Helm values

Values of the miot-dashboard-server chart, version 0.1.2. Each value that sets an environment variable names it. Settings without a value go in extraEnv or extraEnvFrom.

Workload

Value	Default	Meaning
`replicaCount`	`1`	Keep 1 with SQLite
`strategy.type`	`Recreate`	`Recreate` stops the old pod first, so two pods never share a SQLite file
`image.repository`	`ghcr.io/microboxlabs/miot-dashboard-server`	Image
`image.tag`	`latest`	Pin a `sha-<commit>` tag
`image.pullPolicy`	`Always`	Use `IfNotPresent` with a pinned tag
`resources`	`{}`	CPU and memory requests and limits
`podSecurityContext`	`fsGroup: 1001`
`securityContext`	non-root UID 1001, read-only root, no privilege escalation, all capabilities dropped
`nodeSelector`, `tolerations`, `affinity`	empty	Scheduling
`volumes`, `volumeMounts`	empty	Extra mounts, such as a read-only query module
`extraEnv`, `extraEnvFrom`	empty	Any other environment variable or secret

Network

Value	Default	Variable
`service.type`	`ClusterIP`
`service.port`	`3070`
`ingress.enabled`	`false`
`ingress.className`, `hosts`, `tls`, `annotations`
`basePath`	empty	`MIOT_DASHBOARD_BASE_PATH`
`docs`	`false`	`MIOT_DASHBOARD_DOCS`
`cors.origins`	`[]`	`MIOT_DASHBOARD_CORS_ORIGINS`
`cors.headers`	`[]`	`MIOT_DASHBOARD_CORS_HEADERS`
`cors.credentials`	`null`	`MIOT_DASHBOARD_CORS_CREDENTIALS`

Storage

Value	Default	Variable
`store.kind`	`sqlite`	`MIOT_DASHBOARD_STORE`
`store.postgres.url`	empty	`MIOT_DASHBOARD_POSTGRES_URL`, stored in a chart-managed Secret
`store.postgres.existingSecret`, `existingSecretKey`	empty, `url`	Read the URL from your own Secret instead
`store.postgres.poolSize`	`null` (10)	`MIOT_DASHBOARD_POSTGRES_POOL_SIZE`
`store.postgres.connectionTimeoutMs`	`null` (5000)	`MIOT_DASHBOARD_POSTGRES_CONNECTION_TIMEOUT`
`documents.kind`	`fs`	`MIOT_DASHBOARD_DOCUMENTS`
`documents.bucket`, `prefix`, `region`	empty	For `s3` and `gcs`
`orphan.sweepIntervalSeconds`	`null` (3600)	`MIOT_DASHBOARD_ORPHAN_SWEEP_INTERVAL`
`orphan.minAgeSeconds`	`null` (86400)	`MIOT_DASHBOARD_ORPHAN_MIN_AGE`
`seed.path`	empty	`MIOT_DASHBOARD_SEED`
`persistence.enabled`	`true`	A PersistentVolumeClaim on `/data`
`persistence.existingClaim`, `storageClass`, `accessModes`, `size`, `mountPath`	`ReadWriteOnce`, `1Gi`, `/data`

Identity

Value	Variable
`auth.jwt.issuer`	`MIOT_DASHBOARD_JWT_ISSUER`
`auth.jwt.audience`	`MIOT_DASHBOARD_JWT_AUDIENCE`
`auth.jwt.jwksUrl`	`MIOT_DASHBOARD_JWT_JWKS_URL`
`auth.jwt.publicKey.value` or `.existingSecret`	`MIOT_DASHBOARD_JWT_PUBLIC_KEY`
`auth.jwt.secret.value` or `.existingSecret`	`MIOT_DASHBOARD_JWT_SECRET`
`auth.jwt.claims.user`, `groups`, `displayName`	`MIOT_DASHBOARD_JWT_USER_CLAIM`, `_GROUPS_CLAIM`, `_NAME_CLAIM`
`auth.jwt.clockToleranceSeconds`	`MIOT_DASHBOARD_JWT_CLOCK_TOLERANCE`

Memberships

Value	Variable
`tenants.url`, `method`, `entitledPath`, `absentStatus`	`MIOT_DASHBOARD_TENANTS_*`
`tenants.cacheSeconds`, `negativeCacheSeconds`, `timeoutMs`	`MIOT_DASHBOARD_TENANTS_CACHE`, `_NEGATIVE_CACHE`, `_TIMEOUT`
`tenants.serviceHeader`, `serviceValue` or `existingSecret`	`MIOT_DASHBOARD_TENANTS_SERVICE_HEADER`, `_VALUE`
`scopes.url`, `method`, `rolePath`, `roleMap`, `absentStatus`	`MIOT_DASHBOARD_SCOPES_*`
`scopes.cacheSeconds`, `negativeCacheSeconds`, `timeoutMs`	`MIOT_DASHBOARD_SCOPES_CACHE`, `_NEGATIVE_CACHE`, `_TIMEOUT`
`scopes.serviceHeader`, `serviceValue` or `existingSecret`	`MIOT_DASHBOARD_SCOPES_SERVICE_HEADER`, `_VALUE`

Trusted proxy

Value	Variable
`proxy.key` or `proxy.existingSecret` (key `proxy-key`)	`MIOT_DASHBOARD_PROXY_KEY`

Secrets

Every sensitive value accepts either a literal, which the chart stores in a Secret it manages, or existingSecret and existingSecretKey, which point at a Secret you created. Use existingSecret in production, so secrets stay out of values files.