Skip to content

mattermost values.yaml📜

domain📜

Type: string

Default value
"bigbang.dev"

istio.enabled📜

Type: bool

Default value
false

Description: Toggle istio integration

istio.hardened.enabled📜

Type: bool

Default value
false

istio.hardened.customAuthorizationPolicies📜

Type: list

Default value
[]
Default value (formatted) 
[]

istio.hardened.monitoring.enabled📜

Type: bool

Default value
true

istio.hardened.monitoring.namespaces[0]📜

Type: string

Default value
"monitoring"

istio.hardened.monitoring.principals[0]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-grafana"

istio.hardened.monitoring.principals[1]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-alertmanager"

istio.hardened.monitoring.principals[2]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-operator"

istio.hardened.monitoring.principals[3]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus"

istio.hardened.monitoring.principals[4]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-state-metrics"

istio.hardened.monitoring.principals[5]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-prometheus-node-exporter"

istio.mtls📜

Type: object

Default value
{"mode":"STRICT"}
Default value (formatted) 
{
  "mode": "STRICT"
}

Description: Default peer authentication

istio.mtls.mode📜

Type: string

Default value
"STRICT"

Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic

istio.chat.enabled📜

Type: bool

Default value
true

istio.chat.annotations📜

Type: object

Default value
{}
Default value (formatted) 
{}

istio.chat.labels📜

Type: object

Default value
{}
Default value (formatted) 
{}

istio.chat.gateways[0]📜

Type: string

Default value
"istio-system/main"

istio.chat.hosts[0]📜

Type: string

Default value
"chat.{{ .Values.domain }}"

istio.injection📜

Type: string

Default value
"disabled"

ingress📜

Type: object

Default value
{"annotations":{},"enabled":false,"host":"","tlsSecret":""}
Default value (formatted) 
{
  "annotations": {},
  "enabled": false,
  "host": "",
  "tlsSecret": ""
}

Description: Specification to configure an Ingress with Mattermost

monitoring.enabled📜

Type: bool

Default value
false

monitoring.namespace📜

Type: string

Default value
"monitoring"

monitoring.serviceMonitor.scheme📜

Type: string

Default value
"http"

monitoring.serviceMonitor.tlsConfig📜

Type: object

Default value
{}
Default value (formatted) 
{}

networkPolicies.enabled📜

Type: bool

Default value
false

networkPolicies.ingressLabels.app📜

Type: string

Default value
"istio-ingressgateway"

networkPolicies.ingressLabels.istio📜

Type: string

Default value
"ingressgateway"

networkPolicies.controlPlaneCidr📜

Type: string

Default value
"0.0.0.0/0"

networkPolicies.additionalPolicies📜

Type: list

Default value
[]
Default value (formatted) 
[]

sso.enabled📜

Type: bool

Default value
false

sso.client_id📜

Type: string

Default value
"platform1_a8604cc9-f5e9-4656-802d-d05624370245_bb8-mattermost"

sso.client_secret📜

Type: string

Default value
"nothing"

sso.auth_endpoint📜

Type: string

Default value
"https://login.dso.mil/auth/realms/baby-yoda/protocol/openid-connect/auth"

sso.token_endpoint📜

Type: string

Default value
"https://login.dso.mil/auth/realms/baby-yoda/protocol/openid-connect/token"

sso.user_api_endpoint📜

Type: string

Default value
"https://login.dso.mil/auth/realms/baby-yoda/protocol/openid-connect/userinfo"

sso.enable_sign_up_with_email📜

Type: bool

Default value
false

sso.enable_sign_in_with_email📜

Type: bool

Default value
false

sso.enable_sign_in_with_username📜

Type: bool

Default value
false

image.name📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/mattermost/mattermost"

image.tag📜

Type: string

Default value
"9.5.1"

image.imagePullPolicy📜

Type: string

Default value
"IfNotPresent"

global.imagePullSecrets[0].name📜

Type: string

Default value
"private-registry"

replicaCount📜

Type: int

Default value
1

users📜

Type: string

Default value
nil

enterprise.enabled📜

Type: bool

Default value
false

enterprise.license📜

Type: string

Default value
""

nameOverride📜

Type: string

Default value
""

updateJob.disabled📜

Type: bool

Default value
true

Description: Must be disabled when Istio injected

updateJob.labels📜

Type: object

Default value
{}
Default value (formatted) 
{}

updateJob.annotations📜

Type: object

Default value
{}
Default value (formatted) 
{}

resources.limits.cpu📜

Type: int

Default value
2

resources.limits.memory📜

Type: string

Default value
"4Gi"

resources.requests.cpu📜

Type: int

Default value
2

resources.requests.memory📜

Type: string

Default value
"4Gi"

affinity📜

Type: object

Default value
{}
Default value (formatted) 
{}

nodeSelector📜

Type: object

Default value
{}
Default value (formatted) 
{}

tolerations📜

Type: object

Default value
{}
Default value (formatted) 
{}

mattermostEnvs📜

Type: object

Default value
{}
Default value (formatted) 
{}

existingSecretEnvs📜

Type: object

Default value
{}
Default value (formatted) 
{}

volumes📜

Type: object

Default value
{}
Default value (formatted) 
{}

volumeMounts📜

Type: object

Default value
{}
Default value (formatted) 
{}

podLabels📜

Type: object

Default value
{}
Default value (formatted) 
{}

Description: Pod labels for Mattermost server pods

podAnnotations📜

Type: object

Default value
{}
Default value (formatted) 
{}

Description: Pod annotations for Mattermost server pods

securityContext📜

Type: object

Default value
{"runAsGroup":2000,"runAsNonRoot":true,"runAsUser":2000}
Default value (formatted) 
{
  "runAsGroup": 2000,
  "runAsNonRoot": true,
  "runAsUser": 2000
}

Description: securityContext for Mattermost server pods

containerSecurityContext📜

Type: object

Default value
{"capabilities":{"drop":["ALL"]},"runAsGroup":2000,"runAsNonRoot":true,"runAsUser":2000}
Default value (formatted) 
{
  "capabilities": {
    "drop": [
      "ALL"
    ]
  },
  "runAsGroup": 2000,
  "runAsNonRoot": true,
  "runAsUser": 2000
}

Description: containerSecurityContext for Mattermost server containers

minio.install📜

Type: bool

Default value
false

minio.bucketCreationImage📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/minio/mc:RELEASE.2024-01-18T07-03-39Z"

minio.service.nameOverride📜

Type: string

Default value
"minio.mattermost.svc.cluster.local"

minio.secrets.name📜

Type: string

Default value
"mattermost-objstore-creds"

minio.secrets.accessKey📜

Type: string

Default value
"minio"

minio.secrets.secretKey📜

Type: string

Default value
"minio123"

minio.tenant.metrics.enabled📜

Type: bool

Default value
false

minio.tenant.metrics.port📜

Type: int

Default value
9000

minio.tenant.buckets[0].name📜

Type: string

Default value
"mattermost"

postgresql.install📜

Type: bool

Default value
false

postgresql.image.registry📜

Type: string

Default value
"registry1.dso.mil/ironbank"

postgresql.image.repository📜

Type: string

Default value
"opensource/postgres/postgresql11"

postgresql.image.tag📜

Type: string

Default value
"11.18-1"

postgresql.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

postgresql.postgresqlUsername📜

Type: string

Default value
"mattermost"

postgresql.postgresqlPassword📜

Type: string

Default value
"bigbang"

postgresql.postgresqlDatabase📜

Type: string

Default value
"mattermost"

postgresql.fullnameOverride📜

Type: string

Default value
"mattermost-postgresql"

postgresql.securityContext.fsGroup📜

Type: int

Default value
26

postgresql.containerSecurityContext.runAsUser📜

Type: int

Default value
26

postgresql.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

postgresql.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

postgresql.volumePermissions.enabled📜

Type: bool

Default value
false

postgresql.volumePermissions.securityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

postgresql.postgresqlConfiguration.listen_addresses📜

Type: string

Default value
"*"

postgresql.pgHbaConfiguration📜

Type: string

Default value
"local all all md5\nhost all all all md5"
Default value (formatted) 
local all all md5
host all all all md5

database.secret📜

Type: string

Default value
""

database.readinessCheck.disableDefault📜

Type: bool

Default value
true

database.readinessCheck.image📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/postgres/postgresql12:12.18"

database.readinessCheck.command[0]📜

Type: string

Default value
"/bin/sh"

database.readinessCheck.command[1]📜

Type: string

Default value
"-c"

database.readinessCheck.command[2]📜

Type: string

Default value
"until pg_isready --dbname=\"$DB_CONNECTION_CHECK_URL\"; do echo waiting for database; sleep 5; done;"

database.readinessCheck.env[0].name📜

Type: string

Default value
"DB_CONNECTION_CHECK_URL"

database.readinessCheck.env[0].valueFrom.secretKeyRef.key📜

Type: string

Default value
"DB_CONNECTION_CHECK_URL"

database.readinessCheck.env[0].valueFrom.secretKeyRef.name📜

Type: string

Default value
"{{ .Values.database.secret \| default (printf \"%s-dbcreds\" (include \"mattermost.fullname\" .)) }}"

fileStore.secret📜

Type: string

Default value
""

fileStore.url📜

Type: string

Default value
""

fileStore.bucket📜

Type: string

Default value
""

elasticsearch.enabled📜

Type: bool

Default value
false

elasticsearch.connectionurl📜

Type: string

Default value
"https://logging-ek-es-http.logging.svc.cluster.local:9200"

elasticsearch.username📜

Type: string

Default value
""

elasticsearch.password📜

Type: string

Default value
""

elasticsearch.enableindexing📜

Type: bool

Default value
true

elasticsearch.indexprefix📜

Type: string

Default value
"mm-"

elasticsearch.skiptlsverification📜

Type: bool

Default value
true

elasticsearch.bulkindexingtimewindowseconds📜

Type: int

Default value
3600

elasticsearch.sniff📜

Type: bool

Default value
false

elasticsearch.enablesearching📜

Type: bool

Default value
true

elasticsearch.enableautocomplete📜

Type: bool

Default value
true

openshift📜

Type: bool

Default value
false

resourcePatch📜

Type: object

Default value
{}
Default value (formatted) 
{}

bbtests.enabled📜

Type: bool

Default value
false

bbtests.cypress.artifacts📜

Type: bool

Default value
true

bbtests.cypress.envs.cypress_url📜

Type: string

Default value
"http://mattermost.mattermost.svc.cluster.local:8065"

bbtests.cypress.envs.cypress_mm_email📜

Type: string

Default value
"test@bigbang.dev"

bbtests.cypress.envs.cypress_mm_user📜

Type: string

Default value
"bigbang"

bbtests.cypress.envs.cypress_mm_password📜

Type: string

Default value
"Bigbang#123"

bbtests.cypress.envs.cypress_waittime📜

Type: string

Default value
"5000"

bbtests.cypress.envs.cypress_tnr_username📜

Type: string

Default value
"cypress"

bbtests.cypress.envs.cypress_tnr_password📜

Type: string

Default value
"tnr_w!G33ZyAt@C8"

bbtests.cypress.resources.requests.cpu📜

Type: string

Default value
"2"

bbtests.cypress.resources.requests.memory📜

Type: string

Default value
"1500M"

bbtests.cypress.resources.limits.cpu📜

Type: string

Default value
"2"

bbtests.cypress.resources.limits.memory📜

Type: string

Default value
"1500M"