mirror of
https://gitlab.com/deepcypher/dc-kc.git
synced 2026-01-27 11:12:08 +00:00
netbird
A Helm chart for Kubernetes
Requirements
| Repository | Name | Version |
|---|---|---|
| https://netbirdio.github.io/helms | netbird | 1.8.0 |
Values
| Key | Type | Default | Description |
|---|---|---|---|
| environment.baseDomain | string | "deepcypher.me" |
|
| environment.contact.email | string | "noreply@deepcypher.me" |
|
| environment.contact.name | string | "George Onoufriou" |
|
| environment.hardware | string | "metal" |
|
| environment.location.name | string | "unknown" |
|
| environment.mode | string | "production" |
|
| environment.name | string | "unknown" |
|
| environment.revision | string | "main" |
|
| netbird.dashboard.env.AUTH_AUTHORITY | string | "https://auth.deepcypher.me/realms/deepcypher" |
|
| netbird.dashboard.env.AUTH_REDIRECT_URI | string | "/oauth/callback" |
|
| netbird.dashboard.env.AUTH_SILENT_REDIRECT_URI | string | nil |
|
| netbird.dashboard.env.AUTH_SUPPORTED_SCOPES | string | "openid profile email groups roles" |
|
| netbird.dashboard.env.LETSENCRYPT_DOMAIN | string | nil |
|
| netbird.dashboard.env.LETSENCRYPT_EMAIL | string | nil |
|
| netbird.dashboard.env.NETBIRD_MGMT_API_ENDPOINT | string | "https://netbird.deepcypher.me" |
|
| netbird.dashboard.env.NETBIRD_MGMT_GRPC_API_ENDPOINT | string | "https://netbird.deepcypher.me" |
|
| netbird.dashboard.env.NETBIRD_TOKEN_SOURCE | string | "accessToken" |
|
| netbird.dashboard.env.NGINX_SSL_PORT | string | nil |
|
| netbird.dashboard.env.USE_AUTH0 | bool | false |
|
| netbird.dashboard.envFromSecret.AUTH_AUDIENCE | string | "oidc-credentials/clientId" |
|
| netbird.dashboard.envFromSecret.AUTH_CLIENT_ID | string | "oidc-credentials/clientId" |
|
| netbird.dashboard.envFromSecret.AUTH_CLIENT_SECRET | string | "oidc-credentials/clientSecret" |
|
| netbird.dashboard.ingress.annotations."cert-manager.io/cluster-issuer" | string | "letsencrypt-dns" |
|
| netbird.dashboard.ingress.enabled | bool | false |
|
| netbird.dashboard.ingress.hosts[0].host | string | "netbird.deepcypher.me" |
|
| netbird.dashboard.ingress.hosts[0].paths[0].path | string | "/" |
|
| netbird.dashboard.ingress.hosts[0].paths[0].pathType | string | "ImplementationSpecific" |
|
| netbird.dashboard.ingress.tls[0].hosts[0] | string | "netbird.deepcypher.me" |
|
| netbird.dashboard.ingress.tls[0].secretName | string | "netbird.deepcypher.me-tls" |
|
| netbird.management.configmap | string | "{\n \"Stuns\": [\n {\n \"Proto\": \"udp\",\n \"URI\": \"{{ .STUN_SERVER }}\",\n \"Username\": \"\",\n \"Password\": \"\"\n }\n ],\n \"TURNConfig\": {\n \"TimeBasedCredentials\": false,\n \"CredentialsTTL\": \"12h0m0s\",\n \"Secret\": \"secret\",\n \"Turns\": [\n {\n \"Proto\": \"udp\",\n \"URI\": \"{{ .TURN_SERVER }}\",\n \"Username\": \"{{ .TURN_SERVER_USER }}\",\n \"Password\": \"{{ .TURN_SERVER_PASSWORD }}\"\n }\n ]\n },\n \"Relay\": {\n \"Addresses\": [\"rels://netbird.deepcypher.me:443/relay\"],\n \"CredentialsTTL\": \"24h\",\n \"Secret\": \"{{ .RELAY_PASSWORD }}\"\n },\n \"Signal\": {\n \"Proto\": \"https\",\n \"URI\": \"netbird.deepcypher.me:443\",\n \"Username\": \"\",\n \"Password\": \"\"\n },\n \"Datadir\": \"/var/lib/netbird/\",\n \"DataStoreEncryptionKey\": \"{{ .DATASTORE_ENCRYPTION_KEY }}\",\n \"HttpConfig\": {\n \"LetsEncryptDomain\": \"\",\n \"CertFile\": \"\",\n \"CertKey\": \"\",\n \"AuthAudience\": \"{{ .CLIENT_ID }}\",\n \"AuthIssuer\": \"https://auth.deepcypher.me/realms/deepcypher\",\n \"AuthUserIDClaim\": \"\",\n \"AuthKeysLocation\": \"https://auth.deepcypher.me/realms/deepcypher/protocol/openid-connect/certs\",\n \"OIDCConfigEndpoint\": \"https://auth.deepcypher.me/realms/deepcypher/.well-known/openid-configuration\",\n \"IdpSignKeyRefreshEnabled\": false\n },\n \"IdpManagerConfig\": {\n \"ManagerType\": \"none\",\n \"ClientConfig\": {\n \"Issuer\": \"https://auth.deepcypher.me/realms/deepcypher\",\n \"TokenEndpoint\": \"https://auth.deepcypher.me/realms/deepcypher/protocol/openid-connect/token\",\n \"ClientID\": \"{{ .IDP_CLIENT_ID }}\",\n \"ClientSecret\": \"{{ .IDP_CLIENT_SECRET }}\",\n \"GrantType\": \"client_credentials\"\n },\n \"ExtraConfig\": {\n \"Password\": \"{{ .IDP_SERVICE_ACCOUNT_PASSWORD }}\",\n \"Username\": \"{{ .IDP_SERVICE_ACCOUNT_USER }}\"\n },\n \"Auth0ClientCredentials\": null,\n \"AzureClientCredentials\": null,\n \"KeycloakClientCredentials\": null,\n \"ZitadelClientCredentials\": null\n },\n \"DeviceAuthorizationFlow\": {\n \"Provider\": \"hosted\",\n \"ProviderConfig\": {\n \"ClientID\": \"{{ .CLIENT_ID }}\",\n \"ClientSecret\": \"\",\n \"Domain\": \"auth.deepcypher.me\",\n \"Audience\": \"{{ .CLIENT_ID }}\",\n \"TokenEndpoint\": \"https://auth.deepcypher.me/realms/deepcypher/protocol/openid-connect/token\",\n \"DeviceAuthEndpoint\": \"https://auth.deepcypher.me/application/o/device/\",\n \"AuthorizationEndpoint\": \"https://auth.deepcypher.me/realms/deepcypher/protocol/openid-connect/auth\",\n \"Scope\": \"openid\",\n \"UseIDToken\": false,\n \"RedirectURLs\": null\n }\n },\n \"PKCEAuthorizationFlow\": {\n \"ProviderConfig\": {\n \"ClientID\": \"{{ .CLIENT_ID }}\",\n \"ClientSecret\": \"\",\n \"Domain\": \"\",\n \"Audience\": \"{{ .CLIENT_ID }}\",\n \"TokenEndpoint\": \"https://auth.deepcypher.me/realms/deepcypher/protocol/openid-connect/token\",\n \"DeviceAuthEndpoint\": \"\",\n \"AuthorizationEndpoint\": \"https://auth.deepcypher.me/realms/deepcypher/protocol/openid-connect/auth\",\n \"Scope\": \"openid profile email offline_access api\",\n \"UseIDToken\": false,\n \"RedirectURLs\": [\"http://localhost:53000\"]\n }\n },\n \"StoreConfig\": {\n \"Engine\": \"postgres\"\n },\n \"ReverseProxy\": {\n \"TrustedHTTPProxies\": null,\n \"TrustedHTTPProxiesCount\": 0,\n \"TrustedPeers\": null\n }\n}" |
|
| netbird.management.envFromSecret.CLIENT_ID | string | "oidc-credentials/clientId" |
|
| netbird.management.envFromSecret.CLIENT_SECRET | string | "oidc-credentials/clientSecret" |
|
| netbird.management.envFromSecret.DATASTORE_ENCRYPTION_KEY | string | "netbird/datastoreEncryptionKey" |
|
| netbird.management.envFromSecret.IDP_CLIENT_ID | string | "oidc-mgmt-credentials/clientId" |
|
| netbird.management.envFromSecret.IDP_CLIENT_SECRET | string | "oidc-mgmt-credentials/clientSecret" |
|
| netbird.management.envFromSecret.IDP_SERVICE_ACCOUNT_PASSWORD | string | "netbird/idpServiceAccountPassword" |
|
| netbird.management.envFromSecret.IDP_SERVICE_ACCOUNT_USER | string | "netbird/idpServiceAccountUser" |
|
| netbird.management.envFromSecret.NETBIRD_STORE_ENGINE_POSTGRES_DSN | string | "netbird/postgresDsn" |
|
| netbird.management.envFromSecret.RELAY_PASSWORD | string | "netbird/relayPassword" |
|
| netbird.management.envFromSecret.STUN_SERVER | string | "netbird/stunServer" |
|
| netbird.management.envFromSecret.TURN_SERVER | string | "netbird/turnServer" |
|
| netbird.management.envFromSecret.TURN_SERVER_PASSWORD | string | "netbird/turnServerPassword" |
|
| netbird.management.envFromSecret.TURN_SERVER_USER | string | "netbird/turnServerUser" |
|
| netbird.management.ingress.annotations."cert-manager.io/cluster-issuer" | string | "letsencrypt-dns" |
|
| netbird.management.ingress.enabled | bool | false |
|
| netbird.management.ingress.hosts[0].host | string | "netbird.deepcypher.me" |
|
| netbird.management.ingress.hosts[0].paths[0].path | string | "/api" |
|
| netbird.management.ingress.hosts[0].paths[0].pathType | string | "ImplementationSpecific" |
|
| netbird.management.ingress.tls[0].hosts[0] | string | "netbird.deepcypher.me" |
|
| netbird.management.ingress.tls[0].secretName | string | "netbird.deepcypher.me-tls" |
|
| netbird.management.persistentVolume.enabled | bool | false |
|
| netbird.relay.enabled | bool | false |
|
| netbird.relay.ingress.annotations."cert-manager.io/cluster-issuer" | string | "letsencrypt-dns" |
|
| netbird.relay.ingress.enabled | bool | false |
|
| netbird.relay.ingress.hosts[0].host | string | "netbird.deepcypher.me" |
|
| netbird.relay.ingress.hosts[0].paths[0].path | string | "/relay" |
|
| netbird.relay.ingress.hosts[0].paths[0].pathType | string | "ImplementationSpecific" |
|
| netbird.relay.ingress.tls[0].hosts[0] | string | "netbird.deepcypher.me" |
|
| netbird.relay.ingress.tls[0].secretName | string | "netbird.deepcypher.me-tls" |
|
| oidc.config.ref | string | "owncloak" |
|
| oidc.realm.name | string | "deepcypher" |
|
| oidc.realm.ref | string | "owncloak-deepcypher" |
|
| psql.enabled | bool | true |