-
Notifications
You must be signed in to change notification settings - Fork 8.9k
/
values.yaml
1390 lines (1360 loc) · 56.4 KB
/
values.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
## @section Global parameters
## Global Docker image parameters
## Please, note that this will override the image parameters, including dependencies, configured to use the global value
## Current available global Docker image parameters: imageRegistry, imagePullSecrets and storageClass
## @param global.imageRegistry Global Docker image registry
## @param global.imagePullSecrets Global Docker registry secret names as an array
## @param global.storageClass Global StorageClass for Persistent Volume(s)
##
global:
imageRegistry: ""
## E.g.
## imagePullSecrets:
## - myRegistryKeySecretName
##
imagePullSecrets: []
storageClass: ""
## @section Common parameters
## @param kubeVersion Override Kubernetes version
##
kubeVersion: ""
## @param nameOverride String to partially override common.names.fullname (will maintain the release name)
##
nameOverride: ""
## @param fullnameOverride String to fully override common.names.fullname
##
fullnameOverride: ""
## @param commonLabels Labels to add to all deployed objects
##
commonLabels: {}
## @param commonAnnotations Annotations to add to all deployed objects
##
commonAnnotations: {}
## @param extraDeploy Array of extra objects to deploy with the release
##
extraDeploy: []
## @section Hub deployment parameters
## Hub deployment parameters
##
hub:
image:
## @param hub.image.registry Hub image registry
##
registry: docker.io
## @param hub.image.repository Hub image repository
##
repository: bitnami/jupyterhub
## @param hub.image.tag Hub image tag (immutabe tags are recommended)
##
tag: 1.4.2-debian-10-r65
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
##
## @param hub.image.pullPolicy Hub image pull policy
##
pullPolicy: IfNotPresent
## Optionally specify an array of imagePullSecrets.
## Secrets must be manually created in the namespace.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
## e.g:
## pullSecrets:
## - myRegistryKeySecretName
## @param hub.image.pullSecrets Hub image pull secrets
##
pullSecrets: []
## Configure extra options for startup probes
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-startup-readiness-probes/#configure-probes
## @param hub.startupProbe.enabled Enable startupProbe
## @param hub.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
## @param hub.startupProbe.periodSeconds Period seconds for startupProbe
## @param hub.startupProbe.timeoutSeconds Timeout seconds for startupProbe
## @param hub.startupProbe.failureThreshold Failure threshold for startupProbe
## @param hub.startupProbe.successThreshold Success threshold for startupProbe
##
startupProbe:
enabled: true
initialDelaySeconds: 10
periodSeconds: 10
failureThreshold: 30
timeoutSeconds: 3
successThreshold: 1
## Configure extra options for liveness and readiness probes
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes
## @param hub.livenessProbe.enabled Enable livenessProbe
## @param hub.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
## @param hub.livenessProbe.periodSeconds Period seconds for livenessProbe
## @param hub.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
## @param hub.livenessProbe.failureThreshold Failure threshold for livenessProbe
## @param hub.livenessProbe.successThreshold Success threshold for livenessProbe
##
livenessProbe:
enabled: true
initialDelaySeconds: 10
periodSeconds: 10
failureThreshold: 30
timeoutSeconds: 3
successThreshold: 1
## @param hub.readinessProbe.enabled Enable readinessProbe
## @param hub.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
## @param hub.readinessProbe.periodSeconds Period seconds for readinessProbe
## @param hub.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
## @param hub.readinessProbe.failureThreshold Failure threshold for readinessProbe
## @param hub.readinessProbe.successThreshold Success threshold for readinessProbe
##
readinessProbe:
enabled: true
initialDelaySeconds: 10
periodSeconds: 10
failureThreshold: 30
timeoutSeconds: 3
successThreshold: 1
## @param hub.baseUrl Hub base URL
##
baseUrl: /
## @param hub.adminUser Hub Dummy authenticator admin user
##
adminUser: user
## @param hub.password Hub Dummy authenticator password
##
password: ""
## Configuration file passed to the hub. This will be used by the jupyterhub_config.py file
## This configuration uses the values for the `singleuser` section. In the upstream chart the
## values.yaml file is mounted in the hub container. This is chart, we tried to separate both
## configuration so we could follow the Bitnami value standards
## @param hub.configuration [string] Hub configuration file (to be used by jupyterhub_config.py)
##
configuration: |
Chart:
Name: {{ .Chart.Name }}
Version: {{ .Chart.Version }}
Release:
Name: {{ .Release.Name }}
Namespace: {{ .Release.Namespace }}
Service: {{ .Release.Service }}
hub:
config:
JupyterHub:
admin_access: true
authenticator_class: dummy
cookie_secret_file: /tmp/jupyterhub_cookie_secret
DummyAuthenticator:
{{- if .Values.hub.password }}
password: {{ .Values.hub.password | quote }}
{{- else }}
password: {{ randAlphaNum 10 | quote }}
{{- end }}
Authenticator:
admin_users:
- {{ .Values.hub.adminUser }}
cookieSecret:
concurrentSpawnLimit: 64
consecutiveFailureLimit: 5
activeServerLimit:
db:
type: postgres
url: postgresql://{{ ternary .Values.postgresql.postgresqlUsername .Values.externalDatabase.user .Values.postgresql.enabled }}@{{ ternary (include "jupyterhub.postgresql.fullname" .) .Values.externalDatabase.host .Values.postgresql.enabled }}:{{ ternary "5432" .Values.externalDatabase.port .Values.postgresql.enabled }}/{{ ternary .Values.postgresql.postgresqlDatabase .Values.externalDatabase.database .Values.postgresql.enabled }}
services: {}
allowNamedServers: false
namedServerLimitPerUser:
authenticatePrometheus:
redirectToServer:
shutdownOnLogout:
singleuser:
podNameTemplate: {{ include "common.names.fullname" . }}-jupyter-{username}
{{- if .Values.singleuser.tolerations }}
extraTolerations: {{- include "common.tplvalues.render" ( dict "value" .Values.singleuser.tolerations "context" $) | nindent 4 }}
{{- end }}
{{- if .Values.singleuser.nodeSelector }}
nodeSelector: {{- include "common.tplvalues.render" ( dict "value" .Values.singleuser.nodeSelector "context" $) | nindent 4 }}
{{- end }}
networkTools:
image:
name: {{ include "jupyterhub.hubconfiguration.imageEntry" ( dict "imageRoot" .Values.auxiliaryImage "global" $) }}
tag: {{ .Values.auxiliaryImage.tag }}
pullPolicy: {{ .Values.auxiliaryImage.pullPolicy }}
pullSecrets: {{- include "jupyterhub.imagePullSecrets" . | nindent 8 }}
cloudMetadata:
blockWithIptables: false
events: true
extraAnnotations:
{{- if .Values.commonAnnotations }}
{{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.singleuser.podAnnotations }}
{{- include "common.tplvalues.render" ( dict "value" .Values.singleuser.podAnnotations "context" $ ) | nindent 4 }}
{{- end }}
extraLabels:
hub.jupyter.org/network-access-hub: "true"
app.kubernetes.io/component: singleuser
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.commonLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.singleuser.podLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.singleuser.extraEnvVars }}
extraEnv: {{- include "common.tplvalues.render" ( dict "value" .Values.singleuser.extraEnvVars "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.singleuser.lifecycleHooks }}
lifecycleHooks: {{- include "common.tplvalues.render" ( dict "value" .Values.singleuser.lifecycleHooks "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.singleuser.initContainers }}
initContainers: {{- include "common.tplvalues.render" ( dict "value" .Values.singleuser.initContainers "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.singleuser.sidecars }}
extraContainers: {{- include "common.tplvalues.render" ( dict "value" .Values.singleuser.sidecars "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.singleuser.containerSecurityContext.enabled }}
uid: {{ .Values.singleuser.containerSecurityContext.runAsUser }}
{{- end }}
{{- if .Values.singleuser.podSecurityContext.enabled }}
fsGid: {{ .Values.singleuser.podSecurityContext.fsGroup }}
{{- end }}
serviceAccountName: {{ template "jupyterhub.singleuserServiceAccountName" . }}
storage:
{{- if .Values.singleuser.persistence.enabled }}
type: dynamic
{{- else }}
type: none
{{- end }}
extraLabels:
app.kubernetes.io/component: singleuser
{{- include "common.labels.standard" . | nindent 6 }}
{{- if .Values.singleuser.extraVolumes }}
extraVolumes: {{- include "common.tplvalues.render" ( dict "value" .Values.singleuser.extraVolumes "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.singleuser.extraVolumeMounts }}
extraVolumeMounts: {{- include "common.tplvalues.render" ( dict "value" .Values.singleuser.extraVolumeMounts "context" $ ) | nindent 4 }}
{{- end }}
capacity: {{ .Values.singleuser.persistence.size }}
homeMountPath: {{ .Values.singleuser.notebookDir }}
dynamic:
{{ include "jupyterhub.storage.class" (dict "persistence" .Values.singleuser.persistence "global" .Values.global) }}
pvcNameTemplate: {{ include "common.names.fullname" . }}-claim-{username}{servername}
volumeNameTemplate: {{ include "common.names.fullname" . }}-volume-{username}{servername}
storageAccessModes: {{- include "common.tplvalues.render" ( dict "value" .Values.singleuser.persistence.accessModes "context" $ ) | nindent 8 }}
image:
name: {{ include "jupyterhub.hubconfiguration.imageEntry" ( dict "imageRoot" .Values.singleuser.image "global" $) }}
tag: {{ .Values.singleuser.image.tag }}
pullPolicy: {{ .Values.singleuser.image.pullPolicy }}
pullSecrets: {{- include "jupyterhub.imagePullSecrets" . | nindent 8 }}
startTimeout: 300
{{- /* We need to replace the Kubernetes memory/cpu terminology (e.g. 10Gi, 10Mi) with one compatible with Python (10G, 10M) */}}
cpu:
limit: {{ regexReplaceAll "([A-Za-z])i" (default "" .Values.singleuser.resources.limits.cpu) "${1}"}}
guarantee: {{ regexReplaceAll "([A-Za-z])i" (default "" .Values.singleuser.resources.requests.cpu) "${1}" }}
memory:
limit: {{ regexReplaceAll "([A-Za-z])i" (default "" .Values.singleuser.resources.limits.memory) "${1}" }}
guarantee: {{ regexReplaceAll "([A-Za-z])i" (default "" .Values.singleuser.resources.requests.memory) "${1}" }}
{{- if .Values.singleuser.command }}
cmd: {{- include "common.tplvalues.render" (dict "value" .Values.singleuser.command "context" $) | nindent 12 }}
{{- else }}
cmd: jupyterhub-singleuser
{{- end }}
defaultUrl:
cull:
enabled: true
users: false
removeNamedServers: false
timeout: 3600
every: 600
concurrency: 10
maxAge: 0
## @param hub.containerPort Hub container port
##
containerPort: 8081
## @param hub.existingConfigmap Configmap with Hub init scripts (replaces the scripts in templates/hub/configmap.yml)
##
existingConfigmap: ""
## @param hub.existingSecret Secret with hub configuration (replaces the hub.configuration value) and proxy token
##
existingSecret: ""
## @param hub.command Override Hub default command
##
command: []
## @param hub.args Override Hub default args
##
args: []
pdb:
## @param hub.pdb.create Deploy Hub PodDisruptionBudget
##
create: false
## @param hub.pdb.minAvailable Set minimum available hub instances
##
minAvailable: ""
## @param hub.pdb.maxUnavailable Set maximum available hub instances
##
maxUnavailable: ""
## @param hub.priorityClassName Hub pod priority class name
##
priorityClassName: ""
## @param hub.hostAliases Add deployment host aliases
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
##
hostAliases: []
## hub resource requests and limits
## ref: http://kubernetes.io/docs/user-guide/compute-resources/
## We usually recommend not to specify default resources and to leave this as a conscious
## choice for the user. This also increases chances charts run on environments with little
## resources, such as Minikube. If you do want to specify resources, uncomment the following
## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
## @param hub.resources.limits The resources limits for the container
## @param hub.resources.requests The requested resources for the container
##
resources:
## Example:
## limits:
## cpu: 200m
## memory: 256Mi
limits: {}
## Examples:
## requests:
## cpu: 200m
## memory: 10Mi
requests: {}
## hub containers' Security Context
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param hub.containerSecurityContext.enabled Enabled Hub containers' Security Context
## @param hub.containerSecurityContext.runAsUser Set Hub container's Security Context runAsUser
## @param hub.containerSecurityContext.runAsNonRoot Set Hub container's Security Context runAsNonRoot
##
containerSecurityContext:
enabled: true
runAsUser: 1000
runAsNonRoot: true
## hub pods' Security Context
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
## @param hub.podSecurityContext.enabled Enabled Hub pods' Security Context
## @param hub.podSecurityContext.fsGroup Set Hub pod's Security Context fsGroup
##
podSecurityContext:
enabled: true
fsGroup: 1001
## Pod affinity preset
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
## Allowed values: soft, hard
## @param hub.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
##
podAffinityPreset: ""
## Pod anti-affinity preset
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
## @param hub.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
##
podAntiAffinityPreset: soft
## Node affinity preset
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
## @param hub.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
## @param hub.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set
## @param hub.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set
##
nodeAffinityPreset:
type: ""
## E.g.
## key: "kubernetes.io/e2e-az-name"
##
key: ""
## E.g.
## values:
## - e2e-az1
## - e2e-az2
##
values: []
## @param hub.affinity Affinity for pod assignment.
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
##
affinity: {}
## @param hub.nodeSelector Node labels for pod assignment.
## ref: https://kubernetes.io/docs/user-guide/node-selection/
##
nodeSelector: {}
## @param hub.tolerations Tolerations for pod assignment.
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
##
tolerations: []
## @param hub.podLabels Pod extra labels
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
##
podLabels: {}
## @param hub.podAnnotations Annotations for server pods.
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
##
podAnnotations: {}
## @param hub.lifecycleHooks LifecycleHooks for the hub container to automate configuration before or after startup
##
lifecycleHooks: {}
## @param hub.customStartupProbe Override default startup probe
##
customStartupProbe: {}
## @param hub.customLivenessProbe Override default liveness probe
##
customLivenessProbe: {}
## @param hub.customReadinessProbe Override default readiness probe
##
customReadinessProbe: {}
## @param hub.updateStrategy.type Update strategy - only really applicable for deployments with RWO PVs attached
## If replicas = 1, an update can get "stuck", as the previous pod remains attached to the
## PV, and the "incoming" pod can never start. Changing the strategy to "Recreate" will
## terminate the single previous pod, so that the new, incoming pod can attach to the PV
##
updateStrategy:
type: RollingUpdate
## @param hub.extraEnvVars Add extra environment variables to the Hub container
## Example:
## extraEnvVars:
## - name: FOO
## value: "bar"
##
extraEnvVars: []
## @param hub.extraEnvVarsCM Name of existing ConfigMap containing extra env vars
##
extraEnvVarsCM: ""
## @param hub.extraEnvVarsSecret Name of existing Secret containing extra env vars
##
extraEnvVarsSecret: ""
## @param hub.extraVolumes Optionally specify extra list of additional volumes for Hub pods
##
extraVolumes: []
## @param hub.extraVolumeMounts Optionally specify extra list of additional volumeMounts for Hub container(s)
##
extraVolumeMounts: []
## @param hub.initContainers Add additional init containers to the Hub pods
## Example:
## initContainers:
## - name: your-image-name
## image: your-image
## imagePullPolicy: Always
## ports:
## - name: portname
## containerPort: 1234
##
initContainers: []
## @param hub.sidecars Add additional sidecar containers to the Hub pod
## Example:
## sidecars:
## - name: your-image-name
## image: your-image
## imagePullPolicy: Always
## ports:
## - name: portname
## containerPort: 1234
##
sidecars: []
## @section Hub RBAC parameters
## ServiceAccount parameters
##
serviceAccount:
## @param hub.serviceAccount.create Specifies whether a ServiceAccount should be created
##
create: true
## @param hub.serviceAccount.name Override Hub service account name
## If not set and create is true, a name is generated using the fullname template
##
name: ""
## RBAC resources
##
rbac:
## @param hub.rbac.create Specifies whether RBAC resources should be created
##
create: true
## @section Hub Traffic Exposure Parameters
## Network policy
##
networkPolicy:
## @param hub.networkPolicy.enabled Deploy Hub network policies
##
enabled: true
## @param hub.networkPolicy.allowInterspaceAccess Allow communication between pods in different namespaces
##
allowInterspaceAccess: true
## @param hub.networkPolicy.extraIngress Add extra ingress rules to the NetworkPolicy
##
extraIngress: ""
## @param hub.networkPolicy.extraEgress [string] Add extra ingress rules to the NetworkPolicy
##
extraEgress: |
## Hub --> Any IP:PORT
##
- to:
service:
## @param hub.service.type Hub service type
##
type: ClusterIP
## @param hub.service.port Hub service HTTP port
port: 8081
## @param hub.service.loadBalancerIP Hub service LoadBalancer IP (optional, cloud specific)
## ref: http://kubernetes.io/docs/user-guide/services/#type-loadbalancer
##
loadBalancerIP: ""
## @param hub.service.loadBalancerSourceRanges loadBalancerIP source ranges for the Service
##
loadBalancerSourceRanges: []
## @param hub.service.nodePorts.http NodePort for the HTTP endpoint
## nodePorts:
## http: <to set explicitly, choose port between 30000-32767>
## https: <to set explicitly, choose port between 30000-32767>
##
nodePorts:
http: ""
## @param hub.service.externalTrafficPolicy External traffic policy for the service
## Enable client source IP preservation
## ref http://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
##
externalTrafficPolicy: Cluster
## @section Proxy deployment parameters
## Proxy deployment parameters
##
proxy:
## @param proxy.image.registry Proxy image registry
## @param proxy.image.repository Proxy image repository
## @param proxy.image.tag Proxy image tag (immutable tags are recommended)
## @param proxy.image.pullPolicy Proxy image pull policy
## @param proxy.image.pullSecrets Proxy image pull secrets
## @param proxy.image.debug Activate verbose output
##
image:
registry: docker.io
repository: bitnami/configurable-http-proxy
tag: 4.5.0-debian-10-r65
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
##
pullPolicy: IfNotPresent
## Optionally specify an array of imagePullSecrets.
## Secrets must be manually created in the namespace.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
## e.g:
## pullSecrets:
## - myRegistryKeySecretName
##
pullSecrets: []
## Enable debug mode
##
debug: false
## Configure extra options for startup probes
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-startup-readiness-probes/#configure-probes
## @param proxy.startupProbe.enabled Enable startupProbe
## @param proxy.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
## @param proxy.startupProbe.periodSeconds Period seconds for startupProbe
## @param proxy.startupProbe.timeoutSeconds Timeout seconds for startupProbe
## @param proxy.startupProbe.failureThreshold Failure threshold for startupProbe
## @param proxy.startupProbe.successThreshold Success threshold for startupProbe
##
startupProbe:
enabled: true
initialDelaySeconds: 10
periodSeconds: 10
failureThreshold: 30
timeoutSeconds: 3
successThreshold: 1
## Configure extra options for liveness and readiness probes
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes
## @param proxy.livenessProbe.enabled Enable livenessProbe
## @param proxy.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
## @param proxy.livenessProbe.periodSeconds Period seconds for livenessProbe
## @param proxy.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
## @param proxy.livenessProbe.failureThreshold Failure threshold for livenessProbe
## @param proxy.livenessProbe.successThreshold Success threshold for livenessProbe
##
livenessProbe:
enabled: true
initialDelaySeconds: 10
periodSeconds: 10
failureThreshold: 30
timeoutSeconds: 3
successThreshold: 1
## @param proxy.readinessProbe.enabled Enable readinessProbe
## @param proxy.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
## @param proxy.readinessProbe.periodSeconds Period seconds for readinessProbe
## @param proxy.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
## @param proxy.readinessProbe.failureThreshold Failure threshold for readinessProbe
## @param proxy.readinessProbe.successThreshold Success threshold for readinessProbe
##
readinessProbe:
enabled: true
initialDelaySeconds: 10
periodSeconds: 10
failureThreshold: 30
timeoutSeconds: 3
successThreshold: 1
## @param proxy.command Override Proxy default command
##
command: []
## @param proxy.args Override Proxy default args
##
args: []
## @param proxy.secretToken Proxy secret token (used for communication with the Hub)
##
secretToken: ""
## Deployment pod host aliases
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
## @param proxy.hostAliases Add deployment host aliases
##
hostAliases: []
## PodDisruptionBudget settings
##
pdb:
## @param proxy.pdb.create Deploy Proxy PodDisruptionBudget
##
create: false
## @param proxy.pdb.minAvailable Set minimum available proxy instances
##
minAvailable: ""
## @param proxy.pdb.maxUnavailable Set maximum available proxy instances
##
maxUnavailable: ""
## Container ports
##
containerPort:
## @param proxy.containerPort.api Proxy api container port
##
api: 8001
## @param proxy.containerPort.http Proxy http container port
##
http: 8000
## @param proxy.priorityClassName Proxy pod priority class name
##
priorityClassName: ""
## proxy resource requests and limits
## ref: http://kubernetes.io/docs/user-guide/compute-resources/
## We usually recommend not to specify default resources and to leave this as a conscious
## choice for the user. This also increases chances charts run on environments with little
## resources, such as Minikube. If you do want to specify resources, uncomment the following
## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
## @param proxy.resources.limits The resources limits for the container
## @param proxy.resources.requests The requested resources for the container
##
resources:
## Example:
## limits:
## cpu: 200m
## memory: 256Mi
limits: {}
## Examples:
## requests:
## cpu: 200m
## memory: 10Mi
requests: {}
## proxy containers' Security Context
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param proxy.containerSecurityContext.enabled Enabled Proxy containers' Security Context
## @param proxy.containerSecurityContext.runAsUser Set Proxy container's Security Context runAsUser
## @param proxy.containerSecurityContext.runAsNonRoot Set Proxy container's Security Context runAsNonRoot
##
containerSecurityContext:
enabled: true
runAsUser: 1001
runAsNonRoot: true
## Proxy pods' Security Context
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
## @param proxy.podSecurityContext.enabled Enabled Proxy pods' Security Context
## @param proxy.podSecurityContext.fsGroup Set Proxy pod's Security Context fsGroup
##
podSecurityContext:
enabled: true
fsGroup: 1001
## @param proxy.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
##
podAffinityPreset: ""
## @param proxy.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
##
podAntiAffinityPreset: soft
## Node affinity preset
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
## Allowed values: soft, hard
## @param proxy.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
## @param proxy.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set
## @param proxy.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set
##
nodeAffinityPreset:
type: ""
## E.g.
## key: "kubernetes.io/e2e-az-name"
##
key: ""
## E.g.
## values:
## - e2e-az1
## - e2e-az2
##
values: []
## @param proxy.affinity Affinity for pod assignment. Evaluated as a template.
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
##
affinity: {}
## @param proxy.nodeSelector Node labels for pod assignment. Evaluated as a template.
## ref: https://kubernetes.io/docs/user-guide/node-selection/
##
nodeSelector: {}
## @param proxy.tolerations Tolerations for pod assignment. Evaluated as a template.
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
##
tolerations: []
## @param proxy.podLabels Extra labels for Proxy pods
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
##
podLabels: {}
## @param proxy.podAnnotations Annotations for Proxy pods
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
##
podAnnotations: {}
## @param proxy.lifecycleHooks Add lifecycle hooks to the Proxy deployment
##
lifecycleHooks: {}
## @param proxy.customStartupProbe Override default startup probe
##
customStartupProbe: {}
## @param proxy.customLivenessProbe Override default liveness probe
##
customLivenessProbe: {}
## @param proxy.customReadinessProbe Override default readiness probe
##
customReadinessProbe: {}
## @param proxy.updateStrategy.type Update strategy - only really applicable for deployments with RWO PVs attached
## If replicas = 1, an update can get "stuck", as the previous pod remains attached to the
## PV, and the "incoming" pod can never start. Changing the strategy to "Recreate" will
## terminate the single previous pod, so that the new, incoming pod can attach to the PV
##
updateStrategy:
type: RollingUpdate
## @param proxy.extraEnvVars Add extra environment variables to the Proxy container
## Example:
## extraEnvVars:
## - name: FOO
## value: "bar"
##
extraEnvVars: []
## @param proxy.extraEnvVarsCM Name of existing ConfigMap containing extra env vars
##
extraEnvVarsCM: ""
## @param proxy.extraEnvVarsSecret Name of existing Secret containing extra env vars
##
extraEnvVarsSecret: ""
## @param proxy.extraVolumes Optionally specify extra list of additional volumes for Proxy pods
##
extraVolumes: []
## @param proxy.extraVolumeMounts Optionally specify extra list of additional volumeMounts for Proxy container(s)
##
extraVolumeMounts: []
## @param proxy.initContainers Add additional init containers to the Proxy pods
## Example:
## initContainers:
## - name: your-image-name
## image: your-image
## imagePullPolicy: Always
## ports:
## - name: portname
## containerPort: 1234
##
initContainers: []
## @param proxy.sidecars Add additional sidecar containers to the Proxy pod
## Example:
## sidecars:
## - name: your-image-name
## image: your-image
## imagePullPolicy: Always
## ports:
## - name: portname
## containerPort: 1234
##
sidecars: []
## @section Proxy Traffic Exposure Parameters
## Network policy
##
networkPolicy:
## @param proxy.networkPolicy.enabled Deploy Proxy network policies
##
enabled: true
## @param proxy.networkPolicy.allowInterspaceAccess Allow communication between pods in different namespaces
##
allowInterspaceAccess: true
## @param proxy.networkPolicy.extraIngress [string] Add extra ingress rules to the NetworkPolicy
##
extraIngress: |
## Any IP --> Proxy
##
- ports:
- port: {{ .Values.proxy.containerPort.http }}
## @param proxy.networkPolicy.extraEgress Add extra egress rules to the NetworkPolicy
##
extraEgress: ""
service:
api:
## @param proxy.service.api.type API service type
##
type: ClusterIP
## @param proxy.service.api.port API service port
##
port: 8001
## @param proxy.service.api.loadBalancerIP API service LoadBalancer IP (optional, cloud specific)
## ref: http://kubernetes.io/docs/user-guide/services/#type-loadbalancer
##
loadBalancerIP: ""
## @param proxy.service.api.loadBalancerSourceRanges loadBalancerIP source ranges for the Service
##
loadBalancerSourceRanges: []
## @param proxy.service.api.nodePorts.http NodePort for the HTTP endpoint
## nodePorts:
## http: <to set explicitly, choose port between 30000-32767>
## https: <to set explicitly, choose port between 30000-32767>
##
nodePorts:
http: ""
## @param proxy.service.api.externalTrafficPolicy External traffic policy for the service
## Enable client source IP preservation
## ref http://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
##
externalTrafficPolicy: Cluster
public:
## @param proxy.service.public.type Public service type
##
type: LoadBalancer
# HTTP Port
## @param proxy.service.public.port Public service port
##
port: 80
## @param proxy.service.public.loadBalancerIP Public service LoadBalancer IP (optional, cloud specific)
## ref: http://kubernetes.io/docs/user-guide/services/#type-loadbalancer
##
loadBalancerIP: ""
## @param proxy.service.public.loadBalancerSourceRanges loadBalancerIP source ranges for the Service
##
loadBalancerSourceRanges: []
## @param proxy.service.public.nodePorts.http NodePort for the HTTP endpoint
## nodePorts:
## http: <to set explicitly, choose port between 30000-32767>
## https: <to set explicitly, choose port between 30000-32767>
##
nodePorts:
http: ""
## @param proxy.service.public.externalTrafficPolicy External traffic policy for the service
## Enable client source IP preservation
## ref http://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
##
externalTrafficPolicy: Cluster
## Configure the ingress resource that allows you to access to your JupyterHub instance
##
ingress:
## @param proxy.ingress.enabled Set to true to enable ingress record generation
##
enabled: false
## @param proxy.ingress.path Path to the Proxy pod.
##
path: /
## @param proxy.ingress.pathType Ingress path type
##
pathType: ImplementationSpecific
## DEPRECATED: Use ingress.annotations instead of ingress.certManager
## certManager: false
##
## When the ingress is enabled, a host pointing to this will be created
## @param proxy.ingress.hostname Set ingress rule hostname
##
hostname: jupyterhub.local
## @param proxy.ingress.annotations Additional annotations for the Ingress resource. To enable certificate autogeneration, place here your cert-manager annotations.
## For a full list of possible ingress annotations, please see
## ref: https://github.com/kubernetes/ingress-nginx/blob/master/docs/user-guide/nginx-configuration/annotations.md
## Use this parameter to set the required annotations for cert-manager, see
## ref: https://cert-manager.io/docs/usage/ingress/#supported-annotations
##
## e.g:
## annotations:
## kubernetes.io/ingress.class: nginx
## cert-manager.io/cluster-issuer: cluster-issuer-name
##
annotations: {}
## @param proxy.ingress.tls Enable ingress tls configuration for the hostname defined at proxy.ingress.hostname
## TLS certificates will be retrieved from a TLS secret with name: {{- printf "%s-tls" .Values.ingress.hostname }}
## You can use the ingress.secrets parameter to create this TLS secret, relay on cert-manager to create it, or
## let the chart create self-signed certificates for you
##
tls: false
## @param proxy.ingress.extraHosts The list of additional hostnames to be covered with this ingress record.
## Most likely the hostname above will be enough, but in the event more hosts are needed, this is an array
## extraHosts:
## - name: aspnet-core.local
## path: /
##
extraHosts: []
## @param proxy.ingress.extraTls The tls configuration for additional hostnames to be covered with this ingress record.
## see: https://kubernetes.io/docs/concepts/services-networking/ingress/#tls
## extraTls:
## - hosts:
## - aspnet-core.local
## secretName: aspnet-core.local-tls
##
extraTls: []
## @param proxy.ingress.extraPaths Any additional arbitrary paths that may need to be added to the ingress under the main host.
## For example: The ALB ingress controller requires a special rule for handling SSL redirection.
##
extraPaths: []
## @param proxy.ingress.secrets Add extra secrets for the tls configuration
## If you're providing your own certificates, please use this to add the certificates as secrets
## key and certificate should start with -----BEGIN CERTIFICATE----- or -----BEGIN RSA PRIVATE KEY-----
## name should line up with a secretName set further up
##
## If it is not set and you're using cert-manager, this is unneeded, as it will create the secret for you
## If it is not set and you're NOT using cert-manager either, self-signed certificates will be created
## It is also possible to create and manage the certificates outside of this helm chart
##
## Please see README.md for more information
## - name: aspnet-core.local-tls
## key:
## certificate:
##
secrets: []
## @section Image puller deployment parameters
## Image Puller deployment parameters
##
imagePuller:
## @param imagePuller.enabled Deploy ImagePuller daemonset
##
enabled: true
## @param imagePuller.command Override ImagePuller default command
##
command: []
## @param imagePuller.args Override ImagePuller default args
##
args: []
## @param imagePuller.hostAliases Add deployment host aliases
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
##
hostAliases: []
## imagePuller resource requests and limits
## ref: http://kubernetes.io/docs/user-guide/compute-resources/
## We usually recommend not to specify default resources and to leave this as a conscious
## choice for the user. This also increases chances charts run on environments with little
## resources, such as Minikube. If you do want to specify resources, uncomment the following
## lines, adjust them as necessary, and remove the curly braces after 'resources:'.
## @param imagePuller.resources.limits The resources limits for the container
## @param imagePuller.resources.requests The requested resources for the container
##
resources:
## Example:
## limits:
## cpu: 200m
## memory: 256Mi
limits: {}
## Examples:
## requests:
## cpu: 200m
## memory: 10Mi
requests: {}
## imagePuller containers' Security Context
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param imagePuller.containerSecurityContext.enabled Enabled ImagePuller containers' Security Context
## @param imagePuller.containerSecurityContext.runAsUser Set ImagePuller container's Security Context runAsUser
## @param imagePuller.containerSecurityContext.runAsNonRoot Set ImagePuller container's Security Context runAsNonRoot
##
containerSecurityContext:
enabled: true
runAsUser: 1001
runAsNonRoot: true
## imagePuller pods' Security Context
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
## @param imagePuller.podSecurityContext.enabled Enabled ImagePuller pods' Security Context
## @param imagePuller.podSecurityContext.fsGroup Set ImagePuller pod's Security Context fsGroup
##
podSecurityContext:
enabled: true
fsGroup: 1001
## @param imagePuller.podAffinityPreset Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
##
podAffinityPreset: ""
## @param imagePuller.podAntiAffinityPreset Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
##
podAntiAffinityPreset: soft
## Node affinity preset
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
## @param imagePuller.nodeAffinityPreset.type Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard`
## @param imagePuller.nodeAffinityPreset.key Node label key to match. Ignored if `affinity` is set
## @param imagePuller.nodeAffinityPreset.values Node label values to match. Ignored if `affinity` is set
##
nodeAffinityPreset:
type: ""
## E.g.
## key: "kubernetes.io/e2e-az-name"
##
key: ""