hub/charts/artifact-hub/values.yaml

429 lines
14 KiB
YAML

# Artifact Hub Chart default configuration values
imagePullSecrets: []
imageTag: ""
nameOverride: ""
pullPolicy: IfNotPresent
nodeSelector: {}
# Enable dynamic resource name prefix
#
# Enabling the dynamic resource name prefix ensures that the resources are named dynamically based on the Helm
# installation's name. This allows multiple installations of this chart in a single Kubernetes namespace. The prefix
# can be defined by using the `fullnameOverride`.
dynamicResourceNamePrefixEnabled: false
# Overwrites the installation's fullname generation (used for the dynamic resource name prefix)
fullnameOverride: ""
# Enable restricted HTTP client
#
# Artifact Hub makes external HTTP requests for several purposes, like getting repositories metadata, dispatching
# webhooks, etc. When this option is enabled, requests to the private network space as well as to some other special
# addresses won't be allowed.
restrictedHTTPClient: false
# Logging configuration
log:
# Log level
# Options: "trace", "debug", "info", "warn", "error", "fatal", "panic"
level: info
# Enable pretty logging
pretty: false
# Database configuration
db:
host: ""
port: "5432"
database: hub
user: postgres
password: postgres
sslmode: prefer
# Email configuration
email:
# From name used in emails
fromName: ""
# From address used in emails. This field is required if you want to enable email sending in Artifact Hub
from: ""
# Reply-to address used in emails
replyTo: ""
# SMTP server configuration
smtp:
# Authentication mechanism
# Options: "login", "plain"
auth: plain
# SMTP host. This field is required if you want to enable email sending in Artifact Hub
host: ""
# SMTP port. This field is required if you want to enable email sending in Artifact Hub
port: 587
username: ""
password: ""
# Credentials
creds:
# Docker registry username
dockerUsername: ""
# Docker registry password
dockerPassword: ""
# Images configuration
images:
# Images store
# Options: "pg"
store: pg
# Events configuration
events:
# Enable repository scanning errors events
scanningErrors: false
# Enable repository tracking errors events
trackingErrors: false
# Database migrator configuration
dbMigrator:
job:
image:
# Database migrator image repository (without the tag)
repository: artifacthub/db-migrator
# Optionally specify extra list of additional labels for the dbMigrator job
extraJobLabels: {}
# Optionally specify extra list of additional labels for the dbMigrator pod
extraPodLabels: {}
# Limits the lifetime of the job after it has finished execution
ttlSecondsAfterFinished: null
securityContext: {}
resources: {}
# If you do want to specify resources, uncomment the following
# lines and adjust them as necessary.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
# Optionally specify a node selector for the dbMigrator pod
nodeSelector: {}
# Load demo user and sample repositories
loadSampleData: true
# Directory path where the configuration files should be mounted
configDir: "/home/db-migrator/.cfg"
# Hub configuration
hub:
ingress:
enabled: true
ingressClassName: ""
annotations: {}
extraLabels: {}
defaultBackendEnabled: true
rules: []
tls: []
service:
type: NodePort
port: 80
# Service account for Artifact Hub to use
serviceAccount:
# Enable creation of ServiceAccount for Artifact Hub pod
create: true
# The name of the ServiceAccount to use. If not set and create is true, a name is generated
name: ""
# Allows auto mount of ServiceAccountToken on the serviceAccount created
automountServiceAccountToken: true
# Create and bind role for service account
rbac:
# Enable creation and binding of role
create: true
deploy:
readinessGates: []
replicaCount: 1
image:
# Hub image repository (without the tag)
repository: artifacthub/hub
securityContext: {}
resources: {}
# If you do want to specify resources, uncomment the following
# lines and adjust them as necessary.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
initContainers:
checkDbMigrator:
image:
repository: bitnami/kubectl
# tag: 1.21
resources: {}
# If you do want to specify resources, uncomment the following
# lines and adjust them as necessary.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
checkDbIsReady:
resources: {}
# If you do want to specify resources, uncomment the following
# lines and adjust them as necessary.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
# Optionally specify extra list of additional labels for the hub deployment
extraDeploymentLabels: {}
# Optionally specify extra list of additional labels for hub pods
extraPodLabels: {}
# Optionally specify extra list of additional volumes for the hub deployment
extraVolumes: []
# Optionally specify extra list of additional volume mounts for the hub deployment
extraVolumeMounts: []
# Optionally specify a node selector for the hub deployment
nodeSelector: {}
server:
# Allow adding private repositories to the Hub
allowPrivateRepositories: false
# Allow new Users to Sign Up
allowUserSignUp: true
# Cache directory path. If set, the cache directory for the Helm client will be explicitly set (otherwise
# defaults to $HOME/.cache), and the directory will be mounted as ephemeral volume (emptyDir)
cacheDir: ""
# Directory path where the configuration files should be mounted
configDir: "/home/hub/.cfg"
# Banners configuration file url
bannersURL: ""
# Hub server base url
baseURL: ""
# Hub server shutdown timeout
shutdownTimeout: 10s
# Message of the day. The message of the day will be displayed in a banner on the top of the Artifact Hub UI
motd: ""
# Message of the day severity. The color used for the banner will be based on the severity selected
# Options: "info", "warning", "error"
motdSeverity: info
basicAuth:
# Enable Hub basic auth
enabled: false
# Hub basic auth username
username: hub
# Hub basic auth password
password: changeme
cookie:
# Hub cookie hash key
hashKey: default-unsafe-key
# Enable Hub secure cookies
secure: false
csrf:
# CSRF authentication key
authKey: default-unsafe-key
# CSRF secure cookie
secure: false
oauth:
github:
# Enable GitHub OAuth
enabled: false
# GitHub OAuth client id
clientID: ""
# GitHub OAuth client secret
clientSecret: ""
# GitHub OAuth redirect url
redirectURL: ""
# GitHub OAuth scopes
scopes:
- read:user
- user:email
google:
# Enable Google oauth
enabled: false
# Google oauth client id
clientID: ""
# Google oauth client secret
clientSecret: ""
# Google oauth redirect url
redirectURL: ""
# Google oauth scopes
scopes:
- https://www.googleapis.com/auth/userinfo.email
- https://www.googleapis.com/auth/userinfo.profile
oidc:
# Enable OIDC
enabled: false
# OpenID connect issuer url
issuerURL: ""
# OpenID connect oauth client id
clientID: ""
# OpenID connect oauth client secret
clientSecret: ""
# OpenID connect oauth redirect url
redirectURL: ""
# OpenID connect oauth scopes
scopes:
- openid
- profile
- email
# Skip email verified check
skipEmailVerifiedCheck: false
# X-Forwarded-For IP index
xffIndex: 0
analytics:
# Google Analytics tracking id
gaTrackingID: ""
theme:
# Colors used in the website
colors:
# Primary color used in the website. For an optimal experience, it's better to use colors that play well with
# white fonts
primary: "#417598"
# Secondary color used in the website, usually a darker version of the primary color. For an optimal experience,
# it's better to use colors that play well with white fonts
secondary: "#2D4857"
# Images used in the website
images:
# URL of the image used for the Apple touch icon (192x192)
appleTouchIcon192: "/static/media/logo192_v2.png"
# URL of the image used for the Apple touch icon (512x512)
appleTouchIcon512: "/static/media/logo512_v2.png"
# URL of the image used in the og:image tag. This image is displayed when an Artifact Hub link is shared in
# Twitter or Slack, for example. The URL must use `https`
openGraphImage: "/static/media/artifactHub_v2.png"
# URL of the image used for the shortcut icon (also known as favicon)
shortcutIcon: "/static/media/logo_v2.png"
# URL of the logo used in the website header. For an optimal experience, it's better to use a white logo with
# transparent background, with no margin around it. It'll be displayed using a maximum height of 20px and a
# maximum width of 185px
websiteLogo: "/static/media/logo/artifacthub-brand-white.svg"
# Sample search queries used in home and no results found pages
sampleQueries: []
# Name of the site. This name is displayed in some places in the website and email templates. When a different
# value than the default one (Artifact Hub) is provided, the site enters `white label` mode. In this mode, some
# sections of the website are displayed in a more generic way, omitting certain parts that are unique to Artifact Hub
siteName: "Artifact hub"
# Scanner configuration
scanner:
enabled: true
cronjob:
image:
# Scanner image repository (without the tag)
repository: artifacthub/scanner
securityContext: {}
resources: {}
# If you do want to specify resources, uncomment the following
# lines and adjust them as necessary.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
# Optionally specify extra list of additional labels for the scanner cronjob
extraCronJobLabels: {}
# Optionally specify extra list of additional labels for the jobs spawned by the scanner cronjob
extraJobLabels: {}
# Optionally specify extra list of additional volumes for the scanner cronjob
extraVolumes: []
# Optionally specify extra list of additional volume mounts for the scanner cronjob
extraVolumeMounts: []
# Optionally specify a node selector for the scanner cronjob
nodeSelector: {}
# Number of snapshots to process concurrently
concurrency: 3
# Trivy server url. Defaults to the Trivy service's internal URL
trivyURL: ""
# Cache directory path. If set, the cache directory for the Trivy client will be explicitly set (otherwise defaults
# to $HOME/.cache), and the directory will be mounted as ephemeral volume (emptyDir)
cacheDir: ""
# Directory path where the configuration files should be mounted
configDir: "/home/scanner/.cfg"
# Tracker configuration
tracker:
cronjob:
image:
# Tracker image repository (without the tag)
repository: artifacthub/tracker
securityContext: {}
resources: {}
# If you do want to specify resources, uncomment the following
# lines and adjust them as necessary.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
# Optionally specify extra list of additional labels for the tracker cronjob
extraCronJobLabels: {}
# Optionally specify extra list of additional labels for the Jobs spawned by the tracker cronjob
extraJobLabels: {}
# Optionally specify extra list of additional volumes for the tracker cronjob
extraVolumes: []
# Optionally specify extra list of additional volume mounts for the tracker cronjob
extraVolumeMounts: []
# Optionally specify a node selector for the tracker cronjob
nodeSelector: {}
# Cache directory path. If set, the cache directory for the Helm client will be explicitly set (otherwise defaults
# to $HOME/.cache), and the directory will be mounted as ephemeral volume (emptyDir)
cacheDir: ""
# Directory path where the configuration files should be mounted
configDir: "/home/tracker/.cfg"
# Number of repositories to process concurrently
concurrency: 10
# Maximum duration for the tracking of a single repository
repositoryTimeout: 15m
# Repositories names to process ([] = all)
repositoriesNames: []
# Repositories kinds to process ([] = all)
repositoriesKinds: []
# Bypass digest check. Use this option to force already indexed packages to be reprocessed (use with caution)
bypassDigestCheck: false
# Trivy configuration
trivy:
enabled: true
deploy:
image: aquasec/trivy:0.43.1
securityContext: {}
resources: {}
# If you do want to specify resources, uncomment the following
# lines and adjust them as necessary.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
# Optionally specify extra list of additional labels for the trivy deployment
extraDeploymentLabels: {}
# Optionally specify extra list of additional labels for trivy pods
extraPodLabels: {}
# Optionally specify extra list of additional volumes for the trivy deployment
extraVolumes: []
# Optionally specify extra list of additional volume mounts for the trivy deployment
extraVolumeMounts: []
# Optionally specify a node selector for the trivy deployment
nodeSelector: {}
persistence:
enabled: false
size: 10Gi
# Values for postgresql chart dependency
postgresql:
enabled: true
image:
repository: artifacthub/postgres
tag: latest
persistence:
mountPath: /data
postgresqlUsername: postgres
postgresqlPassword: postgres
postgresqlDatabase: hub
postgresqlDataDir: /data/pgdata
# Extra objects to deploy (value evaluated as a template)
extraDeploy: []