

    ## If false, controller.defaultBackendService must be provided
    ##
    enabled: true

    name: default-backend
    image:
      repository: gcr.io/google_containers/defaultbackend
      tag: "1.3"
      pullPolicy: IfNotPresent

    extraArgs: {}

    ## Node tolerations for server scheduling to nodes with taints
    ## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
    ##
    tolerations: []
    #  - key: "key"
    #    operator: "Equal|Exists"
    #    value: "value"
    #    effect: "NoSchedule|PreferNoSchedule|NoExecute(1.6 only)"

    # labels to add to the pod container metadata
    podLabels: {}
    #  key: value

    ## Node labels for default backend pod assignment
    ## Ref: https://kubernetes.io/docs/user-guide/node-selection/
    ##
    nodeSelector: {}

    ## Annotations to be added to default backend pods
    ##
    podAnnotations: {}

    replicaCount: 1

    resources: {}
    # limits:
    #   cpu: 10m
    #   memory: 20Mi
    # requests:
    #   cpu: 10m
    #   memory: 20Mi

    service:
      annotations: {}
      clusterIP: ""

      ## List of IP addresses at which the default backend service is available
      ## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
      ##
      externalIPs: []

      loadBalancerIP: ""
      loadBalancerSourceRanges: []
      servicePort: 80
      type: ClusterIP

  ## Enable RBAC as per https://github.com/kubernetes/ingress/tree/master/examples/rbac/nginx and https://github.com/kubernetes/ingress/issues/266
  rbac:
    create: true
    serviceAccountName: default

  ## If controller.stats.enabled = true, Prometheus metrics will be exported
  ## Ref: https://github.com/hnlq715/nginx-vts-exporter
  ##
  statsExporter:
    name: stats-exporter
    image:
      repository: sophos/nginx-vts-exporter
      tag: v0.8.3
      pullPolicy: IfNotPresent

    endpoint: /metrics
    extraArgs: {}
    metricsNamespace: nginx
    statusPage: http://localhost:18080/nginx_status/format/json

    resources: {}
    # limits:
    #   cpu: 10m
    #   memory: 20Mi
    # requests:
    #   cpu: 10m
    #   memory: 20Mi

    service:
      annotations: {}
      clusterIP: ""

      ## List of IP addresses at which the stats-exporter service is available
      ## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
      ##
      externalIPs: []

      loadBalancerIP: ""
      loadBalancerSourceRanges: []
      servicePort: 9913
      type: ClusterIP

  # TCP service key:value pairs
  # Ref: https://github.com/kubernetes/contrib/tree/master/ingress/controllers/nginx/examples/tcp
  ##
  tcp:
  #  5000: "default/prod-us-docker-registry:5000"
  #  8080: "default/example-tcp-svc:9000"

  # UDP service key:value pairs
  # Ref: https://github.com/kubernetes/contrib/tree/master/ingress/controllers/nginx/examples/udp
  ##
  udp: {}
  #  53: "kube-system/kube-dns:53"

cert-manager:
  replicaCount: 1
  createCustomResource: true
  certificateResourceShortNames: ["cert", "certs"]
  rbac:
    create: true
  serviceAccount:
    create: true
  ingressShim:
    defaultIssuerName: letsencrypt-prod
    defaultIssuerKind: ClusterIssuer
    enabled: true
    extraArgs:
      # Use these flags to specify the default Issuer/ClusterIssuer
      # (IMPORTANT: You need to create this Issuer/ClusterIssuer resource yourself)
      - --default-issuer-name=letsencrypt-prod
      - --default-issuer-kind=ClusterIssuer