Helm Chart Configuration#
Values#
nameOverride(default:
"")Replaces the chart name in
app.kubernetes.io/name
fullnameOverride(default:
"")Replaces the fully qualified release-and-chart name
Ldap.image(required; default:
"zot.cluster.ibrst.org/rdct/attribute-authority:latest")LDAP directory container image
Ldap.test.enable(default:
false)Optional ldap functionality test; deploys a pod that continuously queries the ldap
Proxy.satosa-image(required; default:
"satosa:8.5.1")SATOSA container image
Proxy.state-encryption-key(required; default:
"CHANGE_MEcsUEpy")The key to be used for state encryption.
Proxy.user-id-hash-salt(required; default:
"CHANGE_ME4XUeD2X")Salt used to hash the persistent user identifier
Proxy.hostname(default:
"proxy.example.com")FQDN of the base url
Proxy.base-url(default:
"https://proxy.example.com")base url of the proxy with ‘https://’
Proxy.cert-issuer(default:
"letsencrypt-production")ClusterIssuer for TLS certificates
Proxy.org.name(default:
"Example Organization LLC.")Legal organization name
Proxy.org.display-name(default:
"EXAMPLE")Human-friendly organization display name
Proxy.org.url(default:
"http://www.example.com/")Organization homepage URL
Proxy.saml-scope(default:
"example.com")SAML attribute scope domain
Proxy.support-email(default:
"support@example.com")Support contact email address
Proxy.admin-email(default:
"admin@example.com")Administrator contact email address
Proxy.static-attributes.organisation(default:
"Example Organization LLC.")Organization name assertion attribute
Proxy.static-attributes.schac-home-org(default:
"example.com")SCHAC home organization domain
Proxy.static-attributes.org-name(default:
"Example Organization LLC.")Organization name attribute
Proxy.static-attributes.noredu-acronym(default:
"EO")Organization acronym attribute
Proxy.static-attributes.country-code(default:
"US")ISO country code
Proxy.static-attributes.country-name(default:
"Unites States")Country name attribute
Discovery.httpd-image(required; default:
"zot.cluster.ibrst.org/wayf/httpd:2.4.67")Apache httpd image for the discovery service (built and published outside this repo)
Discovery.shibd-image(default:
"i2incommon/shibboleth_sp:3.5.2_05242026_rocky9_multiarch")Shibboleth SP container image
Discovery.hostname(default:
"wayf.example.com")Fully Qualified Domain Name(FQDN) for the discovery service
Discovery.sp-entity-id(default:
"https://wayf.example.com/")Service Provider entity ID for the discovery service
Discovery.cert-issuer(default:
"letsencrypt-production")ClusterIssuer for TLS certificates
Registry.image(required; default:
"i2incommon/comanage-registry-pe:5.2.0-rocky10.1")COmanage Registry container image
Registry.database-password(required; default:
"CHANGE_MEtwehgTT")PostgreSQL registry user password
Registry.email-account-password(required; default:
"CHANGE_MEcsUEp@Thed")SMTP account password
Registry.security-salt(required; default:
"CHANGE_ME4XUeD2X")COmanage Registry security salt
Registry.hostname(default:
"registry.example.com")FQDN for the registry
Registry.sp-entity-id(default:
"https://registry.example.com/")Registry Service Provider entity ID
Registry.idp-entity-id(default:
"https://proxy.example.com/idp")Proxy or SATOSA IdP entity ID
Registry.cert-issuer(default:
"letsencrypt-production")ClusterIssuer for TLS certificates
Registry.debug(default:
"0")Enable COmanage debug logging, 1=true, 0=false
Registry.env(default:
"dev")Deployment environment name[test, prod]
Registry.user-token(default:
"ctx")Registry deployment user token
Registry.url-path(default:
"registry")URL path prefix for registry
Registry.enable-plugins(default:
"ServicesWidget")COmanage plugins to enable
Registry.admin.given-name(default:
"Registry")Given Name of initial platform administrator
Registry.admin.family-name(default:
"Admin")Family Name of initial platform administrator
Registry.admin.username(default:
"registry.admin@example.org")Username of initial platform administrator (REMOTE_USER)
Registry.database.name(default:
"registry")Registry database name
Registry.database.user(default:
"registry_user")Registry database user
Registry.database.host(default:
"registry-db-rw")CNPG read-write service for the registry-db cluster
Registry.database.port(default:
"5432")PostgreSQL database port
Registry.database.storage-size(default:
"5Gi")Database volume storage size
Registry.email.from-email(default:
"noreply@example.com")Sender email address
Registry.email.from-name(default:
"COmanage Registry")Sender display name
Registry.email.transport(default:
"Smtp")Email transport method
Registry.email.host(default:
"smtp.example.com")SMTP server hostname
Registry.email.port(default:
"587")SMTP server port
Registry.email.tls(default:
"true")Enable or disable TLS usage
Registry.email.account(default:
"noreply@example.com")SMTP authentication account