Helm Chart

Cortex

A Helm chart for deploying the Collaborative Organization for Resource and Trust Exchange (CORTEX) on Kubernetes.

Configuration

The following table lists the configurable parameters of the Cortex chart and example values.

Parameter	Description	Example
Ldap.image	LDAP directory container image	"zot.cluster.ibrst.org/rdct/at tribute-authority:latest"
Ldap.test.enable	Optional ldap functionality test; deploys a pod that continuously queries the ldap	false
Proxy.satosa-image	SATOSA container image	"satosa:8.5.1"
Proxy.state-encryption-key	The key to be used for state encryption.	"CHANGE_MEcsUEpy"
Proxy.user-id-hash-salt	Salt used to hash the persistent user identifier	"CHANGE_ME4XUeD2X"
Proxy.hostname	FQDN of the base url	"proxy.cortex.ug"
Proxy.base-url	base url of the proxy with ‘https://’	"https://proxy.cortex.ug"
Proxy.cert-issuer	ClusterIssuer for TLS certificates	"letsencrypt-production"
Proxy.org.name	Legal organization name	"Collaborative Organization LLC."
Proxy.org.display-name	Human-friendly organization display name	"CORTEX"
Proxy.org.url	Organization homepage URL	"http://www.cortex.ug/"
Proxy.saml-scope	SAML attribute scope domain	"cortex.ug"
Proxy.support-email	Support contact email address	"support@cortex.ug"
Proxy.admin-email	Administrator contact email address	"admin@cortex.ug"
Proxy.static-attributes.organisation	Organization name assertion attribute	"Collaborative Organization LLC."
Proxy.static-attributes.schac-home-org	SCHAC home organization domain	"cortex.ug"
Proxy.static-attributes.org-name	Organization name attribute	"Collaborative Organization LLC."
Proxy.static-attributes.noredu-acronym	Organization acronym attribute	"EO"
Proxy.static-attributes.country-code	ISO country code	"UG"
Proxy.static-attributes.country-name	Country name attribute	"Uganda"
Discovery.httpd-image	Apache httpd image built from discovery/Dockerfile.httpd	"zot.cluster.ibrst.org/wayf/ht tpd:2.4.67"
Discovery.shibd-image	Shibboleth SP container image	"i2incommon/shibboleth_sp:3.5. 2_05242026_rocky9_multiarch"
Discovery.hostname	FQDN for the discovery	"wayf.cortex.ug"
Discovery.sp-entity-id	Service Provider entity ID	"https://wayf.cortex.ug/"
Discovery.cert-issuer	ClusterIssuer for TLS certificates	"letsencrypt-production"
Registry.image	COmanage Registry container image	"i2incommon/comanage-registry- pe:5.2.0-rocky10.1"
Registry.database-password	PostgreSQL registry user password	"CHANGE_MEtwehgTT"
Registry.email-account-password	SMTP account password	"CHANGE_MEcsUEp@Thed"
Registry.security-salt	COmanage Registry security salt	"CHANGE_ME4XUeD2X"
Registry.hostname	FQDN for the registry	"registry.cortex.ug"
Registry.sp-entity-id	Service Provider entity ID	"https://registry.cortex.ug/"
Registry.idp-entity-id	SATOSA IdP entity ID	"https://proxy.cortex.ug/idp"
Registry.cert-issuer	ClusterIssuer for TLS certificates	"letsencrypt-production"
Registry.debug	Enable COmanage debug logging	"1"
Registry.env	Deployment environment name	"dev"
Registry.user-token	Registry deployment user token	"ctx"
Registry.url-path	URL path prefix for registry	"registry"
Registry.enable-plugins	COmanage plugins to enable	"ServicesWidget"
Registry.admin.given-name	Given Name of initial platform administrator	"Patrick"
Registry.admin.family-name	Family Name of initial platform administrator	"Mukasa"
Registry.admin.username	Username of initial platform administrator (REMOTE_USER)	"pmukasa@renu.ac.ug"
Registry.database.name	Registry database name	"registry"
Registry.database.user	Registry database user	"registry_user"
Registry.database.host	CNPG read-write service for the registry-db cluster	"registry-db-rw"
Registry.database.port	PostgreSQL database port	"5432"
Registry.database.storage-size	Database volume storage size	"5Gi"
Registry.email.from-email	Sender email address	"noreply@cortex.ug"
Registry.email.from-name	Sender display name	"COmanage Registry"
Registry.email.transport	Email transport method	"Smtp"
Registry.email.host	SMTP server hostname	"smtp.cortex.ug"
Registry.email.port	SMTP server port	"587"
Registry.email.tls	Enable or disable TLS usage	"true"
Registry.email.account	SMTP authentication account	"noreply@cortex.ug"

---

Documentation generated by sphinx-helm.