values.yaml

# Default values for api7ee3.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

## @section Global parameters
## Please, note that this will override the parameters, including dependencies, configured to use the global value
##
global:
  ## @param global.storageClass Global StorageClass for Persistent Volume(s)
  ##
  storageClass: ""

dashboard:
  replicaCount: 1
  # Specifies the name of Secret for dashboard TLS configuration, and files store under /app/certs directory
  keyCertSecret: ""
  image:
    repository: api7/api7-ee-3-integrated
    pullPolicy: Always
    # Overrides the image tag whose default is the chart appVersion.
    tag: "v3.8.18"
  # Resources of the deployment.
  # It has a higher priority than the common resources configuration:
  # when this field is configured, it is used first in the deployment,
  # otherwise the common resources configuration is used.
  # resources:
  #   limits:
  #     cpu: 100m
  #     memory: 128Mi
  #   requests:
  #     cpu: 100m
  #     memory: 128Mi

  extraEnvVars: []
  extraVolumes: []
  extraVolumeMounts: []
  podLabels: {}
  # -- Topology Spread Constraints for pod assignment
  # https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
  # The value is evaluated as a template
  topologySpreadConstraints: []
  livenessProbe:
    initialDelaySeconds: 180
    periodSeconds: 10
    failureThreshold: 30
  readinessProbe:
    initialDelaySeconds: 10
    periodSeconds: 3
    failureThreshold: 3

dp_manager:
  replicaCount: 1
  image:
    repository: api7/api7-ee-dp-manager
    pullPolicy: Always
  # Overrides the image tag whose default is the chart appVersion.
    tag: "v3.8.18"
  # Resources of the deployment.
  # It has a higher priority than the common resources configuration:
  # when this field is configured, it is used first in the deployment,
  # otherwise the common resources configuration is used.
  # resources:
  #   limits:
  #     cpu: 100m
  #     memory: 128Mi
  #   requests:
  #     cpu: 100m
  #     memory: 128Mi

  extraEnvVars: []
  extraVolumes: []
  extraVolumeMounts: []
  podLabels: {}
  # -- Topology Spread Constraints for pod assignment
  # https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
  # The value is evaluated as a template
  topologySpreadConstraints: []
  livenessProbe:
    initialDelaySeconds: 60
    periodSeconds: 3
    failureThreshold: 10
  readinessProbe:
    initialDelaySeconds: 10
    periodSeconds: 3
    failureThreshold: 3

developer_portal:
  replicaCount: 1
  # Specifies the name of Secret for developer portal TLS configuration, and files store under /app/certs directory
  keyCertSecret: ""
  image:
    repository: api7/api7-ee-developer-portal
    pullPolicy: Always
    # Overrides the image tag whose default is the chart appVersion.
    tag: "v3.8.18"

  extraEnvVars: []
  extraVolumes: []
  extraVolumeMounts: []
  podLabels: {}
  # -- Topology Spread Constraints for pod assignment
  # https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
  # The value is evaluated as a template
  topologySpreadConstraints: []
  livenessProbe:
    initialDelaySeconds: 60
    periodSeconds: 3
    failureThreshold: 10
  readinessProbe:
    initialDelaySeconds: 10
    periodSeconds: 3
    failureThreshold: 3

imagePullSecret: ""
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

dashboard_service:
  type: ClusterIP
  annotations: {}
  port: 7080
  tlsPort: 7443
  # nodePort: 30080
  # tlsNodePort: 30443
  ingress:
    enabled: false
    className: ""
    annotations: {}
      # kubernetes.io/ingress.class: nginx
      # kubernetes.io/tls-acme: "true"
    hosts:
      - host: dashboard.local
        paths:
          - path: /
            pathType: ImplementationSpecific
            # backend:
            #   service:
            #     name: api7ee3-dashboard
            #     port:
            #       number: 7943
    tls: []
    #  - secretName: dashboard-tls
    #    hosts:
    #      - dashboard.local

dp_manager_service:
  type: ClusterIP
  # loadBalancerClass: "my-loadbalancer-class"
  annotations: {}
  port: 7900
  tlsPort: 7943
  ingress:
    enabled: false
    className: ""
    annotations: {}
      # kubernetes.io/ingress.class: nginx
      # kubernetes.io/tls-acme: "true"
    hosts:
      - host: dp-manager.local
        paths:
          - path: /
            pathType: ImplementationSpecific
            # backend:
            #   service:
            #     name: api7ee3-dp-manager
            #     port:
            #       number: 7943
    tls: []
    #  - secretName: dp-manager-tls
    #    hosts:
    #      - dp-manager.local

developer_portal_service:
  type: ClusterIP
  annotations: {}
  port: 4321
  ingress:
    enabled: false
    className: ""
    annotations: {}
      # kubernetes.io/ingress.class: nginx
      # kubernetes.io/tls-acme: "true"
    hosts:
      - host: developer-portal.local
        paths:
          - path: /
            pathType: ImplementationSpecific
            # backend:
            #   service:
            #     name: api7ee3-developer-portal
            #     port:
            #       number: 7943
    tls: []
    #  - secretName: developer-portal-tls
    #    hosts:
    #      - developer-portal.local

resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

nodeSelector: {}

tolerations: []

affinity: {}

# -- Topology Spread Constraints for pod assignment
# https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
# The value is evaluated as a template
topologySpreadConstraints: []

busybox:
  image:
    repository: docker.io/busybox
    tag: 1.28

prometheus:
  builtin: true
  fullnameOverride: "api7-prometheus"
  alertmanager:
    enabled: false
  server:
    image:
      registry: docker.io
      repository: api7/prometheus
      tag: 2.48.1-debian-11-r0
    existingSecret: ""  # name of existing secret to mount the path of prometheus client certs.
    enableRemoteWriteReceiver: true
    enableAdminAPI: true
    serviceAccount:
      create: false
    rbac:
      create: false
    persistence:
      enabled: true
      size: 120Gi
    service:
      type: ClusterIP
      ports:
        http: 9090
    configuration: ""

postgresql:
  builtin: true
  fullnameOverride: "api7-postgresql"
  image:
    registry: docker.io
    repository: api7/postgresql
    tag: 15.4.0-debian-11-r45
  primary:
    persistence:
      size: 256Gi
    service:
      ports:
        postgresql: 5432
  readReplicas:
    persistence:
      size: 256Gi
    service:
      ports:
        postgresql: 5432
  auth:
    username: api7ee
    password: changeme
    database: api7ee

dashboard_configuration:
  server:
    listen:
      disable: true
      host: "0.0.0.0"
      port: 7080
    tls:
      disable: false
      host: "0.0.0.0"
      port: 7443
      key_file: ""    # the file path of private key, (e.g. /app/certs/tls.key)
      cert_file: ""   # the file path of certificate, (e.g. /app/certs/tls.crt)
    status:
      disable: false
      host: "127.0.0.1"
      port: 7081
    pprof:
      enable: false
      host: "127.0.0.1"
      port: 7082
  session_options_config:
    same_site: "lax"  # means the value SameSiteNoneMode
    secure: false
    max_age: 86400
  log:
    # -- Allowed values: `debug`, `info`, `warn`, `error`
    level: warn
    output: stderr
  database:
    dsn: "postgres://api7ee:changeme@api7-postgresql:5432/api7ee"
    max_open_conns: 30
    max_idle_time: 30s
  prometheus:
    addr: "http://api7-prometheus-server:9090"
    query_path_prefix: ""
    timeout: "30s"
    basic_auth:  # access the prometheus with basic-auth
      username: ""  # Basic-auth username. If the username is empty, basic-auth authentication is not performed when requesting prometheus.
      password: ""
    tls:
      server_name: ""
      insecure_skip_verify: false
      enable_client_cert: false
      key_file: ""  # the file path of the private key for requesting prometheus, (e.g. /app/prometheus/certs/tls.key)
      cert_file: ""  # the file path of the certificate for requesting prometheus, (e.g. /app/prometheus/certs/tls.crt)
      ca_file: ""   # the file path of the ca to verify the prometheus tls server. (e.g. /app/prometheus/certs/ca.crt)
    whitelist:
      - "/api/v1/query_range"
      - "/api/v1/query"
      - "/api/v1/format_query"
      - "/api/v1/series"
      - "/api/v1/labels"
  console:
    addr: "http://127.0.0.1:3000"
  audit:
    retention_days: 60
  consumer_proxy:
    enable: false
    cache_success_count: 512
    cache_success_ttl: 60
    cache_failure_count: 512
    cache_failure_ttl: 60
  developer_proxy:
    cache_success_count: 256
    cache_success_ttl: 15
    cache_failure_count: 256
    cache_failure_ttl: 15
  # admin_api_address: "https://dash.api7.ai"
  # dp_manager_address:
  #   - "https://dpm.api7.ai"
  # fallback_cp:
  #   cron_spec: "@every 1m"
  #   aws_s3:
  #     access_key: "access"
  #     secret_key: "secret"
  #     region: "ap-south-1"
  #     resource_bucket: "to-push-resource-data"
  #     config_bucket: "to-push-config-data"
  #   azure_blob:
  #     account_name: "$YOUR_ACCOUNT_NAME"
  #     account_key: "$YOUR_ACCOUNT_KEY"
  #     resource_container: yaml
  #     config_container: config
  #     endpoint: "$YOUR_AZURE_BLOB_ENDPOINT"

  security:
    # content_security_policy: "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:"

    # -- A list of network origins (IPv4 addresses, IPv4 CIDRs, IPv6 addresses or IPv6 CIDRs) from which to trust
    # request's headers("X-Forwarded-For", "X-Real-IP") that contain alternative client IP.
    trusted_proxies: ["0.0.0.0/0", "::/0"]
    ip_restriction:
      # -- empty means allow all
      allow_list: []
      # -0 empty means deny none
      deny_list: []
      message: "Access denied"
      response_code: 403
  # license:
  #   file_path: "/app/licenses/license.txt" # the file path of license file, (e.g. /app/licenses/license.txt)

dp_manager_configuration:
  server:
    listen:
      host: "0.0.0.0"
      port: 7900
    tls:
      host: "0.0.0.0"
      port: 7943
    status:
      disable: false
      host: "127.0.0.1"
      port: 7901
    pprof:
      enable: false
      host: "127.0.0.1"
      port: 7902
  log:
    # -- Allowed values: `debug`, `info`, `warn`, `error`
    level: warn
    output: stderr
  database:
    dsn: "postgres://api7ee:changeme@api7-postgresql:5432/api7ee"
    max_open_conns: 30
    max_idle_time: 30s
  prometheus:
    addr: "http://api7-prometheus-server:9090"
    remote_write_path: "/api/v1/write"
    timeout: "30s"
    basic_auth:  #  access the prometheus with basic-auth
      username: ""  # Basic-auth username. If the username is empty, basic-auth authentication is not performed when requesting prometheus.
      password: ""
    tls:
      server_name: ""
      insecure_skip_verify: false
      enable_client_cert: false
      key_file: ""  # the file path of the private key for requesting prometheus, (e.g. /app/prometheus/certs/tls.key)
      cert_file: ""  # the file path of the certificate for requesting prometheus, (e.g. /app/prometheus/certs/tls.crt)
      ca_file: ""   # the file path of the ca to verify the prometheus tls server. (e.g. /app/prometheus/certs/ca.crt)
  consumer_cache:
    size: 50000
    max_ttl: 2h
    evict_interval: 5s
  rate_limit:
    enable: false
    time_window: 1  # unit: second
    count: 1000

developer_portal_configuration:
  enable: true
  server:
    listen:
      host: "0.0.0.0"
      port: 4321
      tls:
        enabled: true
        key_file: ""    # the file path of private key, (e.g. /app/certs/tls.key)
        cert_file: ""   # the file path of certificate, (e.g. /app/certs/tls.crt)
    status:
      disable: false
      host: "127.0.0.1"
      port: 4322
  log:
    # -- Allowed values: `debug`, `info`, `warn`, `error`
    level: warn
    output: stderr
  database:
    dsn: "postgres://api7ee:changeme@api7-postgresql:5432/api7ee"
    max_open_conns: 30
    max_idle_time: 30s