gitlab values.yaml📜
global.istio.enabled📜
Type: bool
Default value
false
global.istio.injection📜
Type: string
Default value
"disabled"
global.common.labels📜
Type: object
Default value
{}
global.image📜
Type: object
Default value
{}
global.pod.labels📜
Type: object
Default value
{}
global.edition📜
Type: string
Default value
"ee"
global.gitlabVersion📜
Type: string
Default value
"17.5.1"
global.application.create📜
Type: bool
Default value
false
global.application.links📜
Type: list
Default value
[]
global.application.allowClusterRoles📜
Type: bool
Default value
true
global.hosts.domain📜
Type: string
Default value
"dev.bigbang.mil"
global.hosts.hostSuffix📜
Type: string
Default value
nil
global.hosts.https📜
Type: bool
Default value
true
global.hosts.externalIP📜
Type: string
Default value
nil
global.hosts.ssh📜
Type: string
Default value
nil
global.hosts.gitlab.name📜
Type: string
Default value
"gitlab.dev.bigbang.mil"
global.hosts.minio📜
Type: object
Default value
{}
global.hosts.registry.name📜
Type: string
Default value
"registry.dev.bigbang.mil"
global.hosts.tls📜
Type: object
Default value
{}
global.hosts.smartcard📜
Type: object
Default value
{}
global.hosts.kas📜
Type: object
Default value
{}
global.hosts.pages📜
Type: object
Default value
{}
global.ingress.apiVersion📜
Type: string
Default value
""
global.ingress.configureCertmanager📜
Type: bool
Default value
false
global.ingress.useNewIngressForCerts📜
Type: bool
Default value
false
global.ingress.provider📜
Type: string
Default value
"nginx"
global.ingress.annotations📜
Type: object
Default value
{}
global.ingress.enabled📜
Type: bool
Default value
false
global.ingress.tls📜
Type: object
Default value
{}
global.ingress.path📜
Type: string
Default value
"/"
global.ingress.pathType📜
Type: string
Default value
"Prefix"
global.hpa.apiVersion📜
Type: string
Default value
"autoscaling/v2"
global.keda.enabled📜
Type: bool
Default value
false
global.pdb.apiVersion📜
Type: string
Default value
"policy/v1"
global.batch.cronJob.apiVersion📜
Type: string
Default value
"batch/v1"
global.monitoring.enabled📜
Type: bool
Default value
false
global.gitlab.license📜
Type: object
Default value
{}
global.initialRootPassword📜
Type: object
Default value
{}
global.psql.connectTimeout📜
Type: string
Default value
nil
global.psql.keepalives📜
Type: string
Default value
nil
global.psql.keepalivesIdle📜
Type: string
Default value
nil
global.psql.keepalivesInterval📜
Type: string
Default value
nil
global.psql.keepalivesCount📜
Type: string
Default value
nil
global.psql.tcpUserTimeout📜
Type: string
Default value
nil
global.psql.password📜
Type: object
Default value
{}
global.psql.main📜
Type: object
Default value
{}
global.psql.ci📜
Type: object
Default value
{}
global.redis.auth.enabled📜
Type: bool
Default value
true
global.redis.securityContext.runAsUser📜
Type: int
Default value
1001
global.redis.securityContext.fsGroup📜
Type: int
Default value
1001
global.redis.securityContext.runAsNonRoot📜
Type: bool
Default value
true
global.redis.containerSecurityContext.enabled📜
Type: bool
Default value
true
global.redis.containerSecurityContext.runAsUser📜
Type: int
Default value
1001
global.redis.containerSecurityContext.runAsNonRoot📜
Type: bool
Default value
true
global.redis.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
global.redis.sentinelAuth.enabled📜
Type: bool
Default value
false
global.gitaly.enabled📜
Type: bool
Default value
true
global.gitaly.authToken📜
Type: object
Default value
{}
global.gitaly.internal.names[0]📜
Type: string
Default value
"default"
global.gitaly.external📜
Type: list
Default value
[]
global.gitaly.service.name📜
Type: string
Default value
"gitaly"
global.gitaly.service.type📜
Type: string
Default value
"ClusterIP"
global.gitaly.service.externalPort📜
Type: int
Default value
8075
global.gitaly.service.internalPort📜
Type: int
Default value
8075
global.gitaly.service.tls.externalPort📜
Type: int
Default value
8076
global.gitaly.service.tls.internalPort📜
Type: int
Default value
8076
global.gitaly.tls.enabled📜
Type: bool
Default value
false
global.praefect.enabled📜
Type: bool
Default value
false
global.praefect.ntpHost📜
Type: string
Default value
"pool.ntp.org"
global.praefect.replaceInternalGitaly📜
Type: bool
Default value
true
global.praefect.authToken📜
Type: object
Default value
{}
global.praefect.autoMigrate📜
Type: bool
Default value
true
global.praefect.dbSecret📜
Type: object
Default value
{}
global.praefect.virtualStorages[0].name📜
Type: string
Default value
"default"
global.praefect.virtualStorages[0].gitalyReplicas📜
Type: int
Default value
3
global.praefect.virtualStorages[0].maxUnavailable📜
Type: int
Default value
1
global.praefect.psql.sslMode📜
Type: string
Default value
"disable"
global.praefect.service.name📜
Type: string
Default value
"praefect"
global.praefect.service.type📜
Type: string
Default value
"ClusterIP"
global.praefect.service.externalPort📜
Type: int
Default value
8075
global.praefect.service.internalPort📜
Type: int
Default value
8075
global.praefect.service.tls.externalPort📜
Type: int
Default value
8076
global.praefect.service.tls.internalPort📜
Type: int
Default value
8076
global.praefect.tls.enabled📜
Type: bool
Default value
false
global.minio.enabled📜
Type: bool
Default value
true
global.minio.credentials📜
Type: object
Default value
{}
global.appConfig.enableUsagePing📜
Type: bool
Default value
true
global.appConfig.enableSeatLink📜
Type: bool
Default value
true
global.appConfig.enableImpersonation📜
Type: string
Default value
nil
global.appConfig.applicationSettingsCacheSeconds📜
Type: int
Default value
60
global.appConfig.defaultCanCreateGroup📜
Type: bool
Default value
false
global.appConfig.usernameChangingEnabled📜
Type: bool
Default value
true
global.appConfig.issueClosingPattern📜
Type: string
Default value
nil
global.appConfig.defaultTheme📜
Type: string
Default value
nil
global.appConfig.defaultColorMode📜
Type: string
Default value
nil
global.appConfig.defaultSyntaxHighlightingTheme📜
Type: string
Default value
nil
global.appConfig.defaultProjectsFeatures.issues📜
Type: bool
Default value
true
global.appConfig.defaultProjectsFeatures.mergeRequests📜
Type: bool
Default value
true
global.appConfig.defaultProjectsFeatures.wiki📜
Type: bool
Default value
true
global.appConfig.defaultProjectsFeatures.snippets📜
Type: bool
Default value
true
global.appConfig.defaultProjectsFeatures.builds📜
Type: bool
Default value
true
global.appConfig.graphQlTimeout📜
Type: string
Default value
nil
global.appConfig.webhookTimeout📜
Type: string
Default value
nil
global.appConfig.maxRequestDurationSeconds📜
Type: string
Default value
nil
global.appConfig.cron_jobs📜
Type: object
Default value
{}
global.appConfig.contentSecurityPolicy.enabled📜
Type: bool
Default value
false
global.appConfig.contentSecurityPolicy.report_only📜
Type: bool
Default value
true
global.appConfig.gravatar.plainUrl📜
Type: string
Default value
nil
global.appConfig.gravatar.sslUrl📜
Type: string
Default value
nil
global.appConfig.extra.googleAnalyticsId📜
Type: string
Default value
nil
global.appConfig.extra.matomoUrl📜
Type: string
Default value
nil
global.appConfig.extra.matomoSiteId📜
Type: string
Default value
nil
global.appConfig.extra.matomoDisableCookies📜
Type: string
Default value
nil
global.appConfig.extra.oneTrustId📜
Type: string
Default value
nil
global.appConfig.extra.googleTagManagerNonceId📜
Type: string
Default value
nil
global.appConfig.extra.bizible📜
Type: string
Default value
nil
global.appConfig.object_store.enabled📜
Type: bool
Default value
false
global.appConfig.object_store.proxy_download📜
Type: bool
Default value
true
global.appConfig.object_store.storage_options📜
Type: object
Default value
{}
global.appConfig.object_store.connection📜
Type: object
Default value
{}
global.appConfig.lfs.enabled📜
Type: bool
Default value
true
global.appConfig.lfs.proxy_download📜
Type: bool
Default value
true
global.appConfig.lfs.bucket📜
Type: string
Default value
"git-lfs"
global.appConfig.lfs.connection📜
Type: object
Default value
{}
global.appConfig.artifacts.enabled📜
Type: bool
Default value
true
global.appConfig.artifacts.proxy_download📜
Type: bool
Default value
true
global.appConfig.artifacts.bucket📜
Type: string
Default value
"gitlab-artifacts"
global.appConfig.artifacts.connection📜
Type: object
Default value
{}
global.appConfig.uploads.enabled📜
Type: bool
Default value
true
global.appConfig.uploads.proxy_download📜
Type: bool
Default value
true
global.appConfig.uploads.bucket📜
Type: string
Default value
"gitlab-uploads"
global.appConfig.uploads.connection📜
Type: object
Default value
{}
global.appConfig.packages.enabled📜
Type: bool
Default value
true
global.appConfig.packages.proxy_download📜
Type: bool
Default value
true
global.appConfig.packages.bucket📜
Type: string
Default value
"gitlab-packages"
global.appConfig.packages.connection📜
Type: object
Default value
{}
global.appConfig.externalDiffs.enabled📜
Type: bool
Default value
false
global.appConfig.externalDiffs.when📜
Type: string
Default value
nil
global.appConfig.externalDiffs.proxy_download📜
Type: bool
Default value
true
global.appConfig.externalDiffs.bucket📜
Type: string
Default value
"gitlab-mr-diffs"
global.appConfig.externalDiffs.connection📜
Type: object
Default value
{}
global.appConfig.terraformState.enabled📜
Type: bool
Default value
false
global.appConfig.terraformState.bucket📜
Type: string
Default value
"gitlab-terraform-state"
global.appConfig.terraformState.connection📜
Type: object
Default value
{}
global.appConfig.ciSecureFiles.enabled📜
Type: bool
Default value
false
global.appConfig.ciSecureFiles.bucket📜
Type: string
Default value
"gitlab-ci-secure-files"
global.appConfig.ciSecureFiles.connection📜
Type: object
Default value
{}
global.appConfig.dependencyProxy.enabled📜
Type: bool
Default value
false
global.appConfig.dependencyProxy.proxy_download📜
Type: bool
Default value
true
global.appConfig.dependencyProxy.bucket📜
Type: string
Default value
"gitlab-dependency-proxy"
global.appConfig.dependencyProxy.connection📜
Type: object
Default value
{}
global.appConfig.backups.bucket📜
Type: string
Default value
"gitlab-backups"
global.appConfig.backups.tmpBucket📜
Type: string
Default value
"tmp"
global.appConfig.microsoft_graph_mailer.enabled📜
Type: bool
Default value
false
global.appConfig.microsoft_graph_mailer.user_id📜
Type: string
Default value
""
global.appConfig.microsoft_graph_mailer.tenant📜
Type: string
Default value
""
global.appConfig.microsoft_graph_mailer.client_id📜
Type: string
Default value
""
global.appConfig.microsoft_graph_mailer.client_secret.secret📜
Type: string
Default value
""
global.appConfig.microsoft_graph_mailer.client_secret.key📜
Type: string
Default value
"secret"
global.appConfig.microsoft_graph_mailer.azure_ad_endpoint📜
Type: string
Default value
"https://login.microsoftonline.com"
global.appConfig.microsoft_graph_mailer.graph_endpoint📜
Type: string
Default value
"https://graph.microsoft.com"
global.appConfig.incomingEmail.enabled📜
Type: bool
Default value
false
global.appConfig.incomingEmail.address📜
Type: string
Default value
""
global.appConfig.incomingEmail.host📜
Type: string
Default value
"imap.gmail.com"
global.appConfig.incomingEmail.port📜
Type: int
Default value
993
global.appConfig.incomingEmail.ssl📜
Type: bool
Default value
true
global.appConfig.incomingEmail.startTls📜
Type: bool
Default value
false
global.appConfig.incomingEmail.user📜
Type: string
Default value
""
global.appConfig.incomingEmail.password.secret📜
Type: string
Default value
""
global.appConfig.incomingEmail.password.key📜
Type: string
Default value
"password"
global.appConfig.incomingEmail.deleteAfterDelivery📜
Type: bool
Default value
true
global.appConfig.incomingEmail.expungeDeleted📜
Type: bool
Default value
false
global.appConfig.incomingEmail.logger.logPath📜
Type: string
Default value
"/dev/stdout"
global.appConfig.incomingEmail.mailbox📜
Type: string
Default value
"inbox"
global.appConfig.incomingEmail.idleTimeout📜
Type: int
Default value
60
global.appConfig.incomingEmail.inboxMethod📜
Type: string
Default value
"imap"
global.appConfig.incomingEmail.clientSecret.key📜
Type: string
Default value
"secret"
global.appConfig.incomingEmail.pollInterval📜
Type: int
Default value
60
global.appConfig.incomingEmail.deliveryMethod📜
Type: string
Default value
"webhook"
global.appConfig.incomingEmail.authToken📜
Type: object
Default value
{}
global.appConfig.serviceDeskEmail.enabled📜
Type: bool
Default value
false
global.appConfig.serviceDeskEmail.address📜
Type: string
Default value
""
global.appConfig.serviceDeskEmail.host📜
Type: string
Default value
"imap.gmail.com"
global.appConfig.serviceDeskEmail.port📜
Type: int
Default value
993
global.appConfig.serviceDeskEmail.ssl📜
Type: bool
Default value
true
global.appConfig.serviceDeskEmail.startTls📜
Type: bool
Default value
false
global.appConfig.serviceDeskEmail.user📜
Type: string
Default value
""
global.appConfig.serviceDeskEmail.password.secret📜
Type: string
Default value
""
global.appConfig.serviceDeskEmail.password.key📜
Type: string
Default value
"password"
global.appConfig.serviceDeskEmail.deleteAfterDelivery📜
Type: bool
Default value
true
global.appConfig.serviceDeskEmail.expungeDeleted📜
Type: bool
Default value
false
global.appConfig.serviceDeskEmail.logger.logPath📜
Type: string
Default value
"/dev/stdout"
global.appConfig.serviceDeskEmail.mailbox📜
Type: string
Default value
"inbox"
global.appConfig.serviceDeskEmail.idleTimeout📜
Type: int
Default value
60
global.appConfig.serviceDeskEmail.inboxMethod📜
Type: string
Default value
"imap"
global.appConfig.serviceDeskEmail.clientSecret.key📜
Type: string
Default value
"secret"
global.appConfig.serviceDeskEmail.pollInterval📜
Type: int
Default value
60
global.appConfig.serviceDeskEmail.deliveryMethod📜
Type: string
Default value
"webhook"
global.appConfig.serviceDeskEmail.authToken📜
Type: object
Default value
{}
global.appConfig.ldap.preventSignin📜
Type: bool
Default value
false
global.appConfig.ldap.servers📜
Type: object
Default value
{}
global.appConfig.duoAuth.enabled📜
Type: bool
Default value
false
global.appConfig.gitlab_kas📜
Type: object
Default value
{}
global.appConfig.suggested_reviewers📜
Type: object
Default value
{}
global.appConfig.omniauth.enabled📜
Type: bool
Default value
false
global.appConfig.omniauth.autoSignInWithProvider📜
Type: string
Default value
nil
global.appConfig.omniauth.syncProfileFromProvider📜
Type: list
Default value
[]
global.appConfig.omniauth.syncProfileAttributes[0]📜
Type: string
Default value
"email"
global.appConfig.omniauth.allowSingleSignOn[0]📜
Type: string
Default value
"saml"
global.appConfig.omniauth.blockAutoCreatedUsers📜
Type: bool
Default value
true
global.appConfig.omniauth.autoLinkLdapUser📜
Type: bool
Default value
false
global.appConfig.omniauth.autoLinkSamlUser📜
Type: bool
Default value
false
global.appConfig.omniauth.autoLinkUser📜
Type: list
Default value
[]
global.appConfig.omniauth.externalProviders📜
Type: list
Default value
[]
global.appConfig.omniauth.allowBypassTwoFactor📜
Type: list
Default value
[]
global.appConfig.omniauth.providers📜
Type: list
Default value
[]
global.appConfig.kerberos.enabled📜
Type: bool
Default value
false
global.appConfig.kerberos.keytab.key📜
Type: string
Default value
"keytab"
global.appConfig.kerberos.servicePrincipalName📜
Type: string
Default value
""
global.appConfig.kerberos.krb5Config📜
Type: string
Default value
""
global.appConfig.kerberos.dedicatedPort.enabled📜
Type: bool
Default value
false
global.appConfig.kerberos.dedicatedPort.port📜
Type: int
Default value
8443
global.appConfig.kerberos.dedicatedPort.https📜
Type: bool
Default value
true
global.appConfig.kerberos.simpleLdapLinkingAllowedRealms📜
Type: list
Default value
[]
global.appConfig.sentry.enabled📜
Type: bool
Default value
false
global.appConfig.sentry.dsn📜
Type: string
Default value
nil
global.appConfig.sentry.clientside_dsn📜
Type: string
Default value
nil
global.appConfig.sentry.environment📜
Type: string
Default value
nil
global.appConfig.gitlab_docs.enabled📜
Type: bool
Default value
false
global.appConfig.gitlab_docs.host📜
Type: string
Default value
""
global.appConfig.smartcard.enabled📜
Type: bool
Default value
false
global.appConfig.smartcard.CASecret📜
Type: string
Default value
nil
global.appConfig.smartcard.clientCertificateRequiredHost📜
Type: string
Default value
nil
global.appConfig.smartcard.sanExtensions📜
Type: bool
Default value
false
global.appConfig.smartcard.requiredForGitAccess📜
Type: bool
Default value
false
global.appConfig.sidekiq.routingRules📜
Type: list
Default value
[]
global.appConfig.initialDefaults📜
Type: object
Default value
{}
global.oauth.gitlab-pages📜
Type: object
Default value
{}
global.geo.enabled📜
Type: bool
Default value
false
global.geo.role📜
Type: string
Default value
"primary"
global.geo.nodeName📜
Type: string
Default value
nil
global.geo.psql.password📜
Type: object
Default value
{}
global.geo.registry.replication.enabled📜
Type: bool
Default value
false
global.geo.registry.replication.primaryApiUrl📜
Type: string
Default value
nil
global.kas.enabled📜
Type: bool
Default value
false
global.kas.service.apiExternalPort📜
Type: int
Default value
8153
global.kas.tls.enabled📜
Type: bool
Default value
false
global.kas.tls.verify📜
Type: bool
Default value
true
global.spamcheck.enabled📜
Type: bool
Default value
false
global.shell.authToken📜
Type: object
Default value
{}
global.shell.hostKeys📜
Type: object
Default value
{}
global.shell.tcp.proxyProtocol📜
Type: bool
Default value
false
global.railsSecrets📜
Type: object
Default value
{}
global.rails.bootsnap.enabled📜
Type: bool
Default value
true
global.rails.sessionStore.sessionCookieTokenPrefix📜
Type: string
Default value
""
global.registry.bucket📜
Type: string
Default value
"registry"
global.registry.certificate📜
Type: object
Default value
{}
global.registry.httpSecret📜
Type: object
Default value
{}
global.registry.notificationSecret📜
Type: object
Default value
{}
global.registry.tls.enabled📜
Type: bool
Default value
false
global.registry.redis.cache.password📜
Type: object
Default value
{}
global.registry.redis.rateLimiting.password📜
Type: object
Default value
{}
global.registry.notifications📜
Type: object
Default value
{}
global.registry.enabled📜
Type: bool
Default value
true
global.registry.host📜
Type: string
Default value
nil
global.registry.api.protocol📜
Type: string
Default value
"http"
global.registry.api.serviceName📜
Type: string
Default value
"registry"
global.registry.api.port📜
Type: int
Default value
5000
global.registry.tokenIssuer📜
Type: string
Default value
"gitlab-issuer"
global.pages.enabled📜
Type: bool
Default value
false
global.pages.accessControl📜
Type: bool
Default value
false
global.pages.path📜
Type: string
Default value
nil
global.pages.host📜
Type: string
Default value
nil
global.pages.port📜
Type: string
Default value
nil
global.pages.https📜
Type: string
Default value
nil
global.pages.externalHttp📜
Type: list
Default value
[]
global.pages.externalHttps📜
Type: list
Default value
[]
global.pages.artifactsServer📜
Type: bool
Default value
true
global.pages.localStore.enabled📜
Type: bool
Default value
false
global.pages.objectStore.enabled📜
Type: bool
Default value
true
global.pages.objectStore.bucket📜
Type: string
Default value
"gitlab-pages"
global.pages.objectStore.connection📜
Type: object
Default value
{}
global.pages.apiSecret📜
Type: object
Default value
{}
global.pages.authSecret📜
Type: object
Default value
{}
global.pages.namespaceInPath📜
Type: bool
Default value
false
global.runner.registrationToken📜
Type: object
Default value
{}
global.smtp.enabled📜
Type: bool
Default value
false
global.smtp.address📜
Type: string
Default value
"smtp.mailgun.org"
global.smtp.port📜
Type: int
Default value
2525
global.smtp.user_name📜
Type: string
Default value
""
global.smtp.password.secret📜
Type: string
Default value
""
global.smtp.password.key📜
Type: string
Default value
"password"
global.smtp.authentication📜
Type: string
Default value
"plain"
global.smtp.starttls_auto📜
Type: bool
Default value
false
global.smtp.openssl_verify_mode📜
Type: string
Default value
"peer"
global.smtp.open_timeout📜
Type: int
Default value
30
global.smtp.read_timeout📜
Type: int
Default value
60
global.smtp.pool📜
Type: bool
Default value
false
global.email.from📜
Type: string
Default value
""
global.email.display_name📜
Type: string
Default value
"GitLab"
global.email.reply_to📜
Type: string
Default value
""
global.email.subject_suffix📜
Type: string
Default value
""
global.email.smime.enabled📜
Type: bool
Default value
false
global.email.smime.secretName📜
Type: string
Default value
""
global.email.smime.keyName📜
Type: string
Default value
"tls.key"
global.email.smime.certName📜
Type: string
Default value
"tls.crt"
global.time_zone📜
Type: string
Default value
"UTC"
global.service.labels📜
Type: object
Default value
{}
global.service.annotations📜
Type: object
Default value
{}
global.deployment.annotations📜
Type: object
Default value
{}
global.nodeAffinity📜
Type: string
Default value
nil
global.antiAffinity📜
Type: string
Default value
"soft"
global.affinity.podAntiAffinity.topologyKey📜
Type: string
Default value
"kubernetes.io/hostname"
global.affinity.nodeAffinity.key📜
Type: string
Default value
"topology.kubernetes.io/zone"
global.affinity.nodeAffinity.values📜
Type: list
Default value
[]
global.priorityClassName📜
Type: string
Default value
""
global.workhorse.serviceName📜
Type: string
Default value
"webservice-default"
global.workhorse.tls.enabled📜
Type: bool
Default value
false
global.webservice.workerTimeout📜
Type: int
Default value
60
global.certificates.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/certificates"
global.certificates.image.tag📜
Type: string
Default value
"17.5.1"
global.certificates.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
global.certificates.init.securityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
global.certificates.init.securityContext.runAsUser📜
Type: int
Default value
65534
global.certificates.init.securityContext.runAsNonRoot📜
Type: bool
Default value
true
global.certificates.customCAs[0].secret📜
Type: string
Default value
"ca-certs-australian-defence-organisation-cross-cert-chain"
global.certificates.customCAs[1].secret📜
Type: string
Default value
"ca-certs-australian-defence-organisation-direct-trust-chain"
global.certificates.customCAs[2].secret📜
Type: string
Default value
"ca-certs-boeing"
global.certificates.customCAs[3].secret📜
Type: string
Default value
"ca-certs-carillon-federal-services-trust-chain-1"
global.certificates.customCAs[4].secret📜
Type: string
Default value
"ca-certs-carillon-federal-services-trust-chain-2"
global.certificates.customCAs[5].secret📜
Type: string
Default value
"ca-certs-department-of-state-trust-chain-1"
global.certificates.customCAs[6].secret📜
Type: string
Default value
"ca-certs-department-of-state-trust-chain-2"
global.certificates.customCAs[7].secret📜
Type: string
Default value
"ca-certs-digicert-federal-ssp-trust-chain-1"
global.certificates.customCAs[8].secret📜
Type: string
Default value
"ca-certs-digicert-federal-ssp-trust-chain-2"
global.certificates.customCAs[9].secret📜
Type: string
Default value
"ca-certs-digicert-nfi-trust-chain-1"
global.certificates.customCAs[10].secret📜
Type: string
Default value
"ca-certs-digicert-nfi-trust-chain-2"
global.certificates.customCAs[11].secret📜
Type: string
Default value
"ca-certs-entrust-federal-ssp-trust-chain-1"
global.certificates.customCAs[12].secret📜
Type: string
Default value
"ca-certs-entrust-federal-ssp-trust-chain-2"
global.certificates.customCAs[13].secret📜
Type: string
Default value
"ca-certs-entrust-federal-ssp-trust-chain-3"
global.certificates.customCAs[14].secret📜
Type: string
Default value
"ca-certs-entrust-managed-service-nfi"
global.certificates.customCAs[15].secret📜
Type: string
Default value
"ca-certs-exostar-llc"
global.certificates.customCAs[16].secret📜
Type: string
Default value
"ca-certs-identrust-nfi"
global.certificates.customCAs[17].secret📜
Type: string
Default value
"ca-certs-lockheed-martin"
global.certificates.customCAs[18].secret📜
Type: string
Default value
"ca-certs-netherlands-ministry-of-defence"
global.certificates.customCAs[19].secret📜
Type: string
Default value
"ca-certs-northrop-grumman"
global.certificates.customCAs[20].secret📜
Type: string
Default value
"ca-certs-raytheon-trust-chain-1"
global.certificates.customCAs[21].secret📜
Type: string
Default value
"ca-certs-raytheon-trust-chain-2"
global.certificates.customCAs[22].secret📜
Type: string
Default value
"ca-certs-us-treasury-ssp-trust-chain-1"
global.certificates.customCAs[23].secret📜
Type: string
Default value
"ca-certs-us-treasury-ssp-trust-chain-2"
global.certificates.customCAs[24].secret📜
Type: string
Default value
"ca-certs-verizon-cybertrust-federal-ssp"
global.certificates.customCAs[25].secret📜
Type: string
Default value
"ca-certs-widepoint-federal-ssp-trust-chain-1"
global.certificates.customCAs[26].secret📜
Type: string
Default value
"ca-certs-widepoint-federal-ssp-trust-chain-2"
global.certificates.customCAs[27].secret📜
Type: string
Default value
"ca-certs-widepoint-nfi"
global.certificates.customCAs[28].secret📜
Type: string
Default value
"ca-certs-dod-intermediate-and-issuing-ca-certs"
global.certificates.customCAs[29].secret📜
Type: string
Default value
"ca-certs-dod-trust-anchors-self-signed"
global.certificates.customCAs[30].secret📜
Type: string
Default value
"ca-certs-eca"
global.kubectl.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/kubectl"
global.kubectl.image.tag📜
Type: string
Default value
"17.5.1"
global.kubectl.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
global.kubectl.securityContext.runAsUser📜
Type: int
Default value
65534
global.kubectl.securityContext.fsGroup📜
Type: int
Default value
65534
global.kubectl.securityContext.seccompProfile.type📜
Type: string
Default value
"RuntimeDefault"
global.gitlabBase.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base"
global.gitlabBase.image.tag📜
Type: string
Default value
"17.5.1"
global.gitlabBase.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
global.serviceAccount.enabled📜
Type: bool
Default value
true
global.serviceAccount.create📜
Type: bool
Default value
true
global.serviceAccount.annotations📜
Type: object
Default value
{}
global.serviceAccount.automountServiceAccountToken📜
Type: bool
Default value
false
global.tracing.connection.string📜
Type: string
Default value
""
global.tracing.urlTemplate📜
Type: string
Default value
""
global.zoekt.gateway.basicAuth📜
Type: object
Default value
{}
global.zoekt.indexer.internalApi📜
Type: object
Default value
{}
global.extraEnv📜
Type: object
Default value
{}
global.extraEnvFrom📜
Type: object
Default value
{}
global.job.nameSuffixOverride📜
Type: string
Default value
nil
global.traefik.apiVersion📜
Type: string
Default value
""
upgradeCheck.enabled📜
Type: bool
Default value
true
upgradeCheck.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/redhat/ubi/ubi9"
upgradeCheck.image.tag📜
Type: string
Default value
"9.4"
upgradeCheck.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
upgradeCheck.securityContext.runAsUser📜
Type: int
Default value
65534
upgradeCheck.securityContext.runAsGroup📜
Type: int
Default value
65534
upgradeCheck.securityContext.fsGroup📜
Type: int
Default value
65534
upgradeCheck.securityContext.seccompProfile.type📜
Type: string
Default value
"RuntimeDefault"
upgradeCheck.containerSecurityContext.runAsUser📜
Type: int
Default value
65534
upgradeCheck.containerSecurityContext.runAsGroup📜
Type: int
Default value
65534
upgradeCheck.containerSecurityContext.allowPrivilegeEscalation📜
Type: bool
Default value
false
upgradeCheck.containerSecurityContext.runAsNonRoot📜
Type: bool
Default value
true
upgradeCheck.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
upgradeCheck.tolerations📜
Type: list
Default value
[]
upgradeCheck.annotations.”sidecar.istio.io/inject”📜
Type: string
Default value
"true"
upgradeCheck.configMapAnnotations📜
Type: object
Default value
{}
upgradeCheck.resources.requests.cpu📜
Type: string
Default value
"500m"
upgradeCheck.resources.requests.memory📜
Type: string
Default value
"500Mi"
upgradeCheck.resources.limits.cpu📜
Type: string
Default value
"500m"
upgradeCheck.resources.limits.memory📜
Type: string
Default value
"500Mi"
certmanager.installCRDs📜
Type: bool
Default value
false
certmanager.nameOverride📜
Type: string
Default value
"certmanager"
certmanager.install📜
Type: bool
Default value
false
certmanager.rbac.create📜
Type: bool
Default value
true
nginx-ingress.enabled📜
Type: bool
Default value
false
nginx-ingress-geo.<<.enabled📜
Type: bool
Default value
false
nginx-ingress.tcpExternalConfig📜
Type: string
Default value
"true"
nginx-ingress-geo.<<.tcpExternalConfig📜
Type: string
Default value
"true"
nginx-ingress-geo.<<.controller.addHeaders.Referrer-Policy📜
Type: string
Default value
"strict-origin-when-cross-origin"
nginx-ingress.controller.addHeaders.Referrer-Policy📜
Type: string
Default value
"strict-origin-when-cross-origin"
nginx-ingress-geo.controller.<<.addHeaders.Referrer-Policy📜
Type: string
Default value
"strict-origin-when-cross-origin"
nginx-ingress.controller.config.annotation-value-word-blocklist📜
Type: string
Default value
"load_module,lua_package,_by_lua,location,root,proxy_pass,serviceaccount,{,},',\""
nginx-ingress-geo.<<.controller.config.annotation-value-word-blocklist📜
Type: string
Default value
"load_module,lua_package,_by_lua,location,root,proxy_pass,serviceaccount,{,},',\""
nginx-ingress-geo.controller.config.<<.annotation-value-word-blocklist📜
Type: string
Default value
"load_module,lua_package,_by_lua,location,root,proxy_pass,serviceaccount,{,},',\""
nginx-ingress-geo.controller.<<.config.annotation-value-word-blocklist📜
Type: string
Default value
"load_module,lua_package,_by_lua,location,root,proxy_pass,serviceaccount,{,},',\""
nginx-ingress.controller.config.hsts📜
Type: string
Default value
"true"
nginx-ingress-geo.<<.controller.config.hsts📜
Type: string
Default value
"true"
nginx-ingress-geo.controller.config.<<.hsts📜
Type: string
Default value
"true"
nginx-ingress-geo.controller.<<.config.hsts📜
Type: string
Default value
"true"
nginx-ingress.controller.config.hsts-include-subdomains📜
Type: string
Default value
"false"
nginx-ingress-geo.<<.controller.config.hsts-include-subdomains📜
Type: string
Default value
"false"
nginx-ingress-geo.controller.config.<<.hsts-include-subdomains📜
Type: string
Default value
"false"
nginx-ingress-geo.controller.<<.config.hsts-include-subdomains📜
Type: string
Default value
"false"
nginx-ingress-geo.controller.<<.config.hsts-max-age📜
Type: string
Default value
"63072000"
nginx-ingress.controller.config.hsts-max-age📜
Type: string
Default value
"63072000"
nginx-ingress-geo.controller.config.<<.hsts-max-age📜
Type: string
Default value
"63072000"
nginx-ingress-geo.<<.controller.config.hsts-max-age📜
Type: string
Default value
"63072000"
nginx-ingress-geo.controller.config.<<.server-name-hash-bucket-size📜
Type: string
Default value
"256"
nginx-ingress.controller.config.server-name-hash-bucket-size📜
Type: string
Default value
"256"
nginx-ingress-geo.<<.controller.config.server-name-hash-bucket-size📜
Type: string
Default value
"256"
nginx-ingress-geo.controller.<<.config.server-name-hash-bucket-size📜
Type: string
Default value
"256"
nginx-ingress-geo.controller.config.<<.use-http2📜
Type: string
Default value
"true"
nginx-ingress.controller.config.use-http2📜
Type: string
Default value
"true"
nginx-ingress-geo.<<.controller.config.use-http2📜
Type: string
Default value
"true"
nginx-ingress-geo.controller.<<.config.use-http2📜
Type: string
Default value
"true"
nginx-ingress-geo.controller.config.<<.ssl-ciphers📜
Type: string
Default value
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"
nginx-ingress-geo.<<.controller.config.ssl-ciphers📜
Type: string
Default value
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"
nginx-ingress.controller.config.ssl-ciphers📜
Type: string
Default value
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"
nginx-ingress-geo.controller.<<.config.ssl-ciphers📜
Type: string
Default value
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"
nginx-ingress-geo.controller.config.<<.ssl-protocols📜
Type: string
Default value
"TLSv1.3 TLSv1.2"
nginx-ingress-geo.controller.<<.config.ssl-protocols📜
Type: string
Default value
"TLSv1.3 TLSv1.2"
nginx-ingress-geo.<<.controller.config.ssl-protocols📜
Type: string
Default value
"TLSv1.3 TLSv1.2"
nginx-ingress.controller.config.ssl-protocols📜
Type: string
Default value
"TLSv1.3 TLSv1.2"
nginx-ingress-geo.<<.controller.config.server-tokens📜
Type: string
Default value
"false"
nginx-ingress-geo.controller.<<.config.server-tokens📜
Type: string
Default value
"false"
nginx-ingress-geo.controller.config.<<.server-tokens📜
Type: string
Default value
"false"
nginx-ingress.controller.config.server-tokens📜
Type: string
Default value
"false"
nginx-ingress-geo.controller.<<.config.upstream-keepalive-connections📜
Type: int
Default value
100
nginx-ingress-geo.controller.config.<<.upstream-keepalive-connections📜
Type: int
Default value
100
nginx-ingress-geo.<<.controller.config.upstream-keepalive-connections📜
Type: int
Default value
100
nginx-ingress.controller.config.upstream-keepalive-connections📜
Type: int
Default value
100
nginx-ingress-geo.controller.config.<<.upstream-keepalive-time📜
Type: string
Default value
"30s"
nginx-ingress-geo.controller.<<.config.upstream-keepalive-time📜
Type: string
Default value
"30s"
nginx-ingress-geo.<<.controller.config.upstream-keepalive-time📜
Type: string
Default value
"30s"
nginx-ingress.controller.config.upstream-keepalive-time📜
Type: string
Default value
"30s"
nginx-ingress-geo.controller.<<.config.upstream-keepalive-timeout📜
Type: int
Default value
5
nginx-ingress.controller.config.upstream-keepalive-timeout📜
Type: int
Default value
5
nginx-ingress-geo.<<.controller.config.upstream-keepalive-timeout📜
Type: int
Default value
5
nginx-ingress-geo.controller.config.<<.upstream-keepalive-timeout📜
Type: int
Default value
5
nginx-ingress.controller.config.upstream-keepalive-requests📜
Type: int
Default value
1000
nginx-ingress-geo.<<.controller.config.upstream-keepalive-requests📜
Type: int
Default value
1000
nginx-ingress-geo.controller.config.<<.upstream-keepalive-requests📜
Type: int
Default value
1000
nginx-ingress-geo.controller.<<.config.upstream-keepalive-requests📜
Type: int
Default value
1000
nginx-ingress-geo.<<.controller.service.externalTrafficPolicy📜
Type: string
Default value
"Local"
nginx-ingress.controller.service.externalTrafficPolicy📜
Type: string
Default value
"Local"
nginx-ingress-geo.controller.<<.service.externalTrafficPolicy📜
Type: string
Default value
"Local"
nginx-ingress.controller.ingressClassByName📜
Type: bool
Default value
false
nginx-ingress-geo.<<.controller.ingressClassByName📜
Type: bool
Default value
false
nginx-ingress-geo.controller.<<.ingressClassByName📜
Type: bool
Default value
false
nginx-ingress.controller.ingressClassResource.name📜
Type: string
Default value
"{{ include \"ingress.class.name\" $ }}"
nginx-ingress-geo.<<.controller.ingressClassResource.name📜
Type: string
Default value
"{{ include \"ingress.class.name\" $ }}"
nginx-ingress-geo.controller.<<.ingressClassResource.name📜
Type: string
Default value
"{{ include \"ingress.class.name\" $ }}"
nginx-ingress-geo.controller.<<.resources.requests.cpu📜
Type: string
Default value
"100m"
nginx-ingress-geo.<<.controller.resources.requests.cpu📜
Type: string
Default value
"100m"
nginx-ingress.controller.resources.requests.cpu📜
Type: string
Default value
"100m"
nginx-ingress-geo.controller.<<.resources.requests.memory📜
Type: string
Default value
"100Mi"
nginx-ingress.controller.resources.requests.memory📜
Type: string
Default value
"100Mi"
nginx-ingress-geo.<<.controller.resources.requests.memory📜
Type: string
Default value
"100Mi"
nginx-ingress-geo.controller.<<.publishService.enabled📜
Type: bool
Default value
true
nginx-ingress-geo.<<.controller.publishService.enabled📜
Type: bool
Default value
true
nginx-ingress.controller.publishService.enabled📜
Type: bool
Default value
true
nginx-ingress-geo.controller.<<.replicaCount📜
Type: int
Default value
2
nginx-ingress-geo.<<.controller.replicaCount📜
Type: int
Default value
2
nginx-ingress.controller.replicaCount📜
Type: int
Default value
2
nginx-ingress-geo.<<.controller.minAvailable📜
Type: int
Default value
1
nginx-ingress-geo.controller.<<.minAvailable📜
Type: int
Default value
1
nginx-ingress.controller.minAvailable📜
Type: int
Default value
1
nginx-ingress-geo.controller.<<.scope.enabled📜
Type: bool
Default value
true
nginx-ingress.controller.scope.enabled📜
Type: bool
Default value
true
nginx-ingress-geo.<<.controller.scope.enabled📜
Type: bool
Default value
true
nginx-ingress-geo.controller.<<.metrics.enabled📜
Type: bool
Default value
true
nginx-ingress.controller.metrics.enabled📜
Type: bool
Default value
true
nginx-ingress-geo.<<.controller.metrics.enabled📜
Type: bool
Default value
true
nginx-ingress-geo.controller.<<.metrics.service.annotations.”gitlab.com/prometheus_scrape”📜
Type: string
Default value
"true"
nginx-ingress.controller.metrics.service.annotations.”gitlab.com/prometheus_scrape”📜
Type: string
Default value
"true"
nginx-ingress-geo.<<.controller.metrics.service.annotations.”gitlab.com/prometheus_scrape”📜
Type: string
Default value
"true"
nginx-ingress.controller.metrics.service.annotations.”gitlab.com/prometheus_port”📜
Type: string
Default value
"10254"
nginx-ingress-geo.<<.controller.metrics.service.annotations.”gitlab.com/prometheus_port”📜
Type: string
Default value
"10254"
nginx-ingress-geo.controller.<<.metrics.service.annotations.”gitlab.com/prometheus_port”📜
Type: string
Default value
"10254"
nginx-ingress.controller.metrics.service.annotations.”prometheus.io/scrape”📜
Type: string
Default value
"true"
nginx-ingress-geo.controller.<<.metrics.service.annotations.”prometheus.io/scrape”📜
Type: string
Default value
"true"
nginx-ingress-geo.<<.controller.metrics.service.annotations.”prometheus.io/scrape”📜
Type: string
Default value
"true"
nginx-ingress-geo.controller.<<.metrics.service.annotations.”prometheus.io/port”📜
Type: string
Default value
"10254"
nginx-ingress-geo.<<.controller.metrics.service.annotations.”prometheus.io/port”📜
Type: string
Default value
"10254"
nginx-ingress.controller.metrics.service.annotations.”prometheus.io/port”📜
Type: string
Default value
"10254"
nginx-ingress.controller.admissionWebhooks.enabled📜
Type: bool
Default value
false
nginx-ingress-geo.controller.<<.admissionWebhooks.enabled📜
Type: bool
Default value
false
nginx-ingress-geo.<<.controller.admissionWebhooks.enabled📜
Type: bool
Default value
false
nginx-ingress-geo.<<.defaultBackend.resources.requests.cpu📜
Type: string
Default value
"5m"
nginx-ingress.defaultBackend.resources.requests.cpu📜
Type: string
Default value
"5m"
nginx-ingress-geo.<<.defaultBackend.resources.requests.memory📜
Type: string
Default value
"5Mi"
nginx-ingress.defaultBackend.resources.requests.memory📜
Type: string
Default value
"5Mi"
nginx-ingress.rbac.create📜
Type: bool
Default value
true
nginx-ingress-geo.<<.rbac.create📜
Type: bool
Default value
true
nginx-ingress-geo.<<.rbac.scope📜
Type: bool
Default value
false
nginx-ingress.rbac.scope📜
Type: bool
Default value
false
nginx-ingress-geo.<<.serviceAccount.create📜
Type: bool
Default value
true
nginx-ingress.serviceAccount.create📜
Type: bool
Default value
true
nginx-ingress-geo.enabled📜
Type: bool
Default value
false
nginx-ingress-geo.controller.config.use-forwarded-headers📜
Type: bool
Default value
true
nginx-ingress-geo.controller.electionID📜
Type: string
Default value
"ingress-controller-leader-geo"
nginx-ingress-geo.controller.ingressClassResource.name📜
Type: string
Default value
"{{ include \"gitlab.geo.ingress.class.name\" $ \| quote }}"
nginx-ingress-geo.controller.ingressClassResource.controllerValue📜
Type: string
Default value
"k8s.io/nginx-ingress-geo"
nginx-ingress-geo.externalIpTpl📜
Type: string
Default value
"{{ .Values.global.hosts.externalGeoIP }}"
haproxy.install📜
Type: bool
Default value
false
haproxy.controller.service.type📜
Type: string
Default value
"LoadBalancer"
haproxy.controller.service.tcpPorts[0].name📜
Type: string
Default value
"ssh"
haproxy.controller.service.tcpPorts[0].port📜
Type: int
Default value
22
haproxy.controller.service.tcpPorts[0].targetPort📜
Type: int
Default value
22
haproxy.controller.extraArgs[0]📜
Type: string
Default value
"--configmap-tcp-services=$(POD_NAMESPACE)/$(POD_NAMESPACE)-haproxy-tcp"
prometheus.install📜
Type: bool
Default value
false
prometheus.rbac.create📜
Type: bool
Default value
true
prometheus.alertmanager.enabled📜
Type: bool
Default value
false
prometheus.alertmanagerFiles.”alertmanager.yml”📜
Type: object
Default value
{}
prometheus.kubeStateMetrics.enabled📜
Type: bool
Default value
false
prometheus.nodeExporter.enabled📜
Type: bool
Default value
false
prometheus.pushgateway.enabled📜
Type: bool
Default value
false
prometheus.server.enabled📜
Type: bool
Default value
false
prometheus.server.retention📜
Type: string
Default value
"15d"
prometheus.server.strategy.type📜
Type: string
Default value
"Recreate"
prometheus.server.image.tag📜
Type: string
Default value
"v2.38.0"
prometheus.server.containerSecurityContext.runAsUser📜
Type: int
Default value
1000
prometheus.server.containerSecurityContext.allowPrivilegeEscalation📜
Type: bool
Default value
false
prometheus.server.containerSecurityContext.runAsNonRoot📜
Type: bool
Default value
true
prometheus.server.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
prometheus.server.containerSecurityContext.seccompProfile.type📜
Type: string
Default value
"RuntimeDefault"
prometheus.podSecurityPolicy.enabled📜
Type: bool
Default value
false
prometheus.configmapReload.prometheus.containerSecurityContext.runAsUser📜
Type: int
Default value
1000
prometheus.configmapReload.prometheus.containerSecurityContext.allowPrivilegeEscalation📜
Type: bool
Default value
false
prometheus.configmapReload.prometheus.containerSecurityContext.runAsNonRoot📜
Type: bool
Default value
true
prometheus.configmapReload.prometheus.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
prometheus.configmapReload.prometheus.containerSecurityContext.seccompProfile.type📜
Type: string
Default value
"RuntimeDefault"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[0].job_name📜
Type: string
Default value
"prometheus"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[0].static_configs[0].targets[0]📜
Type: string
Default value
"localhost:9090"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].job_name📜
Type: string
Default value
"kubernetes-apiservers"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].kubernetes_sd_configs[0].role📜
Type: string
Default value
"endpoints"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].scheme📜
Type: string
Default value
"https"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].tls_config.ca_file📜
Type: string
Default value
"/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].tls_config.insecure_skip_verify📜
Type: bool
Default value
true
prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].bearer_token_file📜
Type: string
Default value
"/var/run/secrets/kubernetes.io/serviceaccount/token"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].relabel_configs[0].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_namespace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].relabel_configs[0].source_labels[1]📜
Type: string
Default value
"__meta_kubernetes_service_name"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].relabel_configs[0].source_labels[2]📜
Type: string
Default value
"__meta_kubernetes_endpoint_port_name"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].relabel_configs[0].action📜
Type: string
Default value
"keep"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].relabel_configs[0].regex📜
Type: string
Default value
"default;kubernetes;https"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].job_name📜
Type: string
Default value
"kubernetes-pods"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].kubernetes_sd_configs[0].role📜
Type: string
Default value
"pod"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[0].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_pod_annotation_gitlab_com_prometheus_scrape"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[0].action📜
Type: string
Default value
"keep"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[0].regex📜
Type: bool
Default value
true
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[1].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_pod_annotation_gitlab_com_prometheus_scheme"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[1].action📜
Type: string
Default value
"replace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[1].regex📜
Type: string
Default value
"(https?)"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[1].target_label📜
Type: string
Default value
"__scheme__"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[2].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_pod_annotation_gitlab_com_prometheus_path"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[2].action📜
Type: string
Default value
"replace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[2].target_label📜
Type: string
Default value
"__metrics_path__"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[2].regex📜
Type: string
Default value
"(.+)"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].source_labels[0]📜
Type: string
Default value
"__address__"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].source_labels[1]📜
Type: string
Default value
"__meta_kubernetes_pod_annotation_gitlab_com_prometheus_port"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].action📜
Type: string
Default value
"replace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].regex📜
Type: string
Default value
"([^:]+)(?::\\d+)?;(\\d+)"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].replacement📜
Type: string
Default value
"$1:$2"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].target_label📜
Type: string
Default value
"__address__"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[4].action📜
Type: string
Default value
"labelmap"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[4].regex📜
Type: string
Default value
"__meta_kubernetes_pod_label_(.+)"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[5].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_namespace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[5].action📜
Type: string
Default value
"replace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[5].target_label📜
Type: string
Default value
"kubernetes_namespace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[6].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_pod_name"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[6].action📜
Type: string
Default value
"replace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[6].target_label📜
Type: string
Default value
"kubernetes_pod_name"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].job_name📜
Type: string
Default value
"kubernetes-service-endpoints"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].kubernetes_sd_configs[0].role📜
Type: string
Default value
"endpoints"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[0].action📜
Type: string
Default value
"keep"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[0].regex📜
Type: bool
Default value
true
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[0].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_service_annotation_gitlab_com_prometheus_scrape"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[1].action📜
Type: string
Default value
"replace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[1].regex📜
Type: string
Default value
"(https?)"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[1].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_service_annotation_gitlab_com_prometheus_scheme"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[1].target_label📜
Type: string
Default value
"__scheme__"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[2].action📜
Type: string
Default value
"replace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[2].regex📜
Type: string
Default value
"(.+)"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[2].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_service_annotation_gitlab_com_prometheus_path"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[2].target_label📜
Type: string
Default value
"__metrics_path__"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].action📜
Type: string
Default value
"replace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].regex📜
Type: string
Default value
"([^:]+)(?::\\d+)?;(\\d+)"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].replacement📜
Type: string
Default value
"$1:$2"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].source_labels[0]📜
Type: string
Default value
"__address__"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].source_labels[1]📜
Type: string
Default value
"__meta_kubernetes_service_annotation_gitlab_com_prometheus_port"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].target_label📜
Type: string
Default value
"__address__"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[4].action📜
Type: string
Default value
"labelmap"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[4].regex📜
Type: string
Default value
"__meta_kubernetes_service_label_(.+)"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[5].action📜
Type: string
Default value
"replace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[5].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_namespace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[5].target_label📜
Type: string
Default value
"kubernetes_namespace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[6].action📜
Type: string
Default value
"replace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[6].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_service_name"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[6].target_label📜
Type: string
Default value
"kubernetes_name"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[7].action📜
Type: string
Default value
"replace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[7].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_pod_node_name"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[7].target_label📜
Type: string
Default value
"kubernetes_node"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].job_name📜
Type: string
Default value
"kubernetes-services"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].metrics_path📜
Type: string
Default value
"/probe"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].params.module[0]📜
Type: string
Default value
"http_2xx"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].kubernetes_sd_configs[0].role📜
Type: string
Default value
"service"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[0].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_service_annotation_gitlab_com_prometheus_probe"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[0].action📜
Type: string
Default value
"keep"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[0].regex📜
Type: bool
Default value
true
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[1].source_labels[0]📜
Type: string
Default value
"__address__"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[1].target_label📜
Type: string
Default value
"__param_target"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[2].target_label📜
Type: string
Default value
"__address__"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[2].replacement📜
Type: string
Default value
"blackbox"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[3].source_labels[0]📜
Type: string
Default value
"__param_target"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[3].target_label📜
Type: string
Default value
"instance"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[4].action📜
Type: string
Default value
"labelmap"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[4].regex📜
Type: string
Default value
"__meta_kubernetes_service_label_(.+)"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[5].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_namespace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[5].target_label📜
Type: string
Default value
"kubernetes_namespace"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[6].source_labels[0]📜
Type: string
Default value
"__meta_kubernetes_service_name"
prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[6].target_label📜
Type: string
Default value
"kubernetes_name"
redis.global.imagePullSecrets[0]📜
Type: string
Default value
"private-registry"
redis.install📜
Type: bool
Default value
true
redis.auth.existingSecret📜
Type: string
Default value
"gitlab-redis-secret"
redis.auth.existingSecretKey📜
Type: string
Default value
"secret"
redis.auth.usePasswordFiles📜
Type: bool
Default value
true
redis.architecture📜
Type: string
Default value
"standalone"
redis.cluster.enabled📜
Type: bool
Default value
false
redis.metrics.enabled📜
Type: bool
Default value
true
redis.metrics.image.registry📜
Type: string
Default value
"registry1.dso.mil/ironbank/bitnami"
redis.metrics.image.repository📜
Type: string
Default value
"analytics/redis-exporter"
redis.metrics.image.tag📜
Type: string
Default value
"v1.66.0"
redis.metrics.image.pullSecrets📜
Type: list
Default value
[]
redis.metrics.resources.limits.cpu📜
Type: string
Default value
"250m"
redis.metrics.resources.limits.memory📜
Type: string
Default value
"256Mi"
redis.metrics.resources.requests.cpu📜
Type: string
Default value
"250m"
redis.metrics.resources.requests.memory📜
Type: string
Default value
"256Mi"
redis.metrics.containerSecurityContext.enabled📜
Type: bool
Default value
true
redis.metrics.containerSecurityContext.runAsUser📜
Type: int
Default value
1001
redis.metrics.containerSecurityContext.runAsGroup📜
Type: int
Default value
1001
redis.metrics.containerSecurityContext.runAsNonRoot📜
Type: bool
Default value
true
redis.metrics.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
redis.serviceAccount.automountServiceAccountToken📜
Type: bool
Default value
false
redis.securityContext.runAsUser📜
Type: int
Default value
1001
redis.securityContext.fsGroup📜
Type: int
Default value
1001
redis.securityContext.runAsNonRoot📜
Type: bool
Default value
true
redis.image.registry📜
Type: string
Default value
"registry1.dso.mil/ironbank/bitnami"
redis.image.repository📜
Type: string
Default value
"redis"
redis.image.tag📜
Type: string
Default value
"7.4.1"
redis.image.pullSecrets📜
Type: list
Default value
[]
redis.master.resources.limits.cpu📜
Type: string
Default value
"250m"
redis.master.resources.limits.memory📜
Type: string
Default value
"256Mi"
redis.master.resources.requests.cpu📜
Type: string
Default value
"250m"
redis.master.resources.requests.memory📜
Type: string
Default value
"256Mi"
redis.master.containerSecurityContext.enabled📜
Type: bool
Default value
true
redis.master.containerSecurityContext.runAsUser📜
Type: int
Default value
1001
redis.master.containerSecurityContext.runAsGroup📜
Type: int
Default value
1001
redis.master.containerSecurityContext.runAsNonRoot📜
Type: bool
Default value
true
redis.master.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
redis.slave.resources.limits.cpu📜
Type: string
Default value
"250m"
redis.slave.resources.limits.memory📜
Type: string
Default value
"256Mi"
redis.slave.resources.requests.cpu📜
Type: string
Default value
"250m"
redis.slave.resources.requests.memory📜
Type: string
Default value
"256Mi"
redis.slave.containerSecurityContext.enabled📜
Type: bool
Default value
true
redis.slave.containerSecurityContext.runAsUser📜
Type: int
Default value
1001
redis.slave.containerSecurityContext.runAsGroup📜
Type: int
Default value
1001
redis.slave.containerSecurityContext.runAsNonRoot📜
Type: bool
Default value
true
redis.slave.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
redis.sentinel.resources.limits.cpu📜
Type: string
Default value
"250m"
redis.sentinel.resources.limits.memory📜
Type: string
Default value
"256Mi"
redis.sentinel.resources.requests.cpu📜
Type: string
Default value
"250m"
redis.sentinel.resources.requests.memory📜
Type: string
Default value
"256Mi"
redis.volumePermissions.resources.limits.cpu📜
Type: string
Default value
"250m"
redis.volumePermissions.resources.limits.memory📜
Type: string
Default value
"256Mi"
redis.volumePermissions.resources.requests.cpu📜
Type: string
Default value
"250m"
redis.volumePermissions.resources.requests.memory📜
Type: string
Default value
"256Mi"
redis.sysctlImage.resources.limits.cpu📜
Type: string
Default value
"250m"
redis.sysctlImage.resources.limits.memory📜
Type: string
Default value
"256Mi"
redis.sysctlImage.resources.requests.cpu📜
Type: string
Default value
"250m"
redis.sysctlImage.resources.requests.memory📜
Type: string
Default value
"256Mi"
postgresql.install📜
Type: bool
Default value
true
postgresql.postgresqlDatabase📜
Type: string
Default value
"gitlabhq_production"
postgresql.resources.limits.cpu📜
Type: string
Default value
"500m"
postgresql.resources.limits.memory📜
Type: string
Default value
"500Mi"
postgresql.resources.requests.cpu📜
Type: string
Default value
"500m"
postgresql.resources.requests.memory📜
Type: string
Default value
"500Mi"
postgresql.image.registry📜
Type: string
Default value
"registry1.dso.mil"
postgresql.image.repository📜
Type: string
Default value
"ironbank/opensource/postgres/postgresql"
postgresql.image.tag📜
Type: string
Default value
"14.13"
postgresql.image.pullSecrets[0]📜
Type: string
Default value
"private-registry"
postgresql.auth.username📜
Type: string
Default value
"gitlab"
postgresql.auth.password📜
Type: string
Default value
"bogus-satisfy-upgrade"
postgresql.auth.postgresPassword📜
Type: string
Default value
"bogus-satisfy-upgrade"
postgresql.auth.usePasswordFiles📜
Type: bool
Default value
false
postgresql.auth.existingSecret📜
Type: string
Default value
"{{ include \"gitlab.psql.password.secret\" . }}"
postgresql.auth.secretKeys.adminPasswordKey📜
Type: string
Default value
"postgresql-postgres-password"
postgresql.auth.secretKeys.userPasswordKey📜
Type: string
Default value
"{{ include \"gitlab.psql.password.key\" $ }}"
postgresql.primary.persistence.mountPath📜
Type: string
Default value
"/var/lib/postgresql"
postgresql.primary.initdb.scriptsConfigMap📜
Type: string
Default value
"{{ include \"gitlab.psql.initdbscripts\" $}}"
postgresql.primary.initdb.user📜
Type: string
Default value
"gitlab"
postgresql.primary.containerSecurityContext.enabled📜
Type: bool
Default value
true
postgresql.primary.containerSecurityContext.runAsUser📜
Type: int
Default value
1001
postgresql.primary.containerSecurityContext.runAsGroup📜
Type: int
Default value
1001
postgresql.primary.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
postgresql.master.extraVolumeMounts[0].name📜
Type: string
Default value
"custom-init-scripts"
postgresql.master.extraVolumeMounts[0].mountPath📜
Type: string
Default value
"/docker-entrypoint-preinitdb.d/init_revision.sh"
postgresql.master.extraVolumeMounts[0].subPath📜
Type: string
Default value
"init_revision.sh"
postgresql.master.podAnnotations.”postgresql.gitlab/init-revision”📜
Type: string
Default value
"1"
postgresql.metrics.enabled📜
Type: bool
Default value
false
postgresql.metrics.service.annotations.”prometheus.io/scrape”📜
Type: string
Default value
"true"
postgresql.metrics.service.annotations.”prometheus.io/port”📜
Type: string
Default value
"9187"
postgresql.metrics.service.annotations.”gitlab.com/prometheus_scrape”📜
Type: string
Default value
"true"
postgresql.metrics.service.annotations.”gitlab.com/prometheus_port”📜
Type: string
Default value
"9187"
postgresql.postgresqlInitdbArgs📜
Type: string
Default value
"-A scram-sha-256"
postgresql.securityContext.enabled📜
Type: bool
Default value
true
postgresql.securityContext.fsGroup📜
Type: int
Default value
26
postgresql.securityContext.runAsUser📜
Type: int
Default value
26
postgresql.securityContext.runAsGroup📜
Type: int
Default value
26
postgresql.postgresqlDataDir📜
Type: string
Default value
"/var/lib/postgresql/pgdata/data"
postgresql.volumePermissions.enabled📜
Type: bool
Default value
false
registry.enabled📜
Type: bool
Default value
true
registry.init.resources.limits.cpu📜
Type: string
Default value
"200m"
registry.init.resources.limits.memory📜
Type: string
Default value
"200Mi"
registry.init.resources.requests.cpu📜
Type: string
Default value
"200m"
registry.init.resources.requests.memory📜
Type: string
Default value
"200Mi"
registry.init.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
registry.resources.limits.cpu📜
Type: string
Default value
"200m"
registry.resources.limits.memory📜
Type: string
Default value
"1024Mi"
registry.resources.requests.cpu📜
Type: string
Default value
"200m"
registry.resources.requests.memory📜
Type: string
Default value
"1024Mi"
registry.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry"
registry.image.tag📜
Type: string
Default value
"17.5.1"
registry.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
registry.ingress.enabled📜
Type: bool
Default value
false
registry.metrics.enabled📜
Type: bool
Default value
true
registry.metrics.path📜
Type: string
Default value
"/metrics"
registry.metrics.serviceMonitor.enabled📜
Type: bool
Default value
true
registry.securityContext.runAsUser📜
Type: int
Default value
1000
registry.securityContext.runAsGroup📜
Type: int
Default value
1000
registry.securityContext.fsGroup📜
Type: int
Default value
1000
registry.containerSecurityContext.runAsUser📜
Type: int
Default value
1000
registry.containerSecurityContext.runAsGroup📜
Type: int
Default value
1000
registry.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
shared-secrets.enabled📜
Type: bool
Default value
true
shared-secrets.rbac.create📜
Type: bool
Default value
true
shared-secrets.selfsign.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/cfssl-self-sign"
shared-secrets.selfsign.image.tag📜
Type: string
Default value
"1.6.1"
shared-secrets.selfsign.keyAlgorithm📜
Type: string
Default value
"rsa"
shared-secrets.selfsign.keySize📜
Type: string
Default value
"4096"
shared-secrets.selfsign.expiry📜
Type: string
Default value
"3650d"
shared-secrets.selfsign.caSubject📜
Type: string
Default value
"GitLab Helm Chart"
shared-secrets.env📜
Type: string
Default value
"production"
shared-secrets.serviceAccount.enabled📜
Type: bool
Default value
true
shared-secrets.serviceAccount.create📜
Type: bool
Default value
true
shared-secrets.serviceAccount.name📜
Type: string
Default value
nil
shared-secrets.serviceAccount.automountServiceAccountToken📜
Type: bool
Default value
false
shared-secrets.resources.requests.cpu📜
Type: string
Default value
"300m"
shared-secrets.resources.requests.memory📜
Type: string
Default value
"200Mi"
shared-secrets.resources.limits.cpu📜
Type: string
Default value
"300m"
shared-secrets.resources.limits.memory📜
Type: string
Default value
"200Mi"
shared-secrets.securityContext.runAsUser📜
Type: int
Default value
65534
shared-secrets.securityContext.runAsGroup📜
Type: int
Default value
65534
shared-secrets.securityContext.fsGroup📜
Type: int
Default value
65534
shared-secrets.securityContext.seccompProfile.type📜
Type: string
Default value
"RuntimeDefault"
shared-secrets.containerSecurityContext.allowPrivilegeEscalation📜
Type: bool
Default value
false
shared-secrets.containerSecurityContext.runAsNonRoot📜
Type: bool
Default value
true
shared-secrets.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
shared-secrets.tolerations📜
Type: list
Default value
[]
shared-secrets.podLabels📜
Type: object
Default value
{}
shared-secrets.annotations.”sidecar.istio.io/inject”📜
Type: string
Default value
"true"
gitlab-runner.install📜
Type: bool
Default value
false
gitlab-runner.rbac.create📜
Type: bool
Default value
true
gitlab-runner.runners.locked📜
Type: bool
Default value
false
gitlab-runner.runners.secret📜
Type: string
Default value
"nonempty"
gitlab-runner.runners.config📜
Type: string
Default value
"[[runners]]\n [runners.kubernetes]\n image = \"ubuntu:22.04\"\n {{- if .Values.global.minio.enabled }}\n [runners.cache]\n Type = \"s3\"\n Path = \"gitlab-runner\"\n Shared = true\n [runners.cache.s3]\n ServerAddress = {{ include \"gitlab-runner.cache-tpl.s3ServerAddress\" . }}\n BucketName = \"runner-cache\"\n BucketLocation = \"us-east-1\"\n Insecure = false\n {{ end }}\n"
gitlab-runner.podAnnotations.”gitlab.com/prometheus_scrape”📜
Type: string
Default value
"true"
gitlab-runner.podAnnotations.”gitlab.com/prometheus_port”📜
Type: int
Default value
9252
gitlab-runner.podSecurityContext.seccompProfile.type📜
Type: string
Default value
"RuntimeDefault"
gitlab-runner.securityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
traefik.install📜
Type: bool
Default value
false
traefik.ports.gitlab-shell.expose📜
Type: bool
Default value
true
traefik.ports.gitlab-shell.port📜
Type: int
Default value
2222
traefik.ports.gitlab-shell.exposedPort📜
Type: int
Default value
22
gitlab.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.init.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.certificates.init.securityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.certificates.init.securityContext.runAsUser📜
Type: int
Default value
65534
gitlab.certificates.init.securityContext.runAsNonRoot📜
Type: bool
Default value
true
gitlab.toolbox.replicas📜
Type: int
Default value
1
gitlab.toolbox.antiAffinityLabels.matchLabels.app📜
Type: string
Default value
"gitaly"
gitlab.toolbox.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox"
gitlab.toolbox.image.tag📜
Type: string
Default value
"17.5.1"
gitlab.toolbox.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
gitlab.toolbox.init.resources.requests.cpu📜
Type: string
Default value
"200m"
gitlab.toolbox.init.resources.requests.memory📜
Type: string
Default value
"200Mi"
gitlab.toolbox.init.resources.limits.cpu📜
Type: string
Default value
"200m"
gitlab.toolbox.init.resources.limits.memory📜
Type: string
Default value
"200Mi"
gitlab.toolbox.init.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.toolbox.resources.requests.cpu📜
Type: int
Default value
2
gitlab.toolbox.resources.requests.memory📜
Type: string
Default value
"3.5Gi"
gitlab.toolbox.resources.limits.cpu📜
Type: int
Default value
2
gitlab.toolbox.resources.limits.memory📜
Type: string
Default value
"3.5Gi"
gitlab.toolbox.annotations.”sidecar.istio.io/proxyMemory”📜
Type: string
Default value
"512Mi"
gitlab.toolbox.annotations.”sidecar.istio.io/proxyMemoryLimit”📜
Type: string
Default value
"512Mi"
gitlab.toolbox.backups.cron.resources.requests.cpu📜
Type: string
Default value
"500m"
gitlab.toolbox.backups.cron.resources.requests.memory📜
Type: string
Default value
"768Mi"
gitlab.toolbox.backups.cron.resources.limits.cpu📜
Type: string
Default value
"500m"
gitlab.toolbox.backups.cron.resources.limits.memory📜
Type: string
Default value
"768Mi"
gitlab.toolbox.backups.cron.istioShutdown📜
Type: string
Default value
"&& echo \"Backup Complete\" && until curl -fsI http://localhost:15021/healthz/ready; do echo \"Waiting for Istio sidecar proxy...\"; sleep 3; done && sleep 5 && echo \"Stopping the istio proxy...\" && curl -X POST http://localhost:15020/quitquitquit"
gitlab.toolbox.securityContext.runAsUser📜
Type: int
Default value
1000
gitlab.toolbox.securityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.toolbox.securityContext.fsGroup📜
Type: int
Default value
1000
gitlab.toolbox.containerSecurityContext.runAsUser📜
Type: int
Default value
1000
gitlab.toolbox.containerSecurityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.toolbox.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.toolbox.customScripts📜
Type: string
Default value
nil
gitlab.gitlab-exporter.enabled📜
Type: bool
Default value
false
gitlab.gitlab-exporter.init.resources.limits.cpu📜
Type: string
Default value
"200m"
gitlab.gitlab-exporter.init.resources.limits.memory📜
Type: string
Default value
"200Mi"
gitlab.gitlab-exporter.init.resources.requests.cpu📜
Type: string
Default value
"200m"
gitlab.gitlab-exporter.init.resources.requests.memory📜
Type: string
Default value
"200Mi"
gitlab.gitlab-exporter.init.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.gitlab-exporter.resources.limits.cpu📜
Type: string
Default value
"150m"
gitlab.gitlab-exporter.resources.limits.memory📜
Type: string
Default value
"200Mi"
gitlab.gitlab-exporter.resources.requests.cpu📜
Type: string
Default value
"150m"
gitlab.gitlab-exporter.resources.requests.memory📜
Type: string
Default value
"200Mi"
gitlab.gitlab-exporter.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.gitlab-exporter.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter"
gitlab.gitlab-exporter.image.tag📜
Type: string
Default value
"17.5.1"
gitlab.gitlab-exporter.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
gitlab.gitlab-exporter.metrics.enabled📜
Type: bool
Default value
true
gitlab.gitlab-exporter.metrics.port📜
Type: int
Default value
9168
gitlab.gitlab-exporter.metrics.serviceMonitor.enabled📜
Type: bool
Default value
true
gitlab.gitlab-exporter.securityContext.runAsUser📜
Type: int
Default value
1000
gitlab.gitlab-exporter.securityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.gitlab-exporter.securityContext.fsGroup📜
Type: int
Default value
1000
gitlab.gitlab-exporter.containerSecurityContext.runAsUser📜
Type: int
Default value
1000
gitlab.gitlab-exporter.containerSecurityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.gitlab-exporter.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.migrations.annotations.”sidecar.istio.io/inject”📜
Type: string
Default value
"true"
gitlab.migrations.init.resources.limits.cpu📜
Type: string
Default value
"500m"
gitlab.migrations.init.resources.limits.memory📜
Type: string
Default value
"768Mi"
gitlab.migrations.init.resources.requests.cpu📜
Type: string
Default value
"500m"
gitlab.migrations.init.resources.requests.memory📜
Type: string
Default value
"768Mi"
gitlab.migrations.init.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.migrations.resources.limits.cpu📜
Type: string
Default value
"500m"
gitlab.migrations.resources.limits.memory📜
Type: string
Default value
"1.5G"
gitlab.migrations.resources.requests.cpu📜
Type: string
Default value
"500m"
gitlab.migrations.resources.requests.memory📜
Type: string
Default value
"1.5G"
gitlab.migrations.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox"
gitlab.migrations.image.tag📜
Type: string
Default value
"17.5.1"
gitlab.migrations.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
gitlab.migrations.securityContext.runAsUser📜
Type: int
Default value
1000
gitlab.migrations.securityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.migrations.securityContext.fsGroup📜
Type: int
Default value
1000
gitlab.migrations.containerSecurityContext.runAsUser📜
Type: int
Default value
1000
gitlab.migrations.containerSecurityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.migrations.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.webservice.init.resources.limits.cpu📜
Type: string
Default value
"200m"
gitlab.webservice.init.resources.limits.memory📜
Type: string
Default value
"200Mi"
gitlab.webservice.init.resources.requests.cpu📜
Type: string
Default value
"200m"
gitlab.webservice.init.resources.requests.memory📜
Type: string
Default value
"200Mi"
gitlab.webservice.init.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.webservice.securityContext.runAsUser📜
Type: int
Default value
1000
gitlab.webservice.securityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.webservice.securityContext.fsGroup📜
Type: int
Default value
1000
gitlab.webservice.containerSecurityContext.runAsUser📜
Type: int
Default value
1000
gitlab.webservice.containerSecurityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.webservice.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.webservice.resources.limits.cpu📜
Type: string
Default value
"1000m"
gitlab.webservice.resources.limits.memory📜
Type: string
Default value
"2.5G"
gitlab.webservice.resources.requests.cpu📜
Type: string
Default value
"300m"
gitlab.webservice.resources.requests.memory📜
Type: string
Default value
"2.5G"
gitlab.webservice.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice"
gitlab.webservice.image.tag📜
Type: string
Default value
"17.5.1"
gitlab.webservice.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
gitlab.webservice.workhorse.resources.limits.cpu📜
Type: string
Default value
"600m"
gitlab.webservice.workhorse.resources.limits.memory📜
Type: string
Default value
"2.5G"
gitlab.webservice.workhorse.resources.requests.cpu📜
Type: string
Default value
"600m"
gitlab.webservice.workhorse.resources.requests.memory📜
Type: string
Default value
"2.5G"
gitlab.webservice.workhorse.image📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse"
gitlab.webservice.workhorse.tag📜
Type: string
Default value
"17.5.1"
gitlab.webservice.workhorse.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
gitlab.webservice.workhorse.metrics.enabled📜
Type: bool
Default value
true
gitlab.webservice.workhorse.metrics.serviceMonitor.enabled📜
Type: bool
Default value
true
gitlab.webservice.workhorse.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.webservice.ingress.enabled📜
Type: bool
Default value
false
gitlab.webservice.metrics.enabled📜
Type: bool
Default value
true
gitlab.webservice.metrics.port📜
Type: int
Default value
8083
gitlab.webservice.metrics.serviceMonitor.enabled📜
Type: bool
Default value
true
gitlab.webservice.helmTests.enabled📜
Type: bool
Default value
false
gitlab.sidekiq.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq"
gitlab.sidekiq.image.tag📜
Type: string
Default value
"17.5.1"
gitlab.sidekiq.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
gitlab.sidekiq.init.resources.limits.cpu📜
Type: string
Default value
"200m"
gitlab.sidekiq.init.resources.limits.memory📜
Type: string
Default value
"200Mi"
gitlab.sidekiq.init.resources.requests.cpu📜
Type: string
Default value
"200m"
gitlab.sidekiq.init.resources.requests.memory📜
Type: string
Default value
"200Mi"
gitlab.sidekiq.init.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.sidekiq.resources.requests.memory📜
Type: string
Default value
"3G"
gitlab.sidekiq.resources.requests.cpu📜
Type: string
Default value
"1500m"
gitlab.sidekiq.resources.limits.memory📜
Type: string
Default value
"3G"
gitlab.sidekiq.resources.limits.cpu📜
Type: string
Default value
"1500m"
gitlab.sidekiq.securityContext.runAsUser📜
Type: int
Default value
1000
gitlab.sidekiq.securityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.sidekiq.securityContext.fsGroup📜
Type: int
Default value
1000
gitlab.sidekiq.containerSecurityContext.runAsUser📜
Type: int
Default value
1000
gitlab.sidekiq.containerSecurityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.sidekiq.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.gitaly.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitaly"
gitlab.gitaly.image.tag📜
Type: string
Default value
"17.5.1"
gitlab.gitaly.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
gitlab.gitaly.init.resources.limits.cpu📜
Type: string
Default value
"200m"
gitlab.gitaly.init.resources.limits.memory📜
Type: string
Default value
"200Mi"
gitlab.gitaly.init.resources.requests.cpu📜
Type: string
Default value
"200m"
gitlab.gitaly.init.resources.requests.memory📜
Type: string
Default value
"200Mi"
gitlab.gitaly.init.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.gitaly.resources.requests.cpu📜
Type: string
Default value
"400m"
gitlab.gitaly.resources.requests.memory📜
Type: string
Default value
"600Mi"
gitlab.gitaly.resources.limits.cpu📜
Type: string
Default value
"400m"
gitlab.gitaly.resources.limits.memory📜
Type: string
Default value
"600Mi"
gitlab.gitaly.metrics.enabled📜
Type: bool
Default value
true
gitlab.gitaly.metrics.serviceMonitor.enabled📜
Type: bool
Default value
true
gitlab.gitaly.securityContext.runAsUser📜
Type: int
Default value
1000
gitlab.gitaly.securityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.gitaly.securityContext.fsGroup📜
Type: int
Default value
1000
gitlab.gitaly.containerSecurityContext.runAsUser📜
Type: int
Default value
1000
gitlab.gitaly.containerSecurityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.gitaly.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.gitlab-shell.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell"
gitlab.gitlab-shell.image.tag📜
Type: string
Default value
"17.5.1"
gitlab.gitlab-shell.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
gitlab.gitlab-shell.init.resources.limits.cpu📜
Type: string
Default value
"200m"
gitlab.gitlab-shell.init.resources.limits.memory📜
Type: string
Default value
"200Mi"
gitlab.gitlab-shell.init.resources.requests.cpu📜
Type: string
Default value
"200m"
gitlab.gitlab-shell.init.resources.requests.memory📜
Type: string
Default value
"200Mi"
gitlab.gitlab-shell.init.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.gitlab-shell.resources.limits.cpu📜
Type: string
Default value
"300m"
gitlab.gitlab-shell.resources.limits.memory📜
Type: string
Default value
"300Mi"
gitlab.gitlab-shell.resources.requests.cpu📜
Type: string
Default value
"300m"
gitlab.gitlab-shell.resources.requests.memory📜
Type: string
Default value
"300Mi"
gitlab.gitlab-shell.securityContext.runAsUser📜
Type: int
Default value
1000
gitlab.gitlab-shell.securityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.gitlab-shell.securityContext.fsGroup📜
Type: int
Default value
1000
gitlab.gitlab-shell.containerSecurityContext.runAsUser📜
Type: int
Default value
1000
gitlab.gitlab-shell.containerSecurityContext.runAsGroup📜
Type: int
Default value
1000
gitlab.gitlab-shell.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.mailroom.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom"
gitlab.mailroom.image.tag📜
Type: string
Default value
"17.5.1"
gitlab.mailroom.image.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
gitlab.mailroom.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.gitlab-pages.service.customDomains.type📜
Type: string
Default value
"ClusterIP"
gitlab.gitlab-pages.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages"
gitlab.gitlab-pages.image.tag📜
Type: string
Default value
"17.5.1"
gitlab.gitlab-pages.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.praefect.image.repository📜
Type: string
Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitaly"
gitlab.praefect.image.tag📜
Type: string
Default value
"17.5.1"
gitlab.praefect.init.resources.limits.cpu📜
Type: string
Default value
"200m"
gitlab.praefect.init.resources.limits.memory📜
Type: string
Default value
"200Mi"
gitlab.praefect.init.resources.requests.cpu📜
Type: string
Default value
"200m"
gitlab.praefect.init.resources.requests.memory📜
Type: string
Default value
"200Mi"
gitlab.praefect.init.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab.praefect.resources.requests.cpu📜
Type: int
Default value
1
gitlab.praefect.resources.requests.memory📜
Type: string
Default value
"1Gi"
gitlab.praefect.resources.limits.cpu📜
Type: int
Default value
1
gitlab.praefect.resources.limits.memory📜
Type: string
Default value
"1Gi"
gitlab.praefect.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
gitlab-zoekt.install📜
Type: bool
Default value
false
gitlab-zoekt.gateway.basicAuth.enabled📜
Type: bool
Default value
false
gitlab-zoekt.gateway.basicAuth.secretName📜
Type: string
Default value
"{{ include \"gitlab.zoekt.gateway.basicAuth.secretName\" $ }}"
gitlab-zoekt.indexer.internalApi.enabled📜
Type: bool
Default value
true
gitlab-zoekt.indexer.internalApi.secretName📜
Type: string
Default value
"{{ include \"gitlab.zoekt.indexer.internalApi.secretName\" $ }}"
gitlab-zoekt.indexer.internalApi.secretKey📜
Type: string
Default value
"{{ include \"gitlab.zoekt.indexer.internalApi.secretKey\" $ }}"
gitlab-zoekt.indexer.internalApi.gitlabUrl📜
Type: string
Default value
"{{ include \"gitlab.zoekt.indexer.internalApi.gitlabUrl\" $ }}"
minio.init.resources.limits.cpu📜
Type: string
Default value
"200m"
minio.init.resources.limits.memory📜
Type: string
Default value
"200Mi"
minio.init.resources.requests.cpu📜
Type: string
Default value
"200m"
minio.init.resources.requests.memory📜
Type: string
Default value
"200Mi"
minio.init.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
minio.resources.limits.cpu📜
Type: string
Default value
"200m"
minio.resources.limits.memory📜
Type: string
Default value
"300Mi"
minio.resources.requests.cpu📜
Type: string
Default value
"200m"
minio.resources.requests.memory📜
Type: string
Default value
"300Mi"
minio.securityContext.runAsUser📜
Type: int
Default value
1000
minio.securityContext.runAsGroup📜
Type: int
Default value
1000
minio.securityContext.fsGroup📜
Type: int
Default value
1000
minio.containerSecurityContext.runAsUser📜
Type: int
Default value
1000
minio.containerSecurityContext.runAsGroup📜
Type: int
Default value
1000
minio.containerSecurityContext.runAsNonRoot📜
Type: bool
Default value
true
minio.containerSecurityContext.capabilities.drop[0]📜
Type: string
Default value
"ALL"
minio.jobAnnotations.”sidecar.istio.io/inject”📜
Type: string
Default value
"true"
minio.image📜
Type: string
Default value
"registry1.dso.mil/ironbank/opensource/minio/minio"
minio.imageTag📜
Type: string
Default value
"RELEASE.2024-06-04T19-20-08Z"
minio.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
minio.minioMc.image📜
Type: string
Default value
"registry1.dso.mil/ironbank/opensource/minio/mc"
minio.minioMc.tag📜
Type: string
Default value
"RELEASE.2024-10-02T08-27-28Z"
minio.minioMc.pullSecrets[0].name📜
Type: string
Default value
"private-registry"
domain📜
Type: string
Default value
"dev.bigbang.mil"
sso.enabled📜
Type: bool
Default value
false
sso.host📜
Type: string
Default value
"login.dso.mil"
istio.enabled📜
Type: bool
Default value
false
istio.injection📜
Type: string
Default value
"disabled"
istio.hardened.enabled📜
Type: bool
Default value
false
istio.hardened.outboundTrafficPolicyMode📜
Type: string
Default value
"REGISTRY_ONLY"
istio.hardened.customServiceEntries📜
Type: list
Default value
[]
istio.hardened.customAuthorizationPolicies📜
Type: list
Default value
[]
istio.hardened.gitlabRunner.enabled📜
Type: bool
Default value
true
istio.hardened.gitlabRunner.namespaces[0]📜
Type: string
Default value
"gitlab-runner"
istio.hardened.monitoring.enabled📜
Type: bool
Default value
true
istio.hardened.monitoring.namespaces[0]📜
Type: string
Default value
"monitoring"
istio.hardened.monitoring.principals[0]📜
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-grafana"
istio.hardened.monitoring.principals[1]📜
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-alertmanager"
istio.hardened.monitoring.principals[2]📜
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-operator"
istio.hardened.monitoring.principals[3]📜
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus"
istio.hardened.monitoring.principals[4]📜
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-state-metrics"
istio.hardened.monitoring.principals[5]📜
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-prometheus-node-exporter"
istio.gitlab.enabled📜
Type: bool
Default value
true
istio.gitlab.annotations📜
Type: object
Default value
{}
istio.gitlab.labels📜
Type: object
Default value
{}
istio.gitlab.gateways[0]📜
Type: string
Default value
"istio-system/main"
istio.gitlab.hosts📜
Type: string
Default value
nil
istio.gitlab.selectorLabels.app📜
Type: string
Default value
"webservice"
istio.registry.enabled📜
Type: bool
Default value
true
istio.registry.annotations📜
Type: object
Default value
{}
istio.registry.labels📜
Type: object
Default value
{}
istio.registry.gateways[0]📜
Type: string
Default value
"istio-system/main"
istio.registry.hosts📜
Type: string
Default value
nil
istio.registry.selectorLabels.app📜
Type: string
Default value
"registry"
istio.pages.enabled📜
Type: bool
Default value
false
istio.pages.annotations📜
Type: object
Default value
{}
istio.pages.ingressLabels.app📜
Type: string
Default value
"pages-ingressgateway"
istio.pages.ingressLabels.istio📜
Type: string
Default value
"ingressgateway"
istio.pages.labels📜
Type: object
Default value
{}
istio.pages.gateways[0]📜
Type: string
Default value
"istio-system/pages"
istio.pages.customDomains.enabled📜
Type: bool
Default value
true
istio.pages.hosts[0]📜
Type: string
Default value
"*.pages.dev.bigbang.mil"
istio.mtls📜
Type: object
Default value
mode: STRICT
Description: Default peer authentication
istio.mtls.mode📜
Type: string
Default value
"STRICT"
Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
monitoring.enabled📜
Type: bool
Default value
false
networkPolicies.enabled📜
Type: bool
Default value
false
networkPolicies.ingressLabels.app📜
Type: string
Default value
"istio-ingressgateway"
networkPolicies.ingressLabels.istio📜
Type: string
Default value
"ingressgateway"
networkPolicies.controlPlaneCidr📜
Type: string
Default value
"0.0.0.0/0"
networkPolicies.egressPort📜
Type: string
Default value
nil
networkPolicies.gitalyEgress.enabled📜
Type: bool
Default value
false
networkPolicies.additionalPolicies📜
Type: list
Default value
[]
openshift📜
Type: bool
Default value
false
use_iam_profile📜
Type: bool
Default value
false
bbtests.enabled📜
Type: bool
Default value
false
bbtests.cypress.resources.requests.cpu📜
Type: int
Default value
1
bbtests.cypress.resources.requests.memory📜
Type: string
Default value
"2Gi"
bbtests.cypress.resources.limits.cpu📜
Type: int
Default value
1
bbtests.cypress.resources.limits.memory📜
Type: string
Default value
"2Gi"
bbtests.cypress.artifacts📜
Type: bool
Default value
true
bbtests.cypress.envs.cypress_url📜
Type: string
Default value
"http://gitlab-webservice-default:8181"
bbtests.cypress.envs.cypress_gitlab_first_name📜
Type: string
Default value
"test"
bbtests.cypress.envs.cypress_gitlab_last_name📜
Type: string
Default value
"user"
bbtests.cypress.envs.cypress_gitlab_username📜
Type: string
Default value
"testuser"
bbtests.cypress.envs.cypress_gitlab_password📜
Type: string
Default value
"Password123h56a78"
bbtests.cypress.envs.cypress_gitlab_email📜
Type: string
Default value
"testuser@example.com"
bbtests.cypress.envs.cypress_gitlab_project📜
Type: string
Default value
"my-awesome-project"
bbtests.cypress.envs.cypress_keycloak_username📜
Type: string
Default value
"cypress"
bbtests.cypress.envs.cypress_keycloak_password📜
Type: string
Default value
"tnr_w!G33ZyAt@C8"
bbtests.cypress.secretEnvs[0].name📜
Type: string
Default value
"cypress_adminpassword"
bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.name📜
Type: string
Default value
"gitlab-gitlab-initial-root-password"
bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.key📜
Type: string
Default value
"password"
bbtests.scripts.image📜
Type: string
Default value
"registry1.dso.mil/bigbang-ci/devops-tester:1.1.1"
bbtests.scripts.additionalVolumes[0].name📜
Type: string
Default value
"docker-config"
bbtests.scripts.additionalVolumes[0].secret.secretName📜
Type: string
Default value
"private-registry"
bbtests.scripts.additionalVolumes[0].secret.items[0].key📜
Type: string
Default value
".dockerconfigjson"
bbtests.scripts.additionalVolumes[0].secret.items[0].path📜
Type: string
Default value
"auth.json"
bbtests.scripts.additionalVolumeMounts[0].name📜
Type: string
Default value
"docker-config"
bbtests.scripts.additionalVolumeMounts[0].mountPath📜
Type: string
Default value
"/.docker/"
bbtests.scripts.envs.GITLAB_USER📜
Type: string
Default value
"root"
bbtests.scripts.envs.GITLAB_EMAIL📜
Type: string
Default value
"gitlab-root-user@example.com"
bbtests.scripts.envs.GITLAB_HOST📜
Type: string
Default value
"gitlab-webservice-default.gitlab.svc.cluster.local:8181"
bbtests.scripts.envs.GITLAB_PROJECT📜
Type: string
Default value
"bigbang-test-project-2"
bbtests.scripts.envs.GITLAB_REGISTRY📜
Type: string
Default value
"gitlab-registry-test-svc.gitlab.svc.cluster.local:80"
bbtests.scripts.envs.GITLAB_REPOSITORY📜
Type: string
Default value
"http://gitlab-webservice-default.gitlab.svc.cluster.local:8181"