fortify values.yaml¶
upstream.podAnnotations.”proxy.istio.io/config”¶
Type: string
Default value
"{\"holdApplicationUntilProxyStarts\": true}"
upstream.image.repository¶
Type: string
Default value
"registry1.dso.mil/ironbank/microfocus/fortify/ssc"
upstream.image.pullPolicy¶
Type: string
Default value
"Always"
upstream.image.tag¶
Type: string
Default value
"26.2.2.0004"
upstream.imagePullSecrets[0].name¶
Type: string
Default value
"private-registry"
upstream.nameOverride¶
Type: string
Default value
"fortify-ssc"
upstream.fullnameOverride¶
Type: string
Default value
"fortify-ssc"
upstream.urlHost¶
Type: string
Default value
"fortify.dev.bigbang.mil"
upstream.sscLicenseSecret¶
Type: string
Default value
"fortify-ssc-secret"
upstream.sscLicenseKey¶
Type: string
Default value
"fortify.license"
upstream.sscAutoconfigSecret¶
Type: string
Default value
"fortify-ssc-secret"
upstream.sscAutoconfigKey¶
Type: string
Default value
"ssc.autoconfig"
upstream.httpCertificateKeystoreSecret¶
Type: string
Default value
"fortify-ssc-secret"
upstream.httpCertificateKeystoreKey¶
Type: string
Default value
"ssc-service.jks"
upstream.httpCertificateKeystorePasswordSecret¶
Type: string
Default value
"fortify-ssc-secret"
upstream.httpCertificateKeystorePasswordKey¶
Type: string
Default value
"ssc-service.jks.password"
upstream.httpCertificateKeyPasswordSecret¶
Type: string
Default value
"fortify-ssc-secret"
upstream.httpCertificateKeyPasswordKey¶
Type: string
Default value
"ssc-service.jks.key.password"
upstream.environment[0].name¶
Type: string
Default value
"COM_FORTIFY_SSC_ENFORCESECURETRANSPORT"
upstream.environment[0].value¶
Type: string
Default value
"false"
upstream.jvmExtraOptions¶
Type: string
Default value
"-Dcom.redhat.fips=false"
upstream.resources.limits.cpu¶
Type: int
Default value
4
upstream.resources.limits.memory¶
Type: string
Default value
"16Gi"
upstream.resources.requests.memory¶
Type: string
Default value
"4Gi"
upstream.user.gid¶
Type: int
Default value
1111
openshift¶
Type: bool
Default value
false
nameOverride¶
Type: string
Default value
"fortify-ssc"
fullnameOverride¶
Type: string
Default value
"fortify-ssc"
mysql.enabled¶
Type: bool
Default value
true
mysql.global.imageRegistry¶
Type: string
Default value
"registry1.dso.mil/ironbank"
mysql.global.imagePullSecrets[0]¶
Type: string
Default value
"private-registry"
mysql.image.repository¶
Type: string
Default value
"bitnami/mysql8"
mysql.image.tag¶
Type: string
Default value
"8.0.36-debian-11-r1"
mysql.auth.rootPassword¶
Type: string
Default value
"password"
mysql.auth.database¶
Type: string
Default value
"ssc_db"
mysql.primary.configuration¶
Type: string
Default value
"[mysqld]\ndefault_authentication_plugin=mysql_native_password\nskip-name-resolve\nexplicit_defaults_for_timestamp\nbasedir=/opt/bitnami/mysql\nplugin_dir=/opt/bitnami/mysql/lib/plugin\nport=3306\nsocket=/opt/bitnami/mysql/tmp/mysql.sock\ndatadir=/bitnami/mysql/data\ntmpdir=/opt/bitnami/mysql/tmp\nbind-address=0.0.0.0\npid-file=/opt/bitnami/mysql/tmp/mysqld.pid\nlog-error=/opt/bitnami/mysql/logs/mysqld.log\ncharacter-set-server=latin1\ncollation-server=latin1_general_cs\nslow_query_log=0\nslow_query_log_file=/opt/bitnami/mysql/logs/mysqld.log\nlong_query_time=10.0\ndefault_storage_engine=INNODB\ninnodb_buffer_pool_size=512M\ninnodb_lock_wait_timeout=300\ninnodb_log_file_size=512M\nmax_allowed_packet=1G\nsql-mode=\"TRADITIONAL\"\n\n[mysqldump]\nmax_allowed_packet=1G\n\n[client]\nport=3306\nsocket=/opt/bitnami/mysql/tmp/mysql.sock\ndefault-character-set=UTF8\nplugin_dir=/opt/bitnami/mysql/lib/plugin\n\n[manager]\nport=3306\nsocket=/opt/bitnami/mysql/tmp/mysql.sock\npid-file=/opt/bitnami/mysql/tmp/mysqld.pid"
mysql.primary.resources.limits.cpu¶
Type: int
Default value
8
mysql.primary.resources.limits.memory¶
Type: string
Default value
"64Gi"
mysql.primary.resources.requests.cpu¶
Type: int
Default value
4
mysql.primary.resources.requests.memory¶
Type: string
Default value
"16Gi"
mysql.primary.podSecurityContext.enabled¶
Type: bool
Default value
true
mysql.primary.podSecurityContext.fsGroup¶
Type: int
Default value
1001
mysql.primary.containerSecurityContext.enabled¶
Type: bool
Default value
true
mysql.primary.containerSecurityContext.capabilities.drop[0]¶
Type: string
Default value
"ALL"
mysql.primary.containerSecurityContext.runAsUser¶
Type: int
Default value
1001
mysql.primary.containerSecurityContext.runAsGroup¶
Type: int
Default value
1001
mysql.primary.containerSecurityContext.runAsNonRoot¶
Type: bool
Default value
true
mysql.secondary.resources.limits.cpu¶
Type: int
Default value
8
mysql.secondary.resources.limits.memory¶
Type: string
Default value
"64Gi"
mysql.secondary.resources.requests.cpu¶
Type: int
Default value
4
mysql.secondary.resources.requests.memory¶
Type: string
Default value
"16Gi"
mysql.secondary.podSecurityContext.enabled¶
Type: bool
Default value
true
mysql.secondary.podSecurityContext.fsGroup¶
Type: int
Default value
1001
mysql.secondary.containerSecurityContext.enabled¶
Type: bool
Default value
true
mysql.secondary.containerSecurityContext.capabilities.drop[0]¶
Type: string
Default value
"ALL"
mysql.secondary.containerSecurityContext.runAsUser¶
Type: int
Default value
1001
mysql.secondary.containerSecurityContext.runAsGroup¶
Type: int
Default value
1001
mysql.secondary.containerSecurityContext.runAsNonRoot¶
Type: bool
Default value
true
mysql.metrics.resources.limits.cpu¶
Type: int
Default value
2
mysql.metrics.resources.limits.memory¶
Type: string
Default value
"1Gi"
mysql.metrics.resources.requests.cpu¶
Type: string
Default value
"100m"
mysql.metrics.resources.requests.memory¶
Type: string
Default value
"256Mi"
mysql.metrics.podSecurityContext.enabled¶
Type: bool
Default value
true
mysql.metrics.podSecurityContext.fsGroup¶
Type: int
Default value
1001
mysql.metrics.containerSecurityContext.enabled¶
Type: bool
Default value
true
mysql.metrics.containerSecurityContext.capabilities.drop[0]¶
Type: string
Default value
"ALL"
mysql.metrics.containerSecurityContext.runAsUser¶
Type: int
Default value
1001
mysql.metrics.containerSecurityContext.runAsGroup¶
Type: int
Default value
1001
mysql.metrics.containerSecurityContext.runAsNonRoot¶
Type: bool
Default value
true
keystoreJob.enabled¶
Type: bool
Default value
true
keystoreJob.recreate¶
Type: bool
Default value
false
keystoreJob.certAlias¶
Type: string
Default value
"tomcat"
keystoreJob.trustStorePassword¶
Type: string
Default value
"dsoppassword"
keystoreJob.keyStorePassword¶
Type: string
Default value
"dsoppassword"
keystoreJob.keyStoreCertPassword¶
Type: string
Default value
"dsoppassword"
keystoreJob.image¶
Type: string
Default value
"registry1.dso.mil/ironbank/redhat/ubi/ubi9"
keystoreJob.tag¶
Type: string
Default value
"9.8"
keystoreJob.resources.limits.cpu¶
Type: string
Default value
"500m"
keystoreJob.resources.limits.memory¶
Type: string
Default value
"128Mi"
keystoreJob.resources.requests.cpu¶
Type: string
Default value
"250m"
keystoreJob.resources.requests.memory¶
Type: string
Default value
"64Mi"
domain¶
Type: string
Default value
"dev.bigbang.mil"
istio.enabled¶
Type: bool
Default value
false
istio.mtls.mode¶
Type: string
Default value
"STRICT"
istio.sidecar.enabled¶
Type: bool
Default value
false
istio.sidecar.outboundTrafficPolicyMode¶
Type: string
Default value
"REGISTRY_ONLY"
istio.serviceEntries.custom¶
Type: list
Default value
[]
istio.authorizationPolicies.enabled¶
Type: bool
Default value
false
istio.authorizationPolicies.custom¶
Type: list
Default value
[]
routes.inbound.fortify.enabled¶
Type: bool
Default value
true
routes.inbound.fortify.gateways[0]¶
Type: string
Default value
"istio-gateway/public-ingressgateway"
routes.inbound.fortify.hosts[0]¶
Type: string
Default value
"fortify.{{ .Values.domain }}"
routes.inbound.fortify.service¶
Type: string
Default value
"fortify-ssc-service"
routes.inbound.fortify.port¶
Type: int
Default value
80
routes.inbound.fortify.containerPort¶
Type: int
Default value
8080
routes.inbound.fortify.selector.”app.kubernetes.io/name”¶
Type: string
Default value
"fortify-ssc"
routes.inbound.fortify.selector.”app.kubernetes.io/component”¶
Type: string
Default value
"webapp"
networkPolicies.enabled¶
Type: bool
Default value
false
networkPolicies.hbonePortInjection.enabled¶
Type: bool
Default value
false
networkPolicies.egress.definitions.external-mysql.to¶
Type: list
Default value
[]
networkPolicies.egress.definitions.external-mysql.ports[0].port¶
Type: int
Default value
3306
networkPolicies.egress.definitions.external-mysql.ports[0].protocol¶
Type: string
Default value
"TCP"
networkPolicies.egress.from.fortify-webapp.podSelector.matchLabels.”app.kubernetes.io/name”¶
Type: string
Default value
"fortify-ssc"
networkPolicies.egress.from.fortify-webapp.podSelector.matchLabels.”app.kubernetes.io/component”¶
Type: string
Default value
"webapp"
networkPolicies.egress.from.fortify-webapp.to.definition.external-mysql¶
Type: bool
Default value
false
networkPolicies.egress.from.keystore-job.podSelector.matchLabels.job¶
Type: string
Default value
"keystore-generator"
networkPolicies.egress.from.keystore-job.to.definition.kubeAPI¶
Type: bool
Default value
true
networkPolicies.egress.from.keystore-job-hook.podSelector.matchLabels.job¶
Type: string
Default value
"keystore-generator"
networkPolicies.egress.from.keystore-job-hook.metadata.annotations.”helm.sh/hook”¶
Type: string
Default value
"pre-install,pre-upgrade"
networkPolicies.egress.from.keystore-job-hook.metadata.annotations.”helm.sh/hook-weight”¶
Type: string
Default value
"-5"
networkPolicies.egress.from.keystore-job-hook.metadata.annotations.”helm.sh/hook-delete-policy”¶
Type: string
Default value
"before-hook-creation,hook-succeeded"
networkPolicies.egress.from.keystore-job-hook.to.definition.kubeAPI¶
Type: bool
Default value
true
networkPolicies.additionalPolicies¶
Type: list
Default value
[]
bbtests.enabled¶
Type: bool
Default value
false
bbtests.cypress.artifacts¶
Type: bool
Default value
true
bbtests.cypress.envs.cypress_url¶
Type: string
Default value
"http://fortify-ssc-service:80"
bbtests.cypress.envs.cypress_user¶
Type: string
Default value
"admin"
bbtests.cypress.envs.cypress_password¶
Type: string
Default value
"admin"
bbtests.cypress.resources.requests.cpu¶
Type: string
Default value
"2"
bbtests.cypress.resources.requests.memory¶
Type: string
Default value
"4Gi"
bbtests.cypress.resources.limits.cpu¶
Type: string
Default value
"2"
bbtests.cypress.resources.limits.memory¶
Type: string
Default value
"4Gi"
bbtests.scripts.image¶
Type: string
Default value
"registry1.dso.mil/bigbang-ci/devops-tester:1.1.2"
bbtests.scripts.envs¶
Type: object
Default value
{}
fortify_autoconfig¶
Type: string
Default value
"appProperties:\n host.validation: false\n http.min_threads: 1\n http.max_threads: 4\n https.min_threads: 4\n https.max_threads: 150\n\ndatasourceProperties:\n db.username: root\n db.password: password\n\n jdbc.url: 'jdbc:mysql://fortify-mysql:3306/ssc_db?sessionVariables=collation_connection=latin1_general_cs&rewriteBatchedStatements=true'\n\ndbMigrationProperties:\n\n migration.enabled: true\n migration.username: root\n migration.password: password\n"
fortify_license¶
Type: string
Default value
"<License>\n"