162 lines
3.3 KiB
YAML
162 lines
3.3 KiB
YAML
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
imagePullSecrets: []
|
|
podDnsPolicy: ClusterFirst
|
|
podDnsConfig: {}
|
|
|
|
api:
|
|
replicas: 2
|
|
image:
|
|
repository: remora-api
|
|
tag: 0.0.0
|
|
digest: ""
|
|
allowTag: false
|
|
pullPolicy: IfNotPresent
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: "2"
|
|
memory: 1Gi
|
|
|
|
worker:
|
|
replicas: 2
|
|
image:
|
|
repository: remora-worker
|
|
tag: 0.0.0
|
|
digest: ""
|
|
allowTag: false
|
|
pullPolicy: IfNotPresent
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: "4"
|
|
memory: 2Gi
|
|
|
|
web:
|
|
replicas: 2
|
|
image:
|
|
repository: remora-web
|
|
tag: 0.0.0
|
|
digest: ""
|
|
allowTag: false
|
|
pullPolicy: IfNotPresent
|
|
publicOrigin: https://remora.example.com
|
|
oidcClientId: remora-web
|
|
oidcClientSecretSecret:
|
|
name: remora-web-oidc
|
|
key: client-secret
|
|
oidcScope: openid profile
|
|
sessionUrlSecret:
|
|
name: remora-web-session
|
|
key: url
|
|
sessionTtlSeconds: 28800
|
|
resources:
|
|
requests:
|
|
cpu: 25m
|
|
memory: 64Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 256Mi
|
|
|
|
database:
|
|
urlSecret:
|
|
name: remora-database
|
|
key: url
|
|
maxApiConnections: 32
|
|
maxWorkerConnections: 16
|
|
|
|
coordination:
|
|
urlSecret:
|
|
name: remora-coordination
|
|
key: url
|
|
namespace: "remora:"
|
|
globalAttemptLimit: 64
|
|
leaseTtlSeconds: 30
|
|
reserveTtlSeconds: 30
|
|
progressTtlSeconds: 60
|
|
|
|
oidc:
|
|
issuer: https://identity.example.com
|
|
audience: remora-project
|
|
resourceClient: remora-web
|
|
projectRoleClaims: urn:zitadel:iam:org:project:roles
|
|
|
|
target:
|
|
storeId: primary
|
|
endpoint: https://objects.example.com
|
|
bucket: remora-results
|
|
region: us-east-1
|
|
root: ""
|
|
defaultPrefix: ""
|
|
exclusiveWriter: true
|
|
credentialsSecret:
|
|
name: remora-target
|
|
accessKey: access-key
|
|
secretKey: secret-key
|
|
|
|
vault:
|
|
image: hashicorp/vault@sha256:db6a5f78749204d0a8d002be1cc6e9a2a6de53dffce41a894c4a06d309dca360
|
|
allowTag: false
|
|
address: https://vault.example.com
|
|
path: remora
|
|
kubernetesAuthMount: auth/kubernetes
|
|
audience: vault
|
|
apiRole: remora-api
|
|
workerRole: remora-worker
|
|
caSecret:
|
|
name: ""
|
|
key: ca.crt
|
|
|
|
runtime:
|
|
reservedTargetSegments: _remora
|
|
admissionPolicyVersion: deployment-v1
|
|
maxAttempts: 3
|
|
workerLocalAttemptLimit: 4
|
|
workerRenewSeconds: 10
|
|
recoveryIntervalSeconds: 2
|
|
eventAllowedOrigins: https://remora.example.com
|
|
eventRetentionSeconds: 3600
|
|
logFilter: info
|
|
|
|
outbound:
|
|
allowedSchemePorts: https:443
|
|
allowedCidrs: ""
|
|
maxRedirects: 5
|
|
|
|
networkPolicy:
|
|
enabled: true
|
|
ingressNamespaceSelector: {}
|
|
ingressPodSelector: {}
|
|
monitoringNamespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: monitoring
|
|
monitoringPodSelector: {}
|
|
dnsPodLabels: []
|
|
dependencyPodLabels:
|
|
- fixture.remora.dev/component: postgres
|
|
- fixture.remora.dev/component: dragonfly
|
|
- fixture.remora.dev/component: vault
|
|
- fixture.remora.dev/component: zitadel
|
|
- fixture.remora.dev/component: versitygw
|
|
externalEgressCidrs: []
|
|
webDependencyPodLabels:
|
|
- fixture.remora.dev/component: dragonfly
|
|
- fixture.remora.dev/component: zitadel
|
|
webExternalEgressCidrs: []
|
|
allowPublicSourceEgress: true
|
|
|
|
observability:
|
|
serviceMonitor:
|
|
enabled: false
|
|
interval: 30s
|
|
prometheusRule:
|
|
enabled: false
|
|
|
|
podDisruptionBudget:
|
|
enabled: true
|
|
minAvailable: 1
|