mimir values.yaml📜
minio-tenant📜
Type: object
address: minio.mimir.svc.cluster.local
enabled: false
tenant:
buckets:
- name: mimir
configSecret:
accessKey: minio
name: mimir-objstore-creds
secretKey: minio123
defaultUserCredentials:
password: supersecret
username: mimir-user
metrics:
enabled: false
memory: 128M
port: 9000
pools:
- containerSecurityContext:
capabilities:
drop:
- ALL
labels:
app: minio
app.kubernetes.io/name: minio
name: pool-0
securityContext:
fsGroup: 1001
runAsGroup: 1001
runAsUser: 1001
servers: 1
size: 750Mi
volumesPerServer: 4
users:
- name: mimir-user-credentials
waitJob:
enabled: false
Description: Configuration for the Big Bang MinIO tenant subchart. See repo https://repo1.dso.mil/big-bang/product/packages/minio for configuring values.yaml
minio-tenant.enabled📜
Type: bool
false
Description: Enable MinIO instance support, must have minio-operator installed
minio-tenant.tenant.configSecret📜
Type: object
accessKey: minio
name: mimir-objstore-creds
secretKey: minio123
Description: MinIO root credentials
minio-tenant.tenant.buckets📜
Type: list
- name: mimir
Description: Buckets to be provisioned to for tenant
minio-tenant.tenant.users📜
Type: list
- name: mimir-user-credentials
Description: Name of the Secret that will contain the defaultUserCredentials generated for Tenant User
minio-tenant.tenant.defaultUserCredentials📜
Type: object
password: supersecret
username: mimir-user
Description: User credentials to create as a secret for above user. Otherwise password is randomly generated. This auth is not required to be set or reclaimed for minio use with mimir
networkPolicies.enabled📜
Type: bool
true
Description: Toggle networkPolicies
networkPolicies.controlPlaneCidr📜
Type: string
"0.0.0.0/0"
Description: Control Plane CIDR, defaults to 0.0.0.0/0, use kubectl get endpoints -n default kubernetes to get the CIDR range needed for your cluster Must be an IP CIDR range (x.x.x.x/x - ideally with /32 for the specific IP of a single endpoint, broader range for multiple masters/endpoints) Used by package NetworkPolicies to allow Kube API access
networkPolicies.additionalPolicies📜
Type: list
[]
networkPolicies.egress📜
Type: object
{}
istio.enabled📜
Type: bool
false
Description: Toggle istio configuration
istio.hardened📜
Type: object
alloy:
enabled: true
namespaces:
- alloy
principals:
- cluster.local/ns/alloy/sa/alloy-alloy-logs
customAuthorizationPolicies: []
customServiceEntries: []
enabled: false
grafana:
enabled: true
namespaces:
- monitoring
principals:
- cluster.local/ns/monitoring/sa/monitoring-grafana
minio:
enabled: true
minioOperator:
enabled: true
namespaces:
- minio-operator
principals:
- cluster.local/ns/minio-operator/sa/minio-operator
outboundTrafficPolicyMode: REGISTRY_ONLY
prometheus:
enabled: true
namespaces:
- monitoring
principals:
- cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus
Description: Default peer authentication values
istio.mtls.mode📜
Type: string
"STRICT"
Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
upgradeJob.enabled📜
Type: bool
true
upgradeJob.name📜
Type: string
"mimir-upgrade-job"
upgradeJob.image.repository📜
Type: string
"registry1.dso.mil/ironbank/big-bang/base"
Description: image repository for upgradeJob
upgradeJob.image.tag📜
Type: string
"2.1.0"
Description: image tag for upgradeJob
upgradeJob.image.imagePullPolicy📜
Type: string
"IfNotPresent"
upgradeJob.image.pullSecrets📜
Type: string
"private-registry"
upgradeJob.serviceAccount📜
Type: string
"upgrade-job-svc-account"
upgradeJob.role📜
Type: string
"upgrade-role"
upgradeJob.roleBinding📜
Type: string
"upgrade-rolebinding"
bbtests.enabled📜
Type: bool
false
bbtests.cypress.enabled📜
Type: bool
true
bbtests.cypress.artifacts📜
Type: bool
true
bbtests.cypress.envs.cypress_grafana_url📜
Type: string
"http://monitoring-grafana.monitoring.svc.cluster.local"
bbtests.scripts.image📜
Type: string
"registry1.dso.mil/ironbank/big-bang/base:2.1.0"
bbtests.scripts.envs.MIMIR_URL📜
Type: string
"http://mimir-mimir-distributor.mimir.svc:8080"
upstream.image.repository📜
Type: string
"registry1.dso.mil/ironbank/opensource/grafana/mimir"
upstream.image.tag📜
Type: string
"2.17.1"
upstream.image.pullSecrets[0]📜
Type: string
"private-registry"
upstream.global.extraVolumes[0].name📜
Type: string
"mimir-storage"
upstream.global.extraVolumes[0].emptyDir📜
Type: object
{}
upstream.global.extraVolumeMounts[0].name📜
Type: string
"mimir-storage"
upstream.global.extraVolumeMounts[0].mountPath📜
Type: string
"/tmp/mimir"
upstream.mimir.serverHttpListenPort📜
Type: int
8080
upstream.mimir.serverGrpcListenPort📜
Type: int
9095
upstream.mimir.structuredConfig.usage_stats.enabled📜
Type: bool
false
upstream.mimir.structuredConfig.common.storage.backend📜
Type: string
"filesystem"
upstream.mimir.structuredConfig.common.storage.filesystem.dir📜
Type: string
"/tmp/mimir"
upstream.mimir.structuredConfig.blocks_storage.storage_prefix📜
Type: string
"blocks"
upstream.mimir.structuredConfig.blocks_storage.backend📜
Type: string
"filesystem"
upstream.mimir.structuredConfig.blocks_storage.filesystem.dir📜
Type: string
"/tmp/mimir/blocks"
upstream.mimir.structuredConfig.ruler_storage.storage_prefix📜
Type: string
"ruler"
upstream.mimir.structuredConfig.ruler_storage.filesystem.dir📜
Type: string
"/tmp/mimir/ruler"
upstream.mimir.structuredConfig.alertmanager_storage.storage_prefix📜
Type: string
"alertmanager"
upstream.mimir.structuredConfig.alertmanager_storage.filesystem.dir📜
Type: string
"/tmp/mimir/alertmanager"
upstream.mimir.structuredConfig.limits.max_label_names_per_series📜
Type: int
40
upstream.mimir.structuredConfig.limits.max_global_series_per_user📜
Type: int
300000
upstream.mimir.structuredConfig.limits.out_of_order_time_window📜
Type: string
"10s"
upstream.mimir.structuredConfig.limits.max_global_exemplars_per_user📜
Type: int
100000
upstream.mimir.structuredConfig.limits.ingestion_rate📜
Type: int
30000
upstream.memcached.image.repository📜
Type: string
"registry1.dso.mil/ironbank/opensource/memcached/memcached"
upstream.memcached.image.tag📜
Type: string
"1.6.39"
upstream.memcachedExporter.enabled📜
Type: bool
false
upstream.rollout_operator.image.repository📜
Type: string
"registry1.dso.mil/ironbank/opensource/grafana/rollout-operator"
upstream.rollout_operator.image.tag📜
Type: string
"v0.29.0"
upstream.rollout_operator.imagePullSecrets[0].name📜
Type: string
"private-registry"
upstream.minio.enabled📜
Type: bool
false
upstream.grafanaAgent.enabled📜
Type: bool
false
upstream.nginx.enabled📜
Type: bool
false
upstream.nginx.image.registry📜
Type: string
"registry1.dso.mil"
upstream.nginx.image.repository📜
Type: string
"ironbank/opensource/nginx/nginx"
upstream.nginx.image.tag📜
Type: string
"1.29.1"
upstream.enterprise.enabled📜
Type: bool
false
upstream.enterprise.image.repository📜
Type: string
"registry1.dso.mil/ironbank/opensource/grafana/enterprise-metrics"
upstream.enterprise.image.tag📜
Type: string
"v2.17.0"
upstream.gateway.enabled📜
Type: bool
true
upstream.gateway.enabledNonEnterprise📜
Type: bool
true
upstream.gateway.nginx.image.registry📜
Type: string
"registry1.dso.mil"
upstream.gateway.nginx.image.repository📜
Type: string
"ironbank/opensource/nginx/nginx"
upstream.gateway.nginx.image.tag📜
Type: string
"1.29.1"