glueops-platform

This chart deploys the GlueOps Platform

Values

Key	Type	Default	Description
captain_domain	string	"placeholder_cluster_environment.placeholder_tenant_key.placeholder_glueops_root_domain"	The Route53 subdomain for the services on your cluster. It will be used as the suffix url for argocd, grafana, vault, and any other services that come out of the box in the glueops platform. Note: you need to create this before using this repo as this repo does not provision DNS Zones for you. This is the domain you created through: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
captain_repo.private_b64enc_deploy_key	string	"placeholder_captain_repo_b64enc_private_deploy_key"	This is a read only deploy key that will be used to read the captain repo. Part of output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
captain_repo.ssh_clone_url	string	"placeholder_captain_repo_ssh_clone_url"	This is the github url of the captain repo https://github.com/glueops/development-captains/tenant . Part of output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
certManager.aws_accessKey	string	"placeholder_certmanager_aws_access_key"	Part of certmanager_iam_credentials output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
certManager.aws_region	string	"placeholder_aws_region"	Should be the same primary_region you used in: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
certManager.aws_secretKey	string	"placeholder_certmanager_aws_secret_key"	Part of certmanager_iam_credentials output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
container_images.app_backup_and_exports.backup_tools.image.registry	string	"ghcr.io"
container_images.app_backup_and_exports.backup_tools.image.repository	string	"glueops/backup-tools"
container_images.app_backup_and_exports.backup_tools.image.tag	string	"v0.15.1@sha256:85bb77367ef1b0144e1e1e9f665819766951ddf85ef080a95dde719076491802"
container_images.app_backup_and_exports.certs_backup_restore.image.registry	string	"ghcr.io"
container_images.app_backup_and_exports.certs_backup_restore.image.repository	string	"glueops/certs-backup-restore"
container_images.app_backup_and_exports.certs_backup_restore.image.tag	string	"v0.8.0@sha256:acd0b126d73e51721355519430b2ed9df44a4b9b91c9dacd0b6e8198e68be114"
container_images.app_backup_and_exports.vault_backup_validator.image.registry	string	"ghcr.io"
container_images.app_backup_and_exports.vault_backup_validator.image.repository	string	"glueops/vault-backup-validator"
container_images.app_backup_and_exports.vault_backup_validator.image.tag	string	"v0.3.2@sha256:e4a020fa1666fdcd800185b65eacae79a206fd179b829140bd38cec4d93f28fb"
container_images.app_cluster_info_page.cluster_information_help_page_html.image.registry	string	"ghcr.io"
container_images.app_cluster_info_page.cluster_information_help_page_html.image.repository	string	"glueops/cluster-information-help-page-html"
container_images.app_cluster_info_page.cluster_information_help_page_html.image.tag	string	"v0.4.2@sha256:0a60e6175cf998ed53a3a624f1f2fa67f31bb63f69ad2545b5ad1683d19a26eb"
container_images.app_dex.dex.image.registry	string	"ghcr.io"
container_images.app_dex.dex.image.repository	string	"dexidp/dex"
container_images.app_dex.dex.image.tag	string	"v2.41.1@sha256:bc7cfce7c17f52864e2bb2a4dc1d2f86a41e3019f6d42e81d92a301fad0c8a1d"
container_images.app_fluent_operator.image.registry	string	"docker.io"
container_images.app_fluent_operator.image.repository	string	"kubesphere/fluent-operator"
container_images.app_fluent_operator.image.tag	string	"v2.7.0@sha256:b0668c0d878bde4ab04802a7e92d0dd3bef4c1fed1b5e63cf83d49bb3c5d3947"
container_images.app_glueops_alerts.cluster_monitoring.image.registry	string	"ghcr.io"
container_images.app_glueops_alerts.cluster_monitoring.image.repository	string	"glueops/cluster-monitoring"
container_images.app_glueops_alerts.cluster_monitoring.image.tag	string	"v0.6.1@sha256:c1ead8704c135a501bf3f5f80f9f5b34d3db33ca8dfb8711b2cb8c845b86de7e"
container_images.app_kube_prometheus_stack.grafana.image.registry	string	"docker.io"
container_images.app_kube_prometheus_stack.grafana.image.repository	string	"grafana/grafana"
container_images.app_kube_prometheus_stack.grafana.image.tag	string	"10.4.8@sha256:c88e62a727bbb54b1ce1a420fb81b8b116c10a60d666de92ae74f3481aef1499"
container_images.app_loki.loki.image.registry	string	"docker.io"
container_images.app_loki.loki.image.repository	string	"grafana/loki"
container_images.app_loki.loki.image.tag	string	"2.9.10@sha256:35b02acc67654ddc38273e519b4f26f3967a907b9db5489af300c21f37ee1ae7"
container_images.app_loki_alert_group_controller.loki_alert_group_controller.image.registry	string	"ghcr.io"
container_images.app_loki_alert_group_controller.loki_alert_group_controller.image.repository	string	"glueops/metacontroller-operator-loki-rule-group"
container_images.app_loki_alert_group_controller.loki_alert_group_controller.image.tag	string	"v0.4.4@sha256:4ac33ae690ce9569a0bde88c2d3c6109b8cb50a36e3992a6e39e1b1d5fa8c3fc"
container_images.app_metacontroller.metacontroller.image.registry	string	"ghcr.io"
container_images.app_metacontroller.metacontroller.image.repository	string	"metacontroller/metacontroller"
container_images.app_metacontroller.metacontroller.image.tag	string	"v4.11.17@sha256:b5e3c6045355aa4b2102a151b7edcd1de22ab9f552b244f2c9475103d7558634"
container_images.app_network_exporter.network_exporter.image.registry	string	"docker.io"
container_images.app_network_exporter.network_exporter.image.repository	string	"syepes/network_exporter"
container_images.app_network_exporter.network_exporter.image.tag	string	"1.7.8@sha256:1105eb54a801b1e6af43ca7e6464fef19189ef8319fe1399b61f5da51a88bb93"
container_images.app_promtail.promtail.image.registry	string	"docker.io"
container_images.app_promtail.promtail.image.repository	string	"grafana/promtail"
container_images.app_promtail.promtail.image.tag	string	"2.9.10@sha256:63a2e57a5b1401109f77d36a49a637889d431280ed38f5f885eedcd3949e52cf"
container_images.app_pull_request_bot.pull_request_bot.image.registry	string	"ghcr.io"
container_images.app_pull_request_bot.pull_request_bot.image.repository	string	"glueops/pull-request-bot"
container_images.app_pull_request_bot.pull_request_bot.image.tag	string	"v0.20.0@sha256:787a4d646fb017bdc9d68e2c8d14bb670cf4adfd076a7abb89f2c9dc01d36718"
container_images.app_qr_code_generator.qr_code_generator.image.registry	string	"ghcr.io"
container_images.app_qr_code_generator.qr_code_generator.image.repository	string	"glueops/qr-code-generator"
container_images.app_qr_code_generator.qr_code_generator.image.tag	string	"v0.5.5@sha256:197f9a24753f6e26a1bf1b3982dca4ad87fda3ff3c626c379e2cb476405f72f1"
container_images.app_vault.vault.image.registry	string	"docker.io"
container_images.app_vault.vault.image.repository	string	"hashicorp/vault"
container_images.app_vault.vault.image.tag	string	"1.14.10@sha256:14be0a8eb323181a56d10facab3b424809d9921e85d2f2678126ce232766a8e1"
container_images.app_vault_init_controller.vault_init_controller.image.registry	string	"ghcr.io"
container_images.app_vault_init_controller.vault_init_controller.image.repository	string	"glueops/vault-init-controller"
container_images.app_vault_init_controller.vault_init_controller.image.tag	string	"v0.7.0@sha256:4b217fd3961e02a704394fb02380d2b77983bab82a1d3b4082e436c9f175f583"
daemonset_tolerations[0].effect	string	"NoSchedule"
daemonset_tolerations[0].operator	string	"Exists"
daemonset_tolerations[1].effect	string	"NoExecute"
daemonset_tolerations[1].key	string	"node.kubernetes.io/not-ready"
daemonset_tolerations[1].operator	string	"Exists"
daemonset_tolerations[2].effect	string	"NoExecute"
daemonset_tolerations[2].key	string	"node.kubernetes.io/unreachable"
daemonset_tolerations[2].operator	string	"Exists"
daemonset_tolerations[3].effect	string	"NoSchedule"
daemonset_tolerations[3].key	string	"node.kubernetes.io/disk-pressure"
daemonset_tolerations[3].operator	string	"Exists"
daemonset_tolerations[4].effect	string	"NoSchedule"
daemonset_tolerations[4].key	string	"node.kubernetes.io/memory-pressure"
daemonset_tolerations[4].operator	string	"Exists"
daemonset_tolerations[5].effect	string	"NoSchedule"
daemonset_tolerations[5].key	string	"node.kubernetes.io/pid-pressure"
daemonset_tolerations[5].operator	string	"Exists"
daemonset_tolerations[6].effect	string	"NoSchedule"
daemonset_tolerations[6].key	string	"node.kubernetes.io/unschedulable"
daemonset_tolerations[6].operator	string	"Exists"
daemonset_tolerations[7].effect	string	"NoSchedule"
daemonset_tolerations[7].key	string	"node.kubernetes.io/network-unavailable"
daemonset_tolerations[7].operator	string	"Exists"
dex.argocd.client_secret	string	"placeholder_dex_argocd_client_secret"	Specify a unique password here. This will be used to connect argocd via OIDC to the Dex IDP. You can create one with in bash openssl rand -base64 32
dex.github.client_id	string	"placeholder_dex_github_client_id"	To create a clientID please reference: https://github.com/GlueOps/github-oauth-apps/tree/v0.0.1
dex.github.client_secret	string	"placeholder_dex_github_client_secret"	To create a clientSecret please reference: https://github.com/GlueOps/github-oauth-apps/tree/v0.0.1
dex.github.orgs	list	["placeholder_admin_github_org_name","placeholder_tenant_github_org_name"]	Specify the github orgs you want to allow access to. This is a list of strings. Note: users still need to be in the proper groups to have access.
dex.grafana.client_secret	string	"placeholder_dex_grafana_client_secret"	Specify a unique password here. This will be used to connect grafana via OAuth to the Dex IDP. You can create one with in bash openssl rand -base64 32
dex.pomerium.client_secret	string	"placeholder_dex_pomerium_client_secret"	Specify a unique password here. This will be used to connect argocd via OIDC to the Dex IDP. You can create one with in bash openssl rand -base64 32
dex.vault.client_secret	string	"placeholder_dex_vault_client_secret"
externalDns.aws_accessKey	string	"placeholder_externaldns_aws_access_key"	Part of externaldns_iam_credentials output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
externalDns.aws_region	string	"placeholder_aws_region"	Should be the same primary_region you used in: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
externalDns.aws_secretKey	string	"placeholder_externaldns_aws_secret_key"	Part of externaldns_iam_credentials output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
gitHub.github_app_b64enc_private_key	string	"placeholder_github_tenant_app_b64enc_private_key"
gitHub.github_app_id	string	"placeholder_github_tenant_app_id"	Create an Application in the tenant's github organization that has repo scope access and can comment against PRs. https://docs.github.com/en/apps/creating-github-apps/setting-up-a-github-app/creating-a-github-app. Format the key using format using `cat
gitHub.github_app_installation_id	string	"placeholder_github_tenant_app_installation_id"
gitHub.tenant_github_org	string	"placeholder_tenant_github_org_name"
gitHub.tenant_github_org_and_team	string	"placeholder_tenant_github_org_name:developers"	The format is: : (The team should include the developers)
glueops_alerts.opsgenie_apikey	string	"placeholder_opsgenie_api_key"	Found at opsgenie_credentials in the json output that is part of opsgenie_prometheus_api_keys output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
glueops_backups.s3_bucket_name	string	"glueops-tenant-placeholder_tenant_key-primary"
glueops_backups.tls_cert_backup.aws_accessKey	string	"placeholder_tls_cert_backup_aws_access_key"	Part of loki_log_exporter output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
glueops_backups.tls_cert_backup.aws_region	string	"placeholder_aws_region"	Should be the same primary_region you used in: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
glueops_backups.tls_cert_backup.aws_secretKey	string	"placeholder_tls_cert_backup_aws_secret_key"	Part of loki_log_exporter output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
glueops_backups.tls_cert_backup.backup_prefix	string	"placeholder_tls_cert_backup_s3_key_prefix"
glueops_backups.tls_cert_backup.company_key	string	"placeholder_tenant_key"
glueops_backups.vault.aws_accessKey	string	"placeholder_vault_aws_access_key"	Part of vault_s3_iam_credentials output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
glueops_backups.vault.aws_region	string	"placeholder_aws_region"	Should be the same primary_region you used in: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
glueops_backups.vault.aws_secretKey	string	"placeholder_vault_aws_secret_key"	Part of vault_s3_iam_credentials output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
glueops_backups.vault.company_key	string	"placeholder_tenant_key"
glueops_node_and_tolerations.nodeSelector."glueops.dev/role"	string	"glueops-platform"
glueops_node_and_tolerations.tolerations[0].effect	string	"NoSchedule"
glueops_node_and_tolerations.tolerations[0].key	string	"glueops.dev/role"
glueops_node_and_tolerations.tolerations[0].operator	string	"Equal"
glueops_node_and_tolerations.tolerations[0].value	string	"glueops-platform"
grafana.admin_password	string	"placeholder_grafana_admin_password"	Default admin password. CHANGE THIS!!!!
grafana.github_other_org_names	string	"placeholder_tenant_github_org_name"
host_network.cert_manager.webhook_secure_port	int	45020
host_network.enabled	string	"placeholder_enable_host_network"
host_network.external_secrets.webhook_port	int	45010
host_network.keda.prometheus.metricServer.port	int	45056
host_network.keda.prometheus.operator.port	int	45055
host_network.keda.prometheus.webhooks.port	int	45054
host_network.keda.service.portHttps	int	45052
host_network.keda.service.portHttpsTarget	int	45053
host_network.keda.webhooks.healthProbePort	int	45051
host_network.keda.webhooks.port	int	45050
host_network.kube_pometheus_stack.prometheusOperator.admissionWebhooks.deployment.tls.internal_port	int	45041
host_network.kube_pometheus_stack.prometheusOperator.tls.internal_port	int	45040
host_network.nginx_public.controller.host_port.ports.http	int	45030
host_network.nginx_public.controller.host_port.ports.https	int	45031
loki.aws_accessKey	string	"placeholder_loki_aws_access_key"	Part of loki_s3_iam_credentials output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
loki.aws_region	string	"placeholder_aws_region"	Should be the same primary_region you used in: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
loki.aws_secretKey	string	"placeholder_loki_aws_secret_key"	Part of loki_s3_iam_credentials output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
loki.bucket	string	"glueops-tenant-placeholder_tenant_key-placeholder_cluster_environment-loki-primary"	Format: glueops-tenant-placeholder_tenant_key-placeholder_cluster_environment-loki-primary, Credentials found at loki_credentials of json output of terraform-module-cloud-multy-prerequisites
nginx.controller_replica_count	int	2	number of replicas for ingress controller
prometheus.volume_claim_storage_request	string	"50"	Volume of storage requested for each Prometheus PVC, in Gi
pull_request_bot.watch_for_apps_delay_seconds	string	"10"	number of seconds to wait before checking ArgoCD for new applications
tls_cert_restore.aws_accessKey	string	"placeholder_tls_cert_restore_aws_access_key"	Part of loki_log_exporter output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
tls_cert_restore.aws_region	string	"placeholder_aws_region"	Should be the same primary_region you used in: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
tls_cert_restore.aws_secretKey	string	"placeholder_tls_cert_restore_aws_secret_key"	Part of loki_log_exporter output from terraform-module-cloud-multy-prerequisites: https://github.com/GlueOps/terraform-module-cloud-multy-prerequisites
tls_cert_restore.backup_prefix	string	"placeholder_tls_cert_backup_s3_key_prefix"
tls_cert_restore.exclude_namespaces	string	"placeholder_tls_cert_restore_exclude_namespaces"
vault.data_storage	int	10	Volume of storage requested for each Vault Data PVC, in Gi
vault_init_controller.aws_accessKey	string	"placeholder_vault_init_controller_aws_access_key"	S3 Credentials to access the vault_access.json
vault_init_controller.aws_region	string	"placeholder_aws_region"	S3 region to access the vault_access.json
vault_init_controller.aws_secretKey	string	"placeholder_vault_init_controller_aws_access_secret"	S3 Credentials to access the vault_access.json
vault_init_controller.enable_restore	bool	true	Enable/Disable restore of an existing backup upon a fresh deployment of vault during cluster bootstrap
vault_init_controller.pause_reconcile	bool	false	Enable/Disable reconcile
vault_init_controller.reconcile_period	int	30	How often the controller should run
vault_init_controller.s3_bucket_name	string	"glueops-tenant-placeholder_tenant_key-primary"	S3 bucket that will store the vault unseal key(s) and root token
vault_init_controller.s3_key_path	string	"placeholder_vault_init_controller_s3_key"	S3 key/path to the unseal key(s) and root token