blob: ef275202c221c7ca00f8f15fa0a640005443fd90 [file] [log] [blame]
images:
busybox:
registry: docker.io
tag: latest
# Registry used for container images created by this project
registry:
# The registry name must NOT contain a trailing slash
name:
ImagePullSecret:
# Leave blank, if no ImagePullSecret is needed.
name: image-pull-secret
# If set to false, the gerrit chart expects either a ImagePullSecret
# with the name configured above to be present on the cluster or that no
# credentials are needed.
create: false
username:
password:
version: latest
imagePullPolicy: Always
# Additional ImagePullSecrets that already exist and should be used by the
# pods of this chart. E.g. to pull busybox from dockerhub.
additionalImagePullSecrets: []
# Additional labels that should be applied to all resources
additionalLabels: {}
storageClasses:
# Storage class used for storing logs and other pod-specific persisted data
default:
# If create is set to false, an existing StorageClass with the given
# name is expected to exist in the cluster. Setting create to true will
# create a storage class with the parameters given below.
name: default
create: false
provisioner: kubernetes.io/aws-ebs
reclaimPolicy: Delete
# Use the parameters key to set all parameters needed for the provisioner
parameters:
type: gp2
fsType: ext4
mountOptions: []
allowVolumeExpansion: false
# Storage class used for storing git repositories. Has to provide RWM access.
shared:
# If create is set to false, an existing StorageClass with RWM access
# mode and the given name has to be provided.
name: shared-storage
create: false
provisioner: nfs
reclaimPolicy: Delete
# Use the parameters key to set all parameters needed for the provisioner
parameters:
mountOptions: vers=4.1
mountOptions: []
allowVolumeExpansion: false
nfsWorkaround:
enabled: false
chownOnStartup: false
idDomain: localdomain.com
networkPolicies:
enabled: false
dnsPorts:
- 53
- 8053
gitRepositoryStorage:
externalPVC:
use: false
name: git-repositories-pvc
size: 5Gi
logStorage:
enabled: false
externalPVC:
use: false
name: gerrit-logs-pvc
size: 5Gi
cleanup:
enabled: false
additionalPodLabels: {}
schedule: "0 0 * * *"
retentionDays: 14
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 100m
memory: 256Mi
caCert:
ingress:
enabled: false
host:
# The maximum body size to allow for requests. Use "0" to allow unlimited
# reuqest body sizes.
maxBodySize: 50m
additionalAnnotations:
kubernetes.io/ingress.class: nginx
# nginx.ingress.kubernetes.io/server-alias: example.com
# nginx.ingress.kubernetes.io/whitelist-source-range: xxx.xxx.xxx.xxx
tls:
enabled: false
secret:
create: true
# `name` will only be used, if `create` is set to false to bind an
# existing secret. Otherwise the name will be automatically generated to
# avoid conflicts between multiple chart installations.
name:
# `cert`and `key` will only be used, if the secret will be created by
# this chart.
cert: |-
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
key: |-
-----BEGIN RSA PRIVATE KEY-----
-----END RSA PRIVATE KEY-----
gitGC:
image: k8sgerrit/git-gc
tolerations: []
nodeSelector: {}
affinity: {}
additionalPodLabels: {}
schedule: 0 6,18 * * *
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 100m
memory: 256Mi
logging:
persistence:
enabled: true
size: 1Gi
gerrit:
images:
gerritInit: k8sgerrit/gerrit-init
gerrit: k8sgerrit/gerrit
tolerations: []
topologySpreadConstraints: {}
nodeSelector: {}
affinity: {}
additionalAnnotations: {}
additionalPodLabels: {}
replicas: 1
updatePartition: 0
# The memory limit has to be higher than the configures heap-size for Java!
resources:
requests:
cpu: 1
memory: 5Gi
limits:
cpu: 1
memory: 6Gi
persistence:
enabled: true
size: 10Gi
# If no value for probeScheme, the probe will use the default HTTP
probeScheme: HTTP
livenessProbe:
initialDelaySeconds: 30
periodSeconds: 5
readinessProbe:
initialDelaySeconds: 5
periodSeconds: 1
startupProbe:
initialDelaySeconds: 10
periodSeconds: 30
gracefulStopTimeout: 90
# The general NetworkPolicy rules implemented by this chart may be too restrictive
# for some setups, e.g. when trying to replicate to a Gerrit replica. Here
# custom rules may be added to whitelist some additional connections.
networkPolicy:
ingress: []
egress: []
# An example for an egress rule to allow replication to a Gerrit replica
# installed with the gerrit-replica setup in the same cluster and namespace
# by using the service as the replication destination
# (e.g. http://gerrit-replica-git-backend-service:80/git/${name}.git):
#
# - to:
# - podSelector:
# matchLabels:
# app: git-backend
service:
additionalAnnotations: {}
loadBalancerSourceRanges: []
type: NodePort
externalTrafficPolicy: Cluster
http:
port: 80
ssh:
enabled: false
port: 29418
# `gerrit.keystore` expects a base64-encoded Java-keystore
# Since Java keystores are binary files, adding the unencoded content and
# automatic encoding using helm does not work here.
keystore:
index:
# Either `lucene` or `elasticsearch`
type: lucene
pluginManagement:
plugins: []
# A plugin packaged in the gerrit.war-file
# - name: download-commands
# A plugin packaged in the gerrit.war-file that will also be installed as a
# lib
# - name: replication
# installAsLibrary: true
# A plugin that will be downloaded on startup
# - name: delete-project
# url: https://example.com/gerrit-plugins/delete-project.jar
# sha1:
# installAsLibrary: false
# Only downloaded plugins will be cached. This will be ignored, if no plugins
# are downloaded.
libs: []
cache:
enabled: false
size: 1Gi
priorityClassName:
etc:
# Some values are expected to have a specific value for the deployment installed
# by this chart to work. These are marked with `# FIXED`.
# Do not change them!
config:
gerrit.config: |-
[gerrit]
basePath = git # FIXED
serverId = gerrit-1
# The canonical web URL has to be set to the Ingress host, if an Ingress
# is used. If a LoadBalancer-service is used, this should be set to the
# LoadBalancer's external IP. This can only be done manually after installing
# the chart, when you know the external IP the LoadBalancer got from the
# cluster.
canonicalWebUrl = http://example.com/
disableReverseDnsLookup = true
[index]
type = LUCENE
[auth]
type = DEVELOPMENT_BECOME_ANY_ACCOUNT
[httpd]
# If using an ingress use proxy-http or proxy-https
listenUrl = proxy-http://*:8080/
requestLog = true
gracefulStopTimeout = 1m
[sshd]
listenAddress = off
[transfer]
timeout = 120 s
[user]
name = Gerrit Code Review
email = gerrit@example.com
anonymousCoward = Unnamed User
[cache]
directory = cache
[container]
user = gerrit # FIXED
javaHome = /usr/lib/jvm/java-17-openjdk # FIXED
javaOptions = -Djavax.net.ssl.trustStore=/var/gerrit/etc/keystore # FIXED
javaOptions = -Xms200m
# Has to be lower than 'gerrit.resources.limits.memory'. Also
# consider memories used by other applications in the container.
javaOptions = -Xmx4g
replication.config: |-
[gerrit]
autoReload = false
replicateOnStartup = true
defaultForceUpdate = true
# [remote "replica"]
# url = http://gerrit-replica.example.com/git/${name}.git
# replicationDelay = 0
# timeout = 30
secret:
secure.config: |-
# Password for the keystore added as value for 'gerritReplica.keystore'
# Only needed, if SSL is enabled.
#[httpd]
# sslKeyPassword = gerrit
# Credentials for replication targets
# [remote "replica"]
# username = git
# password = secret
# ssh_host_ecdsa_key: |-
# -----BEGIN EC PRIVATE KEY-----
# -----END EC PRIVATE KEY-----
# ssh_host_ecdsa_key.pub: ecdsa-sha2-nistp256...
additionalConfigMaps:
# - name:
# subDir:
# data:
# file.txt: test