From beea0a05e17134e8aa05e14e03179c92fc64cf29 Mon Sep 17 00:00:00 2001 From: Jeroen Vermeulen Date: Tue, 18 Jun 2024 10:26:53 +0200 Subject: [PATCH 1/6] Fixed dependencies of open-zaak chart, updated ReadMe --- charts/open-zaak/Chart.yaml | 22 +++++++++++----------- charts/open-zaak/README.md | 15 +++++++++++++++ 2 files changed, 26 insertions(+), 11 deletions(-) diff --git a/charts/open-zaak/Chart.yaml b/charts/open-zaak/Chart.yaml index 9b0f13d..236e79d 100644 --- a/charts/open-zaak/Chart.yaml +++ b/charts/open-zaak/Chart.yaml @@ -6,14 +6,14 @@ type: application version: 0.8.1 appVersion: "1.7.1" -# dependencies: -# - name: postgresql -# version: ~10.12.0 -# repository: https://charts.bitnami.com/bitnami -# tags: -# - postgresql -# - name: redis -# version: ~13.0.0 -# repository: https://charts.bitnami.com/bitnami -# tags: -# - redis +dependencies: + - name: postgresql + version: ~15.5.5 + repository: https://charts.bitnami.com/bitnami + tags: + - postgresql + - name: redis + version: ~19.5.2 + repository: https://charts.bitnami.com/bitnami + tags: + - redis diff --git a/charts/open-zaak/README.md b/charts/open-zaak/README.md index 0555fc0..c8b40d4 100644 --- a/charts/open-zaak/README.md +++ b/charts/open-zaak/README.md @@ -23,6 +23,21 @@ helm install open-zaak open-zaak/open-zaak \ --set "ingress.hosts={open-zaak.gemeente.nl}" ``` +If you want to use your own instance of Redis and Postgres instead, you can disable the subcharts: + +```bash + +helm install open-zaak open-zaak/open-zaak \ +--set "tags.redis=false" \ +--set "tags.postgresql=false" \ +--set "settings.database.host=postgres.gemeente.nl" \ +--set "settings.cache.default=redis.gemeente.nl:6379/0" \ +--set "settings.cache.axes=redis.gemeente.nl:6379/0" \ +--set "settings.allowedHosts=open-zaak.gemeente.nl" \ +--set "ingress.enabled=true" \ +--set "ingress.hosts={open-zaak.gemeente.nl}" +``` + :warning: The default settings are unsafe for production usage. Configure proper secrets, enable persistency and consider High Availability (HA) for the database and the application. ## Chart and Open Zaak versions alignment From c8a2afc076276dfc0e0010070fb57193f7e970fe Mon Sep 17 00:00:00 2001 From: Jeroen Vermeulen Date: Tue, 18 Jun 2024 11:09:47 +0200 Subject: [PATCH 2/6] Fix values for Postgres --- charts/open-zaak/values.yaml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/charts/open-zaak/values.yaml b/charts/open-zaak/values.yaml index f869477..c6b124f 100644 --- a/charts/open-zaak/values.yaml +++ b/charts/open-zaak/values.yaml @@ -59,7 +59,7 @@ ingress: annotations: {} # kubernetes.io/ingress.class: nginx # kubernetes.io/tls-acme: "true" - className: "" + className: "" hosts: - open-zaak.gemeente.nl tls: [] @@ -186,8 +186,9 @@ postgresql: size: 1Gi existingClaim: null - postgresqlDatabase: open-zaak - postgresqlPassword: SUPER-SECRET + auth: + database: open-zaak + postgresPassword: SUPER-SECRET ################## # Redis subchart # From c070415e7026c9ecfd639744367d22c35a923ed5 Mon Sep 17 00:00:00 2001 From: Jeroen Vermeulen Date: Tue, 18 Jun 2024 13:24:13 +0200 Subject: [PATCH 3/6] Fixed values for Postgres. Updated ReadMe. --- charts/open-zaak/README.md | 6 +++++- charts/open-zaak/values.yaml | 8 +++++--- 2 files changed, 10 insertions(+), 4 deletions(-) diff --git a/charts/open-zaak/README.md b/charts/open-zaak/README.md index c8b40d4..b92ba86 100644 --- a/charts/open-zaak/README.md +++ b/charts/open-zaak/README.md @@ -23,6 +23,10 @@ helm install open-zaak open-zaak/open-zaak \ --set "ingress.hosts={open-zaak.gemeente.nl}" ``` +:warning: The default settings are unsafe for production usage. Configure proper secrets, enable persistency and consider High Availability (HA) for the database and the application. + +:warning: When you uninstall the chart, the PVCs will not be deleted. This can cause confusion during testing. + If you want to use your own instance of Redis and Postgres instead, you can disable the subcharts: ```bash @@ -38,7 +42,7 @@ helm install open-zaak open-zaak/open-zaak \ --set "ingress.hosts={open-zaak.gemeente.nl}" ``` -:warning: The default settings are unsafe for production usage. Configure proper secrets, enable persistency and consider High Availability (HA) for the database and the application. +You will probably need to set more values to configure the connection to your own Redis and Postgres instances. ## Chart and Open Zaak versions alignment diff --git a/charts/open-zaak/values.yaml b/charts/open-zaak/values.yaml index c6b124f..3ffc957 100644 --- a/charts/open-zaak/values.yaml +++ b/charts/open-zaak/values.yaml @@ -186,9 +186,11 @@ postgresql: size: 1Gi existingClaim: null - auth: - database: open-zaak - postgresPassword: SUPER-SECRET + global: + postgresql: + auth: + database: open-zaak + postgresPassword: SUPER-SECRET ################## # Redis subchart # From 3fbd195e8ce008959d25ec3e9f4b959b3bf0b805 Mon Sep 17 00:00:00 2001 From: Jeroen Vermeulen Date: Tue, 18 Jun 2024 13:48:41 +0200 Subject: [PATCH 4/6] Improved ReadMe --- charts/open-zaak/README.md | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/charts/open-zaak/README.md b/charts/open-zaak/README.md index b92ba86..81a1957 100644 --- a/charts/open-zaak/README.md +++ b/charts/open-zaak/README.md @@ -30,16 +30,15 @@ helm install open-zaak open-zaak/open-zaak \ If you want to use your own instance of Redis and Postgres instead, you can disable the subcharts: ```bash - helm install open-zaak open-zaak/open-zaak \ ---set "tags.redis=false" \ ---set "tags.postgresql=false" \ ---set "settings.database.host=postgres.gemeente.nl" \ ---set "settings.cache.default=redis.gemeente.nl:6379/0" \ ---set "settings.cache.axes=redis.gemeente.nl:6379/0" \ ---set "settings.allowedHosts=open-zaak.gemeente.nl" \ ---set "ingress.enabled=true" \ ---set "ingress.hosts={open-zaak.gemeente.nl}" + --set "tags.redis=false" \ + --set "tags.postgresql=false" \ + --set "settings.database.host=postgres.gemeente.nl" \ + --set "settings.cache.default=redis.gemeente.nl:6379/0" \ + --set "settings.cache.axes=redis.gemeente.nl:6379/0" \ + --set "settings.allowedHosts=open-zaak.gemeente.nl" \ + --set "ingress.enabled=true" \ + --set "ingress.hosts={open-zaak.gemeente.nl}" ``` You will probably need to set more values to configure the connection to your own Redis and Postgres instances. From f114f24775479566e474f2b6df16c025b2540ac4 Mon Sep 17 00:00:00 2001 From: Jeroen Vermeulen Date: Tue, 18 Jun 2024 15:07:33 +0200 Subject: [PATCH 5/6] Updated Readme --- charts/open-zaak/README.md | 102 ++++++++++++++++++------------------- 1 file changed, 51 insertions(+), 51 deletions(-) diff --git a/charts/open-zaak/README.md b/charts/open-zaak/README.md index 81a1957..7f0293b 100644 --- a/charts/open-zaak/README.md +++ b/charts/open-zaak/README.md @@ -56,57 +56,57 @@ table below describes the supported versions ## Configuration -| Parameter | Description | Default | -| --------- | ----------- | ------- | -| `tags.postgresql` | Install PostgreSQL subchart | `true` | -| `tags.redis` | Install Redis subchart | `true` | -| `image.repository` | The repository of the Docker image | `openzaak/open-zaak` | +| Parameter | Description | Default | +| --------- | ----------- |------------------------------------------| +| `tags.postgresql` | Install PostgreSQL subchart | `true` | +| `tags.redis` | Install Redis subchart | `true` | +| `image.repository` | The repository of the Docker image | `openzaak/open-zaak` | | `image.tag` | The tag of the Docker image | `""` uses `.Chart.AppVersion` by default | -| `replicaCount` | The number of replicas | `1` | -| `podLabels` | Additional labels to be set on the open-zaak pods | `{}` | -| `ingress.enabled` | Expose the application through an ingress | `false` | -| `ingress.annotations` | Additional annotations on the API ingress | `{}` | -| `ingress.hosts` | Ingress hosts | `"{open-zaak.gemeente.nl}"` | -| `ingress.tls` | Ingress TLS settings | `"[]"` | -| `persistence.enabled` | Enable persistency for application media | `false` | -| `persistence.storageClassName` | Storage class name for the PVC creation, must support RWX | `""` | -| `persistence.size` | The size of the application media persistent volume | `"1Gi"` | -| `persistence.existingClaim` | Use an existing claim for application media | `null` | -| `existingSecret` | Refer to an existing secret to avoid managing secrets through Helm. See templates/secret.yaml for required contents of your existing secret | `null` | -| `initContainers.volumePerms` | Run the file-permission fix init container (for upgrades from Open Zaak < 1.5) | `true` | -| `settings.allowedHosts` | A comma-separated list of hosts allowed by the application | `"open-zaak.gemeente.nl"` | -| `settings.useXForwardedHost` | Whether to rely on the `X-Forwarded-Host` header from ingress for host detection | `false` | -| `settings.secretKey` | The secret key of the application | `"SOME-RANDOM-SECRET"` | -| `settings.database.host` | The hostname of PostgreSQL | `"open-zaak-postgresql"` | -| `settings.database.port` | The port of PostgreSQL | `5432` | -| `settings.database.username` | The username of PostgreSQL | `"postgres"` | -| `settings.database.password` | The password of PostgreSQL | `"SUPER-SECRET"` | -| `settings.database.name` | The database name of PostgreSQL | `"open-zaak"` | -| `settings.database.sslmode` | The SSL-mode used by the postgres client. See [docs](https://www.postgresql.org/docs/current/libpq-ssl.html) for more info | `"prefer"` | -| `settings.numProxies` | The number of reverse proxies between client and backend container. Set this to 2 if exposing the application through an ingress. This chart deploys one nginx reverse proxy already. | `1` | -| `settings.cache.default` | The Redis cache for the default cache | `"open-zaak-redis-master:6379/0"` | -| `settings.cache.axes` | The Redis cache for the axes cache | `"open-zaak-redis-master:6379/0"` | -| `settings.email.host` | The hostname of the SMTP server | `"localhost"` | -| `settings.email.port` | The port of the SMTP server | `25` | -| `settings.email.username` | The username of the SMTP server | `""` | -| `settings.email.password` | The password of the SMTP server | `""` | -| `settings.email.useTLS` | Use TLS for connecting to SMTP server | `false` | -| `settings.jwtExpiry` | The expiry time for JWT tokens | `3600` | -| `settings.cmis.enabled` | Enable CMIS | `false` | -| `settings.cmis.mapperFile` | The CMIS mapper file | `""` | -| `settings.sentry.dsn` | The DSN for Sentry Logging | `""` | -| `settings.isHttps` | Used to construct absolute URLs and controls a variety of security settings | `true` | -| `settings.debug` | Only set this to True on a local development environment. Various other security settings are derived from this setting | `false` | -| `nginx.podLabels` | Additional labels to be set on the nginx pods | `{}` | -| `postgresql.persistence.enabled` | Enable PostgreSQL persistency | `false` | -| `postgresql.persistence.size` | Configure PostgreSQL size | `"1Gi"` | -| `postgresql.persistence.existingClaim` | Use an existing persistent volume claim | `null` | -| `postgresql.postgresqlDatabase` | The PostgreSQL database name | `"open-zaak"` | -| `postgresql.postgresqlPassword` | The PostgreSQL administrative password | `"SUPER-SECRET"` | -| `redis.usePassword` | Use a Redis password | `false` | -| `redis.cluster.enabled` | Enable Redis cluster | `false` | -| `redis.persistence.existingClaim` | Use existing persistent volume claim for Redis | `""` | -| `redis.master.persistence.enabled` | Enable persistency for Redis master | `false` | -| `redis.master.persistence.size` | The size of the Redis master persistent volume | `"1Gi"` | +| `replicaCount` | The number of replicas | `1` | +| `podLabels` | Additional labels to be set on the open-zaak pods | `{}` | +| `ingress.enabled` | Expose the application through an ingress | `false` | +| `ingress.annotations` | Additional annotations on the API ingress | `{}` | +| `ingress.hosts` | Ingress hosts | `"{open-zaak.gemeente.nl}"` | +| `ingress.tls` | Ingress TLS settings | `"[]"` | +| `persistence.enabled` | Enable persistency for application media | `false` | +| `persistence.storageClassName` | Storage class name for the PVC creation, must support RWX | `""` | +| `persistence.size` | The size of the application media persistent volume | `"1Gi"` | +| `persistence.existingClaim` | Use an existing claim for application media | `null` | +| `existingSecret` | Refer to an existing secret to avoid managing secrets through Helm. See templates/secret.yaml for required contents of your existing secret | `null` | +| `initContainers.volumePerms` | Run the file-permission fix init container (for upgrades from Open Zaak < 1.5) | `true` | +| `settings.allowedHosts` | A comma-separated list of hosts allowed by the application | `"open-zaak.gemeente.nl"` | +| `settings.useXForwardedHost` | Whether to rely on the `X-Forwarded-Host` header from ingress for host detection | `false` | +| `settings.secretKey` | The secret key of the application | `"SOME-RANDOM-SECRET"` | +| `settings.database.host` | The hostname of PostgreSQL | `"open-zaak-postgresql"` | +| `settings.database.port` | The port of PostgreSQL | `5432` | +| `settings.database.username` | The username of PostgreSQL | `"postgres"` | +| `settings.database.password` | The password of PostgreSQL | `"SUPER-SECRET"` | +| `settings.database.name` | The database name of PostgreSQL | `"open-zaak"` | +| `settings.database.sslmode` | The SSL-mode used by the postgres client. See [docs](https://www.postgresql.org/docs/current/libpq-ssl.html) for more info | `"prefer"` | +| `settings.numProxies` | The number of reverse proxies between client and backend container. Set this to 2 if exposing the application through an ingress. This chart deploys one nginx reverse proxy already. | `1` | +| `settings.cache.default` | The Redis cache for the default cache | `"open-zaak-redis-master:6379/0"` | +| `settings.cache.axes` | The Redis cache for the axes cache | `"open-zaak-redis-master:6379/0"` | +| `settings.email.host` | The hostname of the SMTP server | `"localhost"` | +| `settings.email.port` | The port of the SMTP server | `25` | +| `settings.email.username` | The username of the SMTP server | `""` | +| `settings.email.password` | The password of the SMTP server | `""` | +| `settings.email.useTLS` | Use TLS for connecting to SMTP server | `false` | +| `settings.jwtExpiry` | The expiry time for JWT tokens | `3600` | +| `settings.cmis.enabled` | Enable CMIS | `false` | +| `settings.cmis.mapperFile` | The CMIS mapper file | `""` | +| `settings.sentry.dsn` | The DSN for Sentry Logging | `""` | +| `settings.isHttps` | Used to construct absolute URLs and controls a variety of security settings | `true` | +| `settings.debug` | Only set this to True on a local development environment. Various other security settings are derived from this setting | `false` | +| `nginx.podLabels` | Additional labels to be set on the nginx pods | `{}` | +| `postgresql.persistence.enabled` | Enable PostgreSQL persistency | `false` | +| `postgresql.persistence.size` | Configure PostgreSQL size | `"1Gi"` | +| `postgresql.persistence.existingClaim` | Use an existing persistent volume claim | `null` | +| `postgresql.global.postgresql.auth.database` | The PostgreSQL database name | `"open-zaak"` | +| `postgresql.global.postgresql.auth.postgresqlPassword` | The PostgreSQL administrative password | `"SUPER-SECRET"` | +| `redis.usePassword` | Use a Redis password | `false` | +| `redis.cluster.enabled` | Enable Redis cluster | `false` | +| `redis.persistence.existingClaim` | Use existing persistent volume claim for Redis | `""` | +| `redis.master.persistence.enabled` | Enable persistency for Redis master | `false` | +| `redis.master.persistence.size` | The size of the Redis master persistent volume | `"1Gi"` | Check [values.yaml](./values.yaml) for all the possible configuration options. From a7e5e67150d7b9c69fc646516cdd88b1dfe52a52 Mon Sep 17 00:00:00 2001 From: Jeroen Vermeulen Date: Tue, 18 Jun 2024 20:09:23 +0200 Subject: [PATCH 6/6] Fixed values for subcharts --- charts/open-zaak/README.md | 99 ++++++++++++++++++------------------ charts/open-zaak/values.yaml | 21 ++++---- 2 files changed, 59 insertions(+), 61 deletions(-) diff --git a/charts/open-zaak/README.md b/charts/open-zaak/README.md index 7f0293b..b80b961 100644 --- a/charts/open-zaak/README.md +++ b/charts/open-zaak/README.md @@ -56,57 +56,56 @@ table below describes the supported versions ## Configuration -| Parameter | Description | Default | -| --------- | ----------- |------------------------------------------| -| `tags.postgresql` | Install PostgreSQL subchart | `true` | -| `tags.redis` | Install Redis subchart | `true` | -| `image.repository` | The repository of the Docker image | `openzaak/open-zaak` | -| `image.tag` | The tag of the Docker image | `""` uses `.Chart.AppVersion` by default | -| `replicaCount` | The number of replicas | `1` | -| `podLabels` | Additional labels to be set on the open-zaak pods | `{}` | -| `ingress.enabled` | Expose the application through an ingress | `false` | -| `ingress.annotations` | Additional annotations on the API ingress | `{}` | -| `ingress.hosts` | Ingress hosts | `"{open-zaak.gemeente.nl}"` | -| `ingress.tls` | Ingress TLS settings | `"[]"` | -| `persistence.enabled` | Enable persistency for application media | `false` | -| `persistence.storageClassName` | Storage class name for the PVC creation, must support RWX | `""` | -| `persistence.size` | The size of the application media persistent volume | `"1Gi"` | -| `persistence.existingClaim` | Use an existing claim for application media | `null` | -| `existingSecret` | Refer to an existing secret to avoid managing secrets through Helm. See templates/secret.yaml for required contents of your existing secret | `null` | -| `initContainers.volumePerms` | Run the file-permission fix init container (for upgrades from Open Zaak < 1.5) | `true` | -| `settings.allowedHosts` | A comma-separated list of hosts allowed by the application | `"open-zaak.gemeente.nl"` | -| `settings.useXForwardedHost` | Whether to rely on the `X-Forwarded-Host` header from ingress for host detection | `false` | -| `settings.secretKey` | The secret key of the application | `"SOME-RANDOM-SECRET"` | -| `settings.database.host` | The hostname of PostgreSQL | `"open-zaak-postgresql"` | -| `settings.database.port` | The port of PostgreSQL | `5432` | -| `settings.database.username` | The username of PostgreSQL | `"postgres"` | -| `settings.database.password` | The password of PostgreSQL | `"SUPER-SECRET"` | -| `settings.database.name` | The database name of PostgreSQL | `"open-zaak"` | -| `settings.database.sslmode` | The SSL-mode used by the postgres client. See [docs](https://www.postgresql.org/docs/current/libpq-ssl.html) for more info | `"prefer"` | -| `settings.numProxies` | The number of reverse proxies between client and backend container. Set this to 2 if exposing the application through an ingress. This chart deploys one nginx reverse proxy already. | `1` | -| `settings.cache.default` | The Redis cache for the default cache | `"open-zaak-redis-master:6379/0"` | -| `settings.cache.axes` | The Redis cache for the axes cache | `"open-zaak-redis-master:6379/0"` | -| `settings.email.host` | The hostname of the SMTP server | `"localhost"` | -| `settings.email.port` | The port of the SMTP server | `25` | -| `settings.email.username` | The username of the SMTP server | `""` | -| `settings.email.password` | The password of the SMTP server | `""` | -| `settings.email.useTLS` | Use TLS for connecting to SMTP server | `false` | -| `settings.jwtExpiry` | The expiry time for JWT tokens | `3600` | -| `settings.cmis.enabled` | Enable CMIS | `false` | -| `settings.cmis.mapperFile` | The CMIS mapper file | `""` | -| `settings.sentry.dsn` | The DSN for Sentry Logging | `""` | -| `settings.isHttps` | Used to construct absolute URLs and controls a variety of security settings | `true` | -| `settings.debug` | Only set this to True on a local development environment. Various other security settings are derived from this setting | `false` | -| `nginx.podLabels` | Additional labels to be set on the nginx pods | `{}` | -| `postgresql.persistence.enabled` | Enable PostgreSQL persistency | `false` | -| `postgresql.persistence.size` | Configure PostgreSQL size | `"1Gi"` | -| `postgresql.persistence.existingClaim` | Use an existing persistent volume claim | `null` | +| Parameter | Description | Default | +|--------------------------------------------------------| ----------- |------------------------------------------| +| `tags.postgresql` | Install PostgreSQL subchart | `true` | +| `tags.redis` | Install Redis subchart | `true` | +| `image.repository` | The repository of the Docker image | `openzaak/open-zaak` | +| `image.tag` | The tag of the Docker image | `""` uses `.Chart.AppVersion` by default | +| `replicaCount` | The number of replicas | `1` | +| `podLabels` | Additional labels to be set on the open-zaak pods | `{}` | +| `ingress.enabled` | Expose the application through an ingress | `false` | +| `ingress.annotations` | Additional annotations on the API ingress | `{}` | +| `ingress.hosts` | Ingress hosts | `"{open-zaak.gemeente.nl}"` | +| `ingress.tls` | Ingress TLS settings | `"[]"` | +| `persistence.enabled` | Enable persistency for application media | `false` | +| `persistence.storageClassName` | Storage class name for the PVC creation, must support RWX | `""` | +| `persistence.size` | The size of the application media persistent volume | `"1Gi"` | +| `persistence.existingClaim` | Use an existing claim for application media | `null` | +| `existingSecret` | Refer to an existing secret to avoid managing secrets through Helm. See templates/secret.yaml for required contents of your existing secret | `null` | +| `initContainers.volumePerms` | Run the file-permission fix init container (for upgrades from Open Zaak < 1.5) | `true` | +| `settings.allowedHosts` | A comma-separated list of hosts allowed by the application | `"open-zaak.gemeente.nl"` | +| `settings.useXForwardedHost` | Whether to rely on the `X-Forwarded-Host` header from ingress for host detection | `false` | +| `settings.secretKey` | The secret key of the application | `"SOME-RANDOM-SECRET"` | +| `settings.database.host` | The hostname of PostgreSQL | `"open-zaak-postgresql"` | +| `settings.database.port` | The port of PostgreSQL | `5432` | +| `settings.database.username` | The username of PostgreSQL | `"postgres"` | +| `settings.database.password` | The password of PostgreSQL | `"SUPER-SECRET"` | +| `settings.database.name` | The database name of PostgreSQL | `"open-zaak"` | +| `settings.database.sslmode` | The SSL-mode used by the postgres client. See [docs](https://www.postgresql.org/docs/current/libpq-ssl.html) for more info | `"prefer"` | +| `settings.numProxies` | The number of reverse proxies between client and backend container. Set this to 2 if exposing the application through an ingress. This chart deploys one nginx reverse proxy already. | `1` | +| `settings.cache.default` | The Redis cache for the default cache | `"open-zaak-redis-master:6379/0"` | +| `settings.cache.axes` | The Redis cache for the axes cache | `"open-zaak-redis-master:6379/0"` | +| `settings.email.host` | The hostname of the SMTP server | `"localhost"` | +| `settings.email.port` | The port of the SMTP server | `25` | +| `settings.email.username` | The username of the SMTP server | `""` | +| `settings.email.password` | The password of the SMTP server | `""` | +| `settings.email.useTLS` | Use TLS for connecting to SMTP server | `false` | +| `settings.jwtExpiry` | The expiry time for JWT tokens | `3600` | +| `settings.cmis.enabled` | Enable CMIS | `false` | +| `settings.cmis.mapperFile` | The CMIS mapper file | `""` | +| `settings.sentry.dsn` | The DSN for Sentry Logging | `""` | +| `settings.isHttps` | Used to construct absolute URLs and controls a variety of security settings | `true` | +| `settings.debug` | Only set this to True on a local development environment. Various other security settings are derived from this setting | `false` | +| `nginx.podLabels` | Additional labels to be set on the nginx pods | `{}` | +| `postgresql.primary.persistence.enabled` | Enable PostgreSQL persistency | `false` | +| `postgresql.primary.persistence.size` | Configure PostgreSQL size | `"1Gi"` | +| `postgresql.primary.persistence.existingClaim` | Use an existing persistent volume claim | `null` | | `postgresql.global.postgresql.auth.database` | The PostgreSQL database name | `"open-zaak"` | | `postgresql.global.postgresql.auth.postgresqlPassword` | The PostgreSQL administrative password | `"SUPER-SECRET"` | -| `redis.usePassword` | Use a Redis password | `false` | -| `redis.cluster.enabled` | Enable Redis cluster | `false` | -| `redis.persistence.existingClaim` | Use existing persistent volume claim for Redis | `""` | -| `redis.master.persistence.enabled` | Enable persistency for Redis master | `false` | -| `redis.master.persistence.size` | The size of the Redis master persistent volume | `"1Gi"` | +| `redis.auth.enabled` | Use a Redis password | `false` | +| `redis.master.persistence.enabled` | Enable persistency for Redis master | `false` | +| `redis.master.persistence.size` | The size of the Redis master persistent volume | `"1Gi"` | +| `redis.master.persistence.existingClaim` | Use existing persistent volume claim for Redis | `""` | Check [values.yaml](./values.yaml) for all the possible configuration options. diff --git a/charts/open-zaak/values.yaml b/charts/open-zaak/values.yaml index 3ffc957..95e1709 100644 --- a/charts/open-zaak/values.yaml +++ b/charts/open-zaak/values.yaml @@ -125,7 +125,7 @@ settings: cache: default: open-zaak-redis-master:6379/0 - axes: open-zaak-redis-master:6379/0 + axes: open-zaak-redis-master:6379/1 sentry: dsn: "" @@ -140,6 +140,8 @@ settings: debug: false + extraEnvVars: {} + nginx: image: repository: nginxinc/nginx-unprivileged @@ -181,10 +183,11 @@ nginx: ####################### postgresql: - persistence: - enabled: false - size: 1Gi - existingClaim: null + primary: + persistence: + enabled: false + size: 1Gi + existingClaim: null global: postgresql: @@ -197,15 +200,11 @@ postgresql: ################## redis: - usePassword: false - - cluster: + auth: enabled: false - persistence: - existingClaim: null - master: persistence: enabled: false size: 1Gi + existingClaim: null