forked from metal-toolbox/sandbox
-
Notifications
You must be signed in to change notification settings - Fork 0
/
values.yaml
118 lines (111 loc) · 4.55 KB
/
values.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
location: sandbox
serverservice:
image:
repository: "localhost:5001/serverservice"
tag: latest
pullPolicy: Always
nats:
publishStreamPrefix: com.hollow.sh.serverservice.events
conditionorc:
env:
NATS_URL: "nats://nats:4222"
NATS_CONNECT_TIMEOUT: 60s
SERVERSERVICE_ENDPOINT: http://serverservice:8000
SERVERSERVICE_DISABLE_OAUTH: true
# uncomment once oauth service is available in sandbox
#SERVERSERVICE_OIDC_AUDIENCE_ENDPOINT:
## trailing forward slash is required.
#SERVERSERVICE_OIDC_ISSUER_ENDPOINT:
#SERVERSERVICE_OIDC_CLIENT_ID: conditionorc-api
#SERVERSERVICE_OIDC_CLIENT_SCOPES: "read:server create:server:attributes update:server:attributes delete:server:attributes"
## telemetry configuration
OTEL_EXPORTER_OTLP_ENDPOINT: jaeger:4317
OTEL_EXPORTER_OTLP_INSECURE: true
image:
repository: "localhost:5001/conditionorc"
tag: latest
pullPolicy: Always
flasher:
env:
NATS_URL: "nats://nats:4222"
NATS_CONNECT_TIMEOUT: 60s
SERVERSERVICE_ENDPOINT: http://serverservice:8000
SERVERSERVICE_DISABLE_OAUTH: true
# to uncomment once oauth service is availble in sandbox
# SERVERSERVICE_OIDC_AUDIENCE_ENDPOINT:
# SERVERSERVICE_OIDC_ISSUER_ENDPOINT:
# SERVERSERVICE_OIDC_CLIENT_ID: flasher
# SERVERSERVICE_OIDC_CLIENT_SCOPES: "read:server read:server:credentials read:server:component read:server:versioned-attributes read:server-component-firmwares read:server-component-firmware-sets"
# # telemetry configuration
OTEL_EXPORTER_OTLP_ENDPOINT: jaeger:4317
OTEL_EXPORTER_OTLP_INSECURE: true
image:
repository: "localhost:5001/flasher"
tag: latest
pullPolicy: Always
alloy:
image:
repository: "localhost:5001/alloy"
tag: latest
pullPolicy: Always
env:
SERVERSERVICE_ENDPOINT: http://serverservice:8000
SERVERSERVICE_SKIP_OAUTH: true
SERVERSERVICE_FACILITY_CODE: dc13
ALLOY_NATS_URL: "nats://nats:4222"
ALLOY_NATS_STREAM_USER: alloy
ALLOY_NATS_STREAM_PASS: password
crdb:
image: cockroachdb/cockroach:latest-v21.1
#
# https://github.com/nats-io/k8s/tree/main/helm/charts/nats#using-nats-chart-as-a-dependency
nats:
fullnameOverride: nats
nats:
image:
repository: nats
tag: "2.9.16-alpine"
pullPolicy: IfNotPresent
logging:
debug: true
trace: true
logtime: true
jetstream:
enabled: true
fileStorage:
size: 1Gi
auth:
enabled: true
timeout: "5s"
resolver:
type: full
# Operator named KO
operator: eyJ0eXAiOiJKV1QiLCJhbGciOiJlZDI1NTE5LW5rZXkifQ.eyJqdGkiOiIyTEM1UTJTQUk2UVZPUVhDWk5SVVRPRUZRT1FQQUFMU1o1NzI1WlpMNzcyTFJaQjdBRUpRIiwiaWF0IjoxNjg3MTc4NTAyLCJpc3MiOiJPRFdZV082M1NXNUVSTkhZRlFLVFIzTzU3Sk1ETFRSWTdaRTJLTlVFVExFR0tWUFVUQ0M3SFQ3QiIsIm5hbWUiOiJLTyIsInN1YiI6Ik9EV1lXTzYzU1c1RVJOSFlGUUtUUjNPNTdKTURMVFJZN1pFMktOVUVUTEVHS1ZQVVRDQzdIVDdCIiwibmF0cyI6eyJhY2NvdW50X3NlcnZlcl91cmwiOiJuYXRzOi8vbmF0czo0MjIyIiwib3BlcmF0b3Jfc2VydmljZV91cmxzIjpbIm5hdHM6Ly9uYXRzOjQyMjIiXSwidHlwZSI6Im9wZXJhdG9yIiwidmVyc2lvbiI6Mn19.VDXtvi_4lvRpM3VzOuc3RWZe7jLxDMSgkYjs62X6Dn7qhi8D2dORsd-mRHJCyb7FbwV85TR3u7wwNVLliun4DA
# System account named SYS
systemAccount: AAD6SU2DU4IPGZQ2UA36OB7CPSCSGNCP6M6Q6XCUAAPRGYVQBEKM42Q6
store:
dir: "/accounts/jwt"
size: "50Mi"
resolverPreload:
AAD6SU2DU4IPGZQ2UA36OB7CPSCSGNCP6M6Q6XCUAAPRGYVQBEKM42Q6: eyJ0eXAiOiJKV1QiLCJhbGciOiJlZDI1NTE5LW5rZXkifQ.eyJqdGkiOiJEUkg1Q1c1WlBLT1I3Uk9BMlFYMlpRM1hOWFZQQVE0REFDSzJGNllJR1FKQUFYSVdVS0FRIiwiaWF0IjoxNjg3MTc4NTAyLCJpc3MiOiJPRFdZV082M1NXNUVSTkhZRlFLVFIzTzU3Sk1ETFRSWTdaRTJLTlVFVExFR0tWUFVUQ0M3SFQ3QiIsIm5hbWUiOiJTWVMiLCJzdWIiOiJBQUQ2U1UyRFU0SVBHWlEyVUEzNk9CN0NQU0NTR05DUDZNNlE2WENVQUFQUkdZVlFCRUtNNDJRNiIsIm5hdHMiOnsibGltaXRzIjp7InN1YnMiOi0xLCJkYXRhIjotMSwicGF5bG9hZCI6LTEsImltcG9ydHMiOi0xLCJleHBvcnRzIjotMSwid2lsZGNhcmRzIjp0cnVlLCJjb25uIjotMSwibGVhZiI6LTF9LCJkZWZhdWx0X3Blcm1pc3Npb25zIjp7InB1YiI6e30sInN1YiI6e319LCJhdXRob3JpemF0aW9uIjp7ImF1dGhfdXNlcnMiOm51bGx9LCJ0eXBlIjoiYWNjb3VudCIsInZlcnNpb24iOjJ9fQ.9fVvgEtpYRxFRlHgOrZHEuU0ZPCSZY-gdXK0nw7Pklz-p5wh9p4pzcUY-xWTl7J2A3IuT_NgyTfxeSzCz3uoAQ
cluster:
enabled: false
noAdvertise: true
natsbox:
enabled: true
#image: natsio/nats-box:0.13.4
image:
repository: natsio/nats-box
tag: 0.13.8
pullPolicy: IfNotPresent
chaos-mesh:
enabled: false
#https://github.com/chaos-mesh/chaos-mesh/tree/master/helm/chaos-mesh
controllerManager:
leaderElection:
enabled: false
dashboard:
securityMode: false
chaosDaemon:
runtime: containerd
socketPath: /run/containerd/containerd.sock