Skip to content

gitlab values.yaml📜

global.istio.enabled📜

Type: bool

Default value
false

global.istio.injection📜

Type: string

Default value
"disabled"

global.common.labels📜

Type: object

Default value
{}

global.image📜

Type: object

Default value
{}

global.pod.labels📜

Type: object

Default value
{}

global.edition📜

Type: string

Default value
"ee"

global.gitlabVersion📜

Type: string

Default value
"17.6.2"

global.application.create📜

Type: bool

Default value
false

Type: list

Default value
[]

global.application.allowClusterRoles📜

Type: bool

Default value
true

global.hosts.domain📜

Type: string

Default value
"dev.bigbang.mil"

global.hosts.hostSuffix📜

Type: string

Default value
nil

global.hosts.https📜

Type: bool

Default value
true

global.hosts.externalIP📜

Type: string

Default value
nil

global.hosts.ssh📜

Type: string

Default value
nil

global.hosts.gitlab.name📜

Type: string

Default value
"gitlab.dev.bigbang.mil"

global.hosts.minio📜

Type: object

Default value
{}

global.hosts.registry.name📜

Type: string

Default value
"registry.dev.bigbang.mil"

global.hosts.tls📜

Type: object

Default value
{}

global.hosts.smartcard📜

Type: object

Default value
{}

global.hosts.kas📜

Type: object

Default value
{}

global.hosts.pages📜

Type: object

Default value
{}

global.ingress.apiVersion📜

Type: string

Default value
""

global.ingress.configureCertmanager📜

Type: bool

Default value
false

global.ingress.useNewIngressForCerts📜

Type: bool

Default value
false

global.ingress.provider📜

Type: string

Default value
"nginx"

global.ingress.annotations📜

Type: object

Default value
{}

global.ingress.enabled📜

Type: bool

Default value
false

global.ingress.tls📜

Type: object

Default value
{}

global.ingress.path📜

Type: string

Default value
"/"

global.ingress.pathType📜

Type: string

Default value
"Prefix"

global.hpa.apiVersion📜

Type: string

Default value
"autoscaling/v2"

global.keda.enabled📜

Type: bool

Default value
false

global.pdb.apiVersion📜

Type: string

Default value
"policy/v1"

global.batch.cronJob.apiVersion📜

Type: string

Default value
"batch/v1"

global.monitoring.enabled📜

Type: bool

Default value
false

global.gitlab.license📜

Type: object

Default value
{}

global.initialRootPassword📜

Type: object

Default value
{}

global.psql.connectTimeout📜

Type: string

Default value
nil

global.psql.keepalives📜

Type: string

Default value
nil

global.psql.keepalivesIdle📜

Type: string

Default value
nil

global.psql.keepalivesInterval📜

Type: string

Default value
nil

global.psql.keepalivesCount📜

Type: string

Default value
nil

global.psql.tcpUserTimeout📜

Type: string

Default value
nil

global.psql.password📜

Type: object

Default value
{}

global.psql.main📜

Type: object

Default value
{}

global.psql.ci📜

Type: object

Default value
{}

global.redis.auth.enabled📜

Type: bool

Default value
true

global.redis.securityContext.runAsUser📜

Type: int

Default value
1001

global.redis.securityContext.fsGroup📜

Type: int

Default value
1001

global.redis.securityContext.runAsNonRoot📜

Type: bool

Default value
true

global.redis.containerSecurityContext.enabled📜

Type: bool

Default value
true

global.redis.containerSecurityContext.runAsUser📜

Type: int

Default value
1001

global.redis.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

global.redis.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

global.redis.sentinelAuth.enabled📜

Type: bool

Default value
false

global.gitaly.enabled📜

Type: bool

Default value
true

global.gitaly.authToken📜

Type: object

Default value
{}

global.gitaly.internal.names[0]📜

Type: string

Default value
"default"

global.gitaly.external📜

Type: list

Default value
[]

global.gitaly.service.name📜

Type: string

Default value
"gitaly"

global.gitaly.service.type📜

Type: string

Default value
"ClusterIP"

global.gitaly.service.externalPort📜

Type: int

Default value
8075

global.gitaly.service.internalPort📜

Type: int

Default value
8075

global.gitaly.service.tls.externalPort📜

Type: int

Default value
8076

global.gitaly.service.tls.internalPort📜

Type: int

Default value
8076

global.gitaly.tls.enabled📜

Type: bool

Default value
false

global.praefect.enabled📜

Type: bool

Default value
false

global.praefect.ntpHost📜

Type: string

Default value
"pool.ntp.org"

global.praefect.replaceInternalGitaly📜

Type: bool

Default value
true

global.praefect.authToken📜

Type: object

Default value
{}

global.praefect.autoMigrate📜

Type: bool

Default value
true

global.praefect.dbSecret📜

Type: object

Default value
{}

global.praefect.virtualStorages[0].name📜

Type: string

Default value
"default"

global.praefect.virtualStorages[0].gitalyReplicas📜

Type: int

Default value
3

global.praefect.virtualStorages[0].maxUnavailable📜

Type: int

Default value
1

global.praefect.psql.sslMode📜

Type: string

Default value
"disable"

global.praefect.service.name📜

Type: string

Default value
"praefect"

global.praefect.service.type📜

Type: string

Default value
"ClusterIP"

global.praefect.service.externalPort📜

Type: int

Default value
8075

global.praefect.service.internalPort📜

Type: int

Default value
8075

global.praefect.service.tls.externalPort📜

Type: int

Default value
8076

global.praefect.service.tls.internalPort📜

Type: int

Default value
8076

global.praefect.tls.enabled📜

Type: bool

Default value
false

global.minio.enabled📜

Type: bool

Default value
true

global.minio.credentials📜

Type: object

Default value
{}

global.appConfig.enableUsagePing📜

Type: bool

Default value
true

Type: bool

Default value
true

global.appConfig.enableImpersonation📜

Type: string

Default value
nil

global.appConfig.applicationSettingsCacheSeconds📜

Type: int

Default value
60

global.appConfig.defaultCanCreateGroup📜

Type: bool

Default value
false

global.appConfig.usernameChangingEnabled📜

Type: bool

Default value
true

global.appConfig.issueClosingPattern📜

Type: string

Default value
nil

global.appConfig.defaultTheme📜

Type: string

Default value
nil

global.appConfig.defaultColorMode📜

Type: string

Default value
nil

global.appConfig.defaultSyntaxHighlightingTheme📜

Type: string

Default value
nil

global.appConfig.defaultProjectsFeatures.issues📜

Type: bool

Default value
true

global.appConfig.defaultProjectsFeatures.mergeRequests📜

Type: bool

Default value
true

global.appConfig.defaultProjectsFeatures.wiki📜

Type: bool

Default value
true

global.appConfig.defaultProjectsFeatures.snippets📜

Type: bool

Default value
true

global.appConfig.defaultProjectsFeatures.builds📜

Type: bool

Default value
true

global.appConfig.graphQlTimeout📜

Type: string

Default value
nil

global.appConfig.webhookTimeout📜

Type: string

Default value
nil

global.appConfig.maxRequestDurationSeconds📜

Type: string

Default value
nil

global.appConfig.cron_jobs📜

Type: object

Default value
{}

global.appConfig.contentSecurityPolicy.enabled📜

Type: bool

Default value
false

global.appConfig.contentSecurityPolicy.report_only📜

Type: bool

Default value
true

global.appConfig.gravatar.plainUrl📜

Type: string

Default value
nil

global.appConfig.gravatar.sslUrl📜

Type: string

Default value
nil

global.appConfig.extra.googleAnalyticsId📜

Type: string

Default value
nil

global.appConfig.extra.matomoUrl📜

Type: string

Default value
nil

global.appConfig.extra.matomoSiteId📜

Type: string

Default value
nil

global.appConfig.extra.matomoDisableCookies📜

Type: string

Default value
nil

global.appConfig.extra.oneTrustId📜

Type: string

Default value
nil

global.appConfig.extra.googleTagManagerNonceId📜

Type: string

Default value
nil

global.appConfig.extra.bizible📜

Type: string

Default value
nil

global.appConfig.object_store.enabled📜

Type: bool

Default value
false

global.appConfig.object_store.proxy_download📜

Type: bool

Default value
true

global.appConfig.object_store.storage_options📜

Type: object

Default value
{}

global.appConfig.object_store.connection📜

Type: object

Default value
{}

global.appConfig.lfs.enabled📜

Type: bool

Default value
true

global.appConfig.lfs.proxy_download📜

Type: bool

Default value
true

global.appConfig.lfs.bucket📜

Type: string

Default value
"git-lfs"

global.appConfig.lfs.connection📜

Type: object

Default value
{}

global.appConfig.artifacts.enabled📜

Type: bool

Default value
true

global.appConfig.artifacts.proxy_download📜

Type: bool

Default value
true

global.appConfig.artifacts.bucket📜

Type: string

Default value
"gitlab-artifacts"

global.appConfig.artifacts.connection📜

Type: object

Default value
{}

global.appConfig.uploads.enabled📜

Type: bool

Default value
true

global.appConfig.uploads.proxy_download📜

Type: bool

Default value
true

global.appConfig.uploads.bucket📜

Type: string

Default value
"gitlab-uploads"

global.appConfig.uploads.connection📜

Type: object

Default value
{}

global.appConfig.packages.enabled📜

Type: bool

Default value
true

global.appConfig.packages.proxy_download📜

Type: bool

Default value
true

global.appConfig.packages.bucket📜

Type: string

Default value
"gitlab-packages"

global.appConfig.packages.connection📜

Type: object

Default value
{}

global.appConfig.externalDiffs.enabled📜

Type: bool

Default value
false

global.appConfig.externalDiffs.when📜

Type: string

Default value
nil

global.appConfig.externalDiffs.proxy_download📜

Type: bool

Default value
true

global.appConfig.externalDiffs.bucket📜

Type: string

Default value
"gitlab-mr-diffs"

global.appConfig.externalDiffs.connection📜

Type: object

Default value
{}

global.appConfig.terraformState.enabled📜

Type: bool

Default value
false

global.appConfig.terraformState.bucket📜

Type: string

Default value
"gitlab-terraform-state"

global.appConfig.terraformState.connection📜

Type: object

Default value
{}

global.appConfig.ciSecureFiles.enabled📜

Type: bool

Default value
false

global.appConfig.ciSecureFiles.bucket📜

Type: string

Default value
"gitlab-ci-secure-files"

global.appConfig.ciSecureFiles.connection📜

Type: object

Default value
{}

global.appConfig.dependencyProxy.enabled📜

Type: bool

Default value
false

global.appConfig.dependencyProxy.proxy_download📜

Type: bool

Default value
true

global.appConfig.dependencyProxy.bucket📜

Type: string

Default value
"gitlab-dependency-proxy"

global.appConfig.dependencyProxy.connection📜

Type: object

Default value
{}

global.appConfig.backups.bucket📜

Type: string

Default value
"gitlab-backups"

global.appConfig.backups.tmpBucket📜

Type: string

Default value
"tmp"

global.appConfig.microsoft_graph_mailer.enabled📜

Type: bool

Default value
false

global.appConfig.microsoft_graph_mailer.user_id📜

Type: string

Default value
""

global.appConfig.microsoft_graph_mailer.tenant📜

Type: string

Default value
""

global.appConfig.microsoft_graph_mailer.client_id📜

Type: string

Default value
""

global.appConfig.microsoft_graph_mailer.client_secret.secret📜

Type: string

Default value
""

global.appConfig.microsoft_graph_mailer.client_secret.key📜

Type: string

Default value
"secret"

global.appConfig.microsoft_graph_mailer.azure_ad_endpoint📜

Type: string

Default value
"https://login.microsoftonline.com"

global.appConfig.microsoft_graph_mailer.graph_endpoint📜

Type: string

Default value
"https://graph.microsoft.com"

global.appConfig.incomingEmail.enabled📜

Type: bool

Default value
false

global.appConfig.incomingEmail.address📜

Type: string

Default value
""

global.appConfig.incomingEmail.host📜

Type: string

Default value
"imap.gmail.com"

global.appConfig.incomingEmail.port📜

Type: int

Default value
993

global.appConfig.incomingEmail.ssl📜

Type: bool

Default value
true

global.appConfig.incomingEmail.startTls📜

Type: bool

Default value
false

global.appConfig.incomingEmail.user📜

Type: string

Default value
""

global.appConfig.incomingEmail.password.secret📜

Type: string

Default value
""

global.appConfig.incomingEmail.password.key📜

Type: string

Default value
"password"

global.appConfig.incomingEmail.deleteAfterDelivery📜

Type: bool

Default value
true

global.appConfig.incomingEmail.expungeDeleted📜

Type: bool

Default value
false

global.appConfig.incomingEmail.logger.logPath📜

Type: string

Default value
"/dev/stdout"

global.appConfig.incomingEmail.mailbox📜

Type: string

Default value
"inbox"

global.appConfig.incomingEmail.idleTimeout📜

Type: int

Default value
60

global.appConfig.incomingEmail.inboxMethod📜

Type: string

Default value
"imap"

global.appConfig.incomingEmail.clientSecret.key📜

Type: string

Default value
"secret"

global.appConfig.incomingEmail.pollInterval📜

Type: int

Default value
60

global.appConfig.incomingEmail.deliveryMethod📜

Type: string

Default value
"webhook"

global.appConfig.incomingEmail.authToken📜

Type: object

Default value
{}

global.appConfig.serviceDeskEmail.enabled📜

Type: bool

Default value
false

global.appConfig.serviceDeskEmail.address📜

Type: string

Default value
""

global.appConfig.serviceDeskEmail.host📜

Type: string

Default value
"imap.gmail.com"

global.appConfig.serviceDeskEmail.port📜

Type: int

Default value
993

global.appConfig.serviceDeskEmail.ssl📜

Type: bool

Default value
true

global.appConfig.serviceDeskEmail.startTls📜

Type: bool

Default value
false

global.appConfig.serviceDeskEmail.user📜

Type: string

Default value
""

global.appConfig.serviceDeskEmail.password.secret📜

Type: string

Default value
""

global.appConfig.serviceDeskEmail.password.key📜

Type: string

Default value
"password"

global.appConfig.serviceDeskEmail.deleteAfterDelivery📜

Type: bool

Default value
true

global.appConfig.serviceDeskEmail.expungeDeleted📜

Type: bool

Default value
false

global.appConfig.serviceDeskEmail.logger.logPath📜

Type: string

Default value
"/dev/stdout"

global.appConfig.serviceDeskEmail.mailbox📜

Type: string

Default value
"inbox"

global.appConfig.serviceDeskEmail.idleTimeout📜

Type: int

Default value
60

global.appConfig.serviceDeskEmail.inboxMethod📜

Type: string

Default value
"imap"

global.appConfig.serviceDeskEmail.clientSecret.key📜

Type: string

Default value
"secret"

global.appConfig.serviceDeskEmail.pollInterval📜

Type: int

Default value
60

global.appConfig.serviceDeskEmail.deliveryMethod📜

Type: string

Default value
"webhook"

global.appConfig.serviceDeskEmail.authToken📜

Type: object

Default value
{}

global.appConfig.ldap.preventSignin📜

Type: bool

Default value
false

global.appConfig.ldap.servers📜

Type: object

Default value
{}

global.appConfig.duoAuth.enabled📜

Type: bool

Default value
false

global.appConfig.gitlab_kas📜

Type: object

Default value
{}

global.appConfig.suggested_reviewers📜

Type: object

Default value
{}

global.appConfig.omniauth.enabled📜

Type: bool

Default value
false

global.appConfig.omniauth.autoSignInWithProvider📜

Type: string

Default value
nil

global.appConfig.omniauth.syncProfileFromProvider📜

Type: list

Default value
[]

global.appConfig.omniauth.syncProfileAttributes[0]📜

Type: string

Default value
"email"

global.appConfig.omniauth.allowSingleSignOn[0]📜

Type: string

Default value
"saml"

global.appConfig.omniauth.blockAutoCreatedUsers📜

Type: bool

Default value
true

global.appConfig.omniauth.autoLinkLdapUser📜

Type: bool

Default value
false

global.appConfig.omniauth.autoLinkSamlUser📜

Type: bool

Default value
false

global.appConfig.omniauth.autoLinkUser📜

Type: list

Default value
[]

global.appConfig.omniauth.externalProviders📜

Type: list

Default value
[]

global.appConfig.omniauth.allowBypassTwoFactor📜

Type: list

Default value
[]

global.appConfig.omniauth.providers📜

Type: list

Default value
[]

global.appConfig.kerberos.enabled📜

Type: bool

Default value
false

global.appConfig.kerberos.keytab.key📜

Type: string

Default value
"keytab"

global.appConfig.kerberos.servicePrincipalName📜

Type: string

Default value
""

global.appConfig.kerberos.krb5Config📜

Type: string

Default value
""

global.appConfig.kerberos.dedicatedPort.enabled📜

Type: bool

Default value
false

global.appConfig.kerberos.dedicatedPort.port📜

Type: int

Default value
8443

global.appConfig.kerberos.dedicatedPort.https📜

Type: bool

Default value
true

global.appConfig.kerberos.simpleLdapLinkingAllowedRealms📜

Type: list

Default value
[]

global.appConfig.sentry.enabled📜

Type: bool

Default value
false

global.appConfig.sentry.dsn📜

Type: string

Default value
nil

global.appConfig.sentry.clientside_dsn📜

Type: string

Default value
nil

global.appConfig.sentry.environment📜

Type: string

Default value
nil

global.appConfig.gitlab_docs.enabled📜

Type: bool

Default value
false

global.appConfig.gitlab_docs.host📜

Type: string

Default value
""

global.appConfig.smartcard.enabled📜

Type: bool

Default value
false

global.appConfig.smartcard.CASecret📜

Type: string

Default value
nil

global.appConfig.smartcard.clientCertificateRequiredHost📜

Type: string

Default value
nil

global.appConfig.smartcard.sanExtensions📜

Type: bool

Default value
false

global.appConfig.smartcard.requiredForGitAccess📜

Type: bool

Default value
false

global.appConfig.sidekiq.routingRules📜

Type: list

Default value
[]

global.appConfig.initialDefaults📜

Type: object

Default value
{}

global.oauth.gitlab-pages📜

Type: object

Default value
{}

global.geo.enabled📜

Type: bool

Default value
false

global.geo.role📜

Type: string

Default value
"primary"

global.geo.nodeName📜

Type: string

Default value
nil

global.geo.psql.password📜

Type: object

Default value
{}

global.geo.registry.replication.enabled📜

Type: bool

Default value
false

global.geo.registry.replication.primaryApiUrl📜

Type: string

Default value
nil

global.kas.enabled📜

Type: bool

Default value
false

global.kas.service.apiExternalPort📜

Type: int

Default value
8153

global.kas.tls.enabled📜

Type: bool

Default value
false

global.kas.tls.verify📜

Type: bool

Default value
true

global.spamcheck.enabled📜

Type: bool

Default value
false

global.shell.authToken📜

Type: object

Default value
{}

global.shell.hostKeys📜

Type: object

Default value
{}

global.shell.tcp.proxyProtocol📜

Type: bool

Default value
false

global.railsSecrets📜

Type: object

Default value
{}

global.rails.bootsnap.enabled📜

Type: bool

Default value
true

global.rails.sessionStore.sessionCookieTokenPrefix📜

Type: string

Default value
""

global.registry.bucket📜

Type: string

Default value
"registry"

global.registry.certificate📜

Type: object

Default value
{}

global.registry.httpSecret📜

Type: object

Default value
{}

global.registry.notificationSecret📜

Type: object

Default value
{}

global.registry.tls.enabled📜

Type: bool

Default value
false

global.registry.redis.cache.password📜

Type: object

Default value
{}

global.registry.redis.rateLimiting.password📜

Type: object

Default value
{}

global.registry.notifications📜

Type: object

Default value
{}

global.registry.enabled📜

Type: bool

Default value
true

global.registry.host📜

Type: string

Default value
nil

global.registry.api.protocol📜

Type: string

Default value
"http"

global.registry.api.serviceName📜

Type: string

Default value
"registry"

global.registry.api.port📜

Type: int

Default value
5000

global.registry.tokenIssuer📜

Type: string

Default value
"gitlab-issuer"

global.pages.enabled📜

Type: bool

Default value
false

global.pages.accessControl📜

Type: bool

Default value
false

global.pages.path📜

Type: string

Default value
nil

global.pages.host📜

Type: string

Default value
nil

global.pages.port📜

Type: string

Default value
nil

global.pages.https📜

Type: string

Default value
nil

global.pages.externalHttp📜

Type: list

Default value
[]

global.pages.externalHttps📜

Type: list

Default value
[]

global.pages.artifactsServer📜

Type: bool

Default value
true

global.pages.localStore.enabled📜

Type: bool

Default value
false

global.pages.objectStore.enabled📜

Type: bool

Default value
true

global.pages.objectStore.bucket📜

Type: string

Default value
"gitlab-pages"

global.pages.objectStore.connection📜

Type: object

Default value
{}

global.pages.apiSecret📜

Type: object

Default value
{}

global.pages.authSecret📜

Type: object

Default value
{}

global.pages.namespaceInPath📜

Type: bool

Default value
false

global.runner.registrationToken📜

Type: object

Default value
{}

global.smtp.enabled📜

Type: bool

Default value
false

global.smtp.address📜

Type: string

Default value
"smtp.mailgun.org"

global.smtp.port📜

Type: int

Default value
2525

global.smtp.user_name📜

Type: string

Default value
""

global.smtp.password.secret📜

Type: string

Default value
""

global.smtp.password.key📜

Type: string

Default value
"password"

global.smtp.authentication📜

Type: string

Default value
"plain"

global.smtp.starttls_auto📜

Type: bool

Default value
false

global.smtp.openssl_verify_mode📜

Type: string

Default value
"peer"

global.smtp.open_timeout📜

Type: int

Default value
30

global.smtp.read_timeout📜

Type: int

Default value
60

global.smtp.pool📜

Type: bool

Default value
false

global.email.from📜

Type: string

Default value
""

global.email.display_name📜

Type: string

Default value
"GitLab"

global.email.reply_to📜

Type: string

Default value
""

global.email.subject_suffix📜

Type: string

Default value
""

global.email.smime.enabled📜

Type: bool

Default value
false

global.email.smime.secretName📜

Type: string

Default value
""

global.email.smime.keyName📜

Type: string

Default value
"tls.key"

global.email.smime.certName📜

Type: string

Default value
"tls.crt"

global.time_zone📜

Type: string

Default value
"UTC"

global.service.labels📜

Type: object

Default value
{}

global.service.annotations📜

Type: object

Default value
{}

global.deployment.annotations📜

Type: object

Default value
{}

global.nodeAffinity📜

Type: string

Default value
nil

global.antiAffinity📜

Type: string

Default value
"soft"

global.affinity.podAntiAffinity.topologyKey📜

Type: string

Default value
"kubernetes.io/hostname"

global.affinity.nodeAffinity.key📜

Type: string

Default value
"topology.kubernetes.io/zone"

global.affinity.nodeAffinity.values📜

Type: list

Default value
[]

global.priorityClassName📜

Type: string

Default value
""

global.workhorse.serviceName📜

Type: string

Default value
"webservice-default"

global.workhorse.tls.enabled📜

Type: bool

Default value
false

global.webservice.workerTimeout📜

Type: int

Default value
60

global.certificates.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/certificates"

global.certificates.image.tag📜

Type: string

Default value
"17.6.2"

global.certificates.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

global.certificates.init.securityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

global.certificates.init.securityContext.runAsUser📜

Type: int

Default value
65534

global.certificates.init.securityContext.runAsNonRoot📜

Type: bool

Default value
true

global.certificates.customCAs[0].secret📜

Type: string

Default value
"ca-certs-australian-defence-organisation-cross-cert-chain"

global.certificates.customCAs[1].secret📜

Type: string

Default value
"ca-certs-australian-defence-organisation-direct-trust-chain"

global.certificates.customCAs[2].secret📜

Type: string

Default value
"ca-certs-boeing"

global.certificates.customCAs[3].secret📜

Type: string

Default value
"ca-certs-carillon-federal-services-trust-chain-1"

global.certificates.customCAs[4].secret📜

Type: string

Default value
"ca-certs-carillon-federal-services-trust-chain-2"

global.certificates.customCAs[5].secret📜

Type: string

Default value
"ca-certs-department-of-state-trust-chain-1"

global.certificates.customCAs[6].secret📜

Type: string

Default value
"ca-certs-department-of-state-trust-chain-2"

global.certificates.customCAs[7].secret📜

Type: string

Default value
"ca-certs-digicert-federal-ssp-trust-chain-1"

global.certificates.customCAs[8].secret📜

Type: string

Default value
"ca-certs-digicert-federal-ssp-trust-chain-2"

global.certificates.customCAs[9].secret📜

Type: string

Default value
"ca-certs-digicert-nfi-trust-chain-1"

global.certificates.customCAs[10].secret📜

Type: string

Default value
"ca-certs-digicert-nfi-trust-chain-2"

global.certificates.customCAs[11].secret📜

Type: string

Default value
"ca-certs-entrust-federal-ssp-trust-chain-1"

global.certificates.customCAs[12].secret📜

Type: string

Default value
"ca-certs-entrust-federal-ssp-trust-chain-2"

global.certificates.customCAs[13].secret📜

Type: string

Default value
"ca-certs-entrust-federal-ssp-trust-chain-3"

global.certificates.customCAs[14].secret📜

Type: string

Default value
"ca-certs-entrust-managed-service-nfi"

global.certificates.customCAs[15].secret📜

Type: string

Default value
"ca-certs-exostar-llc"

global.certificates.customCAs[16].secret📜

Type: string

Default value
"ca-certs-identrust-nfi"

global.certificates.customCAs[17].secret📜

Type: string

Default value
"ca-certs-lockheed-martin"

global.certificates.customCAs[18].secret📜

Type: string

Default value
"ca-certs-netherlands-ministry-of-defence"

global.certificates.customCAs[19].secret📜

Type: string

Default value
"ca-certs-northrop-grumman"

global.certificates.customCAs[20].secret📜

Type: string

Default value
"ca-certs-raytheon-trust-chain-1"

global.certificates.customCAs[21].secret📜

Type: string

Default value
"ca-certs-raytheon-trust-chain-2"

global.certificates.customCAs[22].secret📜

Type: string

Default value
"ca-certs-us-treasury-ssp-trust-chain-1"

global.certificates.customCAs[23].secret📜

Type: string

Default value
"ca-certs-us-treasury-ssp-trust-chain-2"

global.certificates.customCAs[24].secret📜

Type: string

Default value
"ca-certs-verizon-cybertrust-federal-ssp"

global.certificates.customCAs[25].secret📜

Type: string

Default value
"ca-certs-widepoint-federal-ssp-trust-chain-1"

global.certificates.customCAs[26].secret📜

Type: string

Default value
"ca-certs-widepoint-federal-ssp-trust-chain-2"

global.certificates.customCAs[27].secret📜

Type: string

Default value
"ca-certs-widepoint-nfi"

global.certificates.customCAs[28].secret📜

Type: string

Default value
"ca-certs-dod-intermediate-and-issuing-ca-certs"

global.certificates.customCAs[29].secret📜

Type: string

Default value
"ca-certs-dod-trust-anchors-self-signed"

global.certificates.customCAs[30].secret📜

Type: string

Default value
"ca-certs-eca"

global.kubectl.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/kubectl"

global.kubectl.image.tag📜

Type: string

Default value
"17.6.2"

global.kubectl.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

global.kubectl.securityContext.runAsUser📜

Type: int

Default value
65534

global.kubectl.securityContext.fsGroup📜

Type: int

Default value
65534

global.kubectl.securityContext.seccompProfile.type📜

Type: string

Default value
"RuntimeDefault"

global.gitlabBase.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-base"

global.gitlabBase.image.tag📜

Type: string

Default value
"17.6.2"

global.gitlabBase.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

global.serviceAccount.enabled📜

Type: bool

Default value
true

global.serviceAccount.create📜

Type: bool

Default value
true

global.serviceAccount.annotations📜

Type: object

Default value
{}

global.serviceAccount.automountServiceAccountToken📜

Type: bool

Default value
false

global.tracing.connection.string📜

Type: string

Default value
""

global.tracing.urlTemplate📜

Type: string

Default value
""

global.zoekt.gateway.basicAuth📜

Type: object

Default value
{}

global.zoekt.indexer.internalApi📜

Type: object

Default value
{}

global.extraEnv📜

Type: object

Default value
{}

global.extraEnvFrom📜

Type: object

Default value
{}

global.job.nameSuffixOverride📜

Type: string

Default value
nil

global.traefik.apiVersion📜

Type: string

Default value
""

upgradeCheck.enabled📜

Type: bool

Default value
true

upgradeCheck.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/redhat/ubi/ubi9"

upgradeCheck.image.tag📜

Type: string

Default value
"9.5"

upgradeCheck.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

upgradeCheck.securityContext.runAsUser📜

Type: int

Default value
65534

upgradeCheck.securityContext.runAsGroup📜

Type: int

Default value
65534

upgradeCheck.securityContext.fsGroup📜

Type: int

Default value
65534

upgradeCheck.securityContext.seccompProfile.type📜

Type: string

Default value
"RuntimeDefault"

upgradeCheck.containerSecurityContext.runAsUser📜

Type: int

Default value
65534

upgradeCheck.containerSecurityContext.runAsGroup📜

Type: int

Default value
65534

upgradeCheck.containerSecurityContext.allowPrivilegeEscalation📜

Type: bool

Default value
false

upgradeCheck.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

upgradeCheck.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

upgradeCheck.tolerations📜

Type: list

Default value
[]

upgradeCheck.annotations.”sidecar.istio.io/inject”📜

Type: string

Default value
"true"

upgradeCheck.configMapAnnotations📜

Type: object

Default value
{}

upgradeCheck.resources.requests.cpu📜

Type: string

Default value
"500m"

upgradeCheck.resources.requests.memory📜

Type: string

Default value
"500Mi"

upgradeCheck.resources.limits.cpu📜

Type: string

Default value
"500m"

upgradeCheck.resources.limits.memory📜

Type: string

Default value
"500Mi"

certmanager.installCRDs📜

Type: bool

Default value
false

certmanager.nameOverride📜

Type: string

Default value
"certmanager"

certmanager.install📜

Type: bool

Default value
false

certmanager.rbac.create📜

Type: bool

Default value
true

nginx-ingress.enabled📜

Type: bool

Default value
false

nginx-ingress-geo.<<.enabled📜

Type: bool

Default value
false

nginx-ingress.tcpExternalConfig📜

Type: string

Default value
"true"

nginx-ingress-geo.<<.tcpExternalConfig📜

Type: string

Default value
"true"

nginx-ingress-geo.<<.controller.addHeaders.Referrer-Policy📜

Type: string

Default value
"strict-origin-when-cross-origin"

nginx-ingress.controller.addHeaders.Referrer-Policy📜

Type: string

Default value
"strict-origin-when-cross-origin"

nginx-ingress-geo.controller.<<.addHeaders.Referrer-Policy📜

Type: string

Default value
"strict-origin-when-cross-origin"

nginx-ingress.controller.config.annotation-value-word-blocklist📜

Type: string

Default value
"load_module,lua_package,_by_lua,location,root,proxy_pass,serviceaccount,{,},',\""

nginx-ingress-geo.<<.controller.config.annotation-value-word-blocklist📜

Type: string

Default value
"load_module,lua_package,_by_lua,location,root,proxy_pass,serviceaccount,{,},',\""

nginx-ingress-geo.controller.config.<<.annotation-value-word-blocklist📜

Type: string

Default value
"load_module,lua_package,_by_lua,location,root,proxy_pass,serviceaccount,{,},',\""

nginx-ingress-geo.controller.<<.config.annotation-value-word-blocklist📜

Type: string

Default value
"load_module,lua_package,_by_lua,location,root,proxy_pass,serviceaccount,{,},',\""

nginx-ingress.controller.config.hsts📜

Type: string

Default value
"true"

nginx-ingress-geo.<<.controller.config.hsts📜

Type: string

Default value
"true"

nginx-ingress-geo.controller.config.<<.hsts📜

Type: string

Default value
"true"

nginx-ingress-geo.controller.<<.config.hsts📜

Type: string

Default value
"true"

nginx-ingress.controller.config.hsts-include-subdomains📜

Type: string

Default value
"false"

nginx-ingress-geo.<<.controller.config.hsts-include-subdomains📜

Type: string

Default value
"false"

nginx-ingress-geo.controller.config.<<.hsts-include-subdomains📜

Type: string

Default value
"false"

nginx-ingress-geo.controller.<<.config.hsts-include-subdomains📜

Type: string

Default value
"false"

nginx-ingress-geo.controller.<<.config.hsts-max-age📜

Type: string

Default value
"63072000"

nginx-ingress.controller.config.hsts-max-age📜

Type: string

Default value
"63072000"

nginx-ingress-geo.controller.config.<<.hsts-max-age📜

Type: string

Default value
"63072000"

nginx-ingress-geo.<<.controller.config.hsts-max-age📜

Type: string

Default value
"63072000"

nginx-ingress-geo.controller.config.<<.server-name-hash-bucket-size📜

Type: string

Default value
"256"

nginx-ingress.controller.config.server-name-hash-bucket-size📜

Type: string

Default value
"256"

nginx-ingress-geo.<<.controller.config.server-name-hash-bucket-size📜

Type: string

Default value
"256"

nginx-ingress-geo.controller.<<.config.server-name-hash-bucket-size📜

Type: string

Default value
"256"

nginx-ingress-geo.controller.config.<<.use-http2📜

Type: string

Default value
"true"

nginx-ingress.controller.config.use-http2📜

Type: string

Default value
"true"

nginx-ingress-geo.<<.controller.config.use-http2📜

Type: string

Default value
"true"

nginx-ingress-geo.controller.<<.config.use-http2📜

Type: string

Default value
"true"

nginx-ingress-geo.controller.config.<<.ssl-ciphers📜

Type: string

Default value
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"

nginx-ingress-geo.<<.controller.config.ssl-ciphers📜

Type: string

Default value
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"

nginx-ingress.controller.config.ssl-ciphers📜

Type: string

Default value
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"

nginx-ingress-geo.controller.<<.config.ssl-ciphers📜

Type: string

Default value
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"

nginx-ingress-geo.controller.config.<<.ssl-protocols📜

Type: string

Default value
"TLSv1.3 TLSv1.2"

nginx-ingress-geo.controller.<<.config.ssl-protocols📜

Type: string

Default value
"TLSv1.3 TLSv1.2"

nginx-ingress-geo.<<.controller.config.ssl-protocols📜

Type: string

Default value
"TLSv1.3 TLSv1.2"

nginx-ingress.controller.config.ssl-protocols📜

Type: string

Default value
"TLSv1.3 TLSv1.2"

nginx-ingress-geo.<<.controller.config.server-tokens📜

Type: string

Default value
"false"

nginx-ingress-geo.controller.<<.config.server-tokens📜

Type: string

Default value
"false"

nginx-ingress-geo.controller.config.<<.server-tokens📜

Type: string

Default value
"false"

nginx-ingress.controller.config.server-tokens📜

Type: string

Default value
"false"

nginx-ingress-geo.controller.<<.config.upstream-keepalive-connections📜

Type: int

Default value
100

nginx-ingress-geo.controller.config.<<.upstream-keepalive-connections📜

Type: int

Default value
100

nginx-ingress-geo.<<.controller.config.upstream-keepalive-connections📜

Type: int

Default value
100

nginx-ingress.controller.config.upstream-keepalive-connections📜

Type: int

Default value
100

nginx-ingress-geo.controller.config.<<.upstream-keepalive-time📜

Type: string

Default value
"30s"

nginx-ingress-geo.controller.<<.config.upstream-keepalive-time📜

Type: string

Default value
"30s"

nginx-ingress-geo.<<.controller.config.upstream-keepalive-time📜

Type: string

Default value
"30s"

nginx-ingress.controller.config.upstream-keepalive-time📜

Type: string

Default value
"30s"

nginx-ingress-geo.controller.<<.config.upstream-keepalive-timeout📜

Type: int

Default value
5

nginx-ingress.controller.config.upstream-keepalive-timeout📜

Type: int

Default value
5

nginx-ingress-geo.<<.controller.config.upstream-keepalive-timeout📜

Type: int

Default value
5

nginx-ingress-geo.controller.config.<<.upstream-keepalive-timeout📜

Type: int

Default value
5

nginx-ingress.controller.config.upstream-keepalive-requests📜

Type: int

Default value
1000

nginx-ingress-geo.<<.controller.config.upstream-keepalive-requests📜

Type: int

Default value
1000

nginx-ingress-geo.controller.config.<<.upstream-keepalive-requests📜

Type: int

Default value
1000

nginx-ingress-geo.controller.<<.config.upstream-keepalive-requests📜

Type: int

Default value
1000

nginx-ingress-geo.<<.controller.service.externalTrafficPolicy📜

Type: string

Default value
"Local"

nginx-ingress.controller.service.externalTrafficPolicy📜

Type: string

Default value
"Local"

nginx-ingress-geo.controller.<<.service.externalTrafficPolicy📜

Type: string

Default value
"Local"

nginx-ingress.controller.ingressClassByName📜

Type: bool

Default value
false

nginx-ingress-geo.<<.controller.ingressClassByName📜

Type: bool

Default value
false

nginx-ingress-geo.controller.<<.ingressClassByName📜

Type: bool

Default value
false

nginx-ingress.controller.ingressClassResource.name📜

Type: string

Default value
"{{ include \"ingress.class.name\" $ }}"

nginx-ingress-geo.<<.controller.ingressClassResource.name📜

Type: string

Default value
"{{ include \"ingress.class.name\" $ }}"

nginx-ingress-geo.controller.<<.ingressClassResource.name📜

Type: string

Default value
"{{ include \"ingress.class.name\" $ }}"

nginx-ingress-geo.controller.<<.resources.requests.cpu📜

Type: string

Default value
"100m"

nginx-ingress-geo.<<.controller.resources.requests.cpu📜

Type: string

Default value
"100m"

nginx-ingress.controller.resources.requests.cpu📜

Type: string

Default value
"100m"

nginx-ingress-geo.controller.<<.resources.requests.memory📜

Type: string

Default value
"100Mi"

nginx-ingress.controller.resources.requests.memory📜

Type: string

Default value
"100Mi"

nginx-ingress-geo.<<.controller.resources.requests.memory📜

Type: string

Default value
"100Mi"

nginx-ingress-geo.controller.<<.publishService.enabled📜

Type: bool

Default value
true

nginx-ingress-geo.<<.controller.publishService.enabled📜

Type: bool

Default value
true

nginx-ingress.controller.publishService.enabled📜

Type: bool

Default value
true

nginx-ingress-geo.controller.<<.replicaCount📜

Type: int

Default value
2

nginx-ingress-geo.<<.controller.replicaCount📜

Type: int

Default value
2

nginx-ingress.controller.replicaCount📜

Type: int

Default value
2

nginx-ingress-geo.<<.controller.minAvailable📜

Type: int

Default value
1

nginx-ingress-geo.controller.<<.minAvailable📜

Type: int

Default value
1

nginx-ingress.controller.minAvailable📜

Type: int

Default value
1

nginx-ingress-geo.controller.<<.scope.enabled📜

Type: bool

Default value
true

nginx-ingress.controller.scope.enabled📜

Type: bool

Default value
true

nginx-ingress-geo.<<.controller.scope.enabled📜

Type: bool

Default value
true

nginx-ingress-geo.controller.<<.metrics.enabled📜

Type: bool

Default value
true

nginx-ingress.controller.metrics.enabled📜

Type: bool

Default value
true

nginx-ingress-geo.<<.controller.metrics.enabled📜

Type: bool

Default value
true

nginx-ingress-geo.controller.<<.metrics.service.annotations.”gitlab.com/prometheus_scrape”📜

Type: string

Default value
"true"

nginx-ingress.controller.metrics.service.annotations.”gitlab.com/prometheus_scrape”📜

Type: string

Default value
"true"

nginx-ingress-geo.<<.controller.metrics.service.annotations.”gitlab.com/prometheus_scrape”📜

Type: string

Default value
"true"

nginx-ingress.controller.metrics.service.annotations.”gitlab.com/prometheus_port”📜

Type: string

Default value
"10254"

nginx-ingress-geo.<<.controller.metrics.service.annotations.”gitlab.com/prometheus_port”📜

Type: string

Default value
"10254"

nginx-ingress-geo.controller.<<.metrics.service.annotations.”gitlab.com/prometheus_port”📜

Type: string

Default value
"10254"

nginx-ingress.controller.metrics.service.annotations.”prometheus.io/scrape”📜

Type: string

Default value
"true"

nginx-ingress-geo.controller.<<.metrics.service.annotations.”prometheus.io/scrape”📜

Type: string

Default value
"true"

nginx-ingress-geo.<<.controller.metrics.service.annotations.”prometheus.io/scrape”📜

Type: string

Default value
"true"

nginx-ingress-geo.controller.<<.metrics.service.annotations.”prometheus.io/port”📜

Type: string

Default value
"10254"

nginx-ingress-geo.<<.controller.metrics.service.annotations.”prometheus.io/port”📜

Type: string

Default value
"10254"

nginx-ingress.controller.metrics.service.annotations.”prometheus.io/port”📜

Type: string

Default value
"10254"

nginx-ingress.controller.admissionWebhooks.enabled📜

Type: bool

Default value
false

nginx-ingress-geo.controller.<<.admissionWebhooks.enabled📜

Type: bool

Default value
false

nginx-ingress-geo.<<.controller.admissionWebhooks.enabled📜

Type: bool

Default value
false

nginx-ingress-geo.<<.defaultBackend.resources.requests.cpu📜

Type: string

Default value
"5m"

nginx-ingress.defaultBackend.resources.requests.cpu📜

Type: string

Default value
"5m"

nginx-ingress-geo.<<.defaultBackend.resources.requests.memory📜

Type: string

Default value
"5Mi"

nginx-ingress.defaultBackend.resources.requests.memory📜

Type: string

Default value
"5Mi"

nginx-ingress.rbac.create📜

Type: bool

Default value
true

nginx-ingress-geo.<<.rbac.create📜

Type: bool

Default value
true

nginx-ingress-geo.<<.rbac.scope📜

Type: bool

Default value
false

nginx-ingress.rbac.scope📜

Type: bool

Default value
false

nginx-ingress-geo.<<.serviceAccount.create📜

Type: bool

Default value
true

nginx-ingress.serviceAccount.create📜

Type: bool

Default value
true

nginx-ingress-geo.enabled📜

Type: bool

Default value
false

nginx-ingress-geo.controller.config.use-forwarded-headers📜

Type: bool

Default value
true

nginx-ingress-geo.controller.electionID📜

Type: string

Default value
"ingress-controller-leader-geo"

nginx-ingress-geo.controller.ingressClassResource.name📜

Type: string

Default value
"{{ include \"gitlab.geo.ingress.class.name\" $ \| quote }}"

nginx-ingress-geo.controller.ingressClassResource.controllerValue📜

Type: string

Default value
"k8s.io/nginx-ingress-geo"

nginx-ingress-geo.externalIpTpl📜

Type: string

Default value
"{{ .Values.global.hosts.externalGeoIP }}"

haproxy.install📜

Type: bool

Default value
false

haproxy.controller.service.type📜

Type: string

Default value
"LoadBalancer"

haproxy.controller.service.tcpPorts[0].name📜

Type: string

Default value
"ssh"

haproxy.controller.service.tcpPorts[0].port📜

Type: int

Default value
22

haproxy.controller.service.tcpPorts[0].targetPort📜

Type: int

Default value
22

haproxy.controller.extraArgs[0]📜

Type: string

Default value
"--configmap-tcp-services=$(POD_NAMESPACE)/$(POD_NAMESPACE)-haproxy-tcp"

prometheus.install📜

Type: bool

Default value
false

prometheus.rbac.create📜

Type: bool

Default value
true

prometheus.alertmanager.enabled📜

Type: bool

Default value
false

prometheus.alertmanagerFiles.”alertmanager.yml”📜

Type: object

Default value
{}

prometheus.kubeStateMetrics.enabled📜

Type: bool

Default value
false

prometheus.nodeExporter.enabled📜

Type: bool

Default value
false

prometheus.pushgateway.enabled📜

Type: bool

Default value
false

prometheus.server.enabled📜

Type: bool

Default value
false

prometheus.server.retention📜

Type: string

Default value
"15d"

prometheus.server.strategy.type📜

Type: string

Default value
"Recreate"

prometheus.server.image.tag📜

Type: string

Default value
"v2.38.0"

prometheus.server.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

prometheus.server.containerSecurityContext.allowPrivilegeEscalation📜

Type: bool

Default value
false

prometheus.server.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

prometheus.server.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

prometheus.server.containerSecurityContext.seccompProfile.type📜

Type: string

Default value
"RuntimeDefault"

prometheus.podSecurityPolicy.enabled📜

Type: bool

Default value
false

prometheus.configmapReload.prometheus.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

prometheus.configmapReload.prometheus.containerSecurityContext.allowPrivilegeEscalation📜

Type: bool

Default value
false

prometheus.configmapReload.prometheus.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

prometheus.configmapReload.prometheus.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

prometheus.configmapReload.prometheus.containerSecurityContext.seccompProfile.type📜

Type: string

Default value
"RuntimeDefault"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[0].job_name📜

Type: string

Default value
"prometheus"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[0].static_configs[0].targets[0]📜

Type: string

Default value
"localhost:9090"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].job_name📜

Type: string

Default value
"kubernetes-apiservers"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].kubernetes_sd_configs[0].role📜

Type: string

Default value
"endpoints"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].scheme📜

Type: string

Default value
"https"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].tls_config.ca_file📜

Type: string

Default value
"/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].tls_config.insecure_skip_verify📜

Type: bool

Default value
true

prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].bearer_token_file📜

Type: string

Default value
"/var/run/secrets/kubernetes.io/serviceaccount/token"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].relabel_configs[0].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_namespace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].relabel_configs[0].source_labels[1]📜

Type: string

Default value
"__meta_kubernetes_service_name"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].relabel_configs[0].source_labels[2]📜

Type: string

Default value
"__meta_kubernetes_endpoint_port_name"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].relabel_configs[0].action📜

Type: string

Default value
"keep"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[1].relabel_configs[0].regex📜

Type: string

Default value
"default;kubernetes;https"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].job_name📜

Type: string

Default value
"kubernetes-pods"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].kubernetes_sd_configs[0].role📜

Type: string

Default value
"pod"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[0].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_pod_annotation_gitlab_com_prometheus_scrape"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[0].action📜

Type: string

Default value
"keep"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[0].regex📜

Type: bool

Default value
true

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[1].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_pod_annotation_gitlab_com_prometheus_scheme"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[1].action📜

Type: string

Default value
"replace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[1].regex📜

Type: string

Default value
"(https?)"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[1].target_label📜

Type: string

Default value
"__scheme__"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[2].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_pod_annotation_gitlab_com_prometheus_path"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[2].action📜

Type: string

Default value
"replace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[2].target_label📜

Type: string

Default value
"__metrics_path__"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[2].regex📜

Type: string

Default value
"(.+)"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].source_labels[0]📜

Type: string

Default value
"__address__"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].source_labels[1]📜

Type: string

Default value
"__meta_kubernetes_pod_annotation_gitlab_com_prometheus_port"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].action📜

Type: string

Default value
"replace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].regex📜

Type: string

Default value
"([^:]+)(?::\\d+)?;(\\d+)"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].replacement📜

Type: string

Default value
"$1:$2"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[3].target_label📜

Type: string

Default value
"__address__"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[4].action📜

Type: string

Default value
"labelmap"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[4].regex📜

Type: string

Default value
"__meta_kubernetes_pod_label_(.+)"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[5].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_namespace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[5].action📜

Type: string

Default value
"replace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[5].target_label📜

Type: string

Default value
"kubernetes_namespace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[6].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_pod_name"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[6].action📜

Type: string

Default value
"replace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[2].relabel_configs[6].target_label📜

Type: string

Default value
"kubernetes_pod_name"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].job_name📜

Type: string

Default value
"kubernetes-service-endpoints"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].kubernetes_sd_configs[0].role📜

Type: string

Default value
"endpoints"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[0].action📜

Type: string

Default value
"keep"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[0].regex📜

Type: bool

Default value
true

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[0].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_service_annotation_gitlab_com_prometheus_scrape"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[1].action📜

Type: string

Default value
"replace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[1].regex📜

Type: string

Default value
"(https?)"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[1].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_service_annotation_gitlab_com_prometheus_scheme"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[1].target_label📜

Type: string

Default value
"__scheme__"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[2].action📜

Type: string

Default value
"replace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[2].regex📜

Type: string

Default value
"(.+)"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[2].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_service_annotation_gitlab_com_prometheus_path"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[2].target_label📜

Type: string

Default value
"__metrics_path__"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].action📜

Type: string

Default value
"replace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].regex📜

Type: string

Default value
"([^:]+)(?::\\d+)?;(\\d+)"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].replacement📜

Type: string

Default value
"$1:$2"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].source_labels[0]📜

Type: string

Default value
"__address__"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].source_labels[1]📜

Type: string

Default value
"__meta_kubernetes_service_annotation_gitlab_com_prometheus_port"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[3].target_label📜

Type: string

Default value
"__address__"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[4].action📜

Type: string

Default value
"labelmap"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[4].regex📜

Type: string

Default value
"__meta_kubernetes_service_label_(.+)"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[5].action📜

Type: string

Default value
"replace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[5].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_namespace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[5].target_label📜

Type: string

Default value
"kubernetes_namespace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[6].action📜

Type: string

Default value
"replace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[6].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_service_name"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[6].target_label📜

Type: string

Default value
"kubernetes_name"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[7].action📜

Type: string

Default value
"replace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[7].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_pod_node_name"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[3].relabel_configs[7].target_label📜

Type: string

Default value
"kubernetes_node"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].job_name📜

Type: string

Default value
"kubernetes-services"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].metrics_path📜

Type: string

Default value
"/probe"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].params.module[0]📜

Type: string

Default value
"http_2xx"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].kubernetes_sd_configs[0].role📜

Type: string

Default value
"service"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[0].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_service_annotation_gitlab_com_prometheus_probe"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[0].action📜

Type: string

Default value
"keep"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[0].regex📜

Type: bool

Default value
true

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[1].source_labels[0]📜

Type: string

Default value
"__address__"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[1].target_label📜

Type: string

Default value
"__param_target"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[2].target_label📜

Type: string

Default value
"__address__"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[2].replacement📜

Type: string

Default value
"blackbox"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[3].source_labels[0]📜

Type: string

Default value
"__param_target"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[3].target_label📜

Type: string

Default value
"instance"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[4].action📜

Type: string

Default value
"labelmap"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[4].regex📜

Type: string

Default value
"__meta_kubernetes_service_label_(.+)"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[5].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_namespace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[5].target_label📜

Type: string

Default value
"kubernetes_namespace"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[6].source_labels[0]📜

Type: string

Default value
"__meta_kubernetes_service_name"

prometheus.serverFiles.”prometheus.yml”.scrape_configs[4].relabel_configs[6].target_label📜

Type: string

Default value
"kubernetes_name"

redis.global.imagePullSecrets[0]📜

Type: string

Default value
"private-registry"

redis.install📜

Type: bool

Default value
true

redis.auth.existingSecret📜

Type: string

Default value
"gitlab-redis-secret"

redis.auth.existingSecretKey📜

Type: string

Default value
"secret"

redis.auth.usePasswordFiles📜

Type: bool

Default value
true

redis.architecture📜

Type: string

Default value
"standalone"

redis.cluster.enabled📜

Type: bool

Default value
false

redis.metrics.enabled📜

Type: bool

Default value
true

redis.metrics.image.registry📜

Type: string

Default value
"registry1.dso.mil/ironbank/bitnami"

redis.metrics.image.repository📜

Type: string

Default value
"analytics/redis-exporter"

redis.metrics.image.tag📜

Type: string

Default value
"v1.66.0"

redis.metrics.image.pullSecrets📜

Type: list

Default value
[]

redis.metrics.resources.limits.cpu📜

Type: string

Default value
"250m"

redis.metrics.resources.limits.memory📜

Type: string

Default value
"256Mi"

redis.metrics.resources.requests.cpu📜

Type: string

Default value
"250m"

redis.metrics.resources.requests.memory📜

Type: string

Default value
"256Mi"

redis.metrics.containerSecurityContext.enabled📜

Type: bool

Default value
true

redis.metrics.containerSecurityContext.runAsUser📜

Type: int

Default value
1001

redis.metrics.containerSecurityContext.runAsGroup📜

Type: int

Default value
1001

redis.metrics.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

redis.metrics.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

redis.serviceAccount.automountServiceAccountToken📜

Type: bool

Default value
false

redis.securityContext.runAsUser📜

Type: int

Default value
1001

redis.securityContext.fsGroup📜

Type: int

Default value
1001

redis.securityContext.runAsNonRoot📜

Type: bool

Default value
true

redis.image.registry📜

Type: string

Default value
"registry1.dso.mil/ironbank/bitnami"

redis.image.repository📜

Type: string

Default value
"redis"

redis.image.tag📜

Type: string

Default value
"7.4.1"

redis.image.pullSecrets📜

Type: list

Default value
[]

redis.master.resources.limits.cpu📜

Type: string

Default value
"250m"

redis.master.resources.limits.memory📜

Type: string

Default value
"256Mi"

redis.master.resources.requests.cpu📜

Type: string

Default value
"250m"

redis.master.resources.requests.memory📜

Type: string

Default value
"256Mi"

redis.master.containerSecurityContext.enabled📜

Type: bool

Default value
true

redis.master.containerSecurityContext.runAsUser📜

Type: int

Default value
1001

redis.master.containerSecurityContext.runAsGroup📜

Type: int

Default value
1001

redis.master.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

redis.master.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

redis.slave.resources.limits.cpu📜

Type: string

Default value
"250m"

redis.slave.resources.limits.memory📜

Type: string

Default value
"256Mi"

redis.slave.resources.requests.cpu📜

Type: string

Default value
"250m"

redis.slave.resources.requests.memory📜

Type: string

Default value
"256Mi"

redis.slave.containerSecurityContext.enabled📜

Type: bool

Default value
true

redis.slave.containerSecurityContext.runAsUser📜

Type: int

Default value
1001

redis.slave.containerSecurityContext.runAsGroup📜

Type: int

Default value
1001

redis.slave.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

redis.slave.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

redis.sentinel.resources.limits.cpu📜

Type: string

Default value
"250m"

redis.sentinel.resources.limits.memory📜

Type: string

Default value
"256Mi"

redis.sentinel.resources.requests.cpu📜

Type: string

Default value
"250m"

redis.sentinel.resources.requests.memory📜

Type: string

Default value
"256Mi"

redis.volumePermissions.resources.limits.cpu📜

Type: string

Default value
"250m"

redis.volumePermissions.resources.limits.memory📜

Type: string

Default value
"256Mi"

redis.volumePermissions.resources.requests.cpu📜

Type: string

Default value
"250m"

redis.volumePermissions.resources.requests.memory📜

Type: string

Default value
"256Mi"

redis.sysctlImage.resources.limits.cpu📜

Type: string

Default value
"250m"

redis.sysctlImage.resources.limits.memory📜

Type: string

Default value
"256Mi"

redis.sysctlImage.resources.requests.cpu📜

Type: string

Default value
"250m"

redis.sysctlImage.resources.requests.memory📜

Type: string

Default value
"256Mi"

postgresql.install📜

Type: bool

Default value
true

postgresql.postgresqlDatabase📜

Type: string

Default value
"gitlabhq_production"

postgresql.resources.limits.cpu📜

Type: string

Default value
"500m"

postgresql.resources.limits.memory📜

Type: string

Default value
"500Mi"

postgresql.resources.requests.cpu📜

Type: string

Default value
"500m"

postgresql.resources.requests.memory📜

Type: string

Default value
"500Mi"

postgresql.image.registry📜

Type: string

Default value
"registry1.dso.mil"

postgresql.image.repository📜

Type: string

Default value
"ironbank/opensource/postgres/postgresql"

postgresql.image.tag📜

Type: string

Default value
"14.15"

postgresql.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

postgresql.auth.username📜

Type: string

Default value
"gitlab"

postgresql.auth.password📜

Type: string

Default value
"bogus-satisfy-upgrade"

postgresql.auth.postgresPassword📜

Type: string

Default value
"bogus-satisfy-upgrade"

postgresql.auth.usePasswordFiles📜

Type: bool

Default value
false

postgresql.auth.existingSecret📜

Type: string

Default value
"{{ include \"gitlab.psql.password.secret\" . }}"

postgresql.auth.secretKeys.adminPasswordKey📜

Type: string

Default value
"postgresql-postgres-password"

postgresql.auth.secretKeys.userPasswordKey📜

Type: string

Default value
"{{ include \"gitlab.psql.password.key\" $ }}"

postgresql.primary.persistence.mountPath📜

Type: string

Default value
"/var/lib/postgresql"

postgresql.primary.initdb.scriptsConfigMap📜

Type: string

Default value
"{{ include \"gitlab.psql.initdbscripts\" $}}"

postgresql.primary.initdb.user📜

Type: string

Default value
"gitlab"

postgresql.primary.containerSecurityContext.enabled📜

Type: bool

Default value
true

postgresql.primary.containerSecurityContext.runAsUser📜

Type: int

Default value
1001

postgresql.primary.containerSecurityContext.runAsGroup📜

Type: int

Default value
1001

postgresql.primary.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

postgresql.master.extraVolumeMounts[0].name📜

Type: string

Default value
"custom-init-scripts"

postgresql.master.extraVolumeMounts[0].mountPath📜

Type: string

Default value
"/docker-entrypoint-preinitdb.d/init_revision.sh"

postgresql.master.extraVolumeMounts[0].subPath📜

Type: string

Default value
"init_revision.sh"

postgresql.master.podAnnotations.”postgresql.gitlab/init-revision”📜

Type: string

Default value
"1"

postgresql.metrics.enabled📜

Type: bool

Default value
false

postgresql.metrics.service.annotations.”prometheus.io/scrape”📜

Type: string

Default value
"true"

postgresql.metrics.service.annotations.”prometheus.io/port”📜

Type: string

Default value
"9187"

postgresql.metrics.service.annotations.”gitlab.com/prometheus_scrape”📜

Type: string

Default value
"true"

postgresql.metrics.service.annotations.”gitlab.com/prometheus_port”📜

Type: string

Default value
"9187"

postgresql.postgresqlInitdbArgs📜

Type: string

Default value
"-A scram-sha-256"

postgresql.securityContext.enabled📜

Type: bool

Default value
true

postgresql.securityContext.fsGroup📜

Type: int

Default value
26

postgresql.securityContext.runAsUser📜

Type: int

Default value
26

postgresql.securityContext.runAsGroup📜

Type: int

Default value
26

postgresql.postgresqlDataDir📜

Type: string

Default value
"/var/lib/postgresql/pgdata/data"

postgresql.volumePermissions.enabled📜

Type: bool

Default value
false

registry.enabled📜

Type: bool

Default value
true

registry.init.resources.limits.cpu📜

Type: string

Default value
"200m"

registry.init.resources.limits.memory📜

Type: string

Default value
"200Mi"

registry.init.resources.requests.cpu📜

Type: string

Default value
"200m"

registry.init.resources.requests.memory📜

Type: string

Default value
"200Mi"

registry.init.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

registry.resources.limits.cpu📜

Type: string

Default value
"200m"

registry.resources.limits.memory📜

Type: string

Default value
"1024Mi"

registry.resources.requests.cpu📜

Type: string

Default value
"200m"

registry.resources.requests.memory📜

Type: string

Default value
"1024Mi"

registry.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry"

registry.image.tag📜

Type: string

Default value
"17.6.2"

registry.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

registry.ingress.enabled📜

Type: bool

Default value
false

registry.metrics.enabled📜

Type: bool

Default value
true

registry.metrics.path📜

Type: string

Default value
"/metrics"

registry.metrics.serviceMonitor.enabled📜

Type: bool

Default value
true

registry.securityContext.runAsUser📜

Type: int

Default value
1000

registry.securityContext.runAsGroup📜

Type: int

Default value
1000

registry.securityContext.fsGroup📜

Type: int

Default value
1000

registry.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

registry.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

registry.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

shared-secrets.enabled📜

Type: bool

Default value
true

shared-secrets.rbac.create📜

Type: bool

Default value
true

shared-secrets.selfsign.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/cfssl-self-sign"

shared-secrets.selfsign.image.tag📜

Type: string

Default value
"1.6.1"

shared-secrets.selfsign.keyAlgorithm📜

Type: string

Default value
"rsa"

shared-secrets.selfsign.keySize📜

Type: string

Default value
"4096"

shared-secrets.selfsign.expiry📜

Type: string

Default value
"3650d"

shared-secrets.selfsign.caSubject📜

Type: string

Default value
"GitLab Helm Chart"

shared-secrets.env📜

Type: string

Default value
"production"

shared-secrets.serviceAccount.enabled📜

Type: bool

Default value
true

shared-secrets.serviceAccount.create📜

Type: bool

Default value
true

shared-secrets.serviceAccount.name📜

Type: string

Default value
nil

shared-secrets.serviceAccount.automountServiceAccountToken📜

Type: bool

Default value
false

shared-secrets.resources.requests.cpu📜

Type: string

Default value
"300m"

shared-secrets.resources.requests.memory📜

Type: string

Default value
"200Mi"

shared-secrets.resources.limits.cpu📜

Type: string

Default value
"300m"

shared-secrets.resources.limits.memory📜

Type: string

Default value
"200Mi"

shared-secrets.securityContext.runAsUser📜

Type: int

Default value
65534

shared-secrets.securityContext.runAsGroup📜

Type: int

Default value
65534

shared-secrets.securityContext.fsGroup📜

Type: int

Default value
65534

shared-secrets.securityContext.seccompProfile.type📜

Type: string

Default value
"RuntimeDefault"

shared-secrets.containerSecurityContext.allowPrivilegeEscalation📜

Type: bool

Default value
false

shared-secrets.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

shared-secrets.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

shared-secrets.tolerations📜

Type: list

Default value
[]

shared-secrets.podLabels📜

Type: object

Default value
{}

shared-secrets.annotations.”sidecar.istio.io/inject”📜

Type: string

Default value
"true"

gitlab-runner.install📜

Type: bool

Default value
false

gitlab-runner.rbac.create📜

Type: bool

Default value
true

gitlab-runner.runners.locked📜

Type: bool

Default value
false

gitlab-runner.runners.secret📜

Type: string

Default value
"nonempty"

gitlab-runner.runners.config📜

Type: string

Default value
"[[runners]]\n  [runners.kubernetes]\n  image = \"ubuntu:22.04\"\n  {{- if .Values.global.minio.enabled }}\n  [runners.cache]\n    Type = \"s3\"\n    Path = \"gitlab-runner\"\n    Shared = true\n    [runners.cache.s3]\n      ServerAddress = {{ include \"gitlab-runner.cache-tpl.s3ServerAddress\" . }}\n      BucketName = \"runner-cache\"\n      BucketLocation = \"us-east-1\"\n      Insecure = false\n  {{ end }}\n"

gitlab-runner.podAnnotations.”gitlab.com/prometheus_scrape”📜

Type: string

Default value
"true"

gitlab-runner.podAnnotations.”gitlab.com/prometheus_port”📜

Type: int

Default value
9252

gitlab-runner.podSecurityContext.seccompProfile.type📜

Type: string

Default value
"RuntimeDefault"

gitlab-runner.securityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

traefik.install📜

Type: bool

Default value
false

traefik.ports.gitlab-shell.expose📜

Type: bool

Default value
true

traefik.ports.gitlab-shell.port📜

Type: int

Default value
2222

traefik.ports.gitlab-shell.exposedPort📜

Type: int

Default value
22

gitlab.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.init.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.certificates.init.securityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.certificates.init.securityContext.runAsUser📜

Type: int

Default value
65534

gitlab.certificates.init.securityContext.runAsNonRoot📜

Type: bool

Default value
true

gitlab.toolbox.replicas📜

Type: int

Default value
1

gitlab.toolbox.antiAffinityLabels.matchLabels.app📜

Type: string

Default value
"gitaly"

gitlab.toolbox.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox"

gitlab.toolbox.image.tag📜

Type: string

Default value
"17.6.2"

gitlab.toolbox.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

gitlab.toolbox.init.resources.requests.cpu📜

Type: string

Default value
"200m"

gitlab.toolbox.init.resources.requests.memory📜

Type: string

Default value
"200Mi"

gitlab.toolbox.init.resources.limits.cpu📜

Type: string

Default value
"200m"

gitlab.toolbox.init.resources.limits.memory📜

Type: string

Default value
"200Mi"

gitlab.toolbox.init.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.toolbox.resources.requests.cpu📜

Type: int

Default value
2

gitlab.toolbox.resources.requests.memory📜

Type: string

Default value
"3.5Gi"

gitlab.toolbox.resources.limits.cpu📜

Type: int

Default value
2

gitlab.toolbox.resources.limits.memory📜

Type: string

Default value
"3.5Gi"

gitlab.toolbox.annotations.”sidecar.istio.io/proxyMemory”📜

Type: string

Default value
"512Mi"

gitlab.toolbox.annotations.”sidecar.istio.io/proxyMemoryLimit”📜

Type: string

Default value
"512Mi"

gitlab.toolbox.backups.cron.resources.requests.cpu📜

Type: string

Default value
"500m"

gitlab.toolbox.backups.cron.resources.requests.memory📜

Type: string

Default value
"768Mi"

gitlab.toolbox.backups.cron.resources.limits.cpu📜

Type: string

Default value
"500m"

gitlab.toolbox.backups.cron.resources.limits.memory📜

Type: string

Default value
"768Mi"

gitlab.toolbox.backups.cron.istioShutdown📜

Type: string

Default value
"&& echo \"Backup Complete\" && until curl -fsI http://localhost:15021/healthz/ready; do echo \"Waiting for Istio sidecar proxy...\"; sleep 3; done && sleep 5 && echo \"Stopping the istio proxy...\" && curl -X POST http://localhost:15020/quitquitquit"

gitlab.toolbox.securityContext.runAsUser📜

Type: int

Default value
1000

gitlab.toolbox.securityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.toolbox.securityContext.fsGroup📜

Type: int

Default value
1000

gitlab.toolbox.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

gitlab.toolbox.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.toolbox.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.toolbox.customScripts📜

Type: string

Default value
nil

gitlab.gitlab-exporter.enabled📜

Type: bool

Default value
false

gitlab.gitlab-exporter.init.resources.limits.cpu📜

Type: string

Default value
"200m"

gitlab.gitlab-exporter.init.resources.limits.memory📜

Type: string

Default value
"200Mi"

gitlab.gitlab-exporter.init.resources.requests.cpu📜

Type: string

Default value
"200m"

gitlab.gitlab-exporter.init.resources.requests.memory📜

Type: string

Default value
"200Mi"

gitlab.gitlab-exporter.init.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.gitlab-exporter.resources.limits.cpu📜

Type: string

Default value
"150m"

gitlab.gitlab-exporter.resources.limits.memory📜

Type: string

Default value
"200Mi"

gitlab.gitlab-exporter.resources.requests.cpu📜

Type: string

Default value
"150m"

gitlab.gitlab-exporter.resources.requests.memory📜

Type: string

Default value
"200Mi"

gitlab.gitlab-exporter.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.gitlab-exporter.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter"

gitlab.gitlab-exporter.image.tag📜

Type: string

Default value
"17.6.2"

gitlab.gitlab-exporter.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

gitlab.gitlab-exporter.metrics.enabled📜

Type: bool

Default value
true

gitlab.gitlab-exporter.metrics.port📜

Type: int

Default value
9168

gitlab.gitlab-exporter.metrics.serviceMonitor.enabled📜

Type: bool

Default value
true

gitlab.gitlab-exporter.securityContext.runAsUser📜

Type: int

Default value
1000

gitlab.gitlab-exporter.securityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.gitlab-exporter.securityContext.fsGroup📜

Type: int

Default value
1000

gitlab.gitlab-exporter.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

gitlab.gitlab-exporter.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.gitlab-exporter.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.migrations.annotations.”sidecar.istio.io/inject”📜

Type: string

Default value
"true"

gitlab.migrations.init.resources.limits.cpu📜

Type: string

Default value
"500m"

gitlab.migrations.init.resources.limits.memory📜

Type: string

Default value
"768Mi"

gitlab.migrations.init.resources.requests.cpu📜

Type: string

Default value
"500m"

gitlab.migrations.init.resources.requests.memory📜

Type: string

Default value
"768Mi"

gitlab.migrations.init.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.migrations.resources.limits.cpu📜

Type: string

Default value
"500m"

gitlab.migrations.resources.limits.memory📜

Type: string

Default value
"1.5G"

gitlab.migrations.resources.requests.cpu📜

Type: string

Default value
"500m"

gitlab.migrations.resources.requests.memory📜

Type: string

Default value
"1.5G"

gitlab.migrations.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox"

gitlab.migrations.image.tag📜

Type: string

Default value
"17.6.2"

gitlab.migrations.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

gitlab.migrations.securityContext.runAsUser📜

Type: int

Default value
1000

gitlab.migrations.securityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.migrations.securityContext.fsGroup📜

Type: int

Default value
1000

gitlab.migrations.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

gitlab.migrations.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.migrations.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.webservice.init.resources.limits.cpu📜

Type: string

Default value
"200m"

gitlab.webservice.init.resources.limits.memory📜

Type: string

Default value
"200Mi"

gitlab.webservice.init.resources.requests.cpu📜

Type: string

Default value
"200m"

gitlab.webservice.init.resources.requests.memory📜

Type: string

Default value
"200Mi"

gitlab.webservice.init.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.webservice.securityContext.runAsUser📜

Type: int

Default value
1000

gitlab.webservice.securityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.webservice.securityContext.fsGroup📜

Type: int

Default value
1000

gitlab.webservice.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

gitlab.webservice.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.webservice.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.webservice.resources.limits.cpu📜

Type: string

Default value
"1000m"

gitlab.webservice.resources.limits.memory📜

Type: string

Default value
"2.5G"

gitlab.webservice.resources.requests.cpu📜

Type: string

Default value
"300m"

gitlab.webservice.resources.requests.memory📜

Type: string

Default value
"2.5G"

gitlab.webservice.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice"

gitlab.webservice.image.tag📜

Type: string

Default value
"17.6.2"

gitlab.webservice.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

gitlab.webservice.workhorse.resources.limits.cpu📜

Type: string

Default value
"600m"

gitlab.webservice.workhorse.resources.limits.memory📜

Type: string

Default value
"2.5G"

gitlab.webservice.workhorse.resources.requests.cpu📜

Type: string

Default value
"600m"

gitlab.webservice.workhorse.resources.requests.memory📜

Type: string

Default value
"2.5G"

gitlab.webservice.workhorse.image📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse"

gitlab.webservice.workhorse.tag📜

Type: string

Default value
"17.6.2"

gitlab.webservice.workhorse.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

gitlab.webservice.workhorse.metrics.enabled📜

Type: bool

Default value
true

gitlab.webservice.workhorse.metrics.serviceMonitor.enabled📜

Type: bool

Default value
true

gitlab.webservice.workhorse.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.webservice.ingress.enabled📜

Type: bool

Default value
false

gitlab.webservice.metrics.enabled📜

Type: bool

Default value
true

gitlab.webservice.metrics.port📜

Type: int

Default value
8083

gitlab.webservice.metrics.serviceMonitor.enabled📜

Type: bool

Default value
true

gitlab.webservice.helmTests.enabled📜

Type: bool

Default value
false

gitlab.sidekiq.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq"

gitlab.sidekiq.image.tag📜

Type: string

Default value
"17.6.2"

gitlab.sidekiq.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

gitlab.sidekiq.init.resources.limits.cpu📜

Type: string

Default value
"200m"

gitlab.sidekiq.init.resources.limits.memory📜

Type: string

Default value
"200Mi"

gitlab.sidekiq.init.resources.requests.cpu📜

Type: string

Default value
"200m"

gitlab.sidekiq.init.resources.requests.memory📜

Type: string

Default value
"200Mi"

gitlab.sidekiq.init.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.sidekiq.resources.requests.memory📜

Type: string

Default value
"3G"

gitlab.sidekiq.resources.requests.cpu📜

Type: string

Default value
"1500m"

gitlab.sidekiq.resources.limits.memory📜

Type: string

Default value
"3G"

gitlab.sidekiq.resources.limits.cpu📜

Type: string

Default value
"1500m"

gitlab.sidekiq.securityContext.runAsUser📜

Type: int

Default value
1000

gitlab.sidekiq.securityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.sidekiq.securityContext.fsGroup📜

Type: int

Default value
1000

gitlab.sidekiq.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

gitlab.sidekiq.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.sidekiq.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.gitaly.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitaly"

gitlab.gitaly.image.tag📜

Type: string

Default value
"17.6.2"

gitlab.gitaly.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

gitlab.gitaly.init.resources.limits.cpu📜

Type: string

Default value
"200m"

gitlab.gitaly.init.resources.limits.memory📜

Type: string

Default value
"200Mi"

gitlab.gitaly.init.resources.requests.cpu📜

Type: string

Default value
"200m"

gitlab.gitaly.init.resources.requests.memory📜

Type: string

Default value
"200Mi"

gitlab.gitaly.init.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.gitaly.resources.requests.cpu📜

Type: string

Default value
"400m"

gitlab.gitaly.resources.requests.memory📜

Type: string

Default value
"600Mi"

gitlab.gitaly.resources.limits.cpu📜

Type: string

Default value
"400m"

gitlab.gitaly.resources.limits.memory📜

Type: string

Default value
"600Mi"

gitlab.gitaly.metrics.enabled📜

Type: bool

Default value
true

gitlab.gitaly.metrics.serviceMonitor.enabled📜

Type: bool

Default value
true

gitlab.gitaly.securityContext.runAsUser📜

Type: int

Default value
1000

gitlab.gitaly.securityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.gitaly.securityContext.fsGroup📜

Type: int

Default value
1000

gitlab.gitaly.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

gitlab.gitaly.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.gitaly.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.gitlab-shell.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell"

gitlab.gitlab-shell.image.tag📜

Type: string

Default value
"17.6.2"

gitlab.gitlab-shell.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

gitlab.gitlab-shell.init.resources.limits.cpu📜

Type: string

Default value
"200m"

gitlab.gitlab-shell.init.resources.limits.memory📜

Type: string

Default value
"200Mi"

gitlab.gitlab-shell.init.resources.requests.cpu📜

Type: string

Default value
"200m"

gitlab.gitlab-shell.init.resources.requests.memory📜

Type: string

Default value
"200Mi"

gitlab.gitlab-shell.init.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.gitlab-shell.resources.limits.cpu📜

Type: string

Default value
"300m"

gitlab.gitlab-shell.resources.limits.memory📜

Type: string

Default value
"300Mi"

gitlab.gitlab-shell.resources.requests.cpu📜

Type: string

Default value
"300m"

gitlab.gitlab-shell.resources.requests.memory📜

Type: string

Default value
"300Mi"

gitlab.gitlab-shell.securityContext.runAsUser📜

Type: int

Default value
1000

gitlab.gitlab-shell.securityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.gitlab-shell.securityContext.fsGroup📜

Type: int

Default value
1000

gitlab.gitlab-shell.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

gitlab.gitlab-shell.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

gitlab.gitlab-shell.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.mailroom.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom"

gitlab.mailroom.image.tag📜

Type: string

Default value
"17.6.2"

gitlab.mailroom.image.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

gitlab.mailroom.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.gitlab-pages.service.customDomains.type📜

Type: string

Default value
"ClusterIP"

gitlab.gitlab-pages.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages"

gitlab.gitlab-pages.image.tag📜

Type: string

Default value
"17.6.2"

gitlab.gitlab-pages.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.praefect.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/gitlab/gitlab/gitaly"

gitlab.praefect.image.tag📜

Type: string

Default value
"17.6.2"

gitlab.praefect.init.resources.limits.cpu📜

Type: string

Default value
"200m"

gitlab.praefect.init.resources.limits.memory📜

Type: string

Default value
"200Mi"

gitlab.praefect.init.resources.requests.cpu📜

Type: string

Default value
"200m"

gitlab.praefect.init.resources.requests.memory📜

Type: string

Default value
"200Mi"

gitlab.praefect.init.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab.praefect.resources.requests.cpu📜

Type: int

Default value
1

gitlab.praefect.resources.requests.memory📜

Type: string

Default value
"1Gi"

gitlab.praefect.resources.limits.cpu📜

Type: int

Default value
1

gitlab.praefect.resources.limits.memory📜

Type: string

Default value
"1Gi"

gitlab.praefect.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

gitlab-zoekt.install📜

Type: bool

Default value
false

gitlab-zoekt.gateway.basicAuth.enabled📜

Type: bool

Default value
false

gitlab-zoekt.gateway.basicAuth.secretName📜

Type: string

Default value
"{{ include \"gitlab.zoekt.gateway.basicAuth.secretName\" $ }}"

gitlab-zoekt.indexer.internalApi.enabled📜

Type: bool

Default value
true

gitlab-zoekt.indexer.internalApi.secretName📜

Type: string

Default value
"{{ include \"gitlab.zoekt.indexer.internalApi.secretName\" $ }}"

gitlab-zoekt.indexer.internalApi.secretKey📜

Type: string

Default value
"{{ include \"gitlab.zoekt.indexer.internalApi.secretKey\" $ }}"

gitlab-zoekt.indexer.internalApi.gitlabUrl📜

Type: string

Default value
"{{ include \"gitlab.zoekt.indexer.internalApi.gitlabUrl\" $ }}"

minio.init.resources.limits.cpu📜

Type: string

Default value
"200m"

minio.init.resources.limits.memory📜

Type: string

Default value
"200Mi"

minio.init.resources.requests.cpu📜

Type: string

Default value
"200m"

minio.init.resources.requests.memory📜

Type: string

Default value
"200Mi"

minio.init.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

minio.resources.limits.cpu📜

Type: string

Default value
"200m"

minio.resources.limits.memory📜

Type: string

Default value
"300Mi"

minio.resources.requests.cpu📜

Type: string

Default value
"200m"

minio.resources.requests.memory📜

Type: string

Default value
"300Mi"

minio.securityContext.runAsUser📜

Type: int

Default value
1000

minio.securityContext.runAsGroup📜

Type: int

Default value
1000

minio.securityContext.fsGroup📜

Type: int

Default value
1000

minio.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

minio.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

minio.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

minio.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

minio.jobAnnotations.”sidecar.istio.io/inject”📜

Type: string

Default value
"true"

minio.image📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/minio/minio"

minio.imageTag📜

Type: string

Default value
"RELEASE.2024-06-04T19-20-08Z"

minio.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

minio.minioMc.image📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/minio/mc"

minio.minioMc.tag📜

Type: string

Default value
"RELEASE.2024-10-02T08-27-28Z"

minio.minioMc.pullSecrets[0].name📜

Type: string

Default value
"private-registry"

domain📜

Type: string

Default value
"dev.bigbang.mil"

sso.enabled📜

Type: bool

Default value
false

sso.host📜

Type: string

Default value
"login.dso.mil"

istio.enabled📜

Type: bool

Default value
false

istio.injection📜

Type: string

Default value
"disabled"

istio.hardened.enabled📜

Type: bool

Default value
false

istio.hardened.outboundTrafficPolicyMode📜

Type: string

Default value
"REGISTRY_ONLY"

istio.hardened.customServiceEntries📜

Type: list

Default value
[]

istio.hardened.customAuthorizationPolicies📜

Type: list

Default value
[]

istio.hardened.gitlabRunner.enabled📜

Type: bool

Default value
true

istio.hardened.gitlabRunner.namespaces[0]📜

Type: string

Default value
"gitlab-runner"

istio.hardened.monitoring.enabled📜

Type: bool

Default value
true

istio.hardened.monitoring.namespaces[0]📜

Type: string

Default value
"monitoring"

istio.hardened.monitoring.principals[0]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-grafana"

istio.hardened.monitoring.principals[1]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-alertmanager"

istio.hardened.monitoring.principals[2]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-operator"

istio.hardened.monitoring.principals[3]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus"

istio.hardened.monitoring.principals[4]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-state-metrics"

istio.hardened.monitoring.principals[5]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-prometheus-node-exporter"

istio.gitlab.enabled📜

Type: bool

Default value
true

istio.gitlab.annotations📜

Type: object

Default value
{}

istio.gitlab.labels📜

Type: object

Default value
{}

istio.gitlab.gateways[0]📜

Type: string

Default value
"istio-system/main"

istio.gitlab.hosts📜

Type: string

Default value
nil

istio.gitlab.selectorLabels.app📜

Type: string

Default value
"webservice"

istio.registry.enabled📜

Type: bool

Default value
true

istio.registry.annotations📜

Type: object

Default value
{}

istio.registry.labels📜

Type: object

Default value
{}

istio.registry.gateways[0]📜

Type: string

Default value
"istio-system/main"

istio.registry.hosts📜

Type: string

Default value
nil

istio.registry.selectorLabels.app📜

Type: string

Default value
"registry"

istio.pages.enabled📜

Type: bool

Default value
false

istio.pages.annotations📜

Type: object

Default value
{}

istio.pages.ingressLabels.app📜

Type: string

Default value
"pages-ingressgateway"

istio.pages.ingressLabels.istio📜

Type: string

Default value
"ingressgateway"

istio.pages.labels📜

Type: object

Default value
{}

istio.pages.gateways[0]📜

Type: string

Default value
"istio-system/pages"

istio.pages.customDomains.enabled📜

Type: bool

Default value
true

istio.pages.hosts[0]📜

Type: string

Default value
"*.pages.dev.bigbang.mil"

istio.mtls📜

Type: object

Default value
mode: STRICT

Description: Default peer authentication

istio.mtls.mode📜

Type: string

Default value
"STRICT"

Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic

monitoring.enabled📜

Type: bool

Default value
false

networkPolicies.enabled📜

Type: bool

Default value
false

networkPolicies.ingressLabels.app📜

Type: string

Default value
"istio-ingressgateway"

networkPolicies.ingressLabels.istio📜

Type: string

Default value
"ingressgateway"

networkPolicies.controlPlaneCidr📜

Type: string

Default value
"0.0.0.0/0"

networkPolicies.egressPort📜

Type: string

Default value
nil

networkPolicies.gitalyEgress.enabled📜

Type: bool

Default value
false

networkPolicies.additionalPolicies📜

Type: list

Default value
[]

openshift📜

Type: bool

Default value
false

use_iam_profile📜

Type: bool

Default value
false

bbtests.enabled📜

Type: bool

Default value
false

bbtests.cypress.resources.requests.cpu📜

Type: int

Default value
1

bbtests.cypress.resources.requests.memory📜

Type: string

Default value
"2Gi"

bbtests.cypress.resources.limits.cpu📜

Type: int

Default value
1

bbtests.cypress.resources.limits.memory📜

Type: string

Default value
"2Gi"

bbtests.cypress.artifacts📜

Type: bool

Default value
true

bbtests.cypress.envs.cypress_url📜

Type: string

Default value
"http://gitlab-webservice-default:8181"

bbtests.cypress.envs.cypress_gitlab_first_name📜

Type: string

Default value
"test"

bbtests.cypress.envs.cypress_gitlab_last_name📜

Type: string

Default value
"user"

bbtests.cypress.envs.cypress_gitlab_username📜

Type: string

Default value
"testuser"

bbtests.cypress.envs.cypress_gitlab_password📜

Type: string

Default value
"Password123h56a78"

bbtests.cypress.envs.cypress_gitlab_email📜

Type: string

Default value
"testuser@example.com"

bbtests.cypress.envs.cypress_gitlab_project📜

Type: string

Default value
"my-awesome-project"

bbtests.cypress.envs.cypress_keycloak_username📜

Type: string

Default value
"cypress"

bbtests.cypress.envs.cypress_keycloak_password📜

Type: string

Default value
"tnr_w!G33ZyAt@C8"

bbtests.cypress.secretEnvs[0].name📜

Type: string

Default value
"cypress_adminpassword"

bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.name📜

Type: string

Default value
"gitlab-gitlab-initial-root-password"

bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.key📜

Type: string

Default value
"password"

bbtests.scripts.image📜

Type: string

Default value
"registry1.dso.mil/bigbang-ci/devops-tester:1.1.1"

bbtests.scripts.additionalVolumes[0].name📜

Type: string

Default value
"docker-config"

bbtests.scripts.additionalVolumes[0].secret.secretName📜

Type: string

Default value
"private-registry"

bbtests.scripts.additionalVolumes[0].secret.items[0].key📜

Type: string

Default value
".dockerconfigjson"

bbtests.scripts.additionalVolumes[0].secret.items[0].path📜

Type: string

Default value
"auth.json"

bbtests.scripts.additionalVolumeMounts[0].name📜

Type: string

Default value
"docker-config"

bbtests.scripts.additionalVolumeMounts[0].mountPath📜

Type: string

Default value
"/.docker/"

bbtests.scripts.envs.GITLAB_USER📜

Type: string

Default value
"root"

bbtests.scripts.envs.GITLAB_EMAIL📜

Type: string

Default value
"gitlab-root-user@example.com"

bbtests.scripts.envs.GITLAB_HOST📜

Type: string

Default value
"gitlab-webservice-default.gitlab.svc.cluster.local:8181"

bbtests.scripts.envs.GITLAB_PROJECT📜

Type: string

Default value
"bigbang-test-project-2"

bbtests.scripts.envs.GITLAB_REGISTRY📜

Type: string

Default value
"gitlab-registry-test-svc.gitlab.svc.cluster.local:80"

bbtests.scripts.envs.GITLAB_REPOSITORY📜

Type: string

Default value
"http://gitlab-webservice-default.gitlab.svc.cluster.local:8181"