nameOverride | string | "" | Override the module name used in resource naming |
fullnameOverride | string | "" | Override the full release name used in resource naming |
commonLabels | map | {} | Labels added to every resource created by this module |
image.repository | string | "docker.io/automatischio/automatisch" | Automatisch container image repository |
image.tag | string | "0.15.0" | Automatisch container image tag |
image.pullPolicy | string | "IfNotPresent" | Kubernetes image pull policy |
imagePullSecrets | list | [] | Secrets for authenticating against private container registries |
encryptionKey | string | required | Encryption key for securing connection credentials |
appSecretKey | string | required | Application secret key for session encryption |
webhookSecretKey | string | required | Webhook signing key for payload verification |
automatisch.webAppUrl | string | "http://localhost:3000" | External public URL of the Automatisch web application |
automatisch.appEnv | string | "production" | Application runtime environment (production or development) |
automatisch.extraEnv | list | [] | Additional environment variables for the Automatisch container |
database.external.host | string | "" | Hostname of an external PostgreSQL database (when subchart is disabled) |
database.external.port | string | "5432" | Port of the external PostgreSQL database |
database.external.name | string | "automatisch" | External PostgreSQL database name |
database.external.username | string | "automatisch" | External PostgreSQL username |
database.external.password | string | "" | External PostgreSQL password |
database.external.existingSecret | string | "" | Existing secret containing external database password |
database.external.existingSecretPasswordKey | string | "password" | Key within existing secret for external database password |
redis_config.external.host | string | "" | Hostname of an external Redis server (when subchart is disabled) |
redis_config.external.port | string | "6379" | Port of the external Redis server |
redis_config.external.existingSecret | string | "" | Existing secret for external Redis authentication |
serviceAccount.create | bool | true | Create a dedicated ServiceAccount for Automatisch pods |
serviceAccount.name | string | "" | Override name for the created ServiceAccount |
serviceAccount.annotations | map | {} | Annotations to add to the ServiceAccount |
service.type | string | "ClusterIP" | Kubernetes Service type (ClusterIP, NodePort, LoadBalancer) |
service.port | int | 80 | Port exposed by the Kubernetes Service (routes to 3000) |
service.annotations | map | {} | Annotations to attach to the Kubernetes Service |
ingress.enabled | bool | false | Enable Kubernetes Ingress resource creation |
ingress.ingressClassName | string | "traefik" | IngressClass controller name |
ingress.annotations | map | {} | Annotations to attach to the Ingress resource |
ingress.hosts | list | [] | List of hostnames and routing rules |
ingress.tls | list | [] | TLS certificates and secret configuration for Ingress |
probes.startup.enabled | bool | true | Enable startup probe |
probes.startup.initialDelaySeconds | int | 10 | Initial delay in seconds before checking startup probe |
probes.startup.periodSeconds | int | 5 | Check interval in seconds for startup probe |
probes.startup.timeoutSeconds | int | 3 | Timeout in seconds for startup probe response |
probes.startup.failureThreshold | int | 30 | Number of failed attempts before container restart |
probes.liveness.enabled | bool | true | Enable liveness probe |
probes.liveness.initialDelaySeconds | int | 0 | Initial delay in seconds before checking liveness probe |
probes.liveness.periodSeconds | int | 15 | Check interval in seconds for liveness probe |
probes.liveness.timeoutSeconds | int | 5 | Timeout in seconds for liveness probe response |
probes.liveness.failureThreshold | int | 3 | Failure count triggering container restart |
probes.readiness.enabled | bool | true | Enable readiness probe |
probes.readiness.initialDelaySeconds | int | 0 | Initial delay in seconds before checking readiness probe |
probes.readiness.periodSeconds | int | 10 | Check interval in seconds for readiness probe |
probes.readiness.timeoutSeconds | int | 5 | Timeout in seconds for readiness probe response |
probes.readiness.failureThreshold | int | 3 | Failure count triggering traffic removal |
resources.requests.cpu | string | "100m" | CPU request for the Automatisch container |
resources.requests.memory | string | "128Mi" | Memory request for the Automatisch container |
resources.limits.cpu | string | "500m" | CPU limit for the Automatisch container |
resources.limits.memory | string | "512Mi" | Memory limit for the Automatisch container |
podSecurityContext.runAsUser | int | 65510 | UID for unprivileged non-root pod execution |
podSecurityContext.runAsGroup | int | 65510 | GID for unprivileged non-root pod execution |
podSecurityContext.runAsNonRoot | bool | true | Enforce container execution as non-root user |
podSecurityContext.fsGroup | int | 65510 | Filesystem group ID for volume ownership |
podSecurityContext.seccompProfile.type | string | "RuntimeDefault" | Pod-level seccomp profile |
securityContext.allowPrivilegeEscalation | bool | false | Prevent gaining more privileges than parent process |
securityContext.capabilities.drop | list | ["ALL"] | Linux kernel capabilities dropped from container |
securityContext.runAsUser | int | 65510 | Dedicated unprivileged container UID |
securityContext.runAsGroup | int | 65510 | Dedicated unprivileged container GID |
securityContext.runAsNonRoot | bool | true | Enforce non-root execution inside container |
nodeSelector | map | {} | Node labels required for pod scheduling |
tolerations | list | [] | Tolerations for pod assignment to tainted nodes |
affinity | map | {} | Affinity and anti-affinity scheduling rules |
topologySpreadConstraints | list | [] | Pod distribution rules across failure domains |
priorityClassName | string | "" | PriorityClass assigned to the pod |
terminationGracePeriodSeconds | int | 30 | Seconds to wait before forcibly terminating pod |
podLabels | map | {} | Additional custom labels added to Automatisch pods |
podAnnotations | map | {} | Additional custom annotations added to Automatisch pods |
extraVolumes | list | [{name: "logs", emptyDir: {}}] | Additional volumes mounted into Automatisch pods |
extraVolumeMounts | list | [{name: "logs", mountPath: "/automatisch/packages/backend/logs"}] | Additional volume mounts in the Automatisch container |
extraManifests | list | [] | Additional raw Kubernetes manifests to apply with module |
postgresql.enabled | bool | true | Deploy dedicated PostgreSQL database subchart |
postgresql.architecture | string | "standalone" | PostgreSQL architecture mode |
postgresql.auth.database | string | "automatisch" | Database name created on first run |
postgresql.auth.username | string | "automatisch" | Database user created on first run |
postgresql.auth.password | string | "change-me-please-db-password!" | Password for the PostgreSQL database user |
postgresql.image.repository | string | "docker.io/library/postgres" | PostgreSQL container image repository |
postgresql.image.tag | string | "18.6-trixie" | PostgreSQL container image tag |
postgresql.persistence.enabled | bool | true | Enable persistent storage for PostgreSQL data |
postgresql.persistence.size | string | "8Gi" | Persistent Volume size requested for PostgreSQL |
postgresql.resources.requests.cpu | string | "100m" | CPU request for PostgreSQL subchart |
postgresql.resources.requests.memory | string | "256Mi" | Memory request for PostgreSQL subchart |
postgresql.resources.limits.cpu | string | "500m" | CPU limit for PostgreSQL subchart |
postgresql.resources.limits.memory | string | "512Mi" | Memory limit for PostgreSQL subchart |
redis.enabled | bool | true | Deploy dedicated Redis subchart |
redis.architecture | string | "standalone" | Redis architecture mode |
redis.image.repository | string | "docker.io/library/redis" | Redis container image repository |
redis.image.tag | string | "8.8.2" | Redis container image tag |
redis.persistence.enabled | bool | true | Enable persistent storage for Redis data |
redis.persistence.size | string | "8Gi" | Persistent Volume size requested for Redis |
redis.resources.requests.cpu | string | "50m" | CPU request for Redis subchart |
redis.resources.requests.memory | string | "64Mi" | Memory request for Redis subchart |
redis.resources.limits.cpu | string | "200m" | CPU limit for Redis subchart |
redis.resources.limits.memory | string | "128Mi" | Memory limit for Redis subchart |