From b2299ce424427cf0ed1c39696906989e596d7f9b Mon Sep 17 00:00:00 2001 From: Bohdan Pysarenko Date: Fri, 21 Aug 2026 22:58:50 +0300 Subject: [PATCH 1/7] update cfapi --- charts/codefresh/Chart.yaml | 36 ++++++++++++++++++------------------ 1 file changed, 18 insertions(+), 18 deletions(-) diff --git a/charts/codefresh/Chart.yaml b/charts/codefresh/Chart.yaml index 0fe4f2452f..a3844920a0 100644 --- a/charts/codefresh/Chart.yaml +++ b/charts/codefresh/Chart.yaml @@ -106,92 +106,92 @@ dependencies: condition: gitops-dashboard-manager.enabled - name: cfapi alias: cfapi - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi.enabled - name: cfapi alias: cfapi-auth - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-auth.enabled - name: cfapi alias: cfapi-internal - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-internal.enabled - name: cfapi alias: cfapi-ws - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-ws.enabled - name: cfapi alias: cfapi-admin - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-admin.enabled - name: cfapi alias: cfapi-endpoints - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-endpoints.enabled - name: cfapi alias: cfapi-terminators - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-terminators.enabled - name: cfapi alias: cfapi-sso-group-synchronizer - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-sso-group-synchronizer.enabled - name: cfapi alias: cfapi-buildmanager - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-buildmanager.enabled - name: cfapi alias: cfapi-cacheevictmanager - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-cacheevictmanager.enabled - name: cfapi alias: cfapi-eventsmanagersubscriptions - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-eventsmanagersubscriptions.enabled - name: cfapi alias: cfapi-kubernetesresourcemonitor - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-kubernetesresourcemonitor.enabled - name: cfapi alias: cfapi-environments - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-environments.enabled - name: cfapi alias: cfapi-gitops-resource-receiver - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-gitops-resource-receiver.enabled - name: cfapi alias: cfapi-downloadlogmanager - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-downloadlogmanager.enabled - name: cfapi alias: cfapi-teams - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-teams.enabled - name: cfapi alias: cfapi-kubernetes-endpoints - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-kubernetes-endpoints.enabled - name: cfapi alias: cfapi-test-reporting - version: 21.279.11-onprem-7cf1b9a + version: 21.279.12-onprem-7418a8b repository: oci://quay.io/codefresh/charts condition: cfapi-test-reporting.enabled - name: cfui From 7be29bd5b4c6f6c0a316ed72c4d66ff5d84c8297 Mon Sep 17 00:00:00 2001 From: Mikhail Klimko Date: Mon, 24 Aug 2026 12:03:34 +0400 Subject: [PATCH 2/7] add codefresh-infra --- charts/codefresh-infra/.sops.yaml | 2 + charts/codefresh-infra/Chart.yaml | 17 +++++ charts/codefresh-infra/values-secrets.yaml | 50 +++++++++++++++ charts/codefresh-infra/values-tls.yaml | 73 ++++++++++++++++++++++ charts/codefresh-infra/values.yaml | 29 +++++++++ 5 files changed, 171 insertions(+) create mode 100644 charts/codefresh-infra/.sops.yaml create mode 100644 charts/codefresh-infra/Chart.yaml create mode 100644 charts/codefresh-infra/values-secrets.yaml create mode 100644 charts/codefresh-infra/values-tls.yaml create mode 100644 charts/codefresh-infra/values.yaml diff --git a/charts/codefresh-infra/.sops.yaml b/charts/codefresh-infra/.sops.yaml new file mode 100644 index 0000000000..673a4bcdcb --- /dev/null +++ b/charts/codefresh-infra/.sops.yaml @@ -0,0 +1,2 @@ +creation_rules: + - kms: arn:aws:kms:us-east-1:734022025880:alias/sops/shared-services diff --git a/charts/codefresh-infra/Chart.yaml b/charts/codefresh-infra/Chart.yaml new file mode 100644 index 0000000000..6beb417b47 --- /dev/null +++ b/charts/codefresh-infra/Chart.yaml @@ -0,0 +1,17 @@ +apiVersion: v2 +name: codefresh-infra +version: 0.1.0 +description: Infra charts for Codefresh Onprem (mongodb/postgresql/redis/rabbitmq) +dependencies: + - name: mongodb + version: 0.1.1 + repository: oci://quay.io/codefresh/charts/dev + - name: postgresql + version: 0.1.1 + repository: oci://quay.io/codefresh/charts/dev + - name: redis + version: 0.1.1 + repository: oci://quay.io/codefresh/charts/dev + - name: rabbitmq + version: 0.1.1 + repository: oci://quay.io/codefresh/charts/dev diff --git a/charts/codefresh-infra/values-secrets.yaml b/charts/codefresh-infra/values-secrets.yaml new file mode 100644 index 0000000000..8dab857f75 --- /dev/null +++ b/charts/codefresh-infra/values-secrets.yaml @@ -0,0 +1,50 @@ +mongodb: + secrets: + ca-cert: + enabled: ENC[AES256_GCM,data:GtPuuw==,iv:9sFcsrDOtvOOCHn7PEWRyX924o+c+R9RrtnXzqUhP/0=,tag:I82KloKf+RCRZmuVSHoR8Q==,type:bool] + nameOverride: ENC[AES256_GCM,data:cGf7cLTJAcaVP9gS3mWG,iv:ljVk4HdTlEId1R7IqMa4jue2zeEZ+Myi/uNSZHZNK6U=,tag:vovty2oIzmGbSfSZ5Pt/Ew==,type:str] + envFrom: ENC[AES256_GCM,data:56IQL6Y=,iv:2sq7PaVZCWX2q9QVuG6hhAhYuVESljOrEPtUtiSscRk=,tag:R1Qw8ShIs8alEQkQGJ19AQ==,type:bool] + data: + ca.crt: ENC[AES256_GCM,data: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,iv:EKEjcBmXgsescKx30+Eezno7HGWYnnLIupumVwq6NGI=,tag:7/JIi47m4Vg5q/8VT78Zug==,type:str] + server-cert: + enabled: ENC[AES256_GCM,data:CSqnyA==,iv:XcbRbptCYeMMNlApnMcR3XH/Q7MLwPspMxPfS4Xfd4g=,tag:wHHuwvz34vXu8GyHnMIXlg==,type:bool] + nameOverride: ENC[AES256_GCM,data:nQ7cvj9/qVA99EVroRx6lIFU2A==,iv:i6mBrxspJGuBoTai7dmHo2XvuXZj6gbk3weHRNFjQFE=,tag:/ruem/bjB4uiSBnXqn2gUg==,type:str] + envFrom: ENC[AES256_GCM,data:p8nXx0Q=,iv:ZoYljtmFUPC6f1AvVzHLCe2QWa+Zzk23OFSxAbSpuns=,tag:nbVodLGj0wUbwZlnEQh4Cg==,type:bool] + data: + server.pem: ENC[AES256_GCM,data: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,iv:7PIfYSJheDsQNSMWvMGsFYw4QjmyDgHmjjeVZoZyA+w=,tag:/mDyfVzgIwIBTnMSebVwrw==,type:str] + client-cert: + enabled: ENC[AES256_GCM,data:Qo+Wwg==,iv:jvkRzjgY4lGkQNbE63VDlrXbKaSYWL1500fEehA4VUM=,tag:at/OeoVQ1hSpBIN5UWLc6w==,type:bool] + nameOverride: ENC[AES256_GCM,data:cgCGBwfLbwVuhS81C10QtPdsGg==,iv:xNDkOwkmopLlNKloxrHLJykEiGXMTqn+Ef3CP+8sC8o=,tag:r0NKAtBKLOi8P3KB08bzsA==,type:str] + envFrom: ENC[AES256_GCM,data:2qWZVzQ=,iv:8aj+DhH0qNKsxrtW0DhiiKMLKqSmIVftxA/IhUM0wgI=,tag:WXB/B2JPmJBvXiTEma/4Fg==,type:bool] + data: + client.pem: ENC[AES256_GCM,data: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,iv:Jzmfg0bvRP6nPvfwWZ8j1yX/bW5adZ80BrspbuB8CyA=,tag:l4vQzHibdYmBGCzb9mcUvw==,type:str] +redis: + secrets: + ca-cert: + enabled: ENC[AES256_GCM,data:sXupWA==,iv:HPVSA5DmHsSpRMWWQwwSrOC/9tKj+k2Uzboo4jxfnjc=,tag:DbQULzwA/BrKVHA2ghWf/A==,type:bool] + nameOverride: ENC[AES256_GCM,data:8Th3sAblH1pEbs3v5w==,iv:0ttAU+Jm/URT3hJY/wgREWbtc/7BgVra+7s6NO15YfM=,tag:aJMY//yV/OrDhzoQR0blDg==,type:str] + envFrom: ENC[AES256_GCM,data:8FWCPoY=,iv:nV3Y8Av4F6woPxakEP4LfvHokpgPhNHDfp6D+4K3zyE=,tag:F7R1Thc240ZjcZgleHxKVA==,type:bool] + data: + ca.crt: ENC[AES256_GCM,data:KRjx2KaQXFf4auCkMMmrOvZEEdmFp40PkmhGH1+Dz7wuPKu+L0aKYoGMbabEK0LEi9LdZmU4thM9zN6D2ouvZTbvlSixOc7eN9LQhoUuk0dYxg4xFHxeV2cFEsKNsqOORniAQWN0Tg4ayaJ9NIFAvd+dXr9p0xtLN4J1rDp7V3wOnU+58tBTq9rKenLMCNJhwfqD/CLUGFMSrztwXlEvBit7NGEwHtzYXiWyec5N3LOdhAQue029vWtgwUs6+HFC93J6hDXmq+xddE4sQTN+9hZyQtT09/7rEBgmCeBiA13BCOuT5cY5YuwgRHfmqRaf/YffIUHPnfECaCUghB1RM0vrTHYknCDYAgLv+WbMQd5mkK8/7adxO4zInsCO48OS9xWeTL18KICv7UCrIoUDwlwkGx5/Ni6WqB2Srx2xMDE+aEGqbZN2737VOx+w+d59AqUF2pQmObDj7oA6QhS0rHxV8+xGOAKQ0eVZGRNOaq+rCOqK7I7W91wv9TVkR+ol681peBnlGpHIKAwnjXX0azZ/bUGevKQ5Qme4Mwbw8OeIqsiVoGS0JMr5ZNt4zInSwN8G6aIQWZ1fO+vAo51C0kn2l+mL+Vn2egTdY5YN8S4TMiSHMuvrCjc7sRxJCn9DYAIHrot8nD491mIUKARq9uFqOctMUwo3J3za/i1YaA92e1lypQaPhv/nGxmAe5Wc4YnHDiHz/fmlLNIA0HkQfRuDsgXmp75lf3KX40hEs7RHYUj983Ls3vTpKBmKUVEOWxzU/0/j8t78NJjFJx5Hu1DxvoKITZbcQaffBd8ZEP/NUtoLeIcFv6LGeQzSYyh+FQxJcKNLE7lg09t+BXnNL62cfU7FJ8CkjO/h6xptT5NxqVKqMZBdRycCWAu8vptlIqrkQGE4S4xynjQMVrjC3KuaYqOA38sZGFL8IhRJtKmin0BlgYR3Gx60syP6ck5KCQlRTO+GlEHLe9Ay2yR4mO9f46tRgLDQZ2FcgMG9CedjTlts+bt7QJ+8VEl3tFdZZDbXMenHAWoGN9Mh+9eO5ICli73Fb5fkXAcFs7BSo4lI66k9AIeWf9oeYtXr7v4vcyXeL/pxESOnZCU9t0fzKHjyAqfi+wIqcGkiEccYEI4jCJuMYc6d7dzIH7vD+nwPqJcH/QYp88k2yNY4JOq7Jn2zTJe/Me57GoqAVFDCgcaKfs9j9nhKrY3R0plNaFqYprMfKxzuOxiLhcXDi0ufoSBPPUDMr9p7pk2E/eBdOFbAYkhr9x7cE8wgwJ5u4aoFakFLGUITFWCNvKjFub88D7OCNHLH0fDKZ9vxjX8UXZc/zD8MNSmkLEASBLGij98OLMAyYflb1uzaVVK7Zjou/xqHNjY13/LeCGfvmU0EwuO4vZWVQKcdsgUEthmoNtJuJzmNFKlakbQ+AJ8ZHkjb1s1gjaBDp6o4fVJYTfYtpD5mTxRXzUr2O10eJsW3u9bzh/01n9GggQT3Q/RO+g+w/9RWtEtcpYXT9B3wI9b+IU7aLiL3E/Xzq7uQQk9VERsHPKOle/EmXO154xdpaVhC52QfOLzvfPEU9trhLYfKkvWbVyM+H5esRleE3F2tC7XLL0Ptkgin/UEfu23/Ipb5wM7viSvju4JRqXCNtGknTpJKaDg0giRgIzCiYKQpmL5VasV8BDxHHJdfBIK0wzyWyyYTLAIW89/g9tG146ZLx8g0Ni9WHOUK4Fx6OLlbR25Gnz0A/RD/Qj8MxBAXDhN0vW21r59s88XzzAbXI+bEN9vabaLyHxia0zuUy0ITilm1MQOX5mx4pxGHTdnmioHSp0K8swOQYnFDwlyiIzsaFOY+hflFuEPl0Mg1QahOjGnPLKuEZ5sNBhoRxPFqVAe0FCbHroep2FhjAEU6YgQ2yWepaYBLF4Qtl8DmtfD7VKCtJbhEVNa92VZoVb5+091lXuyM92/bv+5L7b64vsJLB5lsXIQpI3ybCLyoKHNJxEW+M77i7hRztYGjxtHU8jkZY5RYw65J6HJP/X88FfJ/B6E9npoBM5GJUp6V1u9h79hzvz/pGbKVj/ZHaG/+RoOK2MwY7sB7bYyG7MR/SdvhhlCQ7JC1N5QqSZR3rQbugvyJQ9YuHMpEzhnfBk7xvbnqd5CmruY7P3L5JA3R/C6eSYuJ2QjiLv9vTbCCuUDNVJ1BrPqlAfvioZfWNXkpHD6ios33tQOs9lnZqivdJQHEzJP8Snfb9rbYv9tbHCIM/QrtzFLe3ePYNsFeGf8DkSFFK6hz4T4Gu+qDSHEO0aoJ+J5mv8506/mTiKbcCyuO/C+qXP4B+fZJaKCbRGXY6xdY84/vzuwaFeJTeFc8KZPfzXFmE4FC3m5To0P29T0NeMKcGg4IUhIhLsJMTwBs0sIpzZZSzdEqcHL6ERfzR7xn0dtnYf/8Yo7D0jg3XFbzK560jfmx6eHpyUmOOG+cYC111poPGyoBaqi88/gssC3jvkEBtFQ1a3i+Sl+jkgNiFCTpalet247HVXK+Q9NcH1OZgWyw3rI7efr6h5d9I2RdKJRqG7YsJzm136XXiOvi5YRtOcLbGH2Gw117ICUhJkvd1E3tpCtl0z2sNW/a2dOh8Lbpe692ceilop0I7zCm6dTzLw1+2Pz7oSUQwYx2n2CBc8Zj8Uex1oJUmO3iSkfw5WynVZTKBUTGYNAx67ipOgorzDIUNc6gISbM7brVvLFlprpAp5ILA4eofzAsAiU9nBt43sISEqCGxg0HkntEQpa04OwYP0gIMQqOTER12WShWn9p0Jbqbo+8xnkha9V0fslcQBKvVFAMO9VgonRpYv4VKru/T3Ttf2zVtpWs38MCXcJFN+OfOuJaMa4gcSQPgey0BhiVy8La6u/BuGdp9QcCd6FkTDf+mXHQbi7tfxLvKOHfMvOYiFXvhR2TpN+XG3hjgoLE2XQGBGAAlBwbba5SMfMrgM6V/hIWmddrQ4WT/DYiHN1JRgObYgQXz1xZgqC07WyeY5jzhy7+Sx5Xrenia7dbLajz7o+yvKdSdU0ijbuHbri4IHrblpQSvIl44n72egci/EDpqNlU0GfL1lhEqGo5YnREtxoEDemSzu6LxaXSsfM3aA6zkZVUjFzO80VqolcDWr1E6BOxRIj/WXQur0fR+j9A5aVW+K73i7NBCo9tsI6bcOQ+OWrN4QGNX2B13I/G7ggJ/CDgvrKPsHPm8WL/NRSWMLQ=,iv:WygmMZVW2lydrEuFo0q+YmfqAk4vrf05s18bg9ooZrI=,tag:UAp4PKaZKX+TDLqTnqJU+g==,type:str] + server-cert: + enabled: ENC[AES256_GCM,data:+Ao3Vg==,iv:XZgTVuIPVPrXZYtYTxv9/eZhjpEGXQT6CSS7rlz5GEM=,tag:atsbQWw2eiuu695O85n5dw==,type:bool] + nameOverride: ENC[AES256_GCM,data:8wEqaFeVNM/S2fd4ITs9O6Y=,iv:1SLTtMjD2g24Riut5BP90FXV5NEPHjcTqIrdFND0qN8=,tag:G/1KJX743t+uhZ30f6/G1w==,type:str] + envFrom: ENC[AES256_GCM,data:gXEXuLs=,iv:/ciyc6fhPvPIkbJc7DsMa4pEI3hOsh4bTMukDBeq+Dw=,tag:sNkod01t7RGvP8/s/eiaNA==,type:bool] + data: + tls.crt: ENC[AES256_GCM,data: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,iv:ZAwrXE5FtPbLLiteKmI+jBYCYVVKR4qjwkVC6WapB+Y=,tag:zxpdHnP1+4INu6IJG5iZiw==,type:str] + tls.key: ENC[AES256_GCM,data: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,iv:bbmEp6aU4Kmb4udFFfjV0PfOt9XiYK3Hxg4fpTeteHI=,tag:IHhhqslaRBBWWxqScSgw1A==,type:str] +sops: + kms: + - arn: arn:aws:kms:us-east-1:734022025880:alias/sops/shared-services + created_at: "2026-03-16T10:39:50Z" + enc: AQICAHgvxD6Qr6APS0P4C8X6OCmt8obIWzWJAI11gUo46nYf0QHTtoeQYJ61Ub23D6BG28S8AAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMMWb1HNEhi8kn8rI2AgEQgDuKp8IUJDDxXkCOlLMm/SB9R6+buRLAmY2LrJMjl/5iVF2XppebMPw0oa4D/2jHCHn8duoS47sv0U/6vQ== + aws_profile: "" + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2026-03-16T10:41:36Z" + mac: ENC[AES256_GCM,data:gUR1kTPpJh30o1a8fe00mJ80pJHJElYezMvgIFfg7pdyMWPPavtD9NsaUm5BKDTL+G5KbsENUPFNTG7yF3PXr+Y1DNIKIs0SostXNDgR4BMp0qfHIqT4aiW09WtKLVxhR17T/Ew3MeUi2mTDraR52A8+fZZuhJA8OA9pCzJ7sF8=,iv:y3goJsjSfbwN5K7gCBosPwlgIIDylOC6+RXb2nFF44E=,tag:HjmzxamstoG7vrgNpDZpAQ==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.9.1 diff --git a/charts/codefresh-infra/values-tls.yaml b/charts/codefresh-infra/values-tls.yaml new file mode 100644 index 0000000000..92a1c6030a --- /dev/null +++ b/charts/codefresh-infra/values-tls.yaml @@ -0,0 +1,73 @@ +mongodb: + config: + net: + tls: + mode: allowTLS + certificateKeyFile: /etc/ssl/server.pem + CAFile: /etc/ssl/ca.crt + + container: + volumeMounts: + ca-cert: + path: + - mountPath: /etc/ssl/ca.crt + subPath: ca.crt + server-cert: + path: + - mountPath: /etc/ssl/server.pem + subPath: server.pem + + volumes: + ca-cert: + enabled: true + optional: true + type: secret + nameOverride: mongodb-ca-cert + server-cert: + enabled: true + optional: true + type: secret + nameOverride: mongodb-server-cert + +redis: + container: + volumeMounts: + ca-cert: + path: + - mountPath: /etc/redis/certs/ca.crt + subPath: ca.crt + server-cert: + path: + - mountPath: /etc/redis/certs/tls.crt + subPath: tls.crt + - mountPath: /etc/redis/certs/tls.key + subPath: tls.key + + volumes: + ca-cert: + enabled: true + optional: true + type: secret + nameOverride: redis-ca-cert + server-cert: + enabled: true + optional: true + type: secret + nameOverride: redis-server-cert + + service: + main: + enabled: true + primary: true + type: ClusterIP + ports: + redis-tls: + port: 6380 + protocol: TCP + + config: + tls-port: 6380 + tls-cert-file: /etc/redis/certs/tls.crt + tls-key-file: /etc/redis/certs/tls.key + tls-ca-cert-file: /etc/redis/certs/ca.crt + tls-auth-clients: "yes" diff --git a/charts/codefresh-infra/values.yaml b/charts/codefresh-infra/values.yaml new file mode 100644 index 0000000000..761a6f81b2 --- /dev/null +++ b/charts/codefresh-infra/values.yaml @@ -0,0 +1,29 @@ +global: + nodeSelector: + node-type: fast-image-pull + + tolerations: + - key: codefresh.io + operator: Equal + value: fast-image-pull + effect: NoSchedule + +mongodb: + fullnameOverride: my-mongodb + auth: + rootPassword: XT9nmM8dZD + +postgresql: + fullnameOverride: my-postgresql + auth: + password: eC9arYka4ZbH + +redis: + fullnameOverride: my-redis + config: + requirepass: hoC9szf7NtrU + +rabbitmq: + fullnameOverride: my-rabbitmq + auth: + password: cVz9ZdJKYm7u From bc7dbc99578a8dad7996cbdaa70526c762a6029f Mon Sep 17 00:00:00 2001 From: Mikhail Klimko Date: Mon, 24 Aug 2026 12:04:15 +0400 Subject: [PATCH 3/7] remove labeler --- .github/pr-branch-labeler.yml | 2 -- .github/workflows/pr-branch-labeler.yml | 14 -------------- 2 files changed, 16 deletions(-) delete mode 100644 .github/pr-branch-labeler.yml delete mode 100644 .github/workflows/pr-branch-labeler.yml diff --git a/.github/pr-branch-labeler.yml b/.github/pr-branch-labeler.yml deleted file mode 100644 index 996b115de2..0000000000 --- a/.github/pr-branch-labeler.yml +++ /dev/null @@ -1,2 +0,0 @@ -onprem: - base: "onprem*" diff --git a/.github/workflows/pr-branch-labeler.yml b/.github/workflows/pr-branch-labeler.yml deleted file mode 100644 index 21a77cea12..0000000000 --- a/.github/workflows/pr-branch-labeler.yml +++ /dev/null @@ -1,14 +0,0 @@ -on: - pull_request: - types: [opened] -name: Add base branch label -jobs: - base-branch: - runs-on: ubuntu-latest - steps: - - name: Add base branch label - uses: ffittschen/pr-branch-labeler@v1 - with: - repo-token: ${{ secrets.GITHUB_TOKEN }} - - From e17acb0e7ec08c8e6560bccb30ade047d8edacd4 Mon Sep 17 00:00:00 2001 From: Bohdan Pysarenko Date: Mon, 24 Aug 2026 11:12:40 +0300 Subject: [PATCH 4/7] bump version --- charts/codefresh/Chart.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/charts/codefresh/Chart.yaml b/charts/codefresh/Chart.yaml index a3844920a0..fcdae814b6 100644 --- a/charts/codefresh/Chart.yaml +++ b/charts/codefresh/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 description: Helm Chart for Codefresh On-Prem name: codefresh -version: 2.8.18 +version: 2.8.19 keywords: - codefresh home: https://codefresh.io/ @@ -19,7 +19,7 @@ annotations: # supported kinds are added, changed, deprecated, removed, fixed and security. artifacthub.io/changes: |- - kind: fixed - description: "Fixed an issue with incorrect Github Enterprise branch list endpoint" + description: "Fixed an issue with broken proxy over Github Octokit" dependencies: - name: cf-common repository: oci://quay.io/codefresh/charts From 15259a8639205e87a7e0d3164bf2730217c82a82 Mon Sep 17 00:00:00 2001 From: Mikhail Klimko Date: Mon, 24 Aug 2026 12:17:22 +0400 Subject: [PATCH 5/7] add ci values --- .../.ci/values/values-cfapi-roles.yaml | 60 ++++++++++ .../codefresh/.ci/values/values-defaults.yaml | 103 ++++++++++++++++++ .../.ci/values/values-external-secrets.yaml | 102 +++++++++++++++++ .../.ci/values/values-install-only.yaml | 30 +++-- .../codefresh/.ci/values/values-registry.yaml | 4 + charts/codefresh/.ci/values/values-tls.yaml | 62 +++++++++++ 6 files changed, 353 insertions(+), 8 deletions(-) create mode 100644 charts/codefresh/.ci/values/values-cfapi-roles.yaml create mode 100644 charts/codefresh/.ci/values/values-defaults.yaml create mode 100644 charts/codefresh/.ci/values/values-external-secrets.yaml create mode 100644 charts/codefresh/.ci/values/values-registry.yaml create mode 100644 charts/codefresh/.ci/values/values-tls.yaml diff --git a/charts/codefresh/.ci/values/values-cfapi-roles.yaml b/charts/codefresh/.ci/values/values-cfapi-roles.yaml new file mode 100644 index 0000000000..44fd7eb849 --- /dev/null +++ b/charts/codefresh/.ci/values/values-cfapi-roles.yaml @@ -0,0 +1,60 @@ +global: + cfapiService: cfapi-internal + cfapiEndpointsService: cfapi-endpoints + +cfapi: &cf-api + enabled: false + rbac: + namespaced: false + +cfapi-auth: + <<: *cf-api + enabled: true +cfapi-internal: + <<: *cf-api + enabled: true +cfapi-ws: + <<: *cf-api + enabled: true +cfapi-admin: + <<: *cf-api + enabled: true +cfapi-endpoints: + <<: *cf-api + enabled: true +cfapi-terminators: + <<: *cf-api + enabled: true +cfapi-sso-group-synchronizer: + <<: *cf-api + enabled: true +cfapi-buildmanager: + <<: *cf-api + enabled: true +cfapi-cacheevictmanager: + <<: *cf-api + enabled: true +cfapi-eventsmanagersubscriptions: + <<: *cf-api + enabled: true +cfapi-kubernetesresourcemonitor: + <<: *cf-api + enabled: true +cfapi-environments: + <<: *cf-api + enabled: true +cfapi-gitops-resource-receiver: + <<: *cf-api + enabled: true +cfapi-downloadlogmanager: + <<: *cf-api + enabled: true +cfapi-teams: + <<: *cf-api + enabled: true +cfapi-kubernetes-endpoints: + <<: *cf-api + enabled: true +cfapi-test-reporting: + <<: *cf-api + enabled: true diff --git a/charts/codefresh/.ci/values/values-defaults.yaml b/charts/codefresh/.ci/values/values-defaults.yaml new file mode 100644 index 0000000000..d2666dac14 --- /dev/null +++ b/charts/codefresh/.ci/values/values-defaults.yaml @@ -0,0 +1,103 @@ +global: + appUrl: "" # placeholder for ${ONPREM_INGRESS_HOSTNAME} set in CI pipeline + imagePullSecrets: + - codefresh-registry + - dockerhub-creds + + nodeSelector: + node-type: fast-image-pull + + tolerations: + - key: codefresh.io + operator: Equal + value: fast-image-pull + effect: NoSchedule + +ingress: + enabled: true + ingressClassName: haproxy-ingress + tls: + enabled: false + +ingress-nginx: + enabled: false + +hooks: + mongodb: + nodeSelector: + kubernetes.io/arch: amd64 + rabbitmq: + nodeSelector: + kubernetes.io/arch: amd64 + +mongodb: + nodeSelector: + node-type: fast-image-pull + kubernetes.io/arch: amd64 + + tolerations: + - key: codefresh.io + operator: Equal + value: fast-image-pull + effect: NoSchedule + +# -- Binami subcharts +postgresql: + primary: + nodeSelector: + node-type: fast-image-pull + + tolerations: + - key: codefresh.io + operator: Equal + value: fast-image-pull + effect: NoSchedule + +rabbitmq: + nodeSelector: + node-type: fast-image-pull + + tolerations: + - key: codefresh.io + operator: Equal + value: fast-image-pull + effect: NoSchedule + +redis: + master: + nodeSelector: + node-type: fast-image-pull + + tolerations: + - key: codefresh.io + operator: Equal + value: fast-image-pull + effect: NoSchedule + +nats: + image: + repository: bitnamilegacy/nats + nodeSelector: + node-type: fast-image-pull + + tolerations: + - key: codefresh.io + operator: Equal + value: fast-image-pull + effect: NoSchedule + +consul: + image: + repository: bitnamilegacy/consul + nodeSelector: + node-type: fast-image-pull + + tolerations: + - key: codefresh.io + operator: Equal + value: fast-image-pull + effect: NoSchedule + +cf-platform-analytics-platform: + redis: + enabled: false diff --git a/charts/codefresh/.ci/values/values-external-secrets.yaml b/charts/codefresh/.ci/values/values-external-secrets.yaml new file mode 100644 index 0000000000..a2d8133f2e --- /dev/null +++ b/charts/codefresh/.ci/values/values-external-secrets.yaml @@ -0,0 +1,102 @@ +# values to emulate external secrets +secrets: + ext-mongo: + enabled: true + stringData: + mongodb-host: my-mongodb:27017 + mongodb-password: mTiXcU2wafr9 + mongodb-user: cfuser + mongodb-root-user: root + mongodb-root-password: XT9nmM8dZD + ext-postgres: + enabled: true + stringData: + postgres-hostname: my-postgresql + postgres-password: eC9arYka4ZbH + postgres-user: postgres + ext-redis: + enabled: true + stringData: + redis-url: my-redis + redis-password: hoC9szf7NtrU + ext-rabbitmq: + enabled: true + stringData: + rabbitmq-hostname: my-rabbitmq:5672 + rabbitmq-password: cVz9ZdJKYm7u + rabbitmq-username: user + ext-firebase: + enabled: true + stringData: + firebase-url: "" # placeholder for ${FIRBASE_URL} set in CI pipeline + firebase-secret: "" # placeholder for ${FIREBASE_SECRET} set in CI pipeline + e2e-mongo-uri: + enabled: true + stringData: + mongo-uri: mongodb://cfuser:mTiXcU2wafr9@my-mongodb:27017/codefresh + +seed: + mongoSeedJob: + mongodbRootUserSecretKeyRef: + name: cf-codefresh-ext-mongo + key: mongodb-root-user + mongodbRootPasswordSecretKeyRef: + name: cf-codefresh-ext-mongo + key: mongodb-root-password + + postgresSeedJob: + postgresUserSecretKeyRef: + name: cf-codefresh-ext-postgres + key: postgres-user + postgresPasswordSecretKeyRef: + name: cf-codefresh-ext-postgres + key: postgres-password + +global: + firebaseUrlSecretKeyRef: + name: cf-codefresh-ext-firebase + key: firebase-url + firebaseSecretSecretKeyRef: + name: cf-codefresh-ext-firebase + key: firebase-secret + + mongodbUserSecretKeyRef: + name: cf-codefresh-ext-mongo + key: mongodb-user + mongodbPasswordSecretKeyRef: + name: cf-codefresh-ext-mongo + key: mongodb-password + mongodbHostSecretKeyRef: + name: cf-codefresh-ext-mongo + key: mongodb-host + + postgresHostnameSecretKeyRef: + name: cf-codefresh-ext-postgres + key: postgres-hostname + postgresPasswordSecretKeyRef: + name: cf-codefresh-ext-postgres + key: postgres-password + postgresUserSecretKeyRef: + name: cf-codefresh-ext-postgres + key: postgres-user + + rabbitmqHostnameSecretKeyRef: + name: cf-codefresh-ext-rabbitmq + key: rabbitmq-hostname + rabbitmqPasswordSecretKeyRef: + name: cf-codefresh-ext-rabbitmq + key: rabbitmq-password + rabbitmqUsernameSecretKeyRef: + name: cf-codefresh-ext-rabbitmq + key: rabbitmq-username + + redisPasswordSecretKeyRef: + name: cf-codefresh-ext-redis + key: redis-password + redisUrlSecretKeyRef: + name: cf-codefresh-ext-redis + key: redis-url + +cf-platform-analytics-platform: + redis: + enabled: false diff --git a/charts/codefresh/.ci/values/values-install-only.yaml b/charts/codefresh/.ci/values/values-install-only.yaml index daf376de8a..07145bb5f2 100644 --- a/charts/codefresh/.ci/values/values-install-only.yaml +++ b/charts/codefresh/.ci/values/values-install-only.yaml @@ -1,11 +1,25 @@ -# -- checking postgresql password with special characters +global: + mongodbHost: "my-mongodb" + postgresHostname: "my-postgresql" + redisUrl: "my-redis" + rabbitmqHostname: "my-rabbitmq:5672" + +mongodb: + enabled: false + postgresql: - auth: - postgresPassword: "()e%C9ar$Yka4Zb!H" + enabled: false -global: - postgresPassword: "()e%C9ar$Yka4Zb!H" +redis: + enabled: false + +rabbitmq: + enabled: false -seed: - postgresSeedJob: - postgresPassword: "()e%C9ar$Yka4Zb!H" \ No newline at end of file +hooks: + mongodb: + enabled: true + image: + registry: docker.io + repository: mongo + tag: "7.0" diff --git a/charts/codefresh/.ci/values/values-registry.yaml b/charts/codefresh/.ci/values/values-registry.yaml new file mode 100644 index 0000000000..fbcefc91ed --- /dev/null +++ b/charts/codefresh/.ci/values/values-registry.yaml @@ -0,0 +1,4 @@ +imageCredentials: + registry: us-docker.pkg.dev + username: _json_key + password: "" # placeholder for ${GCR_SA_KEY} set in CI pipeline diff --git a/charts/codefresh/.ci/values/values-tls.yaml b/charts/codefresh/.ci/values/values-tls.yaml new file mode 100644 index 0000000000..87036114de --- /dev/null +++ b/charts/codefresh/.ci/values/values-tls.yaml @@ -0,0 +1,62 @@ +seed: + mongoSeedJob: + mongodbRootURI: mongodb://root:XT9nmM8dZD@my-mongodb:27017/?authSource=admin + mongodbRootOptions: authSource=admin + mongodbRootPassword: XT9nmM8dZD + +global: + appUrl: "" # placeholder for ${ONPREM_INGRESS_HOSTNAME} set in CI pipeline + firebaseSecret: "" # placeholder for ${FIREBASE_SECRET} set in CI pipeline + + mongodbHost: my-mongodb + mongoURI: "mongodb://my-mongodb:27017/?ssl=true&authMechanism=MONGODB-X509&authSource=$external" + + volumes: + mongodb-client-cert: + enabled: true + type: secret + optional: true + nameOverride: mongodb-client-cert + redis-cert: + enabled: true + type: secret + optional: true + nameOverride: redis-server-cert + redis-ca: + enabled: true + type: secret + optional: true + nameOverride: redis-ca-cert + + volumeMounts: + mongodb-client-cert: + path: + - mountPath: /etc/ssl/mongodb/client.pem + subPath: client.pem + redis-cert: + path: + - mountPath: /etc/ssl/redis/tls.crt + subPath: tls.crt + - mountPath: /etc/ssl/redis/tls.key + subPath: tls.key + redis-ca: + path: + - mountPath: /etc/ssl/redis/ca.crt + subPath: ca.crt + + env: + # Mongo MTLS + MONGODB_SSL_ENABLED: true + MTLS_CERT_PATH: /etc/ssl/mongodb/client.pem + RUNTIME_MTLS_CERT_PATH: /etc/ssl/mongodb/client.pem + RUNTIME_MONGO_TLS: "true" + RUNTIME_MONGO_TLS_VALIDATE: "false" + MONGO_MTLS_VALIDATE: "false" + # Redis MTLS + REDIS_PORT: 6380 + REDIS_TLS: true + REDIS_REJECT_UNAUTHORIZED: false + REDIS_TLS_SKIP_VERIFY: true + REDIS_CA_PATH: /etc/ssl/redis/ca.crt + REDIS_CLIENT_CERT_PATH : /etc/ssl/redis/tls.crt + REDIS_CLIENT_KEY_PATH: /etc/ssl/redis/tls.key From 3d5e5b59c5f140eaf4ad8c3b4c3bb18deaab5f8d Mon Sep 17 00:00:00 2001 From: Mikhail Klimko Date: Mon, 24 Aug 2026 12:27:42 +0400 Subject: [PATCH 6/7] add helm-docs --- scripts/helm-docs.sh | 21 +++++++++++++++++---- 1 file changed, 17 insertions(+), 4 deletions(-) diff --git a/scripts/helm-docs.sh b/scripts/helm-docs.sh index 5b323435f6..b1e7f9acf3 100755 --- a/scripts/helm-docs.sh +++ b/scripts/helm-docs.sh @@ -1,6 +1,19 @@ #!/bin/bash ## Reference: https://github.com/norwoodj/helm-docs -helm-docs \ - --chart-search-root=charts/codefresh \ - --template-files=../../README.md.gotmpl \ - --output-file=../../README.md +set -x +REPO_ROOT="${1:-$(cd "$(dirname "$0")/.." && pwd)}" +WORKDIR="${2}" + +echo "$REPO_ROOT" +echo "$WORKDIR" + +echo "Running Helm-Docs" +docker run \ + -v "$REPO_ROOT:/helm-docs" \ + -w "/helm-docs/$WORKDIR" \ + -u $(id -u) \ + --rm \ + --entrypoint /bin/sh \ + jnorwood/helm-docs:v1.9.1 \ + -c \ + "helm-docs --chart-search-root=charts/codefresh --template-files=../../README.md.gotmpl --output-file=../../README.md" From 8ffb94bed9ade45e2bf4aa7040f1badbfe7746e2 Mon Sep 17 00:00:00 2001 From: Mikhail Klimko Date: Mon, 24 Aug 2026 12:28:58 +0400 Subject: [PATCH 7/7] add helm-docs --- README.md | 396 +++++++++++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 390 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index a485f58730..15084e8758 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ ## Codefresh On-Premises -![Version: 2.8.18](https://img.shields.io/badge/Version-2.8.18-informational?style=flat-square) ![AppVersion: 2.8.0](https://img.shields.io/badge/AppVersion-2.8.0-informational?style=flat-square) +![Version: 2.8.19](https://img.shields.io/badge/Version-2.8.19-informational?style=flat-square) ![AppVersion: 2.8.0](https://img.shields.io/badge/AppVersion-2.8.0-informational?style=flat-square) Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes. @@ -2458,6 +2458,222 @@ After platform upgrade, Consul fails with the error `refusing to rejoin cluster | cf-platform-analytics-etlstarter.system-etl-postgres | object | `{"container":{"env":{"BLUE_GREEN_ENABLED":true}},"controller":{"cronjob":{"ttlSecondsAfterFinished":300}},"enabled":true}` | Only postgres ETL should be running in onprem | | cf-platform-analytics-platform | object | See below | platform-analytics | | cfapi | object | `{"affinity":{},"container":{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}},"controller":{"replicas":2},"enabled":true,"hpa":{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70},"imagePullSecrets":[],"nodeSelector":{},"pdb":{"enabled":false,"minAvailable":"50%"},"podSecurityContext":{},"resources":{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}},"secrets":{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}},"tolerations":[]}` | cf-api | +| cfapi-admin.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-admin.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-admin.<<.container.env | object | See below | Env vars | +| cfapi-admin.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-admin.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-admin.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-admin.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-admin.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-admin.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-admin.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-admin.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-admin.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-admin.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-admin.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-admin.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-admin.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-admin.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-admin.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-admin.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-admin.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-admin.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-admin.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-admin.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-admin.enabled | bool | `false` | | +| cfapi-auth.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-auth.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-auth.<<.container.env | object | See below | Env vars | +| cfapi-auth.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-auth.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-auth.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-auth.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-auth.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-auth.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-auth.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-auth.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-auth.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-auth.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-auth.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-auth.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-auth.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-auth.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-auth.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-auth.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-auth.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-auth.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-auth.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-auth.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-auth.enabled | bool | `false` | | +| cfapi-buildmanager.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-buildmanager.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-buildmanager.<<.container.env | object | See below | Env vars | +| cfapi-buildmanager.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-buildmanager.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-buildmanager.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-buildmanager.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-buildmanager.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-buildmanager.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-buildmanager.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-buildmanager.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-buildmanager.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-buildmanager.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-buildmanager.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-buildmanager.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-buildmanager.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-buildmanager.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-buildmanager.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-buildmanager.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-buildmanager.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-buildmanager.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-buildmanager.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-buildmanager.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-buildmanager.enabled | bool | `false` | | +| cfapi-cacheevictmanager.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-cacheevictmanager.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-cacheevictmanager.<<.container.env | object | See below | Env vars | +| cfapi-cacheevictmanager.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-cacheevictmanager.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-cacheevictmanager.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-cacheevictmanager.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-cacheevictmanager.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-cacheevictmanager.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-cacheevictmanager.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-cacheevictmanager.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-cacheevictmanager.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-cacheevictmanager.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-cacheevictmanager.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-cacheevictmanager.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-cacheevictmanager.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-cacheevictmanager.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-cacheevictmanager.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-cacheevictmanager.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-cacheevictmanager.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-cacheevictmanager.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-cacheevictmanager.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-cacheevictmanager.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-cacheevictmanager.enabled | bool | `false` | | +| cfapi-downloadlogmanager.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-downloadlogmanager.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-downloadlogmanager.<<.container.env | object | See below | Env vars | +| cfapi-downloadlogmanager.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-downloadlogmanager.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-downloadlogmanager.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-downloadlogmanager.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-downloadlogmanager.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-downloadlogmanager.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-downloadlogmanager.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-downloadlogmanager.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-downloadlogmanager.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-downloadlogmanager.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-downloadlogmanager.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-downloadlogmanager.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-downloadlogmanager.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-downloadlogmanager.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-downloadlogmanager.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-downloadlogmanager.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-downloadlogmanager.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-downloadlogmanager.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-downloadlogmanager.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-downloadlogmanager.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-downloadlogmanager.enabled | bool | `false` | | +| cfapi-endpoints.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-endpoints.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-endpoints.<<.container.env | object | See below | Env vars | +| cfapi-endpoints.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-endpoints.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-endpoints.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-endpoints.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-endpoints.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-endpoints.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-endpoints.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-endpoints.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-endpoints.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-endpoints.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-endpoints.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-endpoints.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-endpoints.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-endpoints.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-endpoints.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-endpoints.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-endpoints.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-endpoints.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-endpoints.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-endpoints.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-endpoints.enabled | bool | `false` | | +| cfapi-environments.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-environments.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-environments.<<.container.env | object | See below | Env vars | +| cfapi-environments.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-environments.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-environments.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-environments.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-environments.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-environments.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-environments.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-environments.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-environments.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-environments.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-environments.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-environments.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-environments.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-environments.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-environments.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-environments.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-environments.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-environments.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-environments.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-environments.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-environments.enabled | bool | `false` | | +| cfapi-eventsmanagersubscriptions.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-eventsmanagersubscriptions.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-eventsmanagersubscriptions.<<.container.env | object | See below | Env vars | +| cfapi-eventsmanagersubscriptions.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-eventsmanagersubscriptions.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-eventsmanagersubscriptions.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-eventsmanagersubscriptions.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-eventsmanagersubscriptions.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-eventsmanagersubscriptions.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-eventsmanagersubscriptions.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-eventsmanagersubscriptions.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-eventsmanagersubscriptions.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-eventsmanagersubscriptions.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-eventsmanagersubscriptions.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-eventsmanagersubscriptions.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-eventsmanagersubscriptions.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-eventsmanagersubscriptions.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-eventsmanagersubscriptions.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-eventsmanagersubscriptions.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-eventsmanagersubscriptions.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-eventsmanagersubscriptions.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-eventsmanagersubscriptions.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-eventsmanagersubscriptions.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-eventsmanagersubscriptions.enabled | bool | `false` | | +| cfapi-gitops-resource-receiver.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-gitops-resource-receiver.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-gitops-resource-receiver.<<.container.env | object | See below | Env vars | +| cfapi-gitops-resource-receiver.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-gitops-resource-receiver.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-gitops-resource-receiver.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-gitops-resource-receiver.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-gitops-resource-receiver.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-gitops-resource-receiver.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-gitops-resource-receiver.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-gitops-resource-receiver.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-gitops-resource-receiver.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-gitops-resource-receiver.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-gitops-resource-receiver.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-gitops-resource-receiver.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-gitops-resource-receiver.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-gitops-resource-receiver.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-gitops-resource-receiver.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-gitops-resource-receiver.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-gitops-resource-receiver.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-gitops-resource-receiver.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-gitops-resource-receiver.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-gitops-resource-receiver.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-gitops-resource-receiver.enabled | bool | `false` | | | cfapi-internal.<<.affinity | object | `{}` | Affinity configuration | | cfapi-internal.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | | cfapi-internal.<<.container.env | object | See below | Env vars | @@ -2482,6 +2698,174 @@ After platform upgrade, Consul fails with the error `refusing to rejoin cluster | cfapi-internal.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | | cfapi-internal.<<.tolerations | list | `[]` | Tolerations configuration | | cfapi-internal.enabled | bool | `false` | | +| cfapi-kubernetes-endpoints.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-kubernetes-endpoints.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-kubernetes-endpoints.<<.container.env | object | See below | Env vars | +| cfapi-kubernetes-endpoints.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-kubernetes-endpoints.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-kubernetes-endpoints.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-kubernetes-endpoints.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-kubernetes-endpoints.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-kubernetes-endpoints.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-kubernetes-endpoints.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-kubernetes-endpoints.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-kubernetes-endpoints.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-kubernetes-endpoints.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-kubernetes-endpoints.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-kubernetes-endpoints.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-kubernetes-endpoints.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-kubernetes-endpoints.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-kubernetes-endpoints.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-kubernetes-endpoints.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-kubernetes-endpoints.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-kubernetes-endpoints.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-kubernetes-endpoints.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-kubernetes-endpoints.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-kubernetes-endpoints.enabled | bool | `false` | | +| cfapi-kubernetesresourcemonitor.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-kubernetesresourcemonitor.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-kubernetesresourcemonitor.<<.container.env | object | See below | Env vars | +| cfapi-kubernetesresourcemonitor.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-kubernetesresourcemonitor.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-kubernetesresourcemonitor.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-kubernetesresourcemonitor.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-kubernetesresourcemonitor.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-kubernetesresourcemonitor.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-kubernetesresourcemonitor.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-kubernetesresourcemonitor.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-kubernetesresourcemonitor.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-kubernetesresourcemonitor.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-kubernetesresourcemonitor.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-kubernetesresourcemonitor.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-kubernetesresourcemonitor.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-kubernetesresourcemonitor.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-kubernetesresourcemonitor.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-kubernetesresourcemonitor.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-kubernetesresourcemonitor.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-kubernetesresourcemonitor.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-kubernetesresourcemonitor.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-kubernetesresourcemonitor.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-kubernetesresourcemonitor.enabled | bool | `false` | | +| cfapi-sso-group-synchronizer.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-sso-group-synchronizer.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-sso-group-synchronizer.<<.container.env | object | See below | Env vars | +| cfapi-sso-group-synchronizer.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-sso-group-synchronizer.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-sso-group-synchronizer.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-sso-group-synchronizer.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-sso-group-synchronizer.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-sso-group-synchronizer.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-sso-group-synchronizer.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-sso-group-synchronizer.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-sso-group-synchronizer.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-sso-group-synchronizer.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-sso-group-synchronizer.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-sso-group-synchronizer.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-sso-group-synchronizer.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-sso-group-synchronizer.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-sso-group-synchronizer.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-sso-group-synchronizer.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-sso-group-synchronizer.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-sso-group-synchronizer.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-sso-group-synchronizer.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-sso-group-synchronizer.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-sso-group-synchronizer.enabled | bool | `false` | | +| cfapi-teams.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-teams.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-teams.<<.container.env | object | See below | Env vars | +| cfapi-teams.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-teams.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-teams.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-teams.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-teams.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-teams.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-teams.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-teams.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-teams.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-teams.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-teams.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-teams.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-teams.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-teams.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-teams.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-teams.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-teams.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-teams.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-teams.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-teams.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-teams.enabled | bool | `false` | | +| cfapi-terminators.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-terminators.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-terminators.<<.container.env | object | See below | Env vars | +| cfapi-terminators.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-terminators.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-terminators.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-terminators.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-terminators.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-terminators.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-terminators.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-terminators.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-terminators.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-terminators.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-terminators.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-terminators.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-terminators.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-terminators.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-terminators.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-terminators.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-terminators.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-terminators.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-terminators.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-terminators.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-terminators.enabled | bool | `false` | | +| cfapi-test-reporting.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-test-reporting.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-test-reporting.<<.container.env | object | See below | Env vars | +| cfapi-test-reporting.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-test-reporting.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-test-reporting.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-test-reporting.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-test-reporting.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-test-reporting.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-test-reporting.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-test-reporting.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-test-reporting.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-test-reporting.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-test-reporting.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-test-reporting.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-test-reporting.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-test-reporting.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-test-reporting.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-test-reporting.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-test-reporting.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-test-reporting.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-test-reporting.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-test-reporting.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-test-reporting.enabled | bool | `false` | | +| cfapi-ws.<<.affinity | object | `{}` | Affinity configuration | +| cfapi-ws.<<.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | +| cfapi-ws.<<.container.env | object | See below | Env vars | +| cfapi-ws.<<.container.image | object | `{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}` | Image | +| cfapi-ws.<<.container.image.registry | string | `"us-docker.pkg.dev/codefresh-enterprise/gcr.io"` | Registry prefix | +| cfapi-ws.<<.container.image.repository | string | `"codefresh/cf-api"` | Repository | +| cfapi-ws.<<.controller | object | `{"replicas":2}` | Controller configuration | +| cfapi-ws.<<.controller.replicas | int | `2` | Replicas number | +| cfapi-ws.<<.enabled | bool | `true` | Enable cf-api | +| cfapi-ws.<<.hpa | object | `{"enabled":false,"maxReplicas":10,"minReplicas":2,"targetCPUUtilizationPercentage":70}` | Autoscaler configuration | +| cfapi-ws.<<.hpa.enabled | bool | `false` | Enable HPA | +| cfapi-ws.<<.hpa.maxReplicas | int | `10` | Maximum number of replicas | +| cfapi-ws.<<.hpa.minReplicas | int | `2` | Minimum number of replicas | +| cfapi-ws.<<.hpa.targetCPUUtilizationPercentage | int | `70` | Average CPU utilization percentage | +| cfapi-ws.<<.imagePullSecrets | list | `[]` | Image pull secrets | +| cfapi-ws.<<.nodeSelector | object | `{}` | Node selector configuration | +| cfapi-ws.<<.pdb | object | `{"enabled":false,"minAvailable":"50%"}` | Pod disruption budget configuration | +| cfapi-ws.<<.pdb.enabled | bool | `false` | Enable PDB | +| cfapi-ws.<<.pdb.minAvailable | string | `"50%"` | Minimum number of replicas in percentage | +| cfapi-ws.<<.podSecurityContext | object | `{}` | Pod security context configuration | +| cfapi-ws.<<.resources | object | `{"limits":{},"requests":{"cpu":"200m","memory":"256Mi"}}` | Resource requests and limits | +| cfapi-ws.<<.secrets | object | `{"secret":{"enabled":true,"stringData":{"OIDC_PROVIDER_CLIENT_ID":"{{ .Values.global.oidcProviderClientId }}","OIDC_PROVIDER_CLIENT_SECRET":"{{ .Values.global.oidcProviderClientSecret }}"},"type":"Opaque"}}` | Secrets configuration | +| cfapi-ws.<<.tolerations | list | `[]` | Tolerations configuration | +| cfapi-ws.enabled | bool | `false` | | | cfapi.affinity | object | `{}` | Affinity configuration | | cfapi.container | object | `{"env":{"AUDIT_AUTO_CREATE_DB":true,"DEFAULT_SYSTEM_TYPE":"PROJECT_ONE","GITHUB_API_PATH_PREFIX":"/api/v3","LOGGER_LEVEL":"debug","OIDC_PROVIDER_PORT":"{{ .Values.global.oidcProviderPort }}","OIDC_PROVIDER_PROTOCOL":"{{ .Values.global.oidcProviderProtocol }}","OIDC_PROVIDER_TOKEN_ENDPOINT":"{{ .Values.global.oidcProviderTokenEndpoint }}","OIDC_PROVIDER_URI":"{{ .Values.global.oidcProviderService }}","ON_PREMISE":true,"RUNTIME_MONGO_DB":"codefresh","RUNTIME_REDIS_DB":0},"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/cf-api"}}` | Container configuration | | cfapi.container.env | object | See below | Env vars | @@ -2644,7 +3028,7 @@ After platform upgrade, Consul fails with the error `refusing to rejoin cluster | postgresqlCleanJob | object | See below | Maintenance postgresql clean job. Removes a certain number of the last records in the event store table. | | rabbitmq | object | See below | rabbitmq Ref: https://github.com/bitnami/charts/blob/main/bitnami/rabbitmq/values.yaml | | redis | object | See below | redis Ref: https://github.com/bitnami/charts/blob/main/bitnami/redis/values.yaml | -| redis-ha | object | `{"auth":true,"enabled":false,"haproxy":{"enabled":true,"resources":{"requests":{"cpu":"100m","memory":"128Mi"}}},"persistentVolume":{"enabled":true,"size":"10Gi"},"redis":{"resources":{"requests":{"cpu":"100m","memory":"128Mi"}}},"redisPassword":"hoC9szf7NtrU"}` | redis-ha # Ref: https://github.com/DandyDeveloper/charts/blob/master/charts/redis-ha/values.yaml | +| redis-ha | object | `{"auth":true,"enabled":false,"haproxy":{"enabled":true,"resources":{"requests":{"cpu":"100m","memory":"128Mi"}}},"persistentVolume":{"enabled":true,"size":"10Gi"},"redis":{"resources":{"requests":{"cpu":"100m","memory":"128Mi"}}},"redisPassword":"hoC9szf7NtrU"}` | redis-ha | | runner | object | See below | runner | | runtime-environment-manager | object | See below | runtime-environment-manager | | runtimeImages | object | See below | runtimeImages | @@ -2660,10 +3044,10 @@ After platform upgrade, Consul fails with the error `refusing to rejoin cluster | seed.mongoSeedJob.mongodbRootUser | string | `"root"` | Root user in plain text (required ONLY for seed job!). | | seed.mongoSeedJob.mongodbRootUserSecretKeyRef | object | `{}` | Root user from existing secret | | seed.postgresSeedJob | object | See below | Postgres Seed Job. Required at first install. Creates required user and databases. | -| seed.postgresSeedJob.postgresPassword | optional | `""` | Password for "postgres" admin user (required ONLY for seed job!) | -| seed.postgresSeedJob.postgresPasswordSecretKeyRef | optional | `{}` | Password for "postgres" admin user from existing secret | -| seed.postgresSeedJob.postgresUser | optional | `""` | "postgres" admin user in plain text (required ONLY for seed job!) Must be a privileged user allowed to create databases and grant roles. If omitted, username and password from `.Values.global.postgresUser/postgresPassword` will be used. | -| seed.postgresSeedJob.postgresUserSecretKeyRef | optional | `{}` | "postgres" admin user from exising secret | +| seed.postgresSeedJob.postgresPassword | string | `""` | (optional) Password for "postgres" admin user (required ONLY for seed job!) | +| seed.postgresSeedJob.postgresPasswordSecretKeyRef | object | `{}` | (optional) Password for "postgres" admin user from existing secret | +| seed.postgresSeedJob.postgresUser | string | `""` | (optional) "postgres" admin user in plain text (required ONLY for seed job!) Must be a privileged user allowed to create databases and grant roles. If omitted, username and password from `.Values.global.postgresUser/postgresPassword` will be used. | +| seed.postgresSeedJob.postgresUserSecretKeyRef | object | `{}` | (optional) "postgres" admin user from exising secret | | segment-reporter.enabled | bool | `false` | | | tasker-kubernetes | object | `{"affinity":{},"container":{"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/tasker-kubernetes"}},"enabled":true,"hpa":{"enabled":false},"imagePullSecrets":[],"nodeSelector":{},"pdb":{"enabled":false},"podSecurityContext":{},"resources":{"limits":{},"requests":{"cpu":"100m","memory":"128Mi"}},"tolerations":[]}` | tasker-kubernetes | | webTLS | object | `{"cert":"","enabled":false,"key":"","secretName":"star.codefresh.io"}` | DEPRECATED - Use `.Values.ingress.tls` instead TLS secret for Ingress |