values.yaml

#
# IMPORTANT NOTE
#
# This chart inherits from the common library chart. You can check the default values/options here:
# https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml
#

controller:
  type: statefulset

image:
  # -- image repository
  repository: 389ds/dirsrv
  # -- image tag
  # @default -- chart.appVersion
  tag:
  # -- image pull policy
  pullPolicy: IfNotPresent

serviceAccount:
  # -- Specifies whether a service account should be created
  create: true

  # -- Annotations to add to the service account
  annotations: {}

  # -- The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

# @default -- See below
configmap:
  letsencrypt-ca:
    enabled: true
    # -- configMap data content. Helm template enabled.
    data:
      ca.crt: |
        -----BEGIN CERTIFICATE-----
        MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw
        TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
        cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4
        WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu
        ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY
        MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc
        h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+
        0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U
        A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW
        T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH
        B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC
        B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv
        KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn
        OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn
        jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw
        qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI
        rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV
        HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq
        hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL
        ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ
        3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK
        NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5
        ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur
        TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC
        jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc
        oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq
        4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA
        mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d
        emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc=
        -----END CERTIFICATE-----

env: {}

envFrom:
- secretRef:
    name: 389ds-environment

probes:
  liveness:
    enabled: true
    custom: true
    spec:
      exec:
        command:
          - /usr/lib/dirsrv/dscontainer
          - -H
      initialDelaySeconds: 0
      periodSeconds: 15
      timeoutSeconds: 1
      failureThreshold: 3

  readiness:
    enabled: true
    custom: true
    spec:
      exec:
        command:
          - /usr/lib/dirsrv/dscontainer
          - -H
      initialDelaySeconds: 0
      periodSeconds: 15
      timeoutSeconds: 1
      failureThreshold: 3

  startup:
    enabled: true
    custom: true
    spec:
      exec:
        command:
          - /usr/lib/dirsrv/dscontainer
          - -H
      initialDelaySeconds: 30
      periodSeconds: 15
      timeoutSeconds: 1
      failureThreshold: 3

service:
  main:
    enabled: true
    type: LoadBalancer
    namePrefix: service
    annotations: {}
    ports:
      http:
        enabled: false
      ldap-tcp:
        enabled: true
        port: 389
        protocol: TCP
        targetPort: 3389
      ldap-udp:
        enabled: false
        port: 389
        protocol: UDP
        targetPort: 3389
      ldaps-tcp:
        enabled: true
        port: 636
        protocol: TCP
        targetPort: 3636
      ldaps-udp:
        enabled: false
        port: 636
        protocol: UDP
        targetPort: 3636

persistence:
  data:
    enabled: true
    # -- Where to mount the volume in the main container.
    mountPath: /data/
    # -- AccessMode for the persistent volume.
    accessMode: ReadWriteOnce
    # -- The amount of storage that is requested for the persistent volume.
    size: 1Gi
    # -- Set to true to retain the PVC upon `helm uninstall`
    retain: true
  389ds-certs:
    enabled: true
    # Please insert the name of an existing TLS secret
    name:
    items:
    - key: tls.key
      path: server.key
    - key: tls.crt
      path: server.crt
    # -- Sets the persistence type
    type: secret
    # -- Where to mount the volume in the main container.
    mountPath: /data/tls/
    # -- Specify if the volume should be mounted read-only.
    readOnly: true
  389ds-ca:
    enabled: true
    name: 389ds-letsencrypt-ca
    # -- Sets the persistence type
    type: configMap
    # -- Where to mount the volume in the main container.
    mountPath: /data/tls/ca/
    # -- Specify if the volume should be mounted read-only.
    readOnly: true