## @section Global parameters ## Global Docker image parameters ## Please, note that this will override the image parameters, including dependencies, configured to use the global value ## Current available global Docker image parameters: imageRegistry, imagePullSecrets and storageClass ## ## @param global.imageRegistry Global Docker image registry ## @param global.imagePullSecrets Global Docker registry secret names as an array ## @param global.defaultStorageClass Global default StorageClass for Persistent Volume(s) ## global: imageRegistry: "" ## E.g. ## imagePullSecrets: ## - myRegistryKeySecretName ## imagePullSecrets: [] defaultStorageClass: "" ## Security parameters ## security: ## @param global.security.allowInsecureImages Allows skipping image verification allowInsecureImages: false ## Compatibility adaptations for Kubernetes platforms ## compatibility: ## Compatibility adaptations for Openshift ## openshift: ## @param global.compatibility.openshift.adaptSecurityContext Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) ## adaptSecurityContext: auto ## @section Common parameters ## ## @param kubeVersion Override Kubernetes version ## kubeVersion: "" ## @param nameOverride String to partially override common.names.fullname ## nameOverride: "" ## @param fullnameOverride String to fully override common.names.fullname ## fullnameOverride: "" ## @param commonLabels Labels to add to all deployed objects ## commonLabels: {} ## @param commonAnnotations Annotations to add to all deployed objects ## commonAnnotations: {} ## @param clusterDomain Kubernetes cluster domain name ## clusterDomain: cluster.local ## Enable diagnostic mode in the deployment ## diagnosticMode: ## @param diagnosticMode.enabled Enable diagnostic mode (all probes will be disabled and the command will be overridden) ## enabled: false ## @param diagnosticMode.command Command to override all containers in the deployment ## command: - sleep ## @param diagnosticMode.args Args to override all containers in the deployment ## args: - infinity ## @section Sequin Image parameters ## ## Sequin image ## ref: https://hub.docker.com/r/sequin/sequin/tags/ ## @param image.registry [default: REGISTRY_NAME] Sequin image registry ## @param image.repository [default: REPOSITORY_NAME/sequin] Sequin image repository ## @skip image.tag Sequin image tag (immutable tags are recommended) ## @param image.digest Sequin image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag ## @param image.pullPolicy Sequin image pull policy ## @param image.pullSecrets Sequin image pull secrets ## @param image.debug Enable Sequin image debug mode ## image: registry: docker.io repository: sequin/sequin tag: latest digest: "" ## Specify a imagePullPolicy ## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images ## pullPolicy: IfNotPresent ## Optionally specify an array of imagePullSecrets. ## Secrets must be manually created in the namespace. ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/ ## e.g: ## pullSecrets: ## - myRegistryKeySecretName ## pullSecrets: [] ## Enable debug mode ## debug: false ## @param configuration Specify content for Sequin configuration (basic one auto-generated based on other values otherwise) ## configuration: {} ## @param existingConfigmap The name of an existing ConfigMap with your custom configuration for Sequin ## existingConfigmap: "" ## @param secretKeyBase secret key base ## This value is used as the SECRET_KEY_BASE for encrypting sensitive data. ## IMPORTANT: Do not change this value after deployment, as it would invalidate encrypted data. ## This is a default value and MUST be overridden in production environments. ## To generate a secure secret for production, use: ## openssl rand -base64 64 ## secretKeyBase: "wDPLYus0pvD6qJhKJICO4dauYPXfO/Yl782Zjtpew5qRBDp7CZvbWtQmY0eB13If" ## @param vaultKey Vault encryption key ## This key is used by Sequin to encrypt sensitive values like database passwords and API credentials in storage. ## IMPORTANT: This key must remain consistent — changing it will make previously encrypted data unreadable. ## This is a default value and MUST be overridden in production environments. ## To generate a secure key for production, use: ## openssl rand -base64 32 ## vaultKey: "2Sig69bIpuSm2kv0VQfDekET2qy8qUZGI8v3/h3ASiY=" ## @param existingSecret Name of a secret with the application password ## existingSecret: "" ## @param postgresqlPoolSize The maximum number of concurrent connections that Sequin will maintain to PostgreSQL ## postgresqlPoolSize: 10 ## @param redisPoolSize Number of Redis connections in the pool ## redisPoolSize: 5 ## @param command Override default container command (useful when using custom images) ## command: [] ## @param args Override default container args (useful when using custom images) ## args: [] ## @param extraEnvVars Array with extra environment variables to add to Sequin nodes ## e.g: ## extraEnvVars: ## - name: FOO ## value: "bar" ## extraEnvVars: [] ## @param extraEnvVarsCM Name of existing ConfigMap containing extra env vars for Sequin nodes ## extraEnvVarsCM: "" ## @param extraEnvVarsSecret Name of existing Secret containing extra env vars for Sequin nodes ## extraEnvVarsSecret: "" ## @section Sequin deployment parameters ## ## @param replicaCount Number of Sequin replicas to deploy ## NOTE: ReadWriteMany PVC(s) are required if replicaCount > 1 ## replicaCount: 1 ## @param containerPorts.http Sequin HTTP container port ## containerPorts: http: 7376 ## @param extraContainerPorts Array with extra container ports to add to Sequin containers ## e.g: ## extraContainerPorts: ## - name: metrics ## containerPort: 8376 ## protocol: TCP ## extraContainerPorts: - name: metrics containerPort: 8376 protocol: TCP ## Configure extra options for Sequin containers' liveness and readiness probes ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes ## @param livenessProbe.enabled Enable livenessProbe on Sequin containers ## @param livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe ## @param livenessProbe.periodSeconds Period seconds for livenessProbe ## @param livenessProbe.timeoutSeconds Timeout seconds for livenessProbe ## @param livenessProbe.failureThreshold Failure threshold for livenessProbe ## @param livenessProbe.successThreshold Success threshold for livenessProbe ## livenessProbe: enabled: true initialDelaySeconds: 15 periodSeconds: 10 timeoutSeconds: 5 failureThreshold: 5 successThreshold: 1 ## @param readinessProbe.enabled Enable readinessProbe on Sequin containers ## @param readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe ## @param readinessProbe.periodSeconds Period seconds for readinessProbe ## @param readinessProbe.timeoutSeconds Timeout seconds for readinessProbe ## @param readinessProbe.failureThreshold Failure threshold for readinessProbe ## @param readinessProbe.successThreshold Success threshold for readinessProbe ## readinessProbe: enabled: true initialDelaySeconds: 15 periodSeconds: 10 timeoutSeconds: 5 failureThreshold: 5 successThreshold: 1 ## @param startupProbe.enabled Enable startupProbe on Sequin containers ## @param startupProbe.initialDelaySeconds Initial delay seconds for startupProbe ## @param startupProbe.periodSeconds Period seconds for startupProbe ## @param startupProbe.timeoutSeconds Timeout seconds for startupProbe ## @param startupProbe.failureThreshold Failure threshold for startupProbe ## @param startupProbe.successThreshold Success threshold for startupProbe ## startupProbe: enabled: false initialDelaySeconds: 15 periodSeconds: 10 timeoutSeconds: 5 failureThreshold: 5 successThreshold: 1 ## @param customLivenessProbe Custom livenessProbe that overrides the default one ## customLivenessProbe: {} ## @param customReadinessProbe Custom readinessProbe that overrides the default one ## customReadinessProbe: {} ## @param customStartupProbe Custom startupProbe that overrides the default one ## customStartupProbe: {} ## Sequin resource requests and limits ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/ ## @param resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if resources is set (resources is recommended for production). ## More information: https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15 ## resourcesPreset: "small" ## @param resources Set container requests and limits for different resources like CPU or memory (essential for production workloads) ## Example: ## resources: ## requests: ## cpu: 2 ## memory: 512Mi ## limits: ## cpu: 3 ## memory: 1024Mi ## resources: {} ## Configure Pods Security Context ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod ## @param podSecurityContext.enabled Enabled Sequin pods' Security Context ## @param podSecurityContext.fsGroupChangePolicy Set filesystem group change policy ## @param podSecurityContext.sysctls Set kernel settings using the sysctl interface ## @param podSecurityContext.supplementalGroups Set filesystem extra groups ## @param podSecurityContext.fsGroup Set Sequin pod's Security Context fsGroup ## podSecurityContext: enabled: true fsGroupChangePolicy: Always sysctls: [] supplementalGroups: [] fsGroup: 1001 ## Configure Container Security Context ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod ## @param containerSecurityContext.enabled Enabled containers' Security Context ## @param containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container ## @param containerSecurityContext.runAsUser Set containers' Security Context runAsUser ## @param containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup ## @param containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot ## @param containerSecurityContext.privileged Set container's Security Context privileged ## @param containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem ## @param containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation ## @param containerSecurityContext.capabilities.drop List of capabilities to be dropped ## @param containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile ## containerSecurityContext: enabled: true seLinuxOptions: {} runAsUser: 1001 runAsGroup: 1001 runAsNonRoot: true privileged: false readOnlyRootFilesystem: true allowPrivilegeEscalation: false capabilities: drop: ["ALL"] seccompProfile: type: "RuntimeDefault" ## @param automountServiceAccountToken Mount Service Account token in pod ## automountServiceAccountToken: true ## @param hostAliases Sequin pods host aliases ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/ ## hostAliases: [] ## @param podLabels Extra labels for Sequin pods ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ ## podLabels: {} ## @param podAnnotations Annotations for Sequin pods ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ ## podAnnotations: {} ## @param podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity ## podAffinityPreset: "" ## @param podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity ## podAntiAffinityPreset: soft ## Node affinity preset ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity ## nodeAffinityPreset: ## @param nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` ## type: "" ## @param nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set ## key: "" ## @param nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set ## E.g. ## values: ## - e2e-az1 ## - e2e-az2 ## values: [] ## @param affinity Affinity for Sequin pods assignment ## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity ## NOTE: `podAffinityPreset`, `podAntiAffinityPreset`, and `nodeAffinityPreset` will be ignored when it's set ## affinity: {} ## @param nodeSelector Node labels for Sequin pods assignment ## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/ ## nodeSelector: {} ## @param tolerations Tolerations for Sequin pods assignment ## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/ ## tolerations: [] ## @param updateStrategy.type Sequin deployment strategy type ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy ## updateStrategy: ## StrategyType ## Can be set to RollingUpdate or Recreate ## type: RollingUpdate ## @param priorityClassName Sequin pods' priorityClassName ## priorityClassName: "" ## @param schedulerName Name of the k8s scheduler (other than default) for Sequin pods ## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/ ## schedulerName: "" ## @param lifecycleHooks for the Sequin container(s) to automate configuration before or after startup ## lifecycleHooks: {} ## @param extraVolumes Optionally specify extra list of additional volumes for the Sequin pod(s) ## extraVolumes: [] ## @param extraVolumeMounts Optionally specify extra list of additional volumeMounts for the Sequin container(s) ## extraVolumeMounts: [] ## @param sidecars Add additional sidecar containers to the Sequin pod(s) ## e.g: ## sidecars: ## - name: your-image-name ## image: your-image ## imagePullPolicy: Always ## ports: ## - name: portname ## containerPort: 1234 ## sidecars: [] ## @param initContainers Add additional init containers to the Sequin pod(s) ## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ ## e.g: ## initContainers: ## - name: your-image-name ## image: your-image ## imagePullPolicy: Always ## command: ['sh', '-c', 'echo "hello world"'] ## initContainers: [] ## @section Traffic Exposure Parameters ## ## Sequin service parameters ## service: ## @param service.type Sequin service type ## type: LoadBalancer ## @param service.ports.http Sequin service HTTP port ## @param service.ports.elastic Sequin service ElasticSearch port ## ports: http: 80 ## Node ports to expose ## @param service.nodePorts.http Node port for HTTP ## @param service.nodePorts.elastic Node port for ElasticSearch ## NOTE: choose port between <30000-32767> ## nodePorts: http: "" ## @param service.clusterIP Sequin service Cluster IP ## e.g.: ## clusterIP: None ## clusterIP: "" ## @param service.loadBalancerIP Sequin service Load Balancer IP ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-loadbalancer ## loadBalancerIP: "" ## @param service.loadBalancerSourceRanges Sequin service Load Balancer sources ## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service ## e.g: ## loadBalancerSourceRanges: ## - 10.10.10.0/24 ## loadBalancerSourceRanges: [] ## @param service.externalTrafficPolicy Sequin service external traffic policy ## ref https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip ## externalTrafficPolicy: Cluster ## @param service.annotations Additional custom annotations for Sequin service ## annotations: {} ## @param service.extraPorts Extra ports to expose in Sequin service (normally used with the `sidecars` value) ## extraPorts: [] ## @param service.sessionAffinity Session Affinity for Kubernetes service, can be "None" or "ClientIP" ## If "ClientIP", consecutive client requests will be directed to the same Pod ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies ## sessionAffinity: None ## @param service.sessionAffinityConfig Additional settings for the sessionAffinity ## sessionAffinityConfig: ## clientIP: ## timeoutSeconds: 300 ## sessionAffinityConfig: {} ## @param service.labels Additional labels for the Sequin service ## labels: {} ## Sequin ingress parameters ## ref: https://kubernetes.io/docs/concepts/services-networking/ingress/ ## ingress: ## @param ingress.enabled Enable ingress record generation for Sequin ## enabled: false ## @param ingress.pathType Ingress path type ## pathType: ImplementationSpecific ## @param ingress.apiVersion Force Ingress API version (automatically detected if not set) ## apiVersion: "" ## @param ingress.ingressClassName IngressClass that will be be used to implement the Ingress (Kubernetes 1.18+) ## This is supported in Kubernetes 1.18+ and required if you have more than one IngressClass marked as the default for your cluster. ## ref: https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/ ## ingressClassName: "" ## @param ingress.hostname Default host for the ingress record ## hostname: sequin.local ## @param ingress.path Default path for the ingress record ## NOTE: You may need to set this to '/*' in order to use this with ALB ingress controllers ## path: / ## @param ingress.annotations Additional annotations for the Ingress resource. To enable certificate autogeneration, place here your cert-manager annotations. ## Use this parameter to set the required annotations for cert-manager, see ## ref: https://cert-manager.io/docs/usage/ingress/#supported-annotations ## e.g: ## annotations: ## kubernetes.io/ingress.class: nginx ## cert-manager.io/cluster-issuer: cluster-issuer-name ## annotations: {} ## @param ingress.labels Additional labels for the Ingress resource. ## e.g: ## labels: ## app: sequin ## labels: {} ## @param ingress.tls Enable TLS configuration for the host defined at `ingress.hostname` parameter ## TLS certificates will be retrieved from a TLS secret with name: `{{- printf "%s-tls" .Values.ingress.hostname }}` ## You can: ## - Use the `ingress.secrets` parameter to create this TLS secret ## - Rely on cert-manager to create it by setting the corresponding annotations ## - Rely on Helm to create self-signed certificates by setting `ingress.selfSigned=true` ## tls: false ## @param ingress.selfSigned Create a TLS secret for this ingress record using self-signed certificates generated by Helm ## selfSigned: false ## @param ingress.extraHosts An array with additional hostname(s) to be covered with the ingress record ## e.g: ## extraHosts: ## - name: sequin.local ## path: / ## extraHosts: [] ## @param ingress.extraPaths An array with additional arbitrary paths that may need to be added to the ingress under the main host ## e.g: ## extraPaths: ## - path: /* ## backend: ## serviceName: ssl-redirect ## servicePort: use-annotation ## extraPaths: [] ## @param ingress.extraTls TLS configuration for additional hostname(s) to be covered with this ingress record ## ref: https://kubernetes.io/docs/concepts/services-networking/ingress/#tls ## e.g: ## extraTls: ## - hosts: ## - sequin.local ## secretName: sequin.local-tls ## extraTls: [] ## @param ingress.secrets Custom TLS certificates as secrets ## NOTE: 'key' and 'certificate' are expected in PEM format ## NOTE: 'name' should line up with a 'secretName' set further up ## If it is not set and you're using cert-manager, this is unneeded, as it will create a secret for you with valid certificates ## If it is not set and you're NOT using cert-manager either, self-signed certificates will be created valid for 365 days ## It is also possible to create and manage the certificates outside of this helm chart ## Please see README.md for more information ## e.g: ## secrets: ## - name: sequin.local-tls ## key: |- ## -----BEGIN RSA PRIVATE KEY----- ## ... ## -----END RSA PRIVATE KEY----- ## certificate: |- ## -----BEGIN CERTIFICATE----- ## ... ## -----END CERTIFICATE----- ## secrets: [] ## @param ingress.extraRules Additional rules to be covered with this ingress record ## ref: https://kubernetes.io/docs/concepts/services-networking/ingress/#ingress-rules ## e.g: ## extraRules: ## - host: sequin.local ## http: ## path: / ## backend: ## service: ## name: sequin-svc ## port: ## name: http ## extraRules: [] ## RBAC configuration ## rbac: ## @param rbac.create Specifies whether RBAC resources should be created ## create: false ## ServiceAccount configuration ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ ## @param serviceAccount.create Specifies whether a ServiceAccount should be created ## @param serviceAccount.name Name of the service account to use. If not set and create is true, a name is generated using the fullname template. ## @param serviceAccount.automountServiceAccountToken Automount service account token for the server service account ## @param serviceAccount.annotations Annotations for service account. Evaluated as a template. Only used if `create` is `true`. ## serviceAccount: create: true name: "" automountServiceAccountToken: false annotations: {} ## PostgreSQL chart configuration ## https://github.com/bitnami/charts/blob/main/bitnami/postgresql/values.yaml ## postgresql: ## @param postgresql.enabled Deploy PostgreSQL subchart ## enabled: true ## @param postgresql.nameOverride Override name of the PostgreSQL chart ## nameOverride: "" auth: ## @param postgresql.auth.existingSecret Existing secret containing the password of the PostgreSQL chart ## existingSecret: "" ## @param postgresql.auth.password Password for the postgres user of the PostgreSQL chart (auto-generated if not set) ## ref: https://hub.docker.com/_/postgres/ ## password: "" ## @param postgresql.auth.username Username to create when deploying the PostgreSQL chart ## username: sequin ## @param postgresql.auth.database Database to create when deploying the PostgreSQL chart ## database: sequin ## PostgreSQL Primary parameters ## primary: ## PostgreSQL Primary service configuration ## service: ## @param postgresql.primary.service.ports.postgresql PostgreSQL service port ## ports: postgresql: 5432 ## PostgreSQL Primary persistence configuration ## persistence: ## @param postgresql.primary.persistence.enabled Enable PostgreSQL Primary data persistence using PVC ## enabled: true ## @param postgresql.primary.persistence.existingClaim Name of an existing PVC to use ## existingClaim: "" ## @param postgresql.primary.persistence.storageClass PVC Storage Class for PostgreSQL Primary data volume ## If defined, storageClassName: ## If set to "-", storageClassName: "", which disables dynamic provisioning ## If undefined (the default) or set to null, no storageClassName spec is ## set, choosing the default provisioner. (gp2 on AWS, standard on ## GKE, AWS & OpenStack) ## storageClass: "" ## @param postgresql.primary.persistence.accessMode PVC Access Mode for PostgreSQL volume ## accessMode: ReadWriteOnce ## @param postgresql.primary.persistence.size PVC Storage Request for PostgreSQL volume ## size: 8Gi ## @section External Database settings ## ## External Database Configuration ## All of these values are only used when postgresql.enabled is set to false ## externalDatabase: ## @param externalDatabase.host Host of an external PostgreSQL instance to connect (only if postgresql.enabled=false) ## host: "" ## @param externalDatabase.user User of an external PostgreSQL instance to connect (only if postgresql.enabled=false) ## user: postgres ## @param externalDatabase.password Password of an external PostgreSQL instance to connect (only if postgresql.enabled=false) ## password: "" ## @param externalDatabase.existingSecret Secret containing the password of an external PostgreSQL instance to connect (only if postgresql.enabled=false) ## Name of an existing secret resource containing the DB password in a 'password' key ## existingSecret: "" ## @param externalDatabase.database Database inside an external PostgreSQL to connect (only if postgresql.enabled=false) ## database: sequin ## @param externalDatabase.port Port of an external PostgreSQL to connect (only if postgresql.enabled=false) ## port: 5432 ## Redis® chart configuration ## ref: https://github.com/bitnami/charts/blob/main/bitnami/redis/values.yaml ## @param redis.enabled Switch to enable or disable the Redis® helm ## @param redis.auth.enabled Enable password authentication ## @param redis.auth.password Redis® password ## @param redis.auth.existingSecret The name of an existing secret with Redis® credentials ## @param redis.architecture Redis® architecture. Allowed values: `standalone` or `replication` ## redis: enabled: true auth: enabled: false ## Redis® password (both master and slave). Defaults to a random 10-character alphanumeric string if not set and auth.enabled is true. ## It should always be set using the password value or in the existingSecret to avoid issues ## with Discourse. ## The password value is ignored if existingSecret is set password: "" existingSecret: "" architecture: standalone master: ## Redis® master resource requests and limits ## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/ ## @param redis.master.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if master.resources is set (master.resources is recommended for production). ## More information: https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15 ## resourcesPreset: "nano" ## @param redis.master.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads) ## Example: ## resources: ## requests: ## cpu: 2 ## memory: 512Mi ## limits: ## cpu: 3 ## memory: 1024Mi ## resources: {} serviceBindings: enabled: true ## External Redis® configuration ## All of these values are only used when redis.enabled is set to false ## @param externalRedis.host Redis® host ## @param externalRedis.port Redis® port number ## @param externalRedis.password Redis® password ## @param externalRedis.existingSecret Name of an existing secret resource containing the Redis&trade credentials ## externalRedis: host: localhost port: 6379 password: "" existingSecret: "" ## Prometheus Exporter / Metrics ## metrics: ## @param metrics.enabled Start a sidecar prometheus exporter to expose sequin® metrics ## enabled: false service: ## @param metrics.service.enabled Create Service resource(s) for scraping metrics using PrometheusOperator ServiceMonitor, can be disabled when using a PodMonitor ## enabled: true ## @param metrics.service.type sequin® exporter service type ## type: ClusterIP ## @param metrics.service.ports.http sequin® exporter service port ## ports: http: 8376 ## @param metrics.service.externalTrafficPolicy sequin® exporter service external traffic policy ## ref: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip ## externalTrafficPolicy: Cluster ## @param metrics.service.extraPorts Extra ports to expose (normally used with the `sidecar` value) ## extraPorts: [] ## @param metrics.service.loadBalancerIP sequin® exporter service Load Balancer IP ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer ## loadBalancerIP: "" ## @param metrics.service.loadBalancerClass exporter service Load Balancer class if service type is `LoadBalancer` (optional, cloud specific) ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-loadbalancer ## loadBalancerClass: "" ## @param metrics.service.loadBalancerSourceRanges sequin® exporter service Load Balancer sources ## https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service ## e.g. ## loadBalancerSourceRanges: ## - 10.10.10.0/24 ## loadBalancerSourceRanges: [] ## @param metrics.service.annotations Additional custom annotations for sequin® exporter service ## annotations: {} ## @param metrics.service.clusterIP sequin® exporter service Cluster IP ## clusterIP: "" ## Prometheus Service Monitor ## ref: https://github.com/coreos/prometheus-operator ## https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint ## serviceMonitor: ## @param metrics.serviceMonitor.port the service port to scrape metrics from ## port: http-metrics ## @param metrics.serviceMonitor.enabled Create ServiceMonitor resource(s) for scraping metrics using PrometheusOperator ## enabled: true ## @param metrics.serviceMonitor.namespace The namespace in which the ServiceMonitor will be created ## namespace: "" ## @param metrics.serviceMonitor.interval The interval at which metrics should be scraped ## interval: 30s ## @param metrics.serviceMonitor.scrapeTimeout The timeout after which the scrape is ended ## scrapeTimeout: "" ## @param metrics.serviceMonitor.relabelings Metrics RelabelConfigs to apply to samples before scraping. ## relabelings: [] ## @skip metrics.serviceMonitor.relabellings DEPRECATED: Use `metrics.serviceMonitor.relabelings` instead. ## relabellings: [] ## @param metrics.serviceMonitor.metricRelabelings Metrics RelabelConfigs to apply to samples before ingestion. ## metricRelabelings: [] ## @param metrics.serviceMonitor.honorLabels Specify honorLabels parameter to add the scrape endpoint ## honorLabels: false ## @param metrics.serviceMonitor.additionalLabels Additional labels that can be used so ServiceMonitor resource(s) can be discovered by Prometheus ## additionalLabels: {} ## @param metrics.serviceMonitor.podTargetLabels Labels from the Kubernetes pod to be transferred to the created metrics ## podTargetLabels: [] ## @param metrics.serviceMonitor.sampleLimit Limit of how many samples should be scraped from every Pod ## sampleLimit: false ## @param metrics.serviceMonitor.targetLimit Limit of how many targets should be scraped ## targetLimit: false ## @param metrics.serviceMonitor.additionalEndpoints Additional endpoints to scrape (e.g sentinel) ## additionalEndpoints: [] # uncomment in order to scrape sentinel metrics, also to in order distinguish between Sentinel and sequin container metrics # add metricRelabelings with label like app=sequin to main sequin pod-monitor port # - interval: "30s" # path: "/scrape" # port: "http-metrics" # params: # target: ["localhost:26379"] # metricRelabelings: # - targetLabel: "app" # replacement: "sentinel" ## Prometheus Pod Monitor ## ref: https://github.com/coreos/prometheus-operator ## https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#podmonitor ## podMonitor: ## @param metrics.podMonitor.port the pod port to scrape metrics from ## port: metrics ## @param metrics.podMonitor.enabled Create PodMonitor resource(s) for scraping metrics using PrometheusOperator ## enabled: false ## @param metrics.podMonitor.namespace The namespace in which the PodMonitor will be created ## namespace: "" ## @param metrics.podMonitor.interval The interval at which metrics should be scraped ## interval: 30s ## @param metrics.podMonitor.scrapeTimeout The timeout after which the scrape is ended ## scrapeTimeout: "" ## @param metrics.podMonitor.relabelings Metrics RelabelConfigs to apply to samples before scraping. ## relabelings: [] ## @skip metrics.podMonitor.relabellings DEPRECATED: Use `metrics.podMonitor.relabelings` instead. ## relabellings: [] ## @param metrics.podMonitor.metricRelabelings Metrics RelabelConfigs to apply to samples before ingestion. ## metricRelabelings: [] # - targetLabel: "app" # replacement: "sequin" ## @param metrics.podMonitor.honorLabels Specify honorLabels parameter to add the scrape endpoint ## honorLabels: false ## @param metrics.podMonitor.additionalLabels Additional labels that can be used so PodMonitor resource(s) can be discovered by Prometheus ## additionalLabels: {} ## @param metrics.podMonitor.podTargetLabels Labels from the Kubernetes pod to be transferred to the created metrics ## podTargetLabels: [] ## @param metrics.podMonitor.sampleLimit Limit of how many samples should be scraped from every Pod ## sampleLimit: false ## @param metrics.podMonitor.targetLimit Limit of how many targets should be scraped ## targetLimit: false ## @param metrics.podMonitor.additionalEndpoints Additional endpoints to scrape (e.g sentinel) ## additionalEndpoints: [] # - interval: "30s" # path: "/scrape" # port: "metrics" # params: # target: ["localhost:26379"] # metricRelabelings: # - targetLabel: "app" # replacement: "sentinel" ## Custom PrometheusRule to be defined ## ref: https://github.com/coreos/prometheus-operator#customresourcedefinitions ## prometheusRule: ## @param metrics.prometheusRule.enabled Create a custom prometheusRule Resource for scraping metrics using PrometheusOperator ## enabled: false ## @param metrics.prometheusRule.namespace The namespace in which the prometheusRule will be created ## namespace: "" ## @param metrics.prometheusRule.additionalLabels Additional labels for the prometheusRule ## additionalLabels: {} ## @param metrics.prometheusRule.rules Custom Prometheus rules ## e.g: # rules: # - alert: seuqinDown # expr: seuqin_up{service="{{ template "common.names.fullname" . }}-metrics"} == 0 # for: 2m # labels: # severity: error # annotations: # summary: seuqin® instance {{ "{{ $labels.instance }}" }} down # description: seuqin® instance {{ "{{ $labels.instance }}" }} is down rules: []