values.yaml

# Default values for crownlabs.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

global:
  version: "" # default set while packaging

createClusterRoles: true

frontend-app:
  replicaCount: 1
  image:
    repository: crownlabs/frontend-app
  ingress:
    hostname: crownlabs.example.com
    path: /
  configuration:
    backend:
      graphql: https://graphql.example.com
    oidc:
      clientId: <client-id>
      providerUrl: https://auth.example.com/auth/

qlkube:
  replicaCount: 1
  image:
    repository: crownlabs/qlkube
  rbacResourcesName: crownlabs-qlkube
  ingress:
    hostname: qlkube.crownlabs.example.com
  configuration:
    exposedAPIs:
      apis:
        - crownlabs.polito.it
    subscriptions:
      apis:
        - group: crownlabs.polito.it
          resources:
            - resource: instances
              version: v1alpha2
              mapping: itPolitoCrownlabsV1alpha2Instance
              listMapping: itPolitoCrownlabsV1alpha2InstanceList
            - resource: templates
              version: v1alpha2
              mapping: itPolitoCrownlabsV1alpha2Template
    wrappers:
      fileName: wrappers.js
      resources:
        - type: itPolitoCrownlabsV1alpha2Template
          fieldWrapper: TemplateCrownlabsPolitoItTemplateRef
          nameWrapper: templateWrapper
          queryFieldsRequired:
            - name
            - namespace
          parents:
            - itPolitoCrownlabsV1alpha2Instance

instance-operator:
  replicaCount: 1
  image:
    repository: crownlabs/instance-operator
  rbacResourcesName: crownlabs-instance-operator
  configurations:
    generic:
      whitelistLabels: crownlabs.polito.it/operator-selector=production
      websiteBaseUrl: crownlabs.example.com
      instancesAuthUrl: https://crownlabs.example.com/auth
    containerEnvironmentOptions:
      tag: ""
      vncImage: crownlabs/tigervnc
      websockifyImage: crownlabs/websockify
      instmetricsServerEndpoint: crownlabs-instmetrics.crownlabs-production:9090
    containerVmSnapshots:
      kanikoImage: gcr.io/kaniko-project/executor
      exportImage: "crownlabs/img-exporter"
      exportImageTag: ""
    privateContainerRegistry:
      url: registry.crownlabs.example.com
      secretName: registry-credentials
    maxConcurrentReconciles: 1

tenant-operator:
  replicaCount: 1
  image:
    repository: crownlabs/tenant-operator
  rbacResourcesName: crownlabs-tenant-operator
  configurations:
    targetLabel: crownlabs.polito.it/operator-selector=production
    keycloak:
      url: "https://auth.crownlabs.example.com/"
      loginRealm: master
      targetRealm: crownlabs
      targetClient: k8s
      user: username
      pass: password
    maxConcurrentReconciles: 1
    tenantNamespaceKeepAlive: 168h
  webhook:
    deployment:
      webhookBypassGroups: system:masters,system:serviceaccounts,kubernetes:admin
      baseWorkspaces: utilities
    enableMutating: true

bastion-operator:
  replicaCount: 1
  image:
    repositoryBastion: crownlabs/ssh-bastion
    repositorySidecar: crownlabs/bastion-operator
  rbacResourcesName: crownlabs-bastion-operator
  serviceAnnotations: {}
  service:
    type: LoadBalancer
    port: 22
    externalTrafficPolicy: Cluster

image-list:
  replicaCount: 1
  image:
    repository: crownlabs/crownlabs-image-list
  rbacResourcesName: crownlabs-image-list
  configurations:
    registryUrl: http://docker-registry.docker-registry:5000
    advRegistryName: registry.crownlabs.example.com
    imageListName: crownlabs-virtual-machine-images
    updateInterval: 60

delete-stale-instances:
  image:
    repository: crownlabs/delete-stale-instances
  rbacResourcesName: crownlabs-delete-stale-instances
  configurations:
    dryRun: true
    schedule: "*/15 * * * *"

exam-agent:
  replicaCount: 1
  configurations:
    allowedIPs: ""
    targetNamespace: "crownlabs-exam"
  exposition:
    host: exams.crownlabs.polito.it
    basePath: "/api"
  image:
    repository: crownlabs/exam-agent
    pullPolicy: IfNotPresent

instmetrics:
  image:
    repository: crownlabs/instmetrics
  configurations:
    runtimeEndpoint: unix:///run/dockershim.sock
    containerRuntime: /run/dockershim.sock
    dockerSocket: /var/run/docker.sock
    connectionTimeout:  10s
    updatePeriod: 4s
    grpcPort: 9090

policies:
  ingressHostnamePattern: s??????.sandbox.crownlabs.polito.it
  namespaceSelector:
    matchExpressions:
      - key: crownlabs.polito.it/type
        operator: In
        values:
        - sandbox