sonarqube values.yaml
📜
deploymentType📜
Type: string
"StatefulSet"
replicaCount📜
Type: int
1
revisionHistoryLimit📜
Type: int
10
deploymentStrategy📜
Type: object
{}
OpenShift.enabled📜
Type: bool
false
OpenShift.createSCC📜
Type: bool
true
sso.enabled📜
Type: bool
false
sso.name📜
Type: string
""
sso.applicationid📜
Type: string
""
sso.providerid📜
Type: string
""
sso.loginUrl📜
Type: string
""
sso.secured📜
Type: string
""
sso.serverBaseURL📜
Type: string
""
sso.idpmetadataurl📜
Type: string
""
sso.image📜
Type: string
""
sso.resources.limits.cpu📜
Type: string
"100m"
sso.resources.limits.memory📜
Type: string
"256Mi"
sso.resources.requests.cpu📜
Type: string
"100m"
sso.resources.requests.memory📜
Type: string
"256Mi"
sso.containerSecurityContext.enabled📜
Type: bool
true
sso.containerSecurityContext.fsGroup📜
Type: int
26
sso.containerSecurityContext.runAsUser📜
Type: int
26
sso.containerSecurityContext.runAsGroup📜
Type: int
26
sso.containerSecurityContext.capabilities.drop[0]📜
Type: string
"ALL"
edition📜
Type: string
"community"
image.repository📜
Type: string
"registry1.dso.mil/ironbank/big-bang/sonarqube-10"
image.tag📜
Type: string
"10.6.0-community"
image.pullPolicy📜
Type: string
"IfNotPresent"
image.pullSecrets[0].name📜
Type: string
"private-registry"
securityContext.fsGroup📜
Type: int
1000
securityContext.runAsUser📜
Type: int
1000
securityContext.runAsGroup📜
Type: int
1000
containerSecurityContext.allowPrivilegeEscalation📜
Type: bool
false
containerSecurityContext.runAsNonRoot📜
Type: bool
true
containerSecurityContext.runAsUser📜
Type: int
1000
containerSecurityContext.runAsGroup📜
Type: int
1000
containerSecurityContext.capabilities.drop[0]📜
Type: string
"ALL"
elasticsearch.configureNode📜
Type: bool
false
elasticsearch.bootstrapChecks📜
Type: bool
true
nginx.enabled📜
Type: bool
false
service.type📜
Type: string
"ClusterIP"
service.externalPort📜
Type: int
9000
service.internalPort📜
Type: int
9000
service.labels📜
Type: string
nil
service.annotations📜
Type: object
{}
networkPolicy.enabled📜
Type: bool
false
networkPolicy.prometheusNamespace📜
Type: string
"monitoring"
sonarWebContext📜
Type: string
""
ingress-nginx.enabled📜
Type: bool
false
ingress.enabled📜
Type: bool
false
ingress.hosts[0].name📜
Type: string
"sonarqube.your-org.com"
ingress.annotations📜
Type: object
{}
ingress.tls📜
Type: list
[]
route.enabled📜
Type: bool
false
route.host📜
Type: string
""
route.tls.termination📜
Type: string
"edge"
route.annotations📜
Type: object
{}
affinity📜
Type: object
{}
tolerations📜
Type: list
[]
nodeSelector📜
Type: object
{}
hostAliases📜
Type: list
[]
readinessProbe.exec.command[0]📜
Type: string
"sh"
readinessProbe.exec.command[1]📜
Type: string
"-c"
readinessProbe.exec.command[2]📜
Type: string
"#!/bin/bash\n# A Sonarqube container is considered ready if the status is UP, DB_MIGRATION_NEEDED or DB_MIGRATION_RUNNING\n# status about migration are added to prevent the node to be kill while sonarqube is upgrading the database.\nif curl -s http://localhost:{{ .Values.service.internalPort }}{{ .Values.readinessProbe.sonarWebContext \| default (include \"sonarqube.webcontext\" .) }}api/system/status \| grep -q -e '\"status\":\"UP\"' -e '\"status\":\"DB_MIGRATION_NEEDED\"' -e '\"status\":\"DB_MIGRATION_RUNNING\"'; then\n exit 0\nfi\nexit 1\n"
readinessProbe.initialDelaySeconds📜
Type: int
60
readinessProbe.periodSeconds📜
Type: int
30
readinessProbe.failureThreshold📜
Type: int
6
readinessProbe.timeoutSeconds📜
Type: int
90
livenessProbe.exec.command[0]📜
Type: string
"sh"
livenessProbe.exec.command[1]📜
Type: string
"-c"
livenessProbe.exec.command[2]📜
Type: string
"curl --silent --fail --output /dev/null --max-time {{ .Values.livenessProbe.timeoutSeconds \| default 1 }} --header \"X-Sonar-Passcode: $SONAR_WEB_SYSTEMPASSCODE\" \"http://localhost:{{ .Values.service.internalPort }}{{ .Values.livenessProbe.sonarWebContext \| default (include \"sonarqube.webcontext\" .) }}api/system/liveness\"\n"
livenessProbe.initialDelaySeconds📜
Type: int
60
livenessProbe.periodSeconds📜
Type: int
30
livenessProbe.failureThreshold📜
Type: int
6
livenessProbe.timeoutSeconds📜
Type: int
1
startupProbe.initialDelaySeconds📜
Type: int
30
startupProbe.periodSeconds📜
Type: int
10
startupProbe.failureThreshold📜
Type: int
24
startupProbe.timeoutSeconds📜
Type: int
1
initContainers.image📜
Type: string
"registry1.dso.mil/ironbank/big-bang/base:2.1.0"
initContainers.allowPrivilegeEscalation📜
Type: bool
false
initContainers.runAsNonRoot📜
Type: bool
true
initContainers.runAsUser📜
Type: int
1000
initContainers.runAsGroup📜
Type: int
0
initContainers.seccompProfile.type📜
Type: string
"RuntimeDefault"
initContainers.capabilities.drop[0]📜
Type: string
"ALL"
initContainers.resources.limits.memory📜
Type: string
"300Mi"
initContainers.resources.limits.cpu📜
Type: string
"50m"
initContainers.resources.requests.memory📜
Type: string
"300Mi"
initContainers.resources.requests.cpu📜
Type: string
"50m"
initContainers.securityContext.capabilities.drop[0]📜
Type: string
"ALL"
extraInitContainers📜
Type: object
{}
extraContainers📜
Type: list
[]
waitForDb.image📜
Type: string
"registry1.dso.mil/ironbank/opensource/postgres/postgresql12:12.19"
caCerts.enabled📜
Type: bool
false
initSysctl.enabled📜
Type: bool
false
initSysctl.vmMaxMapCount📜
Type: int
524288
initSysctl.fsFileMax📜
Type: int
131072
initSysctl.nofile📜
Type: int
131072
initSysctl.nproc📜
Type: int
8192
initSysctl.securityContext.privileged📜
Type: bool
true
initSysctl.securityContext.capabilities.drop[0]📜
Type: string
"ALL"
initSysctl.securityContext.runAsUser📜
Type: int
0
initFs.enabled📜
Type: bool
false
initFs.securityContext.privileged📜
Type: bool
false
initFs.securityContext.runAsNonRoot📜
Type: bool
false
initFs.securityContext.runAsUser📜
Type: int
0
initFs.securityContext.runAsGroup📜
Type: int
0
initFs.securityContext.seccompProfile.type📜
Type: string
"RuntimeDefault"
initFs.securityContext.capabilities.drop[0]📜
Type: string
"ALL"
initFs.securityContext.capabilities.add[0]📜
Type: string
"CHOWN"
prometheusExporter.enabled📜
Type: bool
false
prometheusExporter.version📜
Type: string
"0.17.2"
prometheusExporter.webBeanPort📜
Type: int
8000
prometheusExporter.ceBeanPort📜
Type: int
8001
prometheusExporter.config.rules[0].pattern📜
Type: string
".*"
prometheusExporter.image📜
Type: string
"registry1.dso.mil/ironbank/opensource/prometheus/jmx-exporter:0.17.2"
prometheusMonitoring.podMonitor.enabled📜
Type: bool
false
prometheusMonitoring.podMonitor.interval📜
Type: string
"30s"
plugins.install📜
Type: list
[]
plugins.image📜
Type: string
"registry1.dso.mil/ironbank/big-bang/sonarqube-10:10.6.0-community"
plugins.noCheckCertificate📜
Type: bool
false
jvmOpts📜
Type: string
""
jvmCeOpts📜
Type: string
""
monitoringPasscode📜
Type: string
"define_it"
env[0].name📜
Type: string
"JDK_JAVA_OPTIONS"
env[0].value📜
Type: string
"-Dcom.redhat.fips=false"
annotations📜
Type: object
{}
resources.limits.cpu📜
Type: string
"1000m"
resources.limits.memory📜
Type: string
"6144M"
resources.limits.ephemeral-storage📜
Type: string
"512000M"
resources.requests.cpu📜
Type: string
"500m"
resources.requests.memory📜
Type: string
"2048M"
resources.requests.ephemeral-storage📜
Type: string
"1536M"
persistence.enabled📜
Type: bool
false
persistence.annotations📜
Type: object
{}
persistence.storageClass📜
Type: string
nil
persistence.accessMode📜
Type: string
"ReadWriteOnce"
persistence.size📜
Type: string
"20Gi"
persistence.uid📜
Type: int
1000
persistence.guid📜
Type: int
0
persistence.volumes📜
Type: list
[]
persistence.mounts📜
Type: list
[]
emptyDir📜
Type: object
{}
sonarProperties.”sonar.forceAuthentication”📜
Type: bool
true
sonarProperties.”sonar.ce.javaAdditionalOpts”📜
Type: string
"-Dcom.redhat.fips=false"
sonarProperties.”sonar.search.javaAdditionalOpts”📜
Type: string
"-Dcom.redhat.fips=false"
sonarProperties.”sonar.web.javaAdditionalOpts”📜
Type: string
"-Dcom.redhat.fips=false"
jdbcOverwrite.enable📜
Type: bool
false
jdbcOverwrite.jdbcUsername📜
Type: string
"sonarUser"
jdbcOverwrite.jdbcPassword📜
Type: string
"sonarPass"
postgresql.enabled📜
Type: bool
true
postgresql.postgresqlUsername📜
Type: string
"sonarUser"
postgresql.postgresqlPassword📜
Type: string
"sonarPass"
postgresql.postgresqlDatabase📜
Type: string
"sonarDB"
postgresql.service.port📜
Type: int
5432
postgresql.resources.limits.cpu📜
Type: string
"100m"
postgresql.resources.limits.memory📜
Type: string
"200Mi"
postgresql.resources.requests.cpu📜
Type: string
"100m"
postgresql.resources.requests.memory📜
Type: string
"200Mi"
postgresql.image.registry📜
Type: string
"registry1.dso.mil"
postgresql.image.repository📜
Type: string
"ironbank/opensource/postgres/postgresql12"
postgresql.image.tag📜
Type: string
"12.19"
postgresql.image.pullSecrets[0]📜
Type: string
"private-registry"
postgresql.postgresqlConfiguration.listen_addresses📜
Type: string
"*"
postgresql.pgHbaConfiguration📜
Type: string
"local all all md5\nhost all all all md5"
postgresql.persistence.enabled📜
Type: bool
true
postgresql.persistence.accessMode📜
Type: string
"ReadWriteOnce"
postgresql.persistence.size📜
Type: string
"20Gi"
postgresql.persistence.storageClass📜
Type: string
nil
postgresql.persistence.mountPath📜
Type: string
"/var/lib/postgresql"
postgresql.postgresqlDataDir📜
Type: string
"/var/lib/postgresql/data"
postgresql.volumePermissions.enabled📜
Type: bool
false
postgresql.serviceAccount.enabled📜
Type: bool
true
postgresql.serviceAccount.automountServiceAccountToken📜
Type: bool
false
postgresql.securityContext.enabled📜
Type: bool
true
postgresql.securityContext.fsGroup📜
Type: int
26
postgresql.securityContext.runAsUser📜
Type: int
26
postgresql.securityContext.runAsGroup📜
Type: int
26
postgresql.securityContext.capabilities.drop[0]📜
Type: string
"ALL"
podLabels📜
Type: object
{}
sonarqubeFolder📜
Type: string
"/opt/sonarqube"
tests.image📜
Type: string
"bitnami/minideb-extras"
tests.enabled📜
Type: bool
false
tests.resources📜
Type: object
{}
serviceAccount.create📜
Type: bool
true
serviceAccount.automountToken📜
Type: bool
false
serviceAccount.annotations📜
Type: object
{}
extraConfig.secrets📜
Type: list
[]
extraConfig.configmaps📜
Type: list
[]
terminationGracePeriodSeconds📜
Type: int
60
curlContainerImage📜
Type: string
"registry1.dso.mil/bigbang-ci/devops-tester:1.1.1"
domain📜
Type: string
"dev.bigbang.mil"
istio.enabled📜
Type: bool
false
istio.hardened.enabled📜
Type: bool
false
istio.hardened.customAuthorizationPolicies📜
Type: list
[]
istio.hardened.outboundTrafficPolicyMode📜
Type: string
"REGISTRY_ONLY"
istio.hardened.customServiceEntries📜
Type: list
[]
istio.hardened.tempo.enabled📜
Type: bool
true
istio.hardened.tempo.namespaces[0]📜
Type: string
"tempo"
istio.hardened.tempo.principals[0]📜
Type: string
"cluster.local/ns/tempo/sa/tempo-tempo"
istio.hardened.monitoring.enabled📜
Type: bool
true
istio.hardened.monitoring.namespaces[0]📜
Type: string
"monitoring"
istio.hardened.monitoring.principals[0]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-grafana"
istio.hardened.monitoring.principals[1]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-alertmanager"
istio.hardened.monitoring.principals[2]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-operator"
istio.hardened.monitoring.principals[3]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus"
istio.hardened.monitoring.principals[4]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-state-metrics"
istio.hardened.monitoring.principals[5]📜
Type: string
"cluster.local/ns/monitoring/sa/monitoring-monitoring-prometheus-node-exporter"
istio.mtls📜
Type: object
mode: STRICT
Description: Default argocd peer authentication
istio.mtls.mode📜
Type: string
"STRICT"
Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
istio.sonarqube.enabled📜
Type: bool
true
istio.sonarqube.annotations📜
Type: object
{}
istio.sonarqube.labels📜
Type: object
{}
istio.sonarqube.gateways[0]📜
Type: string
"istio-system/main"
istio.sonarqube.hosts[0]📜
Type: string
"sonarqube.{{ .Values.domain }}"
istio.injection📜
Type: string
"disabled"
monitoring.enabled📜
Type: bool
false
networkPolicies.enabled📜
Type: bool
false
networkPolicies.ingressLabels.app📜
Type: string
"istio-ingressgateway"
networkPolicies.ingressLabels.istio📜
Type: string
"ingressgateway"
networkPolicies.egressHttps.enabled📜
Type: bool
true
networkPolicies.additionalPolicies📜
Type: list
[]
bbtests.enabled📜
Type: bool
false
bbtests.cypress.artifacts📜
Type: bool
true
bbtests.cypress.envs.cypress_url📜
Type: string
"http://sonarqube-sonarqube:9000"
bbtests.cypress.envs.cypress_url_setup📜
Type: string
"http://sonarqube-sonarqube:9000/setup"
bbtests.cypress.envs.cypress_user📜
Type: string
"admin"
bbtests.cypress.envs.cypress_password📜
Type: string
"new_admin_password"
bbtests.cypress.envs.cypress_timeout📜
Type: string
"10000"