macanhhuy
d6dddbbc91
Build + push image / build-and-push (push) Successful in 1m8s
Replace eu.gcr.io/vnc-development image refs with gitea.saas.vnc.biz/vnciac, swap gcr-json-key pull secret for gitea-registry, and update CI/deploy docs from GitLab CI to Gitea Actions.
136 lines
3.1 KiB
YAML
136 lines
3.1 KiB
YAML
# Default values for owncloud.
|
|
# This is a YAML-formatted file.
|
|
# Declare variables to be passed into your templates.
|
|
|
|
replicaCount: 1
|
|
|
|
image:
|
|
repository: gitea.saas.vnc.biz/vnciac/vnctalk-prosody
|
|
pullPolicy: IfNotPresent
|
|
# Overrides the image tag whose default is the chart appVersion.
|
|
tag: release-13.0.6-vnc
|
|
|
|
imagePullSecrets: []
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
serviceAccount:
|
|
# Specifies whether a service account should be created
|
|
create: true
|
|
# Annotations to add to the service account
|
|
annotations: {}
|
|
# The name of the service account to use.
|
|
# If not set and create is true, a name is generated using the fullname template
|
|
name: ""
|
|
|
|
podAnnotations: {}
|
|
|
|
podSecurityContext: {}
|
|
# fsGroup: 2000
|
|
|
|
securityContext: {}
|
|
# capabilities:
|
|
# drop:
|
|
# - ALL
|
|
# readOnlyRootFilesystem: true
|
|
# runAsNonRoot: true
|
|
# runAsUser: 1000
|
|
|
|
tlsUpdates:
|
|
enabled: false
|
|
secretName: none
|
|
|
|
# Pre-upgrade and post-upgrade Helm hook Jobs that detect the database
|
|
# state and run the appropriate SQL migrations from db-customization/.
|
|
# The hooks use the same image and DB credentials as the Prosody container.
|
|
dbMigration:
|
|
enabled: true
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 5280
|
|
annotations: {}
|
|
|
|
node:
|
|
name: prosody-internal
|
|
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
# kubernetes.io/ingress.class: nginx
|
|
# kubernetes.io/tls-acme: "true"
|
|
tls:
|
|
- hosts:
|
|
- "xmpp.chart.example"
|
|
secretName: xmpp-tls
|
|
hosts:
|
|
- host: "xmpp.chart.example"
|
|
paths: ["/xmpp-websocket*"]
|
|
service:
|
|
name: xmpp-ws-ingress
|
|
port:
|
|
number: 5280
|
|
name: http
|
|
- host: "xmpp.chart.example"
|
|
paths: ["/*"]
|
|
service:
|
|
name: xmpp-plain-ingress
|
|
port:
|
|
number: 8080
|
|
name: http
|
|
|
|
ingress_additional_host:
|
|
enabled: false
|
|
|
|
# Non-sensitive environment variables rendered as literal env values.
|
|
# Sensitive credentials must NOT go here — use secretEnv below.
|
|
env: {}
|
|
|
|
# Credentials mounted from a pre-provisioned Secret via secretKeyRef.
|
|
# Create the Secret out-of-band (e.g. kubectl create secret generic
|
|
# prosody-secrets --from-literal=prosodyDBpass=... ) and reference it here.
|
|
secretEnv:
|
|
# Name of an existing Secret in the release namespace.
|
|
existingSecret: ""
|
|
# Map of environment variable name -> key within the Secret.
|
|
keys: {}
|
|
# prosodyDBpass: prosodyDBpass
|
|
# fcmApiKey: fcmApiKey
|
|
# fileShareSecret: fileShareSecret
|
|
# avatarUploadPass: avatarUploadPass
|
|
|
|
# Dedicated resource requests and limits for each container in the pod.
|
|
# `resourcesProsody` is the XMPP server (the real workload); `resourcesSidecar`
|
|
# is the static-file/redirect http-server (a tiny slice). Each accepts the
|
|
# standard Kubernetes resources shape with `requests` and `limits`.
|
|
resourcesProsody:
|
|
requests:
|
|
cpu: 2000m
|
|
memory: 2048Mi
|
|
limits:
|
|
cpu: 4000m
|
|
memory: 4096Mi
|
|
|
|
resourcesSidecar:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 64Mi
|
|
limits:
|
|
cpu: 200m
|
|
memory: 128Mi
|
|
|
|
autoscaling:
|
|
enabled: false
|
|
minReplicas: 1
|
|
maxReplicas: 10
|
|
targetCPUUtilizationPercentage: 90
|
|
|
|
pdb:
|
|
maxUnavailable: "50%"
|
|
|
|
nodeSelector: {}
|
|
|
|
tolerations: []
|
|
|
|
affinity: {}
|