helm-charts/charts/semaphoreui/values.yaml

image:
  repository: semaphoreui/semaphore

config: {}
#  bolt:
#    host: # Path to the BoltDB database file
#  mysql:
#    host: # MySQL database host
#    name: # MySQL database (schema) name
#    user: # MySQL user name
#    pass: # MySQL user's password
#  postgres:
#    host: # Postgres database host
#    name: # Postgres database (schema) name
#    user: # Postgres user name
#    pass: # Postgres user's password
#  dialect: bolt # Can be mysql, postgres or bolt
#  port: 3000 # TCP port on which the web interface will be available. Default: 3000
#  interface: # Useful if your server has multiple network interfaces
#  tmp_path: /tmp/semaphore # Path to directory where cloned repositories and generated files are stored. Default: /tmp/semaphore
#  access_key_encryption: # Secret key used for encrypting access keys in database. Read more in [Database encryption reference](https://docs.semaphoreui.com/administration-guide/security#database-encryption).
#  web_host: # Can be useful if you want to use Semaphore by the subpath, for example: http://yourdomain.com/semaphore. Do not add a trailing /.
#  email_sender:
#  email_host:
#  email_port:
#  email_secure:
#  email_username:
#  email_password:
#  email_alert:
#  telegram_alert:
#  slack_alert:  # Set to True to enable pushing alerts to slack. It should be used in combination with slack_url
#  slack_url: # The slack webhook url. Semaphore will used it to POST Slack formatted json alerts to the provided url
#  rocketchat_alert: # Set to True to enable pushing alerts to Rocket.Chat. It should be used in combination with rocketchat_url. Available since v2.9.56.
#  rocketchat_url: # The rocketchat webhook url. Semaphore will used it to POST Rocket.Chat formatted json alerts to the provided url. Available since v2.9.56.
#  ldap_enable:
#  ldap_needtls:
#  ldap_binddn:
#  ldap_bindpassword:
#  ldap_server:
#  ldap_searchdn:
#  concurrency_mode: # Can be unset/empty or project or node. When set to project, tasks will run in parallel if and only if they do not share the same project id, with no regard to the nodes/hosts that are affected. When set to node, a task will run in parallel if and only if the hosts affected by tasks already running does not intersect with the hosts that would be affected by the task in question. If concurrency_mode is not specified or left empty, no task will start before the previous one has finished.
#max_parallel_tasks:
#oidc_providers: # OpenID provider settings. You can provide multiple OpenID providers. More about OpenID configuration read in [OpenID](https://docs.semaphoreui.com/administration-guide/openid/).
#password_login_disable: false # Disable login with using password. Only LDAP and OpenID.
#non_admin_can_create_project: false # Allow non-admin users to create new projects.

service:
  http:
    enabled: true
    ports:
      http:
        port: 80
        targetPort: 3000

ingress:
  enabled: false
  service: http # what service should the ingress target
  servicePort: 80
  className: "nginx"
  hosts:
    - host: example.local
      paths:
        - path: /
          pathType: Prefix
  annotations:
    {}

packages: # extra packages that needs to be installed
requirements: # Requirements files serve as a list of items to be installed by pip, when using [pip install](https://pip.pypa.io/en/stable/cli/pip_install/#pip-install)

livenessProbe:
  httpGet:
    path: /
    port: http
readinessProbe:
  httpGet:
    path: /
    port: http

controller:
  command: ["/bin/sh"] # Need to override server-wrapper due to stupid DB ping in container
  args:
    - /var/local/bin/entrypoint.sh

volumes:
  - name: config
    secret:
      secretName: semaphoreui-config
      optional: false
  - name: entrypoint
    configMap:
      name: semaphoreui-entrypoint
      items:
        - key: entrypoint.sh
          path: entrypoint.sh

volumeMounts:
  - name: config
    mountPath: /var/semaphoreui-secret
    readOnly: true
  - name: entrypoint
    mountPath: /var/local/bin/entrypoint.sh
    subPath: entrypoint.sh