Convert helm-charts-observability to regular directory
This commit is contained in:
Mosiur Rahman
@@ -0,0 +1,334 @@
|
||||
# Copyright OpenSearch Contributors
|
||||
# SPDX-License-Identifier: Apache-2.0
|
||||
|
||||
# Default values for opensearch-dashboards.
|
||||
# This is a YAML-formatted file.
|
||||
# Declare variables to be passed into your templates.
|
||||
|
||||
opensearchHosts: "https://brilliant-opensearch-cluster-master:9200"
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
repository: "opensearchproject/opensearch-dashboards"
|
||||
# override image tag, which is .Chart.AppVersion by default
|
||||
tag: "3.7.0"
|
||||
pullPolicy: "IfNotPresent"
|
||||
|
||||
startupProbe:
|
||||
tcpSocket:
|
||||
port: 5601
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 20
|
||||
successThreshold: 1
|
||||
initialDelaySeconds: 10
|
||||
|
||||
livenessProbe:
|
||||
tcpSocket:
|
||||
port: 5601
|
||||
periodSeconds: 20
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 10
|
||||
successThreshold: 1
|
||||
initialDelaySeconds: 10
|
||||
|
||||
readinessProbe:
|
||||
tcpSocket:
|
||||
port: 5601
|
||||
periodSeconds: 20
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 10
|
||||
successThreshold: 1
|
||||
initialDelaySeconds: 10
|
||||
|
||||
imagePullSecrets: []
|
||||
nameOverride: ""
|
||||
fullnameOverride: ""
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a service account should be created
|
||||
create: false
|
||||
# Annotations to add to the service account
|
||||
annotations: {}
|
||||
# The name of the service account to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name: ""
|
||||
namespace: observability
|
||||
# Controls whether the ServiceAccount API token is automatically mounted on pod
|
||||
automountServiceAccountToken: true
|
||||
|
||||
rbac:
|
||||
create: false
|
||||
|
||||
# A list of secrets and their paths to mount inside the pod
|
||||
# This is useful for mounting certificates for security and for mounting
|
||||
# the X-Pack license
|
||||
secretMounts: []
|
||||
# - name: certs
|
||||
# secretName: opensearch-dashboard-ca
|
||||
# - name: certs
|
||||
# secretName: dashboard-certs
|
||||
# path: /usr/share/dashboards/certs
|
||||
|
||||
podAnnotations: {}
|
||||
|
||||
# Deployment annotations
|
||||
dashboardAnnotations: {}
|
||||
|
||||
extraEnvs:
|
||||
# - name: "NODE_OPTIONS"
|
||||
# value: "--max-old-space-size=1800"
|
||||
- name: KIBANASERVER_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: opensearch-kibanaserver-password
|
||||
key: KIBANASERVER_PASSWORD
|
||||
|
||||
envFrom: []
|
||||
|
||||
extraVolumes:
|
||||
- name: root-cert
|
||||
secret:
|
||||
secretName: opensearch-dashboard-ca
|
||||
# - name: extras
|
||||
# emptyDir: {}
|
||||
|
||||
extraVolumeMounts:
|
||||
- name: root-cert
|
||||
readOnly: true
|
||||
mountPath: /usr/share/opensearch-dashboards/certs
|
||||
|
||||
# - name: extras
|
||||
# mountPath: /usr/share/extras
|
||||
# readOnly: true
|
||||
|
||||
extraInitContainers: ""
|
||||
|
||||
extraContainers: ""
|
||||
|
||||
podSecurityContext: {}
|
||||
|
||||
securityContext:
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
|
||||
config:
|
||||
opensearch_dashboards.yml: |
|
||||
server:
|
||||
name: dashboards
|
||||
host: "{{ .Values.serverHost }}"
|
||||
basePath: /opensearch
|
||||
rewriteBasePath: true
|
||||
|
||||
opensearch:
|
||||
username: kibanaserver
|
||||
password: ${KIBANASERVER_PASSWORD}
|
||||
ssl:
|
||||
verificationMode: full
|
||||
certificateAuthorities:
|
||||
- /usr/share/opensearch-dashboards/certs/root-ca.pem
|
||||
opensearch_security.multitenancy.enabled: false
|
||||
|
||||
|
||||
data_source:
|
||||
enabled: true
|
||||
ssl:
|
||||
verificationMode: full
|
||||
certificateAuthorities:
|
||||
- /usr/share/opensearch-dashboards/certs/root-ca.pem
|
||||
authTypes:
|
||||
NoAuthentication:
|
||||
enabled: false
|
||||
UsernamePassword:
|
||||
enabled: true
|
||||
AWSSigV4:
|
||||
enabled: false
|
||||
|
||||
workspace:
|
||||
enabled: true
|
||||
|
||||
explore:
|
||||
enabled: true
|
||||
|
||||
datasetManagement:
|
||||
enabled: true
|
||||
|
||||
opensearchDashboardsYml:
|
||||
defaultMode:
|
||||
# value should be 0-0777
|
||||
|
||||
priorityClassName: ""
|
||||
|
||||
opensearchAccount:
|
||||
secret: ""
|
||||
keyPassphrase:
|
||||
enabled: false
|
||||
|
||||
labels: {}
|
||||
|
||||
hostAliases: []
|
||||
# - ip: "127.0.0.1"
|
||||
# hostnames:
|
||||
# - "foo.local"
|
||||
# - "bar.local"
|
||||
|
||||
serverHost: "0.0.0.0"
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
# The IP family and IP families options are to set the behaviour in a dual-stack environment
|
||||
# Omitting these values will let the service fall back to whatever the CNI dictates the defaults
|
||||
# should be
|
||||
#
|
||||
# ipFamilyPolicy: SingleStack
|
||||
# ipFamilies:
|
||||
# - IPv4
|
||||
port: 5601
|
||||
metricsPort: 9601
|
||||
loadBalancerIP: ""
|
||||
nodePort: ""
|
||||
labels: {}
|
||||
annotations: {}
|
||||
loadBalancerSourceRanges: []
|
||||
# 0.0.0.0/0
|
||||
httpPortName: http
|
||||
metricsPortName: metrics
|
||||
|
||||
ingress:
|
||||
enabled: false
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: "true"
|
||||
labels: {}
|
||||
ingressClassName: nginx
|
||||
hosts:
|
||||
# - host: chart-example.local
|
||||
- paths:
|
||||
- path: /
|
||||
backend:
|
||||
serviceName: ""
|
||||
servicePort: 5601
|
||||
tls: []
|
||||
# - secretName: chart-example-tls
|
||||
# hosts:
|
||||
# - chart-example.local
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: "1"
|
||||
memory: "2Gi"
|
||||
limits:
|
||||
cpu: "2"
|
||||
memory: "6Gi"
|
||||
|
||||
autoscaling:
|
||||
# This requires metrics server to be installed, to install use kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml
|
||||
# See https://github.com/kubernetes-sigs/metrics-server
|
||||
enabled: false
|
||||
minReplicas: 1
|
||||
maxReplicas: 10
|
||||
# The legacy `targetCPUUtilizationPercentage` key has been deprecated in favor of `targetCPU`
|
||||
targetCPU: "80"
|
||||
targetMemory: "80"
|
||||
|
||||
updateStrategy:
|
||||
type: "Recreate"
|
||||
|
||||
nodeSelector: {}
|
||||
|
||||
tolerations: []
|
||||
|
||||
affinity: {}
|
||||
|
||||
# This is the pod topology spread constraints
|
||||
# https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
|
||||
topologySpreadConstraints: []
|
||||
|
||||
# -- Array of extra K8s manifests to deploy
|
||||
extraObjects: []
|
||||
# - apiVersion: secrets-store.csi.x-k8s.io/v1
|
||||
# kind: SecretProviderClass
|
||||
# metadata:
|
||||
# name: argocd-secrets-store
|
||||
# spec:
|
||||
# provider: aws
|
||||
# parameters:
|
||||
# objects: |
|
||||
# - objectName: "argocd"
|
||||
# objectType: "secretsmanager"
|
||||
# jmesPath:
|
||||
# - path: "client_id"
|
||||
# objectAlias: "client_id"
|
||||
# - path: "client_secret"
|
||||
# objectAlias: "client_secret"
|
||||
# secretObjects:
|
||||
# - data:
|
||||
# - key: client_id
|
||||
# objectName: client_id
|
||||
# - key: client_secret
|
||||
# objectName: client_secret
|
||||
# secretName: argocd-secrets-store
|
||||
# type: Opaque
|
||||
# labels:
|
||||
# app.kubernetes.io/part-of: argocd
|
||||
# - |
|
||||
# apiVersion: policy/v1
|
||||
# kind: PodDisruptionBudget
|
||||
# metadata:
|
||||
# name: {{ template "opensearch-dashboards.fullname" . }}
|
||||
# labels:
|
||||
# {{- include "opensearch-dashboards.labels" . | nindent 4 }}
|
||||
# spec:
|
||||
# minAvailable: 1
|
||||
# selector:
|
||||
# matchLabels:
|
||||
# {{- include "opensearch-dashboards.selectorLabels" . | nindent 6 }}
|
||||
|
||||
# pod lifecycle policies as outlined here:
|
||||
# https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
|
||||
lifecycle: {}
|
||||
# preStop:
|
||||
# exec:
|
||||
# command: ["/bin/sh", "-c", "echo Hello from the postStart handler > /usr/share/message"]
|
||||
# postStart:
|
||||
# exec:
|
||||
# command:
|
||||
# - bash
|
||||
# - -c
|
||||
# - |
|
||||
# #!/bin/bash
|
||||
# curl -I "http://admin:admin@127.0.0.1:5601/status -H "kbn-xsrf: true" -H 'kbn-xsrf: true' -H "Content-Type: application/json"
|
||||
|
||||
## Enable to add 3rd Party / Custom plugins not offered in the default OpenSearchDashboards image.
|
||||
plugins:
|
||||
enabled: false
|
||||
installList: []
|
||||
# - example-fake-plugin-downloadable-url
|
||||
removeList: []
|
||||
# - examplePluginName
|
||||
|
||||
# ServiceMonitor Configuration for Prometheus
|
||||
# Enabling this option will create a ServiceMonitor resource that allows Prometheus to scrape metrics from the OpenSearch service.
|
||||
serviceMonitor:
|
||||
# Set to true to enable the ServiceMonitor resource for OpenSearch Dashboards
|
||||
enabled: false
|
||||
|
||||
# HTTP path where metrics are exposed by OpenSearch Dashboards.
|
||||
# Ensure this path is correctly set in your service.
|
||||
path: /_prometheus/metrics
|
||||
|
||||
# Frequency at which Prometheus will scrape metrics.
|
||||
# Modify as needed for your monitoring requirements.
|
||||
interval: 10s
|
||||
|
||||
# additional labels to be added to the ServiceMonitor
|
||||
# labels:
|
||||
# k8s.example.com/prometheus: kube-prometheus
|
||||
labels: {}
|
||||
Reference in New Issue
Block a user