tenure-helm-chart/values.yaml at main · tenurehq/tenure-helm-chart · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
# mode determines whether the chart deploys its own MongoDB or connects
# to an external one.
#   bundled  - Deploys a StatefulSet MongoDB alongside Tenure.
#   external - Connects to an existing MongoDB (e.g., Atlas, managed DB).
mode: bundled

image:
  repository: tenureai/tenure
  # If tag is empty, the Chart's appVersion is used at render time.
  tag: ""
  pullPolicy: IfNotPresent

replicaCount: 1
disableJobs: false

backup:
  exportsEnabled: true
  importsEnabled: true

service:
  type: ClusterIP
  port: 5757

ingress:
  enabled: false
  className: ""
  annotations: {}
  hosts: []
  tls: []

resources: {}

nodeSelector: {}
tolerations: []
affinity: {}

# Defaults to "team" for all Helm-based installations.
identity:
  userId: ""

database:
  bundled:
    enabled: true
    password: tenure
    image:
      repository: mongodb/mongodb-atlas-local
      tag: "8"
    persistence:
      enabled: true
      storageClass: ""
      accessMode: ReadWriteOnce
      size: 8Gi
    resources: {}
  external:
    uri: ""
    tls:
      enabled: false
      caCertSecret: ""

# Secret management. If existingSecret is provided, it is mounted directly
# and must contain keys: api-token, master.key, belief.key.
# In bundled mode, leaving existingSecret empty causes Helm to generate
# secrets automatically. In external mode, existingSecret is required.
secrets:
  existingSecret: ""
  # Only used when existingSecret is empty and mode is bundled.
  apiToken: ""
  masterKey: ""
  beliefKey: ""

observability:
  otlpEndpoint: ""

podSecurityContext:
  runAsNonRoot: true
  runAsUser: 1000
  runAsGroup: 1000
  fsGroup: 1000

containerSecurityContext:
  allowPrivilegeEscalation: false
  readOnlyRootFilesystem: true
  capabilities:
    drop:
      - ALL

env: {}