Compare commits
7 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 441ad03988 | |||
| 04c9dc3294 | |||
| 32b2641fd8 | |||
| 07966c5461 | |||
| bcb50a5fce | |||
| ba93bcf20b | |||
| 2e05aec303 |
@@ -143,6 +143,7 @@ jobs:
|
||||
AWS_S3_ENDPOINT_URL: http://localhost:9000
|
||||
AWS_S3_ACCESS_KEY_ID: impress
|
||||
AWS_S3_SECRET_ACCESS_KEY: password
|
||||
DB_PSYCOPG_POOL_MAX_SIZE: 15
|
||||
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
|
||||
@@ -27,6 +27,7 @@ and this project adheres to
|
||||
- 🐛(backend) manage race condition when creating sandbox document #1971
|
||||
- 🐛(frontend) fix flickering left panel #1989
|
||||
- ♿️(frontend) improve doc tree keyboard navigation #1981
|
||||
- 🔧(helm) allow specific env var for the backend and celery deploy
|
||||
|
||||
## [v4.7.0] - 2026-03-09
|
||||
|
||||
|
||||
@@ -46,6 +46,9 @@ These are the environment variables you can set for the `impress-backend` contai
|
||||
| DB_NAME | Name of the database | impress |
|
||||
| DB_PASSWORD | Password to authenticate with | pass |
|
||||
| DB_PORT | Port of the database | 5432 |
|
||||
| DB_PSYCOPG_POOL_MIN_SIZE | The psycopg min pool size | 4 |
|
||||
| DB_PSYCOPG_POOL_MAX_SIZE | The psycopg max pool size | None |
|
||||
| DB_PSYCOPG_POOL_TIMEOUT | The default maximum time in seconds that a client can wait to receive a connection from the pool | 3 |
|
||||
| DB_USER | User to authenticate with | dinum |
|
||||
| DJANGO_ALLOWED_HOSTS | Allowed hosts | [] |
|
||||
| DJANGO_CELERY_BROKER_TRANSPORT_OPTIONS | Celery broker transport options | {} |
|
||||
|
||||
@@ -8,4 +8,5 @@ DB_HOST=postgresql
|
||||
DB_NAME=impress
|
||||
DB_USER=dinum
|
||||
DB_PASSWORD=pass
|
||||
DB_PORT=5432
|
||||
DB_PORT=5432
|
||||
DB_PSYCOPG_POOL_MAX_SIZE=15
|
||||
|
||||
@@ -99,6 +99,24 @@ class Base(Configuration):
|
||||
"localhost", environ_name="DB_HOST", environ_prefix=None
|
||||
),
|
||||
"PORT": values.Value(5432, environ_name="DB_PORT", environ_prefix=None),
|
||||
"OPTIONS": {
|
||||
# https://www.psycopg.org/psycopg3/docs/api/pool.html#psycopg_pool.ConnectionPool
|
||||
"pool": {
|
||||
"min_size": values.IntegerValue(
|
||||
4, environ_name="DB_PSYCOPG_POOL_MIN_SIZE", environ_prefix=None
|
||||
),
|
||||
"max_size": values.IntegerValue(
|
||||
None,
|
||||
environ_name="DB_PSYCOPG_POOL_MAX_SIZE",
|
||||
environ_prefix=None,
|
||||
),
|
||||
"timeout": values.IntegerValue(
|
||||
3,
|
||||
environ_name="DB_PSYCOPG_POOL_TIMEOUT",
|
||||
environ_prefix=None,
|
||||
),
|
||||
}
|
||||
},
|
||||
}
|
||||
}
|
||||
DEFAULT_AUTO_FIELD = "django.db.models.AutoField"
|
||||
|
||||
@@ -54,7 +54,7 @@ dependencies = [
|
||||
"mozilla-django-oidc==5.0.2",
|
||||
"nested-multipart-parser==1.6.0",
|
||||
"openai==2.24.0",
|
||||
"psycopg[binary]==3.3.3",
|
||||
"psycopg[binary,pool]==3.3.3",
|
||||
"pycrdt==0.12.47",
|
||||
"pydantic==2.12.5",
|
||||
"pydantic-ai-slim[openai,logfire,web]==1.58.0",
|
||||
|
||||
@@ -74,6 +74,12 @@ backend:
|
||||
Y_PROVIDER_API_BASE_URL: http://impress-docs-y-provider:443/api/
|
||||
Y_PROVIDER_API_KEY: my-secret
|
||||
CACHES_KEY_PREFIX: "{{ now | unixEpoch }}"
|
||||
django:
|
||||
envVars:
|
||||
WEB_CONCURRENCY: 1
|
||||
DB_PSYCOPG_POOL_MIN_SIZE: 10
|
||||
|
||||
|
||||
migrate:
|
||||
command:
|
||||
- "/bin/sh"
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
apiVersion: v2
|
||||
type: application
|
||||
name: docs
|
||||
version: 4.8.0
|
||||
version: 4.8.0-psycopgpool
|
||||
appVersion: latest
|
||||
|
||||
+196
-159
@@ -4,159 +4,164 @@
|
||||
|
||||
### General configuration
|
||||
|
||||
| Name | Description | Value |
|
||||
| ----------------------------------------------------------------------------------- | ---------------------------------------------------- | ------------------------------------------------------------------ |
|
||||
| `image.repository` | Repository to use to pull impress's container image | `lasuite/impress-backend` |
|
||||
| `image.tag` | impress's container tag | `latest` |
|
||||
| `image.pullPolicy` | Container image pull policy | `IfNotPresent` |
|
||||
| `image.credentials.username` | Username for container registry authentication | |
|
||||
| `image.credentials.password` | Password for container registry authentication | |
|
||||
| `image.credentials.registry` | Registry url for which the credentials are specified | |
|
||||
| `image.credentials.name` | Name of the generated secret for imagePullSecrets | |
|
||||
| `nameOverride` | Override the chart name | `""` |
|
||||
| `fullnameOverride` | Override the full application name | `""` |
|
||||
| `ingress.enabled` | whether to enable the Ingress or not | `false` |
|
||||
| `ingress.className` | IngressClass to use for the Ingress | `nil` |
|
||||
| `ingress.host` | Host for the Ingress | `impress.example.com` |
|
||||
| `ingress.path` | Path to use for the Ingress | `/` |
|
||||
| `ingress.hosts` | Additional host to configure for the Ingress | `[]` |
|
||||
| `ingress.tls.enabled` | Weather to enable TLS for the Ingress | `true` |
|
||||
| `ingress.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingress.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingress.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingress.customBackends` | Add custom backends to ingress | `[]` |
|
||||
| `ingressCollaborationWS.enabled` | whether to enable the Ingress or not | `false` |
|
||||
| `ingressCollaborationWS.className` | IngressClass to use for the Ingress | `nil` |
|
||||
| `ingressCollaborationWS.host` | Host for the Ingress | `impress.example.com` |
|
||||
| `ingressCollaborationWS.path` | Path to use for the Ingress | `/collaboration/ws/` |
|
||||
| `ingressCollaborationWS.hosts` | Additional host to configure for the Ingress | `[]` |
|
||||
| `ingressCollaborationWS.tls.enabled` | Weather to enable TLS for the Ingress | `true` |
|
||||
| `ingressCollaborationWS.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingressCollaborationWS.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingressCollaborationWS.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingressCollaborationWS.customBackends` | Add custom backends to ingress | `[]` |
|
||||
| `ingressCollaborationWS.annotations.nginx.ingress.kubernetes.io/enable-websocket` | | `true` |
|
||||
| `ingressCollaborationWS.annotations.nginx.ingress.kubernetes.io/proxy-read-timeout` | | `86400` |
|
||||
| `ingressCollaborationWS.annotations.nginx.ingress.kubernetes.io/proxy-send-timeout` | | `86400` |
|
||||
| `ingressCollaborationWS.annotations.nginx.ingress.kubernetes.io/upstream-hash-by` | | `$arg_room` |
|
||||
| `ingressRedirects.enabled` | whether to enable the Ingress Redirects or not | `false` |
|
||||
| `ingressRedirects.className` | IngressClass to use for the Ingress Redirects | `nil` |
|
||||
| `ingressRedirects.host` | Host for the Ingress Redirects | `impress.example.com` |
|
||||
| `ingressRedirects.tls.enabled` | Weather to enable TLS for the Ingress Redirects | `true` |
|
||||
| `ingressRedirects.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingressRedirects.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingressRedirects.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingressRedirects.rules` | Rules for the Ingress Redirects | `[]` |
|
||||
| `ingressCollaborationApi.enabled` | whether to enable the Ingress or not | `false` |
|
||||
| `ingressCollaborationApi.className` | IngressClass to use for the Ingress | `nil` |
|
||||
| `ingressCollaborationApi.host` | Host for the Ingress | `impress.example.com` |
|
||||
| `ingressCollaborationApi.path` | Path to use for the Ingress | `/collaboration/api/` |
|
||||
| `ingressCollaborationApi.hosts` | Additional host to configure for the Ingress | `[]` |
|
||||
| `ingressCollaborationApi.tls.enabled` | Weather to enable TLS for the Ingress | `true` |
|
||||
| `ingressCollaborationApi.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingressCollaborationApi.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingressCollaborationApi.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingressCollaborationApi.customBackends` | Add custom backends to ingress | `[]` |
|
||||
| `ingressCollaborationApi.annotations.nginx.ingress.kubernetes.io/upstream-hash-by` | | `$arg_room` |
|
||||
| `ingressAdmin.enabled` | whether to enable the Ingress or not | `false` |
|
||||
| `ingressAdmin.className` | IngressClass to use for the Ingress | `nil` |
|
||||
| `ingressAdmin.host` | Host for the Ingress | `impress.example.com` |
|
||||
| `ingressAdmin.path` | Path to use for the Ingress | `/admin` |
|
||||
| `ingressAdmin.hosts` | Additional host to configure for the Ingress | `[]` |
|
||||
| `ingressAdmin.tls.enabled` | Weather to enable TLS for the Ingress | `true` |
|
||||
| `ingressAdmin.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingressAdmin.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingressAdmin.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingressMedia.enabled` | whether to enable the Ingress or not | `false` |
|
||||
| `ingressMedia.className` | IngressClass to use for the Ingress | `nil` |
|
||||
| `ingressMedia.host` | Host for the Ingress | `impress.example.com` |
|
||||
| `ingressMedia.path` | Path to use for the Ingress | `/media/(.*)` |
|
||||
| `ingressMedia.hosts` | Additional host to configure for the Ingress | `[]` |
|
||||
| `ingressMedia.tls.enabled` | Weather to enable TLS for the Ingress | `true` |
|
||||
| `ingressMedia.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingressMedia.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingressMedia.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingressMedia.annotations.nginx.ingress.kubernetes.io/auth-url` | | `https://impress.example.com/api/v1.0/documents/media-auth/` |
|
||||
| `ingressMedia.annotations.nginx.ingress.kubernetes.io/auth-response-headers` | | `Authorization, X-Amz-Date, X-Amz-Content-SHA256` |
|
||||
| `ingressMedia.annotations.nginx.ingress.kubernetes.io/upstream-vhost` | | `minio.impress.svc.cluster.local:9000` |
|
||||
| `ingressMedia.annotations.nginx.ingress.kubernetes.io/configuration-snippet` | | `add_header Content-Security-Policy "default-src 'none'" always;
|
||||
| Name | Description | Value |
|
||||
| ----------------------------------------------------------------------------------- | -------------------------------------------------------------------------- | ------------------------------------------------------------------ |
|
||||
| `image.repository` | Repository to use to pull impress's container image | `lasuite/impress-backend` |
|
||||
| `image.tag` | impress's container tag | `latest` |
|
||||
| `image.pullPolicy` | Container image pull policy | `IfNotPresent` |
|
||||
| `image.credentials.username` | Username for container registry authentication | |
|
||||
| `image.credentials.password` | Password for container registry authentication | |
|
||||
| `image.credentials.registry` | Registry url for which the credentials are specified | |
|
||||
| `image.credentials.name` | Name of the generated secret for imagePullSecrets | |
|
||||
| `nameOverride` | Override the chart name | `""` |
|
||||
| `fullnameOverride` | Override the full application name | `""` |
|
||||
| `ingress.enabled` | whether to enable the Ingress or not | `false` |
|
||||
| `ingress.className` | IngressClass to use for the Ingress | `nil` |
|
||||
| `ingress.host` | Host for the Ingress | `impress.example.com` |
|
||||
| `ingress.path` | Path to use for the Ingress | `/` |
|
||||
| `ingress.hosts` | Additional host to configure for the Ingress | `[]` |
|
||||
| `ingress.tls.enabled` | Whether to enable TLS for the Ingress | `true` |
|
||||
| `ingress.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingress.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingress.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingress.customBackends` | Add custom backends to ingress | `[]` |
|
||||
| `ingressCollaborationWS.enabled` | whether to enable the Ingress or not | `false` |
|
||||
| `ingressCollaborationWS.className` | IngressClass to use for the Ingress | `nil` |
|
||||
| `ingressCollaborationWS.host` | Host for the Ingress | `impress.example.com` |
|
||||
| `ingressCollaborationWS.path` | Path to use for the Ingress | `/collaboration/ws/` |
|
||||
| `ingressCollaborationWS.hosts` | Additional host to configure for the Ingress | `[]` |
|
||||
| `ingressCollaborationWS.tls.enabled` | Whether to enable TLS for the Ingress | `true` |
|
||||
| `ingressCollaborationWS.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingressCollaborationWS.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingressCollaborationWS.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingressCollaborationWS.customBackends` | Add custom backends to ingress | `[]` |
|
||||
| `ingressCollaborationWS.annotations.nginx.ingress.kubernetes.io/enable-websocket` | | `true` |
|
||||
| `ingressCollaborationWS.annotations.nginx.ingress.kubernetes.io/proxy-read-timeout` | | `86400` |
|
||||
| `ingressCollaborationWS.annotations.nginx.ingress.kubernetes.io/proxy-send-timeout` | | `86400` |
|
||||
| `ingressCollaborationWS.annotations.nginx.ingress.kubernetes.io/upstream-hash-by` | | `$arg_room` |
|
||||
| `ingressRedirects.enabled` | whether to enable the Ingress Redirects or not | `false` |
|
||||
| `ingressRedirects.className` | IngressClass to use for the Ingress Redirects | `nil` |
|
||||
| `ingressRedirects.host` | Host for the Ingress Redirects | `impress.example.com` |
|
||||
| `ingressRedirects.tls.enabled` | Whether to enable TLS for the Ingress Redirects | `true` |
|
||||
| `ingressRedirects.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingressRedirects.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingressRedirects.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingressRedirects.rules` | Rules for the Ingress Redirects | `[]` |
|
||||
| `ingressCollaborationApi.enabled` | whether to enable the Ingress or not | `false` |
|
||||
| `ingressCollaborationApi.className` | IngressClass to use for the Ingress | `nil` |
|
||||
| `ingressCollaborationApi.host` | Host for the Ingress | `impress.example.com` |
|
||||
| `ingressCollaborationApi.path` | Path to use for the Ingress | `/collaboration/api/` |
|
||||
| `ingressCollaborationApi.hosts` | Additional host to configure for the Ingress | `[]` |
|
||||
| `ingressCollaborationApi.tls.enabled` | Whether to enable TLS for the Ingress | `true` |
|
||||
| `ingressCollaborationApi.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingressCollaborationApi.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingressCollaborationApi.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingressCollaborationApi.customBackends` | Add custom backends to ingress | `[]` |
|
||||
| `ingressCollaborationApi.annotations.nginx.ingress.kubernetes.io/upstream-hash-by` | | `$arg_room` |
|
||||
| `ingressAdmin.enabled` | whether to enable the Ingress or not | `false` |
|
||||
| `ingressAdmin.className` | IngressClass to use for the Ingress | `nil` |
|
||||
| `ingressAdmin.host` | Host for the Ingress | `impress.example.com` |
|
||||
| `ingressAdmin.path` | Path to use for the Ingress | `/admin` |
|
||||
| `ingressAdmin.hosts` | Additional host to configure for the Ingress | `[]` |
|
||||
| `ingressAdmin.tls.enabled` | Whether to enable TLS for the Ingress | `true` |
|
||||
| `ingressAdmin.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingressAdmin.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingressAdmin.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingressMedia.enabled` | whether to enable the Ingress or not | `false` |
|
||||
| `ingressMedia.className` | IngressClass to use for the Ingress | `nil` |
|
||||
| `ingressMedia.host` | Host for the Ingress | `impress.example.com` |
|
||||
| `ingressMedia.path` | Path to use for the Ingress | `/media/(.*)` |
|
||||
| `ingressMedia.hosts` | Additional host to configure for the Ingress | `[]` |
|
||||
| `ingressMedia.tls.enabled` | Whether to enable TLS for the Ingress | `true` |
|
||||
| `ingressMedia.tls.secretName` | Secret name for TLS config | `nil` |
|
||||
| `ingressMedia.tls.additional[].secretName` | Secret name for additional TLS config | |
|
||||
| `ingressMedia.tls.additional[].hosts[]` | Hosts for additional TLS config | |
|
||||
| `ingressMedia.annotations.nginx.ingress.kubernetes.io/auth-url` | | `https://impress.example.com/api/v1.0/documents/media-auth/` |
|
||||
| `ingressMedia.annotations.nginx.ingress.kubernetes.io/auth-response-headers` | | `Authorization, X-Amz-Date, X-Amz-Content-SHA256` |
|
||||
| `ingressMedia.annotations.nginx.ingress.kubernetes.io/upstream-vhost` | | `minio.impress.svc.cluster.local:9000` |
|
||||
| `ingressMedia.annotations.nginx.ingress.kubernetes.io/configuration-snippet` | | `add_header Content-Security-Policy "default-src 'none'" always;
|
||||
` |
|
||||
| `serviceMedia.host` | | `minio.impress.svc.cluster.local` |
|
||||
| `serviceMedia.port` | | `9000` |
|
||||
| `serviceMedia.annotations` | | `{}` |
|
||||
| `serviceMedia.host` | Hostname of the media storage backend (S3/MinIO) used by the media ingress | `minio.impress.svc.cluster.local` |
|
||||
| `serviceMedia.port` | Port of the media storage backend | `9000` |
|
||||
| `serviceMedia.annotations` | Annotations to add to the media ExternalName Service | `{}` |
|
||||
|
||||
### backend
|
||||
|
||||
| Name | Description | Value |
|
||||
| ----------------------------------------------------- | ---------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
||||
| `backend.command` | Override the backend container command | `[]` |
|
||||
| `backend.args` | Override the backend container args | `[]` |
|
||||
| `backend.replicas` | Amount of backend replicas | `3` |
|
||||
| `backend.shareProcessNamespace` | Enable share process namespace between containers | `false` |
|
||||
| `backend.sidecars` | Add sidecars containers to backend deployment | `[]` |
|
||||
| `backend.migrateJobAnnotations` | Annotations for the migrate job | `{}` |
|
||||
| `backend.jobs.ttlSecondsAfterFinished` | Period to wait before remove jobs | `30` |
|
||||
| `backend.jobs.backoffLimit` | Numbers of jobs retries | `2` |
|
||||
| `backend.securityContext` | Configure backend Pod security context | `nil` |
|
||||
| `backend.envVars` | Configure backend container environment variables | `undefined` |
|
||||
| `backend.envVars.BY_VALUE` | Example environment variable by setting value directly | |
|
||||
| `backend.envVars.FROM_CONFIGMAP.configMapKeyRef.name` | Name of a ConfigMap when configuring env vars from a ConfigMap | |
|
||||
| `backend.envVars.FROM_CONFIGMAP.configMapKeyRef.key` | Key within a ConfigMap when configuring env vars from a ConfigMap | |
|
||||
| `backend.envVars.FROM_SECRET.secretKeyRef.name` | Name of a Secret when configuring env vars from a Secret | |
|
||||
| `backend.envVars.FROM_SECRET.secretKeyRef.key` | Key within a Secret when configuring env vars from a Secret | |
|
||||
| `backend.podAnnotations` | Annotations to add to the backend Pod | `{}` |
|
||||
| `backend.dpAnnotations` | Annotations to add to the backend Deployment | `{}` |
|
||||
| `backend.service.type` | backend Service type | `ClusterIP` |
|
||||
| `backend.service.port` | backend Service listening port | `80` |
|
||||
| `backend.service.targetPort` | backend container listening port | `8000` |
|
||||
| `backend.service.annotations` | Annotations to add to the backend Service | `{}` |
|
||||
| `backend.migrate.command` | backend migrate command | `["/bin/sh","-c","while ! python manage.py check --database default > /dev/null 2>&1\ndo\n echo \"Database not ready\"\n sleep 2\ndone\n\necho \"Database is ready\"\n\npython manage.py migrate --no-input\n"]` |
|
||||
| `backend.migrate.restartPolicy` | backend migrate job restart policy | `Never` |
|
||||
| `backend.createsuperuser.command` | backend migrate command | `["/bin/sh","-c","while ! python manage.py check --database default > /dev/null 2>&1\ndo\n echo \"Database not ready\"\n sleep 2\ndone\n\necho \"Database is ready\"\n\npython manage.py createsuperuser --email $DJANGO_SUPERUSER_EMAIL --password $DJANGO_SUPERUSER_PASSWORD\n"]` |
|
||||
| `backend.createsuperuser.restartPolicy` | backend migrate job restart policy | `Never` |
|
||||
| `backend.job` | job dedicated to run a random management command, for example after a deployment | |
|
||||
| `backend.job.name` | The name to use to describe this job | `""` |
|
||||
| `backend.job.command` | The management command to execute | `[]` |
|
||||
| `backend.job.restartPolicy` | The restart policy for the job. | `Never` |
|
||||
| `backend.job.annotations` | Annotations to add to the job [default: argocd.argoproj.io/hook: PostSync] | |
|
||||
| `backend.cronjobs` | Cronjob name, schedule, command | `[]` |
|
||||
| `backend.probes.liveness.path` | Configure path for backend HTTP liveness probe | `/__heartbeat__` |
|
||||
| `backend.probes.liveness.targetPort` | Configure port for backend HTTP liveness probe | `nil` |
|
||||
| `backend.probes.liveness.initialDelaySeconds` | Configure initial delay for backend liveness probe | `10` |
|
||||
| `backend.probes.liveness.initialDelaySeconds` | Configure timeout for backend liveness probe | `10` |
|
||||
| `backend.probes.startup.path` | Configure path for backend HTTP startup probe | `nil` |
|
||||
| `backend.probes.startup.targetPort` | Configure port for backend HTTP startup probe | `nil` |
|
||||
| `backend.probes.startup.initialDelaySeconds` | Configure initial delay for backend startup probe | `nil` |
|
||||
| `backend.probes.startup.initialDelaySeconds` | Configure timeout for backend startup probe | `nil` |
|
||||
| `backend.probes.readiness.path` | Configure path for backend HTTP readiness probe | `/__lbheartbeat__` |
|
||||
| `backend.probes.readiness.targetPort` | Configure port for backend HTTP readiness probe | `nil` |
|
||||
| `backend.probes.readiness.initialDelaySeconds` | Configure initial delay for backend readiness probe | `10` |
|
||||
| `backend.probes.readiness.initialDelaySeconds` | Configure timeout for backend readiness probe | `10` |
|
||||
| `backend.resources` | Resource requirements for the backend container | `{}` |
|
||||
| `backend.nodeSelector` | Node selector for the backend Pod | `{}` |
|
||||
| `backend.tolerations` | Tolerations for the backend Pod | `[]` |
|
||||
| `backend.affinity` | Affinity for the backend Pod | `{}` |
|
||||
| `backend.persistence` | Additional volumes to create and mount on the backend. Used for debugging purposes | `{}` |
|
||||
| `backend.persistence.volume-name.size` | Size of the additional volume | |
|
||||
| `backend.persistence.volume-name.type` | Type of the additional volume, persistentVolumeClaim or emptyDir | |
|
||||
| `backend.persistence.volume-name.mountPath` | Path where the volume should be mounted to | |
|
||||
| `backend.extraVolumeMounts` | Additional volumes to mount on the backend. | `[]` |
|
||||
| `backend.extraVolumes` | Additional volumes to mount on the backend. | `[]` |
|
||||
| `backend.pdb.enabled` | Enable pdb on backend | `true` |
|
||||
| `backend.serviceAccountName` | Optional service account name to use for backend pods | `nil` |
|
||||
| `backend.themeCustomization.enabled` | Enable theme customization | `false` |
|
||||
| `backend.themeCustomization.file_content` | Content of the theme customization file. Must be a json object. | `""` |
|
||||
| `backend.themeCustomization.mount_path` | Path where the customization file will be mounted in the backend deployment. | `/app/impress/configuration/theme` |
|
||||
| `backend.celery.replicas` | Amount of celery replicas | `1` |
|
||||
| `backend.celery.command` | Override the celery container command | `[]` |
|
||||
| `backend.celery.args` | Override the celery container args | `["celery","-A","impress.celery_app","worker","-l","INFO","-n","impress@%h"]` |
|
||||
| `backend.celery.resources` | Resource requirements for the celery container | `{}` |
|
||||
| `backend.celery.probes.liveness.exec.command` | Override the celery container liveness probe command | `["/bin/sh","-c","celery -A impress.celery_app inspect ping -d impress@$HOSTNAME"]` |
|
||||
| `backend.celery.probes.liveness.initialDelaySeconds` | Initial delay for the celery container liveness probe | `60` |
|
||||
| `backend.celery.probes.liveness.timeoutSeconds` | Timeout for the celery container liveness probe | `5` |
|
||||
| `backend.celery.probes.readiness.exec.command` | Override the celery container readiness probe command | `["/bin/sh","-c","celery -A impress.celery_app inspect ping -d impress@$HOSTNAME"]` |
|
||||
| `backend.celery.probes.readiness.initialDelaySeconds` | Initial delay for the celery container readiness probe | `15` |
|
||||
| `backend.celery.probes.readiness.timeoutSeconds` | Timeout for the celery container readiness probe | `5` |
|
||||
| Name | Description | Value |
|
||||
| ----------------------------------------------------- | ----------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
||||
| `backend.command` | Override the backend container command | `[]` |
|
||||
| `backend.args` | Override the backend container args | `[]` |
|
||||
| `backend.replicas` | Amount of backend replicas | `3` |
|
||||
| `backend.shareProcessNamespace` | Enable share process namespace between containers | `false` |
|
||||
| `backend.sidecars` | Add sidecars containers to backend deployment | `[]` |
|
||||
| `backend.migrateJobAnnotations` | Annotations for the migrate job | `{}` |
|
||||
| `backend.jobs.ttlSecondsAfterFinished` | Period to wait before remove jobs | `30` |
|
||||
| `backend.jobs.backoffLimit` | Numbers of jobs retries | `2` |
|
||||
| `backend.securityContext.allowPrivilegeEscalation` | Whether to allow privilege escalation for the backend container | `false` |
|
||||
| `backend.securityContext.capabilities.drop` | List of capabilities to drop for the backend container | `["ALL"]` |
|
||||
| `backend.securityContext.runAsNonRoot` | Whether to run the backend container as a non-root user | `true` |
|
||||
| `backend.securityContext.seccompProfile.type` | Seccomp profile type for the backend container | `RuntimeDefault` |
|
||||
| `backend.envVars` | Configure backend container environment variables | `undefined` |
|
||||
| `backend.envVars.BY_VALUE` | Example environment variable by setting value directly | |
|
||||
| `backend.envVars.FROM_CONFIGMAP.configMapKeyRef.name` | Name of a ConfigMap when configuring env vars from a ConfigMap | |
|
||||
| `backend.envVars.FROM_CONFIGMAP.configMapKeyRef.key` | Key within a ConfigMap when configuring env vars from a ConfigMap | |
|
||||
| `backend.envVars.FROM_SECRET.secretKeyRef.name` | Name of a Secret when configuring env vars from a Secret | |
|
||||
| `backend.envVars.FROM_SECRET.secretKeyRef.key` | Key within a Secret when configuring env vars from a Secret | |
|
||||
| `backend.django.envVars` | Backend web deployment specific environment variables (not shared with celery worker) | |
|
||||
| `backend.podAnnotations` | Annotations to add to the backend Pod | `{}` |
|
||||
| `backend.dpAnnotations` | Annotations to add to the backend Deployment | `{}` |
|
||||
| `backend.service.type` | backend Service type | `ClusterIP` |
|
||||
| `backend.service.port` | backend Service listening port | `80` |
|
||||
| `backend.service.targetPort` | backend container listening port | `8000` |
|
||||
| `backend.service.annotations` | Annotations to add to the backend Service | `{}` |
|
||||
| `backend.migrate.command` | backend migrate command | `["/bin/sh","-c","while ! python manage.py check --database default > /dev/null 2>&1\ndo\n echo \"Database not ready\"\n sleep 2\ndone\n\necho \"Database is ready\"\n\npython manage.py migrate --no-input\n"]` |
|
||||
| `backend.migrate.restartPolicy` | backend migrate job restart policy | `Never` |
|
||||
| `backend.createsuperuser.command` | backend migrate command | `["/bin/sh","-c","while ! python manage.py check --database default > /dev/null 2>&1\ndo\n echo \"Database not ready\"\n sleep 2\ndone\n\necho \"Database is ready\"\n\npython manage.py createsuperuser --email $DJANGO_SUPERUSER_EMAIL --password $DJANGO_SUPERUSER_PASSWORD\n"]` |
|
||||
| `backend.createsuperuser.restartPolicy` | backend migrate job restart policy | `Never` |
|
||||
| `backend.job` | job dedicated to run a random management command, for example after a deployment | |
|
||||
| `backend.job.name` | The name to use to describe this job | `""` |
|
||||
| `backend.job.command` | The management command to execute | `[]` |
|
||||
| `backend.job.restartPolicy` | The restart policy for the job. | `Never` |
|
||||
| `backend.job.annotations` | Annotations to add to the job [default: argocd.argoproj.io/hook: PostSync] | |
|
||||
| `backend.cronjobs` | Cronjob name, schedule, command | `[]` |
|
||||
| `backend.probes.liveness.path` | Configure path for backend HTTP liveness probe | `/__lbheartbeat__` |
|
||||
| `backend.probes.liveness.targetPort` | Configure port for backend HTTP liveness probe | `nil` |
|
||||
| `backend.probes.liveness.initialDelaySeconds` | Configure initial delay for backend liveness probe | `10` |
|
||||
| `backend.probes.liveness.timeoutSeconds` | Configure timeout for backend liveness probe | `nil` |
|
||||
| `backend.probes.startup.path` | Configure path for backend HTTP startup probe | |
|
||||
| `backend.probes.startup.targetPort` | Configure port for backend HTTP startup probe | |
|
||||
| `backend.probes.startup.initialDelaySeconds` | Configure initial delay for backend startup probe | |
|
||||
| `backend.probes.startup.timeoutSeconds` | Configure timeout for backend startup probe | |
|
||||
| `backend.probes.readiness.path` | Configure path for backend HTTP readiness probe | `/__heartbeat__` |
|
||||
| `backend.probes.readiness.targetPort` | Configure port for backend HTTP readiness probe | `nil` |
|
||||
| `backend.probes.readiness.initialDelaySeconds` | Configure initial delay for backend readiness probe | `10` |
|
||||
| `backend.probes.readiness.timeoutSeconds` | Configure timeout for backend readiness probe | `nil` |
|
||||
| `backend.resources` | Resource requirements for the backend container | `{}` |
|
||||
| `backend.nodeSelector` | Node selector for the backend Pod | `{}` |
|
||||
| `backend.tolerations` | Tolerations for the backend Pod | `[]` |
|
||||
| `backend.affinity` | Affinity for the backend Pod | `{}` |
|
||||
| `backend.persistence` | Additional volumes to create and mount on the backend. Used for debugging purposes | `{}` |
|
||||
| `backend.persistence.volume-name.size` | Size of the additional volume | |
|
||||
| `backend.persistence.volume-name.type` | Type of the additional volume, persistentVolumeClaim or emptyDir | |
|
||||
| `backend.persistence.volume-name.mountPath` | Path where the volume should be mounted to | |
|
||||
| `backend.extraVolumeMounts` | Additional volumes to mount on the backend. | `[]` |
|
||||
| `backend.extraVolumes` | Additional volumes to mount on the backend. | `[]` |
|
||||
| `backend.pdb.enabled` | Enable pdb on backend | `true` |
|
||||
| `backend.serviceAccountName` | Optional service account name to use for backend pods | `nil` |
|
||||
| `backend.themeCustomization.enabled` | Enable theme customization | `false` |
|
||||
| `backend.themeCustomization.file_content` | Content of the theme customization file. Must be a json object. | `""` |
|
||||
| `backend.themeCustomization.mount_path` | Path where the customization file will be mounted in the backend deployment. | `/app/impress/configuration/theme` |
|
||||
| `backend.celery.replicas` | Amount of celery replicas | `1` |
|
||||
| `backend.celery.command` | Override the celery container command | `[]` |
|
||||
| `backend.celery.args` | Override the celery container args | `["celery","-A","impress.celery_app","worker","-l","INFO","-n","impress@%h"]` |
|
||||
| `backend.celery.resources` | Resource requirements for the celery container | `{}` |
|
||||
| `backend.celery.probes.liveness.exec.command` | Override the celery container liveness probe command | `["/bin/sh","-c","celery -A impress.celery_app inspect ping -d impress@$HOSTNAME"]` |
|
||||
| `backend.celery.probes.liveness.initialDelaySeconds` | Initial delay for the celery container liveness probe | `60` |
|
||||
| `backend.celery.probes.liveness.timeoutSeconds` | Timeout for the celery container liveness probe | `5` |
|
||||
| `backend.celery.probes.readiness.exec.command` | Override the celery container readiness probe command | `["/bin/sh","-c","celery -A impress.celery_app inspect ping -d impress@$HOSTNAME"]` |
|
||||
| `backend.celery.probes.readiness.initialDelaySeconds` | Initial delay for the celery container readiness probe | `15` |
|
||||
| `backend.celery.probes.readiness.timeoutSeconds` | Timeout for the celery container readiness probe | `5` |
|
||||
| `backend.celery.envVars` | Celery worker specific environment variables (not shared with the backend web deployment) | |
|
||||
|
||||
### frontend
|
||||
|
||||
@@ -168,9 +173,12 @@
|
||||
| `frontend.command` | Override the frontend container command | `[]` |
|
||||
| `frontend.args` | Override the frontend container args | `[]` |
|
||||
| `frontend.replicas` | Amount of frontend replicas | `3` |
|
||||
| `frontend.shareProcessNamespace` | Enable share process namefrontend between containers | `false` |
|
||||
| `frontend.shareProcessNamespace` | Enable share process namespace between containers | `false` |
|
||||
| `frontend.sidecars` | Add sidecars containers to frontend deployment | `[]` |
|
||||
| `frontend.securityContext` | Configure frontend Pod security context | `nil` |
|
||||
| `frontend.securityContext.allowPrivilegeEscalation` | Whether to allow privilege escalation for the frontend container | `false` |
|
||||
| `frontend.securityContext.capabilities.drop` | List of capabilities to drop for the frontend container | `["ALL"]` |
|
||||
| `frontend.securityContext.runAsNonRoot` | Whether to run the frontend container as a non-root user | `true` |
|
||||
| `frontend.securityContext.seccompProfile.type` | Seccomp profile type for the frontend container | `RuntimeDefault` |
|
||||
| `frontend.envVars` | Configure frontend container environment variables | `undefined` |
|
||||
| `frontend.envVars.BY_VALUE` | Example environment variable by setting value directly | |
|
||||
| `frontend.envVars.FROM_CONFIGMAP.configMapKeyRef.name` | Name of a ConfigMap when configuring env vars from a ConfigMap | |
|
||||
@@ -252,7 +260,10 @@
|
||||
| `yProvider.replicas` | Amount of yProvider replicas | `3` |
|
||||
| `yProvider.shareProcessNamespace` | Enable share process nameyProvider between containers | `false` |
|
||||
| `yProvider.sidecars` | Add sidecars containers to yProvider deployment | `[]` |
|
||||
| `yProvider.securityContext` | Configure yProvider Pod security context | `nil` |
|
||||
| `yProvider.securityContext.allowPrivilegeEscalation` | Whether to allow privilege escalation for the yProvider container | `false` |
|
||||
| `yProvider.securityContext.capabilities.drop` | List of capabilities to drop for the yProvider container | `["ALL"]` |
|
||||
| `yProvider.securityContext.runAsNonRoot` | Whether to run the yProvider container as a non-root user | `true` |
|
||||
| `yProvider.securityContext.seccompProfile.type` | Seccomp profile type for the yProvider container | `RuntimeDefault` |
|
||||
| `yProvider.envVars` | Configure yProvider container environment variables | `undefined` |
|
||||
| `yProvider.envVars.BY_VALUE` | Example environment variable by setting value directly | |
|
||||
| `yProvider.envVars.FROM_CONFIGMAP.configMapKeyRef.name` | Name of a ConfigMap when configuring env vars from a ConfigMap | |
|
||||
@@ -265,20 +276,18 @@
|
||||
| `yProvider.service.port` | yProvider Service listening port | `443` |
|
||||
| `yProvider.service.targetPort` | yProvider container listening port | `4444` |
|
||||
| `yProvider.service.annotations` | Annotations to add to the yProvider Service | `{}` |
|
||||
| `yProvider.probes.liveness.path` | Configure path for yProvider HTTP liveness probe | |
|
||||
| `yProvider.probes.liveness.path` | Configure path for yProvider HTTP liveness probe | `/ping` |
|
||||
| `yProvider.probes.liveness.initialDelaySeconds` | Configure initial delay for yProvider liveness probe | `10` |
|
||||
| `yProvider.probes.liveness.targetPort` | Configure port for yProvider HTTP liveness probe | |
|
||||
| `yProvider.probes.liveness.initialDelaySeconds` | Configure initial delay for yProvider liveness probe | |
|
||||
| `yProvider.probes.liveness.initialDelaySeconds` | Configure timeout for yProvider liveness probe | |
|
||||
| `yProvider.probes.liveness.timeoutSeconds` | Configure timeout for yProvider liveness probe | |
|
||||
| `yProvider.probes.startup.path` | Configure path for yProvider HTTP startup probe | |
|
||||
| `yProvider.probes.startup.targetPort` | Configure port for yProvider HTTP startup probe | |
|
||||
| `yProvider.probes.startup.initialDelaySeconds` | Configure initial delay for yProvider startup probe | |
|
||||
| `yProvider.probes.startup.initialDelaySeconds` | Configure timeout for yProvider startup probe | |
|
||||
| `yProvider.probes.startup.timeoutSeconds` | Configure timeout for yProvider startup probe | |
|
||||
| `yProvider.probes.readiness.path` | Configure path for yProvider HTTP readiness probe | |
|
||||
| `yProvider.probes.readiness.targetPort` | Configure port for yProvider HTTP readiness probe | |
|
||||
| `yProvider.probes.readiness.initialDelaySeconds` | Configure initial delay for yProvider readiness probe | |
|
||||
| `yProvider.probes.readiness.initialDelaySeconds` | Configure timeout for yProvider readiness probe | |
|
||||
| `yProvider.probes.liveness.path` | | `/ping` |
|
||||
| `yProvider.probes.liveness.initialDelaySeconds` | | `10` |
|
||||
| `yProvider.probes.readiness.timeoutSeconds` | Configure timeout for yProvider readiness probe | |
|
||||
| `yProvider.resources` | Resource requirements for the yProvider container | `{}` |
|
||||
| `yProvider.nodeSelector` | Node selector for the yProvider Pod | `{}` |
|
||||
| `yProvider.tolerations` | Tolerations for the yProvider Pod | `[]` |
|
||||
@@ -291,3 +300,31 @@
|
||||
| `yProvider.extraVolumes` | Additional volumes to mount on the yProvider. | `[]` |
|
||||
| `yProvider.pdb.enabled` | Enable pdb on yProvider | `true` |
|
||||
| `yProvider.serviceAccountName` | Optional service account name to use for yProvider pods | `nil` |
|
||||
|
||||
### docSpec
|
||||
|
||||
| Name | Description | Value |
|
||||
| -------------------------------------------------- | --------------------------------------------------------------- | ----------------------- |
|
||||
| `docSpec.enabled` | Enable docSpec deployment | `false` |
|
||||
| `docSpec.image.repository` | Repository to use to pull docSpec container image | `ghcr.io/docspecio/api` |
|
||||
| `docSpec.image.tag` | docSpec container tag | `2.6.3` |
|
||||
| `docSpec.image.pullPolicy` | docSpec container image pull policy | `IfNotPresent` |
|
||||
| `docSpec.command` | Override the docSpec container command | `[]` |
|
||||
| `docSpec.args` | Override the docSpec container args | `[]` |
|
||||
| `docSpec.replicas` | Amount of docSpec replicas | `1` |
|
||||
| `docSpec.securityContext.allowPrivilegeEscalation` | Whether to allow privilege escalation for the docSpec container | `false` |
|
||||
| `docSpec.securityContext.capabilities.drop` | List of capabilities to drop for the docSpec container | `["ALL"]` |
|
||||
| `docSpec.securityContext.runAsNonRoot` | Whether to run the docSpec container as a non-root user | `true` |
|
||||
| `docSpec.securityContext.seccompProfile.type` | Seccomp profile type for the docSpec container | `RuntimeDefault` |
|
||||
| `docSpec.envVars` | Configure docSpec container environment variables | `{}` |
|
||||
| `docSpec.service.type` | docSpec Service type | `ClusterIP` |
|
||||
| `docSpec.service.port` | docSpec Service listening port | `4000` |
|
||||
| `docSpec.service.targetPort` | docSpec container listening port | `4000` |
|
||||
| `docSpec.probes.liveness.path` | Configure path for docSpec HTTP liveness probe | `/health` |
|
||||
| `docSpec.probes.readiness.path` | Configure path for docSpec HTTP readiness probe | `/health` |
|
||||
| `docSpec.resources` | docSpec resources | `{}` |
|
||||
| `docSpec.nodeSelector` | Node selector for the docSpec Pod | `{}` |
|
||||
| `docSpec.tolerations` | Tolerations for the docSpec Pod | `[]` |
|
||||
| `docSpec.affinity` | Affinity for the docSpec Pod | `{}` |
|
||||
| `docSpec.extraVolumeMounts` | Additional volumes to mount on docSpec | `[]` |
|
||||
| `docSpec.extraVolumes` | Additional volumes to mount on docSpec | `[]` |
|
||||
|
||||
@@ -90,6 +90,26 @@ impress env vars
|
||||
{{- include "impress.env.transformDict" $workerScope.envVars -}}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
impress backend django env vars - combines common backend.envVars with backend.django.envVars
|
||||
*/}}
|
||||
{{- define "impress.backend.django.env" -}}
|
||||
{{- $topLevelScope := index . 0 -}}
|
||||
{{- $workerScope := index . 1 -}}
|
||||
{{- include "impress.env.transformDict" $workerScope.envVars -}}
|
||||
{{- include "impress.env.transformDict" (($workerScope.django | default dict).envVars | default dict) -}}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
impress celery env vars - combines common backend.envVars with backend.celery.envVars
|
||||
*/}}
|
||||
{{- define "impress.backend.celery.env" -}}
|
||||
{{- $topLevelScope := index . 0 -}}
|
||||
{{- $workerScope := index . 1 -}}
|
||||
{{- include "impress.env.transformDict" $workerScope.envVars -}}
|
||||
{{- include "impress.env.transformDict" ($workerScope.celery.envVars | default dict) -}}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Common labels
|
||||
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
{{- $envVars := include "impress.common.env" (list . .Values.backend) -}}
|
||||
{{- $envVars := include "impress.backend.django.env" (list . .Values.backend) -}}
|
||||
{{- $fullName := include "impress.backend.fullname" . -}}
|
||||
{{- $component := "backend" -}}
|
||||
apiVersion: apps/v1
|
||||
@@ -53,9 +53,10 @@ spec:
|
||||
env:
|
||||
{{- $envVars | indent 12 }}
|
||||
{{- end }}
|
||||
{{- if .Values.backend.envFrom }}
|
||||
{{- $envFrom := concat (.Values.backend.envFrom | default list) ((.Values.backend.django | default dict).envFrom | default list) }}
|
||||
{{- if $envFrom }}
|
||||
envFrom:
|
||||
{{- toYaml .Values.backend.envFrom | nindent 12 }}
|
||||
{{- toYaml $envFrom | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.backend.securityContext }}
|
||||
securityContext:
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
{{- $envVars := include "impress.common.env" (list . .Values.backend) -}}
|
||||
{{- $envVars := include "impress.backend.celery.env" (list . .Values.backend) -}}
|
||||
{{- $fullName := include "impress.celery.worker.fullname" . -}}
|
||||
{{- $component := "celery-worker" -}}
|
||||
apiVersion: apps/v1
|
||||
@@ -53,9 +53,10 @@ spec:
|
||||
env:
|
||||
{{- $envVars | indent 12 }}
|
||||
{{- end }}
|
||||
{{- if .Values.backend.envFrom }}
|
||||
{{- $envFrom := concat (.Values.backend.envFrom | default list) (.Values.backend.celery.envFrom | default list) }}
|
||||
{{- if $envFrom }}
|
||||
envFrom:
|
||||
{{- toYaml .Values.backend.envFrom | nindent 12 }}
|
||||
{{- toYaml $envFrom | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.backend.securityContext }}
|
||||
securityContext:
|
||||
|
||||
@@ -188,9 +188,9 @@ ingressMedia:
|
||||
nginx.ingress.kubernetes.io/configuration-snippet: |
|
||||
add_header Content-Security-Policy "default-src 'none'" always;
|
||||
|
||||
## @param serviceMedia.host
|
||||
## @param serviceMedia.port
|
||||
## @param serviceMedia.annotations
|
||||
## @param serviceMedia.host Hostname of the media storage backend (S3/MinIO) used by the media ingress
|
||||
## @param serviceMedia.port Port of the media storage backend
|
||||
## @param serviceMedia.annotations Annotations to add to the media ExternalName Service
|
||||
serviceMedia:
|
||||
host: minio.impress.svc.cluster.local
|
||||
port: 9000
|
||||
@@ -223,7 +223,10 @@ backend:
|
||||
ttlSecondsAfterFinished: 30
|
||||
backoffLimit: 2
|
||||
|
||||
## @param backend.securityContext Configure backend Pod security context
|
||||
## @param backend.securityContext.allowPrivilegeEscalation Whether to allow privilege escalation for the backend container
|
||||
## @param backend.securityContext.capabilities.drop List of capabilities to drop for the backend container
|
||||
## @param backend.securityContext.runAsNonRoot Whether to run the backend container as a non-root user
|
||||
## @param backend.securityContext.seccompProfile.type Seccomp profile type for the backend container
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
@@ -243,7 +246,7 @@ backend:
|
||||
envVars:
|
||||
<<: *commonEnvVars
|
||||
|
||||
## @skip backend.envFrom List of environment variables taken from Secrets or configMaps
|
||||
## @skip backend.envFrom List of environment variables taken from Secrets or configMaps, common to backend and celery worker
|
||||
envFrom: []
|
||||
# envFrom:
|
||||
# - secret:
|
||||
@@ -251,6 +254,13 @@ backend:
|
||||
# - configMapRef:
|
||||
# name: my-environment-variables
|
||||
|
||||
## @extra backend.django.envVars Backend web deployment specific environment variables (not shared with celery worker)
|
||||
## @skip backend.django.envVars
|
||||
## @skip backend.django.envFrom List of environment variables taken from Secrets or configMaps, specific to the backend web deployment
|
||||
django:
|
||||
envVars: {}
|
||||
envFrom: []
|
||||
|
||||
## @param backend.podAnnotations Annotations to add to the backend Pod
|
||||
podAnnotations: {}
|
||||
|
||||
@@ -330,15 +340,15 @@ backend:
|
||||
## @param backend.probes.liveness.path [nullable] Configure path for backend HTTP liveness probe
|
||||
## @param backend.probes.liveness.targetPort [nullable] Configure port for backend HTTP liveness probe
|
||||
## @param backend.probes.liveness.initialDelaySeconds [nullable] Configure initial delay for backend liveness probe
|
||||
## @param backend.probes.liveness.initialDelaySeconds [nullable] Configure timeout for backend liveness probe
|
||||
## @param backend.probes.startup.path [nullable] Configure path for backend HTTP startup probe
|
||||
## @param backend.probes.startup.targetPort [nullable] Configure port for backend HTTP startup probe
|
||||
## @param backend.probes.startup.initialDelaySeconds [nullable] Configure initial delay for backend startup probe
|
||||
## @param backend.probes.startup.initialDelaySeconds [nullable] Configure timeout for backend startup probe
|
||||
## @param backend.probes.liveness.timeoutSeconds [nullable] Configure timeout for backend liveness probe
|
||||
## @extra backend.probes.startup.path [nullable] Configure path for backend HTTP startup probe
|
||||
## @extra backend.probes.startup.targetPort [nullable] Configure port for backend HTTP startup probe
|
||||
## @extra backend.probes.startup.initialDelaySeconds [nullable] Configure initial delay for backend startup probe
|
||||
## @extra backend.probes.startup.timeoutSeconds [nullable] Configure timeout for backend startup probe
|
||||
## @param backend.probes.readiness.path [nullable] Configure path for backend HTTP readiness probe
|
||||
## @param backend.probes.readiness.targetPort [nullable] Configure port for backend HTTP readiness probe
|
||||
## @param backend.probes.readiness.initialDelaySeconds [nullable] Configure initial delay for backend readiness probe
|
||||
## @param backend.probes.readiness.initialDelaySeconds [nullable] Configure timeout for backend readiness probe
|
||||
## @param backend.probes.readiness.timeoutSeconds [nullable] Configure timeout for backend readiness probe
|
||||
probes:
|
||||
liveness:
|
||||
path: /__lbheartbeat__
|
||||
@@ -396,6 +406,9 @@ backend:
|
||||
## @param backend.celery.probes.readiness.exec.command Override the celery container readiness probe command
|
||||
## @param backend.celery.probes.readiness.initialDelaySeconds Initial delay for the celery container readiness probe
|
||||
## @param backend.celery.probes.readiness.timeoutSeconds Timeout for the celery container readiness probe
|
||||
## @extra backend.celery.envVars Celery worker specific environment variables (not shared with the backend web deployment)
|
||||
## @skip backend.celery.envVars
|
||||
## @skip backend.celery.envFrom List of environment variables taken from Secrets or configMaps, specific to celery worker
|
||||
celery:
|
||||
replicas: 1
|
||||
command: []
|
||||
@@ -410,6 +423,8 @@ backend:
|
||||
"-n",
|
||||
"impress@%h",
|
||||
]
|
||||
envVars: {}
|
||||
envFrom: []
|
||||
resources: {}
|
||||
probes:
|
||||
liveness:
|
||||
@@ -459,7 +474,10 @@ frontend:
|
||||
## @param frontend.sidecars Add sidecars containers to frontend deployment
|
||||
sidecars: []
|
||||
|
||||
## @param frontend.securityContext Configure frontend Pod security context
|
||||
## @param frontend.securityContext.allowPrivilegeEscalation Whether to allow privilege escalation for the frontend container
|
||||
## @param frontend.securityContext.capabilities.drop List of capabilities to drop for the frontend container
|
||||
## @param frontend.securityContext.runAsNonRoot Whether to run the frontend container as a non-root user
|
||||
## @param frontend.securityContext.seccompProfile.type Seccomp profile type for the frontend container
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
@@ -644,7 +662,10 @@ yProvider:
|
||||
## @param yProvider.sidecars Add sidecars containers to yProvider deployment
|
||||
sidecars: []
|
||||
|
||||
## @param yProvider.securityContext Configure yProvider Pod security context
|
||||
## @param yProvider.securityContext.allowPrivilegeEscalation Whether to allow privilege escalation for the yProvider container
|
||||
## @param yProvider.securityContext.capabilities.drop List of capabilities to drop for the yProvider container
|
||||
## @param yProvider.securityContext.runAsNonRoot Whether to run the yProvider container as a non-root user
|
||||
## @param yProvider.securityContext.seccompProfile.type Seccomp profile type for the yProvider container
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
@@ -688,22 +709,20 @@ yProvider:
|
||||
targetPort: 4444
|
||||
annotations: {}
|
||||
|
||||
## @extra yProvider.probes.liveness.path Configure path for yProvider HTTP liveness probe
|
||||
## @param yProvider.probes.liveness.path Configure path for yProvider HTTP liveness probe
|
||||
## @param yProvider.probes.liveness.initialDelaySeconds Configure initial delay for yProvider liveness probe
|
||||
## @extra yProvider.probes.liveness.targetPort Configure port for yProvider HTTP liveness probe
|
||||
## @extra yProvider.probes.liveness.initialDelaySeconds Configure initial delay for yProvider liveness probe
|
||||
## @extra yProvider.probes.liveness.initialDelaySeconds Configure timeout for yProvider liveness probe
|
||||
## @extra yProvider.probes.liveness.timeoutSeconds Configure timeout for yProvider liveness probe
|
||||
## @extra yProvider.probes.startup.path Configure path for yProvider HTTP startup probe
|
||||
## @extra yProvider.probes.startup.targetPort Configure port for yProvider HTTP startup probe
|
||||
## @extra yProvider.probes.startup.initialDelaySeconds Configure initial delay for yProvider startup probe
|
||||
## @extra yProvider.probes.startup.initialDelaySeconds Configure timeout for yProvider startup probe
|
||||
## @extra yProvider.probes.startup.timeoutSeconds Configure timeout for yProvider startup probe
|
||||
## @extra yProvider.probes.readiness.path Configure path for yProvider HTTP readiness probe
|
||||
## @extra yProvider.probes.readiness.targetPort Configure port for yProvider HTTP readiness probe
|
||||
## @extra yProvider.probes.readiness.initialDelaySeconds Configure initial delay for yProvider readiness probe
|
||||
## @extra yProvider.probes.readiness.initialDelaySeconds Configure timeout for yProvider readiness probe
|
||||
## @extra yProvider.probes.readiness.timeoutSeconds Configure timeout for yProvider readiness probe
|
||||
probes:
|
||||
liveness:
|
||||
## @param yProvider.probes.liveness.path
|
||||
## @param yProvider.probes.liveness.initialDelaySeconds
|
||||
path: /ping
|
||||
initialDelaySeconds: 10
|
||||
|
||||
@@ -760,7 +779,10 @@ docSpec:
|
||||
## @param docSpec.replicas Amount of docSpec replicas
|
||||
replicas: 1
|
||||
|
||||
## @param docSpec.securityContext Configure docSpec Pod security context
|
||||
## @param docSpec.securityContext.allowPrivilegeEscalation Whether to allow privilege escalation for the docSpec container
|
||||
## @param docSpec.securityContext.capabilities.drop List of capabilities to drop for the docSpec container
|
||||
## @param docSpec.securityContext.runAsNonRoot Whether to run the docSpec container as a non-root user
|
||||
## @param docSpec.securityContext.seccompProfile.type Seccomp profile type for the docSpec container
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
@@ -781,13 +803,16 @@ docSpec:
|
||||
# - configMapRef:
|
||||
# name: my-environment-variables
|
||||
|
||||
## @param docSpec.service Configure docSpec service
|
||||
## @param docSpec.service.type docSpec Service type
|
||||
## @param docSpec.service.port docSpec Service listening port
|
||||
## @param docSpec.service.targetPort docSpec container listening port
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 4000
|
||||
targetPort: 4000
|
||||
|
||||
## @param docSpec.probes Configure docSpec probes
|
||||
## @param docSpec.probes.liveness.path Configure path for docSpec HTTP liveness probe
|
||||
## @param docSpec.probes.readiness.path Configure path for docSpec HTTP readiness probe
|
||||
probes:
|
||||
liveness:
|
||||
path: /health
|
||||
|
||||
Reference in New Issue
Block a user