sonarqube values.yaml¶
replicaCount¶
Type: int
1
sso.enabled¶
Type: bool
false
sso.name¶
Type: string
""
sso.applicationid¶
Type: string
""
sso.providerid¶
Type: string
""
sso.loginUrl¶
Type: string
""
sso.secured¶
Type: string
""
sso.serverBaseURL¶
Type: string
""
sso.idpmetadataurl¶
Type: string
""
sso.image¶
Type: string
""
sso.resources.limits.cpu¶
Type: string
"100m"
sso.resources.limits.memory¶
Type: string
"256Mi"
sso.resources.requests.cpu¶
Type: string
"100m"
sso.resources.requests.memory¶
Type: string
"256Mi"
sso.containerSecurityContext.enabled¶
Type: bool
true
sso.containerSecurityContext.runAsUser¶
Type: int
26
sso.containerSecurityContext.runAsGroup¶
Type: int
26
sso.containerSecurityContext.runAsNonRoot¶
Type: bool
true
sso.containerSecurityContext.allowPrivilegeEscalation¶
Type: bool
false
sso.containerSecurityContext.seccompProfile.type¶
Type: string
"RuntimeDefault"
sso.containerSecurityContext.capabilities.drop[0]¶
Type: string
"ALL"
upstream.fullnameOverride¶
Type: string
"sonarqube-sonarqube"
upstream.nameOverride¶
Type: string
"sonarqube"
upstream.mcp¶
Type: object
enabled: false
Description: SonarQube MCP is unsupported because its image is not available in Iron Bank.
upstream.community.enabled¶
Type: bool
true
upstream.community.buildNumber¶
Type: string
"26.8.0.126808"
upstream.image.repository¶
Type: string
"registry1.dso.mil/ironbank/sonarsource/sonarqube/sonarqube-community-build"
upstream.image.tag¶
Type: string
"26.8.0.126808-community"
upstream.image.pullSecrets¶
Type: list
[]
upstream.securityContext.fsGroup¶
Type: int
1000
upstream.securityContext.runAsUser¶
Type: int
1000
upstream.securityContext.runAsGroup¶
Type: int
1000
upstream.containerSecurityContext.runAsGroup¶
Type: int
1000
upstream.containerSecurityContext.capabilities.drop[0]¶
Type: string
"ALL"
upstream.nginx.enabled¶
Type: bool
false
upstream.readinessProbe.exec.command[0]¶
Type: string
"sh"
upstream.readinessProbe.exec.command[1]¶
Type: string
"-c"
upstream.readinessProbe.exec.command[2]¶
Type: string
"#!/bin/bash\n# A Sonarqube container is considered ready if the status is UP, DB_MIGRATION_NEEDED or DB_MIGRATION_RUNNING\n# status about migration are added to prevent the node to be kill while sonarqube is upgrading the database.\nif curl -s http://localhost:{{ .Values.service.internalPort }}{{ .Values.readinessProbe.sonarWebContext | default (include \"sonarqube.webcontext\" .) }}api/system/status | grep -q -e '\"status\":\"UP\"' -e '\"status\":\"DB_MIGRATION_NEEDED\"' -e '\"status\":\"DB_MIGRATION_RUNNING\"'; then\n exit 0\nfi\nexit 1\n"
upstream.readinessProbe.timeoutSeconds¶
Type: int
90
upstream.livenessProbe.exec.command[0]¶
Type: string
"sh"
upstream.livenessProbe.exec.command[1]¶
Type: string
"-c"
upstream.livenessProbe.exec.command[2]¶
Type: string
"curl --silent --fail --output /dev/null --max-time {{ .Values.livenessProbe.timeoutSeconds | default 1 }} --header \"X-Sonar-Passcode: $SONAR_WEB_SYSTEMPASSCODE\" \"http://localhost:{{ .Values.service.internalPort }}{{ .Values.livenessProbe.sonarWebContext | default (include \"sonarqube.webcontext\" .) }}api/system/liveness\"\n"
upstream.initContainers.image¶
Type: string
"registry1.dso.mil/ironbank/big-bang/base:2.1.0"
upstream.initContainers.securityContext.runAsGroup¶
Type: int
1000
upstream.initContainers.readOnlyRootFilesystem¶
Type: bool
true
upstream.initContainers.resources.limits.memory¶
Type: string
"300Mi"
upstream.initContainers.resources.limits.cpu¶
Type: string
"50m"
upstream.initContainers.resources.requests.memory¶
Type: string
"300Mi"
upstream.initContainers.resources.requests.cpu¶
Type: string
"50m"
upstream.initFs.enabled¶
Type: bool
false
upstream.initSysctl.enabled¶
Type: bool
false
upstream.initSysctl.securityContext.capabilities.drop[0]¶
Type: string
"ALL"
upstream.prometheusExporter.image¶
Type: string
"registry1.dso.mil/ironbank/opensource/prometheus/jmx-exporter:1.6.0"
upstream.prometheusExporter.downloadURL¶
Type: string
"file:///opt/jmx_exporter/jmx_prometheus_javaagent-1.6.0.jar"
upstream.plugins.image¶
Type: string
"registry1.dso.mil/ironbank/sonarsource/sonarqube/sonarqube-community-build:26.8.0.126808-community"
upstream.monitoringPasscode¶
Type: string
"define_it"
upstream.env[0].name¶
Type: string
"JDK_JAVA_OPTIONS"
upstream.env[0].value¶
Type: string
"-Dcom.redhat.fips=false"
upstream.resources.limits.cpu¶
Type: string
"1000m"
upstream.resources.requests.cpu¶
Type: string
"500m"
upstream.persistence.size¶
Type: string
"20Gi"
upstream.sonarProperties.”sonar.forceAuthentication”¶
Type: bool
true
upstream.sonarProperties.”sonar.ce.javaAdditionalOpts”¶
Type: string
"-Dcom.redhat.fips=false"
upstream.sonarProperties.”sonar.search.javaAdditionalOpts”¶
Type: string
"-Dcom.redhat.fips=false"
upstream.sonarProperties.”sonar.web.javaAdditionalOpts”¶
Type: string
"-Dcom.redhat.fips=false"
upstream.sonarProperties.”sonar.telemetry.enable”¶
Type: bool
false
upstream.tests.image¶
Type: string
"bitnami/minideb-extras"
upstream.tests.enabled¶
Type: bool
false
upstream.tests.resources¶
Type: object
{}
upstream.serviceAccount.create¶
Type: bool
true
curlContainerImage¶
Type: string
"registry1.dso.mil/ironbank/redhat/ubi/ubi9:9.8"
domain¶
Type: string
"dev.bigbang.mil"
istio.enabled¶
Type: bool
false
istio.ambient.enabled¶
Type: bool
false
istio.sidecar.enabled¶
Type: bool
false
istio.sidecar.outboundTrafficPolicyMode¶
Type: string
"REGISTRY_ONLY"
istio.serviceEntries.custom¶
Type: list
[]
istio.authorizationPolicies.enabled¶
Type: bool
false
istio.authorizationPolicies.custom¶
Type: list
[]
istio.mtls.mode¶
Type: string
"STRICT"
routes.inbound.sonarqube.enabled¶
Type: bool
true
routes.inbound.sonarqube.gateways[0]¶
Type: string
"istio-gateway/public-ingressgateway"
routes.inbound.sonarqube.hosts[0]¶
Type: string
"sonarqube.dev.bigbang.mil"
routes.inbound.sonarqube.service¶
Type: string
"sonarqube-sonarqube.sonarqube.svc.cluster.local"
routes.inbound.sonarqube.port¶
Type: int
9000
routes.inbound.sonarqube.selector.app¶
Type: string
"sonarqube"
OpenShift.enabled¶
Type: bool
false
networkPolicies.enabled¶
Type: bool
false
networkPolicies.ingress.to.sonarqube:[8000,8001,9000].podSelector.matchLabels.app¶
Type: string
"sonarqube"
networkPolicies.ingress.to.sonarqube:[8000,8001,9000].from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
false
networkPolicies.egress.definitions.sonarsource-marketplace.to[0].ipBlock.cidr¶
Type: string
"0.0.0.0/0"
networkPolicies.egress.definitions.sonarsource-marketplace.to[0].ipBlock.except[0]¶
Type: string
"169.254.169.254/32"
networkPolicies.egress.definitions.sonarsource-marketplace.ports[0].port¶
Type: int
443
networkPolicies.egress.definitions.sonarsource-marketplace.ports[0].protocol¶
Type: string
"TCP"
networkPolicies.egress.definitions.code-repository.to[0].ipBlock.cidr¶
Type: string
"0.0.0.0/0"
networkPolicies.egress.definitions.code-repository.to[0].ipBlock.except[0]¶
Type: string
"169.254.169.254/32"
networkPolicies.egress.definitions.code-repository.ports[0].port¶
Type: int
443
networkPolicies.egress.definitions.code-repository.ports[0].protocol¶
Type: string
"TCP"
networkPolicies.egress.from.sonarqube.podSelector.matchLabels.app¶
Type: string
"sonarqube"
networkPolicies.egress.from.sonarqube.to.k8s.tempo/tempo:9411¶
Type: bool
false
networkPolicies.egress.from.sonarqube.to.definition.sonarsource-marketplace¶
Type: bool
false
networkPolicies.egress.from.sonarqube.to.definition.code-repository¶
Type: bool
true
networkPolicies.egressHttps¶
Type: object
enabled: true
Description: This section will be deprecated in the next major release in favor of the bb-common definitions
networkPolicies.additionalPolicies¶
Type: list
[]
bbtests.enabled¶
Type: bool
false
bbtests.cypress.artifacts¶
Type: bool
true
bbtests.cypress.envs.cypress_url¶
Type: string
"http://sonarqube-sonarqube:9000"
bbtests.cypress.envs.cypress_url_setup¶
Type: string
"http://sonarqube-sonarqube:9000/setup"
bbtests.cypress.envs.cypress_user¶
Type: string
"admin"
bbtests.cypress.envs.cypress_password¶
Type: string
"admin"
bbtests.cypress.envs.cypress_new_password¶
Type: string
"New_admin_password!2"
bbtests.cypress.envs.cypress_timeout¶
Type: string
"10000"