mirror of
https://gitlab.com/deepcypher/dc-kc.git
synced 2026-01-27 11:12:08 +00:00
107 lines
2.9 KiB
YAML
107 lines
2.9 KiB
YAML
argo-workflows:
|
|
|
|
# # This causes bizzare failures of visualisation
|
|
# # commenting out for now, we can just use grafana
|
|
# # this would have just been more conventient
|
|
# useStaticCredentials: true
|
|
# artifactRepository:
|
|
# archiveLogs: true
|
|
# s3:
|
|
# # Note the `key` attribute is not the actual secret, it's the PATH to
|
|
# # the contents in the associated secret, as defined by the `name` attribute.
|
|
# accessKeySecret:
|
|
# name: "artifacts"
|
|
# key: CONSOLE_ACCESS_KEY
|
|
# secretKeySecret:
|
|
# name: "artifacts"
|
|
# key: CONSOLE_SECRET_KEY
|
|
# # sessionTokenSecret:
|
|
# # name: "{{ .Release.Name }}-minio"
|
|
# # key: sessionToken
|
|
# insecure: true
|
|
# # caSecret:
|
|
# # name: ca-root
|
|
# # key: cert.pem
|
|
# bucket: artifacts
|
|
# endpoint: minio.workflow-artifacts.svc.cluster.local:80
|
|
# # region:
|
|
# # roleARN:
|
|
# # useSDKCreds: true
|
|
# # encryptionOptions:
|
|
# # enableEncryption: true
|
|
|
|
controller:
|
|
resources:
|
|
limits:
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 50m
|
|
|
|
server:
|
|
logging:
|
|
level: warn # debug # warn
|
|
|
|
resources:
|
|
limits:
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 50m
|
|
|
|
authModes:
|
|
- sso
|
|
- client
|
|
sso:
|
|
enabled: true
|
|
issuer: "https://auth.deepcypher.me/realms/deepcypher"
|
|
redirectUrl: "https://workflows.deepcypher.me/oauth2/callback"
|
|
# userInfoPath: "/protocol/openid-connect/userinfo"
|
|
sessionExpiry: 24h
|
|
scopes:
|
|
- openid
|
|
- email
|
|
- profile
|
|
- roles
|
|
- groups
|
|
clientId:
|
|
name: oidc-credentials
|
|
key: clientId
|
|
clientSecret:
|
|
name: oidc-credentials
|
|
key: clientSecret
|
|
customGroupClaimName: "groups"
|
|
filterGroupsRegex: []
|
|
# - ".*admin.*"
|
|
rbac:
|
|
enabled: true
|
|
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.middlewares: traefik-headers@kubernetescrd
|
|
cert-manager.io/cluster-issuer: aux-issuer
|
|
hosts:
|
|
- workflows.deepcypher.me
|
|
tls:
|
|
- secretName: workflows.deepcypher.me-tls
|
|
hosts:
|
|
- workflows.deepcypher.me
|
|
|
|
oidc:
|
|
realm:
|
|
name: deepcypher
|
|
ref: owncloak-deepcypher
|
|
config:
|
|
ref: owncloak
|
|
|
|
environment:
|
|
name: unknown # not to be used for hard checks but to display to user
|
|
hardware: metal # to be used to enable on-prem specific features like ceph, cilium, etc
|
|
mode: production # to be used to configure backup movement and additional debugging features
|
|
revision: main # to be used to pull from different git branches
|
|
baseDomain: deepcypher.me # to be used to override default chart domains to configure environments
|
|
location:
|
|
name: unknown # not to be used for hard checks purely informational
|
|
contact:
|
|
name: George Onoufriou
|
|
email: noreply@deepcypher.me
|