Skip to content

sonarqube values.yaml

replicaCount

Type: int

Default value
1

sso.enabled

Type: bool

Default value
false

sso.name

Type: string

Default value
""

sso.applicationid

Type: string

Default value
""

sso.providerid

Type: string

Default value
""

sso.loginUrl

Type: string

Default value
""

sso.secured

Type: string

Default value
""

sso.serverBaseURL

Type: string

Default value
""

sso.idpmetadataurl

Type: string

Default value
""

sso.image

Type: string

Default value
""

sso.resources.limits.cpu

Type: string

Default value
"100m"

sso.resources.limits.memory

Type: string

Default value
"256Mi"

sso.resources.requests.cpu

Type: string

Default value
"100m"

sso.resources.requests.memory

Type: string

Default value
"256Mi"

sso.containerSecurityContext.enabled

Type: bool

Default value
true

sso.containerSecurityContext.runAsUser

Type: int

Default value
26

sso.containerSecurityContext.runAsGroup

Type: int

Default value
26

sso.containerSecurityContext.runAsNonRoot

Type: bool

Default value
true

sso.containerSecurityContext.allowPrivilegeEscalation

Type: bool

Default value
false

sso.containerSecurityContext.seccompProfile.type

Type: string

Default value
"RuntimeDefault"

sso.containerSecurityContext.capabilities.drop[0]

Type: string

Default value
"ALL"

upstream.fullnameOverride

Type: string

Default value
"sonarqube-sonarqube"

upstream.nameOverride

Type: string

Default value
"sonarqube"

upstream.mcp

Type: object

Default value
enabled: false

Description: SonarQube MCP is unsupported because its image is not available in Iron Bank.

upstream.community.enabled

Type: bool

Default value
true

upstream.community.buildNumber

Type: string

Default value
"26.8.0.126808"

upstream.image.repository

Type: string

Default value
"registry1.dso.mil/ironbank/sonarsource/sonarqube/sonarqube-community-build"

upstream.image.tag

Type: string

Default value
"26.8.0.126808-community"

upstream.image.pullSecrets

Type: list

Default value
[]

upstream.securityContext.fsGroup

Type: int

Default value
1000

upstream.securityContext.runAsUser

Type: int

Default value
1000

upstream.securityContext.runAsGroup

Type: int

Default value
1000

upstream.containerSecurityContext.runAsGroup

Type: int

Default value
1000

upstream.containerSecurityContext.capabilities.drop[0]

Type: string

Default value
"ALL"

upstream.nginx.enabled

Type: bool

Default value
false

upstream.readinessProbe.exec.command[0]

Type: string

Default value
"sh"

upstream.readinessProbe.exec.command[1]

Type: string

Default value
"-c"

upstream.readinessProbe.exec.command[2]

Type: string

Default value
"#!/bin/bash\n# A Sonarqube container is considered ready if the status is UP, DB_MIGRATION_NEEDED or DB_MIGRATION_RUNNING\n# status about migration are added to prevent the node to be kill while sonarqube is upgrading the database.\nif curl -s http://localhost:{{ .Values.service.internalPort }}{{ .Values.readinessProbe.sonarWebContext | default (include \"sonarqube.webcontext\" .) }}api/system/status | grep -q -e '\"status\":\"UP\"' -e '\"status\":\"DB_MIGRATION_NEEDED\"' -e '\"status\":\"DB_MIGRATION_RUNNING\"'; then\n  exit 0\nfi\nexit 1\n"

upstream.readinessProbe.timeoutSeconds

Type: int

Default value
90

upstream.livenessProbe.exec.command[0]

Type: string

Default value
"sh"

upstream.livenessProbe.exec.command[1]

Type: string

Default value
"-c"

upstream.livenessProbe.exec.command[2]

Type: string

Default value
"curl --silent --fail --output /dev/null --max-time {{ .Values.livenessProbe.timeoutSeconds | default 1 }} --header \"X-Sonar-Passcode: $SONAR_WEB_SYSTEMPASSCODE\" \"http://localhost:{{ .Values.service.internalPort }}{{ .Values.livenessProbe.sonarWebContext | default (include \"sonarqube.webcontext\" .) }}api/system/liveness\"\n"

upstream.initContainers.image

Type: string

Default value
"registry1.dso.mil/ironbank/big-bang/base:2.1.0"

upstream.initContainers.securityContext.runAsGroup

Type: int

Default value
1000

upstream.initContainers.readOnlyRootFilesystem

Type: bool

Default value
true

upstream.initContainers.resources.limits.memory

Type: string

Default value
"300Mi"

upstream.initContainers.resources.limits.cpu

Type: string

Default value
"50m"

upstream.initContainers.resources.requests.memory

Type: string

Default value
"300Mi"

upstream.initContainers.resources.requests.cpu

Type: string

Default value
"50m"

upstream.initFs.enabled

Type: bool

Default value
false

upstream.initSysctl.enabled

Type: bool

Default value
false

upstream.initSysctl.securityContext.capabilities.drop[0]

Type: string

Default value
"ALL"

upstream.prometheusExporter.image

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/prometheus/jmx-exporter:1.6.0"

upstream.prometheusExporter.downloadURL

Type: string

Default value
"file:///opt/jmx_exporter/jmx_prometheus_javaagent-1.6.0.jar"

upstream.plugins.image

Type: string

Default value
"registry1.dso.mil/ironbank/sonarsource/sonarqube/sonarqube-community-build:26.8.0.126808-community"

upstream.monitoringPasscode

Type: string

Default value
"define_it"

upstream.env[0].name

Type: string

Default value
"JDK_JAVA_OPTIONS"

upstream.env[0].value

Type: string

Default value
"-Dcom.redhat.fips=false"

upstream.resources.limits.cpu

Type: string

Default value
"1000m"

upstream.resources.requests.cpu

Type: string

Default value
"500m"

upstream.persistence.size

Type: string

Default value
"20Gi"

upstream.sonarProperties.”sonar.forceAuthentication”

Type: bool

Default value
true

upstream.sonarProperties.”sonar.ce.javaAdditionalOpts”

Type: string

Default value
"-Dcom.redhat.fips=false"

upstream.sonarProperties.”sonar.search.javaAdditionalOpts”

Type: string

Default value
"-Dcom.redhat.fips=false"

upstream.sonarProperties.”sonar.web.javaAdditionalOpts”

Type: string

Default value
"-Dcom.redhat.fips=false"

upstream.sonarProperties.”sonar.telemetry.enable”

Type: bool

Default value
false

upstream.tests.image

Type: string

Default value
"bitnami/minideb-extras"

upstream.tests.enabled

Type: bool

Default value
false

upstream.tests.resources

Type: object

Default value
{}

upstream.serviceAccount.create

Type: bool

Default value
true

curlContainerImage

Type: string

Default value
"registry1.dso.mil/ironbank/redhat/ubi/ubi9:9.8"

domain

Type: string

Default value
"dev.bigbang.mil"

istio.enabled

Type: bool

Default value
false

istio.ambient.enabled

Type: bool

Default value
false

istio.sidecar.enabled

Type: bool

Default value
false

istio.sidecar.outboundTrafficPolicyMode

Type: string

Default value
"REGISTRY_ONLY"

istio.serviceEntries.custom

Type: list

Default value
[]

istio.authorizationPolicies.enabled

Type: bool

Default value
false

istio.authorizationPolicies.custom

Type: list

Default value
[]

istio.mtls.mode

Type: string

Default value
"STRICT"

routes.inbound.sonarqube.enabled

Type: bool

Default value
true

routes.inbound.sonarqube.gateways[0]

Type: string

Default value
"istio-gateway/public-ingressgateway"

routes.inbound.sonarqube.hosts[0]

Type: string

Default value
"sonarqube.dev.bigbang.mil"

routes.inbound.sonarqube.service

Type: string

Default value
"sonarqube-sonarqube.sonarqube.svc.cluster.local"

routes.inbound.sonarqube.port

Type: int

Default value
9000

routes.inbound.sonarqube.selector.app

Type: string

Default value
"sonarqube"

OpenShift.enabled

Type: bool

Default value
false

networkPolicies.enabled

Type: bool

Default value
false

networkPolicies.ingress.to.sonarqube:[8000,8001,9000].podSelector.matchLabels.app

Type: string

Default value
"sonarqube"

networkPolicies.ingress.to.sonarqube:[8000,8001,9000].from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus

Type: bool

Default value
false

networkPolicies.egress.definitions.sonarsource-marketplace.to[0].ipBlock.cidr

Type: string

Default value
"0.0.0.0/0"

networkPolicies.egress.definitions.sonarsource-marketplace.to[0].ipBlock.except[0]

Type: string

Default value
"169.254.169.254/32"

networkPolicies.egress.definitions.sonarsource-marketplace.ports[0].port

Type: int

Default value
443

networkPolicies.egress.definitions.sonarsource-marketplace.ports[0].protocol

Type: string

Default value
"TCP"

networkPolicies.egress.definitions.code-repository.to[0].ipBlock.cidr

Type: string

Default value
"0.0.0.0/0"

networkPolicies.egress.definitions.code-repository.to[0].ipBlock.except[0]

Type: string

Default value
"169.254.169.254/32"

networkPolicies.egress.definitions.code-repository.ports[0].port

Type: int

Default value
443

networkPolicies.egress.definitions.code-repository.ports[0].protocol

Type: string

Default value
"TCP"

networkPolicies.egress.from.sonarqube.podSelector.matchLabels.app

Type: string

Default value
"sonarqube"

networkPolicies.egress.from.sonarqube.to.k8s.tempo/tempo:9411

Type: bool

Default value
false

networkPolicies.egress.from.sonarqube.to.definition.sonarsource-marketplace

Type: bool

Default value
false

networkPolicies.egress.from.sonarqube.to.definition.code-repository

Type: bool

Default value
true

networkPolicies.egressHttps

Type: object

Default value
enabled: true

Description: This section will be deprecated in the next major release in favor of the bb-common definitions

networkPolicies.additionalPolicies

Type: list

Default value
[]

bbtests.enabled

Type: bool

Default value
false

bbtests.cypress.artifacts

Type: bool

Default value
true

bbtests.cypress.envs.cypress_url

Type: string

Default value
"http://sonarqube-sonarqube:9000"

bbtests.cypress.envs.cypress_url_setup

Type: string

Default value
"http://sonarqube-sonarqube:9000/setup"

bbtests.cypress.envs.cypress_user

Type: string

Default value
"admin"

bbtests.cypress.envs.cypress_password

Type: string

Default value
"admin"

bbtests.cypress.envs.cypress_new_password

Type: string

Default value
"New_admin_password!2"

bbtests.cypress.envs.cypress_timeout

Type: string

Default value
"10000"