179 lines
4.1 KiB
YAML
179 lines
4.1 KiB
YAML
# Values for configuring the deployment of Grafana OnCall
|
|
|
|
# Set the domain name Grafana OnCall will be installed on.
|
|
# If you want to install grafana as a part of this release make sure to configure grafana.grafana.ini.server.domain too
|
|
base_url: example.com
|
|
|
|
image:
|
|
# Grafana OnCall docker image repository
|
|
repository: grafana/oncall
|
|
tag:
|
|
pullPolicy: IfNotPresent
|
|
|
|
# Whether to create additional service for external connections
|
|
# ClusterIP service is always created
|
|
service:
|
|
enabled: false
|
|
type: LoadBalancer
|
|
port: 8080
|
|
|
|
# Engine pods configuration
|
|
engine:
|
|
replicaCount: 1
|
|
resources: {}
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
|
|
# Celery workers pods configuration
|
|
celery:
|
|
replicaCount: 1
|
|
resources: {}
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
|
|
# Whether to run django database migrations automatically
|
|
migrate:
|
|
enabled: true
|
|
|
|
# Additional env variables to add to deployments
|
|
env: []
|
|
|
|
# Enable ingress object for external access to the resources
|
|
ingress:
|
|
enabled: true
|
|
# className: ""
|
|
annotations:
|
|
kubernetes.io/ingress.class: "nginx"
|
|
cert-manager.io/issuer: "letsencrypt-prod"
|
|
|
|
# Whether to install ingress controller
|
|
ingress-nginx:
|
|
enabled: true
|
|
|
|
# Install cert-manager as a part of the release
|
|
cert-manager:
|
|
enabled: true
|
|
# Instal CRD resources
|
|
installCRDs: true
|
|
webhook:
|
|
timeoutSeconds: 30
|
|
# cert-manager tries to use the already used port, changing to another one
|
|
# https://github.com/cert-manager/cert-manager/issues/3237
|
|
# https://cert-manager.io/docs/installation/compatibility/
|
|
securePort: 10260
|
|
# Fix self-checks https://github.com/jetstack/cert-manager/issues/4286
|
|
podDnsPolicy: None
|
|
podDnsConfig:
|
|
nameservers:
|
|
- 8.8.8.8
|
|
- 1.1.1.1
|
|
|
|
# MySQL is included into this release for the convenience.
|
|
# It is recommended to host it separately from this release
|
|
# Set mariadb.enabled = false and configure externalMysql
|
|
mariadb:
|
|
enabled: true
|
|
auth:
|
|
database: oncall
|
|
primary:
|
|
extraEnvVars:
|
|
- name: MARIADB_COLLATE
|
|
value: utf8mb4_unicode_ci
|
|
- name: MARIADB_CHARACTER_SET
|
|
value: utf8mb4
|
|
secondary:
|
|
extraEnvVars:
|
|
- name: MARIADB_COLLATE
|
|
value: utf8mb4_unicode_ci
|
|
- name: MARIADB_CHARACTER_SET
|
|
value: utf8mb4
|
|
|
|
# Make sure to create the database with the following parameters:
|
|
# CREATE DATABASE oncall CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
|
|
externalMysql:
|
|
host:
|
|
port:
|
|
db_name:
|
|
user:
|
|
password:
|
|
|
|
# RabbitMQ is included into this release for the convenience.
|
|
# It is recommended to host it separately from this release
|
|
# Set rabbitmq.enabled = false and configure externalRabbitmq
|
|
rabbitmq:
|
|
enabled: true
|
|
|
|
externalRabbitmq:
|
|
host:
|
|
port:
|
|
user:
|
|
password:
|
|
protocol:
|
|
|
|
# Redis is included into this release for the convenience.
|
|
# It is recommended to host it separately from this release
|
|
redis:
|
|
enabled: true
|
|
|
|
externalRedis:
|
|
host:
|
|
password:
|
|
|
|
# Grafana is included into this release for the convenience.
|
|
# It is recommended to host it separately from this release
|
|
grafana:
|
|
enabled: true
|
|
grafana.ini:
|
|
server:
|
|
domain: example.com
|
|
root_url: "%(protocol)s://%(domain)s/grafana"
|
|
serve_from_sub_path: true
|
|
persistence:
|
|
enabled: true
|
|
plugins:
|
|
- grafana-oncall-app
|
|
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
serviceAccount:
|
|
# Specifies whether a service account should be created
|
|
create: true
|
|
# Annotations to add to the service account
|
|
annotations: {}
|
|
# The name of the service account to use.
|
|
# If not set and create is true, a name is generated using the fullname template
|
|
name: ""
|
|
|
|
podAnnotations: {}
|
|
|
|
podSecurityContext: {}
|
|
# fsGroup: 2000
|
|
|
|
securityContext: {}
|
|
# capabilities:
|
|
# drop:
|
|
# - ALL
|
|
# readOnlyRootFilesystem: true
|
|
# runAsNonRoot: true
|
|
# runAsUser: 1000
|
|
|
|
init:
|
|
securityContext: {}
|
|
# allowPrivilegeEscalation: false
|
|
# capabilities:
|
|
# drop:
|
|
# - ALL
|
|
# privileged: false
|
|
# readOnlyRootFilesystem: true
|
|
# runAsGroup: 1337
|
|
# runAsNonRoot: true
|
|
# runAsUser: 1337
|