mirror of
https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk.git
synced 2025-12-06 23:41:43 +01:00
62 lines
2.2 KiB
Go Template
62 lines
2.2 KiB
Go Template
{{/*
|
|
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
|
|
SPDX-License-Identifier: Apache-2.0
|
|
*/}}
|
|
---
|
|
udmRestApi:
|
|
apiLogLevel: "4"
|
|
authGroups:
|
|
dcBackup: "cn=DC Backup Hosts,cn=groups,dc=univention-organization,dc=intranet"
|
|
dcSlaves: "cn=DC Slave Hosts,cn=groups,dc=univention-organization,dc=intranet"
|
|
domainAdmins: "cn=Domain Admins,cn=groups,dc=univention-organization,dc=intranet"
|
|
environment: "staging"
|
|
ldapHost: "ums-ldap-server"
|
|
ldapBaseDn: "dc=univention-organization,dc=intranet"
|
|
# TODO: This should not be required, the machine account is not there
|
|
# ldapHostDn: cn=stub-value,cn=dc,cn=computers,dc=univention-organization,dc=intranet
|
|
ldapHostDn: "cn=admin,dc=univention-organization,dc=intranet"
|
|
# TODO: Secret should be entered without b64enc
|
|
ldapSecret: "{{ .Values.secrets.univentionManagementStack.ldapSecret | b64enc }}"
|
|
# TODO: There is on machine secret on the container
|
|
# TODO: Secret should be entered without b64enc
|
|
machineSecret: "{{ .Values.secrets.univentionManagementStack.ldapSecret | b64enc }}"
|
|
# TODO: why do we need this many subprocesses?
|
|
numberOfSubprocesses: 8
|
|
# TODO: Stub value currently
|
|
caCert: ""
|
|
# TODO: This should not be part of the udm-rest-api anymore
|
|
loadJoinData:
|
|
enabled: true
|
|
# TODO: probably to INFO
|
|
logLevel: "DEBUG"
|
|
# TODO: configurable
|
|
tlsMode: "off"
|
|
|
|
image:
|
|
registry: "{{ .Values.global.imageRegistry }}"
|
|
repository: "{{ .Values.images.umsUdmRestApi.repository }}"
|
|
pullPolicy: "Always"
|
|
tag: "{{ .Values.images.umsUdmRestApi.tag }}"
|
|
pullSecrets:
|
|
{{- range .Values.global.imagePullSecrets }}
|
|
- name: {{ . }}
|
|
{{- end }}
|
|
|
|
ingress:
|
|
enabled: {{ .Values.ingress.enabled }}
|
|
host: "{{ .Values.global.hosts.univentionManagementStack }}.{{ .Values.global.domain }}"
|
|
ingressClassName: "{{ .Values.ingress.ingressClassName }}"
|
|
tls:
|
|
# The TLS configuration is on the "master" Ingress, see "portal-frontend"
|
|
enabled: false
|
|
secretName: ""
|
|
|
|
istio:
|
|
host: "{{ .Values.global.hosts.univentionManagementStack }}.{{ .Values.global.domain }}"
|
|
enabled: {{ .Values.istio.enabled }}
|
|
|
|
resources:
|
|
{{ .Values.resources.umsUdmRestApi | toYaml | nindent 2 }}
|
|
|
|
...
|