feat: confluence benchmark, pattern extractor, agent KB, UX spec
- extract-patterns.js: mines layered arch, ArgoCD appsets, cloud regions, CIDR allocations, naming conventions, sync waves, tech stack from code - agent-kb.js: token-efficient JSON rendering of same doc tree - eval-confluence-ref-questions.json: 32 reference-only benchmark questions - wiggum-v2.sh: Ralph Wiggum loop targeting confluence baseline (77.8%) - docs/human-ux-spec.md: BMad UX designer spec for human doc structure - Eval results: V2 at 28.7% vs confluence 77.8% baseline - Hub/spoke ownership now correctly extracted (95% on that question) - Naming conventions, regions, CIDRs surfaced in system-architecture.md
This commit is contained in:
Jarvis Prime
83
agent-kb.js
Normal file
83
agent-kb.js
Normal file
@@ -0,0 +1,83 @@
|
||||
/**
|
||||
* agent-kb.js — Render V2 docs as token-efficient JSON for AI agents.
|
||||
*
|
||||
* Output: A single JSON file mirroring the markdown doc structure exactly, but
|
||||
* stripped of markdown formatting to save context tokens during agent eval.
|
||||
*/
|
||||
|
||||
const fs = require('fs');
|
||||
const path = require('path');
|
||||
|
||||
/**
|
||||
* Build the agent knowledge base from the exact same data used to render the markdown docs.
|
||||
*/
|
||||
function buildAgentKB(graph, srcRoot, helmCharts, subs, contractsResult, patterns, impactResults) {
|
||||
const kb = {
|
||||
_meta: {
|
||||
generated: new Date().toISOString(),
|
||||
format: 'dev-intel-agent-kb-v2',
|
||||
description: 'Token-efficient rendering of Dev Intel V2 documentation for AI agents.',
|
||||
},
|
||||
|
||||
reference: {
|
||||
systemArchitecture: {
|
||||
summary: {
|
||||
subsystemCount: subs.subsystems.length,
|
||||
helmChartCount: helmCharts.length,
|
||||
contractCount: contractsResult.contracts.length,
|
||||
crossCuttingConcerns: subs.crossCutting,
|
||||
},
|
||||
patterns: patterns,
|
||||
},
|
||||
|
||||
subsystems: subs.subsystems.map(sub => {
|
||||
const outgoing = Object.entries(subs.dependencyMatrix)
|
||||
.filter(([k]) => k.startsWith(sub.name + '→'))
|
||||
.map(([k, v]) => ({ target: k.split('→')[1], calls: v.calls, imports: v.imports }));
|
||||
const incoming = Object.entries(subs.dependencyMatrix)
|
||||
.filter(([k]) => k.endsWith('→' + sub.name))
|
||||
.map(([k, v]) => ({ source: k.split('→')[0], calls: v.calls, imports: v.imports }));
|
||||
|
||||
return {
|
||||
name: sub.name,
|
||||
kind: sub.kind,
|
||||
files: sub.files,
|
||||
entities: sub.entities,
|
||||
publicExports: sub.publicExports,
|
||||
dependencies: {
|
||||
outgoing,
|
||||
incoming,
|
||||
},
|
||||
contracts: (contractsResult.bySubsystem[sub.name] || []).map(c => ({
|
||||
name: c.name,
|
||||
type: c.type,
|
||||
})),
|
||||
};
|
||||
}),
|
||||
|
||||
helm: {
|
||||
charts: helmCharts.map(c => ({
|
||||
name: c.chart.name,
|
||||
version: c.chart.version,
|
||||
appVersion: c.chart.appVersion || null,
|
||||
path: c.dir,
|
||||
dependencies: c.chart.dependencies.map(d => d.name),
|
||||
resourceCount: c.templates.resources.length,
|
||||
valuesKeys: c.values.keys.map(k => k.name),
|
||||
interactions: c.interactions.map(i => ({ type: i.type, target: i.target }))
|
||||
})),
|
||||
syncWaves: patterns.syncWaves,
|
||||
},
|
||||
|
||||
contracts: contractsResult.contracts.map(c => ({
|
||||
name: c.name,
|
||||
type: c.type,
|
||||
id: c.id,
|
||||
})),
|
||||
}
|
||||
};
|
||||
|
||||
return kb;
|
||||
}
|
||||
|
||||
module.exports = { buildAgentKB };
|
||||
129
docs/architecture.md
Normal file
129
docs/architecture.md
Normal file
@@ -0,0 +1,129 @@
|
||||
# Dev Intel V2 Architecture Document
|
||||
|
||||
## 1. Introduction & Goals
|
||||
The goal of the Dev Intel V2 pipeline improvements is to elevate the documentation quality from purely descriptive to deeply explanatory. The current state struggles to answer the "why" behind the infrastructure architecture and falls short in mapping flow paths and Terraform structures. This document details the design for closing these gaps, satisfying the PRD requirements for Terraform extraction, Flow Tracing, and Change Impact analysis.
|
||||
|
||||
## 2. Component Architecture
|
||||
|
||||
```mermaid
|
||||
graph TD
|
||||
subgraph Extraction Phase
|
||||
TS[extract.js<br/>Tree-sitter Code]
|
||||
HELM[extract-helm.js<br/>Helm + Templates]
|
||||
TF[extract-terraform.js<br/>HCL / Regex Hybrid]
|
||||
end
|
||||
|
||||
subgraph Knowledge Graph
|
||||
GRAPH[graph.js<br/>In-Memory Store]
|
||||
TS -->|Node/Edges| GRAPH
|
||||
HELM -->|Node/Edges| GRAPH
|
||||
TF -->|Node/Edges| GRAPH
|
||||
end
|
||||
|
||||
subgraph Enrichment & Analysis Phase
|
||||
FLOW[flow.js<br/>Entry Point Auto-Detector]
|
||||
IMPACT[impact.js<br/>Change Impact Query]
|
||||
PROSE[prose.js<br/>Explanatory LLM]
|
||||
|
||||
GRAPH <--> FLOW
|
||||
GRAPH <--> IMPACT
|
||||
GRAPH --> PROSE
|
||||
end
|
||||
|
||||
subgraph Outputs
|
||||
DOCS[sysdoc.js<br/>Diataxis Docs]
|
||||
PROSE --> DOCS
|
||||
FLOW --> DOCS
|
||||
IMPACT --> DOCS
|
||||
end
|
||||
```
|
||||
|
||||
## 3. Data Flow & Component Design
|
||||
|
||||
### 3.1 `extract-terraform.js`: Terraform Extraction
|
||||
**Problem:** Current naive regex misses modules, locals, and complex blocks, resulting in ~0% coverage of `control-core`.
|
||||
**Design:** A hybrid extraction module that attempts to load `tree-sitter-hcl` first. If unavailable or unpinned, it falls back to an advanced multi-pass regex parser.
|
||||
- **Pass 1:** Extract block declarations (`module`, `resource`, `data`, `variable`, `output`, `provider`, `locals`).
|
||||
- **Pass 2:** Extract dependencies. Within each block's body, run a regex to find references (`var\.([a-zA-Z0-9_-]+)`, `local\.([a-zA-Z0-9_-]+)`, `module\.([a-zA-Z0-9_-]+)\.`, `aws_s3_bucket\.([a-zA-Z0-9_-]+)\.`).
|
||||
- **Entity Mapping:** Nodes are created with `kind: 'terraform'`, `type: blockType`. Edges of type `DEPENDS_ON` are generated from references.
|
||||
|
||||
### 3.2 Explanatory Prose Generator (`prose.js`)
|
||||
**Problem:** The LLM generates "what" instead of "why" because prompts only pass structural components.
|
||||
**Design:** The `prose.js` prompt generator will be restructured to feed enriched context:
|
||||
1. **Dependency Matrix:** Explicitly list upstream and downstream components.
|
||||
2. **Anomaly Flags:** If a subsystem has zero functions but many variables, or high fan-in/fan-out, pass this to the LLM.
|
||||
3. **Prompt Update:** Change the prompt instruction from *"Describe this system"* to *"Explain the architectural rationale behind this subsystem. Why does it depend on X and Y? Why does it exhibit anomaly Z?"*
|
||||
|
||||
### 3.3 Entry Point Auto-Detection (`flow.js`)
|
||||
**Problem:** No start-to-finish execution paths exist in the generated docs.
|
||||
**Design:** `flow.js` will scan the `GraphStore` for nodes matching specific heuristics:
|
||||
- **K8s:** Nodes of kind `Deployment` or `StatefulSet` that have an incoming edge from a `Service` or `Ingress`.
|
||||
- **Scripts:** Bash files containing `main()` or ending with an execution call.
|
||||
- **Python:** Files containing `if __name__ == '__main__':`.
|
||||
- **CI/CD:** Files in `.github/workflows/` or `.gitlab-ci.yml`.
|
||||
Once identified, a breadth-first search (BFS) follows outbound `CALLS` or `DEPENDS_ON` edges to map the execution flow.
|
||||
|
||||
### 3.4 Change Impact Query Interface (`graph.js` / `impact.js`)
|
||||
**Problem:** Engineers cannot determine the blast radius of a change.
|
||||
**Design:** A new query interface that traverses the graph backwards.
|
||||
- Given a `nodeId` (e.g., a Secret or Terraform Module), traverse all *inbound* `DEPENDS_ON` or `CALLS` edges recursively.
|
||||
- Return a hierarchical JSON payload or Markdown tree representing all downstream systems forced to redeploy or re-evaluate if the target node is modified.
|
||||
|
||||
### 3.5 Index Enrichment (`extract-helm.js`)
|
||||
**Problem:** AI agents get lost when wrapper charts only provide links to sub-charts.
|
||||
**Design:** During the indexing phase, when a wrapper chart lists dependencies in `Chart.yaml`, `sysdoc.js` will query the graph for those sub-charts and inline their key entities (Deployments, Services, ConfigMaps) directly into the wrapper chart's markdown section. This guarantees the LLM has complete context in a single context window.
|
||||
|
||||
## 4. Interface Contracts
|
||||
|
||||
```javascript
|
||||
// extract-terraform.js
|
||||
/**
|
||||
* @param {string} filePath - Absolute path to the .tf file.
|
||||
* @param {string} repoRoot - Base path of the repository.
|
||||
* @returns {Object} { file, language: 'hcl', entities: [...], relationships: [...] }
|
||||
*/
|
||||
function extractTerraform(filePath, repoRoot);
|
||||
|
||||
// flow.js
|
||||
/**
|
||||
* @param {GraphStore} graph - The populated knowledge graph.
|
||||
* @returns {Array<Object>} List of entry point nodes.
|
||||
*/
|
||||
function detectEntryPoints(graph);
|
||||
|
||||
/**
|
||||
* @param {GraphStore} graph - The populated knowledge graph.
|
||||
* @param {string} startNodeId - The entry point ID.
|
||||
* @returns {Object} A tree representing the execution flow.
|
||||
*/
|
||||
function traceExecution(graph, startNodeId);
|
||||
|
||||
// impact.js
|
||||
/**
|
||||
* @param {GraphStore} graph - The populated knowledge graph.
|
||||
* @param {string} targetNodeId - The node being modified.
|
||||
* @param {number} maxDepth - Max traversal depth.
|
||||
* @returns {Array<Object>} List of impacted downstream nodes.
|
||||
*/
|
||||
function queryImpact(graph, targetNodeId, maxDepth = 10);
|
||||
```
|
||||
|
||||
## 5. Key Technical Decisions with Rationale
|
||||
|
||||
1. **Hybrid Parsing for Terraform (HCL):**
|
||||
* *Decision:* Try `tree-sitter-hcl`, fallback to regex.
|
||||
* *Rationale:* The PRD noted `tree-sitter-hcl` might not be pinned or available in Node 22. A pure tree-sitter approach risks completely failing. The regex fallback guarantees we extract the most critical blocks (modules, resources) even if the grammar fails to load.
|
||||
2. **In-Memory Graph Traversal for Impact:**
|
||||
* *Decision:* Use BFS on the existing `Map`-based graph rather than introducing a graph database (e.g., Neo4j).
|
||||
* *Rationale:* The scope is limited to monorepos parsed at runtime. Adding an external database violates the "no external dependencies" philosophy of `graph.js` and slows down the pipeline.
|
||||
3. **Inlining Dependencies in Helm:**
|
||||
* *Decision:* Inline sub-chart structures into the wrapper chart's markdown.
|
||||
* *Rationale:* It solves the Tier 1 issue of context-switching for AI coding agents and human readers, despite the risk of increasing document length.
|
||||
|
||||
## 6. Risk Mitigations
|
||||
|
||||
| Risk | Mitigation |
|
||||
| :--- | :--- |
|
||||
| **LLM Context Bloat (T1.1, T1.2)** | Limit the inlining depth of sub-charts to 1 level. Truncate anomaly explanations if the context window exceeds the configured threshold (e.g., 100k tokens). |
|
||||
| **Noisy Graph Edges Breaking Impact Analysis (T2.3)** | Introduce edge "confidence scores" or strict edge typing (`EXPLICIT_DEPENDS_ON` vs `INFERRED_CALLS`). The impact query will only traverse high-confidence, explicitly defined edges. |
|
||||
| **Regex Fallback Missing Complex HCL (T2.1)** | Focus the regex fallback purely on extracting block headers and specific reference patterns (`var.`, `module.`). This covers 80% of structural relationships, which satisfies the success metric. |
|
||||
67
docs/human-ux-spec.md
Normal file
67
docs/human-ux-spec.md
Normal file
@@ -0,0 +1,67 @@
|
||||
# Human-Facing Documentation UX Specification
|
||||
|
||||
## 1. Information Architecture (Directory Structure)
|
||||
|
||||
The documentation should follow the Diataxis framework but be organized in a way that aligns with a developer's mental model, starting from a high-level overview and allowing for deep dives into specific domains.
|
||||
|
||||
```text
|
||||
docs/
|
||||
├── index.md # Landing page (High-level architecture & entry points)
|
||||
├── architecture/ # Progressive Disclosure: High-level concepts
|
||||
│ ├── index.md
|
||||
│ ├── system-context.md # C4 Context / System overview
|
||||
│ └── data-flow.md # Mermaid diagrams of data movement
|
||||
├── tutorials/ # Learning-oriented (Step-by-step guides for onboarding)
|
||||
│ ├── index.md
|
||||
│ └── local-setup.md
|
||||
├── how-to/ # Problem-oriented (Recipes for specific tasks)
|
||||
│ ├── index.md
|
||||
│ ├── deploy-new-service.md
|
||||
│ └── debug-helm-chart.md
|
||||
├── explanation/ # Understanding-oriented (Why things are the way they are)
|
||||
│ ├── index.md
|
||||
│ └── decisions/ # ADRs (Architecture Decision Records)
|
||||
└── reference/ # Information-oriented (Auto-generated deep dives)
|
||||
├── index.md
|
||||
├── helm-charts/ # Helm value schemas and usage
|
||||
└── terraform/ # Module inputs/outputs and resources
|
||||
```
|
||||
|
||||
## 2. Visual Hierarchy
|
||||
|
||||
To prevent the documentation from feeling like a dense text dump, we must use visual elements to create a clear hierarchy and break up the content.
|
||||
|
||||
* **Headers:** Use `H1` (`#`) strictly for the document title. Use `H2` (`##`) for major sections and `H3` (`###`) for subsections. Do not go deeper than `H4`.
|
||||
* **Mermaid Diagrams:** Use diagrams early in `architecture` and `explanation` documents. Visuals should precede dense text to set the context.
|
||||
* **Callouts/Admonitions:** Use blockquotes or specialized markdown extensions (like GitHub's alert syntax) for critical information to draw the eye.
|
||||
* `> [!NOTE]` for general tips.
|
||||
* `> [!WARNING]` for destructive actions or important caveats.
|
||||
* `> [!TIP]` for best practices.
|
||||
* **Tables:** Use tables strictly for structured data, such as environment variables, API parameters, or Helm chart values. Do not use tables for layout.
|
||||
* **Code Blocks:** Always specify the language for syntax highlighting (e.g., `bash`, `yaml`, `hcl`). Keep code blocks concise; link to the actual source file if the snippet exceeds 30 lines.
|
||||
|
||||
## 3. Navigation
|
||||
|
||||
Navigation must be explicit and prevent the user from hitting "dead ends."
|
||||
|
||||
* **Breadcrumbs:** Every page (except the root `index.md`) should begin with a breadcrumb trail back to the root and its parent category.
|
||||
* *Example:* `[Home](../index.md) > [Reference](./index.md) > Helm Charts`
|
||||
* **Table of Contents (TOC):** Any document longer than two screens of text must include a generated TOC immediately following the title.
|
||||
* **Next Steps/See Also:** Every document must end with a "Related Links" or "Next Steps" section. For example, a "How-To" on deploying a service should link to the "Reference" for the specific Helm chart used.
|
||||
* **Index Pages:** Every directory must contain an `index.md` that lists and briefly describes all documents within that directory. It serves as the local "table of contents."
|
||||
|
||||
## 4. Progressive Disclosure
|
||||
|
||||
The documentation must cater to both the new hire needing a high-level overview and the senior engineer debugging a specific Terraform state.
|
||||
|
||||
1. **Level 1: The Landing Page (`docs/index.md`)**
|
||||
* Goal: Orient the user.
|
||||
* Content: A brief summary of the monorepo's purpose, a high-level Mermaid C4 Context diagram, and prominent links to the four Diataxis quadrants.
|
||||
2. **Level 2: The Domain Overview (`architecture/index.md`)**
|
||||
* Goal: Explain how the pieces fit together.
|
||||
* Content: System architecture diagrams, data flow descriptions, and links to the underlying infrastructure components.
|
||||
3. **Level 3: Component Deep Dive (e.g., `reference/helm-charts/my-service.md`)**
|
||||
* Goal: Provide exhaustive detail for implementation.
|
||||
* Content: Auto-generated tables of values, specific configurations, and links to the actual source code.
|
||||
|
||||
**The Golden Rule:** Never show Level 3 information on a Level 1 or 2 page. Provide summaries and clear links to drill down into the specifics.
|
||||
35
docs/party-review-v3.md
Normal file
35
docs/party-review-v3.md
Normal file
@@ -0,0 +1,35 @@
|
||||
# Party Mode Review: Dev Intel V3 PRD
|
||||
|
||||
**🎸 The Punk**
|
||||
Finally, someone gets it! Nuking 1500 lines of custom garbage to just use `terraform-docs` and a bash script is the most punk rock thing I've seen all week. Burn `ratchet.js` to the ground, we don't need a bloated JavaScript orchestrator to do a simple while-loop.
|
||||
|
||||
**🧪 The Scientist**
|
||||
I appreciate the strict constraints—targeting a sub-10 minute execution time and a $1.00 cost per release provides highly testable metrics. However, asserting we'll maintain a 93% agent eval score while ripping out the custom evaluation logic in favor of `promptfoo` requires empirical validation we don't have yet. Show me the benchmark data comparing the two evaluators.
|
||||
|
||||
**💀 The Skeptic**
|
||||
You're replacing a system that technically works with a "Ralph Wiggum" bash loop and hoping an OSS tool won't randomly break your pipeline. Relying on `helm-docs` while admitting it can't handle cross-chart analysis means you're just shifting the complexity to this magical "Glue Layer" that's going to become the new maintenance nightmare. I give it two weeks before the bash script is 500 lines long and unreadable.
|
||||
|
||||
**🎪 The Hype Beast**
|
||||
This is a game-changer! 🚀 By offloading the boring stuff to open source, we can focus all our energy on that sweet, sweet AI prose generation! A hybrid architecture that is fast, cheap, AND smart is exactly what's going to take Dev Intel to the moon! 🌕✨ We're basically building the ultimate AI brain for our infrastructure!
|
||||
|
||||
**🔧 The Mechanic**
|
||||
Using off-the-shelf binaries is fine, but how exactly does this "minimal orchestration" feed `terraform-docs` output back into the `prose.js` graph builder? The PRD completely glosses over the actual data contract between the OSS tools and the custom tree-sitter extraction. It sounds nice on paper, but wiring that pipeline up in bash is going to be incredibly brittle when edge cases hit.
|
||||
|
||||
---
|
||||
|
||||
### Panel Verdict
|
||||
|
||||
**Top 3 Strengths:**
|
||||
1. Massive reduction in custom code maintenance (2000 lines down to 500).
|
||||
2. Clear, measurable, and aggressive constraints (Under 10 mins, <= $1 cost).
|
||||
3. Embracing industry-standard OSS (`terraform-docs`, `helm-docs`, `promptfoo`) instead of reinventing the wheel.
|
||||
|
||||
**Top 3 Risks:**
|
||||
1. The bash "Glue Layer" becoming a brittle, unmaintainable mess of pipes and regex.
|
||||
2. Loss of the nuanced context that the custom V2 extractors provided for cross-chart and cross-file graph edges.
|
||||
3. Assuming `promptfoo` will perfectly replicate the custom `eval.js` logic and maintain the 93% score without regressions.
|
||||
|
||||
**One thing we'd change:**
|
||||
Define the exact data contract/JSON interface between the OSS tool outputs and the remaining `prose.js` / graph builders, instead of hand-waving it as "minimal orchestration."
|
||||
|
||||
**Final Score:** 7.5/10
|
||||
59
docs/prd-v3.md
Normal file
59
docs/prd-v3.md
Normal file
@@ -0,0 +1,59 @@
|
||||
# Product Requirements Document: Dev Intel V3
|
||||
|
||||
## 1. Problem Statement
|
||||
Dev Intel V2 successfully generates documentation from our Foxtrot monorepo, achieving a 93% agent eval and 78% human eval score. However, the pipeline relies on ~2000 lines of custom JavaScript. Much of this custom code duplicates the functionality of well-established Open Source Software (OSS). We need to simplify the architecture, reduce the maintenance burden, and embrace community-standard tools without sacrificing output quality. Our "ratchet loop" is functionally just a "Ralph Wiggum" loop, and we should embrace a simplified, brute-force bash loop with clear objective completion criteria rather than complex custom code.
|
||||
|
||||
## 2. Architecture
|
||||
The V3 architecture adopts a hybrid approach: "OSS for the heavy lifting, custom code for the magic."
|
||||
|
||||
### OSS Replacements
|
||||
* **Terraform Documentation:** `terraform-docs` (Replaces `extract-terraform.js`)
|
||||
* **Helm Chart Documentation:** `helm-docs` (Replaces `extract-helm.js` & `sysdoc.js` chart section)
|
||||
* **Evaluation Harness:** `promptfoo` (Replaces `eval-agent.js`, `eval-human.js`, `eval.js`)
|
||||
* **Documentation Serving:** `mkdocs-material` (Replaces custom doc serving)
|
||||
* **Ratchet Loop:** Simple Ralph Wiggum bash loop (Replaces `ratchet.js`)
|
||||
|
||||
### Retained Custom Components (The Value Add)
|
||||
* **Graph Builder (`graph.js` + `extract.js`):** Tree-sitter extraction to build a unified knowledge graph across 13 repositories.
|
||||
* **Subsystem Aggregator (`subsystem.js`):** Grouping files into logical subsystems and detecting cross-cutting concerns.
|
||||
* **Cross-Chart Interaction Analysis:** Analyzing shared secrets, ports, and service references across Helm charts (which `helm-docs` cannot do natively).
|
||||
* **LLM Prose Enrichment (`prose.js`):** Feeding the dependency matrix and anomaly flags into Claude to generate "why" explanations.
|
||||
* **Glue Layer:** Minimal orchestration connecting OSS tools and custom analysis into unified output.
|
||||
|
||||
## 3. Requirements
|
||||
* **LLM Engine:** Use `http://192.168.86.11:8000/v1` with the `claude-haiku-4.5` model.
|
||||
* **Scale:** Must handle the Foxtrot monorepo (13 subdirectories, 17K+ files).
|
||||
* **Footprint constraint:** The pipeline should be composed of ~500 lines of custom Node.js code plus config files.
|
||||
* **Speed constraint:** Must run end-to-end in under 10 minutes (excluding LLM execution wait times).
|
||||
* **Cost constraint:** Target cost is $1.00 per release.
|
||||
* **Code Implementation:** Replace the existing terraform and per-chart Helm doc generation with the CLI tools (`terraform-docs` and `helm-docs`).
|
||||
* **Docs Website:** Implement an `mkdocs.yml` configuration to serve the output as a searchable site.
|
||||
* **Evaluation Implementation:** Configure `promptfoo` via YAML to act as the objective judge.
|
||||
|
||||
## 4. Ralph Wiggum Loop Spec
|
||||
The previous `ratchet.js` implementation will be replaced by a `bash` script. This runs an AI agent in a simple, well-known ratchet pattern: loop until objective completion criteria are met.
|
||||
|
||||
**Execution Flow:**
|
||||
1. **Generate:** Run the Dev Intel V3 pipeline.
|
||||
2. **Evaluate:** Run `promptfoo eval` against the pipeline's output.
|
||||
3. **Diagnose:** Check the `promptfoo` score against the required threshold.
|
||||
4. **Condition:**
|
||||
* **If Score >= Threshold:** Success, exit the loop.
|
||||
* **If Score < Threshold:** Re-feed the previous output and failure context (the evaluation feedback) back into the generator prompt for context.
|
||||
5. **Repeat:** Continue up to *N* iterations until criteria are met.
|
||||
|
||||
## 5. Success Metrics
|
||||
* **Quality Parity or Better:** Agent eval score >= 93%, Human eval score >= 78%.
|
||||
* **Simplicity:** Custom codebase shrinks from ~2000 lines to ~500 lines.
|
||||
* **Performance:** Execution overhead is under 10 minutes.
|
||||
* **Efficiency:** Pipeline inference costs remain <= $1 per release.
|
||||
|
||||
## 6. Migration Plan
|
||||
To safely deprecate V2 while maintaining documentation pipelines:
|
||||
1. **Remove Custom Extractors:** Delete `extract-terraform.js`, `extract-helm.js`, and the Helm-specific logic inside `sysdoc.js`.
|
||||
2. **Remove Custom Evaluators:** Delete `eval-agent.js`, `eval-human.js`, and `eval.js`.
|
||||
3. **Remove Custom Ratchet:** Delete `ratchet.js`.
|
||||
4. **Integrate CLI Binaries:** Install and wire up `terraform-docs` and `helm-docs`.
|
||||
5. **Add Configs:** Write `promptfoo.yaml` for evaluations and `mkdocs.yml` for serving docs.
|
||||
6. **Implement Bash Script:** Write the Ralph Wiggum loop.
|
||||
7. **Re-wire Glue Code:** Connect the outputs from the OSS tools into the preserved `prose.js` module.
|
||||
36
docs/prd.md
Normal file
36
docs/prd.md
Normal file
@@ -0,0 +1,36 @@
|
||||
# Product Requirements Document: Dev Intel V2
|
||||
|
||||
## 1. Problem Statement
|
||||
Dev Intel V2 currently extracts code entities and Helm chart structures to build a unified knowledge graph and generate Diataxis-structured documentation for infrastructure monorepos. While the pipeline performs well for AI agents (93.4% eval score), human engineers are struggling (78.6% eval score) because the generated prose is purely descriptive rather than explanatory. Furthermore, critical infrastructure components like Terraform are missing from the extraction, and architectural flow tracing is non-existent, leaving significant gaps in the generated documentation's usefulness for understanding change impact and structural anomalies.
|
||||
|
||||
## 2. User Personas
|
||||
* **Infrastructure Engineer:** Needs to understand the "why" behind the architecture, trace execution flows across boundaries, and quickly assess the blast radius of changes (e.g., modifying a secret or Helm chart).
|
||||
* **AI Coding Agent:** Relies on high-fidelity, highly structured knowledge graphs and inlined dependencies to reliably answer questions about the codebase without getting lost in nested wrapper charts.
|
||||
|
||||
## 3. Requirements
|
||||
|
||||
### Tier 1: Fix What's Broken (Explanation & Accuracy)
|
||||
* **T1.1: Inline Sub-chart Dependencies:** Wrapper charts must inline their sub-chart dependencies in the index to ensure dependency queries do not fail.
|
||||
* **T1.2: Explanatory LLM Prose:** Update the LLM enrichment prompts to explain *why* subsystems depend on each other and *why* certain structural anomalies exist (e.g., subsystems with zero functions).
|
||||
* **T1.3: Architectural Anomaly Resolution:** Documentation must explicitly address and explain architectural structural anomalies to improve the current 30% success rate on architectural "why" questions.
|
||||
|
||||
### Tier 2: Fill Real Gaps (Coverage & Tracing)
|
||||
* **T2.1: Terraform Extraction (`extract-terraform.js`):** Implement robust Terraform entity extraction. Currently, only 1 module is detected out of 336 files in `control-core`.
|
||||
* **T2.2: Auto-Detection of Entry Points:** Implement flow tracing by automatically detecting entry points. Target: Helm Deployments with Services, `main()` in shell scripts, `__main__` in Python, and CI pipelines.
|
||||
* **T2.3: Change Impact Analysis Interface:** Build a query interface leveraging existing knowledge graph edges to answer change impact questions (e.g., "If I modify `vault-secret`, which charts redeploy?").
|
||||
|
||||
## 4. Success Metrics
|
||||
* **Agent Eval Score:** Maintain > 90%.
|
||||
* **Human Eval Score:** Increase from 78.6% to > 90%.
|
||||
* **Terraform Coverage:** Increase from ~0% to > 80% of `control-core` entities extracted.
|
||||
* **Flow Traces:** Document at least 5 meaningful entry-to-exit execution paths.
|
||||
|
||||
## 5. Out of Scope
|
||||
* Support for new languages outside of the current stack (Python, Go, TypeScript, Shell, HCL/Terraform).
|
||||
* Interactive UI dashboards (focus remains on markdown generation and query interfaces).
|
||||
* Modifying the core Diataxis structural framework.
|
||||
|
||||
## 6. Dependencies and Risks
|
||||
* **Risk (LLM Context Limits):** Inlining sub-chart dependencies and expanding explanatory prose could bloat the context window for the evaluating LLM.
|
||||
* **Dependency:** The change impact query interface relies heavily on the accuracy of the existing graph edges; if current edges are noisy, the impact analysis will be flawed.
|
||||
* **Dependency:** Terraform extraction requires successfully parsing HCL, which may have complex module resolution behaviors compared to standard code tree-sitter extraction.
|
||||
693
eval-agent-report-v3-oss.json
Normal file
693
eval-agent-report-v3-oss.json
Normal file
@@ -0,0 +1,693 @@
|
||||
{
|
||||
"evalType": "agent",
|
||||
"timestamp": "2026-03-10T04:51:16.794Z",
|
||||
"docsDir": "./foxtrot-docs-v3",
|
||||
"totalQuestions": 22,
|
||||
"overallScore": "59.3",
|
||||
"avgAccuracy": "2.59",
|
||||
"avgCompleteness": "2.41",
|
||||
"avgPrecision": "4.64",
|
||||
"avgNavigation": "2.23",
|
||||
"notFoundCount": 8,
|
||||
"notFoundRate": "36.4%",
|
||||
"byCategory": {
|
||||
"structural": {
|
||||
"avg": "50.0",
|
||||
"count": 3
|
||||
},
|
||||
"dependency": {
|
||||
"avg": "61.0",
|
||||
"count": 5
|
||||
},
|
||||
"contract": {
|
||||
"avg": "25.0",
|
||||
"count": 1
|
||||
},
|
||||
"configuration": {
|
||||
"avg": "95.0",
|
||||
"count": 5
|
||||
},
|
||||
"interaction": {
|
||||
"avg": "25.0",
|
||||
"count": 2
|
||||
},
|
||||
"resource": {
|
||||
"avg": "25.0",
|
||||
"count": 4
|
||||
},
|
||||
"cross-subsystem": {
|
||||
"avg": "100.0",
|
||||
"count": 1
|
||||
},
|
||||
"architectural": {
|
||||
"avg": "100.0",
|
||||
"count": 1
|
||||
}
|
||||
},
|
||||
"byDifficulty": {
|
||||
"easy": {
|
||||
"avg": "87.5",
|
||||
"count": 8
|
||||
},
|
||||
"medium": {
|
||||
"avg": "40.0",
|
||||
"count": 12
|
||||
},
|
||||
"hard": {
|
||||
"avg": "62.5",
|
||||
"count": 2
|
||||
}
|
||||
},
|
||||
"results": [
|
||||
{
|
||||
"id": "struct-001",
|
||||
"category": "structural",
|
||||
"difficulty": "easy",
|
||||
"question": "How many Helm charts are defined across the Foxtrot monorepo?",
|
||||
"groundTruth": "76",
|
||||
"llmAnswer": "\n\n76",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-jenkins.md",
|
||||
"reference/helm/charts/app-common-charts-milvus.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector.md",
|
||||
"reference/helm/charts/app-common-charts-hazelcast.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-jenkins.md",
|
||||
"reference/helm/charts/app-common-charts-milvus.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector.md",
|
||||
"reference/helm/charts/app-common-charts-hazelcast.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 2,
|
||||
"notes": "AI provided the exact correct answer (76), but with zero explanation or demonstration of how it found this information. No working shown, no file paths referenced, no methodology explained. While the accuracy is perfect, the complete lack of transparency into the navigation process makes it impossible to verify the agent actually located and analyzed the relevant information versus providing a memorized or lucky answer."
|
||||
},
|
||||
"composite": 85,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "struct-002",
|
||||
"category": "structural",
|
||||
"difficulty": "medium",
|
||||
"question": "Which 5 Helm charts produce the most Kubernetes resources? List them with their resource counts.",
|
||||
"groundTruth": "cluster (app-common/apps-provider/addons/charts/common/cluster): 55\ncluster (app-common/charts/cluster): 32\njenkins (app-common/charts/jenkins): 29\nkube-state-metrics (app-common/charts/otel-collector/charts/kube-state-metrics): 27\nfoxtrot-eks (compute-common/templates/foxtrot-eks): 24",
|
||||
"llmAnswer": "\n\nNOT_FOUND\n\nThe provided documentation contains Helm chart configuration values and descriptions, but does not include explicit counts of Kubernetes resources produced by each chart. To accurately determine which charts produce the most resources would require analyzing the actual chart templates, which are not included in the reference materials provided.",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-milvus.md",
|
||||
"reference/helm/charts/app-common-charts-jenkins.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector.md",
|
||||
"reference/helm/charts/app-common-charts-loqate-app.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-milvus.md",
|
||||
"reference/helm/charts/app-common-charts-jenkins.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector.md",
|
||||
"reference/helm/charts/app-common-charts-loqate-app.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 0,
|
||||
"completeness": 0,
|
||||
"precision": 5,
|
||||
"navigation": 0,
|
||||
"notes": "AI agent failed to locate or retrieve the resource count data for Helm charts. Provided no factual information from ground truth, but avoided hallucination by explicitly stating inability to find the data rather than inventing numbers."
|
||||
},
|
||||
"composite": 25,
|
||||
"notFound": true
|
||||
},
|
||||
{
|
||||
"id": "struct-003",
|
||||
"category": "structural",
|
||||
"difficulty": "easy",
|
||||
"question": "How many subsystems does the Foxtrot codebase contain?",
|
||||
"groundTruth": "12",
|
||||
"llmAnswer": "\n\n11",
|
||||
"filesRead": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/runtime.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/runtime.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 0,
|
||||
"completeness": 1,
|
||||
"precision": 4,
|
||||
"navigation": 3,
|
||||
"notes": "AI provided 11 subsystems instead of the correct 12. The answer demonstrates the agent found relevant information (close count suggests correct area of codebase was examined) but made a counting error, missing one subsystem. No hallucinated details present, but the core fact is incorrect."
|
||||
},
|
||||
"composite": 40,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-external-dns-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"external-dns\" chart (at app-common/apps-provider/addons/charts/common/external-dns)?",
|
||||
"groundTruth": "external-dns (1.17.0) [condition: external-dns.enabled]",
|
||||
"llmAnswer": "Based on the documentation provided, the dependencies of the \"external-dns\" chart at app-common/apps-provider/addons/charts/common/external-dns are:\n\n- external-dns (version 1.17.0)",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-external-dns.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-external-dns.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 3,
|
||||
"precision": 4,
|
||||
"navigation": 3,
|
||||
"notes": "AI correctly identified external-dns version 1.17.0 but omitted the condition specification '[condition: external-dns.enabled]' from the ground truth. The answer is factually accurate for what it includes but incomplete. Navigation unclear—phrasing 'based on documentation provided' suggests passive receipt rather than active file discovery."
|
||||
},
|
||||
"composite": 75,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-ingress-nginx-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"ingress-nginx\" chart (at app-common/apps-provider/addons/charts/common/ingress-nginx)?",
|
||||
"groundTruth": "ingress-nginx (4.12.0) [condition: ingress-nginx.enabled]",
|
||||
"llmAnswer": "Based on the documentation provided, the \"ingress-nginx\" chart at app-common/apps-provider/addons/charts/common/ingress-nginx has the following dependency:\n\n- ingress-nginx (version 4.12.0)",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-ingress-nginx.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"explanation/change-impact.md",
|
||||
"reference/system-architecture.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-ingress-nginx.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"explanation/change-impact.md",
|
||||
"reference/system-architecture.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 3,
|
||||
"completeness": 2,
|
||||
"precision": 4,
|
||||
"navigation": 3,
|
||||
"notes": "AI correctly identified the dependency name and version (4.12.0) but omitted the condition clause '[condition: ingress-nginx.enabled]' that is part of the ground truth specification. The answer captures the core dependency but is incomplete in representing the full dependency declaration as it would appear in a Chart.yaml or similar manifest."
|
||||
},
|
||||
"composite": 60,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-kube-state-metrics-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"kube-state-metrics\" chart (at app-common/apps-provider/addons/charts/common/kube-state-metrics)?",
|
||||
"groundTruth": "kube-state-metrics (5.26.0) [condition: kube-state-metrics.enabled]",
|
||||
"llmAnswer": "Based on the documentation provided, the dependencies of the \"kube-state-metrics\" chart are:\n\n- kube-state-metrics (version 5.26.0) from https://prometheus-community.github.io/helm-charts",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-kube-state-metrics.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-cluster.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-kube-state-metrics.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-cluster.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 3,
|
||||
"completeness": 2,
|
||||
"precision": 3,
|
||||
"navigation": 3,
|
||||
"notes": "AI correctly identified the dependency name and version (5.26.0) but omitted the critical condition field [condition: kube-state-metrics.enabled] from the ground truth. Added unrequested source URL information. The phrase 'based on the documentation provided' suggests information was given rather than actively navigated to the file path."
|
||||
},
|
||||
"composite": 55,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-open-telemetry-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"open-telemetry\" chart (at app-common/apps-provider/addons/charts/common/otel-collector)?",
|
||||
"groundTruth": "opentelemetry-operator (0.26.4) [condition: opentelemetry-operator.enabled]\nk8s-metrics (0.1.0) [condition: k8s-metrics.enabled]\nagent (0.1.1) [condition: agent.enabled]\ncommon (0.1.0) [condition: common.enabled]\ngw-metrics (0.1.0) [condition: gw-metrics.enabled]\ngw-traces (0.1.0) [condition: gw-traces.enabled]\nprom-scraper (0.1.0) [condition: prom-scraper.enabled]",
|
||||
"llmAnswer": "Based on the documentation provided, the dependencies of the \"open-telemetry\" chart are:\n\n- agent\n- common\n- gw-metrics\n- gw-traces\n- k8s-metrics\n- prom-scraper\n- opentelemetry-operator",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-common.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-agent.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-gw-metrics.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-common.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-agent.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-gw-metrics.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 2,
|
||||
"completeness": 2,
|
||||
"precision": 4,
|
||||
"navigation": 1,
|
||||
"notes": "AI correctly identified all 7 dependency names but omitted critical metadata: version numbers (e.g., 0.26.4, 0.1.0) and conditional flags (e.g., [condition: opentelemetry-operator.enabled]). The answer lacks evidence of navigating to the specific chart file at the provided path; it references generic 'documentation' without demonstrating file-level access to the actual Chart.yaml or dependencies specification."
|
||||
},
|
||||
"composite": 45,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-reltio-prometheus-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"reltio-prometheus\" chart (at app-common/apps-provider/addons/charts/common/prometheus)?",
|
||||
"groundTruth": "kube-prometheus-stack (69.4.1) [condition: kube-prometheus-stack.enabled]\nprometheus-adapter (4.11.0) [condition: prometheus-adapter.enabled]",
|
||||
"llmAnswer": "\n\nBased on the documentation for the reltio-prometheus chart, the dependencies are:\n\n1. kube-prometheus-stack (version 69.4.1)\n2. prometheus-adapter (version 4.11.0)",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-prometheus.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-kube-state-metrics.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-prometheus.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-kube-state-metrics.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 4,
|
||||
"completeness": 3,
|
||||
"precision": 4,
|
||||
"navigation": 3,
|
||||
"notes": "AI correctly identified both dependencies with accurate versions (69.4.1 and 4.11.0), but omitted the conditional metadata ([condition: kube-prometheus-stack.enabled] and [condition: prometheus-adapter.enabled]) that are part of the complete dependency specification in Helm charts. The answer captures the essential facts but lacks the full structural detail. No evidence of actual file navigation shown in the response."
|
||||
},
|
||||
"composite": 70,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "contract-001",
|
||||
"category": "contract",
|
||||
"difficulty": "medium",
|
||||
"question": "Which secrets or ConfigMaps are shared across multiple Helm charts? List each with the charts that use it.",
|
||||
"groundTruth": "logdna-agent-key: cluster\nlogdna-agent-tags: cluster\nvault-secret: ai-app, cleanse-app, pms-app, rdm-app, shared-app\nvault-secret-rdm-tasks: ai-app, cleanse-app, pms-app, rdm-app, shared-app",
|
||||
"llmAnswer": "NOT_FOUND\n\nThe provided documentation does not contain explicit definitions or references to ConfigMaps or Secrets that are shared across multiple Helm charts. While there are references to image pull secrets (e.g., `gcrregcred`) used across various charts, the documentation does not provide sufficient detail about shared ConfigMaps or Secrets to answer this question accurately.",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector.md",
|
||||
"reference/helm/charts/app-common-charts-elasticsearch.md",
|
||||
"reference/helm/charts/app-common-charts-hazelcast.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector.md",
|
||||
"reference/helm/charts/app-common-charts-elasticsearch.md",
|
||||
"reference/helm/charts/app-common-charts-hazelcast.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 0,
|
||||
"completeness": 0,
|
||||
"precision": 5,
|
||||
"navigation": 0,
|
||||
"notes": "AI agent failed to locate shared secrets and ConfigMaps that exist in the documentation. Ground truth contains 4 shared resources (logdna-agent-key, logdna-agent-tags, vault-secret, vault-secret-rdm-tasks) across multiple charts, but agent returned NOT_FOUND. No hallucinations present, but complete failure to retrieve required information."
|
||||
},
|
||||
"composite": 25,
|
||||
"notFound": true
|
||||
},
|
||||
{
|
||||
"id": "config-mdm-app-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "How many top-level configuration keys does the mdm-app chart (at app-common/charts/mdm-app) expose in its values.yaml?",
|
||||
"groundTruth": "38",
|
||||
"llmAnswer": "38",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI provided exact correct count (38) matching ground truth. Answer is factually accurate, complete, and free of hallucination. Agent successfully located and analyzed the correct values.yaml file."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-ai-app-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "How many top-level configuration keys does the ai-app chart (at app-common/charts/ai-app) expose in its values.yaml?",
|
||||
"groundTruth": "34",
|
||||
"llmAnswer": "Looking at the Values table in the ai-app chart documentation, I count the top-level configuration keys (those without dot notation):\n\narch, baseRegistryURL, cloudProvider, clusterDomain, clusterName, commonAnnotations, commonJobLabels, commonLabels, commonPodLabels, commonservicesValues, domain, efsClaimHeapDumps, enableRdmAppServices, environmentType, etalonsubDomain, gcrregcred, global, helmTimeout, hooks, imagePullPolicy, imagePullSecrets, ingress, jobAnnotations, nodeSelector, persistent, region, reltioDomains, rootDomain, securityContext, serviceMesh, spotinstPercent, terminationGracePeriodSeconds, tolerations, vaultEnv\n\n**34**",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-ai-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-ai-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI provided exact count (34) matching ground truth, listed all 34 top-level keys without omissions or hallucinations, demonstrated correct navigation to values.yaml, and properly identified top-level keys (excluding dot-notation nested values). Answer is complete and accurate."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-elasticsearch-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "How many top-level configuration keys does the elasticsearch chart (at app-common/apps-provider/addons/charts/state-apps/es) expose in its values.yaml?",
|
||||
"groundTruth": "32",
|
||||
"llmAnswer": "Looking at the elasticsearch chart documentation at `reference/helm/charts/app-common-apps-provider-addons-charts-state-apps-es.md`, I'll count the top-level configuration keys from the Values table.\n\nThe top-level keys are:\n1. arch\n2. authorizationPolicy\n3. cloudProvider\n4. customConfig\n5. customConfig_master\n6. dataCpus\n7. dataJavaOpts\n8. dataMems\n9. dataStorageClass\n10. dataStorageSize\n11. dataVNGName\n12. domain\n13. enableAnonymousAccess\n14. envName\n15. esClusterName\n16. esDataNodePerZoneCount\n17. esMasterNodePerZoneCount\n18. esVersion\n19. esZone1\n20. esZone2\n21. esZone3\n22. kibanaDomain\n23. lb\n24. livenessProbe\n25. masterCpus\n26. masterJavaOpts\n27. masterMems\n28. masterStorageClass\n29. masterStorageSize\n30. metrics\n31. onDemand\n32. xpkNodeCount\n\n**32**",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-apps-es.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-apps-es.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 4,
|
||||
"navigation": 4,
|
||||
"notes": "AI provided exactly 32 keys matching ground truth. Keys are domain-appropriate for Elasticsearch Helm chart configuration (arch, authorizationPolicy, cloudProvider, etc.). Referenced specific documentation path correlating to the chart location. Cannot independently verify each key name without access to actual values.yaml, but the exact count match and plausible key names suggest accurate information retrieval rather than hallucination. Minor precision deduction due to inability to verify individual key accuracy."
|
||||
},
|
||||
"composite": 90,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-hazelcast-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "How many top-level configuration keys does the hazelcast chart (at app-common/apps-provider/addons/charts/state-apps/hz) expose in its values.yaml?",
|
||||
"groundTruth": "32",
|
||||
"llmAnswer": "Looking at the hazelcast chart values table in the provided documentation, I'll count the unique top-level configuration keys (those before the first dot):\n\n1. MaxReplicas\n2. MinReplicas\n3. arch\n4. cloud\n5. cpuLimit\n6. cpuRequest\n7. diagnostics\n8. domain\n9. envName\n10. externalEndpoint\n11. gracefulShutdown\n12. hazelcast\n13. heapdumpEnabled\n14. hzClusterName\n15. imagePullPolicy\n16. imageRepository\n17. jmx\n18. livenessProbe\n19. maxSurge\n20. maxUnavailable\n21. memoryLimit\n22. memoryRequest\n23. metrics\n24. onDemand\n25. otel\n26. rbac\n27. readinessProbe\n28. regcred\n29. securityContext\n30. service\n31. serviceAccount\n32. targetCPUUtilizationPercentage\n\n**32**",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-apps-hz.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-apps-hz.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 3,
|
||||
"notes": "AI provided the correct count of 32 top-level keys with a complete enumerated list. No hallucinations or extraneous information detected. However, navigation clarity is moderate—the AI referenced 'provided documentation' rather than demonstrating direct access to the specific file path (app-common/apps-provider/addons/charts/state-apps/hz/values.yaml), making it unclear whether the agent independently located the correct file or worked from context already provided."
|
||||
},
|
||||
"composite": 90,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-redis-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "How many top-level configuration keys does the redis chart (at app-common/charts/redis) expose in its values.yaml?",
|
||||
"groundTruth": "23",
|
||||
"llmAnswer": "23",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-redis.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-redis.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 4,
|
||||
"notes": "AI answer matches ground truth exactly (23 keys). Answer is factually correct, complete, and contains no hallucinated information. Navigation score is 4 rather than 5 because the response doesn't show evidence of the agent's process in locating and analyzing the values.yaml file, though the correct answer indicates successful file discovery."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "interaction-001",
|
||||
"category": "interaction",
|
||||
"difficulty": "medium",
|
||||
"question": "Which Helm charts reference Kubernetes services from other components? List each chart and the service it calls.",
|
||||
"groundTruth": "hazelcast (app-common/apps-provider/addons/charts/state-apps/hz) → kubernetes\nhazelcast (app-common/charts/hazelcast) → kubernetes\ngw-metrics (app-common/charts/otel-collector/charts/gw-metrics) → argo-rollouts-metrics\nredis (app-common/charts/redis) → headless",
|
||||
"llmAnswer": "NOT_FOUND\n\nThe provided documentation files contain Helm chart metadata, values, and dependencies between charts, but do not include specific information about which charts reference Kubernetes services from other components or the service endpoints they call.",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/charts/app-common-charts-cluster.md",
|
||||
"reference/helm/charts/app-common-charts-kong.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/charts/app-common-charts-cluster.md",
|
||||
"reference/helm/charts/app-common-charts-kong.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 0,
|
||||
"completeness": 0,
|
||||
"precision": 5,
|
||||
"navigation": 0,
|
||||
"notes": "AI returned NOT_FOUND when ground truth data exists. The agent failed to locate or extract the four chart-to-service mappings present in the documentation. No hallucinations were introduced, but the core task was not accomplished."
|
||||
},
|
||||
"composite": 25,
|
||||
"notFound": true
|
||||
},
|
||||
{
|
||||
"id": "interaction-002",
|
||||
"category": "interaction",
|
||||
"difficulty": "hard",
|
||||
"question": "Which network ports are used by multiple Helm charts? List each port and the charts that expose it.",
|
||||
"groundTruth": "Port 443: cluster, twistlock-defender, eck-operator, twistlock\nPort 8889: gw-metrics, gw-traces, kube-state-metrics\nPort 9200: eck-operator, elasticsearch\nPort 13133: agent, gw-metrics, gw-traces, k8s-metrics, prom-scraper, elasticsearch",
|
||||
"llmAnswer": "NOT_FOUND\n\nThe provided documentation does not contain sufficient port configuration details across the Helm charts to identify which network ports are used by multiple charts. While some charts like jenkins and elasticsearch have port values documented, the excerpts provided do not show enough cross-chart port information to make a comprehensive comparison.",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-kong.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-ingress-nginx.md",
|
||||
"reference/helm/charts/app-common-charts-jenkins.md",
|
||||
"reference/helm/charts/app-common-charts-elasticsearch.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-kong.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-ingress-nginx.md",
|
||||
"reference/helm/charts/app-common-charts-jenkins.md",
|
||||
"reference/helm/charts/app-common-charts-elasticsearch.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 0,
|
||||
"completeness": 0,
|
||||
"precision": 5,
|
||||
"navigation": 0,
|
||||
"notes": "AI agent failed to locate port configuration data that exists in the documentation. Returned NOT_FOUND instead of identifying the 4 ports and their associated charts. No hallucinations present, but complete failure to retrieve required information."
|
||||
},
|
||||
"composite": 25,
|
||||
"notFound": true
|
||||
},
|
||||
{
|
||||
"id": "resource-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the 10 most common Kubernetes resource types generated across all Foxtrot Helm charts?",
|
||||
"groundTruth": "ClusterRole: 51\nServiceAccount: 49\nSecret: 43\nExternalSecret: 38\nService: 36\nRole: 30\nClusterRoleBinding: 29\nDeployment: 29\nConfigMap: 25\nRoleBinding: 25",
|
||||
"llmAnswer": "\n\nNOT_FOUND\n\nThe provided documentation contains only the Values sections of the Foxtrot Helm charts (foxtrot-eks, foxtrot-gke, foxtrot-aks), which describe configuration parameters. The actual Kubernetes resource types generated by these charts are not documented in the files provided. To answer this question, I would need access to the Helm chart templates themselves (the .yaml files that define the resources).",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/compute-common-templates-foxtrot-eks.md",
|
||||
"reference/helm/charts/compute-common-templates-foxtrot-gke.md",
|
||||
"reference/helm/charts/compute-common-templates-foxtrot-aks.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/compute-common-templates-foxtrot-eks.md",
|
||||
"reference/helm/charts/compute-common-templates-foxtrot-gke.md",
|
||||
"reference/helm/charts/compute-common-templates-foxtrot-aks.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 0,
|
||||
"completeness": 0,
|
||||
"precision": 5,
|
||||
"navigation": 0,
|
||||
"notes": "AI correctly identified that the required information (Helm chart templates) was not available in the provided documentation (Values sections only). No hallucinations or incorrect facts were introduced. However, the question could not be answered due to missing source material."
|
||||
},
|
||||
"composite": 25,
|
||||
"notFound": true
|
||||
},
|
||||
{
|
||||
"id": "resource-mdm-app-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What Kubernetes resource types does the mdm-app chart generate? List each type and count.",
|
||||
"groundTruth": "Secret: 5\nJob: 4\nDeployment: 2\nPersistentVolumeClaim: 2\nService: 2\nExternalSecret: 2\nHorizontalPodAutoscaler: 1\nRollout: 1\nPersistentVolume: 1\nPodDisruptionBudget: 1\nServiceAccount: 1",
|
||||
"llmAnswer": "NOT_FOUND\n\nThe mdm-app chart documentation provided shows configuration values and metadata, but does not explicitly list the Kubernetes resource types that the chart generates.",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 0,
|
||||
"completeness": 0,
|
||||
"precision": 5,
|
||||
"navigation": 0,
|
||||
"notes": "Agent returned NOT_FOUND without providing any of the 11 resource types present in ground truth. While the response avoids hallucination, it fails to locate or extract the required information from available sources."
|
||||
},
|
||||
"composite": 25,
|
||||
"notFound": true
|
||||
},
|
||||
{
|
||||
"id": "resource-cassandra-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What Kubernetes resource types does the cassandra chart generate? List each type and count.",
|
||||
"groundTruth": "Service: 2\nStatefulSet: 1\nExternalSecret: 1\nClusterSecretStore: 1\nConfigMap: 1\nSecret: 1\nServiceAccount: 1\nRole: 1\nRoleBinding: 1\nClusterRole: 1\nClusterRoleBinding: 1\nCronJob: 1\nJob: 1",
|
||||
"llmAnswer": "NOT_FOUND\n\nThe provided documentation only contains the chart's configurable values and parameters. It does not specify which Kubernetes resource types (Deployment, StatefulSet, Service, etc.) the cassandra chart generates. This information would typically be found in the chart's template files, which are not included in the documentation provided.",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-cluster-cassandra.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-cluster-cassandra.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 0,
|
||||
"completeness": 0,
|
||||
"precision": 5,
|
||||
"navigation": 0,
|
||||
"notes": "AI correctly identified that the provided documentation lacked template information but failed to locate or access the chart's template files where resource types are defined. Provided no resource types from the ground truth list. While the response contains no hallucinations (precision=5), it delivers zero factual content against the expected answer."
|
||||
},
|
||||
"composite": 25,
|
||||
"notFound": true
|
||||
},
|
||||
{
|
||||
"id": "resource-jenkins-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What Kubernetes resource types does the jenkins chart generate? List each type and count.",
|
||||
"groundTruth": "ConfigMap: 5\nService: 3\nSecret: 3\nIngress: 2\nServiceAccount: 2\nPersistentVolumeClaim: 1\nSecurityGroupPolicy: 1\nPrometheusRule: 1\nBackendConfig: 1\nNetworkPolicy: 1\nPodDisruptionBudget: 1\nPodMonitoring: 1\nRoute: 1\nServiceMonitor: 1\nStatefulSet: 1\nRole: 1\nRoleBinding: 1\nSecretClaim: 1\nPod: 1",
|
||||
"llmAnswer": "NOT_FOUND\n\nThe Jenkins chart documentation provided does not contain an explicit list of all Kubernetes resource types generated by the chart with their counts. While the values file references various resource configurations (StatefulSet, Service, ConfigMap, Secret, Ingress, Route, PodDisruptionBudget, ServiceMonitor, PrometheusRule, BackendConfig, ServiceAccount, etc.), there is no comprehensive inventory that definitively enumerates each resource type and its count.",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-jenkins.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-jenkins.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 0,
|
||||
"completeness": 0,
|
||||
"precision": 5,
|
||||
"navigation": 0,
|
||||
"notes": "Agent returned NOT_FOUND instead of providing the required resource type inventory. While the response avoided hallucination (precision=5), it failed to locate or extract the ground truth data showing 19 resource types with their counts. The agent demonstrated no successful navigation to the relevant information source."
|
||||
},
|
||||
"composite": 25,
|
||||
"notFound": true
|
||||
},
|
||||
{
|
||||
"id": "cross-sub-001",
|
||||
"category": "cross-subsystem",
|
||||
"difficulty": "hard",
|
||||
"question": "Which subsystems depend on app-tools, and how heavily (by call+import count)?",
|
||||
"groundTruth": "ipam-tools: 6\ncompute-tools: 4\napp-common: 1",
|
||||
"llmAnswer": "- app-common: 1 call, 0 imports (1 total)\n- compute-tools: 4 calls, 0 imports (4 total)\n- ipam-tools: 6 calls, 0 imports (6 total)",
|
||||
"filesRead": [
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"explanation/change-impact.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"explanation/change-impact.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI answer matches ground truth exactly on all three subsystems with correct totals (ipam-tools: 6, compute-tools: 4, app-common: 1). The additional breakdown into calls vs imports adds useful detail without introducing hallucinations. Perfect alignment with expected answer."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "arch-002",
|
||||
"category": "architectural",
|
||||
"difficulty": "easy",
|
||||
"question": "What is the current version and appVersion of the mdm-app Helm chart?",
|
||||
"groundTruth": "version: 0.7.4, appVersion: 2025.12-12-develop",
|
||||
"llmAnswer": "**Version:** 0.7.4\n\n**AppVersion:** 2025.12-12-develop",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI answer matches ground truth exactly on both version (0.7.4) and appVersion (2025.12-12-develop). No extraneous information, all required fields present, correct facts only."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
}
|
||||
]
|
||||
}
|
||||
719
eval-agent-report-v6.json
Normal file
719
eval-agent-report-v6.json
Normal file
@@ -0,0 +1,719 @@
|
||||
{
|
||||
"evalType": "agent",
|
||||
"timestamp": "2026-03-10T04:26:26.008Z",
|
||||
"docsDir": "./foxtrot-docs",
|
||||
"totalQuestions": 22,
|
||||
"overallScore": "91.4",
|
||||
"avgAccuracy": "4.73",
|
||||
"avgCompleteness": "4.45",
|
||||
"avgPrecision": "5.00",
|
||||
"avgNavigation": "4.09",
|
||||
"notFoundCount": 1,
|
||||
"notFoundRate": "4.5%",
|
||||
"byCategory": {
|
||||
"structural": {
|
||||
"avg": "96.7",
|
||||
"count": 3
|
||||
},
|
||||
"dependency": {
|
||||
"avg": "93.0",
|
||||
"count": 5
|
||||
},
|
||||
"contract": {
|
||||
"avg": "25.0",
|
||||
"count": 1
|
||||
},
|
||||
"configuration": {
|
||||
"avg": "97.0",
|
||||
"count": 5
|
||||
},
|
||||
"interaction": {
|
||||
"avg": "80.0",
|
||||
"count": 2
|
||||
},
|
||||
"resource": {
|
||||
"avg": "96.3",
|
||||
"count": 4
|
||||
},
|
||||
"cross-subsystem": {
|
||||
"avg": "100.0",
|
||||
"count": 1
|
||||
},
|
||||
"architectural": {
|
||||
"avg": "100.0",
|
||||
"count": 1
|
||||
}
|
||||
},
|
||||
"byDifficulty": {
|
||||
"easy": {
|
||||
"avg": "97.5",
|
||||
"count": 8
|
||||
},
|
||||
"medium": {
|
||||
"avg": "89.2",
|
||||
"count": 12
|
||||
},
|
||||
"hard": {
|
||||
"avg": "80.0",
|
||||
"count": 2
|
||||
}
|
||||
},
|
||||
"results": [
|
||||
{
|
||||
"id": "struct-001",
|
||||
"category": "structural",
|
||||
"difficulty": "easy",
|
||||
"question": "How many Helm charts are defined across the Foxtrot monorepo?",
|
||||
"groundTruth": "76",
|
||||
"llmAnswer": "76",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/subsystems/runtime.md",
|
||||
"reference/system-architecture.md",
|
||||
"reference/contracts/index.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/subsystems/runtime.md",
|
||||
"reference/system-architecture.md",
|
||||
"reference/contracts/index.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI provided the exact correct answer (76) matching ground truth. No extraneous information or hallucinations present. Correct answer indicates successful navigation to relevant Helm chart definitions in the monorepo."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "struct-002",
|
||||
"category": "structural",
|
||||
"difficulty": "medium",
|
||||
"question": "Which 5 Helm charts produce the most Kubernetes resources? List them with their resource counts.",
|
||||
"groundTruth": "cluster (app-common/apps-provider/addons/charts/common/cluster): 55\ncluster (app-common/charts/cluster): 32\njenkins (app-common/charts/jenkins): 29\nkube-state-metrics (app-common/charts/otel-collector/charts/kube-state-metrics): 27\nfoxtrot-eks (compute-common/templates/foxtrot-eks): 24",
|
||||
"llmAnswer": "1. cluster (`app-common/apps-provider/addons/charts/common/cluster`) - 55 resources\n2. cluster (`app-common/charts/cluster`) - 32 resources\n3. jenkins (`app-common/charts/jenkins`) - 29 resources\n4. kube-state-metrics (`app-common/charts/otel-collector/charts/kube-state-metrics`) - 27 resources\n5. foxtrot-eks (`compute-common/templates/foxtrot-eks`) - 24 resources",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/subsystems/runtime.md",
|
||||
"reference/system-architecture.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/subsystems/runtime.md",
|
||||
"reference/system-architecture.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 4,
|
||||
"notes": "AI answer matches ground truth exactly across all 5 items with correct resource counts and paths in proper ranking order. No hallucinations or extraneous information. Navigation score is 4 rather than 5 because process visibility is limited, but the specificity and accuracy of results strongly indicate effective information retrieval."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "struct-003",
|
||||
"category": "structural",
|
||||
"difficulty": "easy",
|
||||
"question": "How many subsystems does the Foxtrot codebase contain?",
|
||||
"groundTruth": "12",
|
||||
"llmAnswer": "\n\n12",
|
||||
"filesRead": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/subsystems/root.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/subsystems/root.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 4,
|
||||
"notes": "AI provided exact correct answer matching ground truth. Answer is concise with no hallucinations or extraneous information. Navigation scored 4 rather than 5 due to lack of visible process documentation showing direct path to source."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-external-dns-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"external-dns\" chart (at app-common/apps-provider/addons/charts/common/external-dns)?",
|
||||
"groundTruth": "external-dns (1.17.0) [condition: external-dns.enabled]",
|
||||
"llmAnswer": "\n\nBased on the documentation provided, the dependencies of the \"external-dns\" chart at `app-common/apps-provider/addons/charts/common/external-dns` are:\n\n- **external-dns** (1.17.0) *if external-dns.enabled*",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-external-dns.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/contracts/index.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-external-dns.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/contracts/index.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 3,
|
||||
"notes": "AI answer correctly identifies the single dependency (external-dns 1.17.0) and its condition (external-dns.enabled). Information is accurate and complete with no hallucinations. Formatting is appropriate for documentation. Navigation score is moderate because while the answer is correct, the response doesn't demonstrate the process of locating the chart file or its Chart.yaml/values.yaml to verify the dependency information."
|
||||
},
|
||||
"composite": 90,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-ingress-nginx-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"ingress-nginx\" chart (at app-common/apps-provider/addons/charts/common/ingress-nginx)?",
|
||||
"groundTruth": "ingress-nginx (4.12.0) [condition: ingress-nginx.enabled]",
|
||||
"llmAnswer": "\n\nBased on the documentation file for the ingress-nginx chart at `app-common/apps-provider/addons/charts/common/ingress-nginx`, the dependencies are:\n\n- **ingress-nginx** (4.12.0) *if ingress-nginx.enabled*",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-ingress-nginx.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-ingress-nginx.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI answer correctly identifies the single dependency (ingress-nginx 4.12.0) with the conditional flag. All facts match ground truth. No hallucinations or extraneous information. Agent explicitly cited the correct file path, demonstrating proper navigation."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-kube-state-metrics-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"kube-state-metrics\" chart (at app-common/apps-provider/addons/charts/common/kube-state-metrics)?",
|
||||
"groundTruth": "kube-state-metrics (5.26.0) [condition: kube-state-metrics.enabled]",
|
||||
"llmAnswer": "\n\nBased on the documentation provided, the dependencies of the \"kube-state-metrics\" chart at `app-common/apps-provider/addons/charts/common/kube-state-metrics` are:\n\n- kube-state-metrics (5.26.0) - conditional on `kube-state-metrics.enabled`",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-kube-state-metrics.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"diagrams/helm-interactions.mmd"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-kube-state-metrics.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"diagrams/helm-interactions.mmd"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 4,
|
||||
"notes": "AI answer correctly identifies the single dependency (kube-state-metrics 5.26.0) with the proper condition flag. Formatting differs slightly from ground truth (prose vs. bracket notation) but conveys identical information. No hallucinations or extraneous details. Navigation score reduced from 5 only because actual file discovery process isn't visible, though correctness strongly indicates proper source location."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-open-telemetry-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"open-telemetry\" chart (at app-common/apps-provider/addons/charts/common/otel-collector)?",
|
||||
"groundTruth": "opentelemetry-operator (0.26.4) [condition: opentelemetry-operator.enabled]\nk8s-metrics (0.1.0) [condition: k8s-metrics.enabled]\nagent (0.1.1) [condition: agent.enabled]\ncommon (0.1.0) [condition: common.enabled]\ngw-metrics (0.1.0) [condition: gw-metrics.enabled]\ngw-traces (0.1.0) [condition: gw-traces.enabled]\nprom-scraper (0.1.0) [condition: prom-scraper.enabled]",
|
||||
"llmAnswer": "Based on the documentation provided, the dependencies of the \"open-telemetry\" chart are:\n\n- opentelemetry-operator (0.26.4)\n- k8s-metrics (0.1.0)\n- agent (0.1.1)\n- common (0.1.0)\n- gw-metrics (0.1.0)\n- gw-traces (0.1.0)\n- prom-scraper (0.1.0)",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/contracts/index.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/contracts/index.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 3,
|
||||
"precision": 5,
|
||||
"navigation": 4,
|
||||
"notes": "AI correctly identified all 7 dependencies with accurate names and versions. However, it omitted the conditional metadata ([condition: ...]) that is part of the ground truth specification. This represents incomplete coverage of the full dependency information, though the core dependency list is accurate and complete."
|
||||
},
|
||||
"composite": 85,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-reltio-prometheus-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"reltio-prometheus\" chart (at app-common/apps-provider/addons/charts/common/prometheus)?",
|
||||
"groundTruth": "kube-prometheus-stack (69.4.1) [condition: kube-prometheus-stack.enabled]\nprometheus-adapter (4.11.0) [condition: prometheus-adapter.enabled]",
|
||||
"llmAnswer": "- kube-prometheus-stack (69.4.1)\n- prometheus-adapter (4.11.0)",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-prometheus.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/contracts/index.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-prometheus.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/contracts/index.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 4,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI correctly identified both dependencies with accurate versions. Omitted conditional metadata ([condition: ...]) that appears in ground truth, which represents incomplete capture of dependency specifications. Core dependency facts are accurate and no hallucinations present."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "contract-001",
|
||||
"category": "contract",
|
||||
"difficulty": "medium",
|
||||
"question": "Which secrets or ConfigMaps are shared across multiple Helm charts? List each with the charts that use it.",
|
||||
"groundTruth": "logdna-agent-key: cluster\nlogdna-agent-tags: cluster\nvault-secret: ai-app, cleanse-app, pms-app, rdm-app, shared-app\nvault-secret-rdm-tasks: ai-app, cleanse-app, pms-app, rdm-app, shared-app",
|
||||
"llmAnswer": "NOT_FOUND\n\nThe provided documentation does not contain explicit information about which specific secrets or ConfigMaps are shared across multiple Helm charts. While the contracts section references some external dependencies (such as `vault-secret`, `vault-secret-rdm-tasks`, `logdna-agent-key`, and `logdna-agent-tags`), the documentation does not provide a comprehensive mapping of shared secrets/ConfigMaps to the charts that consume them.",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/system-architecture.md",
|
||||
"explanation/change-impact.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/system-architecture.md",
|
||||
"explanation/change-impact.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 0,
|
||||
"completeness": 0,
|
||||
"precision": 5,
|
||||
"navigation": 0,
|
||||
"notes": "AI answered NOT_FOUND when ground truth contains explicit mappings of 4 shared secrets/ConfigMaps across 5 Helm charts. The agent failed to locate or extract the required information from available documentation. No hallucinations present, but complete failure to answer the question."
|
||||
},
|
||||
"composite": 25,
|
||||
"notFound": true
|
||||
},
|
||||
{
|
||||
"id": "config-mdm-app-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "How many top-level configuration keys does the mdm-app chart (at app-common/charts/mdm-app) expose in its values.yaml?",
|
||||
"groundTruth": "38",
|
||||
"llmAnswer": "38",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI provided exact correct count (38) matching ground truth. Answer is factually accurate, complete, and free of hallucination. Agent successfully located and analyzed the correct values.yaml file."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-ai-app-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "How many top-level configuration keys does the ai-app chart (at app-common/charts/ai-app) expose in its values.yaml?",
|
||||
"groundTruth": "34",
|
||||
"llmAnswer": "34",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-ai-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-ai-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 4,
|
||||
"notes": "AI provided the exact correct count of 34 top-level keys. Answer is factually accurate, complete for the question asked, and contains no extraneous information. Navigation score is 4 rather than 5 because while the correct answer indicates the agent found the right file, the evaluation lacks explicit evidence of the navigation process or steps taken to locate and analyze the values.yaml file."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-elasticsearch-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "How many top-level configuration keys does the elasticsearch chart (at app-common/apps-provider/addons/charts/state-apps/es) expose in its values.yaml?",
|
||||
"groundTruth": "32",
|
||||
"llmAnswer": "32",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-apps-es.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-apps-es.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI answer matches ground truth exactly. The agent correctly identified 32 top-level configuration keys in the elasticsearch chart's values.yaml file. No extraneous information or hallucination present. Perfect alignment with expected answer."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-hazelcast-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "How many top-level configuration keys does the hazelcast chart (at app-common/apps-provider/addons/charts/state-apps/hz) expose in its values.yaml?",
|
||||
"groundTruth": "32",
|
||||
"llmAnswer": "32",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-apps-hz.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-apps-hz.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 4,
|
||||
"notes": "AI provided the exact correct answer (32) matching ground truth. No hallucinated information or extraneous details. Navigation score slightly lower because the response doesn't show the agent's process of locating and examining the values.yaml file, though the correct answer strongly implies successful file discovery."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-redis-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "How many top-level configuration keys does the redis chart (at app-common/charts/redis) expose in its values.yaml?",
|
||||
"groundTruth": "23",
|
||||
"llmAnswer": "23",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-redis.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-redis.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 4,
|
||||
"notes": "AI answer matches ground truth exactly (23 keys). Answer is factually correct, complete, and contains no hallucinated information. Navigation score is 4 rather than 5 because the response doesn't show evidence of the agent's process in locating and analyzing the values.yaml file, though the correct answer indicates successful file discovery."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "interaction-001",
|
||||
"category": "interaction",
|
||||
"difficulty": "medium",
|
||||
"question": "Which Helm charts reference Kubernetes services from other components? List each chart and the service it calls.",
|
||||
"groundTruth": "hazelcast (app-common/apps-provider/addons/charts/state-apps/hz) → kubernetes\nhazelcast (app-common/charts/hazelcast) → kubernetes\ngw-metrics (app-common/charts/otel-collector/charts/gw-metrics) → argo-rollouts-metrics\nredis (app-common/charts/redis) → headless",
|
||||
"llmAnswer": "Based on the documentation provided, the following Helm charts reference Kubernetes services from other components:\n\n1. **hazelcast** (`app-common/apps-provider/addons/charts/state-apps/hz`) → `kubernetes` service\n2. **hazelcast** (`app-common/charts/hazelcast`) → `kubernetes` service\n3. **gw-metrics** (`app-common/charts/otel-collector/charts/gw-metrics`) → `argo-rollouts-metrics` service\n4. **redis** (`app-common/charts/redis`) → `headless` service",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"diagrams/helm-interactions.mmd",
|
||||
"reference/system-architecture.md",
|
||||
"explanation/change-impact.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"diagrams/helm-interactions.mmd",
|
||||
"reference/system-architecture.md",
|
||||
"explanation/change-impact.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI answer matches ground truth exactly across all four chart-to-service mappings. Paths and service names are correct. Minor addition of 'service' label after each service name is clarifying, not inaccurate. No hallucinations or missing items."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "interaction-002",
|
||||
"category": "interaction",
|
||||
"difficulty": "hard",
|
||||
"question": "Which network ports are used by multiple Helm charts? List each port and the charts that expose it.",
|
||||
"groundTruth": "Port 443: cluster, twistlock-defender, eck-operator, twistlock\nPort 8889: gw-metrics, gw-traces, kube-state-metrics\nPort 9200: eck-operator, elasticsearch\nPort 13133: agent, gw-metrics, gw-traces, k8s-metrics, prom-scraper, elasticsearch",
|
||||
"llmAnswer": "Based on the contracts documentation provided, the following network ports are used by multiple Helm charts:\n\n- **Port 443**: cluster, eck-operator, twistlock-defender\n- **Port 9200**: eck-operator, elasticsearch",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"diagrams/helm-interactions.mmd",
|
||||
"reference/system-architecture.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"diagrams/helm-interactions.mmd",
|
||||
"reference/system-architecture.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 4,
|
||||
"completeness": 1,
|
||||
"precision": 5,
|
||||
"navigation": 2,
|
||||
"notes": "AI correctly identified Port 443 and 9200 with accurate chart mappings, but missed Port 8889 and 13133 entirely. Port 443 entry also omits 'twistlock' from the chart list. Answer covers only 2 of 4 ports and is missing 50% of the required information. No hallucinations present, but significant gaps in discovery."
|
||||
},
|
||||
"composite": 60,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "resource-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the 10 most common Kubernetes resource types generated across all Foxtrot Helm charts?",
|
||||
"groundTruth": "ClusterRole: 51\nServiceAccount: 49\nSecret: 43\nExternalSecret: 38\nService: 36\nRole: 30\nClusterRoleBinding: 29\nDeployment: 29\nConfigMap: 25\nRoleBinding: 25",
|
||||
"llmAnswer": "\n\nBased on the \"Kubernetes Resource Types (across all charts)\" table in the system architecture documentation, the 10 most common Kubernetes resource types are:\n\n1. ClusterRole - 51\n2. ServiceAccount - 49\n3. Secret - 43\n4. ExternalSecret - 38\n5. Service - 36\n6. Role - 30\n7. ClusterRoleBinding - 29\n8. Deployment - 29\n9. ConfigMap - 25\n10. RoleBinding - 25",
|
||||
"filesRead": [
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/system-architecture.md",
|
||||
"diagrams/all-contracts.mmd",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/system-architecture.md",
|
||||
"diagrams/all-contracts.mmd",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI answer matches ground truth exactly across all 10 items with correct counts and ranking. Properly cited source documentation. No hallucinations or extraneous information."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "resource-mdm-app-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What Kubernetes resource types does the mdm-app chart generate? List each type and count.",
|
||||
"groundTruth": "Secret: 5\nJob: 4\nDeployment: 2\nPersistentVolumeClaim: 2\nService: 2\nExternalSecret: 2\nHorizontalPodAutoscaler: 1\nRollout: 1\nPersistentVolume: 1\nPodDisruptionBudget: 1\nServiceAccount: 1",
|
||||
"llmAnswer": "Based on the mdm-app chart documentation, here are the Kubernetes resource types generated:\n\n- HorizontalPodAutoscaler: 1\n- Deployment: 2\n- Rollout: 1\n- Job: 4\n- PersistentVolume: 1\n- PersistentVolumeClaim: 2\n- Service: 2\n- PodDisruptionBudget: 1\n- Secret: 5\n- ExternalSecret: 2\n- ServiceAccount: 1\n\n**Total: 22 resources**",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/contracts/index.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/contracts/index.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 4,
|
||||
"notes": "All 11 resource types listed with exact counts matching ground truth. No hallucinations or extraneous information. Navigation scored 4 rather than 5 because the response lacks explicit evidence of how the information was retrieved (e.g., which files were examined in the chart), though the perfect accuracy suggests reliable source access."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "resource-cassandra-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What Kubernetes resource types does the cassandra chart generate? List each type and count.",
|
||||
"groundTruth": "Service: 2\nStatefulSet: 1\nExternalSecret: 1\nClusterSecretStore: 1\nConfigMap: 1\nSecret: 1\nServiceAccount: 1\nRole: 1\nRoleBinding: 1\nClusterRole: 1\nClusterRoleBinding: 1\nCronJob: 1\nJob: 1",
|
||||
"llmAnswer": "Based on the cassandra chart documentation, here are the Kubernetes resource types generated:\n\n- Service: 2\n- StatefulSet: 1\n- ExternalSecret: 1\n- ClusterSecretStore: 1\n- ConfigMap: 1\n- Secret: 1\n- ServiceAccount: 1\n- Role: 1\n- RoleBinding: 1\n- ClusterRole: 1\n- ClusterRoleBinding: 1\n- CronJob: 1\n- Job: 1",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-cluster-cassandra.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/system-architecture.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-cluster-cassandra.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"reference/system-architecture.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 4,
|
||||
"notes": "AI answer matches ground truth exactly across all 13 resource types and counts. No hallucinations or extra information. Navigation score reduced from 5 because the response doesn't demonstrate the actual process of finding the information (no file references, execution logs, or search path shown), though the perfect accuracy indicates successful information retrieval."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "resource-jenkins-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What Kubernetes resource types does the jenkins chart generate? List each type and count.",
|
||||
"groundTruth": "ConfigMap: 5\nService: 3\nSecret: 3\nIngress: 2\nServiceAccount: 2\nPersistentVolumeClaim: 1\nSecurityGroupPolicy: 1\nPrometheusRule: 1\nBackendConfig: 1\nNetworkPolicy: 1\nPodDisruptionBudget: 1\nPodMonitoring: 1\nRoute: 1\nServiceMonitor: 1\nStatefulSet: 1\nRole: 1\nRoleBinding: 1\nSecretClaim: 1\nPod: 1",
|
||||
"llmAnswer": "Based on the Jenkins chart documentation, here are the Kubernetes resource types generated:\n\n- ConfigMap: 5\n- Service: 3\n- Secret: 3\n- Ingress: 2\n- ServiceAccount: 2\n- PersistentVolumeClaim: 1\n- SecurityGroupPolicy: 1\n- PrometheusRule: 1\n- BackendConfig: 1\n- NetworkPolicy: 1\n- PodDisruptionBudget: 1\n- PodMonitoring: 1\n- Route: 1\n- ServiceMonitor: 1\n- StatefulSet: 1\n- Role: 1\n- RoleBinding: 1\n- SecretClaim: 1\n- Pod: 1",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-jenkins.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-jenkins.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/app-common.md",
|
||||
"diagrams/app-common-contracts.mmd"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 4,
|
||||
"notes": "Answer matches ground truth exactly across all 19 resource types with correct counts. No hallucinations or errors. Navigation score reduced from 5 because the response doesn't demonstrate the process of finding this information (no file references, tool usage, or working shown), though the perfect accuracy indicates successful information retrieval."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "cross-sub-001",
|
||||
"category": "cross-subsystem",
|
||||
"difficulty": "hard",
|
||||
"question": "Which subsystems depend on app-tools, and how heavily (by call+import count)?",
|
||||
"groundTruth": "ipam-tools: 6\ncompute-tools: 4\napp-common: 1",
|
||||
"llmAnswer": "Based on the cross-subsystem dependencies table in the system-architecture.md file, the subsystems that depend on app-tools are:\n\n1. **ipam-tools**: 6 calls + 0 imports = **6 total**\n2. **compute-tools**: 4 calls + 0 imports = **4 total**\n3. **app-common**: 1 call + 0 imports = **1 total**\n\nAll dependencies on app-tools are through calls only (no imports), indicating they treat it as a service boundary for resource provisioning and credential creation operations.",
|
||||
"filesRead": [
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/runtime.md",
|
||||
"reference/system-architecture.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/contracts/index.md",
|
||||
"reference/subsystems/runtime.md",
|
||||
"reference/system-architecture.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI answer matches ground truth exactly on all three subsystems and their dependency counts. Agent correctly identified the source document (system-architecture.md), extracted precise numerical data, and provided accurate supplementary analysis about call-only dependencies without hallucination."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "arch-002",
|
||||
"category": "architectural",
|
||||
"difficulty": "easy",
|
||||
"question": "What is the current version and appVersion of the mdm-app Helm chart?",
|
||||
"groundTruth": "version: 0.7.4, appVersion: 2025.12-12-develop",
|
||||
"llmAnswer": "**Version:** 0.7.4 \n**App Version:** 2025.12-12-develop",
|
||||
"filesRead": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"plannedFiles": [
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/app-common.md"
|
||||
],
|
||||
"score": {
|
||||
"accuracy": 5,
|
||||
"completeness": 5,
|
||||
"precision": 5,
|
||||
"navigation": 5,
|
||||
"notes": "AI provided both required values (version 0.7.4 and appVersion 2025.12-12-develop) with exact accuracy. No hallucinations or extraneous information. The correct values indicate successful location of the Helm chart metadata."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -144,7 +144,7 @@ Respond in EXACTLY this JSON format:
|
||||
/** Run the agent eval */
|
||||
async function runAgentEval(docsDir, questionsPath, llmOpts = {}) {
|
||||
const questionsData = JSON.parse(fs.readFileSync(questionsPath, 'utf8'));
|
||||
const questions = questionsData.questions.filter(q => q.audience.includes('machine'));
|
||||
const questions = questionsData.questions.filter(q => !q.audience || q.audience.includes('machine') || true);
|
||||
|
||||
console.log(`Agent Eval: ${questions.length} machine-audience questions`);
|
||||
|
||||
|
||||
1044
eval-confluence-baseline.json
Normal file
1044
eval-confluence-baseline.json
Normal file
File diff suppressed because it is too large
Load Diff
263
eval-confluence-questions.json
Normal file
263
eval-confluence-questions.json
Normal file
@@ -0,0 +1,263 @@
|
||||
{
|
||||
"generated": "2026-03-10T04:53:00Z",
|
||||
"benchmark": "confluence-gold-standard",
|
||||
"count": 32,
|
||||
"questions": [
|
||||
{
|
||||
"id": "arch-layered-order",
|
||||
"category": "architecture",
|
||||
"question": "What are the five layers in Foxtrot's layered architecture, listed from top to bottom?",
|
||||
"answer": "Application Layer (app-*), Compute Layer (compute-*), Network Layer (network-*), Account Layer (account-*), Control Plane (control-core).",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "arch-hub-spoke-ownership",
|
||||
"category": "architecture",
|
||||
"question": "Which ArgoCD instance owns the account, network, and compute layers, and which owns the application layer?",
|
||||
"answer": "Hub ArgoCD owns account, network, and compute layers (infrastructure and control-plane appsets). Spoke ArgoCD owns the application layer (app-runtime appsets only).",
|
||||
"source": "reference/system-architecture.md, reference/runtime-architecture.md, explanation/platform-concepts.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "arch-aws-regions",
|
||||
"category": "architecture",
|
||||
"question": "What AWS regions does Foxtrot support?",
|
||||
"answer": "us-east-1, us-west-2, eu-west-1, eu-central-1.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "arch-gcp-shared-vpc-host",
|
||||
"category": "architecture",
|
||||
"question": "What is the default GCP host project used for Shared VPC in network-common, and what is the host network path it attaches to?",
|
||||
"answer": "The default host project is `network-services-436015`. When `sharedVpc.enabled: true`, service project resources attach to the host network path `projects/HOST_PROJECT/global/networks/gcp-core-network`.",
|
||||
"source": "reference/network-common-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "arch-cidr-employee-access",
|
||||
"category": "architecture",
|
||||
"question": "What is the CIDR range for the employee access (bastions) segment on AWS and on GCP?",
|
||||
"answer": "AWS: 10.208.128.0/24. GCP: 10.128.128.0/24.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "arch-production-cidr",
|
||||
"category": "architecture",
|
||||
"question": "What is the CIDR range for production workloads on AWS and on GCP?",
|
||||
"answer": "AWS: 10.192.0.0/10. GCP: 10.128.0.0/10.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "dep-runtime-common-horizontal",
|
||||
"category": "dependencies",
|
||||
"question": "Which runtime repositories consume charts from which common repositories?",
|
||||
"answer": "app-runtime consumes charts from app-common; compute-runtime consumes charts from compute-common; network-runtime consumes charts from network-common; account-runtime consumes charts from account-common.",
|
||||
"source": "reference/system-architecture.md, reference/repository-structure.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "dep-vertical-layers",
|
||||
"category": "dependencies",
|
||||
"question": "What are the vertical layer dependencies in Foxtrot's architecture?",
|
||||
"answer": "Application Layer depends on Compute Layer; Compute Layer depends on Network Layer; Network Layer depends on Account Layer; Account Layer is managed by the Control Plane.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "dep-create-account-repos",
|
||||
"category": "dependencies",
|
||||
"question": "How many PRs does `create-account` produce and which repositories does it touch?",
|
||||
"answer": "4 PRs: account-runtime, network-core (account principal updates), control-core (provider config + assume-role policy updates), and cloud-iam (account bootstrap TF).",
|
||||
"source": "reference/compute-tools-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "dep-create-cluster-repos",
|
||||
"category": "dependencies",
|
||||
"question": "Which repositories does `create-cluster` commit to, and how many PRs does it typically produce?",
|
||||
"answer": "4 PRs: compute-runtime (cluster path) plus 3 PRs in cloud-auth-core (cluster/node role PR, IRSA role PR, and network role PR). It also calls cluster-netbox-allocate.py to reserve/allocate cluster subnet CIDRs.",
|
||||
"source": "reference/compute-tools-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "dep-compute-common-deps",
|
||||
"category": "dependencies",
|
||||
"question": "What are the core dependencies of compute-common for cluster provisioning?",
|
||||
"answer": "Crossplane core + provider-aws/provider-kubernetes, Helm, KCL build pipeline, and ArgoCD deployment flow.",
|
||||
"source": "reference/compute-common-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "ops-argocd-deployment-flow",
|
||||
"category": "operations",
|
||||
"question": "What are the steps in the ArgoCD deployment flow for an application, from ApplicationSet watching app-runtime to pods starting?",
|
||||
"answer": "1. ApplicationSet watches app-runtime. 2. Reads argo-gen-params.yaml per environment. 3. Generates Application. 4. Pulls chart from OCI registry. 5. Merges values and overrides. 6. Renders manifests. 7. Applies to cluster. 8. ESO fetches secrets. 9. Pods start with injected configs.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "ops-ebf-release-pattern",
|
||||
"category": "operations",
|
||||
"question": "What are the steps in the EBF/weekly release pattern?",
|
||||
"answer": "1. Create release branch from develop. 2. Promote versions for release/hotfix environments. 3. Run stage pipelines (preview, preprod, production). 4. Merge promoted changes to main. 5. Reconcile hotfix and develop branches.",
|
||||
"source": "reference/release-process.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "ops-rollback-procedure",
|
||||
"category": "operations",
|
||||
"question": "What is the preferred rollback procedure in Foxtrot, and when are script-level deletes used instead?",
|
||||
"answer": "GitOps rollback is preferred: revert the runtime/config commit, merge the revert PR, and confirm ArgoCD reconciliation. Script-level deletes (delete-vpc.sh, delete-cluster.sh, delete-app.sh) are used only with explicit approval and change control.",
|
||||
"source": "reference/verification-and-rollback.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "ops-branch-cluster-mapping",
|
||||
"category": "operations",
|
||||
"question": "What is the branch-to-cluster mapping in app-runtime? Which branch targets which environments?",
|
||||
"answer": "develop \u2192 internal clusters (development and QA); main \u2192 customer-facing clusters (production); hotfix \u2192 EBF verification; release \u2192 release verification (weekly release staging).",
|
||||
"source": "reference/system-architecture.md, reference/release-process.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "ops-jenkins-jobs",
|
||||
"category": "operations",
|
||||
"question": "What are the six Jenkins jobs in the Foxtrot pipeline and what does each do?",
|
||||
"answer": "appRuntimeSync: syncs runtime branches on changes to main/hotfix/release. foxtrotSync: updates imagetags-override.yaml with new image tags. foxtrotPromote: promotes and merges release outputs. chartSync: updates argo-gen-params.yaml with chart versions. chartCheckInAppCommon: detects chart version mismatches and triggers chartSync. chartPromoteVersion: promotes chart versions per release stage.",
|
||||
"source": "reference/api-contracts.md, reference/release-process.md",
|
||||
"difficulty": "hard"
|
||||
},
|
||||
{
|
||||
"id": "ops-create-cluster-timeout",
|
||||
"category": "operations",
|
||||
"question": "What is the timeout for waiting for a cluster to reach ready condition in the create-cluster workflow?",
|
||||
"answer": "3600 seconds (1 hour), with a poll interval of 30 seconds.",
|
||||
"source": "reference/compute-tools-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "config-cloud-resource-naming",
|
||||
"category": "configuration",
|
||||
"question": "What is the canonical format for cloud resource names in Foxtrot, and what does each component represent?",
|
||||
"answer": "Format: `{provider}-{phase}-{region-code}-{index}-{resource}[-{descriptor}]`. provider: aws/gcp/azr; phase: prd/iqa/dev; region-code: two-letter derived code; index: incremental integer; resource: vpc/eks/gke/aks/lb/rds. Example: `gcp-prd-us-1-vpc-blue`.",
|
||||
"source": "reference/naming-conventions.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "config-region-code-algorithm",
|
||||
"category": "configuration",
|
||||
"question": "What is the algorithm for deriving a two-letter region code from a cloud region name, and what is the region code for `westeurope`?",
|
||||
"answer": "Algorithm: 1. Remove directional words (east, west, north, south). 2. Remove separators. 3. Take first two characters. For `westeurope`: remove 'west' \u2192 'europe' \u2192 'eu'.",
|
||||
"source": "reference/naming-conventions.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "config-app-config-merge-order",
|
||||
"category": "configuration",
|
||||
"question": "What is the configuration merge order for app charts in Foxtrot, from lowest to highest precedence?",
|
||||
"answer": "1. values.yaml, 2. default-properties.yaml, 3. default-values.yaml / k8s-values.yaml, 4. common-values.yaml, 5. properties-override.yaml, 6. k8s-override.yaml, 7. imagetags-override.yaml.",
|
||||
"source": "reference/configuration-reference.md, reference/repository-structure.md, reference/app-common-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "config-account-creation-product-id",
|
||||
"category": "configuration",
|
||||
"question": "What is the AWS Service Catalog product ID used by account-common for account creation, and what are the customer-facing and internal OU IDs?",
|
||||
"answer": "Service Catalog product ID: `prod-mts6togilnnuk`. Customer-facing OU: `ou-8vpz-mogk4qua`. Internal OU: `ou-8vpz-rw7etshv`. Provider config reference: `aws-709659200419`.",
|
||||
"source": "reference/account-common-architecture.md",
|
||||
"difficulty": "hard"
|
||||
},
|
||||
{
|
||||
"id": "config-ipam-rds-backup",
|
||||
"category": "configuration",
|
||||
"question": "What are the RDS automated backup retention period and backup window configured in ipam-core?",
|
||||
"answer": "RDS automated backup retention: 7 days. RDS backup window: 03:00-06:00 UTC.",
|
||||
"source": "reference/ipam-core-architecture.md",
|
||||
"difficulty": "hard"
|
||||
},
|
||||
{
|
||||
"id": "config-dev-artifact-naming",
|
||||
"category": "configuration",
|
||||
"question": "What is the artifact naming convention for development chart versions vs release chart versions in the OCI registry?",
|
||||
"answer": "Development artifacts: `{chart-name}:0.0.0-{commit-sha}`. Release artifacts: `{chart-name}:{chart-version}` (semantic version from Chart.yaml).",
|
||||
"source": "reference/api-contracts.md, reference/network-common-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "services-tech-stack-orchestration",
|
||||
"category": "services",
|
||||
"question": "What technologies make up the orchestration layer in Foxtrot's technology stack?",
|
||||
"answer": "Kubernetes (EKS, GKE, AKS), ArgoCD, and Crossplane.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "services-state-management",
|
||||
"category": "services",
|
||||
"question": "What are the four state management services used in Foxtrot?",
|
||||
"answer": "Elasticsearch, Hazelcast, Redis, and Milvus.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "services-eks-addon-versions",
|
||||
"category": "services",
|
||||
"question": "What are the default pinned versions for the vpc-cni and coredns EKS addons in compute-common?",
|
||||
"answer": "vpc-cni: v1.20.1-eksbuild.1. coredns: v1.12.2-eksbuild.4.",
|
||||
"source": "reference/compute-common-architecture.md",
|
||||
"difficulty": "hard"
|
||||
},
|
||||
{
|
||||
"id": "services-aws-nat-egress-model",
|
||||
"category": "services",
|
||||
"question": "What is the AWS NAT egress model for internal VPCs vs production clusters in Foxtrot?",
|
||||
"answer": "Internal AWS VPCs use shared NAT egress. Production AWS clusters use dedicated NAT egress per cluster. This split reduces cost for internal environments while isolating production egress and capacity per cluster.",
|
||||
"source": "reference/network-common-architecture.md, reference/operator-basics.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "services-ipam-netbox-role",
|
||||
"category": "services",
|
||||
"question": "What is NetBox used for in Foxtrot, and what infrastructure does it run on?",
|
||||
"answer": "NetBox is Foxtrot's IP address management (IPAM) source of truth. It tracks all VPC CIDR blocks across clouds, prevents CIDR overlap, and serves allocation data to compute-tools during VPC and cluster provisioning. It runs on AWS ECS with an RDS database and ALB, provisioned via Terraform in ipam-core.",
|
||||
"source": "reference/ipam-core-architecture.md, reference/system-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "contracts-argo-gen-params-required",
|
||||
"category": "contracts",
|
||||
"question": "What are the required fields in an argo-gen-params.yaml file for the ArgoCD ApplicationSet generator?",
|
||||
"answer": "chart.version (string), namespace (string), and environment (string).",
|
||||
"source": "reference/api-contracts.md, reference/azure-runtime-contracts.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "contracts-azure-xrd-naming",
|
||||
"category": "contracts",
|
||||
"question": "What is the XRD name format and composition name format for Azure AKS in Foxtrot, with examples?",
|
||||
"answer": "XRD name format: `{plural}.{group}`, e.g. `reltioaksclusters.foxtrot.reltio.com`. Composition name format: `reltio-aks-cluster-{channel}-{version}`, e.g. `reltio-aks-cluster-prd-v1`.",
|
||||
"source": "reference/azure-xrd-contract.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "contracts-helm-chart-required-values",
|
||||
"category": "contracts",
|
||||
"question": "What are the five required values that all app Helm charts must define?",
|
||||
"answer": "accountID (string), cloudProvider (string), region (string), domain (string), and imageRegistry (string).",
|
||||
"source": "reference/api-contracts.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "contracts-sync-wave-ordering",
|
||||
"category": "contracts",
|
||||
"question": "What are the ArgoCD sync wave values and what resource types are deployed at each wave?",
|
||||
"answer": "Wave -5: prerequisites. Wave 0: infrastructure. Wave 5: state apps. Wave 10: application services. Wave 15: post-deployment resources (monitoring, backup hooks, finalizers).",
|
||||
"source": "reference/api-contracts.md",
|
||||
"difficulty": "hard"
|
||||
}
|
||||
]
|
||||
}
|
||||
263
eval-confluence-ref-questions.json
Normal file
263
eval-confluence-ref-questions.json
Normal file
@@ -0,0 +1,263 @@
|
||||
{
|
||||
"generated": "2026-03-10T04:53:00Z",
|
||||
"benchmark": "confluence-reference-only",
|
||||
"count": 32,
|
||||
"questions": [
|
||||
{
|
||||
"id": "arch-layered-order",
|
||||
"category": "architecture",
|
||||
"question": "What are the five layers in Foxtrot's layered architecture, listed from top to bottom?",
|
||||
"answer": "Application Layer (app-*), Compute Layer (compute-*), Network Layer (network-*), Account Layer (account-*), Control Plane (control-core).",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "arch-hub-spoke-ownership",
|
||||
"category": "architecture",
|
||||
"question": "Which ArgoCD instance owns the account, network, and compute layers, and which owns the application layer?",
|
||||
"answer": "Hub ArgoCD owns account, network, and compute layers (infrastructure and control-plane appsets). Spoke ArgoCD owns the application layer (app-runtime appsets only).",
|
||||
"source": "reference/system-architecture.md, reference/runtime-architecture.md, explanation/platform-concepts.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "arch-aws-regions",
|
||||
"category": "architecture",
|
||||
"question": "What AWS regions does Foxtrot support?",
|
||||
"answer": "us-east-1, us-west-2, eu-west-1, eu-central-1.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "arch-gcp-shared-vpc-host",
|
||||
"category": "architecture",
|
||||
"question": "What is the default GCP host project used for Shared VPC in network-common, and what is the host network path it attaches to?",
|
||||
"answer": "The default host project is `network-services-436015`. When `sharedVpc.enabled: true`, service project resources attach to the host network path `projects/HOST_PROJECT/global/networks/gcp-core-network`.",
|
||||
"source": "reference/network-common-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "arch-cidr-employee-access",
|
||||
"category": "architecture",
|
||||
"question": "What is the CIDR range for the employee access (bastions) segment on AWS and on GCP?",
|
||||
"answer": "AWS: 10.208.128.0/24. GCP: 10.128.128.0/24.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "arch-production-cidr",
|
||||
"category": "architecture",
|
||||
"question": "What is the CIDR range for production workloads on AWS and on GCP?",
|
||||
"answer": "AWS: 10.192.0.0/10. GCP: 10.128.0.0/10.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "dep-runtime-common-horizontal",
|
||||
"category": "dependencies",
|
||||
"question": "Which runtime repositories consume charts from which common repositories?",
|
||||
"answer": "app-runtime consumes charts from app-common; compute-runtime consumes charts from compute-common; network-runtime consumes charts from network-common; account-runtime consumes charts from account-common.",
|
||||
"source": "reference/system-architecture.md, reference/repository-structure.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "dep-vertical-layers",
|
||||
"category": "dependencies",
|
||||
"question": "What are the vertical layer dependencies in Foxtrot's architecture?",
|
||||
"answer": "Application Layer depends on Compute Layer; Compute Layer depends on Network Layer; Network Layer depends on Account Layer; Account Layer is managed by the Control Plane.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "dep-create-account-repos",
|
||||
"category": "dependencies",
|
||||
"question": "How many PRs does `create-account` produce and which repositories does it touch?",
|
||||
"answer": "4 PRs: account-runtime, network-core (account principal updates), control-core (provider config + assume-role policy updates), and cloud-iam (account bootstrap TF).",
|
||||
"source": "reference/compute-tools-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "dep-create-cluster-repos",
|
||||
"category": "dependencies",
|
||||
"question": "Which repositories does `create-cluster` commit to, and how many PRs does it typically produce?",
|
||||
"answer": "4 PRs: compute-runtime (cluster path) plus 3 PRs in cloud-auth-core (cluster/node role PR, IRSA role PR, and network role PR). It also calls cluster-netbox-allocate.py to reserve/allocate cluster subnet CIDRs.",
|
||||
"source": "reference/compute-tools-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "dep-compute-common-deps",
|
||||
"category": "dependencies",
|
||||
"question": "What are the core dependencies of compute-common for cluster provisioning?",
|
||||
"answer": "Crossplane core + provider-aws/provider-kubernetes, Helm, KCL build pipeline, and ArgoCD deployment flow.",
|
||||
"source": "reference/compute-common-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "ops-argocd-deployment-flow",
|
||||
"category": "operations",
|
||||
"question": "What are the steps in the ArgoCD deployment flow for an application, from ApplicationSet watching app-runtime to pods starting?",
|
||||
"answer": "1. ApplicationSet watches app-runtime. 2. Reads argo-gen-params.yaml per environment. 3. Generates Application. 4. Pulls chart from OCI registry. 5. Merges values and overrides. 6. Renders manifests. 7. Applies to cluster. 8. ESO fetches secrets. 9. Pods start with injected configs.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "ops-ebf-release-pattern",
|
||||
"category": "operations",
|
||||
"question": "What are the steps in the EBF/weekly release pattern?",
|
||||
"answer": "1. Create release branch from develop. 2. Promote versions for release/hotfix environments. 3. Run stage pipelines (preview, preprod, production). 4. Merge promoted changes to main. 5. Reconcile hotfix and develop branches.",
|
||||
"source": "reference/release-process.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "ops-rollback-procedure",
|
||||
"category": "operations",
|
||||
"question": "What is the preferred rollback procedure in Foxtrot, and when are script-level deletes used instead?",
|
||||
"answer": "GitOps rollback is preferred: revert the runtime/config commit, merge the revert PR, and confirm ArgoCD reconciliation. Script-level deletes (delete-vpc.sh, delete-cluster.sh, delete-app.sh) are used only with explicit approval and change control.",
|
||||
"source": "reference/verification-and-rollback.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "ops-branch-cluster-mapping",
|
||||
"category": "operations",
|
||||
"question": "What is the branch-to-cluster mapping in app-runtime? Which branch targets which environments?",
|
||||
"answer": "develop → internal clusters (development and QA); main → customer-facing clusters (production); hotfix → EBF verification; release → release verification (weekly release staging).",
|
||||
"source": "reference/system-architecture.md, reference/release-process.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "ops-jenkins-jobs",
|
||||
"category": "operations",
|
||||
"question": "What are the six Jenkins jobs in the Foxtrot pipeline and what does each do?",
|
||||
"answer": "appRuntimeSync: syncs runtime branches on changes to main/hotfix/release. foxtrotSync: updates imagetags-override.yaml with new image tags. foxtrotPromote: promotes and merges release outputs. chartSync: updates argo-gen-params.yaml with chart versions. chartCheckInAppCommon: detects chart version mismatches and triggers chartSync. chartPromoteVersion: promotes chart versions per release stage.",
|
||||
"source": "reference/api-contracts.md, reference/release-process.md",
|
||||
"difficulty": "hard"
|
||||
},
|
||||
{
|
||||
"id": "ops-create-cluster-timeout",
|
||||
"category": "operations",
|
||||
"question": "What is the timeout for waiting for a cluster to reach ready condition in the create-cluster workflow?",
|
||||
"answer": "3600 seconds (1 hour), with a poll interval of 30 seconds.",
|
||||
"source": "reference/compute-tools-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "config-cloud-resource-naming",
|
||||
"category": "configuration",
|
||||
"question": "What is the canonical format for cloud resource names in Foxtrot, and what does each component represent?",
|
||||
"answer": "Format: `{provider}-{phase}-{region-code}-{index}-{resource}[-{descriptor}]`. provider: aws/gcp/azr; phase: prd/iqa/dev; region-code: two-letter derived code; index: incremental integer; resource: vpc/eks/gke/aks/lb/rds. Example: `gcp-prd-us-1-vpc-blue`.",
|
||||
"source": "reference/naming-conventions.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "config-region-code-algorithm",
|
||||
"category": "configuration",
|
||||
"question": "What is the algorithm for deriving a two-letter region code from a cloud region name, and what is the region code for `westeurope`?",
|
||||
"answer": "Algorithm: 1. Remove directional words (east, west, north, south). 2. Remove separators. 3. Take first two characters. For `westeurope`: remove 'west' → 'europe' → 'eu'.",
|
||||
"source": "reference/naming-conventions.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "config-app-config-merge-order",
|
||||
"category": "configuration",
|
||||
"question": "What is the configuration merge order for app charts in Foxtrot, from lowest to highest precedence?",
|
||||
"answer": "1. values.yaml, 2. default-properties.yaml, 3. default-values.yaml / k8s-values.yaml, 4. common-values.yaml, 5. properties-override.yaml, 6. k8s-override.yaml, 7. imagetags-override.yaml.",
|
||||
"source": "reference/configuration-reference.md, reference/repository-structure.md, reference/app-common-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "config-account-creation-product-id",
|
||||
"category": "configuration",
|
||||
"question": "What is the AWS Service Catalog product ID used by account-common for account creation, and what are the customer-facing and internal OU IDs?",
|
||||
"answer": "Service Catalog product ID: `prod-mts6togilnnuk`. Customer-facing OU: `ou-8vpz-mogk4qua`. Internal OU: `ou-8vpz-rw7etshv`. Provider config reference: `aws-709659200419`.",
|
||||
"source": "reference/account-common-architecture.md",
|
||||
"difficulty": "hard"
|
||||
},
|
||||
{
|
||||
"id": "config-ipam-rds-backup",
|
||||
"category": "configuration",
|
||||
"question": "What are the RDS automated backup retention period and backup window configured in ipam-core?",
|
||||
"answer": "RDS automated backup retention: 7 days. RDS backup window: 03:00-06:00 UTC.",
|
||||
"source": "reference/ipam-core-architecture.md",
|
||||
"difficulty": "hard"
|
||||
},
|
||||
{
|
||||
"id": "config-dev-artifact-naming",
|
||||
"category": "configuration",
|
||||
"question": "What is the artifact naming convention for development chart versions vs release chart versions in the OCI registry?",
|
||||
"answer": "Development artifacts: `{chart-name}:0.0.0-{commit-sha}`. Release artifacts: `{chart-name}:{chart-version}` (semantic version from Chart.yaml).",
|
||||
"source": "reference/api-contracts.md, reference/network-common-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "services-tech-stack-orchestration",
|
||||
"category": "services",
|
||||
"question": "What technologies make up the orchestration layer in Foxtrot's technology stack?",
|
||||
"answer": "Kubernetes (EKS, GKE, AKS), ArgoCD, and Crossplane.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "services-state-management",
|
||||
"category": "services",
|
||||
"question": "What are the four state management services used in Foxtrot?",
|
||||
"answer": "Elasticsearch, Hazelcast, Redis, and Milvus.",
|
||||
"source": "reference/system-architecture.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "services-eks-addon-versions",
|
||||
"category": "services",
|
||||
"question": "What are the default pinned versions for the vpc-cni and coredns EKS addons in compute-common?",
|
||||
"answer": "vpc-cni: v1.20.1-eksbuild.1. coredns: v1.12.2-eksbuild.4.",
|
||||
"source": "reference/compute-common-architecture.md",
|
||||
"difficulty": "hard"
|
||||
},
|
||||
{
|
||||
"id": "services-aws-nat-egress-model",
|
||||
"category": "services",
|
||||
"question": "What is the AWS NAT egress model for internal VPCs vs production clusters in Foxtrot?",
|
||||
"answer": "Internal AWS VPCs use shared NAT egress. Production AWS clusters use dedicated NAT egress per cluster. This split reduces cost for internal environments while isolating production egress and capacity per cluster.",
|
||||
"source": "reference/network-common-architecture.md, reference/operator-basics.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "services-ipam-netbox-role",
|
||||
"category": "services",
|
||||
"question": "What is NetBox used for in Foxtrot, and what infrastructure does it run on?",
|
||||
"answer": "NetBox is Foxtrot's IP address management (IPAM) source of truth. It tracks all VPC CIDR blocks across clouds, prevents CIDR overlap, and serves allocation data to compute-tools during VPC and cluster provisioning. It runs on AWS ECS with an RDS database and ALB, provisioned via Terraform in ipam-core.",
|
||||
"source": "reference/ipam-core-architecture.md, reference/system-architecture.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "contracts-argo-gen-params-required",
|
||||
"category": "contracts",
|
||||
"question": "What are the required fields in an argo-gen-params.yaml file for the ArgoCD ApplicationSet generator?",
|
||||
"answer": "chart.version (string), namespace (string), and environment (string).",
|
||||
"source": "reference/api-contracts.md, reference/azure-runtime-contracts.md",
|
||||
"difficulty": "easy"
|
||||
},
|
||||
{
|
||||
"id": "contracts-azure-xrd-naming",
|
||||
"category": "contracts",
|
||||
"question": "What is the XRD name format and composition name format for Azure AKS in Foxtrot, with examples?",
|
||||
"answer": "XRD name format: `{plural}.{group}`, e.g. `reltioaksclusters.foxtrot.reltio.com`. Composition name format: `reltio-aks-cluster-{channel}-{version}`, e.g. `reltio-aks-cluster-prd-v1`.",
|
||||
"source": "reference/azure-xrd-contract.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "contracts-helm-chart-required-values",
|
||||
"category": "contracts",
|
||||
"question": "What are the five required values that all app Helm charts must define?",
|
||||
"answer": "accountID (string), cloudProvider (string), region (string), domain (string), and imageRegistry (string).",
|
||||
"source": "reference/api-contracts.md",
|
||||
"difficulty": "medium"
|
||||
},
|
||||
{
|
||||
"id": "contracts-sync-wave-ordering",
|
||||
"category": "contracts",
|
||||
"question": "What are the ArgoCD sync wave values and what resource types are deployed at each wave?",
|
||||
"answer": "Wave -5: prerequisites. Wave 0: infrastructure. Wave 5: state apps. Wave 10: application services. Wave 15: post-deployment resources (monitoring, backup hooks, finalizers).",
|
||||
"source": "reference/api-contracts.md",
|
||||
"difficulty": "hard"
|
||||
}
|
||||
]
|
||||
}
|
||||
744
eval-human-report-v3.json
Normal file
744
eval-human-report-v3.json
Normal file
@@ -0,0 +1,744 @@
|
||||
{
|
||||
"evalType": "human",
|
||||
"timestamp": "2026-03-10T04:32:17.678Z",
|
||||
"docsDir": "./foxtrot-docs",
|
||||
"totalQuestions": 28,
|
||||
"overallScore": "79.3",
|
||||
"avgClarity": "4.07",
|
||||
"avgActionability": "3.61",
|
||||
"avgCompleteness": "3.96",
|
||||
"avgFindability": "4.21",
|
||||
"notFoundCount": 1,
|
||||
"notFoundRate": "3.6%",
|
||||
"byCategory": {
|
||||
"structural": {
|
||||
"avg": "82.5",
|
||||
"count": 4
|
||||
},
|
||||
"dependency": {
|
||||
"avg": "59.0",
|
||||
"count": 5
|
||||
},
|
||||
"contract": {
|
||||
"avg": "90.0",
|
||||
"count": 1
|
||||
},
|
||||
"configuration": {
|
||||
"avg": "68.0",
|
||||
"count": 5
|
||||
},
|
||||
"interaction": {
|
||||
"avg": "92.5",
|
||||
"count": 2
|
||||
},
|
||||
"resource": {
|
||||
"avg": "96.3",
|
||||
"count": 4
|
||||
},
|
||||
"cross-subsystem": {
|
||||
"avg": "92.5",
|
||||
"count": 2
|
||||
},
|
||||
"architectural": {
|
||||
"avg": "97.5",
|
||||
"count": 2
|
||||
},
|
||||
"scenario": {
|
||||
"avg": "71.7",
|
||||
"count": 3
|
||||
}
|
||||
},
|
||||
"byDifficulty": {
|
||||
"easy": {
|
||||
"avg": "78.5",
|
||||
"count": 10
|
||||
},
|
||||
"medium": {
|
||||
"avg": "75.8",
|
||||
"count": 13
|
||||
},
|
||||
"hard": {
|
||||
"avg": "90.0",
|
||||
"count": 5
|
||||
}
|
||||
},
|
||||
"results": [
|
||||
{
|
||||
"id": "struct-001",
|
||||
"category": "structural",
|
||||
"difficulty": "easy",
|
||||
"question": "How many Helm charts are defined across the Foxtrot monorepo?",
|
||||
"groundTruth": "76",
|
||||
"humanAnswer": "76",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 2,
|
||||
"completeness": 3,
|
||||
"findability": 5,
|
||||
"notes": "Reader extracted correct answer from well-organized reference docs. Helm index and system architecture are intuitive locations. However, knowing the chart count alone provides minimal actionability—engineers need chart names, purposes, and dependencies to act. Docs appear to contain the metric but likely lack operational context."
|
||||
},
|
||||
"composite": 75,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "struct-002",
|
||||
"category": "structural",
|
||||
"difficulty": "medium",
|
||||
"question": "Which 5 Helm charts produce the most Kubernetes resources? List them with their resource counts.",
|
||||
"groundTruth": "cluster (app-common/apps-provider/addons/charts/common/cluster): 55\ncluster (app-common/charts/cluster): 32\njenkins (app-common/charts/jenkins): 29\nkube-state-metrics (app-common/charts/otel-collector/charts/kube-state-metrics): 27\nfoxtrot-eks (compute-common/templates/foxtrot-eks): 24",
|
||||
"humanAnswer": "1. cluster (`app-common/apps-provider/addons/charts/common/cluster`) - 55 resources\n2. cluster (`app-common/charts/cluster`) - 32 resources\n3. jenkins (`app-common/charts/jenkins`) - 29 resources\n4. kube-state-metrics (`app-common/charts/otel-collector/charts/kube-state-metrics`) - 27 resources\n5. foxtrot-eks (`compute-common/templates/foxtrot-eks`) - 24 resources",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 4,
|
||||
"actionability": 3,
|
||||
"completeness": 5,
|
||||
"findability": 4,
|
||||
"notes": "Reader extracted exact answer with all 5 charts and resource counts correct. Docs clearly presented the data in a structured way. Findability is strong (helm/index.md is logical), though 'index.md' could be ambiguous. Actionability limited because resource counts alone don't prescribe actions—useful for analysis but not execution."
|
||||
},
|
||||
"composite": 80,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "struct-003",
|
||||
"category": "structural",
|
||||
"difficulty": "easy",
|
||||
"question": "How many subsystems does the Foxtrot codebase contain?",
|
||||
"groundTruth": "12",
|
||||
"humanAnswer": "12\n\nThe documentation explicitly states in the System Architecture summary: \"**Subsystems:** 12\"\n\nThese are: account-common, app-common, app-tools, compute-common, compute-tools, control-core, ipam-core, ipam-tools, network-common, network-core, runtime, and root.",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/subsystems/account-common.md",
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/compute-tools.md",
|
||||
"reference/subsystems/control-core.md",
|
||||
"reference/subsystems/ipam-core.md",
|
||||
"reference/subsystems/ipam-tools.md",
|
||||
"reference/subsystems/network-common.md",
|
||||
"reference/subsystems/root.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Documentation explicitly states subsystem count with complete enumeration. System Architecture summary provides immediate answer. Logical file structure (reference/system-architecture.md for overview, reference/subsystems/* for details) enables natural discovery path. Reader obtained correct answer efficiently."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "struct-004",
|
||||
"category": "structural",
|
||||
"difficulty": "easy",
|
||||
"question": "Which subsystem contains the most files, and how many?",
|
||||
"groundTruth": "runtime: 16309 files",
|
||||
"humanAnswer": "**runtime** contains the most files with **16,309** files.",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/subsystems/account-common.md",
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/compute-tools.md",
|
||||
"reference/subsystems/control-core.md",
|
||||
"reference/subsystems/ipam-core.md",
|
||||
"reference/subsystems/ipam-tools.md",
|
||||
"reference/subsystems/network-common.md",
|
||||
"reference/subsystems/root.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 4,
|
||||
"actionability": 2,
|
||||
"completeness": 5,
|
||||
"findability": 4,
|
||||
"notes": "Reader extracted correct answer with proper formatting, indicating clear presentation. Information was complete and located in expected reference documentation. Actionability is limited since this is a factual query rather than prescriptive guidance—useful for understanding system composition but not directly executable."
|
||||
},
|
||||
"composite": 75,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-external-dns-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"external-dns\" chart (at app-common/apps-provider/addons/charts/common/external-dns)?",
|
||||
"groundTruth": "external-dns (1.17.0) [condition: external-dns.enabled]",
|
||||
"humanAnswer": "Looking at the Helm Charts table in `reference/helm/index.md`, the external-dns chart at `app-common/apps-provider/addons/charts/common/external-dns` has the following dependency:\n\n- `external-dns`",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/account-common.md",
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/compute-tools.md",
|
||||
"reference/subsystems/ipam-core.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 3,
|
||||
"actionability": 2,
|
||||
"completeness": 2,
|
||||
"findability": 4,
|
||||
"notes": "Reader located the correct source document (reference/helm/index.md) and identified the dependency name, but extracted incomplete information. Ground truth includes version (1.17.0) and condition (external-dns.enabled), neither of which appear in the reader's answer. Documentation either lacks these details or presented them unclearly enough that the reader missed them. Missing version constraint and conditional logic prevents full actionability."
|
||||
},
|
||||
"composite": 55,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-ingress-nginx-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"ingress-nginx\" chart (at app-common/apps-provider/addons/charts/common/ingress-nginx)?",
|
||||
"groundTruth": "ingress-nginx (4.12.0) [condition: ingress-nginx.enabled]",
|
||||
"humanAnswer": "Looking at the \"All Charts\" table in the Helm Charts documentation, the ingress-nginx chart at `app-common/apps-provider/addons/charts/common/ingress-nginx` has the following dependencies:\n\n- `ingress-nginx`",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/account-common.md",
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/compute-tools.md",
|
||||
"reference/subsystems/ipam-core.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 2,
|
||||
"actionability": 2,
|
||||
"completeness": 2,
|
||||
"findability": 3,
|
||||
"notes": "Reader identified ingress-nginx as a dependency but omitted critical details: version (4.12.0) and condition (ingress-nginx.enabled). The documentation either failed to surface these details prominently or the reader didn't fully extract available information. Missing version and condition significantly reduces actionability for engineers needing to configure or troubleshoot this dependency."
|
||||
},
|
||||
"composite": 45,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-kube-state-metrics-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"kube-state-metrics\" chart (at app-common/apps-provider/addons/charts/common/kube-state-metrics)?",
|
||||
"groundTruth": "kube-state-metrics (5.26.0) [condition: kube-state-metrics.enabled]",
|
||||
"humanAnswer": "Looking at the Helm charts table in `reference/helm/index.md`, the kube-state-metrics chart at `app-common/apps-provider/addons/charts/common/kube-state-metrics` has the following dependencies:\n\n- `kube-state-metrics`",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/account-common.md",
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/compute-tools.md",
|
||||
"reference/subsystems/ipam-core.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 3,
|
||||
"actionability": 2,
|
||||
"completeness": 1,
|
||||
"findability": 2,
|
||||
"notes": "Reader identified the dependency name but missed critical details: version (5.26.0) and condition constraint (kube-state-metrics.enabled). The answer is incomplete for practical use. Documentation either lacks these details in the consulted location or they're scattered across files, making the information insufficient for an engineer to properly configure the dependency."
|
||||
},
|
||||
"composite": 40,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-open-telemetry-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"open-telemetry\" chart (at app-common/apps-provider/addons/charts/common/otel-collector)?",
|
||||
"groundTruth": "opentelemetry-operator (0.26.4) [condition: opentelemetry-operator.enabled]\nk8s-metrics (0.1.0) [condition: k8s-metrics.enabled]\nagent (0.1.1) [condition: agent.enabled]\ncommon (0.1.0) [condition: common.enabled]\ngw-metrics (0.1.0) [condition: gw-metrics.enabled]\ngw-traces (0.1.0) [condition: gw-traces.enabled]\nprom-scraper (0.1.0) [condition: prom-scraper.enabled]",
|
||||
"humanAnswer": "The dependencies of the \"open-telemetry\" chart at `app-common/apps-provider/addons/charts/common/otel-collector` are:\n\n- **opentelemetry-operator** (0.26.4) *if opentelemetry-operator.enabled*\n- **k8s-metrics** (0.1.0) *if k8s-metrics.enabled*\n- **agent** (0.1.1) *if agent.enabled*\n- **common** (0.1.0) *if common.enabled*\n- **gw-metrics** (0.1.0) *if gw-metrics.enabled*\n- **gw-traces** (0.1.0) *if gw-traces.enabled*\n- **prom-scraper** (0.1.0) *if prom-scraper.enabled*\n\nAll dependencies are conditional based on their respective enabled flags in the values configuration.",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-agent.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-common.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-gw-metrics.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-gw-traces.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-k8s-metrics.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-prom-scraper.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-common-otel-collector.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector-charts-agent.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector-charts-common.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector-charts-gw-metrics.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector-charts-gw-traces.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector-charts-k8s-metrics.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector-charts-kube-state-metrics.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector-charts-prom-scraper.md",
|
||||
"reference/helm/charts/app-common-charts-otel-collector.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Reader extracted all 7 dependencies with exact versions and conditions matching ground truth. Main chart documentation file consulted is the natural location for dependency information. Answer is well-structured and immediately actionable for configuration."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "dep-reltio-prometheus-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the dependencies of the \"reltio-prometheus\" chart (at app-common/apps-provider/addons/charts/common/prometheus)?",
|
||||
"groundTruth": "kube-prometheus-stack (69.4.1) [condition: kube-prometheus-stack.enabled]\nprometheus-adapter (4.11.0) [condition: prometheus-adapter.enabled]",
|
||||
"humanAnswer": "\n\nLooking at the \"All Charts\" table in `reference/helm/index.md`, the reltio-prometheus chart (at `app-common/apps-provider/addons/charts/common/prometheus`) has the following dependencies:\n\n- `kube-prometheus-stack`\n- `prometheus-adapter`",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/account-common.md",
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/compute-tools.md",
|
||||
"reference/subsystems/ipam-core.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 3,
|
||||
"actionability": 2,
|
||||
"completeness": 2,
|
||||
"findability": 4,
|
||||
"notes": "Reader correctly identified dependency names from the Helm index table, but missed critical details: version numbers (69.4.1, 4.11.0) and conditional flags (kube-prometheus-stack.enabled, prometheus-adapter.enabled). The table format apparently didn't make these details sufficiently prominent. An engineer using this information would lack version pinning and conditional logic needed for proper deployment configuration."
|
||||
},
|
||||
"composite": 55,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "contract-001",
|
||||
"category": "contract",
|
||||
"difficulty": "medium",
|
||||
"question": "Which secrets or ConfigMaps are shared across multiple Helm charts? List each with the charts that use it.",
|
||||
"groundTruth": "logdna-agent-key: cluster\nlogdna-agent-tags: cluster\nvault-secret: ai-app, cleanse-app, pms-app, rdm-app, shared-app\nvault-secret-rdm-tasks: ai-app, cleanse-app, pms-app, rdm-app, shared-app",
|
||||
"humanAnswer": "Based on the \"Shared Secrets & ConfigMaps\" section in the documentation:\n\n- **logdna-agent-key** — used by: cluster, cluster\n- **logdna-agent-tags** — used by: cluster, cluster\n- **vault-secret** — used by: ai-app, cleanse-app, pms-app, rdm-app, shared-app\n- **vault-secret-rdm-tasks** — used by: ai-app, cleanse-app, pms-app, rdm-app, shared-app\n\nThe vault-secret and vault-secret-rdm-tasks are the most widely shared, appearing across five different application charts. The logdna-agent-key and logdna-agent-tags appear to be used by the cluster charts (there are two cluster charts in the system based on the interaction diagram).",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 4,
|
||||
"actionability": 4,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Reader extracted all four secrets and correct chart mappings. Minor issue: 'cluster, cluster' duplication suggests ambiguity in how single-chart usage was presented. The vault-secret items correctly identified as most widely shared. Documentation location and section naming are ideal for this query type."
|
||||
},
|
||||
"composite": 90,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-mdm-app-domain",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "What is the default value of \"domain\" in the mdm-app chart?",
|
||||
"groundTruth": "cloud.reltio.com",
|
||||
"humanAnswer": "`cloud.reltio.com`",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Reader extracted exact answer from appropriate Helm chart documentation. Default value was clearly documented and readily discoverable in the mdm-app chart reference file."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-ai-app-domain",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "What is the default value of \"domain\" in the ai-app chart?",
|
||||
"groundTruth": "cloud.reltio.com",
|
||||
"humanAnswer": "`cloud.reltio.com`",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-ai-app.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Reader successfully located the correct default value. The ai-app chart reference file is the logical location for Helm chart defaults, and the information was presented clearly enough for accurate extraction."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-elasticsearch-domain",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "What is the default value of \"domain\" in the elasticsearch chart?",
|
||||
"groundTruth": "etalon.reltio.com",
|
||||
"humanAnswer": "NOT_FOUND\n\nThe elasticsearch chart documentation lists `domain` as a configuration key with type `unknown` and indicates a default exists, but the actual default value is not specified in the provided documentation.",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-cluster-elasticsearch.md",
|
||||
"reference/helm/charts/app-common-charts-elasticsearch.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 0,
|
||||
"actionability": 0,
|
||||
"completeness": 0,
|
||||
"findability": 0,
|
||||
"notes": "Documentation indicates a default value exists but fails to specify it. Reader consulted appropriate helm chart references but could not extract the actual default (etalon.reltio.com). This represents a critical gap: the docs signal information presence without delivering it, leaving engineers unable to configure or understand the system."
|
||||
},
|
||||
"composite": 0,
|
||||
"notFound": true
|
||||
},
|
||||
{
|
||||
"id": "config-hazelcast-domain",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "What is the default value of \"domain\" in the hazelcast chart?",
|
||||
"groundTruth": "etalon.reltio.com",
|
||||
"humanAnswer": "internal.reltio.com",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-cluster-hazelcast.md",
|
||||
"reference/helm/charts/app-common-charts-hazelcast.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 2,
|
||||
"actionability": 1,
|
||||
"completeness": 2,
|
||||
"findability": 3,
|
||||
"notes": "Reader located relevant Hazelcast chart documentation but extracted incorrect default value. Docs likely present multiple domain values without clear distinction of which is the default, or default is de-emphasized relative to other configuration options. Reader could act on the information but would implement wrong configuration. Correct docs were found; incorrect value was extracted from them."
|
||||
},
|
||||
"composite": 40,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "config-redis-domain",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"question": "What is the default value of \"domain\" in the redis chart?",
|
||||
"groundTruth": "internal.reltio.com",
|
||||
"humanAnswer": "internal.reltio.com",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-redis.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Reader located correct default value. Documentation path (app-common-charts-redis.md) is intuitive for redis chart configuration. Information was sufficiently clear and complete for accurate extraction and use."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "interaction-001",
|
||||
"category": "interaction",
|
||||
"difficulty": "medium",
|
||||
"question": "Which Helm charts reference Kubernetes services from other components? List each chart and the service it calls.",
|
||||
"groundTruth": "hazelcast (app-common/apps-provider/addons/charts/state-apps/hz) → kubernetes\nhazelcast (app-common/charts/hazelcast) → kubernetes\ngw-metrics (app-common/charts/otel-collector/charts/gw-metrics) → argo-rollouts-metrics\nredis (app-common/charts/redis) → headless",
|
||||
"humanAnswer": "**Service-to-Service References:**\n\n| Chart | Service Called |\n|---|---|\n| hazelcast | `kubernetes` |\n| gw-metrics | `argo-rollouts-metrics` |\n| redis | `headless` |\n\nNote: The hazelcast entry appears twice in the source documentation, likely representing the two hazelcast chart variants (`app-common/apps-provider/addons/charts/state-apps/hz` and `app-common/charts/hazelcast`), both calling the same `kubernetes` service.",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 4,
|
||||
"actionability": 4,
|
||||
"completeness": 5,
|
||||
"findability": 4,
|
||||
"notes": "Reader extracted all required service references correctly and presented them clearly. The table format aids comprehension. Completeness is strong—all three charts and their services are captured, including the hazelcast variant distinction. Actionability is slightly reduced because full chart paths (e.g., `app-common/apps-provider/addons/charts/state-apps/hz`) aren't included in the answer, which an engineer might need to locate and modify these charts. Findability is solid; reference/helm/index.md and system-architecture.md are logical locations for this information."
|
||||
},
|
||||
"composite": 85,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "interaction-002",
|
||||
"category": "interaction",
|
||||
"difficulty": "hard",
|
||||
"question": "Which network ports are used by multiple Helm charts? List each port and the charts that expose it.",
|
||||
"groundTruth": "Port 443: cluster, twistlock-defender, eck-operator, twistlock\nPort 8889: gw-metrics, gw-traces, kube-state-metrics\nPort 9200: eck-operator, elasticsearch\nPort 13133: agent, gw-metrics, gw-traces, k8s-metrics, prom-scraper, elasticsearch",
|
||||
"humanAnswer": "**Port Allocation (shared)**\n\n- **443**: cluster, twistlock-defender, eck-operator, twistlock\n- **8889**: gw-metrics, gw-traces, kube-state-metrics\n- **9200**: eck-operator, elasticsearch\n- **13133**: agent, gw-metrics, gw-traces, k8s-metrics, prom-scraper, elasticsearch",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Reader extracted exact answer matching ground truth. Information presented in scannable format with clear port-to-chart mapping. Docs consulted (system-architecture, helm/index) are logical locations for port allocation data. Engineer can immediately act on this for deployment planning and network configuration."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "resource-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What are the 10 most common Kubernetes resource types generated across all Foxtrot Helm charts?",
|
||||
"groundTruth": "ClusterRole: 51\nServiceAccount: 49\nSecret: 43\nExternalSecret: 38\nService: 36\nRole: 30\nClusterRoleBinding: 29\nDeployment: 29\nConfigMap: 25\nRoleBinding: 25",
|
||||
"humanAnswer": "Based on the \"Kubernetes Resource Types (across all charts)\" table in the system architecture documentation, the 10 most common Kubernetes resource types are:\n\n1. ClusterRole — 51\n2. ServiceAccount — 49\n3. Secret — 43\n4. ExternalSecret — 38\n5. Service — 36\n6. Role — 30\n7. ClusterRoleBinding — 29\n8. Deployment — 29\n9. ConfigMap — 25\n10. RoleBinding — 25",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 3,
|
||||
"completeness": 5,
|
||||
"findability": 4,
|
||||
"notes": "Reader extracted exact ground truth from a dedicated table. Information is presented clearly with counts. Docs are in expected locations (system-architecture, helm reference). Actionability limited because data is informational rather than prescriptive—useful for understanding chart composition but lacks guidance on what to do with these metrics."
|
||||
},
|
||||
"composite": 85,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "resource-mdm-app-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What Kubernetes resource types does the mdm-app chart generate? List each type and count.",
|
||||
"groundTruth": "Secret: 5\nJob: 4\nDeployment: 2\nPersistentVolumeClaim: 2\nService: 2\nExternalSecret: 2\nHorizontalPodAutoscaler: 1\nRollout: 1\nPersistentVolume: 1\nPodDisruptionBudget: 1\nServiceAccount: 1",
|
||||
"humanAnswer": "Based on the mdm-app chart documentation, here are the Kubernetes resource types generated:\n\n| Resource Type | Count |\n|---|---|\n| Deployment | 2 |\n| Job | 4 |\n| Secret | 5 |\n| Service | 2 |\n| PersistentVolumeClaim | 2 |\n| ExternalSecret | 2 |\n| HorizontalPodAutoscaler | 1 |\n| Rollout | 1 |\n| PersistentVolume | 1 |\n| PodDisruptionBudget | 1 |\n| ServiceAccount | 1 |\n\n**Total: 22 resources**",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Reader extracted all 11 resource types with exact counts matching ground truth. Table format presents information immediately and unambiguously. Documentation path (app-common-charts-mdm-app.md) is the natural location for chart resource specifications. Information is directly actionable for infrastructure planning and validation."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "resource-cassandra-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What Kubernetes resource types does the cassandra chart generate? List each type and count.",
|
||||
"groundTruth": "Service: 2\nStatefulSet: 1\nExternalSecret: 1\nClusterSecretStore: 1\nConfigMap: 1\nSecret: 1\nServiceAccount: 1\nRole: 1\nRoleBinding: 1\nClusterRole: 1\nClusterRoleBinding: 1\nCronJob: 1\nJob: 1",
|
||||
"humanAnswer": "Based on the cassandra chart documentation, here are the Kubernetes resource types generated:\n\n| Resource Type | Count |\n|---|---|\n| Service | 2 |\n| StatefulSet | 1 |\n| ExternalSecret | 1 |\n| ClusterSecretStore | 1 |\n| ConfigMap | 1 |\n| Secret | 1 |\n| ServiceAccount | 1 |\n| Role | 1 |\n| RoleBinding | 1 |\n| ClusterRole | 1 |\n| ClusterRoleBinding | 1 |\n| CronJob | 1 |\n| Job | 1 |\n\n**Total: 14 resources across 13 distinct types**",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-cluster-cassandra.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Reader extracted complete and accurate answer matching ground truth exactly. Documentation clearly enumerated all 13 resource types with correct counts. Cassandra-specific chart documentation path is intuitive location for this information. Information is immediately actionable for deployment planning and verification."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "resource-jenkins-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"question": "What Kubernetes resource types does the jenkins chart generate? List each type and count.",
|
||||
"groundTruth": "ConfigMap: 5\nService: 3\nSecret: 3\nIngress: 2\nServiceAccount: 2\nPersistentVolumeClaim: 1\nSecurityGroupPolicy: 1\nPrometheusRule: 1\nBackendConfig: 1\nNetworkPolicy: 1\nPodDisruptionBudget: 1\nPodMonitoring: 1\nRoute: 1\nServiceMonitor: 1\nStatefulSet: 1\nRole: 1\nRoleBinding: 1\nSecretClaim: 1\nPod: 1",
|
||||
"humanAnswer": "Based on the Jenkins chart documentation, here are the Kubernetes resource types it generates:\n\n| Resource Type | Count |\n|---|---|\n| ConfigMap | 5 |\n| Service | 3 |\n| Secret | 3 |\n| Ingress | 2 |\n| ServiceAccount | 2 |\n| PersistentVolumeClaim | 1 |\n| SecurityGroupPolicy | 1 |\n| PrometheusRule | 1 |\n| BackendConfig | 1 |\n| NetworkPolicy | 1 |\n| PodDisruptionBudget | 1 |\n| PodMonitoring | 1 |\n| Route | 1 |\n| ServiceMonitor | 1 |\n| StatefulSet | 1 |\n| Role | 1 |\n| RoleBinding | 1 |\n| SecretClaim | 1 |\n| Pod | 1 |\n\n**Total: 29 resources** (which matches the resource count listed in the chart index)",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-jenkins.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Documentation provided complete resource inventory with all 19 types and accurate counts. Reader extracted information into clear tabular format. File structure (reference/helm/charts/app-common-charts-jenkins.md) places content exactly where engineers expect Jenkins chart details. Information is immediately actionable for infrastructure planning and RBAC configuration."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "cross-sub-001",
|
||||
"category": "cross-subsystem",
|
||||
"difficulty": "hard",
|
||||
"question": "Which subsystems depend on app-tools, and how heavily (by call+import count)?",
|
||||
"groundTruth": "ipam-tools: 6\ncompute-tools: 4\napp-common: 1",
|
||||
"humanAnswer": "Based on the Cross-Subsystem Dependencies table in system-architecture.md:\n\n**Subsystems depending on app-tools:**\n\n1. **ipam-tools** — 6 calls, 0 imports (6 total)\n2. **compute-tools** — 4 calls, 0 imports (4 total)\n3. **app-common** — 1 call, 0 imports (1 total)\n\nAll dependencies are call-based (service boundary), not import-based. The app-tools.md documentation confirms this pattern: downstream subsystems delegate resource provisioning and credential creation to app-tools rather than re-implementing those operations.",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/account-common.md",
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/compute-tools.md",
|
||||
"reference/subsystems/ipam-core.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 4,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 4,
|
||||
"notes": "Reader extracted exact ground truth numbers with supporting detail about call vs import distinction. Information was present and findable in system-architecture.md, though verification required consulting multiple subsystem files. Documentation clearly supports architectural decision-making."
|
||||
},
|
||||
"composite": 90,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "cross-sub-002",
|
||||
"category": "cross-subsystem",
|
||||
"difficulty": "easy",
|
||||
"question": "Which subsystems are identified as cross-cutting concerns?",
|
||||
"groundTruth": "root",
|
||||
"humanAnswer": "**root**\n\nAccording to the documentation, only one subsystem is identified as a cross-cutting concern:\n\n- **root** — described as a single-file configuration anchor that establishes the shared compilation context and path alias space for all other subsystems. It's listed in the \"Cross-Cutting Concerns\" section of the system architecture and marked with Kind: cross-cutting in its subsystem table entry.",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/subsystems/account-common.md",
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/compute-tools.md",
|
||||
"reference/subsystems/control-core.md",
|
||||
"reference/subsystems/ipam-core.md",
|
||||
"reference/subsystems/ipam-tools.md",
|
||||
"reference/subsystems/network-common.md",
|
||||
"reference/subsystems/root.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 4,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Reader correctly identified root as the sole cross-cutting concern with precise reasoning. Documentation clearly marks it in a dedicated section and explains its role as a configuration anchor. Subsystem organization and explicit Kind labeling make discovery straightforward. Actionability slightly lower than maximum because the description focuses on what root is rather than how to interact with it, though this may be appropriate for architectural documentation."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "arch-001",
|
||||
"category": "architectural",
|
||||
"difficulty": "hard",
|
||||
"question": "The following subsystems have 0 detected functions and 0 modules: account-common, network-common, network-core, root. Why might this be the case, and what do they actually contain?",
|
||||
"groundTruth": "These subsystems primarily contain Helm charts with Go-templated YAML, Terraform HCL, and Crossplane compositions. The code analysis pipeline detects functions/modules from Python, Go, TypeScript, and shell scripts — but Helm templates use Go template syntax ({{ }}) which doesn't produce traditional function/module entities. Their content is captured through the Helm chart extraction phase instead.",
|
||||
"humanAnswer": "These four subsystems have zero functions and modules because they are **intentionally declarative rather than executable**. They encode infrastructure state and configuration rather than business logic.\n\n**account-common** contains infrastructure-as-code artifacts for account-level provisioning — Helm charts, Terraform modules, and configuration files for account creation and quota requests. It exists as a self-contained operational unit consumed out-of-band by deployment pipelines, not imported by application code.\n\n**network-common** is purely declarative configuration — network topology definitions, shared schemas, IaC templates, and static policy files. It defines desired network state across AWS, Azure, and GCP through Helm charts and Crossplane manifests, with no executable logic.\n\n**network-core** (mentioned in the architecture overview) follows the same pattern as the other zero-function subsystems: it encodes infrastructure state as IaC artifacts, schemas, or policy definitions rather than executable logic.\n\n**root** is a single-file configuration anchor — likely a `tsconfig.json` or module resolution manifest — that establishes the shared compilation context and path alias space for the entire system. It exerts influence through the build toolchain, not through the module graph, so it contains no runtime logic or exports.\n\nThe architecture document explicitly states this is intentional: \"The zero-function subsystems are intentionally declarative: they encode infrastructure state as IaC artifacts, schemas, or policy definitions rather than executable logic, which is why `control-core`'s 336 files carry no functions despite its size.\" This design trades encapsulation for auditability — keeping configuration as inert files makes the infrastructure surface area inspectable without executing code.",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/subsystems/account-common.md",
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/compute-tools.md",
|
||||
"reference/subsystems/control-core.md",
|
||||
"reference/subsystems/ipam-core.md",
|
||||
"reference/subsystems/ipam-tools.md",
|
||||
"reference/subsystems/network-common.md",
|
||||
"reference/subsystems/root.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 4,
|
||||
"findability": 5,
|
||||
"notes": "Reader provided a well-structured, domain-focused explanation that immediately identifies the core reason (declarative vs executable) and backs it with specific content examples for each subsystem. The architectural rationale (auditability tradeoff) is clearly stated. Minor gap: doesn't explicitly mention the code analysis pipeline's language limitations, though this is a technical implementation detail rather than a domain concern. The answer is immediately actionable for engineers needing to understand how these subsystems fit into the architecture."
|
||||
},
|
||||
"composite": 95,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "arch-002",
|
||||
"category": "architectural",
|
||||
"difficulty": "easy",
|
||||
"question": "What is the current version and appVersion of the mdm-app Helm chart?",
|
||||
"groundTruth": "version: 0.7.4, appVersion: 2025.12-12-develop",
|
||||
"humanAnswer": "\n\n**Version:** 0.7.4 \n**App Version:** 2025.12-12-develop",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-charts-mdm-app.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Reader extracted exact version numbers correctly and presented them in clear, labeled format. Documentation was organized logically—Helm chart versions naturally belong in the dedicated mdm-app chart reference file. All requested information was present and immediately actionable for deployment or reference purposes."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "scenario-001",
|
||||
"category": "scenario",
|
||||
"difficulty": "hard",
|
||||
"question": "If you need to rotate the \"vault-secret\" shared secret, which Helm charts would be affected and need redeployment?",
|
||||
"groundTruth": "ai-app, cleanse-app, pms-app, rdm-app, shared-app",
|
||||
"humanAnswer": "**ai-app, cleanse-app, pms-app, rdm-app, shared-app**\n\nThese five charts are listed in the \"Shared Secrets & ConfigMaps\" section as consumers of the `vault-secret` shared secret, so they would all require redeployment when the secret is rotated.",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 5,
|
||||
"actionability": 5,
|
||||
"completeness": 5,
|
||||
"findability": 5,
|
||||
"notes": "Reader extracted correct answer with clear reasoning, citing specific section. Documentation explicitly lists all five chart consumers of vault-secret in expected reference location. Information is concrete and immediately actionable for redeployment decisions."
|
||||
},
|
||||
"composite": 100,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "scenario-002",
|
||||
"category": "scenario",
|
||||
"difficulty": "hard",
|
||||
"question": "A new engineer needs to deploy the MDM application stack. What charts, configuration values, and external dependencies should they understand first?",
|
||||
"groundTruth": "Chart: mdm-app (app-common/charts/mdm-app), Version: 0.7.4\nKey values: clusterName, environmentType, arch, cloudProvider, region, vaultEnv, imagePullPolicy, clusterDomain, terminationGracePeriodSeconds, etalonsubDomain (+28 more)\nResources generated: 22 K8s resources\nInteractions: none detected",
|
||||
"humanAnswer": "To deploy the MDM application stack, focus on these areas:\n\n**Primary Chart**\n- `mdm-app` at `app-common/charts/mdm-app` (v0.7.4, AppVersion 2025.12-12-develop)\n- Deploys 22 Kubernetes resources\n- Requires 38 configuration values\n\n**Configuration Values**\nThe chart expects 38 values keys. The documentation doesn't enumerate them individually, but based on the subsystem structure, you'll need to provide cluster context, resource sizing, and application-specific settings. Check the chart's `values.yaml` directly for the full schema.\n\n**External Dependencies & Prerequisites**\nFrom `app-tools`, MDM deployment depends on upstream provisioning:\n- RDM companion setup (`get_rdm_mdm_companions`, `patch_crossaccount_mdm_companions`)\n- IAM policy patching for cross-account MDM companions (`patch_mdm_policy_rdm_companion_arn`)\n- DynamoDB shared API configuration (`patch_mdm_systemdynamodb_shared_devops_api`, `patch_shared_devops_api_mdm_arns`)\n- These are handled by `app-tools` provisioning functions, so ensure prerequisite infrastructure is created first\n\n**Subsystem Context**\n- MDM is part of `app-common`, which is a configuration-heavy subsystem (934 files, 28 functions)\n- It depends on `root` for shared configuration and environment constants\n- No explicit Helm chart dependencies are declared, but it integrates with the broader app platform\n\n**Next Steps**\nReview the mdm-app chart's `values.yaml` at `app-common/charts/mdm-app/values.yaml` for the specific 38 configuration keys, and ensure `app-tools` provisioning (particularly RDM companion and DynamoDB setup) completes before deploying the chart.",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/subsystems/account-common.md",
|
||||
"reference/subsystems/app-tools.md",
|
||||
"reference/subsystems/compute-common.md",
|
||||
"reference/subsystems/compute-tools.md",
|
||||
"reference/subsystems/ipam-core.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 4,
|
||||
"actionability": 3,
|
||||
"completeness": 3,
|
||||
"findability": 3,
|
||||
"notes": "Answer clearly identifies the chart, version, and external dependencies with good structure. However, it explicitly defers the 38 configuration values to values.yaml rather than enumerating the specific keys (clusterName, environmentType, arch, cloudProvider, region, vaultEnv, imagePullPolicy, clusterDomain, terminationGracePeriodSeconds, etalonsubDomain, etc.) that should be documented upfront. This creates a completeness gap—a new engineer still needs to reverse-engineer the schema. External dependencies are inferred from app-tools but lack explicit documentation of their necessity. Findability is adequate for architecture context but insufficient for the specific configuration schema a deployer needs first."
|
||||
},
|
||||
"composite": 65,
|
||||
"notFound": false
|
||||
},
|
||||
{
|
||||
"id": "scenario-003",
|
||||
"category": "scenario",
|
||||
"difficulty": "medium",
|
||||
"question": "What network ports does the Cassandra chart expose, and what are they typically used for?",
|
||||
"groundTruth": "Ports: 7000, 7001, 7199, 9042, 9160\n7000: Cassandra inter-node cluster communication\n7001: Cassandra SSL inter-node\n7199: JMX monitoring\n9042: CQL native transport (client connections)\n9160: Thrift client API (legacy)",
|
||||
"humanAnswer": "The Cassandra chart exposes five network ports via the StatefulSet:\n\n- **7000** - Cassandra inter-node communication (cluster gossip)\n- **7001** - Cassandra inter-node communication (TLS)\n- **7199** - JMX monitoring port\n- **9042** - Cassandra native protocol (client connections)\n- **9160** - Cassandra Thrift protocol (legacy client connections)\n\nHowever, the documentation only lists the ports themselves without explaining their purposes. The typical uses I've described are standard Cassandra port conventions, but the provided docs don't explicitly document what each port is used for.",
|
||||
"docsUsed": [
|
||||
"reference/system-architecture.md",
|
||||
"reference/helm/index.md",
|
||||
"reference/helm/charts/app-common-apps-provider-addons-charts-state-cluster-cassandra.md"
|
||||
],
|
||||
"score": {
|
||||
"clarity": 2,
|
||||
"actionability": 2,
|
||||
"completeness": 2,
|
||||
"findability": 4,
|
||||
"notes": "Ports are listed but purposes are undocumented. Reader had to rely on external Cassandra conventions rather than the docs themselves. Information is in the right file but lacks explanatory context needed for engineers unfamiliar with Cassandra internals."
|
||||
},
|
||||
"composite": 50,
|
||||
"notFound": false
|
||||
}
|
||||
]
|
||||
}
|
||||
419
eval-questions-v2.json
Normal file
419
eval-questions-v2.json
Normal file
@@ -0,0 +1,419 @@
|
||||
{
|
||||
"generated": "2026-03-10T04:20:08.313Z",
|
||||
"count": 33,
|
||||
"questions": [
|
||||
{
|
||||
"id": "struct-001",
|
||||
"category": "structural",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "How many Helm charts are defined across the Foxtrot monorepo?",
|
||||
"answer": "76",
|
||||
"answerType": "exact",
|
||||
"source": "Chart.yaml discovery"
|
||||
},
|
||||
{
|
||||
"id": "struct-002",
|
||||
"category": "structural",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "Which 5 Helm charts produce the most Kubernetes resources? List them with their resource counts.",
|
||||
"answer": "cluster (app-common/apps-provider/addons/charts/common/cluster): 55\ncluster (app-common/charts/cluster): 32\njenkins (app-common/charts/jenkins): 29\nkube-state-metrics (app-common/charts/otel-collector/charts/kube-state-metrics): 27\nfoxtrot-eks (compute-common/templates/foxtrot-eks): 24",
|
||||
"answerType": "ranked-list",
|
||||
"source": "template scanning"
|
||||
},
|
||||
{
|
||||
"id": "struct-003",
|
||||
"category": "structural",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "How many subsystems does the Foxtrot codebase contain?",
|
||||
"answer": "12",
|
||||
"answerType": "exact",
|
||||
"source": "subsystem aggregation"
|
||||
},
|
||||
{
|
||||
"id": "struct-004",
|
||||
"category": "structural",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"human"
|
||||
],
|
||||
"question": "Which subsystem contains the most files, and how many?",
|
||||
"answer": "runtime: 16309 files",
|
||||
"answerType": "exact",
|
||||
"source": "subsystem aggregation"
|
||||
},
|
||||
{
|
||||
"id": "dep-external-dns-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "What are the dependencies of the \"external-dns\" chart (at app-common/apps-provider/addons/charts/common/external-dns)?",
|
||||
"answer": "external-dns (1.17.0) [condition: external-dns.enabled]",
|
||||
"answerType": "list",
|
||||
"source": "app-common/apps-provider/addons/charts/common/external-dns/Chart.yaml"
|
||||
},
|
||||
{
|
||||
"id": "dep-ingress-nginx-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "What are the dependencies of the \"ingress-nginx\" chart (at app-common/apps-provider/addons/charts/common/ingress-nginx)?",
|
||||
"answer": "ingress-nginx (4.12.0) [condition: ingress-nginx.enabled]",
|
||||
"answerType": "list",
|
||||
"source": "app-common/apps-provider/addons/charts/common/ingress-nginx/Chart.yaml"
|
||||
},
|
||||
{
|
||||
"id": "dep-kube-state-metrics-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "What are the dependencies of the \"kube-state-metrics\" chart (at app-common/apps-provider/addons/charts/common/kube-state-metrics)?",
|
||||
"answer": "kube-state-metrics (5.26.0) [condition: kube-state-metrics.enabled]",
|
||||
"answerType": "list",
|
||||
"source": "app-common/apps-provider/addons/charts/common/kube-state-metrics/Chart.yaml"
|
||||
},
|
||||
{
|
||||
"id": "dep-open-telemetry-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "What are the dependencies of the \"open-telemetry\" chart (at app-common/apps-provider/addons/charts/common/otel-collector)?",
|
||||
"answer": "opentelemetry-operator (0.26.4) [condition: opentelemetry-operator.enabled]\nk8s-metrics (0.1.0) [condition: k8s-metrics.enabled]\nagent (0.1.1) [condition: agent.enabled]\ncommon (0.1.0) [condition: common.enabled]\ngw-metrics (0.1.0) [condition: gw-metrics.enabled]\ngw-traces (0.1.0) [condition: gw-traces.enabled]\nprom-scraper (0.1.0) [condition: prom-scraper.enabled]",
|
||||
"answerType": "list",
|
||||
"source": "app-common/apps-provider/addons/charts/common/otel-collector/Chart.yaml"
|
||||
},
|
||||
{
|
||||
"id": "dep-reltio-prometheus-001",
|
||||
"category": "dependency",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "What are the dependencies of the \"reltio-prometheus\" chart (at app-common/apps-provider/addons/charts/common/prometheus)?",
|
||||
"answer": "kube-prometheus-stack (69.4.1) [condition: kube-prometheus-stack.enabled]\nprometheus-adapter (4.11.0) [condition: prometheus-adapter.enabled]",
|
||||
"answerType": "list",
|
||||
"source": "app-common/apps-provider/addons/charts/common/prometheus/Chart.yaml"
|
||||
},
|
||||
{
|
||||
"id": "contract-001",
|
||||
"category": "contract",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "Which secrets or ConfigMaps are shared across multiple Helm charts? List each with the charts that use it.",
|
||||
"answer": "logdna-agent-key: cluster\nlogdna-agent-tags: cluster\nvault-secret: ai-app, cleanse-app, pms-app, rdm-app, shared-app\nvault-secret-rdm-tasks: ai-app, cleanse-app, pms-app, rdm-app, shared-app",
|
||||
"answerType": "list",
|
||||
"source": "template interaction scanning"
|
||||
},
|
||||
{
|
||||
"id": "config-mdm-app-domain",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"human"
|
||||
],
|
||||
"question": "What is the default value of \"domain\" in the mdm-app chart?",
|
||||
"answer": "cloud.reltio.com",
|
||||
"answerType": "exact",
|
||||
"source": "app-common/charts/mdm-app/values.yaml"
|
||||
},
|
||||
{
|
||||
"id": "config-mdm-app-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"machine"
|
||||
],
|
||||
"question": "How many top-level configuration keys does the mdm-app chart (at app-common/charts/mdm-app) expose in its values.yaml?",
|
||||
"answer": "38",
|
||||
"answerType": "exact",
|
||||
"source": "app-common/charts/mdm-app/values.yaml"
|
||||
},
|
||||
{
|
||||
"id": "config-ai-app-domain",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"human"
|
||||
],
|
||||
"question": "What is the default value of \"domain\" in the ai-app chart?",
|
||||
"answer": "cloud.reltio.com",
|
||||
"answerType": "exact",
|
||||
"source": "app-common/charts/ai-app/values.yaml"
|
||||
},
|
||||
{
|
||||
"id": "config-ai-app-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"machine"
|
||||
],
|
||||
"question": "How many top-level configuration keys does the ai-app chart (at app-common/charts/ai-app) expose in its values.yaml?",
|
||||
"answer": "34",
|
||||
"answerType": "exact",
|
||||
"source": "app-common/charts/ai-app/values.yaml"
|
||||
},
|
||||
{
|
||||
"id": "config-elasticsearch-domain",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"human"
|
||||
],
|
||||
"question": "What is the default value of \"domain\" in the elasticsearch chart?",
|
||||
"answer": "etalon.reltio.com",
|
||||
"answerType": "exact",
|
||||
"source": "app-common/apps-provider/addons/charts/state-apps/es/values.yaml"
|
||||
},
|
||||
{
|
||||
"id": "config-elasticsearch-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"machine"
|
||||
],
|
||||
"question": "How many top-level configuration keys does the elasticsearch chart (at app-common/apps-provider/addons/charts/state-apps/es) expose in its values.yaml?",
|
||||
"answer": "32",
|
||||
"answerType": "exact",
|
||||
"source": "app-common/apps-provider/addons/charts/state-apps/es/values.yaml"
|
||||
},
|
||||
{
|
||||
"id": "config-hazelcast-domain",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"human"
|
||||
],
|
||||
"question": "What is the default value of \"domain\" in the hazelcast chart?",
|
||||
"answer": "etalon.reltio.com",
|
||||
"answerType": "exact",
|
||||
"source": "app-common/apps-provider/addons/charts/state-apps/hz/values.yaml"
|
||||
},
|
||||
{
|
||||
"id": "config-hazelcast-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"machine"
|
||||
],
|
||||
"question": "How many top-level configuration keys does the hazelcast chart (at app-common/apps-provider/addons/charts/state-apps/hz) expose in its values.yaml?",
|
||||
"answer": "32",
|
||||
"answerType": "exact",
|
||||
"source": "app-common/apps-provider/addons/charts/state-apps/hz/values.yaml"
|
||||
},
|
||||
{
|
||||
"id": "config-redis-domain",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"human"
|
||||
],
|
||||
"question": "What is the default value of \"domain\" in the redis chart?",
|
||||
"answer": "internal.reltio.com",
|
||||
"answerType": "exact",
|
||||
"source": "app-common/charts/redis/values.yaml"
|
||||
},
|
||||
{
|
||||
"id": "config-redis-count",
|
||||
"category": "configuration",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"machine"
|
||||
],
|
||||
"question": "How many top-level configuration keys does the redis chart (at app-common/charts/redis) expose in its values.yaml?",
|
||||
"answer": "23",
|
||||
"answerType": "exact",
|
||||
"source": "app-common/charts/redis/values.yaml"
|
||||
},
|
||||
{
|
||||
"id": "interaction-001",
|
||||
"category": "interaction",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "Which Helm charts reference Kubernetes services from other components? List each chart and the service it calls.",
|
||||
"answer": "hazelcast (app-common/apps-provider/addons/charts/state-apps/hz) → kubernetes\nhazelcast (app-common/charts/hazelcast) → kubernetes\ngw-metrics (app-common/charts/otel-collector/charts/gw-metrics) → argo-rollouts-metrics\nredis (app-common/charts/redis) → headless",
|
||||
"answerType": "list",
|
||||
"source": "template interaction scanning"
|
||||
},
|
||||
{
|
||||
"id": "interaction-002",
|
||||
"category": "interaction",
|
||||
"difficulty": "hard",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "Which network ports are used by multiple Helm charts? List each port and the charts that expose it.",
|
||||
"answer": "Port 443: cluster, twistlock-defender, eck-operator, twistlock\nPort 8889: gw-metrics, gw-traces, kube-state-metrics\nPort 9200: eck-operator, elasticsearch\nPort 13133: agent, gw-metrics, gw-traces, k8s-metrics, prom-scraper, elasticsearch",
|
||||
"answerType": "list",
|
||||
"source": "template port scanning"
|
||||
},
|
||||
{
|
||||
"id": "resource-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "What are the 10 most common Kubernetes resource types generated across all Foxtrot Helm charts?",
|
||||
"answer": "ClusterRole: 51\nServiceAccount: 49\nSecret: 43\nExternalSecret: 38\nService: 36\nRole: 30\nClusterRoleBinding: 29\nDeployment: 29\nConfigMap: 25\nRoleBinding: 25",
|
||||
"answerType": "ranked-list",
|
||||
"source": "template resource scanning"
|
||||
},
|
||||
{
|
||||
"id": "resource-mdm-app-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "What Kubernetes resource types does the mdm-app chart generate? List each type and count.",
|
||||
"answer": "Secret: 5\nJob: 4\nDeployment: 2\nPersistentVolumeClaim: 2\nService: 2\nExternalSecret: 2\nHorizontalPodAutoscaler: 1\nRollout: 1\nPersistentVolume: 1\nPodDisruptionBudget: 1\nServiceAccount: 1",
|
||||
"answerType": "list",
|
||||
"source": "app-common/charts/mdm-app/templates/"
|
||||
},
|
||||
{
|
||||
"id": "resource-cassandra-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "What Kubernetes resource types does the cassandra chart generate? List each type and count.",
|
||||
"answer": "Service: 2\nStatefulSet: 1\nExternalSecret: 1\nClusterSecretStore: 1\nConfigMap: 1\nSecret: 1\nServiceAccount: 1\nRole: 1\nRoleBinding: 1\nClusterRole: 1\nClusterRoleBinding: 1\nCronJob: 1\nJob: 1",
|
||||
"answerType": "list",
|
||||
"source": "app-common/apps-provider/addons/charts/state-cluster/cassandra/templates/"
|
||||
},
|
||||
{
|
||||
"id": "resource-jenkins-001",
|
||||
"category": "resource",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "What Kubernetes resource types does the jenkins chart generate? List each type and count.",
|
||||
"answer": "ConfigMap: 5\nService: 3\nSecret: 3\nIngress: 2\nServiceAccount: 2\nPersistentVolumeClaim: 1\nSecurityGroupPolicy: 1\nPrometheusRule: 1\nBackendConfig: 1\nNetworkPolicy: 1\nPodDisruptionBudget: 1\nPodMonitoring: 1\nRoute: 1\nServiceMonitor: 1\nStatefulSet: 1\nRole: 1\nRoleBinding: 1\nSecretClaim: 1\nPod: 1",
|
||||
"answerType": "list",
|
||||
"source": "app-common/charts/jenkins/templates/"
|
||||
},
|
||||
{
|
||||
"id": "cross-sub-001",
|
||||
"category": "cross-subsystem",
|
||||
"difficulty": "hard",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "Which subsystems depend on app-tools, and how heavily (by call+import count)?",
|
||||
"answer": "ipam-tools: 6\ncompute-tools: 4\napp-common: 1",
|
||||
"answerType": "list",
|
||||
"source": "dependency matrix"
|
||||
},
|
||||
{
|
||||
"id": "cross-sub-002",
|
||||
"category": "cross-subsystem",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"human"
|
||||
],
|
||||
"question": "Which subsystems are identified as cross-cutting concerns?",
|
||||
"answer": "root",
|
||||
"answerType": "list",
|
||||
"source": "subsystem aggregation"
|
||||
},
|
||||
{
|
||||
"id": "arch-001",
|
||||
"category": "architectural",
|
||||
"difficulty": "hard",
|
||||
"audience": [
|
||||
"human"
|
||||
],
|
||||
"question": "The following subsystems have 0 detected functions and 0 modules: account-common, network-common, network-core, root. Why might this be the case, and what do they actually contain?",
|
||||
"answer": "These subsystems primarily contain Helm charts with Go-templated YAML, Terraform HCL, and Crossplane compositions. The code analysis pipeline detects functions/modules from Python, Go, TypeScript, and shell scripts — but Helm templates use Go template syntax ({{ }}) which doesn't produce traditional function/module entities. Their content is captured through the Helm chart extraction phase instead.",
|
||||
"answerType": "explanation",
|
||||
"source": "architectural analysis"
|
||||
},
|
||||
{
|
||||
"id": "arch-002",
|
||||
"category": "architectural",
|
||||
"difficulty": "easy",
|
||||
"audience": [
|
||||
"human",
|
||||
"machine"
|
||||
],
|
||||
"question": "What is the current version and appVersion of the mdm-app Helm chart?",
|
||||
"answer": "version: 0.7.4, appVersion: 2025.12-12-develop",
|
||||
"answerType": "exact",
|
||||
"source": "app-common/charts/mdm-app/Chart.yaml"
|
||||
},
|
||||
{
|
||||
"id": "scenario-001",
|
||||
"category": "scenario",
|
||||
"difficulty": "hard",
|
||||
"audience": [
|
||||
"human"
|
||||
],
|
||||
"question": "If you need to rotate the \"vault-secret\" shared secret, which Helm charts would be affected and need redeployment?",
|
||||
"answer": "ai-app, cleanse-app, pms-app, rdm-app, shared-app",
|
||||
"answerType": "list",
|
||||
"source": "template interaction scanning"
|
||||
},
|
||||
{
|
||||
"id": "scenario-002",
|
||||
"category": "scenario",
|
||||
"difficulty": "hard",
|
||||
"audience": [
|
||||
"human"
|
||||
],
|
||||
"question": "A new engineer needs to deploy the MDM application stack. What charts, configuration values, and external dependencies should they understand first?",
|
||||
"answer": "Chart: mdm-app (app-common/charts/mdm-app), Version: 0.7.4\nKey values: clusterName, environmentType, arch, cloudProvider, region, vaultEnv, imagePullPolicy, clusterDomain, terminationGracePeriodSeconds, etalonsubDomain (+28 more)\nResources generated: 22 K8s resources\nInteractions: none detected",
|
||||
"answerType": "explanation",
|
||||
"source": "app-common/charts/mdm-app"
|
||||
},
|
||||
{
|
||||
"id": "scenario-003",
|
||||
"category": "scenario",
|
||||
"difficulty": "medium",
|
||||
"audience": [
|
||||
"human"
|
||||
],
|
||||
"question": "What network ports does the Cassandra chart expose, and what are they typically used for?",
|
||||
"answer": "Ports: 7000, 7001, 7199, 9042, 9160\n7000: Cassandra inter-node cluster communication\n7001: Cassandra SSL inter-node\n7199: JMX monitoring\n9042: CQL native transport (client connections)\n9160: Thrift client API (legacy)",
|
||||
"answerType": "explanation",
|
||||
"source": "app-common/apps-provider/addons/charts/state-cluster/cassandra/templates/"
|
||||
}
|
||||
]
|
||||
}
|
||||
1045
eval-v2-baseline.json
Normal file
1045
eval-v2-baseline.json
Normal file
File diff suppressed because it is too large
Load Diff
1047
eval-wiggum-v2-iter-1.json
Normal file
1047
eval-wiggum-v2-iter-1.json
Normal file
File diff suppressed because it is too large
Load Diff
333
extract-patterns.js
Normal file
333
extract-patterns.js
Normal file
@@ -0,0 +1,333 @@
|
||||
/**
|
||||
* extract-patterns.js — Mine architectural patterns from code artifacts.
|
||||
*
|
||||
* Extracts:
|
||||
* - Layered architecture from repo/dir naming conventions
|
||||
* - Hub/spoke model from ArgoCD ApplicationSet configs
|
||||
* - Cloud regions from terraform configs + values.yaml
|
||||
* - CIDR allocations from terraform variables
|
||||
* - Naming conventions from scripts + terraform
|
||||
* - Sync-wave ordering from Helm template annotations
|
||||
* - Release/deployment patterns from CI configs + scripts
|
||||
* - Tech stack from Helm chart images + dependencies
|
||||
*/
|
||||
|
||||
const fs = require('fs');
|
||||
const path = require('path');
|
||||
|
||||
const LAYER_PATTERNS = [
|
||||
{ pattern: /^app[-_]/, layer: 'Application', order: 1 },
|
||||
{ pattern: /^compute[-_]/, layer: 'Compute', order: 2 },
|
||||
{ pattern: /^network[-_]/, layer: 'Network', order: 3 },
|
||||
{ pattern: /^account[-_]/, layer: 'Account', order: 4 },
|
||||
{ pattern: /^control[-_]/, layer: 'Control Plane', order: 5 },
|
||||
{ pattern: /^runtime/, layer: 'Runtime (shared)', order: 0 },
|
||||
{ pattern: /^ipam[-_]/, layer: 'IPAM', order: 3.5 },
|
||||
{ pattern: /^skills/, layer: 'Skills/Tooling', order: 6 },
|
||||
{ pattern: /^docs/, layer: 'Documentation', order: 7 },
|
||||
];
|
||||
|
||||
/**
|
||||
* Infer layered architecture from top-level directory names.
|
||||
*/
|
||||
function extractLayers(srcRoot) {
|
||||
const dirs = fs.readdirSync(srcRoot, { withFileTypes: true })
|
||||
.filter(d => d.isDirectory() && !d.name.startsWith('.'))
|
||||
.map(d => d.name);
|
||||
|
||||
const layers = {};
|
||||
for (const dir of dirs) {
|
||||
for (const lp of LAYER_PATTERNS) {
|
||||
if (lp.pattern.test(dir)) {
|
||||
if (!layers[lp.layer]) layers[lp.layer] = { order: lp.order, repos: [] };
|
||||
layers[lp.layer].repos.push(dir);
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return Object.entries(layers)
|
||||
.sort((a, b) => a[1].order - b[1].order)
|
||||
.map(([name, info]) => ({ layer: name, repos: info.repos, order: info.order }));
|
||||
}
|
||||
|
||||
/**
|
||||
* Extract ArgoCD ApplicationSet configs to infer hub/spoke ownership.
|
||||
*/
|
||||
function extractArgoCDAppSets(srcRoot) {
|
||||
const appsets = [];
|
||||
const walkDir = (dir) => {
|
||||
try {
|
||||
for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
|
||||
const full = path.join(dir, entry.name);
|
||||
if (entry.isDirectory()) {
|
||||
if (['node_modules', '.git', 'venv', '.terraform', '__pycache__'].includes(entry.name)) continue;
|
||||
walkDir(full);
|
||||
} else if (entry.name.endsWith('-appset.yaml') || entry.name.endsWith('-appset.yml')) {
|
||||
try {
|
||||
const content = fs.readFileSync(full, 'utf8');
|
||||
const name = content.match(/name:\s*['"]?([^\s'"]+)/)?.[1] || entry.name;
|
||||
const namespace = content.match(/namespace:\s*['"]?([^\s'"]+)/)?.[1] || '';
|
||||
const repoURL = content.match(/repoURL:\s*['"]?([^\s'"]+)/)?.[1] || '';
|
||||
const targetRevision = content.match(/targetRevision:\s*['"]?([^\s'"]+)/)?.[1] || '';
|
||||
const destServer = content.match(/server:\s*['"]?([^\s'"]+)/)?.[1] || '';
|
||||
const relPath = path.relative(srcRoot, full);
|
||||
|
||||
// Determine if hub or spoke based on path
|
||||
const isHub = relPath.includes('hub') || relPath.includes('control-plane');
|
||||
|
||||
appsets.push({
|
||||
name, namespace, repoURL, targetRevision, destServer,
|
||||
file: relPath,
|
||||
location: isHub ? 'hub' : 'spoke',
|
||||
repoName: repoURL.match(/\/([^/]+?)(?:\.git)?$/)?.[1] || repoURL,
|
||||
});
|
||||
} catch {}
|
||||
}
|
||||
}
|
||||
} catch {}
|
||||
};
|
||||
walkDir(srcRoot);
|
||||
return appsets;
|
||||
}
|
||||
|
||||
/**
|
||||
* Extract cloud regions from terraform configs and values.yaml files.
|
||||
*/
|
||||
function extractCloudRegions(srcRoot) {
|
||||
const regions = { aws: new Set(), azure: new Set(), gcp: new Set() };
|
||||
|
||||
const walkDir = (dir) => {
|
||||
try {
|
||||
for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
|
||||
const full = path.join(dir, entry.name);
|
||||
if (entry.isDirectory()) {
|
||||
if (['node_modules', '.git', 'venv', '.terraform', '__pycache__'].includes(entry.name)) continue;
|
||||
walkDir(full);
|
||||
} else if (entry.name.endsWith('.tf') || entry.name === 'values.yaml' || entry.name === 'variables.tf') {
|
||||
try {
|
||||
const content = fs.readFileSync(full, 'utf8');
|
||||
// AWS regions
|
||||
const awsMatches = content.match(/us-east-[12]|us-west-[12]|eu-west-[123]|eu-central-[12]|ap-southeast-[12]|ap-northeast-[123]/g);
|
||||
if (awsMatches) awsMatches.forEach(r => regions.aws.add(r));
|
||||
// Azure regions
|
||||
const azureMatches = content.match(/(?:centralus|eastus[2]?|westus[23]?|westeurope|northeurope|southeastasia|australiaeast)/g);
|
||||
if (azureMatches) azureMatches.forEach(r => regions.azure.add(r));
|
||||
// GCP regions
|
||||
const gcpMatches = content.match(/us-central1|us-east[14]|us-west[14]|europe-west[1-6]|asia-east[12]|asia-southeast[12]/g);
|
||||
if (gcpMatches) gcpMatches.forEach(r => regions.gcp.add(r));
|
||||
} catch {}
|
||||
}
|
||||
}
|
||||
} catch {}
|
||||
};
|
||||
walkDir(srcRoot);
|
||||
|
||||
return {
|
||||
aws: [...regions.aws].sort(),
|
||||
azure: [...regions.azure].sort(),
|
||||
gcp: [...regions.gcp].sort(),
|
||||
};
|
||||
}
|
||||
|
||||
/**
|
||||
* Extract CIDR allocations from terraform variables and configs.
|
||||
*/
|
||||
function extractCIDRAllocations(srcRoot) {
|
||||
const cidrs = [];
|
||||
|
||||
const walkDir = (dir) => {
|
||||
try {
|
||||
for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
|
||||
const full = path.join(dir, entry.name);
|
||||
if (entry.isDirectory()) {
|
||||
if (['node_modules', '.git', 'venv', '.terraform', '__pycache__'].includes(entry.name)) continue;
|
||||
walkDir(full);
|
||||
} else if (entry.name.endsWith('.tf') || entry.name.endsWith('.tfvars')) {
|
||||
try {
|
||||
const content = fs.readFileSync(full, 'utf8');
|
||||
const relPath = path.relative(srcRoot, full);
|
||||
// Match CIDR blocks
|
||||
const cidrMatches = content.match(/(?:cidr|CIDR|subnet|network).*?(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\/\d{1,2})/g);
|
||||
if (cidrMatches) {
|
||||
for (const m of cidrMatches) {
|
||||
const cidr = m.match(/(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\/\d{1,2})/)?.[1];
|
||||
if (cidr) cidrs.push({ cidr, context: m.trim().substring(0, 100), file: relPath });
|
||||
}
|
||||
}
|
||||
} catch {}
|
||||
}
|
||||
}
|
||||
} catch {}
|
||||
};
|
||||
walkDir(srcRoot);
|
||||
|
||||
// Deduplicate by CIDR
|
||||
const unique = {};
|
||||
for (const c of cidrs) {
|
||||
if (!unique[c.cidr]) unique[c.cidr] = [];
|
||||
unique[c.cidr].push({ context: c.context, file: c.file });
|
||||
}
|
||||
return Object.entries(unique).map(([cidr, refs]) => ({ cidr, refs }));
|
||||
}
|
||||
|
||||
/**
|
||||
* Extract naming conventions from scripts and terraform.
|
||||
*/
|
||||
function extractNamingConventions(srcRoot) {
|
||||
const conventions = [];
|
||||
|
||||
const walkDir = (dir) => {
|
||||
try {
|
||||
for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
|
||||
const full = path.join(dir, entry.name);
|
||||
if (entry.isDirectory()) {
|
||||
if (['node_modules', '.git', 'venv', '.terraform', '__pycache__'].includes(entry.name)) continue;
|
||||
walkDir(full);
|
||||
} else if (entry.name.endsWith('.sh') || entry.name.endsWith('.py') || entry.name.endsWith('.tf')) {
|
||||
try {
|
||||
const content = fs.readFileSync(full, 'utf8');
|
||||
const relPath = path.relative(srcRoot, full);
|
||||
// Only match lines that explicitly describe naming conventions with template patterns
|
||||
const lines = content.split('\n');
|
||||
for (const line of lines) {
|
||||
const trimmed = line.trim();
|
||||
// Must contain a template-like pattern AND a convention keyword
|
||||
if (trimmed.match(/convention|naming|format/i) && trimmed.match(/\{(phase|region|cloud|index|env)\}/i)) {
|
||||
conventions.push({ pattern: trimmed.substring(0, 200), file: relPath });
|
||||
}
|
||||
// Also match explicit naming examples like "aws-{phase}-{region-code}-{index}-vpc"
|
||||
if (trimmed.match(/(?:aws|azr|gcp)-\{.*\}-\{.*\}/)) {
|
||||
conventions.push({ pattern: trimmed.substring(0, 200), file: relPath });
|
||||
}
|
||||
}
|
||||
} catch {}
|
||||
}
|
||||
}
|
||||
} catch {}
|
||||
};
|
||||
walkDir(srcRoot);
|
||||
|
||||
// Deduplicate
|
||||
const seen = new Set();
|
||||
return conventions.filter(c => {
|
||||
const key = c.pattern;
|
||||
if (seen.has(key)) return false;
|
||||
seen.add(key);
|
||||
return true;
|
||||
});
|
||||
}
|
||||
|
||||
/**
|
||||
* Extract sync-wave ordering from Helm templates.
|
||||
*/
|
||||
function extractSyncWaves(srcRoot) {
|
||||
const waves = {};
|
||||
|
||||
const walkDir = (dir) => {
|
||||
try {
|
||||
for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
|
||||
const full = path.join(dir, entry.name);
|
||||
if (entry.isDirectory()) {
|
||||
if (['node_modules', '.git', 'venv', '.terraform', '__pycache__'].includes(entry.name)) continue;
|
||||
walkDir(full);
|
||||
} else if (entry.name.endsWith('.yaml') || entry.name.endsWith('.yml')) {
|
||||
try {
|
||||
const content = fs.readFileSync(full, 'utf8');
|
||||
const waveMatch = content.match(/sync-wave:\s*["']?(-?\d+)["']?/);
|
||||
if (waveMatch) {
|
||||
const wave = parseInt(waveMatch[1]);
|
||||
const kind = content.match(/kind:\s*(\w+)/)?.[1] || 'Unknown';
|
||||
const name = content.match(/name:\s*['"]?([^\s'"]+)/)?.[1] || entry.name;
|
||||
const relPath = path.relative(srcRoot, full);
|
||||
if (!waves[wave]) waves[wave] = [];
|
||||
waves[wave].push({ kind, name, file: relPath });
|
||||
}
|
||||
} catch {}
|
||||
}
|
||||
}
|
||||
} catch {}
|
||||
};
|
||||
walkDir(srcRoot);
|
||||
|
||||
return Object.entries(waves)
|
||||
.sort((a, b) => Number(a[0]) - Number(b[0]))
|
||||
.map(([wave, resources]) => ({ wave: Number(wave), resources }));
|
||||
}
|
||||
|
||||
/**
|
||||
* Extract tech stack from Helm chart images and package.json.
|
||||
*/
|
||||
function extractTechStack(srcRoot) {
|
||||
const images = new Set();
|
||||
const packages = {};
|
||||
|
||||
const walkDir = (dir) => {
|
||||
try {
|
||||
for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
|
||||
const full = path.join(dir, entry.name);
|
||||
if (entry.isDirectory()) {
|
||||
if (['node_modules', '.git', 'venv', '.terraform', '__pycache__'].includes(entry.name)) continue;
|
||||
walkDir(full);
|
||||
} else if (entry.name === 'values.yaml') {
|
||||
try {
|
||||
const content = fs.readFileSync(full, 'utf8');
|
||||
const imgMatches = content.match(/image:\s*['"]?([^\s'"]+)/g);
|
||||
if (imgMatches) imgMatches.forEach(m => {
|
||||
const img = m.replace(/image:\s*['"]?/, '').replace(/['"]$/, '');
|
||||
if (img && !img.includes('{{') && !img.includes('__helm')) images.add(img);
|
||||
});
|
||||
const repoMatches = content.match(/repository:\s*['"]?([^\s'"]+)/g);
|
||||
if (repoMatches) repoMatches.forEach(m => {
|
||||
const repo = m.replace(/repository:\s*['"]?/, '').replace(/['"]$/, '');
|
||||
if (repo && !repo.includes('{{') && !repo.includes('__helm') && repo.includes('/')) images.add(repo);
|
||||
});
|
||||
} catch {}
|
||||
} else if (entry.name === 'package.json') {
|
||||
try {
|
||||
const pkg = JSON.parse(fs.readFileSync(full, 'utf8'));
|
||||
const relPath = path.relative(srcRoot, full);
|
||||
if (pkg.dependencies) {
|
||||
for (const [name, ver] of Object.entries(pkg.dependencies)) {
|
||||
if (!packages[name]) packages[name] = [];
|
||||
packages[name].push({ version: ver, file: relPath });
|
||||
}
|
||||
}
|
||||
} catch {}
|
||||
}
|
||||
}
|
||||
} catch {}
|
||||
};
|
||||
walkDir(srcRoot);
|
||||
|
||||
return {
|
||||
containerImages: [...images].sort(),
|
||||
npmPackages: Object.entries(packages).sort((a, b) => b[1].length - a[1].length).slice(0, 30)
|
||||
.map(([name, refs]) => ({ name, count: refs.length, versions: [...new Set(refs.map(r => r.version))] })),
|
||||
};
|
||||
}
|
||||
|
||||
/**
|
||||
* Run all pattern extractors and return a unified result.
|
||||
*/
|
||||
function extractAllPatterns(srcRoot) {
|
||||
console.log('Extracting architectural patterns...');
|
||||
const layers = extractLayers(srcRoot);
|
||||
console.log(` Layers: ${layers.length}`);
|
||||
const appsets = extractArgoCDAppSets(srcRoot);
|
||||
console.log(` ApplicationSets: ${appsets.length}`);
|
||||
const regions = extractCloudRegions(srcRoot);
|
||||
console.log(` Regions: AWS=${regions.aws.length} Azure=${regions.azure.length} GCP=${regions.gcp.length}`);
|
||||
const cidrs = extractCIDRAllocations(srcRoot);
|
||||
console.log(` CIDR allocations: ${cidrs.length}`);
|
||||
const naming = extractNamingConventions(srcRoot);
|
||||
console.log(` Naming conventions: ${naming.length}`);
|
||||
const syncWaves = extractSyncWaves(srcRoot);
|
||||
console.log(` Sync waves: ${syncWaves.length} distinct waves`);
|
||||
const techStack = extractTechStack(srcRoot);
|
||||
console.log(` Container images: ${techStack.containerImages.length}, NPM packages: ${techStack.npmPackages.length}`);
|
||||
|
||||
return { layers, appsets, regions, cidrs, naming, syncWaves, techStack };
|
||||
}
|
||||
|
||||
module.exports = { extractAllPatterns, extractLayers, extractArgoCDAppSets, extractCloudRegions, extractCIDRAllocations, extractNamingConventions, extractSyncWaves, extractTechStack };
|
||||
339
extract-terraform.js
Normal file
339
extract-terraform.js
Normal file
@@ -0,0 +1,339 @@
|
||||
const fs = require('fs');
|
||||
const path = require('path');
|
||||
|
||||
/**
|
||||
* Phase 9: Terraform Extraction
|
||||
* Multi-pass regex parser for .tf files.
|
||||
* Extracts: modules, resources, variables, outputs, data sources, locals, providers.
|
||||
* Detects cross-references: var.X, module.X, local.X, data.X, resource refs.
|
||||
*/
|
||||
|
||||
// Block types we care about
|
||||
const BLOCK_TYPES = ['resource', 'data', 'module', 'variable', 'output', 'provider', 'locals', 'terraform'];
|
||||
|
||||
/**
|
||||
* Find matching closing brace for a block starting at `startLine`.
|
||||
* Returns the line index of the closing brace.
|
||||
*/
|
||||
function findBlockEnd(lines, startLine) {
|
||||
let depth = 0;
|
||||
for (let i = startLine; i < lines.length; i++) {
|
||||
const line = lines[i];
|
||||
// Count braces outside of strings (simplified — good enough for HCL)
|
||||
for (let j = 0; j < line.length; j++) {
|
||||
if (line[j] === '{') depth++;
|
||||
else if (line[j] === '}') {
|
||||
depth--;
|
||||
if (depth === 0) return i;
|
||||
}
|
||||
}
|
||||
}
|
||||
return lines.length - 1; // fallback
|
||||
}
|
||||
|
||||
/**
|
||||
* Extract the body text of a block (between opening { and closing }).
|
||||
*/
|
||||
function extractBlockBody(lines, startLine, endLine) {
|
||||
const bodyLines = lines.slice(startLine, endLine + 1);
|
||||
return bodyLines.join('\n');
|
||||
}
|
||||
|
||||
/**
|
||||
* Parse a variable block for type and default.
|
||||
*/
|
||||
function parseVariableBlock(body) {
|
||||
const result = { type: null, default: null, description: null };
|
||||
|
||||
const typeMatch = body.match(/^\s*type\s*=\s*(.+)/m);
|
||||
if (typeMatch) result.type = typeMatch[1].trim();
|
||||
|
||||
const defaultMatch = body.match(/^\s*default\s*=\s*(.+)/m);
|
||||
if (defaultMatch) result.default = defaultMatch[1].trim().replace(/^"(.*)"$/, '$1');
|
||||
|
||||
const descMatch = body.match(/^\s*description\s*=\s*"([^"]+)"/m);
|
||||
if (descMatch) result.description = descMatch[1];
|
||||
|
||||
return result;
|
||||
}
|
||||
|
||||
/**
|
||||
* Parse a module block for source and version.
|
||||
*/
|
||||
function parseModuleBlock(body) {
|
||||
const result = { source: null, version: null };
|
||||
|
||||
const sourceMatch = body.match(/^\s*source\s*=\s*"([^"]+)"/m);
|
||||
if (sourceMatch) result.source = sourceMatch[1];
|
||||
|
||||
const versionMatch = body.match(/^\s*version\s*=\s*"([^"]+)"/m);
|
||||
if (versionMatch) result.version = versionMatch[1];
|
||||
|
||||
return result;
|
||||
}
|
||||
|
||||
/**
|
||||
* Parse an output block for value and description.
|
||||
*/
|
||||
function parseOutputBlock(body) {
|
||||
const result = { value: null, description: null };
|
||||
|
||||
const valueMatch = body.match(/^\s*value\s*=\s*(.+)/m);
|
||||
if (valueMatch) result.value = valueMatch[1].trim();
|
||||
|
||||
const descMatch = body.match(/^\s*description\s*=\s*"([^"]+)"/m);
|
||||
if (descMatch) result.description = descMatch[1];
|
||||
|
||||
return result;
|
||||
}
|
||||
|
||||
/**
|
||||
* Extract all cross-references from a block body.
|
||||
* Returns array of { type, name } objects.
|
||||
*/
|
||||
function extractReferences(body) {
|
||||
const refs = [];
|
||||
const seen = new Set();
|
||||
|
||||
const patterns = [
|
||||
{ regex: /var\.([a-zA-Z0-9_-]+)/g, type: 'variable' },
|
||||
{ regex: /local\.([a-zA-Z0-9_-]+)/g, type: 'local' },
|
||||
{ regex: /module\.([a-zA-Z0-9_-]+)/g, type: 'module' },
|
||||
{ regex: /data\.([a-zA-Z0-9_-]+)\.([a-zA-Z0-9_-]+)/g, type: 'data' },
|
||||
// Resource references: aws_instance.web.id → resource ref
|
||||
{ regex: /(?<!data\.)(?<!module\.)(?<!var\.)(?<!local\.)([a-z][a-z0-9]*_[a-z][a-z0-9_]*)\.([a-zA-Z0-9_-]+)\./g, type: 'resource' },
|
||||
];
|
||||
|
||||
for (const { regex, type } of patterns) {
|
||||
let m;
|
||||
while ((m = regex.exec(body)) !== null) {
|
||||
const key = type === 'data' ? `data.${m[1]}.${m[2]}` :
|
||||
type === 'resource' ? `${m[1]}.${m[2]}` :
|
||||
`${type}.${m[1]}`;
|
||||
if (!seen.has(key)) {
|
||||
seen.add(key);
|
||||
refs.push({ type, ref: key });
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return refs;
|
||||
}
|
||||
|
||||
/**
|
||||
* Extract all Terraform entities and relationships from a .tf file.
|
||||
* @param {string} filePath - Absolute path to the .tf file.
|
||||
* @param {string} repoRoot - Base path of the repository.
|
||||
* @returns {Object} { file, language: 'hcl', entities: [...], relationships: [...] }
|
||||
*/
|
||||
function extractTerraform(filePath, repoRoot) {
|
||||
const sourceCode = fs.readFileSync(filePath, 'utf8');
|
||||
const relFilePath = path.relative(repoRoot, filePath);
|
||||
const lines = sourceCode.split('\n');
|
||||
const entities = [];
|
||||
const relationships = [];
|
||||
|
||||
// File-level entity
|
||||
const fileId = relFilePath;
|
||||
entities.push({
|
||||
id: fileId,
|
||||
type: 'Config',
|
||||
name: relFilePath,
|
||||
kind: 'terraform',
|
||||
visibility: 'public',
|
||||
line_range: [1, lines.length]
|
||||
});
|
||||
|
||||
// Pass 1: Extract block declarations
|
||||
// Patterns:
|
||||
// resource "type" "name" {
|
||||
// data "type" "name" {
|
||||
// module "name" {
|
||||
// variable "name" {
|
||||
// output "name" {
|
||||
// provider "name" {
|
||||
// locals {
|
||||
// terraform {
|
||||
const blockRegex = /^(resource|data|module|variable|output|provider|locals|terraform)\s*(?:"([^"]+)")?(?:\s+"([^"]+)")?\s*\{/;
|
||||
|
||||
for (let i = 0; i < lines.length; i++) {
|
||||
const trimmed = lines[i].trimStart();
|
||||
// Skip comments
|
||||
if (trimmed.startsWith('#') || trimmed.startsWith('//') || trimmed.startsWith('/*')) continue;
|
||||
|
||||
const match = trimmed.match(blockRegex);
|
||||
if (!match) continue;
|
||||
|
||||
const blockType = match[1];
|
||||
const label1 = match[2] || null;
|
||||
const label2 = match[3] || null;
|
||||
const blockEnd = findBlockEnd(lines, i);
|
||||
const body = extractBlockBody(lines, i, blockEnd);
|
||||
|
||||
let entityId, entityName, entityKind, extra = {};
|
||||
|
||||
switch (blockType) {
|
||||
case 'resource': {
|
||||
entityName = label2 ? `${label1}.${label2}` : label1;
|
||||
entityId = `${fileId}:resource.${entityName}`;
|
||||
entityKind = 'terraform-resource';
|
||||
extra = { resourceType: label1, resourceName: label2 };
|
||||
break;
|
||||
}
|
||||
case 'data': {
|
||||
entityName = label2 ? `${label1}.${label2}` : label1;
|
||||
entityId = `${fileId}:data.${entityName}`;
|
||||
entityKind = 'terraform-data';
|
||||
extra = { dataType: label1, dataName: label2 };
|
||||
break;
|
||||
}
|
||||
case 'module': {
|
||||
entityName = label1;
|
||||
entityId = `${fileId}:module.${entityName}`;
|
||||
entityKind = 'terraform-module';
|
||||
const modInfo = parseModuleBlock(body);
|
||||
extra = { source: modInfo.source, version: modInfo.version };
|
||||
break;
|
||||
}
|
||||
case 'variable': {
|
||||
entityName = label1;
|
||||
entityId = `${fileId}:variable.${entityName}`;
|
||||
entityKind = 'terraform-variable';
|
||||
const varInfo = parseVariableBlock(body);
|
||||
extra = { varType: varInfo.type, default: varInfo.default, description: varInfo.description };
|
||||
break;
|
||||
}
|
||||
case 'output': {
|
||||
entityName = label1;
|
||||
entityId = `${fileId}:output.${entityName}`;
|
||||
entityKind = 'terraform-output';
|
||||
const outInfo = parseOutputBlock(body);
|
||||
extra = { value: outInfo.value, description: outInfo.description };
|
||||
break;
|
||||
}
|
||||
case 'provider': {
|
||||
entityName = label1;
|
||||
entityId = `${fileId}:provider.${entityName}`;
|
||||
entityKind = 'terraform-provider';
|
||||
break;
|
||||
}
|
||||
case 'locals': {
|
||||
entityName = 'locals';
|
||||
entityId = `${fileId}:locals.${i + 1}`;
|
||||
entityKind = 'terraform-locals';
|
||||
// Extract local names from body
|
||||
const localNames = [];
|
||||
const localRegex = /^\s*([a-zA-Z_][a-zA-Z0-9_]*)\s*=/gm;
|
||||
let lm;
|
||||
while ((lm = localRegex.exec(body)) !== null) {
|
||||
localNames.push(lm[1]);
|
||||
}
|
||||
extra = { localNames };
|
||||
break;
|
||||
}
|
||||
case 'terraform': {
|
||||
entityName = 'terraform';
|
||||
entityId = `${fileId}:terraform`;
|
||||
entityKind = 'terraform-config';
|
||||
break;
|
||||
}
|
||||
default:
|
||||
continue;
|
||||
}
|
||||
|
||||
entities.push({
|
||||
id: entityId,
|
||||
type: 'Config',
|
||||
name: entityName,
|
||||
kind: entityKind,
|
||||
visibility: 'public',
|
||||
line_range: [i + 1, blockEnd + 1],
|
||||
...extra
|
||||
});
|
||||
|
||||
relationships.push({
|
||||
type: 'CONTAINS',
|
||||
source: fileId,
|
||||
target: entityId
|
||||
});
|
||||
|
||||
// Pass 2: Extract cross-references from block body
|
||||
const refs = extractReferences(body);
|
||||
for (const ref of refs) {
|
||||
relationships.push({
|
||||
type: 'DEPENDS_ON',
|
||||
source: entityId,
|
||||
target: `${ref.ref}`, // Will be resolved to full IDs during graph merge
|
||||
_refType: ref.type,
|
||||
_unresolved: true
|
||||
});
|
||||
}
|
||||
|
||||
// Skip to end of block
|
||||
i = blockEnd;
|
||||
}
|
||||
|
||||
return { file: filePath, language: 'hcl', entities, relationships };
|
||||
}
|
||||
|
||||
/**
|
||||
* Resolve unresolved DEPENDS_ON references within a set of extraction results.
|
||||
* Matches var.X → variable.X, module.X → module.X, etc. within the same directory tree.
|
||||
*/
|
||||
function resolveReferences(results) {
|
||||
// Build lookup: shortRef → full entityId
|
||||
const lookup = new Map();
|
||||
for (const result of results) {
|
||||
for (const entity of result.entities) {
|
||||
if (entity.kind === 'terraform-variable') {
|
||||
lookup.set(`variable.${entity.name}`, entity.id);
|
||||
} else if (entity.kind === 'terraform-module') {
|
||||
lookup.set(`module.${entity.name}`, entity.id);
|
||||
} else if (entity.kind === 'terraform-resource') {
|
||||
lookup.set(`resource.${entity.name}`, entity.id);
|
||||
// Also register as type.name for resource refs
|
||||
if (entity.resourceType && entity.resourceName) {
|
||||
lookup.set(`${entity.resourceType}.${entity.resourceName}`, entity.id);
|
||||
}
|
||||
} else if (entity.kind === 'terraform-data') {
|
||||
lookup.set(`data.${entity.name}`, entity.id);
|
||||
} else if (entity.kind === 'terraform-locals') {
|
||||
if (entity.localNames) {
|
||||
for (const ln of entity.localNames) {
|
||||
lookup.set(`local.${ln}`, entity.id);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Resolve
|
||||
for (const result of results) {
|
||||
for (const rel of result.relationships) {
|
||||
if (rel._unresolved) {
|
||||
const resolved = lookup.get(rel.target) || lookup.get(rel._refType + '.' + rel.target);
|
||||
if (resolved) {
|
||||
rel.target = resolved;
|
||||
}
|
||||
delete rel._unresolved;
|
||||
delete rel._refType;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return results;
|
||||
}
|
||||
|
||||
// CLI
|
||||
if (require.main === module) {
|
||||
const filePath = process.argv[2];
|
||||
const repoRoot = process.argv[3] || process.cwd();
|
||||
if (!filePath) {
|
||||
console.error('Usage: node extract-terraform.js <file.tf> [repoRoot]');
|
||||
process.exit(1);
|
||||
}
|
||||
const result = extractTerraform(filePath, repoRoot);
|
||||
console.log(JSON.stringify(result, null, 2));
|
||||
}
|
||||
|
||||
module.exports = { extractTerraform, resolveReferences };
|
||||
@@ -15,6 +15,7 @@ const GRAMMARS = {
|
||||
};
|
||||
|
||||
const { extractYaml, extractHcl } = require('./extract-config.js');
|
||||
const { extractTerraform } = require('./extract-terraform.js');
|
||||
|
||||
const EXT_MAP = {
|
||||
'.ts': 'typescript', '.tsx': 'tsx', '.js': 'javascript', '.jsx': 'javascript',
|
||||
@@ -192,7 +193,7 @@ function extract(filePath, repoRoot) {
|
||||
}
|
||||
|
||||
if (lang === 'yaml') return extractYaml(filePath, repoRoot);
|
||||
if (lang === 'hcl') return extractHcl(filePath, repoRoot);
|
||||
if (lang === 'hcl') return extractTerraform(filePath, repoRoot);
|
||||
|
||||
const grammar = GRAMMARS[lang];
|
||||
const adapter = ADAPTERS[lang];
|
||||
|
||||
10
fix-sysdoc-waves.js
Normal file
10
fix-sysdoc-waves.js
Normal file
@@ -0,0 +1,10 @@
|
||||
const fs = require('fs');
|
||||
let lines = fs.readFileSync('/home/node/.openclaw/workspace/projects/dev-intel-v2/sysdoc.js', 'utf8').split('\n');
|
||||
|
||||
// Clear the garbage
|
||||
lines[277] = " helmIndexContent += patterns.syncWaves.map(w => `| ${w.wave} | ${w.resources.length} | ${w.resources.slice(0, 5).map(r => r.kind + ':' + r.name).join(', ')}${w.resources.length > 5 ? '...' : ''} |`).join('\\n') + '\\n\\n';";
|
||||
lines[278] = "";
|
||||
lines[279] = "";
|
||||
lines[280] = "";
|
||||
|
||||
fs.writeFileSync('/home/node/.openclaw/workspace/projects/dev-intel-v2/sysdoc.js', lines.join('\n'));
|
||||
76
flow.js
76
flow.js
@@ -190,6 +190,80 @@ function traceFlow(entryPoint, index, opts = {}) {
|
||||
};
|
||||
}
|
||||
|
||||
/**
|
||||
* Auto-detect entry points from the graph.
|
||||
* Heuristics:
|
||||
* 1. Helm Deployments/StatefulSets with incoming Service/Ingress edges
|
||||
* 2. Python files with __main__ guard
|
||||
* 3. Shell scripts with main() function
|
||||
* 4. CI pipeline files (.github/workflows/, .gitlab-ci.yml)
|
||||
* 5. Go files with main() function in package main
|
||||
*/
|
||||
function detectEntryPoints(graph) {
|
||||
const entryPoints = [];
|
||||
const seen = new Set();
|
||||
|
||||
for (const [id, node] of graph.nodes) {
|
||||
// 1. Helm: Deployments/StatefulSets that have a Service pointing to them
|
||||
if (node.kind === 'helm-resource' || node.kind === 'HelmWorkloads') {
|
||||
const resourceType = node.resourceType || node.name || '';
|
||||
if (resourceType.includes('Deployment') || resourceType.includes('StatefulSet') ||
|
||||
node.type === 'Deployment' || node.type === 'StatefulSet') {
|
||||
// Check if any Service/Ingress references this
|
||||
const hasService = graph.edges.some(e =>
|
||||
(e.target === id || e.source === id) &&
|
||||
(e.type === 'EXPOSES' || e.type === 'ROUTES_TO' || e.type === 'DEPENDS_ON')
|
||||
);
|
||||
if (hasService && !seen.has(id)) {
|
||||
seen.add(id);
|
||||
entryPoints.push({ id, name: node.name, kind: 'helm-workload', reason: 'Deployment/StatefulSet with service' });
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// 2. Python __main__
|
||||
if (node._file && node._file.endsWith('.py') && node.type === 'Function' && node.name === '__main__') {
|
||||
if (!seen.has(id)) {
|
||||
seen.add(id);
|
||||
entryPoints.push({ id, name: node.name, kind: 'python-main', reason: 'Python __main__ guard' });
|
||||
}
|
||||
}
|
||||
|
||||
// 3. Shell main()
|
||||
if (node._file && (node._file.endsWith('.sh') || node._file.endsWith('.bash'))) {
|
||||
if (node.type === 'Function' && node.name === 'main') {
|
||||
if (!seen.has(id)) {
|
||||
seen.add(id);
|
||||
entryPoints.push({ id, name: node.name, kind: 'shell-main', reason: 'Shell main() function' });
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// 4. Go main()
|
||||
if (node._file && node._file.endsWith('.go') && node.type === 'Function' && node.name === 'main') {
|
||||
if (!seen.has(id)) {
|
||||
seen.add(id);
|
||||
entryPoints.push({ id, name: node.name, kind: 'go-main', reason: 'Go main() function' });
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// 5. CI pipeline files
|
||||
for (const [filePath] of graph.fileIndex) {
|
||||
const rel = filePath;
|
||||
if (rel.includes('.github/workflows/') || rel.includes('.gitlab-ci') ||
|
||||
rel.includes('Jenkinsfile') || rel.includes('.circleci/')) {
|
||||
const fileEntities = graph.fileIndex.get(filePath);
|
||||
if (fileEntities && !seen.has(filePath)) {
|
||||
seen.add(filePath);
|
||||
entryPoints.push({ id: filePath, name: filePath, kind: 'ci-pipeline', reason: 'CI/CD pipeline file' });
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return entryPoints;
|
||||
}
|
||||
|
||||
if (require.main === module) {
|
||||
const snapshotPath = process.argv[2];
|
||||
const entryPoint = process.argv[3];
|
||||
@@ -205,4 +279,4 @@ if (require.main === module) {
|
||||
console.log(JSON.stringify(result, null, 2));
|
||||
}
|
||||
|
||||
module.exports = { buildFlowIndex, traceFlow };
|
||||
module.exports = { buildFlowIndex, traceFlow, detectEntryPoints };
|
||||
|
||||
182
foxtrot-docs-v3/explanation/change-impact.md
Normal file
182
foxtrot-docs-v3/explanation/change-impact.md
Normal file
@@ -0,0 +1,182 @@
|
||||
# Change Impact Analysis
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/infra/main.tf:module.infra`
|
||||
|
||||
**Kind:** terraform-module
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/infra/main.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.aws_route53_record.argo_cloud_caa`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.aws_route53_record.argo_internal_caa`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.aws_acm_certificate.argo_cloud`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.aws_acm_certificate.argo_internal`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.aws_route53_record.argo_cloud_cert_validation`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.aws_route53_record.argo_internal_cert_validation`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.aws_acm_certificate_validation.argo_cloud`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.aws_acm_certificate_validation.argo_internal`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.kubernetes_manifest.argocd_proxy_ing_internal`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.kubernetes_manifest.argocd_proxy_ing_cloud`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.aws_route53_record.argo_cloud_alb`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/acm.tf:resource.aws_route53_record.argo_internal_alb`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/acm.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/argo.tf:resource.kubernetes_manifest.argo_manifests`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/argo.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
## Change Impact: `control-core/aws/control-plane-compute-hub/resources/crossplane.tf:resource.kubernetes_manifest.crossplane_providers`
|
||||
|
||||
**Kind:** terraform-resource
|
||||
|
||||
**Total impacted:** 1 entities
|
||||
|
||||
### Depth 1
|
||||
- `control-core/aws/control-plane-compute-hub/resources/crossplane.tf` (terraform) via CONTAINS
|
||||
|
||||
|
||||
---
|
||||
|
||||
@@ -0,0 +1,15 @@
|
||||
# account-creation
|
||||
|
||||
  
|
||||
|
||||
Helm template for creating a new AWS account
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| accountCreation.customerFacing | bool | `true` | |
|
||||
| accountCreation.reltioCustomerId | string | `"ENVIRONMENT_NAME"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,18 @@
|
||||
# account-quota-increase
|
||||
|
||||
  
|
||||
|
||||
Helm chart for requesting AWS account quota increases
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| quotaRequest.awsAccountNumber | string | `"123456789012"` | |
|
||||
| quotaRequest.eipQuotaLimit | int | `20` | |
|
||||
| quotaRequest.managedPoliciesQuotaLimit | int | `20` | |
|
||||
| quotaRequest.vgwQuotaLimit | int | `20` | |
|
||||
| quotaRequest.vpcQuotaLimit | int | `20` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,109 @@
|
||||
# cluster
|
||||
|
||||
  
|
||||
|
||||
Helm3 chart for all cluster level deployments
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `""` | |
|
||||
| azure.externalDNS.identity.clientId | string | `"092cb146-679d-42ea-ace2-6e8d86bf4695"` | |
|
||||
| azure.externalDNS.identity.id | string | `"/subscriptions/7fb0ee54-d55a-468b-94f2-c1f2fda0a4d3/resourceGroups/reltio-aks-iqa-us-01-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/reltio-aks-iqa-us-01-extdns-msi"` | |
|
||||
| azure.nfsShare.shareName | string | `"sts-aks-iqa-us-01-nfs-share-ptatp"` | |
|
||||
| azure.nfsShare.storageAccount | string | `"staksiqaus01crkwp"` | |
|
||||
| azure.resourceGroup | string | `"reltio-aks-iqa-us-01-rg"` | |
|
||||
| azure.subscriptionId | string | `"7fb0ee54-d55a-468b-94f2-c1f2fda0a4d3"` | |
|
||||
| azure.tenantId | string | `"ec5dd7b3-0e80-414c-ba2a-6495e1f57384"` | |
|
||||
| azureOcean2 | bool | `false` | |
|
||||
| cloud | string | `""` | |
|
||||
| clusterCustomerFacing | bool | `false` | |
|
||||
| clusterHipaa | bool | `false` | |
|
||||
| clusterInternal | bool | `false` | |
|
||||
| clusterName | string | `""` | |
|
||||
| customOktaGroup.enabled | bool | `false` | |
|
||||
| customOktaGroup.name | string | `""` | |
|
||||
| customOktaGroup.roleTemplate | string | `""` | |
|
||||
| deployDNSAutomation | bool | `false` | |
|
||||
| deployDNSAutomationRegion_AWS | string | `"us-east-1"` | |
|
||||
| deployElasticCRD | bool | `false` | |
|
||||
| deployIstio | bool | `false` | |
|
||||
| deployIstioLogging | bool | `false` | |
|
||||
| deployIstioTLS | bool | `false` | |
|
||||
| deployLogdna | bool | `true` | |
|
||||
| deployMetricsServer | bool | `false` | |
|
||||
| deployPrisma | bool | `false` | |
|
||||
| deploySentinelOne | bool | `true` | |
|
||||
| efsEnabled | bool | `false` | |
|
||||
| efsid | string | `""` | |
|
||||
| istioNamespace | string | `"helm-istio-system"` | |
|
||||
| istioSystemDNS | bool | `false` | |
|
||||
| istioVersion | string | `"1.4.4"` | |
|
||||
| logdnaExternalSecret.data[0].remoteRef.key | string | `"service/data/logdna"` | |
|
||||
| logdnaExternalSecret.data[0].remoteRef.property | string | `"logdna-agent-key"` | |
|
||||
| logdnaExternalSecret.data[0].secretKey | string | `"logdna-agent-key"` | |
|
||||
| logdnaExternalSecret.name | string | `"logdna-agent-key"` | |
|
||||
| logdnaExternalSecret.namespace | string | `"logdna"` | |
|
||||
| logdnaExternalSecret.refreshInterval | string | `"15s"` | |
|
||||
| logdnaExternalSecret.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| logdnaExternalSecret.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| logdnaExternalSecret.target.name | string | `"logdna-agent-key"` | |
|
||||
| logdnaRegistry | string | `"gcr.io/customer-facing/logdna/logdna-agent"` | |
|
||||
| logdnaTagVersion | string | `"3.5.2"` | |
|
||||
| metricsServerRegistry | string | `""` | |
|
||||
| metricsServerVersion | string | `""` | |
|
||||
| namespaceHacks[0] | string | `"elastic-system"` | |
|
||||
| namespaceHacks[1] | string | `"otel-collector"` | |
|
||||
| namespaceHacks[2] | string | `"argo-rollouts"` | |
|
||||
| namespaceHacks[3] | string | `"twistlock"` | |
|
||||
| prismaWSAddress | string | `"wss://cn-northwest-1.cloud.twistlock.com:443"` | |
|
||||
| privateHostedZone | string | `"apou04"` | |
|
||||
| publicHostedZone | string | `"apou04-dev"` | |
|
||||
| rootDomain | string | `"reltio.com"` | |
|
||||
| s1Helper.name | string | `"s1-helper"` | |
|
||||
| s1Helper.namespace | string | `"sentinelone"` | |
|
||||
| s1Helper.refreshInterval | string | `"15s"` | |
|
||||
| s1Helper.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| s1Helper.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| s1Helper.target.name | string | `"s1-helper"` | |
|
||||
| s1agentExternalSecret.data[0].remoteRef.key | string | `"service/data/s1-agent"` | |
|
||||
| s1agentExternalSecret.data[0].remoteRef.property | string | `"site_key"` | |
|
||||
| s1agentExternalSecret.data[0].secretKey | string | `"site_key"` | |
|
||||
| s1agentExternalSecret.name | string | `"s1-agent"` | |
|
||||
| s1agentExternalSecret.namespace | string | `"sentinelone"` | |
|
||||
| s1agentExternalSecret.refreshInterval | string | `"15s"` | |
|
||||
| s1agentExternalSecret.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| s1agentExternalSecret.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| s1agentExternalSecret.target.name | string | `"s1-agent"` | |
|
||||
| s1helperExternalSecret.data[0].remoteRef.key | string | `"service/data/s1-helper"` | |
|
||||
| s1helperExternalSecret.data[0].remoteRef.property | string | `"server_token"` | |
|
||||
| s1helperExternalSecret.data[0].secretKey | string | `"server_token"` | |
|
||||
| s1helperExternalSecret.name | string | `"s1-helper-token"` | |
|
||||
| s1helperExternalSecret.namespace | string | `"sentinelone"` | |
|
||||
| s1helperExternalSecret.refreshInterval | string | `"15s"` | |
|
||||
| s1helperExternalSecret.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| s1helperExternalSecret.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| s1helperExternalSecret.target.name | string | `"s1-helper-token"` | |
|
||||
| snyk.data[0].remoteRef.key | string | `"service/data/snyk-monitor"` | |
|
||||
| snyk.data[0].remoteRef.property | string | `"dockercfg.json"` | |
|
||||
| snyk.data[0].secretKey | string | `"dockercfg.json"` | |
|
||||
| snyk.data[1].remoteRef.key | string | `"service/data/snyk-monitor"` | |
|
||||
| snyk.data[1].remoteRef.property | string | `"integrationId"` | |
|
||||
| snyk.data[1].secretKey | string | `"integrationId"` | |
|
||||
| snyk.data[2].remoteRef.key | string | `"service/data/snyk-monitor"` | |
|
||||
| snyk.data[2].remoteRef.property | string | `"serviceAccountApiToken"` | |
|
||||
| snyk.data[2].secretKey | string | `"serviceAccountApiToken"` | |
|
||||
| snyk.enabled | bool | `false` | |
|
||||
| snyk.name | string | `"snyk-monitor"` | |
|
||||
| snyk.namespace | string | `"snyk-monitor"` | |
|
||||
| snyk.refreshInterval | string | `"15s"` | |
|
||||
| snyk.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| snyk.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| snyk.target.name | string | `"snyk-monitor"` | |
|
||||
| snyk.target.type | string | `"Opaque"` | |
|
||||
| templateName | string | `"{{.Name}}"` | |
|
||||
| templateNamespace | string | `"{{.Namespace}}"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,24 @@
|
||||
# external-dns
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes External DNS
|
||||
|
||||
## Requirements
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://kubernetes-sigs.github.io/external-dns/ | external-dns | 1.17.0 |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| external-dns.enabled | bool | `true` | |
|
||||
| external-dns.rbac.additionalPermissions | list | `[]` | |
|
||||
| external-dns.sources[0] | string | `"ingress"` | |
|
||||
| external-dns.sources[1] | string | `"crd"` | |
|
||||
| external-dns.txtOwnerId | string | `"k8s-cluster-demo"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,26 @@
|
||||
# ingress-nginx
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes Ingress Nginx
|
||||
|
||||
## Requirements
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://kubernetes.github.io/ingress-nginx | ingress-nginx | 4.12.0 |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| ingress-nginx.controller.replicaCount | int | `3` | |
|
||||
| ingress-nginx.controller.service.annotations."service.beta.kubernetes.io/aws-load-balancer-backend-protocol" | string | `"tcp"` | |
|
||||
| ingress-nginx.controller.service.annotations."service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled" | string | `"true"` | |
|
||||
| ingress-nginx.controller.service.annotations."service.beta.kubernetes.io/aws-load-balancer-nlb-target-type" | string | `"ip"` | |
|
||||
| ingress-nginx.controller.service.annotations."service.beta.kubernetes.io/aws-load-balancer-scheme" | string | `"internal"` | |
|
||||
| ingress-nginx.controller.service.annotations."service.beta.kubernetes.io/aws-load-balancer-type" | string | `"nlb-ip"` | |
|
||||
| ingress-nginx.enabled | bool | `true` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,40 @@
|
||||
# kube-state-metrics
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes Telemetry
|
||||
|
||||
## Requirements
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://prometheus-community.github.io/helm-charts | kube-state-metrics | 5.26.0 |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| kube-state-metrics.collectors[0] | string | `"horizontalpodautoscalers"` | |
|
||||
| kube-state-metrics.enabled | bool | `true` | |
|
||||
| kube-state-metrics.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| kube-state-metrics.image.registry | string | `"gcr.io"` | |
|
||||
| kube-state-metrics.image.repository | string | `"customer-facing/otel/kube-state-metrics"` | |
|
||||
| kube-state-metrics.image.sha | string | `""` | |
|
||||
| kube-state-metrics.image.tag | string | `"v2.9.2"` | |
|
||||
| kube-state-metrics.imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| kube-state-metrics.metricAllowlist[0] | string | `"kube_horizontalpodautoscaler_spec_max_replicas"` | |
|
||||
| kube-state-metrics.metricAllowlist[1] | string | `"kube_horizontalpodautoscaler_spec_min_replicas"` | |
|
||||
| kube-state-metrics.metricAllowlist[2] | string | `"kube_horizontalpodautoscaler_spec_target_metric"` | |
|
||||
| kube-state-metrics.metricAllowlist[3] | string | `"kube_horizontalpodautoscaler_status_target_metric"` | |
|
||||
| kube-state-metrics.metricAllowlist[4] | string | `"kube_horizontalpodautoscaler_status_current_replicas"` | |
|
||||
| kube-state-metrics.metricAllowlist[5] | string | `"kube_horizontalpodautoscaler_status_desired_replicas"` | |
|
||||
| kube-state-metrics.metricAllowlist[6] | string | `"kube_horizontalpodautoscaler_status_condition"` | |
|
||||
| kube-state-metrics.namespaceOverride | string | `"otel-collector"` | |
|
||||
| kube-state-metrics.prometheusScrape | bool | `false` | |
|
||||
| kube-state-metrics.resources.limits.cpu | string | `"250m"` | |
|
||||
| kube-state-metrics.resources.limits.memory | string | `"64Mi"` | |
|
||||
| kube-state-metrics.resources.requests.cpu | string | `"100m"` | |
|
||||
| kube-state-metrics.resources.requests.memory | string | `"32Mi"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,27 @@
|
||||
# agent
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Agent" Daemonset
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| resources.limits.cpu | string | `"1"` | |
|
||||
| resources.limits.memory | string | `"512Mi"` | |
|
||||
| resources.requests.cpu | string | `"50m"` | |
|
||||
| resources.requests.memory | string | `"256Mi"` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,16 @@
|
||||
# common
|
||||
|
||||
  
|
||||
|
||||
Common OpenTelemetry k8s resources used by other Reltio OTel charts
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| clusterName | string | `""` | |
|
||||
| fullnameOverride | string | `"otel-common"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,37 @@
|
||||
# gw-metrics
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Gateway" Deployment for Metrics
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].key | string | `"app.kubernetes.io/name"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].operator | string | `"In"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].values[0] | string | `"otel-gw-metrics-collector"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].weight | int | `100` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.maxReplicas | int | `8` | |
|
||||
| autoscaling.minReplicas | int | `2` | |
|
||||
| autoscaling.targetCPUUtilizationPercentage | int | `80` | |
|
||||
| awsManagePrometheusWriteEndpoint | string | `"https://aps-workspaces.us-east-1.amazonaws.com/workspaces/ws-84e08a5b-7fda-409c-b421-418deed15bcd/api/v1/remote_write"` | |
|
||||
| awsSigv4auth.IAMRoleArn | string | `"arn:aws:iam::930358522410:role/amp-iamproxy-ingest-role"` | |
|
||||
| awsSigv4auth.region | string | `"us-east-1"` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"512Mi"` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,30 @@
|
||||
# gw-traces
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Gateway" Deployment for Traces
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].key | string | `"app.kubernetes.io/name"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].operator | string | `"In"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].values[0] | string | `"otel-gw-traces-collector"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].weight | int | `100` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.maxReplicas | int | `8` | |
|
||||
| autoscaling.minReplicas | int | `2` | |
|
||||
| clusterName | string | `""` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"512Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tempoExporter.endpoint | string | `"tempo-qa.observability.devopsrnd.reltio.com:4317"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,21 @@
|
||||
# k8s-metrics
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry Collector for Cluster Wide K8S Attributes
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources.limits.memory | string | `"1Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"256Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,21 @@
|
||||
# prom-scraper
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry Collector for scraping miscellaneous Prometheus endpoints
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"500m"` | |
|
||||
| resources.requests.memory | string | `"768Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,204 @@
|
||||
# common
|
||||
|
||||
  
|
||||
|
||||
Common OpenTelemetry k8s resources used by other Reltio OTel charts
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| clusterName | string | `""` | |
|
||||
| fullnameOverride | string | `"otel-common"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# gw-metrics
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Gateway" Deployment for Metrics
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].key | string | `"app.kubernetes.io/name"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].operator | string | `"In"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].values[0] | string | `"otel-gw-metrics-collector"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].weight | int | `100` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.maxReplicas | int | `8` | |
|
||||
| autoscaling.minReplicas | int | `2` | |
|
||||
| autoscaling.targetCPUUtilizationPercentage | int | `80` | |
|
||||
| awsManagePrometheusWriteEndpoint | string | `"https://aps-workspaces.us-east-1.amazonaws.com/workspaces/ws-84e08a5b-7fda-409c-b421-418deed15bcd/api/v1/remote_write"` | |
|
||||
| awsSigv4auth.IAMRoleArn | string | `"arn:aws:iam::930358522410:role/amp-iamproxy-ingest-role"` | |
|
||||
| awsSigv4auth.region | string | `"us-east-1"` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"512Mi"` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# gw-traces
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Gateway" Deployment for Traces
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].key | string | `"app.kubernetes.io/name"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].operator | string | `"In"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].values[0] | string | `"otel-gw-traces-collector"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].weight | int | `100` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.maxReplicas | int | `8` | |
|
||||
| autoscaling.minReplicas | int | `2` | |
|
||||
| clusterName | string | `""` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"512Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tempoExporter.endpoint | string | `"tempo-qa.observability.devopsrnd.reltio.com:4317"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# k8s-metrics
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry Collector for Cluster Wide K8S Attributes
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources.limits.memory | string | `"1Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"256Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# prom-scraper
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry Collector for scraping miscellaneous Prometheus endpoints
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"500m"` | |
|
||||
| resources.requests.memory | string | `"768Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# open-telemetry
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes OpenTelemetry Operator
|
||||
|
||||
## Requirements
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| file://charts/agent | agent | 0.1.1 |
|
||||
| file://charts/common | common | 0.1.0 |
|
||||
| file://charts/gw-metrics | gw-metrics | 0.1.0 |
|
||||
| file://charts/gw-traces | gw-traces | 0.1.0 |
|
||||
| file://charts/k8s-metrics | k8s-metrics | 0.1.0 |
|
||||
| file://charts/prom-scraper | prom-scraper | 0.1.0 |
|
||||
| https://open-telemetry.github.io/opentelemetry-helm-charts | opentelemetry-operator | 0.26.4 |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| agent.enabled | bool | `true` | |
|
||||
| agent.fullnameOverride | string | `"otel-agent"` | |
|
||||
| agent.serviceAccount.name | string | `"otel-agent-sa"` | |
|
||||
| global.clusterName | string | `"eks-new-cluster"` | |
|
||||
| global.gwMetricsName | string | `"otel-gw-metrics"` | |
|
||||
| global.gwTracesName | string | `"otel-gw-traces"` | |
|
||||
| global.k8sClusterRoleAWSDetector | string | `"otel-aws-detector"` | |
|
||||
| global.k8sClusterRoleGateway | string | `"otel-gateway"` | |
|
||||
| global.k8sClusterRolePodandNSRO | string | `"otel-k8s-pod-ns-ro"` | |
|
||||
| gw-metrics.enabled | bool | `true` | |
|
||||
| gw-metrics.fullnameOverride | string | `"otel-gw-metrics"` | |
|
||||
| gw-metrics.serviceAccount.name | string | `"otel-gw-metrics-sa"` | |
|
||||
| gw-metrics.vaultKey | string | `"service/data/otel-collector"` | |
|
||||
| gw-traces.enabled | bool | `true` | |
|
||||
| gw-traces.fullnameOverride | string | `"otel-gw-traces"` | |
|
||||
| gw-traces.serviceAccount.name | string | `"otel-gw-traces-sa"` | |
|
||||
| gw-traces.vaultKey | string | `"service/data/otel-collector"` | |
|
||||
| k8s-metrics.enabled | bool | `true` | |
|
||||
| k8s-metrics.fullnameOverride | string | `"otel-k8s-metrics"` | |
|
||||
| k8s-metrics.serviceAccount.name | string | `"otel-k8s-metrics-sa"` | |
|
||||
| opentelemetry-operator.enabled | bool | `true` | |
|
||||
| opentelemetry-operator.manager.collectorImage.repository | string | `"gcr.io/customer-facing/otel/opentelemetry-collector-contrib"` | |
|
||||
| opentelemetry-operator.manager.collectorImage.tag | string | `"0.75.0"` | |
|
||||
| opentelemetry-operator.nameOverride | string | `"open-telemetry"` | |
|
||||
| prom-scraper.enabled | bool | `true` | |
|
||||
| prom-scraper.fullnameOverride | string | `"otel-prom-scraper"` | |
|
||||
| prom-scraper.serviceAccount.name | string | `"otel-prom-scraper-sa"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# agent
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Agent" Daemonset
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| resources.limits.cpu | string | `"1"` | |
|
||||
| resources.limits.memory | string | `"512Mi"` | |
|
||||
| resources.requests.cpu | string | `"50m"` | |
|
||||
| resources.requests.memory | string | `"256Mi"` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,85 @@
|
||||
# reltio-prometheus
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes Twistlock
|
||||
|
||||
## Requirements
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://prometheus-community.github.io/helm-charts | kube-prometheus-stack | 69.4.1 |
|
||||
| https://prometheus-community.github.io/helm-charts | prometheus-adapter | 4.11.0 |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| kube-prometheus-stack.alertmanager.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.cloud | string | `""` | |
|
||||
| kube-prometheus-stack.coreDns.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.crds.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.alertmanager | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.configReloaders | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.etcd | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.general | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.k8sContainerCpuUsageSecondsTotal | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.k8sContainerMemoryCache | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.k8sContainerMemoryRss | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.k8sContainerMemorySwap | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.k8sContainerMemoryWorkingSetBytes | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.k8sContainerResource | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.k8sPodOwner | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubeApiserverAvailability | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubeApiserverBurnrate | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubeApiserverHistogram | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubeApiserverSlos | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubeControllerManager | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubePrometheusGeneral | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubePrometheusNodeRecording | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubeProxy | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubeSchedulerAlerting | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubeSchedulerRecording | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubeStateMetrics | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubelet | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubernetesApps | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubernetesResources | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubernetesStorage | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.kubernetesSystem | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.network | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.node | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.nodeExporterAlerting | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.nodeExporterRecording | bool | `false` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.prometheus | bool | `true` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.prometheusOperator | bool | `true` | |
|
||||
| kube-prometheus-stack.defaultRules.rules.windows | bool | `false` | |
|
||||
| kube-prometheus-stack.enabled | bool | `true` | |
|
||||
| kube-prometheus-stack.fullnameOverride | string | `"prometheus"` | |
|
||||
| kube-prometheus-stack.grafana.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.kubeApiServer.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.kubeControllerManager.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.kubeEtcd.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.kubeProxy.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.kubeScheduler.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.kubeStateMetrics.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.kubelet.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.kubernetesServiceMonitors.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.nodeExporter.enabled | bool | `false` | |
|
||||
| kube-prometheus-stack.prometheus.podDisruptionBudget.enabled | bool | `true` | |
|
||||
| kube-prometheus-stack.prometheus.prometheusSpec.podMonitorSelectorNilUsesHelmValues | bool | `false` | |
|
||||
| kube-prometheus-stack.prometheus.prometheusSpec.probeSelectorNilUsesHelmValues | bool | `false` | |
|
||||
| kube-prometheus-stack.prometheus.prometheusSpec.replicas | int | `3` | |
|
||||
| kube-prometheus-stack.prometheus.prometheusSpec.retentionSize | string | `"40GB"` | |
|
||||
| kube-prometheus-stack.prometheus.prometheusSpec.serviceMonitorSelectorNilUsesHelmValues | bool | `false` | |
|
||||
| kube-prometheus-stack.prometheus.prometheusSpec.storageSpec.volumeClaimTemplate.spec.accessModes[0] | string | `"ReadWriteOnce"` | |
|
||||
| kube-prometheus-stack.prometheus.prometheusSpec.storageSpec.volumeClaimTemplate.spec.resources.requests.storage | string | `"50Gi"` | |
|
||||
| kube-prometheus-stack.prometheus.prometheusSpec.storageSpec.volumeClaimTemplate.spec.storageClassName | string | `"prometheus-tsdb"` | |
|
||||
| prometheus-adapter.enabled | bool | `true` | |
|
||||
| prometheus-adapter.extraArguments[0] | string | `"--metrics-max-age=2m"` | |
|
||||
| prometheus-adapter.podDisruptionBudget.enabled | bool | `true` | |
|
||||
| prometheus-adapter.podLabels.prometheus-adapter-topology-selector | string | `"true"` | |
|
||||
| prometheus-adapter.prometheus.url | string | `"http://prometheus-prometheus"` | |
|
||||
| prometheus-adapter.replicas | int | `3` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,37 @@
|
||||
# secret-operator
|
||||
|
||||
  
|
||||
|
||||
A Helm chart to install External Secret Operator
|
||||
|
||||
## Requirements
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://charts.external-secrets.io | external-secrets | 0.10.5 |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| clusterName | string | `""` | |
|
||||
| external-secrets.enabled | bool | `true` | |
|
||||
| external-secrets.installCRDs | bool | `true` | |
|
||||
| externalSecret.dataFrom.extract.key | string | `"service/dataload/internals/perf-04"` | |
|
||||
| externalSecret.name | string | `"vault-external-secret"` | |
|
||||
| externalSecret.refreshInterval | string | `"15s"` | |
|
||||
| externalSecret.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| externalSecret.target.name | string | `"example-secret"` | |
|
||||
| secretStoreName | string | `"secretstore"` | |
|
||||
| vault.auth.appRole.path | string | `"approle"` | |
|
||||
| vault.auth.appRole.roleId | string | `"change-me"` | |
|
||||
| vault.auth.appRole.secretRef.key | string | `"secret-id"` | |
|
||||
| vault.auth.appRole.secretRef.name | string | `"vault-secret"` | |
|
||||
| vault.path | string | `"service"` | |
|
||||
| vault.server | string | `"change-me"` | |
|
||||
| vault.version | string | `"v2"` | |
|
||||
| vaultSecret.name | string | `"vault-secret"` | |
|
||||
| vaultSecret.secretId | string | `"change-me"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,73 @@
|
||||
# twistlock-defender
|
||||
|
||||
|
||||
|
||||
Twistlock Defender Daemon Set Helm Chart
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| COMMUNICATION_PORT | string | `"443"` | |
|
||||
| CONSOLE_CN | string | `"us-west1.cloud.twistlock.com"` | |
|
||||
| DATA_FOLDER | string | `"/var/lib/twistlock"` | |
|
||||
| DATA_RECOVERY_ENABLED | string | `"true"` | |
|
||||
| DATA_RECOVERY_VOLUME | string | `"/var/lib/twistlock-backup"` | |
|
||||
| DEFENDER_CN | string | `""` | |
|
||||
| DISABLE_CONSOLE_CGROUP_LIMITS | string | `"false"` | |
|
||||
| DOCKER_SOCKET | string | `"/var/run/docker.sock"` | |
|
||||
| DOCKER_TWISTLOCK_TAG | string | `"_33_01_137"` | |
|
||||
| FIPS_ENABLED | string | `"false"` | |
|
||||
| MANAGEMENT_PORT_HTTP | string | `""` | |
|
||||
| MANAGEMENT_PORT_HTTPS | string | `"8083"` | |
|
||||
| READ_ONLY_FS | string | `"true"` | |
|
||||
| RUN_CONSOLE_AS_ROOT | string | `"false"` | |
|
||||
| SELINUX_LABEL | string | `"disable"` | |
|
||||
| SYSTEMD_ENABLED | string | `"false"` | |
|
||||
| access_ca | string | `""` | |
|
||||
| admission_cert | string | `"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"` | |
|
||||
| admission_key | string | `"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"` | |
|
||||
| cluster | string | `"{{ .Values.clusterName }}"` | |
|
||||
| cluster_id | string | `"aa7bfc8a-e09f-b822-ae1d-ec4ee069dee4"` | |
|
||||
| cluster_name_resolving_method | string | `""` | |
|
||||
| cluster_role_name | string | `"twistlock-view"` | |
|
||||
| collect_pod_labels | bool | `false` | |
|
||||
| container_runtime_socket_folder | string | `"/var/run"` | |
|
||||
| containers_storage_mount | string | `"/var/lib/containerd"` | |
|
||||
| containers_storage_mount_rke2 | string | `""` | |
|
||||
| cri_data_rke2_volume_name | string | `"cri-rke2-data"` | |
|
||||
| cri_data_volume_name | string | `"cri-data"` | |
|
||||
| defender_ca_cert | string | `"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"` | |
|
||||
| defender_client_cert | string | `"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"` | |
|
||||
| defender_client_key | string | `"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"` | |
|
||||
| defender_service_port | int | `9998` | |
|
||||
| defender_type | string | `"cri"` | |
|
||||
| docker_socket_path | string | `"/var/run/docker.sock"` | |
|
||||
| gke_autopilot_annotation | string | `""` | |
|
||||
| host_custom_compliance | bool | `false` | |
|
||||
| image_name | string | `"gcr.io/customer-facing/twistlock/defender:defender_33_01_137"` | |
|
||||
| install_bundle | string | `"eyJzZWNyZXRzIjp7fSwiZ2xvYmFsUHJveHlPcHQiOnsiaHR0cFByb3h5IjoiIiwibm9Qcm94eSI6IiIsImNhIjoiIiwidXNlciI6IiIsInBhc3N3b3JkIjp7ImVuY3J5cHRlZCI6IiJ9fSwiY3VzdG9tZXJJRCI6InVzLTQtMTYxMDMxNDcxIiwiYXBpS2V5Ijoialp3eGtaenh2aUtjcDhiSG10bDNPbW52RDJIdFlDNXF6QmxudjdyTTVyU3FTTHlESWVEWlhmY0hXb1BIUHBKK2xVQy9GWURFSWlKQUpWY1lRQ0pNdVE9PSIsIm1pY3Jvc2VnQ29tcGF0aWJsZSI6ZmFsc2V9"` | |
|
||||
| limit_cpu | string | `"\"900m\""` | |
|
||||
| limit_memory | string | `"\"512Mi\""` | |
|
||||
| monitor_istio | bool | `false` | |
|
||||
| monitor_service_accounts | bool | `true` | |
|
||||
| namespace | string | `"twistlock"` | |
|
||||
| node_selector | string | `""` | |
|
||||
| old_defender_ca_cert | string | `""` | |
|
||||
| old_defender_client_cert | string | `""` | |
|
||||
| old_defender_client_key | string | `""` | |
|
||||
| openshift | bool | `false` | |
|
||||
| privileged | string | `"false"` | |
|
||||
| role_arn | string | `""` | |
|
||||
| runc_proxy_sock_folder | string | `"/run"` | |
|
||||
| secrets_name | string | `"gcrregcred"` | |
|
||||
| selinux_header | string | `""` | |
|
||||
| selinux_options | string | `""` | |
|
||||
| service_parameter | string | `"U0xleUNpNFFpN3JFVHJNa2Jmc0FKQ3VubVp2dkdmL2NoYUw5YWdORjNGbXZqbzF0dDMwWEdmRC9ldnB2cDFFVFRLMng1YmFjaXluWm44ZXFBcW5yY1E9PQ=="` | |
|
||||
| talos | bool | `false` | |
|
||||
| twistlock_data_folder | string | `"/var/lib/twistlock"` | |
|
||||
| unique_hostname | bool | `false` | |
|
||||
| ws_address | string | `"wss://us-west1.cloud.twistlock.com:443"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,27 @@
|
||||
# eck-operator-crds
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for installing the ECK operator Custom Resource Definitions (CRD).
|
||||
|
||||
**Homepage:** <https://github.com/elastic/cloud-on-k8s>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Elastic | <eck@elastic.co> | |
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.21.0-0`
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| global.kubeVersion | string | `"1.21.0"` | |
|
||||
| global.manifestGen | bool | `false` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,129 @@
|
||||
# eck-operator
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for deploying the Elastic Cloud on Kubernetes (ECK) operator: the official Kubernetes operator for orchestrating Elasticsearch, Kibana, APM Server, Enterprise Search, and Beats.
|
||||
|
||||
**Homepage:** <https://github.com/elastic/cloud-on-k8s>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Elastic | <eck@elastic.co> | |
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.21.0-0`
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| | eck-operator-crds | 2.6.1 |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| config.caRotateBefore | string | `"24h"` | |
|
||||
| config.caValidity | string | `"8760h"` | |
|
||||
| config.certificatesRotateBefore | string | `"24h"` | |
|
||||
| config.certificatesValidity | string | `"8760h"` | |
|
||||
| config.containerRegistry | string | `"docker.elastic.co"` | |
|
||||
| config.elasticsearchClientTimeout | string | `"180s"` | |
|
||||
| config.elasticsearchObservationInterval | string | `"10s"` | |
|
||||
| config.enableLeaderElection | bool | `true` | |
|
||||
| config.exposedNodeLabels[0] | string | `"topology.kubernetes.io/.*"` | |
|
||||
| config.exposedNodeLabels[1] | string | `"failure-domain.beta.kubernetes.io/.*"` | |
|
||||
| config.kubeClientTimeout | string | `"60s"` | |
|
||||
| config.logVerbosity | string | `"0"` | |
|
||||
| config.maxConcurrentReconciles | string | `"3"` | |
|
||||
| config.metricsPort | string | `"0"` | |
|
||||
| config.setDefaultSecurityContext | bool | `true` | |
|
||||
| config.validateStorageClass | bool | `true` | |
|
||||
| createClusterScopedResources | bool | `true` | |
|
||||
| env | list | `[]` | |
|
||||
| fullnameOverride | string | `"elastic-operator"` | |
|
||||
| global.createOperatorNamespace | bool | `true` | |
|
||||
| global.kubeVersion | string | `"1.21.0"` | |
|
||||
| global.manifestGen | bool | `false` | |
|
||||
| image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| image.repository | string | `"gcr.io/customer-facing/eck/eck-operator"` | |
|
||||
| image.tag | string | `nil` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| installCRDs | bool | `true` | |
|
||||
| kubeAPIServerIP | string | `nil` | |
|
||||
| managedNamespaces | list | `[]` | |
|
||||
| nameOverride | string | `"elastic-operator"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podLabels | object | `{}` | |
|
||||
| podMonitor.annotations | object | `{}` | |
|
||||
| podMonitor.enabled | bool | `false` | |
|
||||
| podMonitor.interval | string | `"5m"` | |
|
||||
| podMonitor.labels | object | `{}` | |
|
||||
| podMonitor.podMetricsEndpointConfig | object | `{}` | |
|
||||
| podMonitor.podTargetLabels | list | `[]` | |
|
||||
| podMonitor.scrapeTimeout | string | `"30s"` | |
|
||||
| podSecurityContext.runAsNonRoot | bool | `true` | |
|
||||
| priorityClassName | string | `""` | |
|
||||
| refs.enforceRBAC | bool | `false` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources.limits.cpu | int | `1` | |
|
||||
| resources.limits.memory | string | `"12Gi"` | |
|
||||
| resources.requests.cpu | string | `"100m"` | |
|
||||
| resources.requests.memory | string | `"2Gi"` | |
|
||||
| securityContext.allowPrivilegeEscalation | bool | `false` | |
|
||||
| securityContext.capabilities.drop[0] | string | `"ALL"` | |
|
||||
| securityContext.readOnlyRootFilesystem | bool | `true` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| serviceAccount.annotations | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| serviceAccount.name | string | `""` | |
|
||||
| softMultiTenancy.enabled | bool | `false` | |
|
||||
| telemetry.disabled | bool | `false` | |
|
||||
| telemetry.distributionChannel | string | `"helm"` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| tracing.config.ELASTIC_APM_SERVER_TIMEOUT | string | `"30s"` | |
|
||||
| tracing.config.ELASTIC_APM_SERVER_URL | string | `"http://localhost:8200"` | |
|
||||
| tracing.enabled | bool | `false` | |
|
||||
| volumeMounts | list | `[]` | |
|
||||
| volumes | list | `[]` | |
|
||||
| webhook.caBundle | string | `"Cg=="` | |
|
||||
| webhook.certManagerCert | string | `nil` | |
|
||||
| webhook.certsDir | string | `"/tmp/k8s-webhook-server/serving-certs"` | |
|
||||
| webhook.enabled | bool | `false` | |
|
||||
| webhook.failurePolicy | string | `"Ignore"` | |
|
||||
| webhook.manageCerts | bool | `true` | |
|
||||
| webhook.namespaceSelector | object | `{}` | |
|
||||
| webhook.objectSelector | object | `{}` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# eck-operator-crds
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for installing the ECK operator Custom Resource Definitions (CRD).
|
||||
|
||||
**Homepage:** <https://github.com/elastic/cloud-on-k8s>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Elastic | <eck@elastic.co> | |
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.21.0-0`
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| global.kubeVersion | string | `"1.21.0"` | |
|
||||
| global.manifestGen | bool | `false` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,72 @@
|
||||
# elasticsearch
|
||||
|
||||
 
|
||||
|
||||
Helm chart for elasticsearch
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `"arm64"` | |
|
||||
| authorizationPolicy[0] | string | `"3.218.116.78/32"` | |
|
||||
| authorizationPolicy[1] | string | `"54.210.53.15/32"` | |
|
||||
| authorizationPolicy[2] | string | `"54.85.189.247/32"` | |
|
||||
| authorizationPolicy[3] | string | `"35.238.34.205/32"` | |
|
||||
| authorizationPolicy[4] | string | `"3.0.173.192/32"` | |
|
||||
| authorizationPolicy[5] | string | `"3.7.225.24/32"` | |
|
||||
| authorizationPolicy[6] | string | `"34.72.32.244/32"` | |
|
||||
| cloudProvider | string | `"aws"` | |
|
||||
| customConfig."action.destructive_requires_name" | bool | `true` | |
|
||||
| customConfig."cluster.routing.allocation.allow_rebalance" | string | `"indices_primaries_active"` | |
|
||||
| customConfig."cluster.routing.allocation.cluster_concurrent_rebalance" | int | `10` | |
|
||||
| customConfig."indices.queries.cache.size" | int | `0` | |
|
||||
| customConfig."indices.query.bool.max_clause_count" | int | `2048` | |
|
||||
| customConfig."indices.recovery.max_bytes_per_sec" | string | `"200mb"` | |
|
||||
| customConfig."network.tcp.keep_alive" | bool | `true` | |
|
||||
| customConfig."network.tcp.keep_idle" | int | `300` | |
|
||||
| customConfig."thread_pool.write.queue_size" | int | `200` | |
|
||||
| customConfig."thread_pool.write.size" | int | `2` | |
|
||||
| customConfig."xpack.security.enabled" | bool | `false` | |
|
||||
| customConfig_master."network.tcp.keep_alive" | bool | `true` | |
|
||||
| customConfig_master."network.tcp.keep_idle" | int | `300` | |
|
||||
| customConfig_master."xpack.security.enabled" | bool | `false` | |
|
||||
| dataCpus | string | `"2"` | |
|
||||
| dataJavaOpts | string | `"-Xms1459m -Xmx1459m"` | |
|
||||
| dataMems | string | `"4Gi"` | |
|
||||
| dataStorageClass | string | `"aws-gp3-es1"` | |
|
||||
| dataStorageSize | string | `"20G"` | |
|
||||
| dataVNGName | string | `"ElasticSearchData.arm64"` | |
|
||||
| domain | string | `"etalon.reltio.com"` | |
|
||||
| enableAnonymousAccess | bool | `true` | |
|
||||
| envName | string | `"es"` | |
|
||||
| esClusterName | string | `"es"` | |
|
||||
| esDataNodePerZoneCount | string | `"1"` | |
|
||||
| esMasterNodePerZoneCount | string | `"1"` | |
|
||||
| esVersion | string | `"8.9.1"` | |
|
||||
| esZone1 | string | `"eu-west-1a"` | |
|
||||
| esZone2 | string | `"eu-west-1b"` | |
|
||||
| esZone3 | string | `"eu-west-1c"` | |
|
||||
| kibanaDomain | string | `"reltio.com"` | |
|
||||
| lb | string | `"ilb-eiqu01"` | |
|
||||
| livenessProbe.failureThreshold | int | `60` | |
|
||||
| masterCpus | string | `"2"` | |
|
||||
| masterJavaOpts | string | `"-Xms2g -Xmx2g"` | |
|
||||
| masterMems | string | `"4Gi"` | |
|
||||
| masterStorageClass | string | `"aws-gp3-es"` | |
|
||||
| masterStorageSize | string | `"20Gi"` | |
|
||||
| metrics.collector.batch.send_batch_max_size | int | `1024` | |
|
||||
| metrics.collector.batch.send_batch_size | int | `1024` | |
|
||||
| metrics.collector.enabled | bool | `true` | |
|
||||
| metrics.collector.es_api_endpoint | string | `""` | |
|
||||
| metrics.collector.image | string | `"gcr.io/customer-facing/otel/opentelemetry-collector-contrib:0.75.0"` | |
|
||||
| metrics.collector.interval | string | `"60s"` | |
|
||||
| metrics.collector.limits.cpu | string | `"1"` | |
|
||||
| metrics.collector.limits.memory | string | `"256Mi"` | |
|
||||
| metrics.collector.requests.cpu | string | `"200m"` | |
|
||||
| metrics.collector.requests.memory | string | `"128Mi"` | |
|
||||
| onDemand | bool | `true` | |
|
||||
| xpkNodeCount | string | `"1"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,133 @@
|
||||
# hazelcast
|
||||
|
||||
 
|
||||
|
||||
Helm chart for Hazelcast
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| MaxReplicas | int | `3` | |
|
||||
| MinReplicas | int | `3` | |
|
||||
| arch | string | `"arm64"` | |
|
||||
| cloud | string | `"aws"` | |
|
||||
| cpuLimit | string | `"2000m"` | |
|
||||
| cpuRequest | string | `"2000m"` | |
|
||||
| diagnostics.enabled | bool | `false` | |
|
||||
| diagnostics.values | string | `"-Dhazelcast.diagnostics.enabled=true -Dhazelcast.diagnostics.stdout=STDOUT -Dhazelcast.diagnostics.metrics.period.seconds=0 -Dhazelcast.diagnostics.operation-profiler.period.seconds=300 -Dhazelcast.diagnostics.invocation-profiler.period.seconds=300 -Dhazelcast.diagnostics.invocation.sample.period.seconds=300 -Dhazelcast.diagnostics.invocation.slow.threshold.seconds=5 -Dhazelcast.diagnostics.pending.invocations.period.seconds=300 -Dhazelcast.diagnostics.slowoperations.period.seconds=300 -Dhazelcast.diagnostics.storeLatency.period.seconds=300 -Dhazelcast.diagnostics.operation-heartbeat.seconds=0 -Dhazelcast.diagnostics.member-heartbeat.seconds=0 -Dhazelcast.health.monitoring.delay.seconds=60"` | |
|
||||
| domain | string | `"etalon.reltio.com"` | |
|
||||
| envName | string | `"hz"` | |
|
||||
| externalEndpoint | bool | `true` | |
|
||||
| gracefulShutdown.enabled | bool | `true` | |
|
||||
| gracefulShutdown.maxWaitSeconds | int | `600` | |
|
||||
| hazelcast.JavaHeapSize | string | `"-Xms12G -Xms12G"` | |
|
||||
| hazelcast.javaOpts | string | `"-Dhazelcast.initial.min.cluster.size=2 -Dhazelcast.merge.first.run.delay.seconds=5 -Dhazelcast.merge.next.run.delay.seconds=15 -Dhazelcast.mancenter.enabled=false -Dhazelcast.socket.connect.timeout.seconds=5 -Dhazelcast.client.cleanup.period.millis=5000 -Dhazelcast.client.cleanup.timeout.millis=60000 -Dhazelcast.client.max.no.heartbeat.seconds=60 -Dhazelcast.max.no.heartbeat.seconds=10 -Dhazelcast.operation.call.timeout.millis=20000 -Dhazelcast.heartbeat.interval.seconds=1"` | |
|
||||
| hazelcast.yaml.hazelcast.cluster-name | string | `"hz"` | |
|
||||
| hazelcast.yaml.hazelcast.cp-subsystem.semaphores.*-nonJDK.jdk-compatible | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.cp-subsystem.semaphores.*.jdk-compatible | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.map.default.merge-policy.batch-size | int | `1000` | |
|
||||
| hazelcast.yaml.hazelcast.map.default.merge-policy.class-name | string | `"com.hazelcast.spi.merge.DiscardMergePolicy"` | |
|
||||
| hazelcast.yaml.hazelcast.map.healthCheck.split-brain-protection-ref | string | `"splitBrainProtectionRule"` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.aws.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.azure.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.eureka.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.gcp.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.kubernetes.enabled | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.kubernetes.namespace | string | `"hz"` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.kubernetes.resolve-not-ready-addresses | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.kubernetes.service-name | string | `"hz"` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.multicast.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.tcp-ip.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.port.auto-increment | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.port.port | int | `5701` | |
|
||||
| hazelcast.yaml.hazelcast.network.port.port-count | int | `100` | |
|
||||
| hazelcast.yaml.hazelcast.network.rest-api.enabled | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.network.rest-api.endpoint-groups.CLUSTER_WRITE.enabled | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.network.rest-api.endpoint-groups.HEALTH_CHECK.enabled | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.enabled | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.minimum-cluster-size | int | `3` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.probabilistic-split-brain-protection.acceptable-heartbeat-pause-millis | int | `5000` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.probabilistic-split-brain-protection.max-sample-size | int | `500` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.probabilistic-split-brain-protection.suspicion-threshold | int | `10` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.protect-on | string | `"READ_WRITE"` | |
|
||||
| heapdumpEnabled | bool | `true` | |
|
||||
| hzClusterName | string | `"hz"` | |
|
||||
| imagePullPolicy | string | `"IfNotPresent"` | |
|
||||
| imageRepository | string | `"gcr.io/customer-facing/hz:RC-PRODUCTION-129468-20240905"` | |
|
||||
| jmx.enabled | bool | `true` | |
|
||||
| jmx.mapsToTrack | string | `"[\"api-test.DAO.p.OPERATION_COUNTER\", \"api-test.DAO.s.OPERATION_COUNTER\", \"api-test.DYNAMO_DB_LOCK\", \"dtss-test.DAO.p.OPERATION_COUNTER\", \"dtss-test.DAO.s.OPERATION_COUNTER\", \"export-test.DAO.p.OPERATION_COUNTER\", \"export-test.DAO.s.OPERATION_COUNTER\", \"api-test.generators\", \"api-test.TENANTS_COLUMN_FAMILY_LOCK\", \"api-test.healthCheck\", \"api-test.crud.EVENT_HUB_IMMEDIATE_STATS\", \"api-test.match.EVENT_HUB_IMMEDIATE_STATS\", \"api-test.ReltioMessagingResourcesSynchronizer\", \"api-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\", \"api-dev.DAO.p.OPERATION_COUNTER\", \"api-dev.DAO.s.OPERATION_COUNTER\", \"api-dev.DYNAMO_DB_LOCK\", \"dtss-dev.DAO.p.OPERATION_COUNTER\", \"dtss-dev.DAO.s.OPERATION_COUNTER\", \"export-dev.DAO.p.OPERATION_COUNTER\", \"export-dev.DAO.s.OPERATION_COUNTER\", \"api-dev.generators\", \"api-dev.TENANTS_COLUMN_FAMILY_LOCK\", \"api-dev.healthCheck\", \"api-dev.crud.EVENT_HUB_IMMEDIATE_STATS\", \"api-dev.match.EVENT_HUB_IMMEDIATE_STATS\", \"api-dev.ReltioMessagingResourcesSynchronizer\", \"api-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\", \"api-test.SystemKeyspaceTestAndromeda\", \"api-dev.SystemKeyspaceDev\", \"dtss-dev.DYNAMO_DB_LOCK\", \"dtss-test.DYNAMO_DB_LOCK\", \"export-dev.DYNAMO_DB_LOCK\", \"export-test.DYNAMO_DB_LOCK\", \"dtss-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\", \"dtss-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\", \"export-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\", \"export-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\"]"` | |
|
||||
| jmx.port | int | `1099` | |
|
||||
| livenessProbe.enabled | bool | `true` | |
|
||||
| livenessProbe.failureThreshold | int | `10` | |
|
||||
| livenessProbe.initialDelaySeconds | int | `5` | |
|
||||
| livenessProbe.path | string | `"/hazelcast/health/node-state"` | |
|
||||
| livenessProbe.periodSeconds | int | `10` | |
|
||||
| livenessProbe.successThreshold | int | `1` | |
|
||||
| livenessProbe.timeoutSeconds | int | `10` | |
|
||||
| maxSurge | int | `1` | |
|
||||
| maxUnavailable | int | `1` | |
|
||||
| memoryLimit | string | `"6Gi"` | |
|
||||
| memoryRequest | string | `"6Gi"` | |
|
||||
| metrics.enabled | bool | `false` | |
|
||||
| onDemand | bool | `false` | |
|
||||
| otel.enabled | bool | `true` | |
|
||||
| otel.mapsToTrack[0] | string | `"api-test.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[10] | string | `"api-test.crud.EVENT_HUB_IMMEDIATE_STATS"` | |
|
||||
| otel.mapsToTrack[11] | string | `"api-test.match.EVENT_HUB_IMMEDIATE_STATS"` | |
|
||||
| otel.mapsToTrack[12] | string | `"api-test.ReltioMessagingResourcesSynchronizer"` | |
|
||||
| otel.mapsToTrack[13] | string | `"api-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[14] | string | `"api-dev.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[15] | string | `"api-dev.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[16] | string | `"api-dev.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[17] | string | `"dtss-dev.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[18] | string | `"dtss-dev.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[19] | string | `"export-dev.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[1] | string | `"api-test.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[20] | string | `"export-dev.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[21] | string | `"api-dev.generators"` | |
|
||||
| otel.mapsToTrack[22] | string | `"api-dev.TENANTS_COLUMN_FAMILY_LOCK"` | |
|
||||
| otel.mapsToTrack[23] | string | `"api-dev.healthCheck"` | |
|
||||
| otel.mapsToTrack[24] | string | `"api-dev.crud.EVENT_HUB_IMMEDIATE_STATS"` | |
|
||||
| otel.mapsToTrack[25] | string | `"api-dev.match.EVENT_HUB_IMMEDIATE_STATS"` | |
|
||||
| otel.mapsToTrack[26] | string | `"api-dev.ReltioMessagingResourcesSynchronizer"` | |
|
||||
| otel.mapsToTrack[27] | string | `"api-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[28] | string | `"api-test.SystemKeyspaceTestAndromeda"` | |
|
||||
| otel.mapsToTrack[29] | string | `"api-dev.SystemKeyspaceDev"` | |
|
||||
| otel.mapsToTrack[2] | string | `"api-test.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[30] | string | `"dtss-dev.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[31] | string | `"dtss-test.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[32] | string | `"export-dev.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[33] | string | `"export-test.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[34] | string | `"dtss-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[35] | string | `"dtss-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[36] | string | `"export-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[37] | string | `"export-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[3] | string | `"dtss-test.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[4] | string | `"dtss-test.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[5] | string | `"export-test.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[6] | string | `"export-test.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[7] | string | `"api-test.generators"` | |
|
||||
| otel.mapsToTrack[8] | string | `"api-test.TENANTS_COLUMN_FAMILY_LOCK"` | |
|
||||
| otel.mapsToTrack[9] | string | `"api-test.healthCheck"` | |
|
||||
| rbac.create | bool | `true` | |
|
||||
| readinessProbe.enabled | bool | `true` | |
|
||||
| readinessProbe.failureThreshold | int | `10` | |
|
||||
| readinessProbe.initialDelaySeconds | int | `5` | |
|
||||
| readinessProbe.path | string | `"/hazelcast/health/ready"` | |
|
||||
| readinessProbe.periodSeconds | int | `10` | |
|
||||
| readinessProbe.successThreshold | int | `1` | |
|
||||
| readinessProbe.timeoutSeconds | int | `10` | |
|
||||
| regcred | string | `"gcrregcred"` | |
|
||||
| securityContext.enabled | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `100` | |
|
||||
| service.annotations."service.beta.kubernetes.io/aws-load-balancer-internal" | string | `"true"` | |
|
||||
| service.annotations."service.beta.kubernetes.io/aws-load-balancer-type" | string | `"nlb"` | |
|
||||
| service.create | bool | `true` | |
|
||||
| service.port | int | `5701` | |
|
||||
| service.type | string | `"LoadBalancer"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| targetCPUUtilizationPercentage | int | `30` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,75 @@
|
||||
# cassandra
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| cassandra.cassandra.containerSecurityContext.capabilities.add[0] | string | `"IPC_LOCK"` | |
|
||||
| cassandra.cassandra.env.cassandraClusterName | string | `"K8Demo"` | |
|
||||
| cassandra.cassandra.env.cassandraDc | string | `"DC1-K8Demo"` | |
|
||||
| cassandra.cassandra.env.cassandraRack | string | `"Rack1-K8Demo"` | |
|
||||
| cassandra.cassandra.env.cassandraSeeds | string | `"cassandra-server-0.cassandra-svc.cassandra.svc.cluster.local"` | |
|
||||
| cassandra.cassandra.env.heapNewsize | string | `"100M"` | |
|
||||
| cassandra.cassandra.env.maxHeapSize | string | `"512M"` | |
|
||||
| cassandra.cassandra.image.repository | string | `"europe-west2-docker.pkg.dev/artifacts-management-441415/reltio-apps/cassandra"` | |
|
||||
| cassandra.cassandra.image.tag | string | `"v0.1"` | |
|
||||
| cassandra.cassandra.imagePullPolicy | string | `"Always"` | |
|
||||
| cassandra.cassandra.resources.limits.cpu | string | `"500m"` | |
|
||||
| cassandra.cassandra.resources.limits.memory | string | `"1Gi"` | |
|
||||
| cassandra.cassandra.resources.requests.cpu | string | `"500m"` | |
|
||||
| cassandra.cassandra.resources.requests.memory | string | `"1Gi"` | |
|
||||
| cassandra.ports[0].name | string | `"cql"` | |
|
||||
| cassandra.ports[0].port | int | `9042` | |
|
||||
| cassandra.ports[0].targetPort | int | `0` | |
|
||||
| cassandra.ports[1].name | string | `"intra-node"` | |
|
||||
| cassandra.ports[1].port | int | `7000` | |
|
||||
| cassandra.ports[1].targetPort | int | `0` | |
|
||||
| cassandra.ports[2].name | string | `"tls-intra-node"` | |
|
||||
| cassandra.ports[2].port | int | `7001` | |
|
||||
| cassandra.ports[2].targetPort | int | `0` | |
|
||||
| cassandra.ports[3].name | string | `"thrift"` | |
|
||||
| cassandra.ports[3].port | int | `9160` | |
|
||||
| cassandra.ports[3].protocol | string | `"TCP"` | |
|
||||
| cassandra.ports[3].targetPort | int | `9160` | |
|
||||
| cassandra.replicas | int | `3` | |
|
||||
| cassandra.tls.secretName | string | `"service/state-cluster/cassandra-tls"` | |
|
||||
| cassandra.tls.secretStoreName | string | `"vault-secretstore"` | |
|
||||
| cassandra.type | string | `"ClusterIP"` | |
|
||||
| cassandra.volumeClaims.cassandraData.requests.storage | string | `"5Gi"` | |
|
||||
| ext.ports[0].name | string | `"cql"` | |
|
||||
| ext.ports[0].port | int | `9042` | |
|
||||
| ext.ports[0].protocol | string | `"TCP"` | |
|
||||
| ext.ports[0].targetPort | int | `9042` | |
|
||||
| ext.ports[1].name | string | `"intra-node"` | |
|
||||
| ext.ports[1].port | int | `7000` | |
|
||||
| ext.ports[1].protocol | string | `"TCP"` | |
|
||||
| ext.ports[1].targetPort | int | `7000` | |
|
||||
| ext.ports[2].name | string | `"tls-intra-node"` | |
|
||||
| ext.ports[2].port | int | `7001` | |
|
||||
| ext.ports[2].protocol | string | `"TCP"` | |
|
||||
| ext.ports[2].targetPort | int | `7001` | |
|
||||
| ext.ports[3].name | string | `"jmx"` | |
|
||||
| ext.ports[3].port | int | `7199` | |
|
||||
| ext.ports[3].protocol | string | `"TCP"` | |
|
||||
| ext.ports[3].targetPort | int | `7199` | |
|
||||
| ext.ports[4].name | string | `"thrift"` | |
|
||||
| ext.ports[4].port | int | `9160` | |
|
||||
| ext.ports[4].protocol | string | `"TCP"` | |
|
||||
| ext.ports[4].targetPort | int | `9160` | |
|
||||
| ext.type | string | `"LoadBalancer"` | |
|
||||
| kubernetesClusterDomain | string | `"cluster.local"` | |
|
||||
| nodeSelector."kubernetes.io/arch" | string | `"amd64"` | |
|
||||
| tolerations[0].effect | string | `"NoSchedule"` | |
|
||||
| tolerations[0].key | string | `"dedicated"` | |
|
||||
| tolerations[0].operator | string | `"Equal"` | |
|
||||
| tolerations[0].value | string | `"amd"` | |
|
||||
| wif.gcpProjectNumber | string | `"414526292625"` | |
|
||||
| wif.wiPoolName | string | `"eks-workload-pool"` | |
|
||||
| wif.wiProviderName | string | `"state-cluster-mohsin"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,20 @@
|
||||
# elasticsearch
|
||||
|
||||
  
|
||||
|
||||
A Helm chart to install Elasticsearch
|
||||
|
||||
## Requirements
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://charts.bitnami.com/bitnami | elasticsearch | 21.3.26 |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| global.kibanaEnabled | bool | `false` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,33 @@
|
||||
# hazelcast
|
||||
|
||||
  
|
||||
|
||||
A Helm chart to install Hazelcast
|
||||
|
||||
## Requirements
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://hazelcast-charts.s3.amazonaws.com | hazelcast | 5.10.1 |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| hazelcast.hazelcast.enterprise | bool | `false` | |
|
||||
| hazelcast.hazelcast.licenseKey | string | `""` | |
|
||||
| hazelcast.hazelcast.yaml.hazelcast.cluster-name | string | `"hazelcast"` | |
|
||||
| hazelcast.hazelcast.yaml.hazelcast.jet.enabled | bool | `true` | |
|
||||
| hazelcast.hazelcast.yaml.hazelcast.network.join.kubernetes.enabled | bool | `true` | |
|
||||
| hazelcast.hazelcast.yaml.hazelcast.network.join.kubernetes.namespace | string | `"hazelcast"` | |
|
||||
| hazelcast.hazelcast.yaml.hazelcast.network.join.kubernetes.service-name | string | `"hazelcast"` | |
|
||||
| hazelcast.hazelcast.yaml.hazelcast.network.rest-api.enabled | bool | `true` | |
|
||||
| hazelcast.mancenter.enabled | bool | `false` | |
|
||||
| hazelcast.service.annotations."service.beta.kubernetes.io/aws-load-balancer-internal" | string | `"true"` | |
|
||||
| hazelcast.service.annotations."service.beta.kubernetes.io/aws-load-balancer-type" | string | `"nlb"` | |
|
||||
| hazelcast.service.port | int | `5701` | |
|
||||
| hazelcast.service.type | string | `"LoadBalancer"` | |
|
||||
| metrics.enabled | bool | `false` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,102 @@
|
||||
# ai-app
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for managing Kubernetes AI Apps Deployments
|
||||
|
||||
**Homepage:** <https://www.reltio.com/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Reltio | <sai.krishna@reltio.com> | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `"both"` | |
|
||||
| baseRegistryURL | string | `"gcr.io/customer-facing"` | |
|
||||
| cloudProvider | string | `"aws"` | |
|
||||
| clusterDomain | string | `"cluster.local"` | |
|
||||
| clusterName | string | `""` | |
|
||||
| commonAnnotations | object | `{}` | |
|
||||
| commonJobLabels."reltio.app/type" | string | `"rdm-batch-job"` | |
|
||||
| commonLabels."reltio.app/type" | string | `"rdm-app"` | |
|
||||
| commonPodLabels | object | `{}` | |
|
||||
| commonservicesValues | object | `{}` | |
|
||||
| domain | string | `"cloud.reltio.com"` | |
|
||||
| efsClaimHeapDumps | string | `""` | |
|
||||
| enableRdmAppServices | list | `[]` | |
|
||||
| environmentType | string | `"production"` | |
|
||||
| etalonsubDomain | string | `"etalon"` | |
|
||||
| gcrregcred.name | string | `"gcrregcred"` | |
|
||||
| gcrregcred.refreshInterval | string | `"15s"` | |
|
||||
| gcrregcred.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| gcrregcred.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| gcrregcred.target.type | string | `"kubernetes.io/dockerconfigjson"` | |
|
||||
| global.argoStrategy | string | `"bluegreen"` | |
|
||||
| global.haEnabled | bool | `false` | |
|
||||
| global.horizontalPodScaling.hpaEnabled | bool | `true` | |
|
||||
| global.horizontalPodScaling.hpaMaxReplicas | int | `5` | |
|
||||
| global.horizontalPodScaling.hpaScaleUpFreq | int | `45` | |
|
||||
| global.horizontalPodScaling.scalingDownWindowSeconds | int | `300` | |
|
||||
| global.horizontalPodScaling.scalingUpWindowSeconds | int | `20` | |
|
||||
| global.image.enabled | bool | `false` | |
|
||||
| global.image.tag | string | `"1.0.0"` | |
|
||||
| global.nfsMount.enabled | bool | `true` | |
|
||||
| global.nfsMount.storageClass.name | string | `""` | |
|
||||
| global.pdb.enabled | bool | `false` | |
|
||||
| global.pdb.minAvailable | int | `1` | |
|
||||
| global.refreshInterval | string | `"15s"` | |
|
||||
| global.releaseChar | string | `"b"` | |
|
||||
| global.replicas | int | `1` | |
|
||||
| global.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| global.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| global.target.type | string | `"Opaque"` | |
|
||||
| global.topologySpreadConstraints[0].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[0].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[0].topologyKey | string | `"kubernetes.io/hostname"` | |
|
||||
| global.topologySpreadConstraints[0].whenUnsatisfiable | string | `"ScheduleAnyway"` | |
|
||||
| global.topologySpreadConstraints[1].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[1].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[1].topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| global.topologySpreadConstraints[1].whenUnsatisfiable | string | `"DoNotSchedule"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxSurge | string | `"65%"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxUnavailable | string | `"35%"` | |
|
||||
| global.upgradeStrategy.type | string | `"RollingUpdate"` | |
|
||||
| global.vault.vaultSecretRefName | string | `"service/data/vaultsecret-internal"` | |
|
||||
| global.vaultSecretRefName | string | `"vault-secret"` | |
|
||||
| helmTimeout | int | `600` | |
|
||||
| hooks.statusCheck.credentialsSecretRefName | string | `"status-check-credentials"` | |
|
||||
| hooks.statusCheck.enabled | bool | `false` | |
|
||||
| hooks.statusCheck.oauthTokenPersistentVolumeClaimRefName | string | `"status-check-oauth-token"` | |
|
||||
| hooks.statusCheck.slackWebhook | string | `""` | |
|
||||
| imagePullPolicy | string | `"IfNotPresent"` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| ingress.className | string | `""` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hostname | string | `"prod.reltio.local"` | |
|
||||
| ingress.port | int | `80` | |
|
||||
| ingress.protocol | string | `"http"` | |
|
||||
| jobAnnotations."cluster-autoscaler.kubernetes.io/safe-to-evict" | string | `"false"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| persistent.aws.efsID | string | `""` | |
|
||||
| persistent.aws.storageClass | string | `"efs-pv"` | |
|
||||
| persistent.efsEnabled | bool | `false` | |
|
||||
| persistent.rdmAppStorage | string | `"25Gi"` | |
|
||||
| region | string | `""` | |
|
||||
| reltioDomains | string | `".reltio.com,.reltiocn.cn"` | |
|
||||
| rootDomain | string | `"reltio.com"` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `10000` | |
|
||||
| serviceMesh.enabled | bool | `false` | |
|
||||
| serviceMesh.name | string | `""` | |
|
||||
| spotinstPercent | string | `"100"` | |
|
||||
| terminationGracePeriodSeconds | int | `600` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| vaultEnv | string | `"customers"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,49 @@
|
||||
# argocd-apps
|
||||
|
||||
  
|
||||
|
||||
Helm template for a ArgoCD templates for spoke cluster
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| accountID | string | `"123456789010"` | |
|
||||
| addonAppName | string | `"change-me"` | |
|
||||
| apps[0] | string | `"mdm-app"` | |
|
||||
| apps[1] | string | `"rdm-app"` | |
|
||||
| apps[2] | string | `"shared-app"` | |
|
||||
| apps[3] | string | `"auth-app"` | |
|
||||
| apps[4] | string | `"loqate-app"` | |
|
||||
| azureExternalDnsClientId | string | `""` | |
|
||||
| certManagerVersion | string | `"v1.16.0"` | |
|
||||
| cloud | string | `"aws"` | |
|
||||
| clusterName | string | `"change-me"` | |
|
||||
| env | string | `"production"` | |
|
||||
| esoEnabled | bool | `true` | |
|
||||
| gcpProjectID | string | `"change-me"` | |
|
||||
| git.addonBaseDirPath | string | `"apps-provider/addons/charts"` | |
|
||||
| git.appBasePath | string | `"cloud.reltio.com"` | |
|
||||
| git.appCommonBranch | string | `"main"` | |
|
||||
| git.appCommonUrl | string | `"git@bitbucket.org:reltio-ondemand/app-common.git"` | |
|
||||
| git.appRuntimeBranch | string | `"main"` | |
|
||||
| git.appRuntimeUrl | string | `"git@bitbucket.org:reltio-ondemand/app-runtime.git"` | |
|
||||
| git.appmdmAppPath | string | `"mdm-app"` | |
|
||||
| git.apprdmAppPath | string | `"rdm-app"` | |
|
||||
| git.computeRuntimeBranch | string | `"main"` | |
|
||||
| git.computeRuntimeUrl | string | `"git@bitbucket.org:reltio-ondemand/compute-runtime.git"` | |
|
||||
| helm.appCommonHelmUrl | string | `"europe-west2-docker.pkg.dev/artifacts-management-441415/app-common"` | |
|
||||
| helm.mdmChart | string | `"mdm-app"` | |
|
||||
| helm.rdmChart | string | `"rdm-app"` | |
|
||||
| mdmAppName | string | `"change-me"` | |
|
||||
| namespace | string | `"argocd"` | |
|
||||
| networkAccountID | string | `"968814677163"` | |
|
||||
| rdmAppName | string | `"change-me"` | |
|
||||
| region | string | `"us-east-1"` | |
|
||||
| stateAppName | string | `"change-me"` | |
|
||||
| vault.roleId | string | `"change-me"` | |
|
||||
| vault.secretId | string | `"change-me"` | |
|
||||
| vault.server | string | `"change-me"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,103 @@
|
||||
# auth-app
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for managing Kubernetes Auth Apps Deployments
|
||||
|
||||
**Homepage:** <https://www.reltio.com/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Reltio | <sai.krishna@reltio.com> | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `"both"` | |
|
||||
| authAppServices | object | `{}` | |
|
||||
| baseRegistryURL | string | `"gcr.io/customer-facing"` | |
|
||||
| cloudProvider | string | `"aws"` | |
|
||||
| clusterDomain | string | `"cluster.local"` | |
|
||||
| clusterName | string | `""` | |
|
||||
| commonAnnotations | object | `{}` | |
|
||||
| commonJobLabels."reltio.app/type" | string | `"auth-batch-job"` | |
|
||||
| commonLabels."reltio.app/type" | string | `"auth-app"` | |
|
||||
| commonPodLabels | object | `{}` | |
|
||||
| commonservicesValues | object | `{}` | |
|
||||
| domain | string | `"cloud.reltio.com"` | |
|
||||
| efsClaimHeapDumps | string | `""` | |
|
||||
| enableAuthAppServices | list | `[]` | |
|
||||
| environmentType | string | `"production"` | |
|
||||
| etalonsubDomain | string | `"etalon"` | |
|
||||
| gcrregcred.name | string | `"gcrregcred"` | |
|
||||
| gcrregcred.refreshInterval | string | `"15s"` | |
|
||||
| gcrregcred.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| gcrregcred.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| gcrregcred.target.type | string | `"kubernetes.io/dockerconfigjson"` | |
|
||||
| global.argoStrategy | string | `"bluegreen"` | |
|
||||
| global.haEnabled | bool | `false` | |
|
||||
| global.horizontalPodScaling.hpaEnabled | bool | `true` | |
|
||||
| global.horizontalPodScaling.hpaMaxReplicas | int | `5` | |
|
||||
| global.horizontalPodScaling.hpaScaleUpFreq | int | `45` | |
|
||||
| global.horizontalPodScaling.scalingDownWindowSeconds | int | `300` | |
|
||||
| global.horizontalPodScaling.scalingUpWindowSeconds | int | `20` | |
|
||||
| global.image.enabled | bool | `false` | |
|
||||
| global.image.tag | string | `"1.0.0"` | |
|
||||
| global.nfsMount.enabled | bool | `false` | |
|
||||
| global.nfsMount.storageClass.name | string | `""` | |
|
||||
| global.pdb.enabled | bool | `false` | |
|
||||
| global.pdb.minAvailable | int | `1` | |
|
||||
| global.refreshInterval | string | `"15s"` | |
|
||||
| global.releaseChar | string | `"b"` | |
|
||||
| global.replicas | int | `1` | |
|
||||
| global.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| global.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| global.target.type | string | `"Opaque"` | |
|
||||
| global.topologySpreadConstraints[0].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[0].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[0].topologyKey | string | `"kubernetes.io/hostname"` | |
|
||||
| global.topologySpreadConstraints[0].whenUnsatisfiable | string | `"ScheduleAnyway"` | |
|
||||
| global.topologySpreadConstraints[1].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[1].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[1].topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| global.topologySpreadConstraints[1].whenUnsatisfiable | string | `"DoNotSchedule"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxSurge | string | `"65%"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxUnavailable | string | `"35%"` | |
|
||||
| global.upgradeStrategy.type | string | `"RollingUpdate"` | |
|
||||
| global.vault.vaultSecretRefName | string | `"service/data/vaultsecret-internal"` | |
|
||||
| global.vaultSecretRefName | string | `"vault-secret"` | |
|
||||
| helmTimeout | int | `600` | |
|
||||
| hooks.statusCheck.credentialsSecretRefName | string | `"status-check-credentials"` | |
|
||||
| hooks.statusCheck.enabled | bool | `false` | |
|
||||
| hooks.statusCheck.oauthTokenPersistentVolumeClaimRefName | string | `"status-check-oauth-token"` | |
|
||||
| hooks.statusCheck.slackWebhook | string | `""` | |
|
||||
| imagePullPolicy | string | `"IfNotPresent"` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| ingress.className | string | `""` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hostname | string | `"prod.reltio.local"` | |
|
||||
| ingress.port | int | `80` | |
|
||||
| ingress.protocol | string | `"http"` | |
|
||||
| jobAnnotations."cluster-autoscaler.kubernetes.io/safe-to-evict" | string | `"false"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| persistent.authAppStorage | string | `"25Gi"` | |
|
||||
| persistent.aws.efsID | string | `""` | |
|
||||
| persistent.aws.storageClass | string | `"efs-pv"` | |
|
||||
| persistent.efsEnabled | bool | `false` | |
|
||||
| region | string | `""` | |
|
||||
| reltioDomains | string | `".reltio.com,.reltiocn.cn"` | |
|
||||
| rootDomain | string | `"reltio.com"` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `10000` | |
|
||||
| serviceMesh.enabled | bool | `false` | |
|
||||
| serviceMesh.name | string | `""` | |
|
||||
| spotinstPercent | string | `"100"` | |
|
||||
| terminationGracePeriodSeconds | int | `600` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| vaultEnv | string | `"customers"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,41 @@
|
||||
# aws-load-balancer-controller
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for AWS Load Balancer Controller
|
||||
|
||||
## Requirements
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://aws.github.io/eks-charts | aws-load-balancer-controller | 1.13.3 |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| aws-load-balancer-controller.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].key | string | `"app.kubernetes.io/name"` | |
|
||||
| aws-load-balancer-controller.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].operator | string | `"In"` | |
|
||||
| aws-load-balancer-controller.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].values[0] | string | `"aws-load-balancer-controller"` | |
|
||||
| aws-load-balancer-controller.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| aws-load-balancer-controller.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].weight | int | `100` | |
|
||||
| aws-load-balancer-controller.clusterName | string | `""` | |
|
||||
| aws-load-balancer-controller.enableShield | bool | `true` | |
|
||||
| aws-load-balancer-controller.enableWaf | bool | `true` | |
|
||||
| aws-load-balancer-controller.enableWafv2 | bool | `true` | |
|
||||
| aws-load-balancer-controller.logLevel | string | `"info"` | |
|
||||
| aws-load-balancer-controller.podDisruptionBudget.maxUnavailable | int | `1` | |
|
||||
| aws-load-balancer-controller.region | string | `""` | |
|
||||
| aws-load-balancer-controller.replicaCount | int | `2` | |
|
||||
| aws-load-balancer-controller.resources.limits.cpu | string | `"200m"` | |
|
||||
| aws-load-balancer-controller.resources.limits.memory | string | `"500Mi"` | |
|
||||
| aws-load-balancer-controller.resources.requests.cpu | string | `"100m"` | |
|
||||
| aws-load-balancer-controller.resources.requests.memory | string | `"200Mi"` | |
|
||||
| aws-load-balancer-controller.serviceAccount.annotations."eks.amazonaws.com/role-arn" | string | `""` | |
|
||||
| aws-load-balancer-controller.serviceAccount.create | bool | `true` | |
|
||||
| aws-load-balancer-controller.serviceAccount.name | string | `"aws-load-balancer-controller"` | |
|
||||
| clusterName | string | `""` | |
|
||||
| region | string | `""` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,102 @@
|
||||
# cleanse-app
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for managing Kubernetes Cleanse Apps Deployments
|
||||
|
||||
**Homepage:** <https://www.reltio.com/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Reltio | <sai.krishna@reltio.com> | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `"both"` | |
|
||||
| baseRegistryURL | string | `"gcr.io/customer-facing"` | |
|
||||
| cloudProvider | string | `"aws"` | |
|
||||
| clusterDomain | string | `"cluster.local"` | |
|
||||
| clusterName | string | `""` | |
|
||||
| commonAnnotations | object | `{}` | |
|
||||
| commonJobLabels."reltio.app/type" | string | `"rdm-batch-job"` | |
|
||||
| commonLabels."reltio.app/type" | string | `"rdm-app"` | |
|
||||
| commonPodLabels | object | `{}` | |
|
||||
| commonservicesValues | object | `{}` | |
|
||||
| domain | string | `"cloud.reltio.com"` | |
|
||||
| efsClaimHeapDumps | string | `""` | |
|
||||
| enableRdmAppServices | list | `[]` | |
|
||||
| environmentType | string | `"production"` | |
|
||||
| etalonsubDomain | string | `"etalon"` | |
|
||||
| gcrregcred.name | string | `"gcrregcred"` | |
|
||||
| gcrregcred.refreshInterval | string | `"15s"` | |
|
||||
| gcrregcred.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| gcrregcred.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| gcrregcred.target.type | string | `"kubernetes.io/dockerconfigjson"` | |
|
||||
| global.argoStrategy | string | `"bluegreen"` | |
|
||||
| global.haEnabled | bool | `false` | |
|
||||
| global.horizontalPodScaling.hpaEnabled | bool | `true` | |
|
||||
| global.horizontalPodScaling.hpaMaxReplicas | int | `5` | |
|
||||
| global.horizontalPodScaling.hpaScaleUpFreq | int | `45` | |
|
||||
| global.horizontalPodScaling.scalingDownWindowSeconds | int | `300` | |
|
||||
| global.horizontalPodScaling.scalingUpWindowSeconds | int | `20` | |
|
||||
| global.image.enabled | bool | `false` | |
|
||||
| global.image.tag | string | `"1.0.0"` | |
|
||||
| global.nfsMount.enabled | bool | `true` | |
|
||||
| global.nfsMount.storageClass.name | string | `""` | |
|
||||
| global.pdb.enabled | bool | `false` | |
|
||||
| global.pdb.minAvailable | int | `1` | |
|
||||
| global.refreshInterval | string | `"15s"` | |
|
||||
| global.releaseChar | string | `"b"` | |
|
||||
| global.replicas | int | `1` | |
|
||||
| global.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| global.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| global.target.type | string | `"Opaque"` | |
|
||||
| global.topologySpreadConstraints[0].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[0].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[0].topologyKey | string | `"kubernetes.io/hostname"` | |
|
||||
| global.topologySpreadConstraints[0].whenUnsatisfiable | string | `"ScheduleAnyway"` | |
|
||||
| global.topologySpreadConstraints[1].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[1].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[1].topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| global.topologySpreadConstraints[1].whenUnsatisfiable | string | `"DoNotSchedule"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxSurge | string | `"65%"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxUnavailable | string | `"35%"` | |
|
||||
| global.upgradeStrategy.type | string | `"RollingUpdate"` | |
|
||||
| global.vault.vaultSecretRefName | string | `"service/data/vaultsecret-internal"` | |
|
||||
| global.vaultSecretRefName | string | `"vault-secret"` | |
|
||||
| helmTimeout | int | `600` | |
|
||||
| hooks.statusCheck.credentialsSecretRefName | string | `"status-check-credentials"` | |
|
||||
| hooks.statusCheck.enabled | bool | `false` | |
|
||||
| hooks.statusCheck.oauthTokenPersistentVolumeClaimRefName | string | `"status-check-oauth-token"` | |
|
||||
| hooks.statusCheck.slackWebhook | string | `""` | |
|
||||
| imagePullPolicy | string | `"IfNotPresent"` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| ingress.className | string | `""` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hostname | string | `"prod.reltio.local"` | |
|
||||
| ingress.port | int | `80` | |
|
||||
| ingress.protocol | string | `"http"` | |
|
||||
| jobAnnotations."cluster-autoscaler.kubernetes.io/safe-to-evict" | string | `"false"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| persistent.aws.efsID | string | `""` | |
|
||||
| persistent.aws.storageClass | string | `"efs-pv"` | |
|
||||
| persistent.efsEnabled | bool | `false` | |
|
||||
| persistent.rdmAppStorage | string | `"25Gi"` | |
|
||||
| region | string | `""` | |
|
||||
| reltioDomains | string | `".reltio.com,.reltiocn.cn"` | |
|
||||
| rootDomain | string | `"reltio.com"` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `10000` | |
|
||||
| serviceMesh.enabled | bool | `false` | |
|
||||
| serviceMesh.name | string | `""` | |
|
||||
| spotinstPercent | string | `"100"` | |
|
||||
| terminationGracePeriodSeconds | int | `600` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| vaultEnv | string | `"customers"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,107 @@
|
||||
# cluster
|
||||
|
||||
  
|
||||
|
||||
Helm3 chart for all cluster level deployments
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `""` | |
|
||||
| azure.externalDNS.identity.clientId | string | `"092cb146-679d-42ea-ace2-6e8d86bf4695"` | |
|
||||
| azure.externalDNS.identity.id | string | `"/subscriptions/7fb0ee54-d55a-468b-94f2-c1f2fda0a4d3/resourceGroups/reltio-aks-iqa-us-01-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/reltio-aks-iqa-us-01-extdns-msi"` | |
|
||||
| azure.nfsShare.shareName | string | `"sts-aks-iqa-us-01-nfs-share-ptatp"` | |
|
||||
| azure.nfsShare.storageAccount | string | `"staksiqaus01crkwp"` | |
|
||||
| azure.resourceGroup | string | `"reltio-aks-iqa-us-01-rg"` | |
|
||||
| azure.subscriptionId | string | `"7fb0ee54-d55a-468b-94f2-c1f2fda0a4d3"` | |
|
||||
| azure.tenantId | string | `"ec5dd7b3-0e80-414c-ba2a-6495e1f57384"` | |
|
||||
| azureOcean2 | bool | `false` | |
|
||||
| cloud | string | `""` | |
|
||||
| clusterCustomerFacing | bool | `false` | |
|
||||
| clusterHipaa | bool | `false` | |
|
||||
| clusterInternal | bool | `false` | |
|
||||
| clusterName | string | `"change-me"` | |
|
||||
| customOktaGroup.enabled | bool | `false` | |
|
||||
| customOktaGroup.name | string | `""` | |
|
||||
| customOktaGroup.roleTemplate | string | `""` | |
|
||||
| deployDNSAutomation | bool | `false` | |
|
||||
| deployDNSAutomationRegion_AWS | string | `"us-east-1"` | |
|
||||
| deployElasticCRD | bool | `false` | |
|
||||
| deployIstio | bool | `false` | |
|
||||
| deployIstioLogging | bool | `false` | |
|
||||
| deployIstioTLS | bool | `false` | |
|
||||
| deployLogdna | bool | `true` | |
|
||||
| deployMetricsServer | bool | `false` | |
|
||||
| deployPrisma | bool | `false` | |
|
||||
| deploySentinelOne | bool | `false` | |
|
||||
| deployWiz | bool | `true` | |
|
||||
| efsEnabled | bool | `false` | |
|
||||
| efsid | string | `""` | |
|
||||
| istioNamespace | string | `"helm-istio-system"` | |
|
||||
| istioSystemDNS | bool | `false` | |
|
||||
| istioVersion | string | `"1.4.4"` | |
|
||||
| logdnaExternalSecret.data[0].remoteRef.key | string | `"service/data/logdna"` | |
|
||||
| logdnaExternalSecret.data[0].remoteRef.property | string | `"logdna-agent-key"` | |
|
||||
| logdnaExternalSecret.data[0].secretKey | string | `"logdna-agent-key"` | |
|
||||
| logdnaExternalSecret.name | string | `"logdna-agent-key"` | |
|
||||
| logdnaExternalSecret.namespace | string | `"logdna"` | |
|
||||
| logdnaExternalSecret.refreshInterval | string | `"15s"` | |
|
||||
| logdnaExternalSecret.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| logdnaExternalSecret.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| logdnaExternalSecret.target.name | string | `"logdna-agent-key"` | |
|
||||
| logdnaRegistry | string | `"gcr.io/customer-facing/logdna/logdna-agent"` | |
|
||||
| logdnaTagVersion | float | `3.9` | |
|
||||
| logdnaTolerations | list | `[]` | |
|
||||
| metricsServerRegistry | string | `""` | |
|
||||
| metricsServerVersion | string | `""` | |
|
||||
| prismaWSAddress | string | `"wss://cn-northwest-1.cloud.twistlock.com:443"` | |
|
||||
| privateHostedZone | string | `"apou04"` | |
|
||||
| publicHostedZone | string | `"apou04-dev"` | |
|
||||
| rootDomain | string | `"reltio.com"` | |
|
||||
| s1Helper.name | string | `"s1-helper"` | |
|
||||
| s1Helper.namespace | string | `"sentinelone"` | |
|
||||
| s1Helper.refreshInterval | string | `"15s"` | |
|
||||
| s1Helper.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| s1Helper.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| s1Helper.target.name | string | `"s1-helper"` | |
|
||||
| s1agentExternalSecret.data[0].remoteRef.key | string | `"service/data/s1-agent"` | |
|
||||
| s1agentExternalSecret.data[0].remoteRef.property | string | `"site_key"` | |
|
||||
| s1agentExternalSecret.data[0].secretKey | string | `"site_key"` | |
|
||||
| s1agentExternalSecret.name | string | `"s1-agent"` | |
|
||||
| s1agentExternalSecret.namespace | string | `"sentinelone"` | |
|
||||
| s1agentExternalSecret.refreshInterval | string | `"15s"` | |
|
||||
| s1agentExternalSecret.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| s1agentExternalSecret.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| s1agentExternalSecret.target.name | string | `"s1-agent"` | |
|
||||
| s1helperExternalSecret.data[0].remoteRef.key | string | `"service/data/s1-helper"` | |
|
||||
| s1helperExternalSecret.data[0].remoteRef.property | string | `"server_token"` | |
|
||||
| s1helperExternalSecret.data[0].secretKey | string | `"server_token"` | |
|
||||
| s1helperExternalSecret.name | string | `"s1-helper-token"` | |
|
||||
| s1helperExternalSecret.namespace | string | `"sentinelone"` | |
|
||||
| s1helperExternalSecret.refreshInterval | string | `"15s"` | |
|
||||
| s1helperExternalSecret.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| s1helperExternalSecret.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| s1helperExternalSecret.target.name | string | `"s1-helper-token"` | |
|
||||
| snyk.data[0].remoteRef.key | string | `"service/data/snyk-monitor"` | |
|
||||
| snyk.data[0].remoteRef.property | string | `"dockercfg.json"` | |
|
||||
| snyk.data[0].secretKey | string | `"dockercfg.json"` | |
|
||||
| snyk.data[1].remoteRef.key | string | `"service/data/snyk-monitor"` | |
|
||||
| snyk.data[1].remoteRef.property | string | `"integrationId"` | |
|
||||
| snyk.data[1].secretKey | string | `"integrationId"` | |
|
||||
| snyk.data[2].remoteRef.key | string | `"service/data/snyk-monitor"` | |
|
||||
| snyk.data[2].remoteRef.property | string | `"serviceAccountApiToken"` | |
|
||||
| snyk.data[2].secretKey | string | `"serviceAccountApiToken"` | |
|
||||
| snyk.enabled | bool | `false` | |
|
||||
| snyk.name | string | `"snyk-monitor"` | |
|
||||
| snyk.namespace | string | `"snyk-monitor"` | |
|
||||
| snyk.refreshInterval | string | `"15s"` | |
|
||||
| snyk.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| snyk.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| snyk.target.name | string | `"snyk-monitor"` | |
|
||||
| snyk.target.type | string | `"Opaque"` | |
|
||||
| templateName | string | `"{{.Name}}"` | |
|
||||
| templateNamespace | string | `"{{.Namespace}}"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,81 @@
|
||||
# elasticsearch
|
||||
|
||||
  
|
||||
|
||||
Helm chart for elasticsearch
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `"arm64"` | |
|
||||
| authorizationPolicy[0] | string | `"3.218.116.78/32"` | |
|
||||
| authorizationPolicy[1] | string | `"54.210.53.15/32"` | |
|
||||
| authorizationPolicy[2] | string | `"54.85.189.247/32"` | |
|
||||
| authorizationPolicy[3] | string | `"35.238.34.205/32"` | |
|
||||
| authorizationPolicy[4] | string | `"3.0.173.192/32"` | |
|
||||
| authorizationPolicy[5] | string | `"3.7.225.24/32"` | |
|
||||
| authorizationPolicy[6] | string | `"34.72.32.244/32"` | |
|
||||
| cloudProvider | string | `"aws"` | |
|
||||
| customConfig."action.destructive_requires_name" | bool | `true` | |
|
||||
| customConfig."cluster.routing.allocation.allow_rebalance" | string | `"indices_primaries_active"` | |
|
||||
| customConfig."cluster.routing.allocation.cluster_concurrent_rebalance" | int | `10` | |
|
||||
| customConfig."http.publish_host" | string | `"${POD_IP}"` | |
|
||||
| customConfig."indices.queries.cache.size" | int | `0` | |
|
||||
| customConfig."indices.query.bool.max_clause_count" | int | `2048` | |
|
||||
| customConfig."indices.recovery.max_bytes_per_sec" | string | `"200mb"` | |
|
||||
| customConfig."network.tcp.keep_alive" | bool | `true` | |
|
||||
| customConfig."network.tcp.keep_idle" | int | `300` | |
|
||||
| customConfig."thread_pool.write.queue_size" | int | `200` | |
|
||||
| customConfig."thread_pool.write.size" | int | `2` | |
|
||||
| customConfig."xpack.security.enabled" | bool | `false` | |
|
||||
| customConfig_master."http.publish_host" | string | `"${POD_IP}"` | |
|
||||
| customConfig_master."network.tcp.keep_alive" | bool | `true` | |
|
||||
| customConfig_master."network.tcp.keep_idle" | int | `300` | |
|
||||
| customConfig_master."xpack.security.enabled" | bool | `false` | |
|
||||
| dataCpus | string | `"5"` | |
|
||||
| dataJavaOpts | string | `"-Xms14592m -Xmx14592m"` | |
|
||||
| dataMems | string | `"28.25Gi"` | |
|
||||
| dataStorageClass | string | `"aws-gp3-es1"` | |
|
||||
| dataStorageSize | string | `"100G"` | |
|
||||
| dataVNGName | string | `"ElasticSearchData.arm64"` | |
|
||||
| domain | string | `"internal.reltio.com"` | |
|
||||
| enableAnonymousAccess | bool | `true` | |
|
||||
| esClusterName | string | `"es"` | |
|
||||
| esDataNodePerZoneCount | string | `"1"` | |
|
||||
| esMasterNodePerZoneCount | string | `"1"` | |
|
||||
| esVersion | string | `"8.19.8"` | |
|
||||
| kibana.service.annotations | object | `{}` | |
|
||||
| kibana.service.create | bool | `false` | |
|
||||
| kibana.service.dnsttl | string | `"60"` | |
|
||||
| kibana.service.hostname | string | `"{{ .Release.Namespace }}-es-kb.{{ .Values.domain }}"` | |
|
||||
| kibana.service.port | int | `5601` | |
|
||||
| kibana.service.type | string | `"LoadBalancer"` | |
|
||||
| kibanaDomain | string | `"reltio.com"` | |
|
||||
| lb | string | `"ilb-eiqu01"` | |
|
||||
| livenessProbe.failureThreshold | int | `60` | |
|
||||
| masterCpus | string | `"4"` | |
|
||||
| masterJavaOpts | string | `"-Xms8g -Xmx8g"` | |
|
||||
| masterMems | string | `"16Gi"` | |
|
||||
| masterStorageClass | string | `"aws-gp3-es"` | |
|
||||
| masterStorageSize | string | `"50Gi"` | |
|
||||
| metrics.collector.batch.send_batch_max_size | int | `1024` | |
|
||||
| metrics.collector.batch.send_batch_size | int | `1024` | |
|
||||
| metrics.collector.enabled | bool | `true` | |
|
||||
| metrics.collector.es_api_endpoint | string | `""` | |
|
||||
| metrics.collector.image | string | `"gcr.io/customer-facing/otel/opentelemetry-collector-contrib:0.75.0"` | |
|
||||
| metrics.collector.interval | string | `"60s"` | |
|
||||
| metrics.collector.limits.cpu | string | `"1"` | |
|
||||
| metrics.collector.limits.memory | string | `"256Mi"` | |
|
||||
| metrics.collector.requests.cpu | string | `"200m"` | |
|
||||
| metrics.collector.requests.memory | string | `"128Mi"` | |
|
||||
| onDemand | bool | `true` | |
|
||||
| service.annotations."external-dns.alpha.kubernetes.io/ttl" | string | `"60"` | |
|
||||
| service.create | bool | `true` | |
|
||||
| service.esPort | int | `9200` | |
|
||||
| service.type | string | `"LoadBalancer"` | |
|
||||
| serviceName | string | `"es"` | |
|
||||
| xpkNodeCount | string | `"1"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,132 @@
|
||||
# hazelcast
|
||||
|
||||
  
|
||||
|
||||
Helm chart for Hazelcast
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| MaxReplicas | int | `3` | |
|
||||
| MinReplicas | int | `3` | |
|
||||
| arch | string | `"amd64"` | |
|
||||
| cloud | string | `"aws"` | |
|
||||
| cpuLimit | string | `"2000m"` | |
|
||||
| cpuRequest | string | `"2000m"` | |
|
||||
| diagnostics.enabled | bool | `false` | |
|
||||
| diagnostics.values | string | `"-Dhazelcast.diagnostics.enabled=true -Dhazelcast.diagnostics.stdout=STDOUT -Dhazelcast.diagnostics.metrics.period.seconds=0 -Dhazelcast.diagnostics.operation-profiler.period.seconds=300 -Dhazelcast.diagnostics.invocation-profiler.period.seconds=300 -Dhazelcast.diagnostics.invocation.sample.period.seconds=300 -Dhazelcast.diagnostics.invocation.slow.threshold.seconds=5 -Dhazelcast.diagnostics.pending.invocations.period.seconds=300 -Dhazelcast.diagnostics.slowoperations.period.seconds=300 -Dhazelcast.diagnostics.storeLatency.period.seconds=300 -Dhazelcast.diagnostics.operation-heartbeat.seconds=0 -Dhazelcast.diagnostics.member-heartbeat.seconds=0 -Dhazelcast.health.monitoring.delay.seconds=60"` | |
|
||||
| domain | string | `"internal.reltio.com"` | |
|
||||
| externalEndpoint | bool | `true` | |
|
||||
| gracefulShutdown.enabled | bool | `true` | |
|
||||
| gracefulShutdown.maxWaitSeconds | int | `600` | |
|
||||
| hazelcast.JavaHeapSize | string | `"-Xms6G -Xmx6G"` | |
|
||||
| hazelcast.javaOpts | string | `"-Dhazelcast.initial.min.cluster.size=2 -Dhazelcast.merge.first.run.delay.seconds=5 -Dhazelcast.merge.next.run.delay.seconds=15 -Dhazelcast.mancenter.enabled=false -Dhazelcast.socket.connect.timeout.seconds=5 -Dhazelcast.client.cleanup.period.millis=5000 -Dhazelcast.client.cleanup.timeout.millis=60000 -Dhazelcast.client.max.no.heartbeat.seconds=60 -Dhazelcast.max.no.heartbeat.seconds=10 -Dhazelcast.operation.call.timeout.millis=20000 -Dhazelcast.heartbeat.interval.seconds=1"` | |
|
||||
| hazelcast.yaml.hazelcast.cluster-name | string | `"hz"` | |
|
||||
| hazelcast.yaml.hazelcast.cp-subsystem.semaphores.*-nonJDK.jdk-compatible | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.cp-subsystem.semaphores.*.jdk-compatible | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.map.default.merge-policy.batch-size | int | `1000` | |
|
||||
| hazelcast.yaml.hazelcast.map.default.merge-policy.class-name | string | `"com.hazelcast.spi.merge.DiscardMergePolicy"` | |
|
||||
| hazelcast.yaml.hazelcast.map.healthCheck.split-brain-protection-ref | string | `"splitBrainProtectionRule"` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.aws.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.azure.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.eureka.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.gcp.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.kubernetes.enabled | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.kubernetes.namespace | string | `"hz"` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.kubernetes.resolve-not-ready-addresses | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.kubernetes.service-name | string | `"hz"` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.multicast.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.join.tcp-ip.enabled | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.port.auto-increment | bool | `false` | |
|
||||
| hazelcast.yaml.hazelcast.network.port.port | int | `5701` | |
|
||||
| hazelcast.yaml.hazelcast.network.port.port-count | int | `100` | |
|
||||
| hazelcast.yaml.hazelcast.network.rest-api.enabled | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.network.rest-api.endpoint-groups.CLUSTER_WRITE.enabled | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.network.rest-api.endpoint-groups.HEALTH_CHECK.enabled | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.enabled | bool | `true` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.minimum-cluster-size | int | `3` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.probabilistic-split-brain-protection.acceptable-heartbeat-pause-millis | int | `5000` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.probabilistic-split-brain-protection.max-sample-size | int | `500` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.probabilistic-split-brain-protection.suspicion-threshold | int | `10` | |
|
||||
| hazelcast.yaml.hazelcast.split-brain-protection.splitBrainProtectionRule.protect-on | string | `"READ_WRITE"` | |
|
||||
| heapdumpEnabled | bool | `true` | |
|
||||
| hzClusterName | string | `"hz"` | |
|
||||
| imagePullPolicy | string | `"IfNotPresent"` | |
|
||||
| imageRepository | string | `"gcr.io/customer-facing/hz:RC-PRODUCTION-129468-20240905"` | |
|
||||
| jmx.enabled | bool | `true` | |
|
||||
| jmx.mapsToTrack | string | `"[\"api-test.DAO.p.OPERATION_COUNTER\", \"api-test.DAO.s.OPERATION_COUNTER\", \"api-test.DYNAMO_DB_LOCK\", \"dtss-test.DAO.p.OPERATION_COUNTER\", \"dtss-test.DAO.s.OPERATION_COUNTER\", \"export-test.DAO.p.OPERATION_COUNTER\", \"export-test.DAO.s.OPERATION_COUNTER\", \"api-test.generators\", \"api-test.TENANTS_COLUMN_FAMILY_LOCK\", \"api-test.healthCheck\", \"api-test.crud.EVENT_HUB_IMMEDIATE_STATS\", \"api-test.match.EVENT_HUB_IMMEDIATE_STATS\", \"api-test.ReltioMessagingResourcesSynchronizer\", \"api-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\", \"api-dev.DAO.p.OPERATION_COUNTER\", \"api-dev.DAO.s.OPERATION_COUNTER\", \"api-dev.DYNAMO_DB_LOCK\", \"dtss-dev.DAO.p.OPERATION_COUNTER\", \"dtss-dev.DAO.s.OPERATION_COUNTER\", \"export-dev.DAO.p.OPERATION_COUNTER\", \"export-dev.DAO.s.OPERATION_COUNTER\", \"api-dev.generators\", \"api-dev.TENANTS_COLUMN_FAMILY_LOCK\", \"api-dev.healthCheck\", \"api-dev.crud.EVENT_HUB_IMMEDIATE_STATS\", \"api-dev.match.EVENT_HUB_IMMEDIATE_STATS\", \"api-dev.ReltioMessagingResourcesSynchronizer\", \"api-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\", \"api-test.SystemKeyspaceTestAndromeda\", \"api-dev.SystemKeyspaceDev\", \"dtss-dev.DYNAMO_DB_LOCK\", \"dtss-test.DYNAMO_DB_LOCK\", \"export-dev.DYNAMO_DB_LOCK\", \"export-test.DYNAMO_DB_LOCK\", \"dtss-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\", \"dtss-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\", \"export-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\", \"export-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle\"]"` | |
|
||||
| jmx.port | int | `1099` | |
|
||||
| livenessProbe.enabled | bool | `true` | |
|
||||
| livenessProbe.failureThreshold | int | `10` | |
|
||||
| livenessProbe.initialDelaySeconds | int | `5` | |
|
||||
| livenessProbe.path | string | `"/hazelcast/health/node-state"` | |
|
||||
| livenessProbe.periodSeconds | int | `10` | |
|
||||
| livenessProbe.successThreshold | int | `1` | |
|
||||
| livenessProbe.timeoutSeconds | int | `10` | |
|
||||
| maxSurge | int | `1` | |
|
||||
| maxUnavailable | int | `1` | |
|
||||
| memoryLimit | string | `"6Gi"` | |
|
||||
| memoryRequest | string | `"6Gi"` | |
|
||||
| metrics.enabled | bool | `false` | |
|
||||
| onDemand | bool | `false` | |
|
||||
| otel.enabled | bool | `true` | |
|
||||
| otel.mapsToTrack[0] | string | `"api-test.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[10] | string | `"api-test.crud.EVENT_HUB_IMMEDIATE_STATS"` | |
|
||||
| otel.mapsToTrack[11] | string | `"api-test.match.EVENT_HUB_IMMEDIATE_STATS"` | |
|
||||
| otel.mapsToTrack[12] | string | `"api-test.ReltioMessagingResourcesSynchronizer"` | |
|
||||
| otel.mapsToTrack[13] | string | `"api-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[14] | string | `"api-dev.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[15] | string | `"api-dev.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[16] | string | `"api-dev.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[17] | string | `"dtss-dev.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[18] | string | `"dtss-dev.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[19] | string | `"export-dev.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[1] | string | `"api-test.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[20] | string | `"export-dev.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[21] | string | `"api-dev.generators"` | |
|
||||
| otel.mapsToTrack[22] | string | `"api-dev.TENANTS_COLUMN_FAMILY_LOCK"` | |
|
||||
| otel.mapsToTrack[23] | string | `"api-dev.healthCheck"` | |
|
||||
| otel.mapsToTrack[24] | string | `"api-dev.crud.EVENT_HUB_IMMEDIATE_STATS"` | |
|
||||
| otel.mapsToTrack[25] | string | `"api-dev.match.EVENT_HUB_IMMEDIATE_STATS"` | |
|
||||
| otel.mapsToTrack[26] | string | `"api-dev.ReltioMessagingResourcesSynchronizer"` | |
|
||||
| otel.mapsToTrack[27] | string | `"api-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[28] | string | `"api-test.SystemKeyspaceTestAndromeda"` | |
|
||||
| otel.mapsToTrack[29] | string | `"api-dev.SystemKeyspaceDev"` | |
|
||||
| otel.mapsToTrack[2] | string | `"api-test.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[30] | string | `"dtss-dev.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[31] | string | `"dtss-test.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[32] | string | `"export-dev.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[33] | string | `"export-test.DYNAMO_DB_LOCK"` | |
|
||||
| otel.mapsToTrack[34] | string | `"dtss-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[35] | string | `"dtss-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[36] | string | `"export-dev.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[37] | string | `"export-test.com.reltio.db.layer.dynamodb.DynamoDBClusterHandle"` | |
|
||||
| otel.mapsToTrack[3] | string | `"dtss-test.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[4] | string | `"dtss-test.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[5] | string | `"export-test.DAO.p.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[6] | string | `"export-test.DAO.s.OPERATION_COUNTER"` | |
|
||||
| otel.mapsToTrack[7] | string | `"api-test.generators"` | |
|
||||
| otel.mapsToTrack[8] | string | `"api-test.TENANTS_COLUMN_FAMILY_LOCK"` | |
|
||||
| otel.mapsToTrack[9] | string | `"api-test.healthCheck"` | |
|
||||
| rbac.create | bool | `true` | |
|
||||
| readinessProbe.enabled | bool | `true` | |
|
||||
| readinessProbe.failureThreshold | int | `10` | |
|
||||
| readinessProbe.initialDelaySeconds | int | `5` | |
|
||||
| readinessProbe.path | string | `"/hazelcast/health/ready"` | |
|
||||
| readinessProbe.periodSeconds | int | `10` | |
|
||||
| readinessProbe.successThreshold | int | `1` | |
|
||||
| readinessProbe.timeoutSeconds | int | `10` | |
|
||||
| regcred | string | `"gcrregcred"` | |
|
||||
| securityContext.enabled | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `100` | |
|
||||
| service.annotations."external-dns.alpha.kubernetes.io/ttl" | string | `"60"` | |
|
||||
| service.create | bool | `true` | |
|
||||
| service.port | int | `5701` | |
|
||||
| service.type | string | `"LoadBalancer"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| serviceName | string | `"hz"` | |
|
||||
| targetCPUUtilizationPercentage | int | `30` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,345 @@
|
||||
# jenkins
|
||||
|
||||
  
|
||||
|
||||
Jenkins - Build great things at any scale! As the leading open source automation server, Jenkins provides over 2000 plugins to support building, deploying and automating any project.
|
||||
|
||||
**Homepage:** <https://www.jenkins.io/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| maorfr | <maor.friedman@redhat.com> | |
|
||||
| torstenwalter | <mail@torstenwalter.de> | |
|
||||
| mogaal | <garridomota@gmail.com> | |
|
||||
| wmcdona89 | <wmcdona89@gmail.com> | |
|
||||
| timja | <timjacomb1@gmail.com> | |
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/jenkinsci/jenkins>
|
||||
* <https://github.com/jenkinsci/docker-inbound-agent>
|
||||
* <https://github.com/maorfr/kube-tasks>
|
||||
* <https://github.com/jenkinsci/configuration-as-code-plugin>
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| additionalAgents | object | `{}` | Configure additional |
|
||||
| additionalClouds | object | `{}` | |
|
||||
| agent.TTYEnabled | bool | `false` | Allocate pseudo tty to the side container |
|
||||
| agent.additionalContainers | list | `[]` | Add additional containers to the agents |
|
||||
| agent.alwaysPullImage | bool | `false` | Always pull agent container image before build |
|
||||
| agent.annotations | object | `{}` | Annotations to apply to the pod |
|
||||
| agent.args | string | `"${computer.jnlpmac} ${computer.name}"` | Arguments passed to command to execute |
|
||||
| agent.command | string | `nil` | Command to execute when side container starts |
|
||||
| agent.componentName | string | `"jenkins-agent"` | |
|
||||
| agent.connectTimeout | int | `100` | Timeout in seconds for an agent to be online |
|
||||
| agent.containerCap | int | `10` | Max number of agents to launch for a whole cluster. |
|
||||
| agent.customJenkinsLabels | list | `[]` | Append Jenkins labels to the agent |
|
||||
| agent.defaultsProviderTemplate | string | `""` | The name of the pod template to use for providing default values |
|
||||
| agent.directConnection | bool | `false` | |
|
||||
| agent.disableDefaultAgent | bool | `false` | Disable the default Jenkins Agent configuration |
|
||||
| agent.enabled | bool | `true` | Enable Kubernetes plugin jnlp-agent podTemplate |
|
||||
| agent.envVars | list | `[]` | Environment variables for the agent Pod |
|
||||
| agent.garbageCollection.enabled | bool | `false` | When enabled, Jenkins will periodically check for orphan pods that have not been touched for the given timeout period and delete them. |
|
||||
| agent.garbageCollection.namespaces | string | `""` | Namespaces to look at for garbage collection, in addition to the default namespace defined for the cloud. One namespace per line. |
|
||||
| agent.garbageCollection.timeout | int | `300` | Timeout value for orphaned pods |
|
||||
| agent.hostNetworking | bool | `false` | Enables the agent to use the host network |
|
||||
| agent.idleMinutes | int | `0` | Allows the Pod to remain active for reuse until the configured number of minutes has passed since the last step was executed on it |
|
||||
| agent.image.repository | string | `"gcr.io/customer-facing/jenkins/inbound-agent"` | Repository to pull the agent jnlp image from |
|
||||
| agent.image.tag | string | `"3309.v27b_9314fd1a_4-1"` | Tag of the image to pull |
|
||||
| agent.imagePullSecretName | string | `nil` | Name of the secret to be used to pull the image |
|
||||
| agent.inheritYamlMergeStrategy | bool | `false` | Controls whether the defined yaml merge strategy will be inherited if another defined pod template is configured to inherit from the current one |
|
||||
| agent.instanceCap | int | `2147483647` | Max number of agents to launch for this type of agent |
|
||||
| agent.jenkinsTunnel | string | `nil` | Overrides the Kubernetes Jenkins tunnel |
|
||||
| agent.jenkinsUrl | string | `nil` | Overrides the Kubernetes Jenkins URL |
|
||||
| agent.jnlpregistry | string | `nil` | Custom registry used to pull the agent jnlp image from |
|
||||
| agent.kubernetesConnectTimeout | int | `5` | The connection timeout in seconds for connections to Kubernetes API. The minimum value is 5 |
|
||||
| agent.kubernetesReadTimeout | int | `15` | The read timeout in seconds for connections to Kubernetes API. The minimum value is 15 |
|
||||
| agent.livenessProbe | object | `{}` | |
|
||||
| agent.maxRequestsPerHostStr | string | `"32"` | The maximum concurrent connections to Kubernetes API |
|
||||
| agent.namespace | string | `nil` | Namespace in which the Kubernetes agents should be launched |
|
||||
| agent.nodeSelector | object | `{}` | Node labels for pod assignment |
|
||||
| agent.nodeUsageMode | string | `"NORMAL"` | |
|
||||
| agent.podLabels | object | `{}` | Custom Pod labels (an object with `label-key: label-value` pairs) |
|
||||
| agent.podName | string | `"default"` | Agent Pod base name |
|
||||
| agent.podRetention | string | `"Never"` | |
|
||||
| agent.podTemplates | object | `{}` | Configures extra pod templates for the default kubernetes cloud |
|
||||
| agent.privileged | bool | `false` | Agent privileged container |
|
||||
| agent.resources | object | `{"limits":{"cpu":"512m","memory":"512Mi"},"requests":{"cpu":"512m","memory":"512Mi"}}` | Resources allocation (Requests and Limits) |
|
||||
| agent.restrictedPssSecurityContext | bool | `false` | Set a restricted securityContext on jnlp containers |
|
||||
| agent.retentionTimeout | int | `5` | Time in minutes after which the Kubernetes cloud plugin will clean up an idle worker that has not already terminated |
|
||||
| agent.runAsGroup | string | `nil` | Configure container group |
|
||||
| agent.runAsUser | string | `nil` | Configure container user |
|
||||
| agent.secretEnvVars | list | `[]` | Mount a secret as environment variable |
|
||||
| agent.serviceAccount | string | `serviceAccountAgent.name` if `agent.useDefaultServiceAccount` is `true` | Override the default service account |
|
||||
| agent.showRawYaml | bool | `true` | |
|
||||
| agent.sideContainerName | string | `"jnlp"` | Side container name |
|
||||
| agent.skipTlsVerify | bool | `false` | Disables the verification of the controller certificate on remote connection. This flag correspond to the "Disable https certificate check" flag in kubernetes plugin UI |
|
||||
| agent.usageRestricted | bool | `false` | Enable the possibility to restrict the usage of this agent to specific folder. This flag correspond to the "Restrict pipeline support to authorized folders" flag in kubernetes plugin UI |
|
||||
| agent.useDefaultServiceAccount | bool | `true` | Use `serviceAccountAgent.name` as the default value for defaults template `serviceAccount` |
|
||||
| agent.volumes | list | `[]` | Additional volumes |
|
||||
| agent.waitForPodSec | int | `600` | Seconds to wait for pod to be running |
|
||||
| agent.websocket | bool | `false` | Enables agent communication via websockets |
|
||||
| agent.workingDir | string | `"/home/jenkins/agent"` | Configure working directory for default agent |
|
||||
| agent.workspaceVolume | object | `{}` | Workspace volume (defaults to EmptyDir) |
|
||||
| agent.yamlMergeStrategy | string | `"override"` | Defines how the raw yaml field gets merged with yaml definitions from inherited pod templates. Possible values: "merge" or "override" |
|
||||
| agent.yamlTemplate | string | `""` | The raw yaml of a Pod API Object to merge into the agent spec |
|
||||
| awsSecurityGroupPolicies.enabled | bool | `false` | |
|
||||
| awsSecurityGroupPolicies.policies[0].name | string | `""` | |
|
||||
| awsSecurityGroupPolicies.policies[0].podSelector | object | `{}` | |
|
||||
| awsSecurityGroupPolicies.policies[0].securityGroupIds | list | `[]` | |
|
||||
| checkDeprecation | bool | `true` | Checks if any deprecated values are used |
|
||||
| clusterZone | string | `"cluster.local"` | Override the cluster name for FQDN resolving |
|
||||
| controller.JCasC.authorizationStrategy | string | `"loggedInUsersCanDoAnything:\n allowAnonymousRead: false"` | Jenkins Config as Code Authorization Strategy-section |
|
||||
| controller.JCasC.configMapAnnotations | object | `{}` | Annotations for the JCasC ConfigMap |
|
||||
| controller.JCasC.configScripts | object | `{}` | List of Jenkins Config as Code scripts |
|
||||
| controller.JCasC.configUrls | list | `[]` | Remote URLs for configuration files. |
|
||||
| controller.JCasC.defaultConfig | bool | `true` | Enables default Jenkins configuration via configuration as code plugin |
|
||||
| controller.JCasC.overwriteConfiguration | bool | `false` | Whether Jenkins Config as Code should overwrite any existing configuration |
|
||||
| controller.JCasC.security | object | `{"apiToken":{"creationOfLegacyTokenEnabled":false,"tokenGenerationOnCreationEnabled":false,"usageStatisticsEnabled":true}}` | Jenkins Config as Code security-section |
|
||||
| controller.JCasC.securityRealm | string | `"local:\n allowsSignup: false\n enableCaptcha: false\n users:\n - id: \"${chart-admin-username}\"\n name: \"Jenkins Admin\"\n password: \"${chart-admin-password}\""` | Jenkins Config as Code Security Realm-section |
|
||||
| controller.additionalExistingSecrets | list | `[]` | List of additional existing secrets to mount |
|
||||
| controller.additionalPlugins | list | `[]` | List of plugins to install in addition to those listed in controller.installPlugins |
|
||||
| controller.additionalSecrets | list | `[]` | List of additional secrets to create and mount |
|
||||
| controller.admin.createSecret | bool | `true` | Create secret for admin user |
|
||||
| controller.admin.existingSecret | string | `""` | The name of an existing secret containing the admin credentials |
|
||||
| controller.admin.password | string | <random password> | Admin password created as a secret if `controller.admin.createSecret` is true |
|
||||
| controller.admin.passwordKey | string | `"jenkins-admin-password"` | The key in the existing admin secret containing the password |
|
||||
| controller.admin.userKey | string | `"jenkins-admin-user"` | The key in the existing admin secret containing the username |
|
||||
| controller.admin.username | string | `"admin"` | Admin username created as a secret if `controller.admin.createSecret` is true |
|
||||
| controller.affinity | object | `{}` | Affinity settings |
|
||||
| controller.agentListenerEnabled | bool | `true` | Create Agent listener service |
|
||||
| controller.agentListenerExternalTrafficPolicy | string | `nil` | Traffic Policy of for the agentListener service |
|
||||
| controller.agentListenerHostPort | string | `nil` | Host port to listen for agents |
|
||||
| controller.agentListenerLoadBalancerIP | string | `nil` | Static IP for the agentListener LoadBalancer |
|
||||
| controller.agentListenerLoadBalancerSourceRanges | list | `["0.0.0.0/0"]` | Allowed inbound IP for the agentListener service |
|
||||
| controller.agentListenerNodePort | string | `nil` | Node port to listen for agents |
|
||||
| controller.agentListenerPort | int | `50000` | Listening port for agents |
|
||||
| controller.agentListenerServiceAnnotations | object | `{}` | Annotations for the agentListener service |
|
||||
| controller.agentListenerServiceType | string | `"ClusterIP"` | Defines how to expose the agentListener service |
|
||||
| controller.backendconfig.annotations | object | `{}` | backendconfig annotations |
|
||||
| controller.backendconfig.apiVersion | string | `"extensions/v1beta1"` | backendconfig API version |
|
||||
| controller.backendconfig.enabled | bool | `false` | Enables backendconfig |
|
||||
| controller.backendconfig.labels | object | `{}` | backendconfig labels |
|
||||
| controller.backendconfig.name | string | `nil` | backendconfig name |
|
||||
| controller.backendconfig.spec | object | `{}` | backendconfig spec |
|
||||
| controller.cloudName | string | `"kubernetes"` | Name of default cloud configuration. |
|
||||
| controller.clusterIp | string | `nil` | k8s service clusterIP. Only used if serviceType is ClusterIP |
|
||||
| controller.componentName | string | `"jenkins-controller"` | Used for label app.kubernetes.io/component |
|
||||
| controller.containerEnv | list | `[]` | Environment variables for Jenkins Container |
|
||||
| controller.containerEnvFrom | list | `[]` | Environment variable sources for Jenkins Container |
|
||||
| controller.containerSecurityContext | object | `{"allowPrivilegeEscalation":false,"readOnlyRootFilesystem":true,"runAsGroup":1000,"runAsUser":1000}` | Allow controlling the securityContext for the jenkins container |
|
||||
| controller.csrf.defaultCrumbIssuer.enabled | bool | `true` | Enable the default CSRF Crumb issuer |
|
||||
| controller.csrf.defaultCrumbIssuer.proxyCompatability | bool | `true` | Enable proxy compatibility |
|
||||
| controller.customInitContainers | list | `[]` | Custom init-container specification in raw-yaml format |
|
||||
| controller.customJenkinsLabels | list | `[]` | Append Jenkins labels to the controller |
|
||||
| controller.disableRememberMe | bool | `false` | Disable use of remember me |
|
||||
| controller.disabledAgentProtocols | list | `["JNLP-connect","JNLP2-connect"]` | Disabled agent protocols |
|
||||
| controller.enableRawHtmlMarkupFormatter | bool | `false` | Enable HTML parsing using OWASP Markup Formatter Plugin (antisamy-markup-formatter) |
|
||||
| controller.enableServiceLinks | bool | `false` | |
|
||||
| controller.executorMode | string | `"NORMAL"` | Sets the executor mode of the Jenkins node. Possible values are "NORMAL" or "EXCLUSIVE" |
|
||||
| controller.existingSecret | string | `nil` | |
|
||||
| controller.extraPorts | list | `[]` | Optionally configure other ports to expose in the controller container |
|
||||
| controller.fsGroup | int | `1000` | Deprecated in favor of `controller.podSecurityContextOverride`. uid that will be used for persistent volume. |
|
||||
| controller.googlePodMonitor.enabled | bool | `false` | |
|
||||
| controller.googlePodMonitor.scrapeEndpoint | string | `"/prometheus"` | |
|
||||
| controller.googlePodMonitor.scrapeInterval | string | `"60s"` | |
|
||||
| controller.healthProbes | bool | `true` | Enable Kubernetes Probes configuration configured in `controller.probes` |
|
||||
| controller.hostAliases | list | `[]` | Allows for adding entries to Pod /etc/hosts |
|
||||
| controller.hostNetworking | bool | `false` | |
|
||||
| controller.httpsKeyStore.disableSecretMount | bool | `false` | |
|
||||
| controller.httpsKeyStore.enable | bool | `false` | Enables HTTPS keystore on jenkins controller |
|
||||
| controller.httpsKeyStore.fileName | string | `"keystore.jks"` | Jenkins keystore filename which will appear under controller.httpsKeyStore.path |
|
||||
| controller.httpsKeyStore.httpPort | int | `8081` | HTTP Port that Jenkins should listen to along with HTTPS, it also serves as the liveness and readiness probes port. |
|
||||
| controller.httpsKeyStore.jenkinsHttpsJksPasswordSecretKey | string | `"https-jks-password"` | Name of the key in the secret that contains the JKS password |
|
||||
| controller.httpsKeyStore.jenkinsHttpsJksPasswordSecretName | string | `""` | Name of the secret that contains the JKS password, if it is not in the same secret as the JKS file |
|
||||
| controller.httpsKeyStore.jenkinsHttpsJksSecretKey | string | `"jenkins-jks-file"` | Name of the key in the secret that already has ssl keystore |
|
||||
| controller.httpsKeyStore.jenkinsHttpsJksSecretName | string | `""` | Name of the secret that already has ssl keystore |
|
||||
| controller.httpsKeyStore.jenkinsKeyStoreBase64Encoded | string | `nil` | Base64 encoded Keystore content. Keystore must be converted to base64 then being pasted here |
|
||||
| controller.httpsKeyStore.password | string | `"password"` | Jenkins keystore password |
|
||||
| controller.httpsKeyStore.path | string | `"/var/jenkins_keystore"` | Path of HTTPS keystore file |
|
||||
| controller.image.pullPolicy | string | `"Always"` | Controller image pull policy |
|
||||
| controller.image.registry | string | `"docker.io"` | Controller image registry |
|
||||
| controller.image.repository | string | `"jenkins/jenkins"` | Controller image repository |
|
||||
| controller.image.tag | string | `nil` | Controller image tag override; i.e., tag: "2.440.1-jdk21" |
|
||||
| controller.image.tagLabel | string | `"jdk21"` | Controller image tag label |
|
||||
| controller.imagePullSecretName | string | `nil` | Controller image pull secret |
|
||||
| controller.ingress.annotations | object | `{}` | Ingress annotations |
|
||||
| controller.ingress.apiVersion | string | `"extensions/v1beta1"` | Ingress API version |
|
||||
| controller.ingress.enabled | bool | `false` | Enables ingress |
|
||||
| controller.ingress.hostName | string | `nil` | Ingress hostname |
|
||||
| controller.ingress.labels | object | `{}` | Ingress labels |
|
||||
| controller.ingress.path | string | `nil` | Ingress path |
|
||||
| controller.ingress.paths | list | `[]` | Override for the default Ingress paths |
|
||||
| controller.ingress.resourceRootUrl | string | `nil` | Hostname to serve assets from |
|
||||
| controller.ingress.tls | list | `[]` | Ingress TLS configuration |
|
||||
| controller.initConfigMap | string | `nil` | Name of the existing ConfigMap that contains init scripts |
|
||||
| controller.initContainerEnv | list | `[]` | Environment variables for Init Container |
|
||||
| controller.initContainerEnvFrom | list | `[]` | Environment variable sources for Init Container |
|
||||
| controller.initContainerResources | object | `{}` | Resources allocation (Requests and Limits) for Init Container |
|
||||
| controller.initScripts | object | `{}` | Map of groovy init scripts to be executed during Jenkins controller start |
|
||||
| controller.initializeOnce | bool | `false` | Initialize only on first installation. Ensures plugins do not get updated inadvertently. Requires `persistence.enabled` to be set to `true` |
|
||||
| controller.installLatestPlugins | bool | `true` | Download the minimum required version or latest version of all dependencies |
|
||||
| controller.installLatestSpecifiedPlugins | bool | `false` | Set to true to download the latest version of any plugin that is requested to have the latest version |
|
||||
| controller.installPlugins | list | `["kubernetes:4336.v55d9a_494db_38","workflow-aggregator:608.v67378e9d3db_1","git:5.7.0","configuration-as-code:1967.va_968e15fd05b_"]` | List of Jenkins plugins to install. If you don't want to install plugins, set it to `false` |
|
||||
| controller.javaOpts | string | `nil` | Append to `JAVA_OPTS` env var |
|
||||
| controller.jenkinsAdminEmail | string | `nil` | Email address for the administrator of the Jenkins instance |
|
||||
| controller.jenkinsHome | string | `"/var/jenkins_home"` | Custom Jenkins home path |
|
||||
| controller.jenkinsOpts | string | `nil` | Append to `JENKINS_OPTS` env var |
|
||||
| controller.jenkinsRef | string | `"/usr/share/jenkins/ref"` | Custom Jenkins reference path |
|
||||
| controller.jenkinsUriPrefix | string | `nil` | Root URI Jenkins will be served on |
|
||||
| controller.jenkinsUrl | string | `nil` | Set Jenkins URL if you are not using the ingress definitions provided by the chart |
|
||||
| controller.jenkinsUrlProtocol | string | `nil` | Set protocol for Jenkins URL; `https` if `controller.ingress.tls`, `http` otherwise |
|
||||
| controller.jenkinsWar | string | `"/usr/share/jenkins/jenkins.war"` | |
|
||||
| controller.jmxPort | string | `nil` | Open a port, for JMX stats |
|
||||
| controller.legacyRemotingSecurityEnabled | bool | `false` | Whether legacy remoting security should be enabled |
|
||||
| controller.lifecycle | object | `{}` | Lifecycle specification for controller-container |
|
||||
| controller.loadBalancerIP | string | `nil` | Optionally assign a known public LB IP |
|
||||
| controller.loadBalancerSourceRanges | list | `["0.0.0.0/0"]` | Allowed inbound IP addresses |
|
||||
| controller.markupFormatter | string | `"plainText"` | Yaml of the markup formatter to use |
|
||||
| controller.nodePort | string | `nil` | k8s node port. Only used if serviceType is NodePort |
|
||||
| controller.nodeSelector | object | `{}` | Node labels for pod assignment |
|
||||
| controller.numExecutors | int | `0` | Set Number of executors |
|
||||
| controller.overwritePlugins | bool | `false` | Overwrite installed plugins on start |
|
||||
| controller.overwritePluginsFromImage | bool | `true` | Overwrite plugins that are already installed in the controller image |
|
||||
| controller.podAnnotations | object | `{}` | Annotations for controller pod |
|
||||
| controller.podDisruptionBudget.annotations | object | `{}` | |
|
||||
| controller.podDisruptionBudget.apiVersion | string | `"policy/v1beta1"` | Policy API version |
|
||||
| controller.podDisruptionBudget.enabled | bool | `false` | Enable Kubernetes Pod Disruption Budget configuration |
|
||||
| controller.podDisruptionBudget.labels | object | `{}` | |
|
||||
| controller.podDisruptionBudget.maxUnavailable | string | `"0"` | Number of pods that can be unavailable. Either an absolute number or a percentage |
|
||||
| controller.podLabels | object | `{}` | Custom Pod labels (an object with `label-key: label-value` pairs) |
|
||||
| controller.podSecurityContextOverride | string | `nil` | Completely overwrites the contents of the pod security context, ignoring the values provided for `runAsUser`, `fsGroup`, and `securityContextCapabilities` |
|
||||
| controller.priorityClassName | string | `nil` | The name of a `priorityClass` to apply to the controller pod |
|
||||
| controller.probes.livenessProbe.failureThreshold | int | `5` | Set the failure threshold for the liveness probe |
|
||||
| controller.probes.livenessProbe.httpGet.path | string | `"{{ default \"\" .Values.controller.jenkinsUriPrefix }}/login"` | Set the Pod's HTTP path for the liveness probe |
|
||||
| controller.probes.livenessProbe.httpGet.port | string | `"http"` | Set the Pod's HTTP port to use for the liveness probe |
|
||||
| controller.probes.livenessProbe.initialDelaySeconds | string | `nil` | Set the initial delay for the liveness probe in seconds |
|
||||
| controller.probes.livenessProbe.periodSeconds | int | `10` | Set the time interval between two liveness probes executions in seconds |
|
||||
| controller.probes.livenessProbe.timeoutSeconds | int | `5` | Set the timeout for the liveness probe in seconds |
|
||||
| controller.probes.readinessProbe.failureThreshold | int | `3` | Set the failure threshold for the readiness probe |
|
||||
| controller.probes.readinessProbe.httpGet.path | string | `"{{ default \"\" .Values.controller.jenkinsUriPrefix }}/login"` | Set the Pod's HTTP path for the liveness probe |
|
||||
| controller.probes.readinessProbe.httpGet.port | string | `"http"` | Set the Pod's HTTP port to use for the readiness probe |
|
||||
| controller.probes.readinessProbe.initialDelaySeconds | string | `nil` | Set the initial delay for the readiness probe in seconds |
|
||||
| controller.probes.readinessProbe.periodSeconds | int | `10` | Set the time interval between two readiness probes executions in seconds |
|
||||
| controller.probes.readinessProbe.timeoutSeconds | int | `5` | Set the timeout for the readiness probe in seconds |
|
||||
| controller.probes.startupProbe.failureThreshold | int | `12` | Set the failure threshold for the startup probe |
|
||||
| controller.probes.startupProbe.httpGet.path | string | `"{{ default \"\" .Values.controller.jenkinsUriPrefix }}/login"` | Set the Pod's HTTP path for the startup probe |
|
||||
| controller.probes.startupProbe.httpGet.port | string | `"http"` | Set the Pod's HTTP port to use for the startup probe |
|
||||
| controller.probes.startupProbe.periodSeconds | int | `10` | Set the time interval between two startup probes executions in seconds |
|
||||
| controller.probes.startupProbe.timeoutSeconds | int | `5` | Set the timeout for the startup probe in seconds |
|
||||
| controller.projectNamingStrategy | string | `"standard"` | |
|
||||
| controller.prometheus.alertingRulesAdditionalLabels | object | `{}` | Additional labels to add to the PrometheusRule object |
|
||||
| controller.prometheus.alertingrules | list | `[]` | Array of prometheus alerting rules |
|
||||
| controller.prometheus.enabled | bool | `false` | Enables prometheus service monitor |
|
||||
| controller.prometheus.metricRelabelings | list | `[]` | |
|
||||
| controller.prometheus.prometheusRuleNamespace | string | `""` | Set a custom namespace where to deploy PrometheusRule resource |
|
||||
| controller.prometheus.relabelings | list | `[]` | |
|
||||
| controller.prometheus.scrapeEndpoint | string | `"/prometheus"` | The endpoint prometheus should get metrics from |
|
||||
| controller.prometheus.scrapeInterval | string | `"60s"` | How often prometheus should scrape metrics |
|
||||
| controller.prometheus.serviceMonitorAdditionalLabels | object | `{}` | Additional labels to add to the service monitor object |
|
||||
| controller.prometheus.serviceMonitorNamespace | string | `nil` | Set a custom namespace where to deploy ServiceMonitor resource |
|
||||
| controller.publishNotReadyAddresses | string | `nil` | |
|
||||
| controller.resources | object | `{"limits":{"cpu":"2000m","memory":"4096Mi"},"requests":{"cpu":"50m","memory":"256Mi"}}` | Resource allocation (Requests and Limits) |
|
||||
| controller.route.annotations | object | `{}` | Route annotations |
|
||||
| controller.route.enabled | bool | `false` | Enables openshift route |
|
||||
| controller.route.labels | object | `{}` | Route labels |
|
||||
| controller.route.path | string | `nil` | Route path |
|
||||
| controller.runAsUser | int | `1000` | Deprecated in favor of `controller.podSecurityContextOverride`. uid that jenkins runs with. |
|
||||
| controller.schedulerName | string | `""` | Name of the Kubernetes scheduler to use |
|
||||
| controller.scriptApproval | list | `[]` | List of groovy functions to approve |
|
||||
| controller.secondaryingress.annotations | object | `{}` | |
|
||||
| controller.secondaryingress.apiVersion | string | `"extensions/v1beta1"` | |
|
||||
| controller.secondaryingress.enabled | bool | `false` | |
|
||||
| controller.secondaryingress.hostName | string | `nil` | |
|
||||
| controller.secondaryingress.labels | object | `{}` | |
|
||||
| controller.secondaryingress.paths | list | `[]` | |
|
||||
| controller.secondaryingress.tls | string | `nil` | |
|
||||
| controller.secretClaims | list | `[]` | List of `SecretClaim` resources to create |
|
||||
| controller.securityContextCapabilities | object | `{}` | |
|
||||
| controller.serviceAnnotations | object | `{}` | Jenkins controller service annotations |
|
||||
| controller.serviceExternalTrafficPolicy | string | `nil` | |
|
||||
| controller.serviceLabels | object | `{}` | Labels for the Jenkins controller-service |
|
||||
| controller.servicePort | int | `8080` | k8s service port |
|
||||
| controller.serviceType | string | `"ClusterIP"` | k8s service type |
|
||||
| controller.shareProcessNamespace | bool | `false` | |
|
||||
| controller.sidecars.additionalSidecarContainers | list | `[]` | Configures additional sidecar container(s) for the Jenkins controller |
|
||||
| controller.sidecars.configAutoReload.additionalVolumeMounts | list | `[]` | Enables additional volume mounts for the config auto-reload container |
|
||||
| controller.sidecars.configAutoReload.containerSecurityContext | object | `{"allowPrivilegeEscalation":false,"readOnlyRootFilesystem":true}` | Enable container security context |
|
||||
| controller.sidecars.configAutoReload.enabled | bool | `true` | Enables Jenkins Config as Code auto-reload |
|
||||
| controller.sidecars.configAutoReload.env | object | `{}` | Environment variables for the Jenkins Config as Code auto-reload container |
|
||||
| controller.sidecars.configAutoReload.envFrom | list | `[]` | Environment variable sources for the Jenkins Config as Code auto-reload container |
|
||||
| controller.sidecars.configAutoReload.folder | string | `"/var/jenkins_home/casc_configs"` | |
|
||||
| controller.sidecars.configAutoReload.image.registry | string | `"gcr.io"` | Registry for the image that triggers the reload |
|
||||
| controller.sidecars.configAutoReload.image.repository | string | `"customer-facing/kiwigrid/k8s-sidecar"` | Repository of the image that triggers the reload |
|
||||
| controller.sidecars.configAutoReload.image.tag | string | `"1.30.3"` | Tag for the image that triggers the reload |
|
||||
| controller.sidecars.configAutoReload.imagePullPolicy | string | `"IfNotPresent"` | |
|
||||
| controller.sidecars.configAutoReload.logging | object | `{"configuration":{"backupCount":3,"formatter":"JSON","logLevel":"INFO","logToConsole":true,"logToFile":false,"maxBytes":1024,"override":false}}` | Config auto-reload logging settings |
|
||||
| controller.sidecars.configAutoReload.logging.configuration.override | bool | `false` | Enables custom log config utilizing using the settings below. |
|
||||
| controller.sidecars.configAutoReload.reqRetryConnect | int | `10` | How many connection-related errors to retry on |
|
||||
| controller.sidecars.configAutoReload.resources | object | `{}` | |
|
||||
| controller.sidecars.configAutoReload.scheme | string | `"http"` | The scheme to use when connecting to the Jenkins configuration as code endpoint |
|
||||
| controller.sidecars.configAutoReload.skipTlsVerify | bool | `false` | Skip TLS verification when connecting to the Jenkins configuration as code endpoint |
|
||||
| controller.sidecars.configAutoReload.sleepTime | string | `nil` | How many seconds to wait before updating config-maps/secrets (sets METHOD=SLEEP on the sidecar) |
|
||||
| controller.sidecars.configAutoReload.sshTcpPort | int | `1044` | |
|
||||
| controller.statefulSetAnnotations | object | `{}` | Annotations for controller StatefulSet |
|
||||
| controller.statefulSetLabels | object | `{}` | Jenkins controller custom labels for the StatefulSet |
|
||||
| controller.targetPort | int | `8080` | k8s target port |
|
||||
| controller.terminationGracePeriodSeconds | string | `nil` | Set TerminationGracePeriodSeconds |
|
||||
| controller.terminationMessagePath | string | `nil` | Set the termination message path |
|
||||
| controller.terminationMessagePolicy | string | `nil` | Set the termination message policy |
|
||||
| controller.testEnabled | bool | `true` | Can be used to disable rendering controller test resources when using helm template |
|
||||
| controller.tolerations | list | `[]` | Toleration labels for pod assignment |
|
||||
| controller.topologySpreadConstraints | object | `{}` | Topology spread constraints |
|
||||
| controller.updateStrategy | object | `{}` | Update strategy for StatefulSet |
|
||||
| controller.usePodSecurityContext | bool | `true` | Enable pod security context (must be `true` if podSecurityContextOverride, runAsUser or fsGroup are set) |
|
||||
| credentialsId | string | `nil` | The Jenkins credentials to access the Kubernetes API server. For the default cluster it is not needed. |
|
||||
| extraManifests | list | `[]` | Array of extra Kubernetes manifests to deploy Can be used to add additional resources like PersistentVolumes, ConfigMaps, Secrets, etc. Supports both YAML objects and raw strings with template functions. |
|
||||
| fullnameOverride | string | `jenkins-(release-name)` or `jenkins` if the release-name is `jenkins` | Override the full resource names |
|
||||
| helmtest.bats.image.registry | string | `"gcr.io"` | Registry of the image used to test the framework |
|
||||
| helmtest.bats.image.repository | string | `"customer-facing/bats/bats"` | Repository of the image used to test the framework |
|
||||
| helmtest.bats.image.tag | string | `"1.11.1"` | Tag of the image to test the framework |
|
||||
| kubernetesURL | string | `"https://kubernetes.default"` | The URL of the Kubernetes API server |
|
||||
| nameOverride | string | `Chart.Name` | Override the resource name prefix |
|
||||
| namespaceOverride | string | `Release.Namespace` | Override the deployment namespace |
|
||||
| networkPolicy.apiVersion | string | `"networking.k8s.io/v1"` | NetworkPolicy ApiVersion |
|
||||
| networkPolicy.enabled | bool | `false` | Enable the creation of NetworkPolicy resources |
|
||||
| networkPolicy.externalAgents.except | list | `[]` | A list of IP sub-ranges to be excluded from the allowlisted IP range |
|
||||
| networkPolicy.externalAgents.ipCIDR | string | `nil` | The IP range from which external agents are allowed to connect to controller, i.e., 172.17.0.0/16 |
|
||||
| networkPolicy.internalAgents.allowed | bool | `true` | Allow internal agents (from the same cluster) to connect to controller. Agent pods will be filtered based on PodLabels |
|
||||
| networkPolicy.internalAgents.namespaceLabels | object | `{}` | A map of labels (keys/values) that agents namespaces must have to be able to connect to controller |
|
||||
| networkPolicy.internalAgents.podLabels | object | `{}` | A map of labels (keys/values) that agent pods must have to be able to connect to controller |
|
||||
| persistence.accessMode | string | `"ReadWriteOnce"` | The PVC access mode |
|
||||
| persistence.annotations | object | `{}` | Annotations for the PVC |
|
||||
| persistence.dataSource | object | `{}` | Existing data source to clone PVC from |
|
||||
| persistence.enabled | bool | `true` | Enable the use of a Jenkins PVC |
|
||||
| persistence.existingClaim | string | `nil` | Provide the name of a PVC |
|
||||
| persistence.labels | object | `{}` | Labels for the PVC |
|
||||
| persistence.mounts | list | `[]` | Additional mounts |
|
||||
| persistence.size | string | `"8Gi"` | The size of the PVC |
|
||||
| persistence.storageClass | string | `nil` | Storage class for the PVC |
|
||||
| persistence.subPath | string | `nil` | SubPath for jenkins-home mount |
|
||||
| persistence.volumes | list | `[]` | Additional volumes |
|
||||
| rbac.create | bool | `true` | Whether RBAC resources are created |
|
||||
| rbac.readSecrets | bool | `false` | Whether the Jenkins service account should be able to read Kubernetes secrets |
|
||||
| rbac.useOpenShiftNonRootSCC | bool | `false` | Whether the Jenkins service account should be able to use the OpenShift "nonroot" Security Context Constraints |
|
||||
| renderHelmLabels | bool | `true` | Enables rendering of the helm.sh/chart label to the annotations |
|
||||
| serviceAccount.annotations | object | `{}` | Configures annotations for the ServiceAccount |
|
||||
| serviceAccount.automountServiceAccountToken | bool | `true` | Auto-mount ServiceAccount token |
|
||||
| serviceAccount.create | bool | `true` | Configures if a ServiceAccount with this name should be created |
|
||||
| serviceAccount.extraLabels | object | `{}` | Configures extra labels for the ServiceAccount |
|
||||
| serviceAccount.imagePullSecretName | string | `nil` | Controller ServiceAccount image pull secret |
|
||||
| serviceAccount.name | string | `nil` | |
|
||||
| serviceAccountAgent.annotations | object | `{}` | Configures annotations for the agent ServiceAccount |
|
||||
| serviceAccountAgent.automountServiceAccountToken | bool | `true` | Auto-mount ServiceAccount token |
|
||||
| serviceAccountAgent.create | bool | `false` | Configures if an agent ServiceAccount should be created |
|
||||
| serviceAccountAgent.extraLabels | object | `{}` | Configures extra labels for the agent ServiceAccount |
|
||||
| serviceAccountAgent.imagePullSecretName | string | `nil` | Agent ServiceAccount image pull secret |
|
||||
| serviceAccountAgent.name | string | `nil` | The name of the agent ServiceAccount to be used by access-controlled resources |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,16 @@
|
||||
# kong-gateway-setup
|
||||
|
||||
 
|
||||
|
||||
A Helm chart for Kong Gateway setup using Argo Workflows for Reltio
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| git.sshKeySecret | string | `"git-ssh-key"` | |
|
||||
| konnect.apiUrl | string | `"https://us.api.konghq.com"` | |
|
||||
| workflow.name | string | `"kong-gateway-setup"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,22 @@
|
||||
# kong-log-splitter
|
||||
|
||||
 
|
||||
|
||||
A Helm chart for deploying the Kong log splitter lambda
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| accountID | string | `"{{ .Values.accountID | default \"123456789012\" }}"` | |
|
||||
| git.appCommonRepo.branch | string | `"main"` | |
|
||||
| git.appCommonRepo.url | string | `"git@bitbucket.org:reltio-ondemand/app-common.git"` | |
|
||||
| git.appLogSplitter.branch | string | `"host_pattern"` | |
|
||||
| git.appLogSplitter.url | string | `"git@bitbucket.org:reltio-ondemand/reltio-aws-access-log-splitter.git"` | |
|
||||
| git.appRuntimeRepo.branch | string | `"main"` | |
|
||||
| git.appRuntimeRepo.url | string | `"git@bitbucket.org:reltio-ondemand/app-runtime.git"` | |
|
||||
| git.sshKeySecret | string | `"kong-gateway-secrets"` | |
|
||||
| workflow.name | string | `"kong-log-splitter"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,21 @@
|
||||
# kong-routes-automation
|
||||
|
||||
 
|
||||
|
||||
A Helm chart for automating Kong routes configuration using Argo Workflows
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| configMap.filesName | string | `"kong-routes-files"` | |
|
||||
| configMap.scriptName | string | `"kong-routes-script"` | |
|
||||
| git.appCommonRepo.branch | string | `"main"` | |
|
||||
| git.appCommonRepo.url | string | `"git@bitbucket.org:reltio-ondemand/app-common.git"` | |
|
||||
| git.appRuntimeRepo.branch | string | `"main"` | |
|
||||
| git.appRuntimeRepo.url | string | `"git@bitbucket.org:reltio-ondemand/app-runtime.git"` | |
|
||||
| git.sshKeySecret | string | `"git-ssh-key"` | |
|
||||
| workflow.name | string | `"kong-routes-automation"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,18 @@
|
||||
# kong
|
||||
|
||||
 
|
||||
|
||||
A Helm chart for triggering Kong Gateway setup workflow
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| appRuntimeBranch | string | `"main"` | |
|
||||
| cloud | string | `"aws"` | |
|
||||
| clusterName | string | `""` | |
|
||||
| region | string | `"eu-west-1"` | |
|
||||
| workflow.namespace | string | `"kong"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,60 @@
|
||||
# installmanager
|
||||
|
||||
  
|
||||
|
||||
Download and setup loqate data using installmanager job
|
||||
|
||||
**Homepage:** <https://www.loqate.com/en-gb/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| GBG | <help@gbgplc.com> | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| annotations | object | `{}` | |
|
||||
| app.dataFolder | string | `""` | |
|
||||
| app.downloadFolder | string | `""` | |
|
||||
| app.downloadOption | string | `""` | |
|
||||
| app.installNeeded | string | `""` | |
|
||||
| app.licenseKey | string | `"EXAMPLEL-ICEN-SEKE-YGOE-SHERE0000000"` | |
|
||||
| app.products | string | `"ALL"` | |
|
||||
| app.referenceDatasetCacheSize | int | `7` | |
|
||||
| app.referencePageCacheSize | int | `12` | |
|
||||
| app.showLog | string | `""` | |
|
||||
| createSecret | bool | `true` | |
|
||||
| image.pullPolicy | string | `"Always"` | |
|
||||
| image.repository | string | `"gcr.io/customer-facing/gbgroup/loqate-verify-install-manager"` | |
|
||||
| image.tag | string | `"latest"` | |
|
||||
| imageCredentials.password | string | `""` | |
|
||||
| imageCredentials.registry | string | `"https://index.docker.io/v1/"` | |
|
||||
| imageCredentials.username | string | `"_json_key"` | |
|
||||
| imagePullSecrets | list | `[]` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podLabels | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| resources.limits.cpu | string | `"175m"` | |
|
||||
| resources.limits.memory | string | `"1200Mi"` | |
|
||||
| resources.requests.cpu | string | `"150m"` | |
|
||||
| resources.requests.memory | string | `"1000Mi"` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| serviceKey | string | `""` | |
|
||||
| storage.accessModes[0] | string | `"ReadWriteMany"` | |
|
||||
| storage.capacity | string | `"60Gi"` | |
|
||||
| storage.claimOverride | string | `""` | |
|
||||
| storage.class | string | `"hostpath"` | |
|
||||
| storage.mountPath | string | `""` | |
|
||||
| storage.overrideVolume | bool | `false` | |
|
||||
| storage.path | string | `"/run/desktop/mnt/host/c/loqate/data"` | |
|
||||
| storage.server | string | `""` | |
|
||||
| storage.type | string | `"local"` | |
|
||||
| tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,19 @@
|
||||
# memberlist
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| app.port | int | `7200` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| memberlist.selector | string | `"verify-memberlist"` | |
|
||||
| nameOverride | string | `""` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| securityContext | string | `nil` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,126 @@
|
||||
# querycoordinator
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Loqate Verify's QueryCoordinator
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| app.addressVerifyPath | string | `""` | |
|
||||
| app.allow_aiparser | bool | `true` | |
|
||||
| app.apiGkrInfoPath | string | `""` | |
|
||||
| app.apiVersionPath | string | `""` | |
|
||||
| app.containerPort | int | `8900` | |
|
||||
| app.cpuPercentWeight | float | `1` | |
|
||||
| app.dialtimeout | string | `"3000"` | |
|
||||
| app.healthScoreWeight | float | `3` | |
|
||||
| app.healthThresh | float | `0.8` | |
|
||||
| app.lqtProcessPath | string | `""` | |
|
||||
| app.maxBatchSize | int | `50` | |
|
||||
| app.memberlistService | string | `""` | |
|
||||
| app.numRetryForwardSpatialApi | int | `5` | |
|
||||
| app.queuePercentWeight | float | `2` | |
|
||||
| app.sortStrategy | string | `""` | |
|
||||
| app.version | string | `"1.0.0"` | |
|
||||
| app.workerCount | int | `1000` | |
|
||||
| autoscaling.behavior | object | `{}` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.keda.cooldownPeriod | int | `60` | |
|
||||
| autoscaling.keda.enabled | bool | `false` | |
|
||||
| autoscaling.keda.pollingInterval | int | `30` | |
|
||||
| autoscaling.keda.triggers[0].metadata.metricName | string | `"workersUsed"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.query | string | `"sum(avg_over_time(workers_used{%filter%}[1m])) * 100"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.serverAddress | string | `"http://thanos-query.prometheus-system.svc.cluster.local:9090"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.threshold | string | `"50"` | |
|
||||
| autoscaling.keda.triggers[0].type | string | `"prometheus"` | |
|
||||
| autoscaling.keda.triggers[1].metadata.metricName | string | `"healthScore"` | |
|
||||
| autoscaling.keda.triggers[1].metadata.query | string | `"sum(avg_over_time(healthscore{%filter%}[1m]))"` | |
|
||||
| autoscaling.keda.triggers[1].metadata.serverAddress | string | `"http://thanos-query.prometheus-system.svc.cluster.local:9090"` | |
|
||||
| autoscaling.keda.triggers[1].metadata.threshold | string | `"4"` | |
|
||||
| autoscaling.keda.triggers[1].type | string | `"prometheus"` | |
|
||||
| autoscaling.maxReplicas | int | `5` | |
|
||||
| autoscaling.minReplicas | int | `1` | |
|
||||
| autoscaling.targetCPUUtilizationPercentage | int | `70` | |
|
||||
| autoscaling.targetMemoryUtilizationPercentage | int | `80` | |
|
||||
| createSecret | bool | `true` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| gcp.project | string | `""` | |
|
||||
| image.pullPolicy | string | `"Always"` | |
|
||||
| image.repository | string | `"gcr.io/customer-facing/gbgroup/loqate-verify-query-coordinator"` | |
|
||||
| image.tag | string | `"latest"` | |
|
||||
| imageCredentials.password | string | `""` | |
|
||||
| imageCredentials.registry | string | `"https://index.docker.io/v1/"` | |
|
||||
| imageCredentials.username | string | `"_json_key"` | |
|
||||
| imagePullSecrets | list | `[]` | |
|
||||
| ingress.annotations | object | `{}` | |
|
||||
| ingress.className | string | `""` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hosts[0].host | string | `"chart-example.local"` | |
|
||||
| ingress.hosts[0].paths[0].path | string | `"/"` | |
|
||||
| ingress.hosts[0].paths[0].pathType | string | `"ImplementationSpecific"` | |
|
||||
| ingress.tls | list | `[]` | |
|
||||
| istio.enabled | bool | `false` | |
|
||||
| istio.name | string | `"http"` | |
|
||||
| istio.port | int | `80` | |
|
||||
| istio.protocol | string | `"HTTP"` | |
|
||||
| istio.selector | string | `"ingressgateway"` | |
|
||||
| istio.virtualservice.match[0].uri.prefix | string | `"/verify"` | |
|
||||
| istio.virtualservice.match[1].uri.prefix | string | `"/api/"` | |
|
||||
| istio.virtualservice.match[2].uri.prefix | string | `"/batch/"` | |
|
||||
| istio.virtualservice.retries.attempts | int | `5` | |
|
||||
| istio.virtualservice.retries.perTryTimeout | string | `"10s"` | |
|
||||
| istio.virtualservice.timeout | string | `"60s"` | |
|
||||
| jaeger.agentHost | string | `"jaeger-agent.default.svc.cluster.local"` | |
|
||||
| jaeger.agentPort | string | `"6831"` | |
|
||||
| jaeger.disabled | bool | `true` | |
|
||||
| jaeger.endpoint | string | `"http://jaeger-collector.default.svc.cluster.local:14268/api/traces"` | |
|
||||
| jaeger.password | string | `""` | |
|
||||
| jaeger.samplerParam | string | `"1"` | |
|
||||
| jaeger.samplerType | string | `"const"` | |
|
||||
| jaeger.user | string | `""` | |
|
||||
| livenessProbe.failureThreshold | int | `5` | |
|
||||
| livenessProbe.initialDelaySeconds | int | `5` | |
|
||||
| livenessProbe.periodSeconds | int | `10` | |
|
||||
| livenessProbe.successThreshold | int | `1` | |
|
||||
| livenessProbe.timeoutSeconds | int | `5` | |
|
||||
| memberlist.enabled | bool | `true` | |
|
||||
| memberlist.port | int | `7200` | |
|
||||
| memberlist.probeInterval | int | `500` | |
|
||||
| memberlist.selector | string | `"verify-memberlist"` | |
|
||||
| memberlist.suspicionMult | int | `2` | |
|
||||
| memberlist.useAddrRef | bool | `false` | |
|
||||
| nameOverride | string | `""` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podDisruptionBudget.enabled | bool | `false` | |
|
||||
| podDisruptionBudget.minAvailable | int | `1` | |
|
||||
| podLabels | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| prometheusOperator.enabled | bool | `false` | |
|
||||
| prometheusOperator.jobLabel | string | `""` | |
|
||||
| prometheusOperator.podMonitorInterval | string | `"30s"` | |
|
||||
| prometheusOperator.podMonitorSelector | object | `{}` | |
|
||||
| prometheusOperator.podTargetLabels | list | `[]` | |
|
||||
| readinessProbe.failureThreshold | int | `5` | |
|
||||
| readinessProbe.initialDelaySeconds | int | `5` | |
|
||||
| readinessProbe.periodSeconds | int | `10` | |
|
||||
| readinessProbe.successThreshold | int | `1` | |
|
||||
| readinessProbe.timeoutSeconds | int | `5` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources | object | `{}` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| service.port | int | `8900` | |
|
||||
| service.type | string | `"ClusterIP"` | |
|
||||
| serviceAccount.annotations | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| serviceAccount.name | string | `""` | |
|
||||
| serviceAnnotations | object | `{}` | |
|
||||
| serviceKey | string | `""` | |
|
||||
| serviceLabels | object | `{}` | |
|
||||
| tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,129 @@
|
||||
# spatial-api
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| app.AIEndpoint | string | `""` | |
|
||||
| app.containerPort | int | `3000` | |
|
||||
| app.libraryPath | string | `""` | |
|
||||
| app.loqateDataPath | string | `""` | |
|
||||
| app.memberlistService | string | `""` | |
|
||||
| app.warmup | string | `"false"` | |
|
||||
| app.workerCount | string | `""` | |
|
||||
| autoscaling.behavior | object | `{}` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.keda.cooldownPeriod | int | `60` | |
|
||||
| autoscaling.keda.enabled | bool | `false` | |
|
||||
| autoscaling.keda.pollingInterval | int | `30` | |
|
||||
| autoscaling.keda.triggers[0].metadata.metricName | string | `"attempt_count"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.namespace | string | `"prometheus-system"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.query | string | `"sum by (namespace) (rate(attempt_count{namespace=\"%namespace%\",country=~\"%country%\"}[1m]))"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.serverAddress | string | `"http://prometheus-operated.prometheus-system.svc.cluster.local:9090"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.threshold | string | `"20"` | |
|
||||
| autoscaling.keda.triggers[0].type | string | `"prometheus"` | |
|
||||
| autoscaling.maxReplicas | int | `3` | |
|
||||
| autoscaling.minReplicas | int | `1` | |
|
||||
| autoscaling.targetCPUUtilizationPercentage | int | `80` | |
|
||||
| autoscaling.targetMemoryUtilizationPercentage | int | `80` | |
|
||||
| createSecret | bool | `true` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| gcp.project | string | `""` | |
|
||||
| image.pullPolicy | string | `"Always"` | |
|
||||
| image.repository | string | `"gcr.io/customer-facing/gbgroup/loqate-verify-spatial-api"` | |
|
||||
| image.tag | string | `"latest"` | |
|
||||
| imageCredentials.password | string | `""` | |
|
||||
| imageCredentials.registry | string | `"https://index.docker.io/v1/"` | |
|
||||
| imageCredentials.username | string | `"_json_key"` | |
|
||||
| imagePullSecrets | list | `[]` | |
|
||||
| ingress.annotations | object | `{}` | |
|
||||
| ingress.className | string | `""` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hosts[0].host | string | `"chart-example.local"` | |
|
||||
| ingress.hosts[0].paths[0].path | string | `"/"` | |
|
||||
| ingress.hosts[0].paths[0].pathType | string | `"ImplementationSpecific"` | |
|
||||
| ingress.tls | list | `[]` | |
|
||||
| istio.enabled | bool | `false` | |
|
||||
| istio.name | string | `"http"` | |
|
||||
| istio.port | int | `80` | |
|
||||
| istio.protocol | string | `"HTTP"` | |
|
||||
| istio.selector | string | `"ingressgateway"` | |
|
||||
| istio.virtualservice.match[0].uri.prefix | string | `"/address/"` | |
|
||||
| istio.virtualservice.match[1].uri.prefix | string | `"/api/"` | |
|
||||
| istio.virtualservice.match[2].uri.prefix | string | `"/batch/"` | |
|
||||
| istio.virtualservice.retries.attempts | int | `5` | |
|
||||
| istio.virtualservice.retries.perTryTimeout | string | `"10s"` | |
|
||||
| istio.virtualservice.timeout | string | `"60s"` | |
|
||||
| jaeger.agentHost | string | `"jaeger-agent.default.svc.cluster.local"` | |
|
||||
| jaeger.agentPort | string | `"6831"` | |
|
||||
| jaeger.disabled | bool | `true` | |
|
||||
| jaeger.endpoint | string | `"http://jaeger-collector.default.svc.cluster.local:14268/api/traces"` | |
|
||||
| jaeger.password | string | `""` | |
|
||||
| jaeger.samplerParam | string | `"1"` | |
|
||||
| jaeger.samplerType | string | `"const"` | |
|
||||
| jaeger.user | string | `""` | |
|
||||
| livenessProbe.failureThreshold | int | `5` | |
|
||||
| livenessProbe.initialDelaySeconds | int | `5` | |
|
||||
| livenessProbe.periodSeconds | int | `30` | |
|
||||
| livenessProbe.successThreshold | int | `1` | |
|
||||
| livenessProbe.timeoutSeconds | int | `5` | |
|
||||
| memberlist.enabled | bool | `true` | |
|
||||
| memberlist.port | int | `7200` | |
|
||||
| memberlist.probeInterval | int | `500` | |
|
||||
| memberlist.selector | string | `"verify-memberlist"` | |
|
||||
| memberlist.suspicionMult | int | `2` | |
|
||||
| memberlist.useAddrRef | bool | `false` | |
|
||||
| nameOverride | string | `""` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podDisruptionBudget.enabled | bool | `false` | |
|
||||
| podDisruptionBudget.minAvailable | int | `1` | |
|
||||
| podLabels | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| prometheusOperator.enabled | bool | `false` | |
|
||||
| prometheusOperator.jobLabel | string | `""` | |
|
||||
| prometheusOperator.podMonitorInterval | string | `"30s"` | |
|
||||
| prometheusOperator.podMonitorSelector | object | `{}` | |
|
||||
| prometheusOperator.podTargetLabels[0] | string | `"country"` | |
|
||||
| readinessProbe.failureThreshold | int | `5` | |
|
||||
| readinessProbe.initialDelaySeconds | int | `5` | |
|
||||
| readinessProbe.periodSeconds | int | `30` | |
|
||||
| readinessProbe.successThreshold | int | `1` | |
|
||||
| readinessProbe.timeoutSeconds | int | `5` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources | object | `{}` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| service.port | int | `3000` | |
|
||||
| service.type | string | `"ClusterIP"` | |
|
||||
| serviceAccount.annotations | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| serviceAccount.name | string | `""` | |
|
||||
| serviceAnnotations | object | `{}` | |
|
||||
| serviceKey | string | `""` | |
|
||||
| serviceLabels | object | `{}` | |
|
||||
| startupProbe.failureThreshold | int | `10` | |
|
||||
| startupProbe.initialDelaySeconds | int | `60` | |
|
||||
| startupProbe.periodSeconds | int | `30` | |
|
||||
| startupProbe.successThreshold | int | `1` | |
|
||||
| startupProbe.timeoutSeconds | int | `5` | |
|
||||
| storage.accessModes[0] | string | `"ReadWriteMany"` | |
|
||||
| storage.capacity | string | `"60Gi"` | |
|
||||
| storage.claimOverride | string | `""` | |
|
||||
| storage.class | string | `"hostpath"` | |
|
||||
| storage.mountPath | string | `""` | |
|
||||
| storage.overrideVolume | bool | `false` | |
|
||||
| storage.path | string | `"/run/desktop/mnt/host/c/loqate/data"` | |
|
||||
| storage.server | string | `""` | |
|
||||
| storage.type | string | `"local"` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| variants | object | `{}` | |
|
||||
| verify.dataset | string | `"row"` | |
|
||||
| verify.premium | bool | `false` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,8 @@
|
||||
# storage-and-secrets
|
||||
|
||||
  
|
||||
|
||||
Supporting resources (storage, secrets) for the Loqate stack
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,433 @@
|
||||
# querycoordinator
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Loqate Verify's QueryCoordinator
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| app.addressVerifyPath | string | `""` | |
|
||||
| app.allow_aiparser | bool | `true` | |
|
||||
| app.apiGkrInfoPath | string | `""` | |
|
||||
| app.apiVersionPath | string | `""` | |
|
||||
| app.containerPort | int | `8900` | |
|
||||
| app.cpuPercentWeight | float | `1` | |
|
||||
| app.dialtimeout | string | `"3000"` | |
|
||||
| app.healthScoreWeight | float | `3` | |
|
||||
| app.healthThresh | float | `0.8` | |
|
||||
| app.lqtProcessPath | string | `""` | |
|
||||
| app.maxBatchSize | int | `50` | |
|
||||
| app.memberlistService | string | `""` | |
|
||||
| app.numRetryForwardSpatialApi | int | `5` | |
|
||||
| app.queuePercentWeight | float | `2` | |
|
||||
| app.sortStrategy | string | `""` | |
|
||||
| app.version | string | `"1.0.0"` | |
|
||||
| app.workerCount | int | `1000` | |
|
||||
| autoscaling.behavior | object | `{}` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.keda.cooldownPeriod | int | `60` | |
|
||||
| autoscaling.keda.enabled | bool | `false` | |
|
||||
| autoscaling.keda.pollingInterval | int | `30` | |
|
||||
| autoscaling.keda.triggers[0].metadata.metricName | string | `"workersUsed"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.query | string | `"sum(avg_over_time(workers_used{%filter%}[1m])) * 100"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.serverAddress | string | `"http://thanos-query.prometheus-system.svc.cluster.local:9090"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.threshold | string | `"50"` | |
|
||||
| autoscaling.keda.triggers[0].type | string | `"prometheus"` | |
|
||||
| autoscaling.keda.triggers[1].metadata.metricName | string | `"healthScore"` | |
|
||||
| autoscaling.keda.triggers[1].metadata.query | string | `"sum(avg_over_time(healthscore{%filter%}[1m]))"` | |
|
||||
| autoscaling.keda.triggers[1].metadata.serverAddress | string | `"http://thanos-query.prometheus-system.svc.cluster.local:9090"` | |
|
||||
| autoscaling.keda.triggers[1].metadata.threshold | string | `"4"` | |
|
||||
| autoscaling.keda.triggers[1].type | string | `"prometheus"` | |
|
||||
| autoscaling.maxReplicas | int | `5` | |
|
||||
| autoscaling.minReplicas | int | `1` | |
|
||||
| autoscaling.targetCPUUtilizationPercentage | int | `70` | |
|
||||
| autoscaling.targetMemoryUtilizationPercentage | int | `80` | |
|
||||
| createSecret | bool | `true` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| gcp.project | string | `""` | |
|
||||
| image.pullPolicy | string | `"Always"` | |
|
||||
| image.repository | string | `"gcr.io/customer-facing/gbgroup/loqate-verify-query-coordinator"` | |
|
||||
| image.tag | string | `"latest"` | |
|
||||
| imageCredentials.password | string | `""` | |
|
||||
| imageCredentials.registry | string | `"https://index.docker.io/v1/"` | |
|
||||
| imageCredentials.username | string | `"_json_key"` | |
|
||||
| imagePullSecrets | list | `[]` | |
|
||||
| ingress.annotations | object | `{}` | |
|
||||
| ingress.className | string | `""` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hosts[0].host | string | `"chart-example.local"` | |
|
||||
| ingress.hosts[0].paths[0].path | string | `"/"` | |
|
||||
| ingress.hosts[0].paths[0].pathType | string | `"ImplementationSpecific"` | |
|
||||
| ingress.tls | list | `[]` | |
|
||||
| istio.enabled | bool | `false` | |
|
||||
| istio.name | string | `"http"` | |
|
||||
| istio.port | int | `80` | |
|
||||
| istio.protocol | string | `"HTTP"` | |
|
||||
| istio.selector | string | `"ingressgateway"` | |
|
||||
| istio.virtualservice.match[0].uri.prefix | string | `"/verify"` | |
|
||||
| istio.virtualservice.match[1].uri.prefix | string | `"/api/"` | |
|
||||
| istio.virtualservice.match[2].uri.prefix | string | `"/batch/"` | |
|
||||
| istio.virtualservice.retries.attempts | int | `5` | |
|
||||
| istio.virtualservice.retries.perTryTimeout | string | `"10s"` | |
|
||||
| istio.virtualservice.timeout | string | `"60s"` | |
|
||||
| jaeger.agentHost | string | `"jaeger-agent.default.svc.cluster.local"` | |
|
||||
| jaeger.agentPort | string | `"6831"` | |
|
||||
| jaeger.disabled | bool | `true` | |
|
||||
| jaeger.endpoint | string | `"http://jaeger-collector.default.svc.cluster.local:14268/api/traces"` | |
|
||||
| jaeger.password | string | `""` | |
|
||||
| jaeger.samplerParam | string | `"1"` | |
|
||||
| jaeger.samplerType | string | `"const"` | |
|
||||
| jaeger.user | string | `""` | |
|
||||
| livenessProbe.failureThreshold | int | `5` | |
|
||||
| livenessProbe.initialDelaySeconds | int | `5` | |
|
||||
| livenessProbe.periodSeconds | int | `10` | |
|
||||
| livenessProbe.successThreshold | int | `1` | |
|
||||
| livenessProbe.timeoutSeconds | int | `5` | |
|
||||
| memberlist.enabled | bool | `true` | |
|
||||
| memberlist.port | int | `7200` | |
|
||||
| memberlist.probeInterval | int | `500` | |
|
||||
| memberlist.selector | string | `"verify-memberlist"` | |
|
||||
| memberlist.suspicionMult | int | `2` | |
|
||||
| memberlist.useAddrRef | bool | `false` | |
|
||||
| nameOverride | string | `""` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podDisruptionBudget.enabled | bool | `false` | |
|
||||
| podDisruptionBudget.minAvailable | int | `1` | |
|
||||
| podLabels | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| prometheusOperator.enabled | bool | `false` | |
|
||||
| prometheusOperator.jobLabel | string | `""` | |
|
||||
| prometheusOperator.podMonitorInterval | string | `"30s"` | |
|
||||
| prometheusOperator.podMonitorSelector | object | `{}` | |
|
||||
| prometheusOperator.podTargetLabels | list | `[]` | |
|
||||
| readinessProbe.failureThreshold | int | `5` | |
|
||||
| readinessProbe.initialDelaySeconds | int | `5` | |
|
||||
| readinessProbe.periodSeconds | int | `10` | |
|
||||
| readinessProbe.successThreshold | int | `1` | |
|
||||
| readinessProbe.timeoutSeconds | int | `5` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources | object | `{}` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| service.port | int | `8900` | |
|
||||
| service.type | string | `"ClusterIP"` | |
|
||||
| serviceAccount.annotations | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| serviceAccount.name | string | `""` | |
|
||||
| serviceAnnotations | object | `{}` | |
|
||||
| serviceKey | string | `""` | |
|
||||
| serviceLabels | object | `{}` | |
|
||||
| tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# spatial-api
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| app.AIEndpoint | string | `""` | |
|
||||
| app.containerPort | int | `3000` | |
|
||||
| app.libraryPath | string | `""` | |
|
||||
| app.loqateDataPath | string | `""` | |
|
||||
| app.memberlistService | string | `""` | |
|
||||
| app.warmup | string | `"false"` | |
|
||||
| app.workerCount | string | `""` | |
|
||||
| autoscaling.behavior | object | `{}` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.keda.cooldownPeriod | int | `60` | |
|
||||
| autoscaling.keda.enabled | bool | `false` | |
|
||||
| autoscaling.keda.pollingInterval | int | `30` | |
|
||||
| autoscaling.keda.triggers[0].metadata.metricName | string | `"attempt_count"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.namespace | string | `"prometheus-system"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.query | string | `"sum by (namespace) (rate(attempt_count{namespace=\"%namespace%\",country=~\"%country%\"}[1m]))"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.serverAddress | string | `"http://prometheus-operated.prometheus-system.svc.cluster.local:9090"` | |
|
||||
| autoscaling.keda.triggers[0].metadata.threshold | string | `"20"` | |
|
||||
| autoscaling.keda.triggers[0].type | string | `"prometheus"` | |
|
||||
| autoscaling.maxReplicas | int | `3` | |
|
||||
| autoscaling.minReplicas | int | `1` | |
|
||||
| autoscaling.targetCPUUtilizationPercentage | int | `80` | |
|
||||
| autoscaling.targetMemoryUtilizationPercentage | int | `80` | |
|
||||
| createSecret | bool | `true` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| gcp.project | string | `""` | |
|
||||
| image.pullPolicy | string | `"Always"` | |
|
||||
| image.repository | string | `"gcr.io/customer-facing/gbgroup/loqate-verify-spatial-api"` | |
|
||||
| image.tag | string | `"latest"` | |
|
||||
| imageCredentials.password | string | `""` | |
|
||||
| imageCredentials.registry | string | `"https://index.docker.io/v1/"` | |
|
||||
| imageCredentials.username | string | `"_json_key"` | |
|
||||
| imagePullSecrets | list | `[]` | |
|
||||
| ingress.annotations | object | `{}` | |
|
||||
| ingress.className | string | `""` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hosts[0].host | string | `"chart-example.local"` | |
|
||||
| ingress.hosts[0].paths[0].path | string | `"/"` | |
|
||||
| ingress.hosts[0].paths[0].pathType | string | `"ImplementationSpecific"` | |
|
||||
| ingress.tls | list | `[]` | |
|
||||
| istio.enabled | bool | `false` | |
|
||||
| istio.name | string | `"http"` | |
|
||||
| istio.port | int | `80` | |
|
||||
| istio.protocol | string | `"HTTP"` | |
|
||||
| istio.selector | string | `"ingressgateway"` | |
|
||||
| istio.virtualservice.match[0].uri.prefix | string | `"/address/"` | |
|
||||
| istio.virtualservice.match[1].uri.prefix | string | `"/api/"` | |
|
||||
| istio.virtualservice.match[2].uri.prefix | string | `"/batch/"` | |
|
||||
| istio.virtualservice.retries.attempts | int | `5` | |
|
||||
| istio.virtualservice.retries.perTryTimeout | string | `"10s"` | |
|
||||
| istio.virtualservice.timeout | string | `"60s"` | |
|
||||
| jaeger.agentHost | string | `"jaeger-agent.default.svc.cluster.local"` | |
|
||||
| jaeger.agentPort | string | `"6831"` | |
|
||||
| jaeger.disabled | bool | `true` | |
|
||||
| jaeger.endpoint | string | `"http://jaeger-collector.default.svc.cluster.local:14268/api/traces"` | |
|
||||
| jaeger.password | string | `""` | |
|
||||
| jaeger.samplerParam | string | `"1"` | |
|
||||
| jaeger.samplerType | string | `"const"` | |
|
||||
| jaeger.user | string | `""` | |
|
||||
| livenessProbe.failureThreshold | int | `5` | |
|
||||
| livenessProbe.initialDelaySeconds | int | `5` | |
|
||||
| livenessProbe.periodSeconds | int | `30` | |
|
||||
| livenessProbe.successThreshold | int | `1` | |
|
||||
| livenessProbe.timeoutSeconds | int | `5` | |
|
||||
| memberlist.enabled | bool | `true` | |
|
||||
| memberlist.port | int | `7200` | |
|
||||
| memberlist.probeInterval | int | `500` | |
|
||||
| memberlist.selector | string | `"verify-memberlist"` | |
|
||||
| memberlist.suspicionMult | int | `2` | |
|
||||
| memberlist.useAddrRef | bool | `false` | |
|
||||
| nameOverride | string | `""` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podDisruptionBudget.enabled | bool | `false` | |
|
||||
| podDisruptionBudget.minAvailable | int | `1` | |
|
||||
| podLabels | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| prometheusOperator.enabled | bool | `false` | |
|
||||
| prometheusOperator.jobLabel | string | `""` | |
|
||||
| prometheusOperator.podMonitorInterval | string | `"30s"` | |
|
||||
| prometheusOperator.podMonitorSelector | object | `{}` | |
|
||||
| prometheusOperator.podTargetLabels[0] | string | `"country"` | |
|
||||
| readinessProbe.failureThreshold | int | `5` | |
|
||||
| readinessProbe.initialDelaySeconds | int | `5` | |
|
||||
| readinessProbe.periodSeconds | int | `30` | |
|
||||
| readinessProbe.successThreshold | int | `1` | |
|
||||
| readinessProbe.timeoutSeconds | int | `5` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources | object | `{}` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| service.port | int | `3000` | |
|
||||
| service.type | string | `"ClusterIP"` | |
|
||||
| serviceAccount.annotations | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| serviceAccount.name | string | `""` | |
|
||||
| serviceAnnotations | object | `{}` | |
|
||||
| serviceKey | string | `""` | |
|
||||
| serviceLabels | object | `{}` | |
|
||||
| startupProbe.failureThreshold | int | `10` | |
|
||||
| startupProbe.initialDelaySeconds | int | `60` | |
|
||||
| startupProbe.periodSeconds | int | `30` | |
|
||||
| startupProbe.successThreshold | int | `1` | |
|
||||
| startupProbe.timeoutSeconds | int | `5` | |
|
||||
| storage.accessModes[0] | string | `"ReadWriteMany"` | |
|
||||
| storage.capacity | string | `"60Gi"` | |
|
||||
| storage.claimOverride | string | `""` | |
|
||||
| storage.class | string | `"hostpath"` | |
|
||||
| storage.mountPath | string | `""` | |
|
||||
| storage.overrideVolume | bool | `false` | |
|
||||
| storage.path | string | `"/run/desktop/mnt/host/c/loqate/data"` | |
|
||||
| storage.server | string | `""` | |
|
||||
| storage.type | string | `"local"` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| variants | object | `{}` | |
|
||||
| verify.dataset | string | `"row"` | |
|
||||
| verify.premium | bool | `false` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# storage-and-secrets
|
||||
|
||||
  
|
||||
|
||||
Supporting resources (storage, secrets) for the Loqate stack
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# loqate-app
|
||||
|
||||
  
|
||||
|
||||
Helm chart for the Loqate spatial stack
|
||||
|
||||
## Requirements
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| file://charts/installmanager | installmanager | |
|
||||
| file://charts/memberlist | memberlist | |
|
||||
| file://charts/querycoordinator | querycoordinator | |
|
||||
| file://charts/spatial-api | spatial-api | |
|
||||
| file://charts/storage-and-secrets | storage-and-secrets | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| components.installmanager.enabled | bool | `true` | |
|
||||
| components.memberlist.enabled | bool | `true` | |
|
||||
| components.querycoordinator.enabled | bool | `true` | |
|
||||
| components.spatial.enabled | bool | `true` | |
|
||||
| components.storageAndSecrets.enabled | bool | `true` | |
|
||||
| global.affinity | object | `{}` | |
|
||||
| global.commonLabels."reltio.com/app" | string | `"loqate-app"` | |
|
||||
| global.imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| global.license.name | string | `"loqate-license"` | |
|
||||
| global.license.property | string | `"licenseKey"` | |
|
||||
| global.license.refreshInterval | string | `"1m"` | |
|
||||
| global.license.remoteKeyTemplate | string | `"service/loqate/{{ .Values.global.vaultEnv }}/{{ .Release.Namespace }}"` | |
|
||||
| global.loqateIni.configMapName | string | `""` | |
|
||||
| global.loqateIni.content | string | `""` | |
|
||||
| global.loqateIni.key | string | `"loqate.ini"` | |
|
||||
| global.loqateIni.path | string | `""` | |
|
||||
| global.nodeSelector."kubernetes.io/arch" | string | `"amd64"` | |
|
||||
| global.nodeSelector."kubernetes.io/os" | string | `"linux"` | |
|
||||
| global.podLabels | object | `{}` | |
|
||||
| global.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| global.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| global.serviceLabels | object | `{}` | |
|
||||
| global.sharedStorage.accessModes[0] | string | `"ReadWriteMany"` | |
|
||||
| global.sharedStorage.aws.fileSystemId | string | `""` | |
|
||||
| global.sharedStorage.aws.reclaimPolicy | string | `"Retain"` | |
|
||||
| global.sharedStorage.bootstrapperImage | string | `"gcr.io/customer-facing/busybox"` | |
|
||||
| global.sharedStorage.claimName | string | `""` | |
|
||||
| global.sharedStorage.create | bool | `true` | |
|
||||
| global.sharedStorage.folderName | string | `""` | |
|
||||
| global.sharedStorage.mountPath | string | `"/loqate"` | |
|
||||
| global.sharedStorage.size | string | `"500Gi"` | |
|
||||
| global.sharedStorage.storageClass | string | `"efs-sc"` | |
|
||||
| global.syncWaves.installmanager | string | `"20"` | |
|
||||
| global.syncWaves.memberlist | string | `"30"` | |
|
||||
| global.syncWaves.querycoordinator | string | `"40"` | |
|
||||
| global.syncWaves.spatialApi | string | `"30"` | |
|
||||
| global.syncWaves.storageAndSecrets | string | `"10"` | |
|
||||
| global.tolerations | list | `[]` | |
|
||||
| global.vaultEnv | string | `"customers"` | |
|
||||
| installmanager.affinity | object | `{}` | |
|
||||
| installmanager.image.repository | string | `"gcr.io/customer-facing/gbgroup/loqate-verify-install-manager"` | |
|
||||
| installmanager.image.tag | string | `"0.1.0"` | |
|
||||
| installmanager.imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| installmanager.nodeSelector."kubernetes.io/arch" | string | `"amd64"` | |
|
||||
| installmanager.nodeSelector."kubernetes.io/os" | string | `"linux"` | |
|
||||
| installmanager.runId | string | `""` | |
|
||||
| installmanager.storage.claimOverride | string | `""` | |
|
||||
| installmanager.storage.folderName | string | `""` | |
|
||||
| installmanager.storage.mountPath | string | `"/loqate"` | |
|
||||
| installmanager.tolerations | list | `[]` | |
|
||||
| memberlist.app.port | int | `7200` | |
|
||||
| querycoordinator.affinity | object | `{}` | |
|
||||
| querycoordinator.image.repository | string | `"gcr.io/customer-facing/gbgroup/loqate-verify-query-coordinator"` | |
|
||||
| querycoordinator.image.tag | string | `"0.1.0"` | |
|
||||
| querycoordinator.imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| querycoordinator.nodeSelector."kubernetes.io/arch" | string | `"amd64"` | |
|
||||
| querycoordinator.nodeSelector."kubernetes.io/os" | string | `"linux"` | |
|
||||
| querycoordinator.tolerations | list | `[]` | |
|
||||
| spatial-api.affinity | object | `{}` | |
|
||||
| spatial-api.image.repository | string | `"gcr.io/customer-facing/gbgroup/loqate-verify-spatial-api"` | |
|
||||
| spatial-api.image.tag | string | `"0.1.0"` | |
|
||||
| spatial-api.imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| spatial-api.nodeSelector."kubernetes.io/arch" | string | `"amd64"` | |
|
||||
| spatial-api.nodeSelector."kubernetes.io/os" | string | `"linux"` | |
|
||||
| spatial-api.storage.claimOverride | string | `""` | |
|
||||
| spatial-api.storage.folderName | string | `""` | |
|
||||
| spatial-api.storage.mountPath | string | `"/loqate"` | |
|
||||
| spatial-api.tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# installmanager
|
||||
|
||||
  
|
||||
|
||||
Download and setup loqate data using installmanager job
|
||||
|
||||
**Homepage:** <https://www.loqate.com/en-gb/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| GBG | <help@gbgplc.com> | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| annotations | object | `{}` | |
|
||||
| app.dataFolder | string | `""` | |
|
||||
| app.downloadFolder | string | `""` | |
|
||||
| app.downloadOption | string | `""` | |
|
||||
| app.installNeeded | string | `""` | |
|
||||
| app.licenseKey | string | `"EXAMPLEL-ICEN-SEKE-YGOE-SHERE0000000"` | |
|
||||
| app.products | string | `"ALL"` | |
|
||||
| app.referenceDatasetCacheSize | int | `7` | |
|
||||
| app.referencePageCacheSize | int | `12` | |
|
||||
| app.showLog | string | `""` | |
|
||||
| createSecret | bool | `true` | |
|
||||
| image.pullPolicy | string | `"Always"` | |
|
||||
| image.repository | string | `"gcr.io/customer-facing/gbgroup/loqate-verify-install-manager"` | |
|
||||
| image.tag | string | `"latest"` | |
|
||||
| imageCredentials.password | string | `""` | |
|
||||
| imageCredentials.registry | string | `"https://index.docker.io/v1/"` | |
|
||||
| imageCredentials.username | string | `"_json_key"` | |
|
||||
| imagePullSecrets | list | `[]` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podLabels | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| resources.limits.cpu | string | `"175m"` | |
|
||||
| resources.limits.memory | string | `"1200Mi"` | |
|
||||
| resources.requests.cpu | string | `"150m"` | |
|
||||
| resources.requests.memory | string | `"1000Mi"` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| serviceKey | string | `""` | |
|
||||
| storage.accessModes[0] | string | `"ReadWriteMany"` | |
|
||||
| storage.capacity | string | `"60Gi"` | |
|
||||
| storage.claimOverride | string | `""` | |
|
||||
| storage.class | string | `"hostpath"` | |
|
||||
| storage.mountPath | string | `""` | |
|
||||
| storage.overrideVolume | bool | `false` | |
|
||||
| storage.path | string | `"/run/desktop/mnt/host/c/loqate/data"` | |
|
||||
| storage.server | string | `""` | |
|
||||
| storage.type | string | `"local"` | |
|
||||
| tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# memberlist
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| app.port | int | `7200` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| memberlist.selector | string | `"verify-memberlist"` | |
|
||||
| nameOverride | string | `""` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| securityContext | string | `nil` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,109 @@
|
||||
# mdm-app
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for managing Kubernetes MDM Apps Deployments
|
||||
|
||||
**Homepage:** <https://www.reltio.com/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Reltio | <sai.krishna@reltio.com> | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `"both"` | |
|
||||
| baseRegistryURL | string | `"gcr.io/customer-facing"` | |
|
||||
| cloudProvider | string | `"aws"` | |
|
||||
| clusterDomain | string | `"cluster.local"` | |
|
||||
| clusterName | string | `""` | |
|
||||
| commonAnnotations | object | `{}` | |
|
||||
| commonJobLabels."reltio.app/type" | string | `"mdm-batch-job"` | |
|
||||
| commonLabels."reltio.app/type" | string | `"mdm-app"` | |
|
||||
| commonPodLabels | object | `{}` | |
|
||||
| domain | string | `"cloud.reltio.com"` | |
|
||||
| efsClaimHeapDumps | string | `""` | |
|
||||
| enableMdmAppServices | list | `[]` | |
|
||||
| environmentType | string | `"production"` | |
|
||||
| etalonsubDomain | string | `"etalon"` | |
|
||||
| externalServices.es.externalName | string | `"es.{{ .Release.Namespace }}.internal.reltio.com"` | |
|
||||
| externalServices.es.port | int | `9200` | |
|
||||
| externalServices.es.protocol | string | `"TCP"` | |
|
||||
| externalServices.es.targetPort | int | `9200` | |
|
||||
| gcrregcred.name | string | `"gcrregcred"` | |
|
||||
| gcrregcred.refreshInterval | string | `"15s"` | |
|
||||
| gcrregcred.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| gcrregcred.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| gcrregcred.target.type | string | `"kubernetes.io/dockerconfigjson"` | |
|
||||
| global.argoStrategy | string | `"bluegreen"` | |
|
||||
| global.haEnabled | bool | `false` | |
|
||||
| global.horizontalPodScaling.hpaEnabled | bool | `true` | |
|
||||
| global.horizontalPodScaling.hpaMaxReplicas | int | `5` | |
|
||||
| global.horizontalPodScaling.hpaScaleUpFreq | int | `45` | |
|
||||
| global.horizontalPodScaling.scalingDownWindowSeconds | int | `300` | |
|
||||
| global.horizontalPodScaling.scalingUpWindowSeconds | int | `20` | |
|
||||
| global.image.enabled | bool | `false` | |
|
||||
| global.image.tag | string | `"1.0.0"` | |
|
||||
| global.nfsMount.enabled | bool | `true` | |
|
||||
| global.nfsMount.storageClass.name | string | `""` | |
|
||||
| global.pdb.enabled | bool | `false` | |
|
||||
| global.pdb.minAvailable | int | `1` | |
|
||||
| global.refreshInterval | string | `"15s"` | |
|
||||
| global.releaseChar | string | `"b"` | |
|
||||
| global.replicas | int | `1` | |
|
||||
| global.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| global.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| global.target.type | string | `"Opaque"` | |
|
||||
| global.topologySpreadConstraints[0].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[0].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[0].topologyKey | string | `"kubernetes.io/hostname"` | |
|
||||
| global.topologySpreadConstraints[0].whenUnsatisfiable | string | `"ScheduleAnyway"` | |
|
||||
| global.topologySpreadConstraints[1].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[1].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[1].topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| global.topologySpreadConstraints[1].whenUnsatisfiable | string | `"DoNotSchedule"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxSurge | string | `"65%"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxUnavailable | string | `"35%"` | |
|
||||
| global.upgradeStrategy.type | string | `"RollingUpdate"` | |
|
||||
| global.vault.vaultSecretRefName | string | `"service/data/vaultsecret-internal"` | |
|
||||
| global.vaultSecretRefName | string | `"vault-secret"` | |
|
||||
| helmTimeout | int | `600` | |
|
||||
| hooks.statusCheck.credentialsSecretRefName | string | `"status-check-credentials"` | |
|
||||
| hooks.statusCheck.enabled | bool | `true` | |
|
||||
| hooks.statusCheck.oauthTokenPersistentVolumeClaimRefName | string | `"status-check-oauth-token"` | |
|
||||
| hooks.statusCheck.slackWebhook | string | `""` | |
|
||||
| imagePullPolicy | string | `"IfNotPresent"` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| ingress.className | string | `""` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hostname | string | `"prod.reltio.local"` | |
|
||||
| ingress.port | int | `80` | |
|
||||
| ingress.protocol | string | `"http"` | |
|
||||
| jobAnnotations."cluster-autoscaler.kubernetes.io/safe-to-evict" | string | `"false"` | |
|
||||
| mdmAppServices | object | `{}` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| persistent.aws.efsID | string | `""` | |
|
||||
| persistent.aws.storageClass | string | `"efs-pv"` | |
|
||||
| persistent.efsEnabled | bool | `false` | |
|
||||
| persistent.mdmAppStorage | string | `"25Gi"` | |
|
||||
| region | string | `""` | |
|
||||
| reltioDomains | string | `".reltio.com,.reltiocn.cn"` | |
|
||||
| rootDomain | string | `"reltio.com"` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `10000` | |
|
||||
| serviceMesh.enabled | bool | `false` | |
|
||||
| serviceMesh.name | string | `""` | |
|
||||
| servicesConfigs | object | `{}` | |
|
||||
| servicesValues | object | `{}` | |
|
||||
| sharedCommonConfigs | object | `{}` | |
|
||||
| spotinstPercent | string | `"100"` | |
|
||||
| terminationGracePeriodSeconds | int | `600` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| vaultEnv | string | `"customers"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,757 @@
|
||||
# milvus
|
||||
|
||||
 
|
||||
|
||||
Milvus is an open-source vector database built to power AI applications and vector similarity search.
|
||||
|
||||
**Homepage:** <https://milvus.io/>
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://zilliztech.github.io/milvus-helm/>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `^1.10.0-0`
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| annotations | object | `{}` | |
|
||||
| attu.annotations | object | `{}` | |
|
||||
| attu.containerSecurityContext | object | `{}` | |
|
||||
| attu.enabled | bool | `false` | |
|
||||
| attu.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| attu.image.repository | string | `"zilliz/attu"` | |
|
||||
| attu.image.tag | string | `"v2.5.3"` | |
|
||||
| attu.ingress.annotations | object | `{}` | |
|
||||
| attu.ingress.enabled | bool | `false` | |
|
||||
| attu.ingress.hosts[0] | string | `"milvus-attu.local"` | |
|
||||
| attu.ingress.ingressClassName | string | `""` | |
|
||||
| attu.ingress.labels | object | `{}` | |
|
||||
| attu.ingress.tls | list | `[]` | |
|
||||
| attu.name | string | `"attu"` | |
|
||||
| attu.podLabels | object | `{}` | |
|
||||
| attu.resources | object | `{}` | |
|
||||
| attu.route.annotations | object | `{}` | |
|
||||
| attu.route.enabled | bool | `false` | |
|
||||
| attu.route.host | string | `""` | |
|
||||
| attu.route.labels | object | `{}` | |
|
||||
| attu.route.tls.insecureEdgeTerminationPolicy | string | `"Redirect"` | |
|
||||
| attu.route.tls.termination | string | `"edge"` | |
|
||||
| attu.securityContext | object | `{}` | |
|
||||
| attu.service.annotations | object | `{}` | |
|
||||
| attu.service.labels | object | `{}` | |
|
||||
| attu.service.port | int | `3000` | |
|
||||
| attu.service.type | string | `"ClusterIP"` | |
|
||||
| cdc.affinity | object | `{}` | |
|
||||
| cdc.annotations | object | `{}` | |
|
||||
| cdc.containerSecurityContext | object | `{}` | |
|
||||
| cdc.enabled | bool | `false` | |
|
||||
| cdc.extraEnv | list | `[]` | |
|
||||
| cdc.heaptrack.enabled | bool | `false` | |
|
||||
| cdc.nodeSelector | object | `{}` | |
|
||||
| cdc.profiling.enabled | bool | `false` | |
|
||||
| cdc.replicas | int | `1` | |
|
||||
| cdc.resources | object | `{}` | |
|
||||
| cdc.securityContext | object | `{}` | |
|
||||
| cdc.strategy | object | `{}` | |
|
||||
| cdc.tolerations | list | `[]` | |
|
||||
| cdc.topologySpreadConstraints | list | `[]` | |
|
||||
| cluster.enabled | bool | `true` | |
|
||||
| containerSecurityContext | object | `{}` | |
|
||||
| customConfigMap | string | `""` | |
|
||||
| dataCoordinator.activeStandby.enabled | bool | `false` | |
|
||||
| dataCoordinator.affinity | object | `{}` | |
|
||||
| dataCoordinator.annotations | object | `{}` | |
|
||||
| dataCoordinator.containerSecurityContext | object | `{}` | |
|
||||
| dataCoordinator.enabled | bool | `false` | |
|
||||
| dataCoordinator.extraEnv | list | `[]` | |
|
||||
| dataCoordinator.heaptrack.enabled | bool | `false` | |
|
||||
| dataCoordinator.nodeSelector | object | `{}` | |
|
||||
| dataCoordinator.profiling.enabled | bool | `false` | |
|
||||
| dataCoordinator.replicas | int | `1` | |
|
||||
| dataCoordinator.resources | object | `{}` | |
|
||||
| dataCoordinator.securityContext | object | `{}` | |
|
||||
| dataCoordinator.service.annotations | object | `{}` | |
|
||||
| dataCoordinator.service.clusterIP | string | `""` | |
|
||||
| dataCoordinator.service.labels | object | `{}` | |
|
||||
| dataCoordinator.service.port | int | `13333` | |
|
||||
| dataCoordinator.strategy | object | `{}` | |
|
||||
| dataCoordinator.tolerations | list | `[]` | |
|
||||
| dataCoordinator.topologySpreadConstraints | list | `[]` | |
|
||||
| dataNode.affinity | object | `{}` | |
|
||||
| dataNode.annotations | object | `{}` | |
|
||||
| dataNode.containerSecurityContext | object | `{}` | |
|
||||
| dataNode.enabled | bool | `true` | |
|
||||
| dataNode.extraEnv | list | `[]` | |
|
||||
| dataNode.heaptrack.enabled | bool | `false` | |
|
||||
| dataNode.hpa.cpuUtilization | int | `40` | |
|
||||
| dataNode.hpa.enabled | bool | `false` | |
|
||||
| dataNode.hpa.maxReplicas | int | `5` | |
|
||||
| dataNode.hpa.minReplicas | int | `1` | |
|
||||
| dataNode.nodeSelector | object | `{}` | |
|
||||
| dataNode.profiling.enabled | bool | `false` | |
|
||||
| dataNode.replicas | int | `1` | |
|
||||
| dataNode.resources | object | `{}` | |
|
||||
| dataNode.securityContext | object | `{}` | |
|
||||
| dataNode.strategy | object | `{}` | |
|
||||
| dataNode.tolerations | list | `[]` | |
|
||||
| dataNode.topologySpreadConstraints | list | `[]` | |
|
||||
| etcd.auth.rbac.create | bool | `false` | |
|
||||
| etcd.auth.rbac.enabled | bool | `false` | |
|
||||
| etcd.auth.token.enabled | bool | `false` | |
|
||||
| etcd.autoCompactionMode | string | `"revision"` | |
|
||||
| etcd.autoCompactionRetention | string | `"1000"` | |
|
||||
| etcd.enabled | bool | `true` | |
|
||||
| etcd.extraEnvVars[0].name | string | `"ETCD_QUOTA_BACKEND_BYTES"` | |
|
||||
| etcd.extraEnvVars[0].value | string | `"4294967296"` | |
|
||||
| etcd.extraEnvVars[1].name | string | `"ETCD_HEARTBEAT_INTERVAL"` | |
|
||||
| etcd.extraEnvVars[1].value | string | `"500"` | |
|
||||
| etcd.extraEnvVars[2].name | string | `"ETCD_ELECTION_TIMEOUT"` | |
|
||||
| etcd.extraEnvVars[2].value | string | `"2500"` | |
|
||||
| etcd.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| etcd.image.repository | string | `"milvusdb/etcd"` | |
|
||||
| etcd.image.tag | string | `"3.5.18-r1"` | |
|
||||
| etcd.livenessProbe.enabled | bool | `true` | |
|
||||
| etcd.livenessProbe.timeoutSeconds | int | `10` | |
|
||||
| etcd.name | string | `"etcd"` | |
|
||||
| etcd.pdb.create | bool | `false` | |
|
||||
| etcd.persistence.accessMode | string | `"ReadWriteOnce"` | |
|
||||
| etcd.persistence.enabled | bool | `true` | |
|
||||
| etcd.persistence.size | string | `"10Gi"` | |
|
||||
| etcd.persistence.storageClass | string | `nil` | |
|
||||
| etcd.readinessProbe.enabled | bool | `true` | |
|
||||
| etcd.readinessProbe.periodSeconds | int | `20` | |
|
||||
| etcd.readinessProbe.timeoutSeconds | int | `10` | |
|
||||
| etcd.replicaCount | int | `3` | |
|
||||
| etcd.service.peerPort | int | `2380` | |
|
||||
| etcd.service.port | int | `2379` | |
|
||||
| etcd.service.type | string | `"ClusterIP"` | |
|
||||
| externalEtcd.enabled | bool | `false` | |
|
||||
| externalEtcd.endpoints[0] | string | `"localhost:2379"` | |
|
||||
| externalGcs.bucketName | string | `""` | |
|
||||
| externalKafka.brokerList | string | `"localhost:9092"` | |
|
||||
| externalKafka.enabled | bool | `false` | |
|
||||
| externalKafka.sasl.mechanisms | string | `"PLAIN"` | |
|
||||
| externalKafka.sasl.password | string | `""` | |
|
||||
| externalKafka.sasl.username | string | `""` | |
|
||||
| externalKafka.securityProtocol | string | `"SASL_SSL"` | |
|
||||
| externalPulsar.authParams | string | `""` | |
|
||||
| externalPulsar.authPlugin | string | `""` | |
|
||||
| externalPulsar.enabled | bool | `false` | |
|
||||
| externalPulsar.host | string | `"localhost"` | |
|
||||
| externalPulsar.maxMessageSize | string | `"5242880"` | |
|
||||
| externalPulsar.namespace | string | `"default"` | |
|
||||
| externalPulsar.port | int | `6650` | |
|
||||
| externalPulsar.tenant | string | `"public"` | |
|
||||
| externalS3.accessKey | string | `""` | |
|
||||
| externalS3.bucketName | string | `""` | |
|
||||
| externalS3.cloudProvider | string | `"aws"` | |
|
||||
| externalS3.enabled | bool | `false` | |
|
||||
| externalS3.host | string | `""` | |
|
||||
| externalS3.iamEndpoint | string | `""` | |
|
||||
| externalS3.port | string | `""` | |
|
||||
| externalS3.region | string | `""` | |
|
||||
| externalS3.rootPath | string | `""` | |
|
||||
| externalS3.secretKey | string | `""` | |
|
||||
| externalS3.useIAM | bool | `false` | |
|
||||
| externalS3.useSSL | bool | `false` | |
|
||||
| externalS3.useVirtualHost | bool | `false` | |
|
||||
| extraConfigFiles."user.yaml" | string | `"# For example enable rest http for milvus proxy\n# proxy:\n# http:\n# enabled: true\n# maxUserNum: 100\n# maxRoleNum: 10\n## Enable tlsMode and set the tls cert and key\n# tls:\n# serverPemPath: /etc/milvus/certs/tls.crt\n# serverKeyPath: /etc/milvus/certs/tls.key\n# common:\n# security:\n# tlsMode: 1\n\n"` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| heaptrack.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| heaptrack.image.repository | string | `"milvusdb/heaptrack"` | |
|
||||
| heaptrack.image.tag | string | `"v0.1.0"` | |
|
||||
| image.all.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| image.all.repository | string | `"gcr.io/customer-facing/milvus-db"` | |
|
||||
| image.all.tag | string | `"v2.6.6"` | |
|
||||
| indexCoordinator.activeStandby.enabled | bool | `false` | |
|
||||
| indexCoordinator.affinity | object | `{}` | |
|
||||
| indexCoordinator.annotations | object | `{}` | |
|
||||
| indexCoordinator.containerSecurityContext | object | `{}` | |
|
||||
| indexCoordinator.enabled | bool | `false` | |
|
||||
| indexCoordinator.extraEnv | list | `[]` | |
|
||||
| indexCoordinator.heaptrack.enabled | bool | `false` | |
|
||||
| indexCoordinator.nodeSelector | object | `{}` | |
|
||||
| indexCoordinator.profiling.enabled | bool | `false` | |
|
||||
| indexCoordinator.replicas | int | `1` | |
|
||||
| indexCoordinator.resources | object | `{}` | |
|
||||
| indexCoordinator.securityContext | object | `{}` | |
|
||||
| indexCoordinator.service.annotations | object | `{}` | |
|
||||
| indexCoordinator.service.clusterIP | string | `""` | |
|
||||
| indexCoordinator.service.labels | object | `{}` | |
|
||||
| indexCoordinator.service.port | int | `31000` | |
|
||||
| indexCoordinator.strategy | object | `{}` | |
|
||||
| indexCoordinator.tolerations | list | `[]` | |
|
||||
| indexCoordinator.topologySpreadConstraints | list | `[]` | |
|
||||
| indexNode.affinity | object | `{}` | |
|
||||
| indexNode.annotations | object | `{}` | |
|
||||
| indexNode.containerSecurityContext | object | `{}` | |
|
||||
| indexNode.disk.enabled | bool | `true` | |
|
||||
| indexNode.disk.size.enabled | bool | `false` | |
|
||||
| indexNode.enabled | bool | `false` | |
|
||||
| indexNode.extraEnv | list | `[]` | |
|
||||
| indexNode.heaptrack.enabled | bool | `false` | |
|
||||
| indexNode.hpa.cpuUtilization | int | `40` | |
|
||||
| indexNode.hpa.enabled | bool | `false` | |
|
||||
| indexNode.hpa.maxReplicas | int | `5` | |
|
||||
| indexNode.hpa.minReplicas | int | `1` | |
|
||||
| indexNode.nodeSelector | object | `{}` | |
|
||||
| indexNode.profiling.enabled | bool | `false` | |
|
||||
| indexNode.replicas | int | `1` | |
|
||||
| indexNode.resources | object | `{}` | |
|
||||
| indexNode.runtimeClassName | string | `""` | |
|
||||
| indexNode.securityContext | object | `{}` | |
|
||||
| indexNode.strategy | object | `{}` | |
|
||||
| indexNode.tolerations | list | `[]` | |
|
||||
| indexNode.topologySpreadConstraints | list | `[]` | |
|
||||
| ingress.annotations."nginx.ingress.kubernetes.io/backend-protocol" | string | `"GRPC"` | |
|
||||
| ingress.annotations."nginx.ingress.kubernetes.io/listen-ports-ssl" | string | `"[19530]"` | |
|
||||
| ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" | string | `"4m"` | |
|
||||
| ingress.annotations."nginx.ingress.kubernetes.io/ssl-redirect" | string | `"true"` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.ingressClassName | string | `""` | |
|
||||
| ingress.labels | object | `{}` | |
|
||||
| ingress.rules[0].host | string | `"milvus-example.local"` | |
|
||||
| ingress.rules[0].path | string | `"/"` | |
|
||||
| ingress.rules[0].pathType | string | `"Prefix"` | |
|
||||
| ingress.tls | list | `[]` | |
|
||||
| kafka.defaultReplicationFactor | int | `3` | |
|
||||
| kafka.enabled | bool | `false` | |
|
||||
| kafka.extraEnvVars[0].name | string | `"KAFKA_CFG_MAX_PARTITION_FETCH_BYTES"` | |
|
||||
| kafka.extraEnvVars[0].value | string | `"5242880"` | |
|
||||
| kafka.extraEnvVars[1].name | string | `"KAFKA_CFG_MAX_REQUEST_SIZE"` | |
|
||||
| kafka.extraEnvVars[1].value | string | `"5242880"` | |
|
||||
| kafka.extraEnvVars[2].name | string | `"KAFKA_CFG_REPLICA_FETCH_MAX_BYTES"` | |
|
||||
| kafka.extraEnvVars[2].value | string | `"10485760"` | |
|
||||
| kafka.extraEnvVars[3].name | string | `"KAFKA_CFG_FETCH_MESSAGE_MAX_BYTES"` | |
|
||||
| kafka.extraEnvVars[3].value | string | `"5242880"` | |
|
||||
| kafka.extraEnvVars[4].name | string | `"KAFKA_CFG_LOG_ROLL_HOURS"` | |
|
||||
| kafka.extraEnvVars[4].value | string | `"24"` | |
|
||||
| kafka.heapOpts | string | `"-Xmx4096m -Xms4096m"` | |
|
||||
| kafka.image.repository | string | `"bitnamilegacy/kafka"` | |
|
||||
| kafka.image.tag | string | `"3.1.0"` | |
|
||||
| kafka.logRetentionBytes | string | `"_-1"` | |
|
||||
| kafka.logRetentionHours | int | `168` | |
|
||||
| kafka.maxMessageBytes | string | `"_10485760"` | |
|
||||
| kafka.metrics.jmx.enabled | bool | `false` | |
|
||||
| kafka.metrics.jmx.image.repository | string | `"bitnamilegacy/jmx-exporter"` | |
|
||||
| kafka.metrics.jmx.image.tag | string | `"0.16.1"` | |
|
||||
| kafka.metrics.kafka.enabled | bool | `false` | |
|
||||
| kafka.metrics.kafka.image.repository | string | `"bitnamilegacy/kafka-exporter-archived"` | |
|
||||
| kafka.metrics.kafka.image.tag | string | `"1.4.2"` | |
|
||||
| kafka.metrics.serviceMonitor.enabled | bool | `false` | |
|
||||
| kafka.name | string | `"kafka"` | |
|
||||
| kafka.offsetsTopicReplicationFactor | int | `3` | |
|
||||
| kafka.pdb.create | bool | `false` | |
|
||||
| kafka.persistence.accessMode | string | `"ReadWriteOnce"` | |
|
||||
| kafka.persistence.enabled | bool | `true` | |
|
||||
| kafka.persistence.size | string | `"300Gi"` | |
|
||||
| kafka.persistence.storageClass | string | `nil` | |
|
||||
| kafka.replicaCount | int | `3` | |
|
||||
| kafka.service.ports.client | int | `9092` | |
|
||||
| kafka.service.type | string | `"ClusterIP"` | |
|
||||
| kafka.startupProbe.enabled | bool | `true` | |
|
||||
| kafka.terminationGracePeriodSeconds | string | `"90"` | |
|
||||
| kafka.zookeeper.enabled | bool | `true` | |
|
||||
| kafka.zookeeper.image.repository | string | `"bitnamilegacy/zookeeper"` | |
|
||||
| kafka.zookeeper.image.tag | string | `"3.7.0"` | |
|
||||
| kafka.zookeeper.replicaCount | int | `3` | |
|
||||
| labels | object | `{}` | |
|
||||
| livenessProbe.enabled | bool | `true` | |
|
||||
| livenessProbe.failureThreshold | int | `5` | |
|
||||
| livenessProbe.initialDelaySeconds | int | `90` | |
|
||||
| livenessProbe.periodSeconds | int | `30` | |
|
||||
| livenessProbe.successThreshold | int | `1` | |
|
||||
| livenessProbe.timeoutSeconds | int | `5` | |
|
||||
| log.file.maxAge | int | `10` | |
|
||||
| log.file.maxBackups | int | `20` | |
|
||||
| log.file.maxSize | int | `300` | |
|
||||
| log.format | string | `"text"` | |
|
||||
| log.level | string | `"info"` | |
|
||||
| log.persistence.annotations."helm.sh/resource-policy" | string | `"keep"` | |
|
||||
| log.persistence.enabled | bool | `false` | |
|
||||
| log.persistence.mountPath | string | `"/milvus/logs"` | |
|
||||
| log.persistence.persistentVolumeClaim.accessModes | string | `"ReadWriteMany"` | |
|
||||
| log.persistence.persistentVolumeClaim.existingClaim | string | `""` | |
|
||||
| log.persistence.persistentVolumeClaim.size | string | `"10Gi"` | |
|
||||
| log.persistence.persistentVolumeClaim.storageClass | string | `nil` | |
|
||||
| log.persistence.persistentVolumeClaim.subPath | string | `""` | |
|
||||
| metrics.enabled | bool | `true` | |
|
||||
| metrics.serviceMonitor.additionalLabels | object | `{}` | |
|
||||
| metrics.serviceMonitor.enabled | bool | `false` | |
|
||||
| metrics.serviceMonitor.interval | string | `"30s"` | |
|
||||
| metrics.serviceMonitor.scrapeTimeout | string | `"10s"` | |
|
||||
| minio.accessKey | string | `"minioadmin"` | |
|
||||
| minio.bucketName | string | `"milvus-bucket"` | |
|
||||
| minio.enabled | bool | `false` | |
|
||||
| minio.existingSecret | string | `""` | |
|
||||
| minio.iamEndpoint | string | `""` | |
|
||||
| minio.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| minio.image.tag | string | `"RELEASE.2024-12-18T13-15-44Z"` | |
|
||||
| minio.livenessProbe.enabled | bool | `true` | |
|
||||
| minio.livenessProbe.failureThreshold | int | `5` | |
|
||||
| minio.livenessProbe.initialDelaySeconds | int | `5` | |
|
||||
| minio.livenessProbe.periodSeconds | int | `5` | |
|
||||
| minio.livenessProbe.successThreshold | int | `1` | |
|
||||
| minio.livenessProbe.timeoutSeconds | int | `5` | |
|
||||
| minio.mode | string | `"distributed"` | |
|
||||
| minio.name | string | `"minio"` | |
|
||||
| minio.persistence.accessMode | string | `"ReadWriteOnce"` | |
|
||||
| minio.persistence.enabled | bool | `true` | |
|
||||
| minio.persistence.existingClaim | string | `""` | |
|
||||
| minio.persistence.size | string | `"500Gi"` | |
|
||||
| minio.persistence.storageClass | string | `nil` | |
|
||||
| minio.podDisruptionBudget.enabled | bool | `false` | |
|
||||
| minio.readinessProbe.enabled | bool | `true` | |
|
||||
| minio.readinessProbe.failureThreshold | int | `5` | |
|
||||
| minio.readinessProbe.initialDelaySeconds | int | `5` | |
|
||||
| minio.readinessProbe.periodSeconds | int | `5` | |
|
||||
| minio.readinessProbe.successThreshold | int | `1` | |
|
||||
| minio.readinessProbe.timeoutSeconds | int | `1` | |
|
||||
| minio.region | string | `""` | |
|
||||
| minio.resources.requests.memory | string | `"2Gi"` | |
|
||||
| minio.rootPath | string | `"file"` | |
|
||||
| minio.secretKey | string | `"minioadmin"` | |
|
||||
| minio.service.port | int | `9000` | |
|
||||
| minio.service.type | string | `"ClusterIP"` | |
|
||||
| minio.startupProbe.enabled | bool | `true` | |
|
||||
| minio.startupProbe.failureThreshold | int | `60` | |
|
||||
| minio.startupProbe.initialDelaySeconds | int | `0` | |
|
||||
| minio.startupProbe.periodSeconds | int | `10` | |
|
||||
| minio.startupProbe.successThreshold | int | `1` | |
|
||||
| minio.startupProbe.timeoutSeconds | int | `5` | |
|
||||
| minio.useIAM | bool | `false` | |
|
||||
| minio.useVirtualHost | bool | `false` | |
|
||||
| mixCoordinator.activeStandby.enabled | bool | `false` | |
|
||||
| mixCoordinator.affinity | object | `{}` | |
|
||||
| mixCoordinator.annotations | object | `{}` | |
|
||||
| mixCoordinator.containerSecurityContext | object | `{}` | |
|
||||
| mixCoordinator.enabled | bool | `true` | |
|
||||
| mixCoordinator.extraEnv | list | `[]` | |
|
||||
| mixCoordinator.heaptrack.enabled | bool | `false` | |
|
||||
| mixCoordinator.nodeSelector | object | `{}` | |
|
||||
| mixCoordinator.profiling.enabled | bool | `false` | |
|
||||
| mixCoordinator.replicas | int | `1` | |
|
||||
| mixCoordinator.resources | object | `{}` | |
|
||||
| mixCoordinator.securityContext | object | `{}` | |
|
||||
| mixCoordinator.service.annotations | object | `{}` | |
|
||||
| mixCoordinator.service.clusterIP | string | `""` | |
|
||||
| mixCoordinator.service.labels | object | `{}` | |
|
||||
| mixCoordinator.strategy | object | `{}` | |
|
||||
| mixCoordinator.tolerations | list | `[]` | |
|
||||
| mixCoordinator.topologySpreadConstraints | list | `[]` | |
|
||||
| nameOverride | string | `""` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| proxy.affinity | object | `{}` | |
|
||||
| proxy.annotations | object | `{}` | |
|
||||
| proxy.containerSecurityContext | object | `{}` | |
|
||||
| proxy.enabled | bool | `true` | |
|
||||
| proxy.extraEnv | list | `[]` | |
|
||||
| proxy.heaptrack.enabled | bool | `false` | |
|
||||
| proxy.hpa.cpuUtilization | int | `40` | |
|
||||
| proxy.hpa.enabled | bool | `false` | |
|
||||
| proxy.hpa.maxReplicas | int | `5` | |
|
||||
| proxy.hpa.minReplicas | int | `1` | |
|
||||
| proxy.http.debugMode.enabled | bool | `false` | |
|
||||
| proxy.http.enabled | bool | `true` | |
|
||||
| proxy.nodeSelector | object | `{}` | |
|
||||
| proxy.profiling.enabled | bool | `false` | |
|
||||
| proxy.replicas | int | `1` | |
|
||||
| proxy.resources | object | `{}` | |
|
||||
| proxy.securityContext | object | `{}` | |
|
||||
| proxy.strategy | object | `{}` | |
|
||||
| proxy.tls.enabled | bool | `false` | |
|
||||
| proxy.tolerations | list | `[]` | |
|
||||
| proxy.topologySpreadConstraints | list | `[]` | |
|
||||
| pulsar.affinity.anti_affinity | bool | `false` | |
|
||||
| pulsar.autorecovery.resources.requests.cpu | int | `1` | |
|
||||
| pulsar.autorecovery.resources.requests.memory | string | `"512Mi"` | |
|
||||
| pulsar.bookkeeper.configData.PULSAR_GC | string | `"-Dio.netty.leakDetectionLevel=disabled -Dio.netty.recycler.linkCapacity=1024 -XX:+UseG1GC -XX:MaxGCPauseMillis=10 -XX:+ParallelRefProcEnabled -XX:+UnlockExperimentalVMOptions -XX:+DoEscapeAnalysis -XX:ParallelGCThreads=32 -XX:ConcGCThreads=32 -XX:G1NewSizePercent=50 -XX:+DisableExplicitGC -XX:-ResizePLAB -XX:+ExitOnOutOfMemoryError -XX:+PerfDisableSharedMem -XX:+PrintGCDetails\n"` | |
|
||||
| pulsar.bookkeeper.configData.PULSAR_MEM | string | `"-Xms4096m -Xmx4096m -XX:MaxDirectMemorySize=8192m\n"` | |
|
||||
| pulsar.bookkeeper.configData.nettyMaxFrameSizeBytes | string | `"104867840"` | |
|
||||
| pulsar.bookkeeper.pdb.usePolicy | bool | `false` | |
|
||||
| pulsar.bookkeeper.replicaCount | int | `3` | |
|
||||
| pulsar.bookkeeper.resources.requests.cpu | int | `1` | |
|
||||
| pulsar.bookkeeper.resources.requests.memory | string | `"2048Mi"` | |
|
||||
| pulsar.bookkeeper.volumes.journal.name | string | `"journal"` | |
|
||||
| pulsar.bookkeeper.volumes.journal.size | string | `"100Gi"` | |
|
||||
| pulsar.bookkeeper.volumes.ledgers.name | string | `"ledgers"` | |
|
||||
| pulsar.bookkeeper.volumes.ledgers.size | string | `"200Gi"` | |
|
||||
| pulsar.broker.component | string | `"broker"` | |
|
||||
| pulsar.broker.configData.PULSAR_GC | string | `"-Dio.netty.leakDetectionLevel=disabled -Dio.netty.recycler.linkCapacity=1024 -XX:+ParallelRefProcEnabled -XX:+UnlockExperimentalVMOptions -XX:+DoEscapeAnalysis -XX:ParallelGCThreads=32 -XX:ConcGCThreads=32 -XX:G1NewSizePercent=50 -XX:+DisableExplicitGC -XX:-ResizePLAB -XX:+ExitOnOutOfMemoryError\n"` | |
|
||||
| pulsar.broker.configData.PULSAR_MEM | string | `"-Xms4096m -Xmx4096m -XX:MaxDirectMemorySize=8192m\n"` | |
|
||||
| pulsar.broker.configData.backlogQuotaDefaultLimitGB | string | `"8"` | |
|
||||
| pulsar.broker.configData.backlogQuotaDefaultRetentionPolicy | string | `"producer_request_hold"` | |
|
||||
| pulsar.broker.configData.defaultRetentionSizeInMB | string | `"-1"` | |
|
||||
| pulsar.broker.configData.defaultRetentionTimeInMinutes | string | `"10080"` | |
|
||||
| pulsar.broker.configData.maxMessageSize | string | `"104857600"` | |
|
||||
| pulsar.broker.configData.subscriptionExpirationTimeMinutes | string | `"3"` | |
|
||||
| pulsar.broker.configData.ttlDurationDefaultInSeconds | string | `"259200"` | |
|
||||
| pulsar.broker.pdb.usePolicy | bool | `false` | |
|
||||
| pulsar.broker.podMonitor.enabled | bool | `false` | |
|
||||
| pulsar.broker.replicaCount | int | `1` | |
|
||||
| pulsar.broker.resources.requests.cpu | float | `1.5` | |
|
||||
| pulsar.broker.resources.requests.memory | string | `"4096Mi"` | |
|
||||
| pulsar.components.autorecovery | bool | `true` | |
|
||||
| pulsar.components.bookkeeper | bool | `true` | |
|
||||
| pulsar.components.broker | bool | `true` | |
|
||||
| pulsar.components.functions | bool | `false` | |
|
||||
| pulsar.components.proxy | bool | `true` | |
|
||||
| pulsar.components.pulsar_manager | bool | `false` | |
|
||||
| pulsar.components.toolset | bool | `false` | |
|
||||
| pulsar.components.zookeeper | bool | `true` | |
|
||||
| pulsar.enabled | bool | `false` | |
|
||||
| pulsar.fullnameOverride | string | `""` | |
|
||||
| pulsar.images.autorecovery.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsar.images.autorecovery.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsar.images.autorecovery.tag | string | `"2.9.5"` | |
|
||||
| pulsar.images.bookie.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsar.images.bookie.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsar.images.bookie.tag | string | `"2.9.5"` | |
|
||||
| pulsar.images.broker.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsar.images.broker.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsar.images.broker.tag | string | `"2.9.5"` | |
|
||||
| pulsar.images.proxy.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsar.images.proxy.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsar.images.proxy.tag | string | `"2.9.5"` | |
|
||||
| pulsar.images.pulsar_manager.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsar.images.pulsar_manager.repository | string | `"apachepulsar/pulsar-manager"` | |
|
||||
| pulsar.images.pulsar_manager.tag | string | `"v0.1.0"` | |
|
||||
| pulsar.images.zookeeper.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsar.images.zookeeper.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsar.images.zookeeper.tag | string | `"2.9.5"` | |
|
||||
| pulsar.maxMessageSize | string | `"5242880"` | |
|
||||
| pulsar.monitoring.alert_manager | bool | `false` | |
|
||||
| pulsar.monitoring.grafana | bool | `false` | |
|
||||
| pulsar.monitoring.node_exporter | bool | `false` | |
|
||||
| pulsar.monitoring.prometheus | bool | `false` | |
|
||||
| pulsar.name | string | `"pulsar"` | |
|
||||
| pulsar.persistence | bool | `true` | |
|
||||
| pulsar.proxy.configData.PULSAR_GC | string | `"-XX:MaxDirectMemorySize=2048m\n"` | |
|
||||
| pulsar.proxy.configData.PULSAR_MEM | string | `"-Xms2048m -Xmx2048m\n"` | |
|
||||
| pulsar.proxy.configData.httpNumThreads | string | `"100"` | |
|
||||
| pulsar.proxy.pdb.usePolicy | bool | `false` | |
|
||||
| pulsar.proxy.podMonitor.enabled | bool | `false` | |
|
||||
| pulsar.proxy.ports.http | int | `8080` | |
|
||||
| pulsar.proxy.ports.pulsar | int | `6650` | |
|
||||
| pulsar.proxy.replicaCount | int | `1` | |
|
||||
| pulsar.proxy.resources.requests.cpu | int | `1` | |
|
||||
| pulsar.proxy.resources.requests.memory | string | `"2048Mi"` | |
|
||||
| pulsar.proxy.service.type | string | `"ClusterIP"` | |
|
||||
| pulsar.pulsar_manager.service.type | string | `"ClusterIP"` | |
|
||||
| pulsar.pulsar_metadata.component | string | `"pulsar-init"` | |
|
||||
| pulsar.pulsar_metadata.image.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsar.pulsar_metadata.image.tag | string | `"2.9.5"` | |
|
||||
| pulsar.rbac.enabled | bool | `false` | |
|
||||
| pulsar.rbac.limit_to_namespace | bool | `true` | |
|
||||
| pulsar.rbac.psp | bool | `false` | |
|
||||
| pulsar.zookeeper.configData.PULSAR_GC | string | `"-Dcom.sun.management.jmxremote -Djute.maxbuffer=10485760 -XX:+ParallelRefProcEnabled -XX:+UnlockExperimentalVMOptions -XX:+DoEscapeAnalysis -XX:+DisableExplicitGC -XX:+PerfDisableSharedMem -Dzookeeper.forceSync=no\n"` | |
|
||||
| pulsar.zookeeper.configData.PULSAR_MEM | string | `"-Xms1024m -Xmx1024m\n"` | |
|
||||
| pulsar.zookeeper.pdb.usePolicy | bool | `false` | |
|
||||
| pulsar.zookeeper.resources.requests.cpu | float | `0.3` | |
|
||||
| pulsar.zookeeper.resources.requests.memory | string | `"1024Mi"` | |
|
||||
| pulsarv3.autorecovery.affinity.anti_affinity | bool | `false` | |
|
||||
| pulsarv3.autorecovery.component | string | `"recovery"` | |
|
||||
| pulsarv3.autorecovery.configData.BOOKIE_MEM | string | `"-Xms128m -Xmx128m\n"` | |
|
||||
| pulsarv3.autorecovery.configData.PULSAR_PREFIX_useV2WireProtocol | string | `"true"` | |
|
||||
| pulsarv3.autorecovery.podMonitor.enabled | bool | `false` | |
|
||||
| pulsarv3.autorecovery.replicaCount | int | `1` | |
|
||||
| pulsarv3.autorecovery.resources.requests.cpu | float | `0.1` | |
|
||||
| pulsarv3.autorecovery.resources.requests.memory | string | `"128Mi"` | |
|
||||
| pulsarv3.bookkeeper.affinity.anti_affinity | bool | `false` | |
|
||||
| pulsarv3.bookkeeper.component | string | `"bookie"` | |
|
||||
| pulsarv3.bookkeeper.configData.PULSAR_GC | string | `"-XX:+UseG1GC -XX:MaxGCPauseMillis=10 -XX:+ParallelRefProcEnabled -XX:+UnlockExperimentalVMOptions -XX:+DoEscapeAnalysis -XX:ParallelGCThreads=4 -XX:ConcGCThreads=4 -XX:G1NewSizePercent=50 -XX:+DisableExplicitGC -XX:-ResizePLAB -XX:+ExitOnOutOfMemoryError -XX:+PerfDisableSharedMem\n"` | |
|
||||
| pulsarv3.bookkeeper.configData.PULSAR_MEM | string | `"-Xms4096m -Xmx4096m -XX:MaxDirectMemorySize=8192m\n"` | |
|
||||
| pulsarv3.bookkeeper.configData.nettyMaxFrameSizeBytes | string | `"104867840"` | |
|
||||
| pulsarv3.bookkeeper.pdb.usePolicy | bool | `false` | |
|
||||
| pulsarv3.bookkeeper.podManagementPolicy | string | `"Parallel"` | |
|
||||
| pulsarv3.bookkeeper.podMonitor.enabled | bool | `false` | |
|
||||
| pulsarv3.bookkeeper.replicaCount | int | `3` | |
|
||||
| pulsarv3.bookkeeper.resources.requests.cpu | float | `0.5` | |
|
||||
| pulsarv3.bookkeeper.resources.requests.memory | string | `"2048Mi"` | |
|
||||
| pulsarv3.bookkeeper.updateStrategy.type | string | `"RollingUpdate"` | |
|
||||
| pulsarv3.bookkeeper.volumes.journal.local_storage | bool | `false` | |
|
||||
| pulsarv3.bookkeeper.volumes.journal.name | string | `"journal"` | |
|
||||
| pulsarv3.bookkeeper.volumes.journal.size | string | `"100Gi"` | |
|
||||
| pulsarv3.bookkeeper.volumes.ledgers.local_storage | bool | `false` | |
|
||||
| pulsarv3.bookkeeper.volumes.ledgers.name | string | `"ledgers"` | |
|
||||
| pulsarv3.bookkeeper.volumes.ledgers.size | string | `"200Gi"` | |
|
||||
| pulsarv3.bookkeeper.volumes.persistence | bool | `true` | |
|
||||
| pulsarv3.broker.affinity.anti_affinity | bool | `false` | |
|
||||
| pulsarv3.broker.autoscaling.enabled | bool | `false` | |
|
||||
| pulsarv3.broker.component | string | `"broker"` | |
|
||||
| pulsarv3.broker.configData.PULSAR_GC | string | `"-XX:+UseG1GC -XX:MaxGCPauseMillis=10 -Dio.netty.leakDetectionLevel=disabled -Dio.netty.recycler.linkCapacity=1024 -XX:+ParallelRefProcEnabled -XX:+UnlockExperimentalVMOptions -XX:+DoEscapeAnalysis -XX:ParallelGCThreads=4 -XX:ConcGCThreads=4 -XX:G1NewSizePercent=50 -XX:+DisableExplicitGC -XX:-ResizePLAB -XX:+ExitOnOutOfMemoryError -XX:+PerfDisableSharedMem\n"` | |
|
||||
| pulsarv3.broker.configData.PULSAR_MEM | string | `"-Xms4096m -Xmx4096m -XX:MaxDirectMemorySize=8192m\n"` | |
|
||||
| pulsarv3.broker.configData.backlogQuotaDefaultLimitGB | string | `"8"` | |
|
||||
| pulsarv3.broker.configData.backlogQuotaDefaultRetentionPolicy | string | `"producer_request_hold"` | |
|
||||
| pulsarv3.broker.configData.defaultRetentionSizeInMB | string | `"-1"` | |
|
||||
| pulsarv3.broker.configData.defaultRetentionTimeInMinutes | string | `"10080"` | |
|
||||
| pulsarv3.broker.configData.managedLedgerDefaultAckQuorum | string | `"2"` | |
|
||||
| pulsarv3.broker.configData.managedLedgerDefaultEnsembleSize | string | `"2"` | |
|
||||
| pulsarv3.broker.configData.managedLedgerDefaultWriteQuorum | string | `"2"` | |
|
||||
| pulsarv3.broker.configData.maxMessageSize | string | `"104857600"` | |
|
||||
| pulsarv3.broker.configData.subscriptionExpirationTimeMinutes | string | `"3"` | |
|
||||
| pulsarv3.broker.configData.ttlDurationDefaultInSeconds | string | `"259200"` | |
|
||||
| pulsarv3.broker.pdb.usePolicy | bool | `false` | |
|
||||
| pulsarv3.broker.podMonitor.enabled | bool | `false` | |
|
||||
| pulsarv3.broker.replicaCount | int | `2` | |
|
||||
| pulsarv3.broker.resources.requests.cpu | float | `0.5` | |
|
||||
| pulsarv3.broker.resources.requests.memory | string | `"2048Mi"` | |
|
||||
| pulsarv3.components.autorecovery | bool | `true` | |
|
||||
| pulsarv3.components.bookkeeper | bool | `true` | |
|
||||
| pulsarv3.components.broker | bool | `true` | |
|
||||
| pulsarv3.components.functions | bool | `false` | |
|
||||
| pulsarv3.components.proxy | bool | `true` | |
|
||||
| pulsarv3.components.pulsar_manager | bool | `false` | |
|
||||
| pulsarv3.components.toolset | bool | `false` | |
|
||||
| pulsarv3.components.zookeeper | bool | `true` | |
|
||||
| pulsarv3.enabled | bool | `false` | |
|
||||
| pulsarv3.extra | object | `{}` | |
|
||||
| pulsarv3.images.autorecovery.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsarv3.images.autorecovery.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsarv3.images.autorecovery.tag | string | `"3.0.7"` | |
|
||||
| pulsarv3.images.bookie.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsarv3.images.bookie.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsarv3.images.bookie.tag | string | `"3.0.7"` | |
|
||||
| pulsarv3.images.broker.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsarv3.images.broker.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsarv3.images.broker.tag | string | `"3.0.7"` | |
|
||||
| pulsarv3.images.proxy.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsarv3.images.proxy.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsarv3.images.proxy.tag | string | `"3.0.7"` | |
|
||||
| pulsarv3.images.zookeeper.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsarv3.images.zookeeper.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsarv3.images.zookeeper.tag | string | `"3.0.7"` | |
|
||||
| pulsarv3.kube-prometheus-stack.crds.enabled | bool | `false` | |
|
||||
| pulsarv3.kube-prometheus-stack.enabled | bool | `false` | |
|
||||
| pulsarv3.kube-prometheus-stack.grafana.enabled | bool | `false` | |
|
||||
| pulsarv3.kube-prometheus-stack.prometheus.enabled | bool | `false` | |
|
||||
| pulsarv3.monitoring | object | `{}` | |
|
||||
| pulsarv3.name | string | `"pulsarv3"` | |
|
||||
| pulsarv3.nameOverride | string | `"pulsarv3"` | |
|
||||
| pulsarv3.persistence | bool | `true` | |
|
||||
| pulsarv3.proxy.affinity.anti_affinity | bool | `false` | |
|
||||
| pulsarv3.proxy.autoscaling.enabled | bool | `false` | |
|
||||
| pulsarv3.proxy.component | string | `"proxy"` | |
|
||||
| pulsarv3.proxy.configData.PULSAR_GC | string | `"-XX:+UseG1GC -XX:MaxGCPauseMillis=10 -Dio.netty.leakDetectionLevel=disabled -Dio.netty.recycler.linkCapacity=1024 -XX:+ParallelRefProcEnabled -XX:+UnlockExperimentalVMOptions -XX:+DoEscapeAnalysis -XX:ParallelGCThreads=4 -XX:ConcGCThreads=4 -XX:G1NewSizePercent=50 -XX:+DisableExplicitGC -XX:-ResizePLAB -XX:+ExitOnOutOfMemoryError -XX:+PerfDisableSharedMem\n"` | |
|
||||
| pulsarv3.proxy.configData.PULSAR_MEM | string | `"-Xms512m -Xmx512m -XX:MaxDirectMemorySize=2048m\n"` | |
|
||||
| pulsarv3.proxy.configData.httpNumThreads | string | `"8"` | |
|
||||
| pulsarv3.proxy.pdb.usePolicy | bool | `false` | |
|
||||
| pulsarv3.proxy.podMonitor.enabled | bool | `false` | |
|
||||
| pulsarv3.proxy.ports.containerPorts.http | int | `8080` | |
|
||||
| pulsarv3.proxy.ports.containerPorts.https | int | `8443` | |
|
||||
| pulsarv3.proxy.ports.http | int | `80` | |
|
||||
| pulsarv3.proxy.ports.https | int | `443` | |
|
||||
| pulsarv3.proxy.ports.pulsar | int | `6650` | |
|
||||
| pulsarv3.proxy.ports.pulsarssl | int | `6651` | |
|
||||
| pulsarv3.proxy.replicaCount | int | `2` | |
|
||||
| pulsarv3.proxy.resources.requests.cpu | float | `0.5` | |
|
||||
| pulsarv3.proxy.resources.requests.memory | string | `"1024Mi"` | |
|
||||
| pulsarv3.proxy.service.annotations | object | `{}` | |
|
||||
| pulsarv3.proxy.service.type | string | `"ClusterIP"` | |
|
||||
| pulsarv3.pulsar_metadata.component | string | `"pulsar-init"` | |
|
||||
| pulsarv3.pulsar_metadata.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| pulsarv3.pulsar_metadata.image.repository | string | `"apachepulsar/pulsar"` | |
|
||||
| pulsarv3.pulsar_metadata.image.tag | string | `"3.0.7"` | |
|
||||
| pulsarv3.volumes.local_storage | bool | `false` | |
|
||||
| pulsarv3.volumes.persistence | bool | `true` | |
|
||||
| pulsarv3.zookeeper.affinity.anti_affinity | bool | `false` | |
|
||||
| pulsarv3.zookeeper.component | string | `"zookeeper"` | |
|
||||
| pulsarv3.zookeeper.configData.PULSAR_GC | string | `"-XX:+UseG1GC -XX:MaxGCPauseMillis=10 -Dcom.sun.management.jmxremote -Djute.maxbuffer=10485760 -XX:+ParallelRefProcEnabled -XX:+UnlockExperimentalVMOptions -XX:+DoEscapeAnalysis -XX:+DisableExplicitGC -XX:+ExitOnOutOfMemoryError -XX:+PerfDisableSharedMem\n"` | |
|
||||
| pulsarv3.zookeeper.configData.PULSAR_MEM | string | `"-Xms256m -Xmx256m\n"` | |
|
||||
| pulsarv3.zookeeper.pdb.usePolicy | bool | `false` | |
|
||||
| pulsarv3.zookeeper.podManagementPolicy | string | `"Parallel"` | |
|
||||
| pulsarv3.zookeeper.podMonitor.enabled | bool | `false` | |
|
||||
| pulsarv3.zookeeper.replicaCount | int | `3` | |
|
||||
| pulsarv3.zookeeper.resources.requests.cpu | float | `0.2` | |
|
||||
| pulsarv3.zookeeper.resources.requests.memory | string | `"256Mi"` | |
|
||||
| pulsarv3.zookeeper.updateStrategy.type | string | `"RollingUpdate"` | |
|
||||
| pulsarv3.zookeeper.volumes.data.local_storage | bool | `false` | |
|
||||
| pulsarv3.zookeeper.volumes.data.name | string | `"data"` | |
|
||||
| pulsarv3.zookeeper.volumes.data.size | string | `"20Gi"` | |
|
||||
| pulsarv3.zookeeper.volumes.persistence | bool | `true` | |
|
||||
| queryCoordinator.activeStandby.enabled | bool | `false` | |
|
||||
| queryCoordinator.affinity | object | `{}` | |
|
||||
| queryCoordinator.annotations | object | `{}` | |
|
||||
| queryCoordinator.containerSecurityContext | object | `{}` | |
|
||||
| queryCoordinator.enabled | bool | `false` | |
|
||||
| queryCoordinator.extraEnv | list | `[]` | |
|
||||
| queryCoordinator.heaptrack.enabled | bool | `false` | |
|
||||
| queryCoordinator.nodeSelector | object | `{}` | |
|
||||
| queryCoordinator.profiling.enabled | bool | `false` | |
|
||||
| queryCoordinator.replicas | int | `1` | |
|
||||
| queryCoordinator.resources | object | `{}` | |
|
||||
| queryCoordinator.securityContext | object | `{}` | |
|
||||
| queryCoordinator.service.annotations | object | `{}` | |
|
||||
| queryCoordinator.service.clusterIP | string | `""` | |
|
||||
| queryCoordinator.service.labels | object | `{}` | |
|
||||
| queryCoordinator.service.port | int | `19531` | |
|
||||
| queryCoordinator.strategy | object | `{}` | |
|
||||
| queryCoordinator.tolerations | list | `[]` | |
|
||||
| queryCoordinator.topologySpreadConstraints | list | `[]` | |
|
||||
| queryNode.affinity | object | `{}` | |
|
||||
| queryNode.annotations | object | `{}` | |
|
||||
| queryNode.containerSecurityContext | object | `{}` | |
|
||||
| queryNode.disk.enabled | bool | `true` | |
|
||||
| queryNode.disk.size.enabled | bool | `false` | |
|
||||
| queryNode.enabled | bool | `true` | |
|
||||
| queryNode.extraEnv | list | `[]` | |
|
||||
| queryNode.heaptrack.enabled | bool | `false` | |
|
||||
| queryNode.hpa.cpuUtilization | int | `40` | |
|
||||
| queryNode.hpa.enabled | bool | `false` | |
|
||||
| queryNode.hpa.maxReplicas | int | `5` | |
|
||||
| queryNode.hpa.memoryUtilization | int | `60` | |
|
||||
| queryNode.hpa.minReplicas | int | `1` | |
|
||||
| queryNode.nodeSelector | object | `{}` | |
|
||||
| queryNode.profiling.enabled | bool | `false` | |
|
||||
| queryNode.replicas | int | `1` | |
|
||||
| queryNode.resources | object | `{}` | |
|
||||
| queryNode.runtimeClassName | string | `""` | |
|
||||
| queryNode.securityContext | object | `{}` | |
|
||||
| queryNode.strategy | object | `{}` | |
|
||||
| queryNode.tolerations | list | `[]` | |
|
||||
| queryNode.topologySpreadConstraints | list | `[]` | |
|
||||
| readinessProbe.enabled | bool | `true` | |
|
||||
| readinessProbe.failureThreshold | int | `5` | |
|
||||
| readinessProbe.initialDelaySeconds | int | `90` | |
|
||||
| readinessProbe.periodSeconds | int | `10` | |
|
||||
| readinessProbe.successThreshold | int | `1` | |
|
||||
| readinessProbe.timeoutSeconds | int | `5` | |
|
||||
| rootCoordinator.activeStandby.enabled | bool | `false` | |
|
||||
| rootCoordinator.affinity | object | `{}` | |
|
||||
| rootCoordinator.annotations | object | `{}` | |
|
||||
| rootCoordinator.containerSecurityContext | object | `{}` | |
|
||||
| rootCoordinator.enabled | bool | `false` | |
|
||||
| rootCoordinator.extraEnv | list | `[]` | |
|
||||
| rootCoordinator.heaptrack.enabled | bool | `false` | |
|
||||
| rootCoordinator.nodeSelector | object | `{}` | |
|
||||
| rootCoordinator.profiling.enabled | bool | `false` | |
|
||||
| rootCoordinator.replicas | int | `1` | |
|
||||
| rootCoordinator.resources | object | `{}` | |
|
||||
| rootCoordinator.securityContext | object | `{}` | |
|
||||
| rootCoordinator.service.annotations | object | `{}` | |
|
||||
| rootCoordinator.service.clusterIP | string | `""` | |
|
||||
| rootCoordinator.service.labels | object | `{}` | |
|
||||
| rootCoordinator.service.port | int | `53100` | |
|
||||
| rootCoordinator.strategy | object | `{}` | |
|
||||
| rootCoordinator.tolerations | list | `[]` | |
|
||||
| rootCoordinator.topologySpreadConstraints | list | `[]` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| service.annotations | object | `{}` | |
|
||||
| service.externalIPs | list | `[]` | |
|
||||
| service.labels | object | `{}` | |
|
||||
| service.loadBalancerSourceRanges[0] | string | `"0.0.0.0/0"` | |
|
||||
| service.nodePort | string | `""` | |
|
||||
| service.port | int | `19530` | |
|
||||
| service.portName | string | `"milvus"` | |
|
||||
| service.type | string | `"ClusterIP"` | |
|
||||
| serviceAccount.annotations | string | `nil` | |
|
||||
| serviceAccount.create | bool | `false` | |
|
||||
| serviceAccount.labels | string | `nil` | |
|
||||
| serviceAccount.name | string | `nil` | |
|
||||
| standalone.affinity | object | `{}` | |
|
||||
| standalone.containerSecurityContext | object | `{}` | |
|
||||
| standalone.disk.enabled | bool | `true` | |
|
||||
| standalone.disk.size.enabled | bool | `false` | |
|
||||
| standalone.extraEnv | list | `[]` | |
|
||||
| standalone.heaptrack.enabled | bool | `false` | |
|
||||
| standalone.messageQueue | string | `"woodpecker"` | |
|
||||
| standalone.nodeSelector | object | `{}` | |
|
||||
| standalone.persistence.annotations."helm.sh/resource-policy" | string | `"keep"` | |
|
||||
| standalone.persistence.enabled | bool | `true` | |
|
||||
| standalone.persistence.mountPath | string | `"/var/lib/milvus"` | |
|
||||
| standalone.persistence.persistentVolumeClaim.accessModes | string | `"ReadWriteOnce"` | |
|
||||
| standalone.persistence.persistentVolumeClaim.existingClaim | string | `""` | |
|
||||
| standalone.persistence.persistentVolumeClaim.size | string | `"50Gi"` | |
|
||||
| standalone.persistence.persistentVolumeClaim.storageClass | string | `nil` | |
|
||||
| standalone.persistence.persistentVolumeClaim.subPath | string | `""` | |
|
||||
| standalone.profiling.enabled | bool | `false` | |
|
||||
| standalone.replicas | int | `1` | |
|
||||
| standalone.resources | object | `{}` | |
|
||||
| standalone.securityContext | object | `{}` | |
|
||||
| standalone.tolerations | list | `[]` | |
|
||||
| standalone.topologySpreadConstraints | list | `[]` | |
|
||||
| streaming.enabled | bool | `true` | |
|
||||
| streaming.woodpecker.embedded | bool | `true` | |
|
||||
| streaming.woodpecker.storage.type | string | `"minio"` | |
|
||||
| streamingNode.affinity | object | `{}` | |
|
||||
| streamingNode.containerSecurityContext | object | `{}` | |
|
||||
| streamingNode.extraEnv | list | `[]` | |
|
||||
| streamingNode.heaptrack.enabled | bool | `false` | |
|
||||
| streamingNode.nodeSelector | object | `{}` | |
|
||||
| streamingNode.profiling.enabled | bool | `false` | |
|
||||
| streamingNode.replicas | int | `1` | |
|
||||
| streamingNode.resources | object | `{}` | |
|
||||
| streamingNode.securityContext | object | `{}` | |
|
||||
| streamingNode.strategy | object | `{}` | |
|
||||
| streamingNode.tolerations | list | `[]` | |
|
||||
| tei.affinity | object | `{}` | |
|
||||
| tei.enabled | bool | `false` | |
|
||||
| tei.extraArgs | list | `[]` | |
|
||||
| tei.extraEnv | list | `[]` | |
|
||||
| tei.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| tei.image.repository | string | `"ghcr.io/huggingface/text-embeddings-inference"` | |
|
||||
| tei.image.tag | string | `"cpu-1.6"` | |
|
||||
| tei.modelId | string | `"BAAI/bge-large-en-v1.5"` | |
|
||||
| tei.name | string | `"text-embeddings-inference"` | |
|
||||
| tei.nodeSelector | object | `{}` | |
|
||||
| tei.persistence.annotations | object | `{}` | |
|
||||
| tei.persistence.enabled | bool | `true` | |
|
||||
| tei.persistence.mountPath | string | `"/data"` | |
|
||||
| tei.persistence.persistentVolumeClaim.accessModes | string | `"ReadWriteOnce"` | |
|
||||
| tei.persistence.persistentVolumeClaim.existingClaim | string | `""` | |
|
||||
| tei.persistence.persistentVolumeClaim.size | string | `"50Gi"` | |
|
||||
| tei.persistence.persistentVolumeClaim.storageClass | string | `nil` | |
|
||||
| tei.persistence.persistentVolumeClaim.subPath | string | `""` | |
|
||||
| tei.resources.limits.cpu | string | `"8"` | |
|
||||
| tei.resources.limits.memory | string | `"16Gi"` | |
|
||||
| tei.resources.requests.cpu | string | `"4"` | |
|
||||
| tei.resources.requests.memory | string | `"8Gi"` | |
|
||||
| tei.service.annotations | object | `{}` | |
|
||||
| tei.service.labels | object | `{}` | |
|
||||
| tei.service.port | int | `8080` | |
|
||||
| tei.service.type | string | `"ClusterIP"` | |
|
||||
| tei.tolerations | list | `[]` | |
|
||||
| tei.topologySpreadConstraints | list | `[]` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| topologySpreadConstraints | list | `[]` | |
|
||||
| volumeMounts | list | `[]` | |
|
||||
| volumes | list | `[]` | |
|
||||
| woodpecker.affinity | object | `{}` | |
|
||||
| woodpecker.containerSecurityContext | object | `{}` | |
|
||||
| woodpecker.enabled | bool | `false` | |
|
||||
| woodpecker.extraEnv | list | `[]` | |
|
||||
| woodpecker.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| woodpecker.image.repository | string | `"milvusdb/woodpecker"` | |
|
||||
| woodpecker.image.tag | string | `"latest"` | |
|
||||
| woodpecker.logging.level | string | `"info"` | |
|
||||
| woodpecker.minio.accessKey | string | `""` | |
|
||||
| woodpecker.minio.address | string | `""` | |
|
||||
| woodpecker.minio.bucketName | string | `""` | |
|
||||
| woodpecker.minio.port | int | `9000` | |
|
||||
| woodpecker.minio.secretKey | string | `""` | |
|
||||
| woodpecker.nodeSelector | object | `{}` | |
|
||||
| woodpecker.persistence.accessModes[0] | string | `"ReadWriteOnce"` | |
|
||||
| woodpecker.persistence.enabled | bool | `true` | |
|
||||
| woodpecker.persistence.size | string | `"30Gi"` | |
|
||||
| woodpecker.persistence.storageClass | string | `""` | |
|
||||
| woodpecker.podManagementPolicy | string | `"Parallel"` | |
|
||||
| woodpecker.ports.gossip | int | `17946` | |
|
||||
| woodpecker.ports.service | int | `18080` | |
|
||||
| woodpecker.profiling.enabled | bool | `false` | |
|
||||
| woodpecker.replicaCount | int | `4` | |
|
||||
| woodpecker.resourceGroup | string | `"rg-primary"` | |
|
||||
| woodpecker.resources.limits.cpu | string | `"1"` | |
|
||||
| woodpecker.resources.limits.memory | string | `"1Gi"` | |
|
||||
| woodpecker.resources.requests.cpu | string | `"500m"` | |
|
||||
| woodpecker.resources.requests.memory | string | `"512Mi"` | |
|
||||
| woodpecker.securityContext | object | `{}` | |
|
||||
| woodpecker.tolerations | list | `[]` | |
|
||||
| woodpecker.topologySpreadConstraints | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,93 @@
|
||||
# nexus-repository-manager
|
||||
|
||||
> **:exclamation: This Helm Chart is deprecated!**
|
||||
|
||||
  
|
||||
|
||||
DEPRECATED Sonatype Nexus Repository Manager - Universal Binary repository
|
||||
|
||||
**Homepage:** <https://www.sonatype.com/nexus-repository-oss>
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/sonatype/nexus-public>
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| config.data | list | `[]` | |
|
||||
| config.enabled | bool | `false` | |
|
||||
| config.mountPath | string | `"/sonatype-nexus-conf"` | |
|
||||
| deployment.additionalContainers | string | `nil` | |
|
||||
| deployment.additionalVolumeMounts | string | `nil` | |
|
||||
| deployment.additionalVolumes | string | `nil` | |
|
||||
| deployment.annotations | object | `{}` | |
|
||||
| deployment.initContainers | string | `nil` | |
|
||||
| deployment.postStart.command | string | `nil` | |
|
||||
| deployment.preStart.command | string | `nil` | |
|
||||
| deployment.terminationGracePeriodSeconds | int | `120` | |
|
||||
| deploymentStrategy | string | `"Recreate"` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| image.repository | string | `"gcr.io/customer-facing/sonatype/nexus3"` | |
|
||||
| image.tag | string | `"3.64.0"` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" | string | `"0"` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hostPath | string | `"/"` | |
|
||||
| ingress.hostRepo | string | `"repo.demo"` | |
|
||||
| ingress.ingressClassName | string | `"nginx"` | |
|
||||
| nameOverride | string | `""` | |
|
||||
| nexus.docker.enabled | bool | `false` | |
|
||||
| nexus.env[0].name | string | `"INSTALL4J_ADD_VM_PARAMS"` | |
|
||||
| nexus.env[0].value | string | `"-Xms2703M -Xmx2703M\n-XX:MaxDirectMemorySize=2703M\n-XX:+UnlockExperimentalVMOptions\n-XX:+UseCGroupMemoryLimitForHeap\n-Djava.util.prefs.userRoot=/nexus-data/javaprefs"` | |
|
||||
| nexus.env[1].name | string | `"NEXUS_SECURITY_RANDOMPASSWORD"` | |
|
||||
| nexus.env[1].value | string | `"true"` | |
|
||||
| nexus.hostAliases | list | `[]` | |
|
||||
| nexus.livenessProbe.failureThreshold | int | `6` | |
|
||||
| nexus.livenessProbe.initialDelaySeconds | int | `30` | |
|
||||
| nexus.livenessProbe.path | string | `"/"` | |
|
||||
| nexus.livenessProbe.periodSeconds | int | `30` | |
|
||||
| nexus.livenessProbe.timeoutSeconds | int | `10` | |
|
||||
| nexus.nexusPort | int | `8081` | |
|
||||
| nexus.podAnnotations | object | `{}` | |
|
||||
| nexus.properties.data."nexus.scripts.allowCreation" | bool | `true` | |
|
||||
| nexus.properties.override | bool | `false` | |
|
||||
| nexus.readinessProbe.failureThreshold | int | `6` | |
|
||||
| nexus.readinessProbe.initialDelaySeconds | int | `30` | |
|
||||
| nexus.readinessProbe.path | string | `"/"` | |
|
||||
| nexus.readinessProbe.periodSeconds | int | `30` | |
|
||||
| nexus.readinessProbe.timeoutSeconds | int | `10` | |
|
||||
| nexus.resources | string | `nil` | |
|
||||
| nexus.securityContext.fsGroup | int | `200` | |
|
||||
| nexus.securityContext.runAsGroup | int | `200` | |
|
||||
| nexus.securityContext.runAsUser | int | `200` | |
|
||||
| nexusProxyRoute.annotations | string | `nil` | |
|
||||
| nexusProxyRoute.enabled | bool | `false` | |
|
||||
| nexusProxyRoute.labels | string | `nil` | |
|
||||
| persistence.accessMode | string | `"ReadWriteOnce"` | |
|
||||
| persistence.enabled | bool | `true` | |
|
||||
| persistence.storageSize | string | `"8Gi"` | |
|
||||
| route.annotations | string | `nil` | |
|
||||
| route.enabled | bool | `false` | |
|
||||
| route.labels | string | `nil` | |
|
||||
| route.name | string | `"docker"` | |
|
||||
| route.portName | string | `"docker"` | |
|
||||
| secret.data | list | `[]` | |
|
||||
| secret.enabled | bool | `false` | |
|
||||
| secret.mountPath | string | `"/etc/secret-volume"` | |
|
||||
| secret.readOnly | bool | `true` | |
|
||||
| service.annotations | object | `{}` | |
|
||||
| service.enabled | bool | `true` | |
|
||||
| service.labels | object | `{}` | |
|
||||
| service.name | string | `"nexus3"` | |
|
||||
| service.type | string | `"ClusterIP"` | |
|
||||
| serviceAccount.annotations | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| serviceAccount.name | string | `""` | |
|
||||
| statefulset.enabled | bool | `false` | |
|
||||
| tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,34 @@
|
||||
# agent
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Agent" Daemonset
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| resources.limits.cpu | string | `"1"` | |
|
||||
| resources.limits.memory | string | `"512Mi"` | |
|
||||
| resources.requests.cpu | string | `"50m"` | |
|
||||
| resources.requests.memory | string | `"256Mi"` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tolerations[0].effect | string | `"NoSchedule"` | |
|
||||
| tolerations[0].key | string | `"node.reltio.com/nodepool"` | |
|
||||
| tolerations[0].operator | string | `"Equal"` | |
|
||||
| tolerations[0].value | string | `"dataload.arm64"` | |
|
||||
| tolerations[1].effect | string | `"NoSchedule"` | |
|
||||
| tolerations[1].key | string | `"node.reltio.com/nodepool"` | |
|
||||
| tolerations[1].operator | string | `"Equal"` | |
|
||||
| tolerations[1].value | string | `"dataprocess.arm64"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,16 @@
|
||||
# common
|
||||
|
||||
  
|
||||
|
||||
Common OpenTelemetry k8s resources used by other Reltio OTel charts
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| clusterName | string | `""` | |
|
||||
| fullnameOverride | string | `"otel-common"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,37 @@
|
||||
# gw-metrics
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Gateway" Deployment for Metrics
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].key | string | `"app.kubernetes.io/name"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].operator | string | `"In"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].values[0] | string | `"otel-gw-metrics-collector"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].weight | int | `100` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.maxReplicas | int | `8` | |
|
||||
| autoscaling.minReplicas | int | `2` | |
|
||||
| autoscaling.targetCPUUtilizationPercentage | int | `80` | |
|
||||
| awsManagePrometheusWriteEndpoint | string | `"https://aps-workspaces.us-east-1.amazonaws.com/workspaces/ws-84e08a5b-7fda-409c-b421-418deed15bcd/api/v1/remote_write"` | |
|
||||
| awsSigv4auth.IAMRoleArn | string | `"arn:aws:iam::930358522410:role/amp-iamproxy-ingest-role"` | |
|
||||
| awsSigv4auth.region | string | `"us-east-1"` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"512Mi"` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,30 @@
|
||||
# gw-traces
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Gateway" Deployment for Traces
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].key | string | `"app.kubernetes.io/name"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].operator | string | `"In"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].values[0] | string | `"otel-gw-traces-collector"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].weight | int | `100` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.maxReplicas | int | `8` | |
|
||||
| autoscaling.minReplicas | int | `2` | |
|
||||
| clusterName | string | `""` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"512Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tempoExporter.endpoint | string | `"tempo-qa.observability.devopsrnd.reltio.com:4317"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,21 @@
|
||||
# k8s-metrics
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry Collector for Cluster Wide K8S Attributes
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources.limits.memory | string | `"1Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"256Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,210 @@
|
||||
# kube-state-metrics
|
||||
|
||||
  
|
||||
|
||||
Install kube-state-metrics to generate and expose cluster-level metrics
|
||||
|
||||
**Homepage:** <https://github.com/kubernetes/kube-state-metrics/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| tariq1890 | <tariq.ibrahim@mulesoft.com> | <https://github.com/tariq1890> |
|
||||
| mrueg | <manuel@rueg.eu> | <https://github.com/mrueg> |
|
||||
| dotdc | <david@0xdc.me> | <https://github.com/dotdc> |
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/kubernetes/kube-state-metrics/>
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| annotations | object | `{}` | |
|
||||
| automountServiceAccountToken | bool | `true` | |
|
||||
| autosharding.enabled | bool | `false` | |
|
||||
| collectors[0] | string | `"certificatesigningrequests"` | |
|
||||
| collectors[10] | string | `"limitranges"` | |
|
||||
| collectors[11] | string | `"mutatingwebhookconfigurations"` | |
|
||||
| collectors[12] | string | `"namespaces"` | |
|
||||
| collectors[13] | string | `"networkpolicies"` | |
|
||||
| collectors[14] | string | `"nodes"` | |
|
||||
| collectors[15] | string | `"persistentvolumeclaims"` | |
|
||||
| collectors[16] | string | `"persistentvolumes"` | |
|
||||
| collectors[17] | string | `"poddisruptionbudgets"` | |
|
||||
| collectors[18] | string | `"pods"` | |
|
||||
| collectors[19] | string | `"replicasets"` | |
|
||||
| collectors[1] | string | `"configmaps"` | |
|
||||
| collectors[20] | string | `"replicationcontrollers"` | |
|
||||
| collectors[21] | string | `"resourcequotas"` | |
|
||||
| collectors[22] | string | `"secrets"` | |
|
||||
| collectors[23] | string | `"services"` | |
|
||||
| collectors[24] | string | `"statefulsets"` | |
|
||||
| collectors[25] | string | `"storageclasses"` | |
|
||||
| collectors[26] | string | `"validatingwebhookconfigurations"` | |
|
||||
| collectors[27] | string | `"volumeattachments"` | |
|
||||
| collectors[2] | string | `"cronjobs"` | |
|
||||
| collectors[3] | string | `"daemonsets"` | |
|
||||
| collectors[4] | string | `"deployments"` | |
|
||||
| collectors[5] | string | `"endpoints"` | |
|
||||
| collectors[6] | string | `"horizontalpodautoscalers"` | |
|
||||
| collectors[7] | string | `"ingresses"` | |
|
||||
| collectors[8] | string | `"jobs"` | |
|
||||
| collectors[9] | string | `"leases"` | |
|
||||
| containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
|
||||
| containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
|
||||
| containerSecurityContext.readOnlyRootFilesystem | bool | `true` | |
|
||||
| containers | list | `[]` | |
|
||||
| customLabels | object | `{}` | |
|
||||
| customResourceState.config | object | `{}` | |
|
||||
| customResourceState.enabled | bool | `false` | |
|
||||
| env | object | `{}` | |
|
||||
| extraArgs | list | `[]` | |
|
||||
| extraManifests | list | `[]` | |
|
||||
| global.imagePullSecrets | list | `[]` | |
|
||||
| global.imageRegistry | string | `""` | |
|
||||
| hostNetwork | bool | `false` | |
|
||||
| image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| image.registry | string | `"registry.k8s.io"` | |
|
||||
| image.repository | string | `"kube-state-metrics/kube-state-metrics"` | |
|
||||
| image.sha | string | `""` | |
|
||||
| image.tag | string | `""` | |
|
||||
| imagePullSecrets | list | `[]` | |
|
||||
| initContainers | list | `[]` | |
|
||||
| kubeRBACProxy.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
|
||||
| kubeRBACProxy.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
|
||||
| kubeRBACProxy.containerSecurityContext.readOnlyRootFilesystem | bool | `true` | |
|
||||
| kubeRBACProxy.enabled | bool | `false` | |
|
||||
| kubeRBACProxy.extraArgs | list | `[]` | |
|
||||
| kubeRBACProxy.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| kubeRBACProxy.image.registry | string | `"gcr.io"` | |
|
||||
| kubeRBACProxy.image.repository | string | `"customer-facing/brancz/kube-rbac-proxy"` | |
|
||||
| kubeRBACProxy.image.sha | string | `""` | |
|
||||
| kubeRBACProxy.image.tag | string | `"v0.19.0"` | |
|
||||
| kubeRBACProxy.imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| kubeRBACProxy.resources | object | `{}` | |
|
||||
| kubeRBACProxy.volumeMounts | list | `[]` | |
|
||||
| kubeTargetVersionOverride | string | `""` | |
|
||||
| kubeconfig.enabled | bool | `false` | |
|
||||
| kubeconfig.secret | string | `nil` | |
|
||||
| livenessProbe.failureThreshold | int | `3` | |
|
||||
| livenessProbe.httpGet.httpHeaders | list | `[]` | |
|
||||
| livenessProbe.httpGet.scheme | string | `"http"` | |
|
||||
| livenessProbe.initialDelaySeconds | int | `5` | |
|
||||
| livenessProbe.periodSeconds | int | `10` | |
|
||||
| livenessProbe.successThreshold | int | `1` | |
|
||||
| livenessProbe.timeoutSeconds | int | `5` | |
|
||||
| metricAllowlist | list | `[]` | |
|
||||
| metricAnnotationsAllowList | list | `[]` | |
|
||||
| metricDenylist | list | `[]` | |
|
||||
| metricLabelsAllowlist | list | `[]` | |
|
||||
| namespaceOverride | string | `""` | |
|
||||
| namespaces | string | `""` | |
|
||||
| namespacesDenylist | string | `""` | |
|
||||
| networkPolicy.enabled | bool | `false` | |
|
||||
| networkPolicy.flavor | string | `"kubernetes"` | Flavor of the network policy to use. Can be: * kubernetes for networking.k8s.io/v1/NetworkPolicy * cilium for cilium.io/v2/CiliumNetworkPolicy |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podDisruptionBudget | object | `{}` | |
|
||||
| podLabels | object | `{}` | |
|
||||
| podSecurityPolicy.additionalVolumes | list | `[]` | |
|
||||
| podSecurityPolicy.annotations | object | `{}` | |
|
||||
| podSecurityPolicy.enabled | bool | `false` | |
|
||||
| prometheus.monitor.additionalLabels | object | `{}` | |
|
||||
| prometheus.monitor.annotations | object | `{}` | |
|
||||
| prometheus.monitor.enabled | bool | `false` | |
|
||||
| prometheus.monitor.http.bearerTokenFile | string | `""` | |
|
||||
| prometheus.monitor.http.bearerTokenSecret | object | `{}` | |
|
||||
| prometheus.monitor.http.enableHttp2 | bool | `false` | |
|
||||
| prometheus.monitor.http.honorLabels | bool | `false` | |
|
||||
| prometheus.monitor.http.interval | string | `""` | |
|
||||
| prometheus.monitor.http.metricRelabelings | list | `[]` | |
|
||||
| prometheus.monitor.http.proxyUrl | string | `""` | |
|
||||
| prometheus.monitor.http.relabelings | list | `[]` | |
|
||||
| prometheus.monitor.http.scheme | string | `""` | |
|
||||
| prometheus.monitor.http.scrapeTimeout | string | `""` | |
|
||||
| prometheus.monitor.http.tlsConfig | object | `{}` | |
|
||||
| prometheus.monitor.jobLabel | string | `""` | |
|
||||
| prometheus.monitor.labelLimit | int | `0` | |
|
||||
| prometheus.monitor.labelNameLengthLimit | int | `0` | |
|
||||
| prometheus.monitor.labelValueLengthLimit | int | `0` | |
|
||||
| prometheus.monitor.metrics.bearerTokenFile | string | `""` | |
|
||||
| prometheus.monitor.metrics.bearerTokenSecret | object | `{}` | |
|
||||
| prometheus.monitor.metrics.enableHttp2 | bool | `false` | |
|
||||
| prometheus.monitor.metrics.honorLabels | bool | `false` | |
|
||||
| prometheus.monitor.metrics.interval | string | `""` | |
|
||||
| prometheus.monitor.metrics.metricRelabelings | list | `[]` | |
|
||||
| prometheus.monitor.metrics.proxyUrl | string | `""` | |
|
||||
| prometheus.monitor.metrics.relabelings | list | `[]` | |
|
||||
| prometheus.monitor.metrics.scheme | string | `""` | |
|
||||
| prometheus.monitor.metrics.scrapeTimeout | string | `""` | |
|
||||
| prometheus.monitor.metrics.tlsConfig | object | `{}` | |
|
||||
| prometheus.monitor.namespace | string | `""` | |
|
||||
| prometheus.monitor.namespaceSelector | list | `[]` | |
|
||||
| prometheus.monitor.podTargetLabels | list | `[]` | |
|
||||
| prometheus.monitor.sampleLimit | int | `0` | |
|
||||
| prometheus.monitor.selectorOverride | object | `{}` | |
|
||||
| prometheus.monitor.targetLabels | list | `[]` | |
|
||||
| prometheus.monitor.targetLimit | int | `0` | |
|
||||
| prometheusScrape | bool | `true` | |
|
||||
| rbac.create | bool | `true` | |
|
||||
| rbac.extraRules | list | `[]` | |
|
||||
| rbac.useClusterRole | bool | `true` | |
|
||||
| readinessProbe.failureThreshold | int | `3` | |
|
||||
| readinessProbe.httpGet.httpHeaders | list | `[]` | |
|
||||
| readinessProbe.httpGet.scheme | string | `"http"` | |
|
||||
| readinessProbe.initialDelaySeconds | int | `5` | |
|
||||
| readinessProbe.periodSeconds | int | `10` | |
|
||||
| readinessProbe.successThreshold | int | `1` | |
|
||||
| readinessProbe.timeoutSeconds | int | `5` | |
|
||||
| releaseLabel | bool | `false` | |
|
||||
| releaseNamespace | bool | `false` | |
|
||||
| replicas | int | `1` | |
|
||||
| resources | object | `{}` | |
|
||||
| revisionHistoryLimit | int | `10` | |
|
||||
| securityContext.enabled | bool | `true` | |
|
||||
| securityContext.fsGroup | int | `65534` | |
|
||||
| securityContext.runAsGroup | int | `65534` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `65534` | |
|
||||
| securityContext.seccompProfile.type | string | `"RuntimeDefault"` | |
|
||||
| selectorOverride | object | `{}` | |
|
||||
| selfMonitor.enabled | bool | `false` | |
|
||||
| service.annotations | object | `{}` | |
|
||||
| service.clusterIP | string | `""` | |
|
||||
| service.ipDualStack.enabled | bool | `false` | |
|
||||
| service.ipDualStack.ipFamilies[0] | string | `"IPv6"` | |
|
||||
| service.ipDualStack.ipFamilies[1] | string | `"IPv4"` | |
|
||||
| service.ipDualStack.ipFamilyPolicy | string | `"PreferDualStack"` | |
|
||||
| service.loadBalancerIP | string | `""` | |
|
||||
| service.loadBalancerSourceRanges | list | `[]` | |
|
||||
| service.nodePort | int | `0` | |
|
||||
| service.port | int | `8080` | |
|
||||
| service.type | string | `"ClusterIP"` | |
|
||||
| serviceAccount.annotations | object | `{}` | |
|
||||
| serviceAccount.automountServiceAccountToken | bool | `true` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| serviceAccount.imagePullSecrets | list | `[]` | |
|
||||
| serviceAccount.name | string | `nil` | |
|
||||
| startupProbe.enabled | bool | `false` | |
|
||||
| startupProbe.failureThreshold | int | `3` | |
|
||||
| startupProbe.httpGet.httpHeaders | list | `[]` | |
|
||||
| startupProbe.httpGet.scheme | string | `"http"` | |
|
||||
| startupProbe.initialDelaySeconds | int | `0` | |
|
||||
| startupProbe.periodSeconds | int | `10` | |
|
||||
| startupProbe.successThreshold | int | `1` | |
|
||||
| startupProbe.timeoutSeconds | int | `5` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| topologySpreadConstraints | list | `[]` | |
|
||||
| verticalPodAutoscaler.controlledResources | list | `[]` | |
|
||||
| verticalPodAutoscaler.enabled | bool | `false` | |
|
||||
| verticalPodAutoscaler.maxAllowed | object | `{}` | |
|
||||
| verticalPodAutoscaler.minAllowed | object | `{}` | |
|
||||
| volumeMounts | list | `[]` | |
|
||||
| volumes | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,148 @@
|
||||
# opentelemetry-operator
|
||||
|
||||
  
|
||||
|
||||
OpenTelemetry Operator Helm chart for Kubernetes
|
||||
|
||||
**Homepage:** <https://opentelemetry.io/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Allex1 | | |
|
||||
| dmitryax | | |
|
||||
| jaronoff97 | | |
|
||||
| TylerHelmuth | | |
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/open-telemetry/opentelemetry-operator>
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| additionalLabels | object | `{}` | |
|
||||
| admissionWebhooks.autoGenerateCert.certPeriodDays | int | `365` | |
|
||||
| admissionWebhooks.autoGenerateCert.enabled | bool | `true` | |
|
||||
| admissionWebhooks.autoGenerateCert.recreate | bool | `true` | |
|
||||
| admissionWebhooks.caFile | string | `""` | |
|
||||
| admissionWebhooks.certFile | string | `""` | |
|
||||
| admissionWebhooks.certManager.certificateAnnotations | object | `{}` | |
|
||||
| admissionWebhooks.certManager.duration | string | `""` | |
|
||||
| admissionWebhooks.certManager.enabled | bool | `true` | |
|
||||
| admissionWebhooks.certManager.issuerAnnotations | object | `{}` | |
|
||||
| admissionWebhooks.certManager.issuerRef | object | `{}` | |
|
||||
| admissionWebhooks.certManager.renewBefore | string | `""` | |
|
||||
| admissionWebhooks.create | bool | `true` | |
|
||||
| admissionWebhooks.failurePolicy | string | `"Fail"` | |
|
||||
| admissionWebhooks.keyFile | string | `""` | |
|
||||
| admissionWebhooks.namePrefix | string | `""` | |
|
||||
| admissionWebhooks.namespaceSelector | object | `{}` | |
|
||||
| admissionWebhooks.objectSelector | object | `{}` | |
|
||||
| admissionWebhooks.pods.failurePolicy | string | `"Ignore"` | |
|
||||
| admissionWebhooks.secretAnnotations | object | `{}` | |
|
||||
| admissionWebhooks.secretLabels | object | `{}` | |
|
||||
| admissionWebhooks.secretName | string | `""` | |
|
||||
| admissionWebhooks.serviceAnnotations | object | `{}` | |
|
||||
| admissionWebhooks.servicePort | int | `443` | |
|
||||
| admissionWebhooks.timeoutSeconds | int | `10` | |
|
||||
| affinity | object | `{}` | |
|
||||
| clusterDomain | string | `"cluster.local"` | |
|
||||
| clusterRole.create | bool | `true` | |
|
||||
| crds.create | bool | `true` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| hostNetwork | bool | `false` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| kubeRBACProxy.enabled | bool | `true` | |
|
||||
| kubeRBACProxy.extraArgs | list | `[]` | |
|
||||
| kubeRBACProxy.image.repository | string | `"gcr.io/customer-facing/brancz/kube-rbac-proxy"` | |
|
||||
| kubeRBACProxy.image.tag | string | `"v0.18.1"` | |
|
||||
| kubeRBACProxy.ports.proxyPort | int | `8443` | |
|
||||
| kubeRBACProxy.resources.limits.cpu | string | `"500m"` | |
|
||||
| kubeRBACProxy.resources.limits.memory | string | `"128Mi"` | |
|
||||
| kubeRBACProxy.resources.requests.cpu | string | `"5m"` | |
|
||||
| kubeRBACProxy.resources.requests.memory | string | `"64Mi"` | |
|
||||
| kubeRBACProxy.securityContext | object | `{}` | |
|
||||
| manager.autoInstrumentationImage.apacheHttpd.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.apacheHttpd.tag | string | `""` | |
|
||||
| manager.autoInstrumentationImage.dotnet.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.dotnet.tag | string | `""` | |
|
||||
| manager.autoInstrumentationImage.go.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.go.tag | string | `""` | |
|
||||
| manager.autoInstrumentationImage.java.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.java.tag | string | `""` | |
|
||||
| manager.autoInstrumentationImage.nodejs.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.nodejs.tag | string | `""` | |
|
||||
| manager.autoInstrumentationImage.python.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.python.tag | string | `""` | |
|
||||
| manager.collectorImage.repository | string | `""` | |
|
||||
| manager.collectorImage.tag | string | `"0.116.1"` | |
|
||||
| manager.createRbacPermissions | bool | `false` | |
|
||||
| manager.deploymentAnnotations | object | `{}` | |
|
||||
| manager.env.ENABLE_WEBHOOKS | string | `"true"` | |
|
||||
| manager.extraArgs | list | `[]` | |
|
||||
| manager.extraEnvs | list | `[]` | |
|
||||
| manager.featureGates | string | `""` | |
|
||||
| manager.featureGatesMap | object | `{}` | |
|
||||
| manager.image.repository | string | `"ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator"` | |
|
||||
| manager.image.tag | string | `""` | |
|
||||
| manager.leaderElection.enabled | bool | `true` | |
|
||||
| manager.opampBridgeImage.repository | string | `""` | |
|
||||
| manager.opampBridgeImage.tag | string | `""` | |
|
||||
| manager.podAnnotations | object | `{}` | |
|
||||
| manager.podLabels | object | `{}` | |
|
||||
| manager.ports.healthzPort | int | `8081` | |
|
||||
| manager.ports.metricsPort | int | `8080` | |
|
||||
| manager.ports.webhookPort | int | `9443` | |
|
||||
| manager.prometheusRule.annotations | object | `{}` | |
|
||||
| manager.prometheusRule.defaultRules.additionalRuleAnnotations | object | `{}` | |
|
||||
| manager.prometheusRule.defaultRules.additionalRuleLabels | object | `{}` | |
|
||||
| manager.prometheusRule.defaultRules.duration | string | `"5m"` | |
|
||||
| manager.prometheusRule.defaultRules.enabled | bool | `false` | |
|
||||
| manager.prometheusRule.enabled | bool | `false` | |
|
||||
| manager.prometheusRule.extraLabels | object | `{}` | |
|
||||
| manager.prometheusRule.groups | list | `[]` | |
|
||||
| manager.prometheusRule.runbookUrl | string | `""` | |
|
||||
| manager.resources.limits.cpu | string | `"100m"` | |
|
||||
| manager.resources.limits.memory | string | `"128Mi"` | |
|
||||
| manager.resources.requests.cpu | string | `"100m"` | |
|
||||
| manager.resources.requests.memory | string | `"64Mi"` | |
|
||||
| manager.rolling | bool | `false` | |
|
||||
| manager.securityContext | object | `{}` | |
|
||||
| manager.serviceAccount | object | `{"annotations":{},"create":true,"name":""}` | Create the manager ServiceAccount |
|
||||
| manager.serviceAnnotations | object | `{}` | |
|
||||
| manager.serviceMonitor.annotations | object | `{}` | |
|
||||
| manager.serviceMonitor.enabled | bool | `false` | |
|
||||
| manager.serviceMonitor.extraLabels | object | `{}` | |
|
||||
| manager.serviceMonitor.metricRelabelings | list | `[]` | |
|
||||
| manager.serviceMonitor.metricsEndpoints[0].port | string | `"metrics"` | |
|
||||
| manager.serviceMonitor.relabelings | list | `[]` | |
|
||||
| manager.targetAllocatorImage.repository | string | `""` | |
|
||||
| manager.targetAllocatorImage.tag | string | `""` | |
|
||||
| manager.verticalPodAutoscaler.controlledResources | list | `[]` | |
|
||||
| manager.verticalPodAutoscaler.enabled | bool | `false` | |
|
||||
| manager.verticalPodAutoscaler.maxAllowed | object | `{}` | |
|
||||
| manager.verticalPodAutoscaler.minAllowed | object | `{}` | |
|
||||
| manager.verticalPodAutoscaler.updatePolicy.minReplicas | int | `2` | |
|
||||
| manager.verticalPodAutoscaler.updatePolicy.updateMode | string | `"Auto"` | |
|
||||
| nameOverride | string | `""` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| pdb.create | bool | `false` | |
|
||||
| pdb.maxUnavailable | string | `""` | |
|
||||
| pdb.minAvailable | int | `1` | |
|
||||
| priorityClassName | string | `""` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| role.create | bool | `true` | |
|
||||
| securityContext.fsGroup | int | `65532` | |
|
||||
| securityContext.runAsGroup | int | `65532` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `65532` | |
|
||||
| testFramework.image.repository | string | `"gcr.io/customer-facing/busybox"` | |
|
||||
| testFramework.image.tag | string | `"1.37.0"` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| topologySpreadConstraints | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,21 @@
|
||||
# prom-scraper
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry Collector for scraping miscellaneous Prometheus endpoints
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"500m"` | |
|
||||
| resources.requests.memory | string | `"768Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,570 @@
|
||||
# gw-traces
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Gateway" Deployment for Traces
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].key | string | `"app.kubernetes.io/name"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].operator | string | `"In"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].values[0] | string | `"otel-gw-traces-collector"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].weight | int | `100` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.maxReplicas | int | `8` | |
|
||||
| autoscaling.minReplicas | int | `2` | |
|
||||
| clusterName | string | `""` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"512Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tempoExporter.endpoint | string | `"tempo-qa.observability.devopsrnd.reltio.com:4317"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# k8s-metrics
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry Collector for Cluster Wide K8S Attributes
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources.limits.memory | string | `"1Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"256Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# kube-state-metrics
|
||||
|
||||
  
|
||||
|
||||
Install kube-state-metrics to generate and expose cluster-level metrics
|
||||
|
||||
**Homepage:** <https://github.com/kubernetes/kube-state-metrics/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| tariq1890 | <tariq.ibrahim@mulesoft.com> | <https://github.com/tariq1890> |
|
||||
| mrueg | <manuel@rueg.eu> | <https://github.com/mrueg> |
|
||||
| dotdc | <david@0xdc.me> | <https://github.com/dotdc> |
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/kubernetes/kube-state-metrics/>
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| annotations | object | `{}` | |
|
||||
| automountServiceAccountToken | bool | `true` | |
|
||||
| autosharding.enabled | bool | `false` | |
|
||||
| collectors[0] | string | `"certificatesigningrequests"` | |
|
||||
| collectors[10] | string | `"limitranges"` | |
|
||||
| collectors[11] | string | `"mutatingwebhookconfigurations"` | |
|
||||
| collectors[12] | string | `"namespaces"` | |
|
||||
| collectors[13] | string | `"networkpolicies"` | |
|
||||
| collectors[14] | string | `"nodes"` | |
|
||||
| collectors[15] | string | `"persistentvolumeclaims"` | |
|
||||
| collectors[16] | string | `"persistentvolumes"` | |
|
||||
| collectors[17] | string | `"poddisruptionbudgets"` | |
|
||||
| collectors[18] | string | `"pods"` | |
|
||||
| collectors[19] | string | `"replicasets"` | |
|
||||
| collectors[1] | string | `"configmaps"` | |
|
||||
| collectors[20] | string | `"replicationcontrollers"` | |
|
||||
| collectors[21] | string | `"resourcequotas"` | |
|
||||
| collectors[22] | string | `"secrets"` | |
|
||||
| collectors[23] | string | `"services"` | |
|
||||
| collectors[24] | string | `"statefulsets"` | |
|
||||
| collectors[25] | string | `"storageclasses"` | |
|
||||
| collectors[26] | string | `"validatingwebhookconfigurations"` | |
|
||||
| collectors[27] | string | `"volumeattachments"` | |
|
||||
| collectors[2] | string | `"cronjobs"` | |
|
||||
| collectors[3] | string | `"daemonsets"` | |
|
||||
| collectors[4] | string | `"deployments"` | |
|
||||
| collectors[5] | string | `"endpoints"` | |
|
||||
| collectors[6] | string | `"horizontalpodautoscalers"` | |
|
||||
| collectors[7] | string | `"ingresses"` | |
|
||||
| collectors[8] | string | `"jobs"` | |
|
||||
| collectors[9] | string | `"leases"` | |
|
||||
| containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
|
||||
| containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
|
||||
| containerSecurityContext.readOnlyRootFilesystem | bool | `true` | |
|
||||
| containers | list | `[]` | |
|
||||
| customLabels | object | `{}` | |
|
||||
| customResourceState.config | object | `{}` | |
|
||||
| customResourceState.enabled | bool | `false` | |
|
||||
| env | object | `{}` | |
|
||||
| extraArgs | list | `[]` | |
|
||||
| extraManifests | list | `[]` | |
|
||||
| global.imagePullSecrets | list | `[]` | |
|
||||
| global.imageRegistry | string | `""` | |
|
||||
| hostNetwork | bool | `false` | |
|
||||
| image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| image.registry | string | `"registry.k8s.io"` | |
|
||||
| image.repository | string | `"kube-state-metrics/kube-state-metrics"` | |
|
||||
| image.sha | string | `""` | |
|
||||
| image.tag | string | `""` | |
|
||||
| imagePullSecrets | list | `[]` | |
|
||||
| initContainers | list | `[]` | |
|
||||
| kubeRBACProxy.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
|
||||
| kubeRBACProxy.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
|
||||
| kubeRBACProxy.containerSecurityContext.readOnlyRootFilesystem | bool | `true` | |
|
||||
| kubeRBACProxy.enabled | bool | `false` | |
|
||||
| kubeRBACProxy.extraArgs | list | `[]` | |
|
||||
| kubeRBACProxy.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| kubeRBACProxy.image.registry | string | `"gcr.io"` | |
|
||||
| kubeRBACProxy.image.repository | string | `"customer-facing/brancz/kube-rbac-proxy"` | |
|
||||
| kubeRBACProxy.image.sha | string | `""` | |
|
||||
| kubeRBACProxy.image.tag | string | `"v0.19.0"` | |
|
||||
| kubeRBACProxy.imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| kubeRBACProxy.resources | object | `{}` | |
|
||||
| kubeRBACProxy.volumeMounts | list | `[]` | |
|
||||
| kubeTargetVersionOverride | string | `""` | |
|
||||
| kubeconfig.enabled | bool | `false` | |
|
||||
| kubeconfig.secret | string | `nil` | |
|
||||
| livenessProbe.failureThreshold | int | `3` | |
|
||||
| livenessProbe.httpGet.httpHeaders | list | `[]` | |
|
||||
| livenessProbe.httpGet.scheme | string | `"http"` | |
|
||||
| livenessProbe.initialDelaySeconds | int | `5` | |
|
||||
| livenessProbe.periodSeconds | int | `10` | |
|
||||
| livenessProbe.successThreshold | int | `1` | |
|
||||
| livenessProbe.timeoutSeconds | int | `5` | |
|
||||
| metricAllowlist | list | `[]` | |
|
||||
| metricAnnotationsAllowList | list | `[]` | |
|
||||
| metricDenylist | list | `[]` | |
|
||||
| metricLabelsAllowlist | list | `[]` | |
|
||||
| namespaceOverride | string | `""` | |
|
||||
| namespaces | string | `""` | |
|
||||
| namespacesDenylist | string | `""` | |
|
||||
| networkPolicy.enabled | bool | `false` | |
|
||||
| networkPolicy.flavor | string | `"kubernetes"` | Flavor of the network policy to use. Can be: * kubernetes for networking.k8s.io/v1/NetworkPolicy * cilium for cilium.io/v2/CiliumNetworkPolicy |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podDisruptionBudget | object | `{}` | |
|
||||
| podLabels | object | `{}` | |
|
||||
| podSecurityPolicy.additionalVolumes | list | `[]` | |
|
||||
| podSecurityPolicy.annotations | object | `{}` | |
|
||||
| podSecurityPolicy.enabled | bool | `false` | |
|
||||
| prometheus.monitor.additionalLabels | object | `{}` | |
|
||||
| prometheus.monitor.annotations | object | `{}` | |
|
||||
| prometheus.monitor.enabled | bool | `false` | |
|
||||
| prometheus.monitor.http.bearerTokenFile | string | `""` | |
|
||||
| prometheus.monitor.http.bearerTokenSecret | object | `{}` | |
|
||||
| prometheus.monitor.http.enableHttp2 | bool | `false` | |
|
||||
| prometheus.monitor.http.honorLabels | bool | `false` | |
|
||||
| prometheus.monitor.http.interval | string | `""` | |
|
||||
| prometheus.monitor.http.metricRelabelings | list | `[]` | |
|
||||
| prometheus.monitor.http.proxyUrl | string | `""` | |
|
||||
| prometheus.monitor.http.relabelings | list | `[]` | |
|
||||
| prometheus.monitor.http.scheme | string | `""` | |
|
||||
| prometheus.monitor.http.scrapeTimeout | string | `""` | |
|
||||
| prometheus.monitor.http.tlsConfig | object | `{}` | |
|
||||
| prometheus.monitor.jobLabel | string | `""` | |
|
||||
| prometheus.monitor.labelLimit | int | `0` | |
|
||||
| prometheus.monitor.labelNameLengthLimit | int | `0` | |
|
||||
| prometheus.monitor.labelValueLengthLimit | int | `0` | |
|
||||
| prometheus.monitor.metrics.bearerTokenFile | string | `""` | |
|
||||
| prometheus.monitor.metrics.bearerTokenSecret | object | `{}` | |
|
||||
| prometheus.monitor.metrics.enableHttp2 | bool | `false` | |
|
||||
| prometheus.monitor.metrics.honorLabels | bool | `false` | |
|
||||
| prometheus.monitor.metrics.interval | string | `""` | |
|
||||
| prometheus.monitor.metrics.metricRelabelings | list | `[]` | |
|
||||
| prometheus.monitor.metrics.proxyUrl | string | `""` | |
|
||||
| prometheus.monitor.metrics.relabelings | list | `[]` | |
|
||||
| prometheus.monitor.metrics.scheme | string | `""` | |
|
||||
| prometheus.monitor.metrics.scrapeTimeout | string | `""` | |
|
||||
| prometheus.monitor.metrics.tlsConfig | object | `{}` | |
|
||||
| prometheus.monitor.namespace | string | `""` | |
|
||||
| prometheus.monitor.namespaceSelector | list | `[]` | |
|
||||
| prometheus.monitor.podTargetLabels | list | `[]` | |
|
||||
| prometheus.monitor.sampleLimit | int | `0` | |
|
||||
| prometheus.monitor.selectorOverride | object | `{}` | |
|
||||
| prometheus.monitor.targetLabels | list | `[]` | |
|
||||
| prometheus.monitor.targetLimit | int | `0` | |
|
||||
| prometheusScrape | bool | `true` | |
|
||||
| rbac.create | bool | `true` | |
|
||||
| rbac.extraRules | list | `[]` | |
|
||||
| rbac.useClusterRole | bool | `true` | |
|
||||
| readinessProbe.failureThreshold | int | `3` | |
|
||||
| readinessProbe.httpGet.httpHeaders | list | `[]` | |
|
||||
| readinessProbe.httpGet.scheme | string | `"http"` | |
|
||||
| readinessProbe.initialDelaySeconds | int | `5` | |
|
||||
| readinessProbe.periodSeconds | int | `10` | |
|
||||
| readinessProbe.successThreshold | int | `1` | |
|
||||
| readinessProbe.timeoutSeconds | int | `5` | |
|
||||
| releaseLabel | bool | `false` | |
|
||||
| releaseNamespace | bool | `false` | |
|
||||
| replicas | int | `1` | |
|
||||
| resources | object | `{}` | |
|
||||
| revisionHistoryLimit | int | `10` | |
|
||||
| securityContext.enabled | bool | `true` | |
|
||||
| securityContext.fsGroup | int | `65534` | |
|
||||
| securityContext.runAsGroup | int | `65534` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `65534` | |
|
||||
| securityContext.seccompProfile.type | string | `"RuntimeDefault"` | |
|
||||
| selectorOverride | object | `{}` | |
|
||||
| selfMonitor.enabled | bool | `false` | |
|
||||
| service.annotations | object | `{}` | |
|
||||
| service.clusterIP | string | `""` | |
|
||||
| service.ipDualStack.enabled | bool | `false` | |
|
||||
| service.ipDualStack.ipFamilies[0] | string | `"IPv6"` | |
|
||||
| service.ipDualStack.ipFamilies[1] | string | `"IPv4"` | |
|
||||
| service.ipDualStack.ipFamilyPolicy | string | `"PreferDualStack"` | |
|
||||
| service.loadBalancerIP | string | `""` | |
|
||||
| service.loadBalancerSourceRanges | list | `[]` | |
|
||||
| service.nodePort | int | `0` | |
|
||||
| service.port | int | `8080` | |
|
||||
| service.type | string | `"ClusterIP"` | |
|
||||
| serviceAccount.annotations | object | `{}` | |
|
||||
| serviceAccount.automountServiceAccountToken | bool | `true` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| serviceAccount.imagePullSecrets | list | `[]` | |
|
||||
| serviceAccount.name | string | `nil` | |
|
||||
| startupProbe.enabled | bool | `false` | |
|
||||
| startupProbe.failureThreshold | int | `3` | |
|
||||
| startupProbe.httpGet.httpHeaders | list | `[]` | |
|
||||
| startupProbe.httpGet.scheme | string | `"http"` | |
|
||||
| startupProbe.initialDelaySeconds | int | `0` | |
|
||||
| startupProbe.periodSeconds | int | `10` | |
|
||||
| startupProbe.successThreshold | int | `1` | |
|
||||
| startupProbe.timeoutSeconds | int | `5` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| topologySpreadConstraints | list | `[]` | |
|
||||
| verticalPodAutoscaler.controlledResources | list | `[]` | |
|
||||
| verticalPodAutoscaler.enabled | bool | `false` | |
|
||||
| verticalPodAutoscaler.maxAllowed | object | `{}` | |
|
||||
| verticalPodAutoscaler.minAllowed | object | `{}` | |
|
||||
| volumeMounts | list | `[]` | |
|
||||
| volumes | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# opentelemetry-operator
|
||||
|
||||
  
|
||||
|
||||
OpenTelemetry Operator Helm chart for Kubernetes
|
||||
|
||||
**Homepage:** <https://opentelemetry.io/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Allex1 | | |
|
||||
| dmitryax | | |
|
||||
| jaronoff97 | | |
|
||||
| TylerHelmuth | | |
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/open-telemetry/opentelemetry-operator>
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| additionalLabels | object | `{}` | |
|
||||
| admissionWebhooks.autoGenerateCert.certPeriodDays | int | `365` | |
|
||||
| admissionWebhooks.autoGenerateCert.enabled | bool | `true` | |
|
||||
| admissionWebhooks.autoGenerateCert.recreate | bool | `true` | |
|
||||
| admissionWebhooks.caFile | string | `""` | |
|
||||
| admissionWebhooks.certFile | string | `""` | |
|
||||
| admissionWebhooks.certManager.certificateAnnotations | object | `{}` | |
|
||||
| admissionWebhooks.certManager.duration | string | `""` | |
|
||||
| admissionWebhooks.certManager.enabled | bool | `true` | |
|
||||
| admissionWebhooks.certManager.issuerAnnotations | object | `{}` | |
|
||||
| admissionWebhooks.certManager.issuerRef | object | `{}` | |
|
||||
| admissionWebhooks.certManager.renewBefore | string | `""` | |
|
||||
| admissionWebhooks.create | bool | `true` | |
|
||||
| admissionWebhooks.failurePolicy | string | `"Fail"` | |
|
||||
| admissionWebhooks.keyFile | string | `""` | |
|
||||
| admissionWebhooks.namePrefix | string | `""` | |
|
||||
| admissionWebhooks.namespaceSelector | object | `{}` | |
|
||||
| admissionWebhooks.objectSelector | object | `{}` | |
|
||||
| admissionWebhooks.pods.failurePolicy | string | `"Ignore"` | |
|
||||
| admissionWebhooks.secretAnnotations | object | `{}` | |
|
||||
| admissionWebhooks.secretLabels | object | `{}` | |
|
||||
| admissionWebhooks.secretName | string | `""` | |
|
||||
| admissionWebhooks.serviceAnnotations | object | `{}` | |
|
||||
| admissionWebhooks.servicePort | int | `443` | |
|
||||
| admissionWebhooks.timeoutSeconds | int | `10` | |
|
||||
| affinity | object | `{}` | |
|
||||
| clusterDomain | string | `"cluster.local"` | |
|
||||
| clusterRole.create | bool | `true` | |
|
||||
| crds.create | bool | `true` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| hostNetwork | bool | `false` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| kubeRBACProxy.enabled | bool | `true` | |
|
||||
| kubeRBACProxy.extraArgs | list | `[]` | |
|
||||
| kubeRBACProxy.image.repository | string | `"gcr.io/customer-facing/brancz/kube-rbac-proxy"` | |
|
||||
| kubeRBACProxy.image.tag | string | `"v0.18.1"` | |
|
||||
| kubeRBACProxy.ports.proxyPort | int | `8443` | |
|
||||
| kubeRBACProxy.resources.limits.cpu | string | `"500m"` | |
|
||||
| kubeRBACProxy.resources.limits.memory | string | `"128Mi"` | |
|
||||
| kubeRBACProxy.resources.requests.cpu | string | `"5m"` | |
|
||||
| kubeRBACProxy.resources.requests.memory | string | `"64Mi"` | |
|
||||
| kubeRBACProxy.securityContext | object | `{}` | |
|
||||
| manager.autoInstrumentationImage.apacheHttpd.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.apacheHttpd.tag | string | `""` | |
|
||||
| manager.autoInstrumentationImage.dotnet.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.dotnet.tag | string | `""` | |
|
||||
| manager.autoInstrumentationImage.go.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.go.tag | string | `""` | |
|
||||
| manager.autoInstrumentationImage.java.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.java.tag | string | `""` | |
|
||||
| manager.autoInstrumentationImage.nodejs.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.nodejs.tag | string | `""` | |
|
||||
| manager.autoInstrumentationImage.python.repository | string | `""` | |
|
||||
| manager.autoInstrumentationImage.python.tag | string | `""` | |
|
||||
| manager.collectorImage.repository | string | `""` | |
|
||||
| manager.collectorImage.tag | string | `"0.116.1"` | |
|
||||
| manager.createRbacPermissions | bool | `false` | |
|
||||
| manager.deploymentAnnotations | object | `{}` | |
|
||||
| manager.env.ENABLE_WEBHOOKS | string | `"true"` | |
|
||||
| manager.extraArgs | list | `[]` | |
|
||||
| manager.extraEnvs | list | `[]` | |
|
||||
| manager.featureGates | string | `""` | |
|
||||
| manager.featureGatesMap | object | `{}` | |
|
||||
| manager.image.repository | string | `"ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator"` | |
|
||||
| manager.image.tag | string | `""` | |
|
||||
| manager.leaderElection.enabled | bool | `true` | |
|
||||
| manager.opampBridgeImage.repository | string | `""` | |
|
||||
| manager.opampBridgeImage.tag | string | `""` | |
|
||||
| manager.podAnnotations | object | `{}` | |
|
||||
| manager.podLabels | object | `{}` | |
|
||||
| manager.ports.healthzPort | int | `8081` | |
|
||||
| manager.ports.metricsPort | int | `8080` | |
|
||||
| manager.ports.webhookPort | int | `9443` | |
|
||||
| manager.prometheusRule.annotations | object | `{}` | |
|
||||
| manager.prometheusRule.defaultRules.additionalRuleAnnotations | object | `{}` | |
|
||||
| manager.prometheusRule.defaultRules.additionalRuleLabels | object | `{}` | |
|
||||
| manager.prometheusRule.defaultRules.duration | string | `"5m"` | |
|
||||
| manager.prometheusRule.defaultRules.enabled | bool | `false` | |
|
||||
| manager.prometheusRule.enabled | bool | `false` | |
|
||||
| manager.prometheusRule.extraLabels | object | `{}` | |
|
||||
| manager.prometheusRule.groups | list | `[]` | |
|
||||
| manager.prometheusRule.runbookUrl | string | `""` | |
|
||||
| manager.resources.limits.cpu | string | `"100m"` | |
|
||||
| manager.resources.limits.memory | string | `"128Mi"` | |
|
||||
| manager.resources.requests.cpu | string | `"100m"` | |
|
||||
| manager.resources.requests.memory | string | `"64Mi"` | |
|
||||
| manager.rolling | bool | `false` | |
|
||||
| manager.securityContext | object | `{}` | |
|
||||
| manager.serviceAccount | object | `{"annotations":{},"create":true,"name":""}` | Create the manager ServiceAccount |
|
||||
| manager.serviceAnnotations | object | `{}` | |
|
||||
| manager.serviceMonitor.annotations | object | `{}` | |
|
||||
| manager.serviceMonitor.enabled | bool | `false` | |
|
||||
| manager.serviceMonitor.extraLabels | object | `{}` | |
|
||||
| manager.serviceMonitor.metricRelabelings | list | `[]` | |
|
||||
| manager.serviceMonitor.metricsEndpoints[0].port | string | `"metrics"` | |
|
||||
| manager.serviceMonitor.relabelings | list | `[]` | |
|
||||
| manager.targetAllocatorImage.repository | string | `""` | |
|
||||
| manager.targetAllocatorImage.tag | string | `""` | |
|
||||
| manager.verticalPodAutoscaler.controlledResources | list | `[]` | |
|
||||
| manager.verticalPodAutoscaler.enabled | bool | `false` | |
|
||||
| manager.verticalPodAutoscaler.maxAllowed | object | `{}` | |
|
||||
| manager.verticalPodAutoscaler.minAllowed | object | `{}` | |
|
||||
| manager.verticalPodAutoscaler.updatePolicy.minReplicas | int | `2` | |
|
||||
| manager.verticalPodAutoscaler.updatePolicy.updateMode | string | `"Auto"` | |
|
||||
| nameOverride | string | `""` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| pdb.create | bool | `false` | |
|
||||
| pdb.maxUnavailable | string | `""` | |
|
||||
| pdb.minAvailable | int | `1` | |
|
||||
| priorityClassName | string | `""` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| role.create | bool | `true` | |
|
||||
| securityContext.fsGroup | int | `65532` | |
|
||||
| securityContext.runAsGroup | int | `65532` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `65532` | |
|
||||
| testFramework.image.repository | string | `"gcr.io/customer-facing/busybox"` | |
|
||||
| testFramework.image.tag | string | `"1.37.0"` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| topologySpreadConstraints | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# prom-scraper
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry Collector for scraping miscellaneous Prometheus endpoints
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| replicaCount | int | `1` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"500m"` | |
|
||||
| resources.requests.memory | string | `"768Mi"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# agent
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Agent" Daemonset
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity | object | `{}` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| resources.limits.cpu | string | `"1"` | |
|
||||
| resources.limits.memory | string | `"512Mi"` | |
|
||||
| resources.requests.cpu | string | `"50m"` | |
|
||||
| resources.requests.memory | string | `"256Mi"` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tolerations[0].effect | string | `"NoSchedule"` | |
|
||||
| tolerations[0].key | string | `"node.reltio.com/nodepool"` | |
|
||||
| tolerations[0].operator | string | `"Equal"` | |
|
||||
| tolerations[0].value | string | `"dataload.arm64"` | |
|
||||
| tolerations[1].effect | string | `"NoSchedule"` | |
|
||||
| tolerations[1].key | string | `"node.reltio.com/nodepool"` | |
|
||||
| tolerations[1].operator | string | `"Equal"` | |
|
||||
| tolerations[1].value | string | `"dataprocess.arm64"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# common
|
||||
|
||||
  
|
||||
|
||||
Common OpenTelemetry k8s resources used by other Reltio OTel charts
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| clusterName | string | `""` | |
|
||||
| fullnameOverride | string | `"otel-common"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# gw-metrics
|
||||
|
||||
  
|
||||
|
||||
Reltio OpenTelemetry "Gateway" Deployment for Metrics
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].key | string | `"app.kubernetes.io/name"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].operator | string | `"In"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.labelSelector.matchExpressions[0].values[0] | string | `"otel-gw-metrics-collector"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].podAffinityTerm.topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].weight | int | `100` | |
|
||||
| autoscaling.enabled | bool | `true` | |
|
||||
| autoscaling.maxReplicas | int | `8` | |
|
||||
| autoscaling.minReplicas | int | `2` | |
|
||||
| autoscaling.targetCPUUtilizationPercentage | int | `80` | |
|
||||
| awsManagePrometheusWriteEndpoint | string | `"https://aps-workspaces.us-east-1.amazonaws.com/workspaces/ws-84e08a5b-7fda-409c-b421-418deed15bcd/api/v1/remote_write"` | |
|
||||
| awsSigv4auth.IAMRoleArn | string | `"arn:aws:iam::930358522410:role/amp-iamproxy-ingest-role"` | |
|
||||
| awsSigv4auth.region | string | `"us-east-1"` | |
|
||||
| fullnameOverride | string | `""` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| nameOverride | string | `"otel"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| podAnnotations | object | `{}` | |
|
||||
| podSecurityContext | object | `{}` | |
|
||||
| resources.limits.memory | string | `"2Gi"` | |
|
||||
| resources.requests.cpu | string | `"250m"` | |
|
||||
| resources.requests.memory | string | `"512Mi"` | |
|
||||
| securityContext | object | `{}` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| tolerations | list | `[]` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
# otel-collector
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes OpenTelemetry Operator
|
||||
|
||||
## Requirements
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| file://charts/agent | agent | 0.1.2 |
|
||||
| file://charts/common | common | 0.1.1 |
|
||||
| file://charts/gw-metrics | gw-metrics | 0.1.1 |
|
||||
| file://charts/gw-traces | gw-traces | 0.1.1 |
|
||||
| file://charts/k8s-metrics | k8s-metrics | 0.1.1 |
|
||||
| file://charts/kube-state-metrics | kube-state-metrics | 5.31.0 |
|
||||
| file://charts/opentelemetry-operator | opentelemetry-operator | 0.78.2 |
|
||||
| file://charts/prom-scraper | prom-scraper | 0.1.1 |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| agent.enabled | bool | `true` | |
|
||||
| agent.fullnameOverride | string | `"otel-agent"` | |
|
||||
| agent.serviceAccount.name | string | `"otel-agent-sa"` | |
|
||||
| global.clusterName | string | `"eks-new-cluster"` | |
|
||||
| global.gwMetricsName | string | `"otel-gw-metrics"` | |
|
||||
| global.gwTracesName | string | `"otel-gw-traces"` | |
|
||||
| global.k8sClusterRoleAWSDetector | string | `"otel-aws-detector"` | |
|
||||
| global.k8sClusterRoleGateway | string | `"otel-gateway"` | |
|
||||
| global.k8sClusterRolePodandNSRO | string | `"otel-k8s-pod-ns-ro"` | |
|
||||
| gw-metrics.enabled | bool | `true` | |
|
||||
| gw-metrics.fullnameOverride | string | `"otel-gw-metrics"` | |
|
||||
| gw-metrics.serviceAccount.name | string | `"otel-gw-metrics-sa"` | |
|
||||
| gw-metrics.vaultKey | string | `"service/data/otel-collector"` | |
|
||||
| gw-traces.enabled | bool | `true` | |
|
||||
| gw-traces.fullnameOverride | string | `"otel-gw-traces"` | |
|
||||
| gw-traces.serviceAccount.name | string | `"otel-gw-traces-sa"` | |
|
||||
| gw-traces.vaultKey | string | `"service/data/otel-collector"` | |
|
||||
| k8s-metrics.enabled | bool | `true` | |
|
||||
| k8s-metrics.fullnameOverride | string | `"otel-k8s-metrics"` | |
|
||||
| k8s-metrics.serviceAccount.name | string | `"otel-k8s-metrics-sa"` | |
|
||||
| opentelemetry-operator.enabled | bool | `true` | |
|
||||
| opentelemetry-operator.manager.collectorImage.repository | string | `"gcr.io/customer-facing/otel/opentelemetry-collector-contrib"` | |
|
||||
| opentelemetry-operator.manager.collectorImage.tag | string | `"0.116.1"` | |
|
||||
| opentelemetry-operator.nameOverride | string | `"open-telemetry"` | |
|
||||
| prom-scraper.enabled | bool | `true` | |
|
||||
| prom-scraper.fullnameOverride | string | `"otel-prom-scraper"` | |
|
||||
| prom-scraper.serviceAccount.name | string | `"otel-prom-scraper-sa"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,102 @@
|
||||
# pms-app
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for managing Kubernetes Platform Management Apps Deployments
|
||||
|
||||
**Homepage:** <https://www.reltio.com/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Reltio | <sai.krishna@reltio.com> | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `"both"` | |
|
||||
| baseRegistryURL | string | `"gcr.io/customer-facing"` | |
|
||||
| cloudProvider | string | `"aws"` | |
|
||||
| clusterDomain | string | `"cluster.local"` | |
|
||||
| clusterName | string | `""` | |
|
||||
| commonAnnotations | object | `{}` | |
|
||||
| commonJobLabels."reltio.app/type" | string | `"rdm-batch-job"` | |
|
||||
| commonLabels."reltio.app/type" | string | `"rdm-app"` | |
|
||||
| commonPodLabels | object | `{}` | |
|
||||
| commonservicesValues | object | `{}` | |
|
||||
| domain | string | `"cloud.reltio.com"` | |
|
||||
| efsClaimHeapDumps | string | `""` | |
|
||||
| enableRdmAppServices | list | `[]` | |
|
||||
| environmentType | string | `"production"` | |
|
||||
| etalonsubDomain | string | `"etalon"` | |
|
||||
| gcrregcred.name | string | `"gcrregcred"` | |
|
||||
| gcrregcred.refreshInterval | string | `"15s"` | |
|
||||
| gcrregcred.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| gcrregcred.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| gcrregcred.target.type | string | `"kubernetes.io/dockerconfigjson"` | |
|
||||
| global.argoStrategy | string | `"bluegreen"` | |
|
||||
| global.haEnabled | bool | `false` | |
|
||||
| global.horizontalPodScaling.hpaEnabled | bool | `true` | |
|
||||
| global.horizontalPodScaling.hpaMaxReplicas | int | `5` | |
|
||||
| global.horizontalPodScaling.hpaScaleUpFreq | int | `45` | |
|
||||
| global.horizontalPodScaling.scalingDownWindowSeconds | int | `300` | |
|
||||
| global.horizontalPodScaling.scalingUpWindowSeconds | int | `20` | |
|
||||
| global.image.enabled | bool | `false` | |
|
||||
| global.image.tag | string | `"1.0.0"` | |
|
||||
| global.nfsMount.enabled | bool | `true` | |
|
||||
| global.nfsMount.storageClass.name | string | `""` | |
|
||||
| global.pdb.enabled | bool | `false` | |
|
||||
| global.pdb.minAvailable | int | `1` | |
|
||||
| global.refreshInterval | string | `"15s"` | |
|
||||
| global.releaseChar | string | `"b"` | |
|
||||
| global.replicas | int | `1` | |
|
||||
| global.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| global.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| global.target.type | string | `"Opaque"` | |
|
||||
| global.topologySpreadConstraints[0].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[0].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[0].topologyKey | string | `"kubernetes.io/hostname"` | |
|
||||
| global.topologySpreadConstraints[0].whenUnsatisfiable | string | `"ScheduleAnyway"` | |
|
||||
| global.topologySpreadConstraints[1].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[1].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[1].topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| global.topologySpreadConstraints[1].whenUnsatisfiable | string | `"DoNotSchedule"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxSurge | string | `"65%"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxUnavailable | string | `"35%"` | |
|
||||
| global.upgradeStrategy.type | string | `"RollingUpdate"` | |
|
||||
| global.vault.vaultSecretRefName | string | `"service/data/vaultsecret-internal"` | |
|
||||
| global.vaultSecretRefName | string | `"vault-secret"` | |
|
||||
| helmTimeout | int | `600` | |
|
||||
| hooks.statusCheck.credentialsSecretRefName | string | `"status-check-credentials"` | |
|
||||
| hooks.statusCheck.enabled | bool | `false` | |
|
||||
| hooks.statusCheck.oauthTokenPersistentVolumeClaimRefName | string | `"status-check-oauth-token"` | |
|
||||
| hooks.statusCheck.slackWebhook | string | `""` | |
|
||||
| imagePullPolicy | string | `"IfNotPresent"` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| ingress.className | string | `""` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hostname | string | `"prod.reltio.local"` | |
|
||||
| ingress.port | int | `80` | |
|
||||
| ingress.protocol | string | `"http"` | |
|
||||
| jobAnnotations."cluster-autoscaler.kubernetes.io/safe-to-evict" | string | `"false"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| persistent.aws.efsID | string | `""` | |
|
||||
| persistent.aws.storageClass | string | `"efs-pv"` | |
|
||||
| persistent.efsEnabled | bool | `false` | |
|
||||
| persistent.rdmAppStorage | string | `"25Gi"` | |
|
||||
| region | string | `""` | |
|
||||
| reltioDomains | string | `".reltio.com,.reltiocn.cn"` | |
|
||||
| rootDomain | string | `"reltio.com"` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `10000` | |
|
||||
| serviceMesh.enabled | bool | `false` | |
|
||||
| serviceMesh.name | string | `""` | |
|
||||
| spotinstPercent | string | `"100"` | |
|
||||
| terminationGracePeriodSeconds | int | `600` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| vaultEnv | string | `"customers"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,102 @@
|
||||
# rdm-app
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for managing Kubernetes MDM Apps Deployments
|
||||
|
||||
**Homepage:** <https://www.reltio.com/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Reltio | <sai.krishna@reltio.com> | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `"both"` | |
|
||||
| baseRegistryURL | string | `"gcr.io/customer-facing"` | |
|
||||
| cloudProvider | string | `"aws"` | |
|
||||
| clusterDomain | string | `"cluster.local"` | |
|
||||
| clusterName | string | `""` | |
|
||||
| commonAnnotations | object | `{}` | |
|
||||
| commonJobLabels."reltio.app/type" | string | `"rdm-batch-job"` | |
|
||||
| commonLabels."reltio.app/type" | string | `"rdm-app"` | |
|
||||
| commonPodLabels | object | `{}` | |
|
||||
| commonservicesValues | object | `{}` | |
|
||||
| domain | string | `"cloud.reltio.com"` | |
|
||||
| efsClaimHeapDumps | string | `""` | |
|
||||
| enableRdmAppServices | list | `[]` | |
|
||||
| environmentType | string | `"production"` | |
|
||||
| etalonsubDomain | string | `"etalon"` | |
|
||||
| gcrregcred.name | string | `"gcrregcred"` | |
|
||||
| gcrregcred.refreshInterval | string | `"15s"` | |
|
||||
| gcrregcred.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| gcrregcred.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| gcrregcred.target.type | string | `"kubernetes.io/dockerconfigjson"` | |
|
||||
| global.argoStrategy | string | `"bluegreen"` | |
|
||||
| global.haEnabled | bool | `false` | |
|
||||
| global.horizontalPodScaling.hpaEnabled | bool | `true` | |
|
||||
| global.horizontalPodScaling.hpaMaxReplicas | int | `5` | |
|
||||
| global.horizontalPodScaling.hpaScaleUpFreq | int | `45` | |
|
||||
| global.horizontalPodScaling.scalingDownWindowSeconds | int | `300` | |
|
||||
| global.horizontalPodScaling.scalingUpWindowSeconds | int | `20` | |
|
||||
| global.image.enabled | bool | `false` | |
|
||||
| global.image.tag | string | `"1.0.0"` | |
|
||||
| global.nfsMount.enabled | bool | `true` | |
|
||||
| global.nfsMount.storageClass.name | string | `""` | |
|
||||
| global.pdb.enabled | bool | `false` | |
|
||||
| global.pdb.minAvailable | int | `1` | |
|
||||
| global.refreshInterval | string | `"15s"` | |
|
||||
| global.releaseChar | string | `"b"` | |
|
||||
| global.replicas | int | `1` | |
|
||||
| global.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| global.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| global.target.type | string | `"Opaque"` | |
|
||||
| global.topologySpreadConstraints[0].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[0].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[0].topologyKey | string | `"kubernetes.io/hostname"` | |
|
||||
| global.topologySpreadConstraints[0].whenUnsatisfiable | string | `"ScheduleAnyway"` | |
|
||||
| global.topologySpreadConstraints[1].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[1].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[1].topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| global.topologySpreadConstraints[1].whenUnsatisfiable | string | `"DoNotSchedule"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxSurge | string | `"65%"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxUnavailable | string | `"35%"` | |
|
||||
| global.upgradeStrategy.type | string | `"RollingUpdate"` | |
|
||||
| global.vault.vaultSecretRefName | string | `"service/data/vaultsecret-internal"` | |
|
||||
| global.vaultSecretRefName | string | `"vault-secret"` | |
|
||||
| helmTimeout | int | `600` | |
|
||||
| hooks.statusCheck.credentialsSecretRefName | string | `"status-check-credentials"` | |
|
||||
| hooks.statusCheck.enabled | bool | `false` | |
|
||||
| hooks.statusCheck.oauthTokenPersistentVolumeClaimRefName | string | `"status-check-oauth-token"` | |
|
||||
| hooks.statusCheck.slackWebhook | string | `""` | |
|
||||
| imagePullPolicy | string | `"IfNotPresent"` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| ingress.className | string | `""` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hostname | string | `"prod.reltio.local"` | |
|
||||
| ingress.port | int | `80` | |
|
||||
| ingress.protocol | string | `"http"` | |
|
||||
| jobAnnotations."cluster-autoscaler.kubernetes.io/safe-to-evict" | string | `"false"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| persistent.aws.efsID | string | `""` | |
|
||||
| persistent.aws.storageClass | string | `"efs-pv"` | |
|
||||
| persistent.efsEnabled | bool | `false` | |
|
||||
| persistent.rdmAppStorage | string | `"25Gi"` | |
|
||||
| region | string | `""` | |
|
||||
| reltioDomains | string | `".reltio.com,.reltiocn.cn"` | |
|
||||
| rootDomain | string | `"reltio.com"` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `10000` | |
|
||||
| serviceMesh.enabled | bool | `false` | |
|
||||
| serviceMesh.name | string | `""` | |
|
||||
| spotinstPercent | string | `"100"` | |
|
||||
| terminationGracePeriodSeconds | int | `600` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| vaultEnv | string | `"customers"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,59 @@
|
||||
# redis
|
||||
|
||||
  
|
||||
|
||||
Helm chart for Redis with primary and read replica
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `"arm64"` | |
|
||||
| cloud | string | `"aws"` | |
|
||||
| clusterName | string | `"redis"` | |
|
||||
| cpuLimit | string | `"2000m"` | |
|
||||
| cpuRequest | string | `"500m"` | |
|
||||
| domain | string | `"internal.reltio.com"` | |
|
||||
| imagePullPolicy | string | `"IfNotPresent"` | |
|
||||
| imageRepository | string | `"redis:7.2.4-alpine"` | |
|
||||
| livenessProbe.enabled | bool | `true` | |
|
||||
| livenessProbe.failureThreshold | int | `6` | |
|
||||
| livenessProbe.initialDelaySeconds | int | `30` | |
|
||||
| livenessProbe.periodSeconds | int | `10` | |
|
||||
| livenessProbe.timeoutSeconds | int | `5` | |
|
||||
| memoryLimit | string | `"2Gi"` | |
|
||||
| memoryRequest | string | `"2Gi"` | |
|
||||
| onDemand | bool | `false` | |
|
||||
| persistence.enabled | bool | `true` | |
|
||||
| persistence.size | string | `"10Gi"` | |
|
||||
| persistence.storageClass | string | `""` | |
|
||||
| podDisruptionBudget.enabled | bool | `true` | |
|
||||
| podDisruptionBudget.minAvailable | int | `2` | |
|
||||
| readinessProbe.enabled | bool | `true` | |
|
||||
| readinessProbe.failureThreshold | int | `6` | |
|
||||
| readinessProbe.initialDelaySeconds | int | `5` | |
|
||||
| readinessProbe.periodSeconds | int | `10` | |
|
||||
| readinessProbe.timeoutSeconds | int | `5` | |
|
||||
| redis.appendfsync | string | `"everysec"` | |
|
||||
| redis.appendonly | string | `"yes"` | |
|
||||
| redis.maxmemory | string | `"1536mb"` | |
|
||||
| redis.maxmemoryPolicy | string | `"allkeys-lru"` | |
|
||||
| regcred | string | `""` | |
|
||||
| replicas | int | `3` | |
|
||||
| securityContext.enabled | bool | `true` | |
|
||||
| securityContext.fsGroup | int | `999` | |
|
||||
| securityContext.runAsGroup | int | `999` | |
|
||||
| securityContext.runAsUser | int | `999` | |
|
||||
| service.annotations."external-dns.alpha.kubernetes.io/ttl" | string | `"60"` | |
|
||||
| service.create | bool | `true` | |
|
||||
| service.port | int | `6379` | |
|
||||
| service.type | string | `"LoadBalancer"` | |
|
||||
| serviceAccount.create | bool | `true` | |
|
||||
| serviceName | string | `"redis"` | |
|
||||
| serviceReadonly.annotations."external-dns.alpha.kubernetes.io/ttl" | string | `"60"` | |
|
||||
| serviceReadonly.create | bool | `true` | |
|
||||
| serviceReadonly.port | int | `6379` | |
|
||||
| serviceReadonly.type | string | `"LoadBalancer"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,102 @@
|
||||
# shared-app
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for managing Kubernetes Shared Apps Deployments
|
||||
|
||||
**Homepage:** <https://www.reltio.com/>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Reltio | <sai.krishna@reltio.com> | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| arch | string | `"both"` | |
|
||||
| baseRegistryURL | string | `"gcr.io/customer-facing"` | |
|
||||
| cloudProvider | string | `"aws"` | |
|
||||
| clusterDomain | string | `"cluster.local"` | |
|
||||
| clusterName | string | `""` | |
|
||||
| commonAnnotations | object | `{}` | |
|
||||
| commonJobLabels."reltio.app/type" | string | `"shared-batch-job"` | |
|
||||
| commonLabels."reltio.app/type" | string | `"shared-app"` | |
|
||||
| commonPodLabels | object | `{}` | |
|
||||
| commonservicesValues | object | `{}` | |
|
||||
| domain | string | `"cloud.reltio.com"` | |
|
||||
| efsClaimHeapDumps | string | `""` | |
|
||||
| enableSharedAppServices | list | `[]` | |
|
||||
| environmentType | string | `"production"` | |
|
||||
| etalonsubDomain | string | `"etalon"` | |
|
||||
| gcrregcred.name | string | `"gcrregcred"` | |
|
||||
| gcrregcred.refreshInterval | string | `"15s"` | |
|
||||
| gcrregcred.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| gcrregcred.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| gcrregcred.target.type | string | `"kubernetes.io/dockerconfigjson"` | |
|
||||
| global.argoStrategy | string | `"bluegreen"` | |
|
||||
| global.haEnabled | bool | `false` | |
|
||||
| global.horizontalPodScaling.hpaEnabled | bool | `true` | |
|
||||
| global.horizontalPodScaling.hpaMaxReplicas | int | `5` | |
|
||||
| global.horizontalPodScaling.hpaScaleUpFreq | int | `45` | |
|
||||
| global.horizontalPodScaling.scalingDownWindowSeconds | int | `300` | |
|
||||
| global.horizontalPodScaling.scalingUpWindowSeconds | int | `20` | |
|
||||
| global.image.enabled | bool | `false` | |
|
||||
| global.image.tag | string | `"1.0.0"` | |
|
||||
| global.nfsMount.enabled | bool | `false` | |
|
||||
| global.nfsMount.storageClass.name | string | `""` | |
|
||||
| global.pdb.enabled | bool | `false` | |
|
||||
| global.pdb.minAvailable | int | `1` | |
|
||||
| global.refreshInterval | string | `"15s"` | |
|
||||
| global.releaseChar | string | `"b"` | |
|
||||
| global.replicas | int | `1` | |
|
||||
| global.secretStoreRef.kind | string | `"ClusterSecretStore"` | |
|
||||
| global.secretStoreRef.name | string | `"secretstore"` | |
|
||||
| global.target.type | string | `"Opaque"` | |
|
||||
| global.topologySpreadConstraints[0].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[0].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[0].topologyKey | string | `"kubernetes.io/hostname"` | |
|
||||
| global.topologySpreadConstraints[0].whenUnsatisfiable | string | `"ScheduleAnyway"` | |
|
||||
| global.topologySpreadConstraints[1].labelSelector.matchLabels.app | string | `"serviceName"` | |
|
||||
| global.topologySpreadConstraints[1].maxSkew | int | `1` | |
|
||||
| global.topologySpreadConstraints[1].topologyKey | string | `"topology.kubernetes.io/zone"` | |
|
||||
| global.topologySpreadConstraints[1].whenUnsatisfiable | string | `"DoNotSchedule"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxSurge | string | `"65%"` | |
|
||||
| global.upgradeStrategy.rollingUpdate.maxUnavailable | string | `"35%"` | |
|
||||
| global.upgradeStrategy.type | string | `"RollingUpdate"` | |
|
||||
| global.vault.vaultSecretRefName | string | `"service/data/vaultsecret-internal"` | |
|
||||
| global.vaultSecretRefName | string | `"vault-secret"` | |
|
||||
| helmTimeout | int | `600` | |
|
||||
| hooks.statusCheck.credentialsSecretRefName | string | `"status-check-credentials"` | |
|
||||
| hooks.statusCheck.enabled | bool | `false` | |
|
||||
| hooks.statusCheck.oauthTokenPersistentVolumeClaimRefName | string | `"status-check-oauth-token"` | |
|
||||
| hooks.statusCheck.slackWebhook | string | `""` | |
|
||||
| imagePullPolicy | string | `"IfNotPresent"` | |
|
||||
| imagePullSecrets[0].name | string | `"gcrregcred"` | |
|
||||
| ingress.className | string | `""` | |
|
||||
| ingress.enabled | bool | `false` | |
|
||||
| ingress.hostname | string | `"prod.reltio.local"` | |
|
||||
| ingress.port | int | `80` | |
|
||||
| ingress.protocol | string | `"http"` | |
|
||||
| jobAnnotations."cluster-autoscaler.kubernetes.io/safe-to-evict" | string | `"false"` | |
|
||||
| nodeSelector | object | `{}` | |
|
||||
| persistent.aws.efsID | string | `""` | |
|
||||
| persistent.aws.storageClass | string | `"efs-pv"` | |
|
||||
| persistent.efsEnabled | bool | `false` | |
|
||||
| persistent.sharedAppStorage | string | `"25Gi"` | |
|
||||
| region | string | `""` | |
|
||||
| reltioDomains | string | `".reltio.com,.reltiocn.cn"` | |
|
||||
| rootDomain | string | `"reltio.com"` | |
|
||||
| securityContext.runAsNonRoot | bool | `true` | |
|
||||
| securityContext.runAsUser | int | `10000` | |
|
||||
| serviceMesh.enabled | bool | `false` | |
|
||||
| serviceMesh.name | string | `""` | |
|
||||
| spotinstPercent | string | `"100"` | |
|
||||
| terminationGracePeriodSeconds | int | `600` | |
|
||||
| tolerations | list | `[]` | |
|
||||
| vaultEnv | string | `"customers"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,73 @@
|
||||
# twistlock
|
||||
|
||||
 
|
||||
|
||||
Twistlock Defender Daemon Set Helm Chart
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| COMMUNICATION_PORT | string | `"443"` | |
|
||||
| CONSOLE_CN | string | `"us-west1.cloud.twistlock.com"` | |
|
||||
| DATA_FOLDER | string | `"/var/lib/twistlock"` | |
|
||||
| DATA_RECOVERY_ENABLED | string | `"true"` | |
|
||||
| DATA_RECOVERY_VOLUME | string | `"/var/lib/twistlock-backup"` | |
|
||||
| DEFENDER_CN | string | `""` | |
|
||||
| DISABLE_CONSOLE_CGROUP_LIMITS | string | `"false"` | |
|
||||
| DOCKER_SOCKET | string | `"/var/run/docker.sock"` | |
|
||||
| DOCKER_TWISTLOCK_TAG | string | `"_33_01_137"` | |
|
||||
| FIPS_ENABLED | string | `"false"` | |
|
||||
| MANAGEMENT_PORT_HTTP | string | `""` | |
|
||||
| MANAGEMENT_PORT_HTTPS | string | `"8083"` | |
|
||||
| READ_ONLY_FS | string | `"true"` | |
|
||||
| RUN_CONSOLE_AS_ROOT | string | `"false"` | |
|
||||
| SELINUX_LABEL | string | `"disable"` | |
|
||||
| SYSTEMD_ENABLED | string | `"false"` | |
|
||||
| access_ca | string | `""` | |
|
||||
| admission_cert | string | `"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"` | |
|
||||
| admission_key | string | `"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"` | |
|
||||
| cluster | string | `"{{ .Values.clusterName }}"` | |
|
||||
| cluster_id | string | `"aa7bfc8a-e09f-b822-ae1d-ec4ee069dee4"` | |
|
||||
| cluster_name_resolving_method | string | `""` | |
|
||||
| cluster_role_name | string | `"twistlock-view"` | |
|
||||
| collect_pod_labels | bool | `false` | |
|
||||
| container_runtime_socket_folder | string | `"/var/run"` | |
|
||||
| containers_storage_mount | string | `"/var/lib/containerd"` | |
|
||||
| containers_storage_mount_rke2 | string | `""` | |
|
||||
| cri_data_rke2_volume_name | string | `"cri-rke2-data"` | |
|
||||
| cri_data_volume_name | string | `"cri-data"` | |
|
||||
| defender_ca_cert | string | `"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"` | |
|
||||
| defender_client_cert | string | `"LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURQRENDQWlTZ0F3SUJBZ0lSQU1lcm16Qlo2N0llQkYyVCtySzVXK013RFFZSktvWklodmNOQVFFTEJRQXcKS0RFU01CQUdBMVVFQ2hNSlZIZHBjM1JzYjJOck1SSXdFQVlEVlFRREV3bFVkMmx6ZEd4dlkyc3dIaGNOTWpReApNREEyTVRFeE1UQXdXaGNOTWpjeE1EQTJNVEV4TVRBd1dqQW9NUkl3RUFZRFZRUUtFd2xVZDJsemRHeHZZMnN4CkVqQVFCZ05WQkFNVENXeHZZMkZzYUc5emREQ0NBU0l3RFFZSktvWklodmNOQVFFQkJRQURnZ0VQQURDQ0FRb0MKZ2dFQkFNUldJYVVTZ0JBVVZZMlIwZUxkQzNFVEQydGZxZ2ZzdHE3L0laK2FQMzh4M3c3ZC9mT0VOMUxaUFVOWgo0Sm5icWtGWTJvdXFMQnJybmFXczA0bjBXQUdEdnlXdTFlZjNRaTZXK2ZYbHJTVXFJMVB0WVpRb2FubVdIbk13Cmw2eDB3YmZMVlg1VGdqUkFaYXBraFRGWllMSWQ5V25OTEVMVk5KMXlmd0lvOTZtYloreVRLQ3NjNFVseGJ3YlEKOUxnMi9JTVIwQ05QaHFQTGxpQ1pDOFNhUUVaZ2VoUjc2ZEtqNjY3Tk92dzR0RXB0N3RTUk96WGdIVzJSWnZGRwpiU0FVQTN1SVZJYXhSbXJHT2RmSjNrNlBZYlZuYWd2WElFbUx6RDNJb0dmK1R1WFFLOFhjMThNUEIrK2cwZmRMClAreHZSMFRFck9CMWlUbWw4QitsdnMwMVlKY0NBd0VBQWFOaE1GOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUcKQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdId1lEVlIwakJCZ3dGb0FVNkhoUApMWEZrYVpVMWUzUEZ5TitVUVc0UWxXTXdDUVlGS2dRQkFnY0VBREFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBCkZoT3V1SmlwcEVMZlJxdy9BZkoxNmU5bXRHcFlKMHNld1JuVDdRN3VrOWEzeS9rcHRpUWpIR0VhQmhzYTlWNmIKOFhwVEFUU2puSVR1RWV2aEljbWhpU2J5aG1sK3RxcndsQVdETGpmMm9kNThmdEh5bXY2Zk1Ua29ybSs4c253ZgpyYVg4aXQ1WWtFRUhZWTY5ZUpRc2tvVUJBa05aOFB5RE1GMkF5UXdPU0VYcEVaWkVoZUtYcVJEb2NVUkdHbmdSCjBWdW5BbDZ4dUJVWmxUY1BReXhJNUZGZlhqOVgraW5LTWp2QjlRRXNvc2VSUmF6UndUZVQrZVY1SlFWTkNwQU0KU1RuZDg5SnV3ZXB1RXRrUFhMYlU4WFBrVDI5T3hYdDJESCtYL21aOFh3dGxCOEtKeFRkSTJXVmRtWWx0U3Y4aApqRGI0bXlrdWlhUmRsd3ptR05RY2d3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo="` | |
|
||||
| defender_client_key | string | `"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"` | |
|
||||
| defender_service_port | int | `9998` | |
|
||||
| defender_type | string | `"cri"` | |
|
||||
| docker_socket_path | string | `"/var/run/docker.sock"` | |
|
||||
| gke_autopilot_annotation | string | `""` | |
|
||||
| host_custom_compliance | bool | `false` | |
|
||||
| image_name | string | `"gcr.io/customer-facing/twistlock/defender:defender_33_01_137"` | |
|
||||
| install_bundle | string | `"eyJzZWNyZXRzIjp7fSwiZ2xvYmFsUHJveHlPcHQiOnsiaHR0cFByb3h5IjoiIiwibm9Qcm94eSI6IiIsImNhIjoiIiwidXNlciI6IiIsInBhc3N3b3JkIjp7ImVuY3J5cHRlZCI6IiJ9fSwiY3VzdG9tZXJJRCI6InVzLTQtMTYxMDMxNDcxIiwiYXBpS2V5Ijoialp3eGtaenh2aUtjcDhiSG10bDNPbW52RDJIdFlDNXF6QmxudjdyTTVyU3FTTHlESWVEWlhmY0hXb1BIUHBKK2xVQy9GWURFSWlKQUpWY1lRQ0pNdVE9PSIsIm1pY3Jvc2VnQ29tcGF0aWJsZSI6ZmFsc2V9"` | |
|
||||
| limit_cpu | string | `"\"900m\""` | |
|
||||
| limit_memory | string | `"\"512Mi\""` | |
|
||||
| monitor_istio | bool | `false` | |
|
||||
| monitor_service_accounts | bool | `true` | |
|
||||
| namespace | string | `"twistlock"` | |
|
||||
| node_selector | string | `""` | |
|
||||
| old_defender_ca_cert | string | `""` | |
|
||||
| old_defender_client_cert | string | `""` | |
|
||||
| old_defender_client_key | string | `""` | |
|
||||
| openshift | bool | `false` | |
|
||||
| privileged | string | `"false"` | |
|
||||
| role_arn | string | `""` | |
|
||||
| runc_proxy_sock_folder | string | `"/run"` | |
|
||||
| secrets_name | string | `"gcrregcred"` | |
|
||||
| selinux_header | string | `""` | |
|
||||
| selinux_options | string | `""` | |
|
||||
| service_parameter | string | `"U0xleUNpNFFpN3JFVHJNa2Jmc0FKQ3VubVp2dkdmL2NoYUw5YWdORjNGbXZqbzF0dDMwWEdmRC9ldnB2cDFFVFRLMng1YmFjaXluWm44ZXFBcW5yY1E9PQ=="` | |
|
||||
| talos | bool | `false` | |
|
||||
| twistlock_data_folder | string | `"/var/lib/twistlock"` | |
|
||||
| unique_hostname | bool | `false` | |
|
||||
| ws_address | string | `"wss://us-west1.cloud.twistlock.com:443"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,66 @@
|
||||
# foxtrot-aks
|
||||
|
||||
  
|
||||
|
||||
Helm template for a foxtrot AKS spoke cluster
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| accountID | string | `"change-me"` | |
|
||||
| cluster.helm.argocd.appManagerPassword | string | `"$2a$10$ak2ae4FWxxQGS65RogRwJu8N2dn.pNegusy4Ji8zvOQAVmlVvAgvS"` | |
|
||||
| cluster.helm.argocd.appset.appRuntimeBranch | string | `"main"` | |
|
||||
| cluster.helm.argocd.appset.env | string | `"development"` | |
|
||||
| cluster.helm.argocd.appset.esoEnabled | bool | `true` | |
|
||||
| cluster.helm.argocd.appset.path | string | `"argocd-apps"` | |
|
||||
| cluster.helm.argocd.appset.repository | string | `"oci://europe-west2-docker.pkg.dev/artifacts-management-441415/app-common"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.name | string | `"vault-approle-spoke"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.namespace | string | `"crossplane-system"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.roleIdKey | string | `"role-id"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.secretIdKey | string | `"secret-id"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.serverKey | string | `"server"` | |
|
||||
| cluster.helm.argocd.appset.version | string | `"5.5.12"` | |
|
||||
| cluster.helm.argocd.baseRepo | string | `"git@bitbucket.org:reltio-ondemand"` | |
|
||||
| cluster.helm.argocd.cloudplatformsvcPassword | string | `"$2a$10$od3HaJx5UfLB2k2jrWDqgOfRs5uFLpx..JYfHgbNDt69GqxV2jS86"` | |
|
||||
| cluster.helm.argocd.ingress | bool | `true` | |
|
||||
| cluster.helm.argocd.ingressClass | string | `"nginx"` | |
|
||||
| cluster.helm.argocd.metrics | bool | `true` | |
|
||||
| cluster.helm.argocd.namespace | string | `"argocd"` | |
|
||||
| cluster.helm.argocd.path | string | `"argo-cd"` | |
|
||||
| cluster.helm.argocd.repository | string | `"https://argoproj.github.io/argo-helm"` | |
|
||||
| cluster.helm.argocd.version | string | `"8.0.17"` | |
|
||||
| cluster.helm.config.pullSecretRef.name | string | `"helm-gar-oci-app-common"` | |
|
||||
| cluster.helm.config.pullSecretRef.namespace | string | `"argocd"` | |
|
||||
| cluster.helm.eso.namespace | string | `"secret-operator"` | |
|
||||
| cluster.helm.eso.path | string | `"external-secrets"` | |
|
||||
| cluster.helm.eso.repository | string | `"https://charts.external-secrets.io"` | |
|
||||
| cluster.helm.eso.version | string | `"0.14.2"` | |
|
||||
| cluster.helm.metricsapi.enabled | bool | `true` | |
|
||||
| cluster.helm.metricsapi.version | string | `"3.12.1"` | |
|
||||
| cluster.helm.version | string | `"v0.19.0"` | |
|
||||
| cluster.name | string | `"change-me-cluster"` | |
|
||||
| cluster.nodeGroups.system.instanceType | string | `"Standard_D4s_v5"` | |
|
||||
| cluster.nodeGroups.system.maxSize | int | `10` | |
|
||||
| cluster.nodeGroups.system.minSize | int | `3` | |
|
||||
| cluster.nodeGroups.user.instanceType | string | `"Standard_D8s_v5"` | |
|
||||
| cluster.nodeGroups.user.maxSize | int | `20` | |
|
||||
| cluster.nodeGroups.user.minSize | int | `2` | |
|
||||
| cluster.ocean.enabled | bool | `false` | |
|
||||
| cluster.podCidr | string | `"10.65.0.0/16"` | |
|
||||
| cluster.region | string | `"change-me-region"` | |
|
||||
| cluster.segment | string | `"production"` | |
|
||||
| cluster.subnets.service | string | `"10.64.5.0/24"` | |
|
||||
| cluster.subnets.system | string | `"10.64.0.0/24"` | |
|
||||
| cluster.subnets.user | string | `"10.64.1.0/22"` | |
|
||||
| cluster.tags.environment | string | `"production"` | |
|
||||
| cluster.tags.managed-by | string | `"crossplane"` | |
|
||||
| cluster.tags.segment | string | `"production"` | |
|
||||
| cluster.version | string | `"1.29"` | |
|
||||
| cluster.virtualWanHubId | string | `""` | |
|
||||
| cluster.vnetCidr | string | `"10.64.0.0/16"` | |
|
||||
| composition.channel | string | `"dev"` | |
|
||||
| composition.version | string | `"v1"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,124 @@
|
||||
# foxtrot-eks
|
||||
|
||||
  
|
||||
|
||||
Helm template for a foxtrot EKS spoke cluster
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| accountID | string | `"123456789109"` | |
|
||||
| cluster.accessEntries[0].policyArn | string | `"arn:aws:eks::aws:cluster-access-policy/AmazonEKSClusterAdminPolicy"` | |
|
||||
| cluster.accessEntries[0].principalArn | string | `"arn:aws:iam::930358522410:role/Team-DevOps"` | |
|
||||
| cluster.accessEntries[1].policyArn | string | `"arn:aws:eks::aws:cluster-access-policy/AmazonEKSClusterAdminPolicy"` | |
|
||||
| cluster.accessEntries[1].principalArn | string | `"arn:aws:iam::930358522410:role/Team-Devops-Contractors"` | |
|
||||
| cluster.addons[0].name | string | `"vpc-cni"` | |
|
||||
| cluster.addons[0].version | string | `"v1.20.1-eksbuild.1"` | |
|
||||
| cluster.addons[1].name | string | `"aws-efs-csi-driver"` | |
|
||||
| cluster.addons[1].version | string | `"v2.1.10-eksbuild.1"` | |
|
||||
| cluster.addons[2].name | string | `"aws-ebs-csi-driver"` | |
|
||||
| cluster.addons[2].version | string | `"v1.47.0-eksbuild.1"` | |
|
||||
| cluster.addons[3].name | string | `"kube-proxy"` | |
|
||||
| cluster.addons[3].version | string | `"v1.33.3-eksbuild.4"` | |
|
||||
| cluster.addons[4].name | string | `"coredns"` | |
|
||||
| cluster.addons[4].version | string | `"v1.12.2-eksbuild.4"` | |
|
||||
| cluster.ami.arm64 | string | `"ami-0d82d9141b41fa1ea"` | |
|
||||
| cluster.ami.x86_64 | string | `"ami-08fe0394ae2e4c2ff"` | |
|
||||
| cluster.coreNetwork.arn | string | `"arn:aws:networkmanager::987654321012:core-network/core-network-cdef-EXAMPLE33333"` | |
|
||||
| cluster.coreNetwork.enabled | bool | `false` | |
|
||||
| cluster.coreNetwork.routes[0] | string | `"10.0.0.0/8"` | |
|
||||
| cluster.endpoints.gateway.dynamodb | bool | `true` | |
|
||||
| cluster.endpoints.gateway.s3 | bool | `true` | |
|
||||
| cluster.helm.argoWorkFlow.enabled | bool | `true` | |
|
||||
| cluster.helm.argoWorkFlow.namespace | string | `"argo-workflows"` | |
|
||||
| cluster.helm.argoWorkFlow.path | string | `"argo-workflows"` | |
|
||||
| cluster.helm.argoWorkFlow.repository | string | `"https://argoproj.github.io/argo-helm"` | |
|
||||
| cluster.helm.argoWorkFlow.version | string | `"0.42.5"` | |
|
||||
| cluster.helm.argocd.appManagerPassword | string | `"$2a$10$ak2ae4FWxxQGS65RogRwJu8N2dn.pNegusy4Ji8zvOQAVmlVvAgvS"` | |
|
||||
| cluster.helm.argocd.appset.appRuntimeBranch | string | `"main"` | |
|
||||
| cluster.helm.argocd.appset.env | string | `"development"` | |
|
||||
| cluster.helm.argocd.appset.esoEnabled | bool | `true` | |
|
||||
| cluster.helm.argocd.appset.path | string | `"argocd-apps"` | |
|
||||
| cluster.helm.argocd.appset.repository | string | `"oci://europe-west2-docker.pkg.dev/artifacts-management-441415/app-common"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.name | string | `"vault-approle-spoke"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.namespace | string | `"crossplane-system"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.roleIdKey | string | `"role-id"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.secretIdKey | string | `"secret-id"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.serverKey | string | `"server"` | |
|
||||
| cluster.helm.argocd.appset.version | string | `"5.5.12"` | |
|
||||
| cluster.helm.argocd.arch | string | `""` | |
|
||||
| cluster.helm.argocd.baseRepo | string | `"git@bitbucket.org:reltio-ondemand"` | |
|
||||
| cluster.helm.argocd.cloudplatformsvcPassword | string | `"$2a$10$od3HaJx5UfLB2k2jrWDqgOfRs5uFLpx..JYfHgbNDt69GqxV2jS86"` | |
|
||||
| cluster.helm.argocd.ingress | bool | `false` | |
|
||||
| cluster.helm.argocd.ingressClass | string | `"nginx"` | |
|
||||
| cluster.helm.argocd.metrics | bool | `true` | |
|
||||
| cluster.helm.argocd.namespace | string | `"argocd"` | |
|
||||
| cluster.helm.argocd.path | string | `"argo-cd"` | |
|
||||
| cluster.helm.argocd.repository | string | `"https://argoproj.github.io/argo-helm"` | |
|
||||
| cluster.helm.argocd.version | string | `"8.0.17"` | |
|
||||
| cluster.helm.config.pullSecretRef.name | string | `"helm-gar-oci-app-common"` | |
|
||||
| cluster.helm.config.pullSecretRef.namespace | string | `"argocd"` | |
|
||||
| cluster.helm.eck.enabled | bool | `true` | |
|
||||
| cluster.helm.eck.version | string | `"2.14.0"` | |
|
||||
| cluster.helm.eso.namespace | string | `"secret-operator"` | |
|
||||
| cluster.helm.eso.path | string | `"external-secrets"` | |
|
||||
| cluster.helm.eso.repository | string | `"https://charts.external-secrets.io"` | |
|
||||
| cluster.helm.eso.version | string | `"0.14.2"` | |
|
||||
| cluster.helm.metricsapi.enabled | bool | `true` | |
|
||||
| cluster.helm.metricsapi.version | string | `"3.12.1"` | |
|
||||
| cluster.helm.spotinst.account | string | `"act-899591b7"` | |
|
||||
| cluster.helm.spotinst.credentials.secretKeyRef.name | string | `"spotinst-credentials"` | |
|
||||
| cluster.helm.spotinst.credentials.secretKeyRef.namespace | string | `"crossplane-system"` | |
|
||||
| cluster.helm.spotinst.credentials.secretKeyRef.tokenKey | string | `"token"` | |
|
||||
| cluster.helm.spotinst.enabled | bool | `true` | |
|
||||
| cluster.helm.spotinst.version | string | `"0.1.66"` | |
|
||||
| cluster.helm.version | string | `"v0.19.0"` | |
|
||||
| cluster.name | string | `"change-me-cluster"` | |
|
||||
| cluster.nat.enabled | bool | `true` | |
|
||||
| cluster.nativeNodeGroups[0].arch | string | `"arm64"` | |
|
||||
| cluster.nativeNodeGroups[0].capacityType | string | `"ON_DEMAND"` | |
|
||||
| cluster.nativeNodeGroups[0].desiredSize | int | `2` | |
|
||||
| cluster.nativeNodeGroups[0].instanceTypes[0] | string | `"m6g.2xlarge"` | |
|
||||
| cluster.nativeNodeGroups[0].maxSize | int | `2` | |
|
||||
| cluster.nativeNodeGroups[0].maxUnavailablePercentage | int | `75` | |
|
||||
| cluster.nativeNodeGroups[0].minSize | int | `1` | |
|
||||
| cluster.oidc.enabled | bool | `true` | |
|
||||
| cluster.oidc.networkCoreAccountId | string | `"123412341234"` | |
|
||||
| cluster.region | string | `"change-me-region"` | |
|
||||
| cluster.spot.desiredSize | int | `2` | |
|
||||
| cluster.spot.enabled | bool | `true` | |
|
||||
| cluster.spot.instanceTypes[0] | string | `"m6g.2xlarge"` | |
|
||||
| cluster.spot.maxMemoryGb | int | `512` | |
|
||||
| cluster.spot.maxSize | int | `10` | |
|
||||
| cluster.spot.maxVCpu | int | `128` | |
|
||||
| cluster.spot.minSize | int | `1` | |
|
||||
| cluster.spot.virtualNodeGroups[0].maxInstanceCount | int | `2` | |
|
||||
| cluster.spot.virtualNodeGroups[0].minInstanceCount | int | `1` | |
|
||||
| cluster.spot.virtualNodeGroups[0].name | string | `"vng-100"` | |
|
||||
| cluster.spot.virtualNodeGroups[0].spotPercentage | int | `100` | |
|
||||
| cluster.subnets.private[0].availabilityZone | string | `"us-east-1a"` | |
|
||||
| cluster.subnets.private[0].cidrBlock | string | `"10.141.9.0/24"` | |
|
||||
| cluster.subnets.private[1].availabilityZone | string | `"us-east-1b"` | |
|
||||
| cluster.subnets.private[1].cidrBlock | string | `"10.141.10.0/24"` | |
|
||||
| cluster.subnets.private[2].availabilityZone | string | `"us-east-1c"` | |
|
||||
| cluster.subnets.private[2].cidrBlock | string | `"10.141.11.0/24"` | |
|
||||
| cluster.subnets.public[0].availabilityZone | string | `"us-east-1a"` | |
|
||||
| cluster.subnets.public[0].cidrBlock | string | `"10.141.6.0/24"` | |
|
||||
| cluster.subnets.public[1].availabilityZone | string | `"us-east-1b"` | |
|
||||
| cluster.subnets.public[1].cidrBlock | string | `"10.141.7.0/24"` | |
|
||||
| cluster.subnets.public[2].availabilityZone | string | `"us-east-1c"` | |
|
||||
| cluster.subnets.public[2].cidrBlock | string | `"10.141.8.0/24"` | |
|
||||
| cluster.version | string | `"1.33"` | |
|
||||
| cluster.volumes.dataVolume.size | int | `50` | |
|
||||
| cluster.volumes.dataVolume.type | string | `"gp3"` | |
|
||||
| cluster.volumes.rootVolume.size | int | `8` | |
|
||||
| cluster.volumes.rootVolume.type | string | `"gp3"` | |
|
||||
| cluster.vpc | string | `"change-me-vpc"` | |
|
||||
| composition.channel | string | `"dev"` | |
|
||||
| composition.version | string | `"v1"` | |
|
||||
| efs.performanceMode | string | `"maxIO"` | |
|
||||
| efs.throughputMode | string | `"bursting"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,114 @@
|
||||
# foxtrot-gke
|
||||
|
||||
  
|
||||
|
||||
A Helm chart for Kubernetes
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| cluster.autoscaling.enabled | bool | `true` | |
|
||||
| cluster.autoscaling.maxCpu | int | `2` | |
|
||||
| cluster.autoscaling.maxMemory | int | `4` | |
|
||||
| cluster.autoscaling.minCpu | int | `1` | |
|
||||
| cluster.autoscaling.minMemory | int | `1` | |
|
||||
| cluster.helm.argoWorkFlow.enabled | bool | `true` | |
|
||||
| cluster.helm.argoWorkFlow.namespace | string | `"argo-workflows"` | |
|
||||
| cluster.helm.argoWorkFlow.path | string | `"argo-workflows"` | |
|
||||
| cluster.helm.argoWorkFlow.repository | string | `"https://argoproj.github.io/argo-helm"` | |
|
||||
| cluster.helm.argoWorkFlow.version | string | `"0.42.5"` | |
|
||||
| cluster.helm.argocd.appset.env | string | `"development"` | |
|
||||
| cluster.helm.argocd.appset.esoEnabled | bool | `true` | |
|
||||
| cluster.helm.argocd.appset.path | string | `"argocd-apps"` | |
|
||||
| cluster.helm.argocd.appset.repository | string | `"oci://europe-west2-docker.pkg.dev/artifacts-management-441415/app-common"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.name | string | `"vault-approle-spoke"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.namespace | string | `"crossplane-system"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.roleIdKey | string | `"role-id"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.secretIdKey | string | `"secret-id"` | |
|
||||
| cluster.helm.argocd.appset.vault.credentials.secretKeyRef.serverKey | string | `"server"` | |
|
||||
| cluster.helm.argocd.appset.version | string | `"5.4.8"` | |
|
||||
| cluster.helm.argocd.arch | string | `""` | |
|
||||
| cluster.helm.argocd.baseRepo | string | `"git@bitbucket.org:reltio-ondemand"` | |
|
||||
| cluster.helm.argocd.cloudplatformsvcPassword | string | `"$2a$10$od3HaJx5UfLB2k2jrWDqgOfRs5uFLpx..JYfHgbNDt69GqxV2jS86"` | |
|
||||
| cluster.helm.argocd.ingress | bool | `false` | |
|
||||
| cluster.helm.argocd.ingressClass | string | `"nginx"` | |
|
||||
| cluster.helm.argocd.namespace | string | `"argocd"` | |
|
||||
| cluster.helm.argocd.path | string | `"argo-cd"` | |
|
||||
| cluster.helm.argocd.repository | string | `"https://argoproj.github.io/argo-helm"` | |
|
||||
| cluster.helm.argocd.server.configEnabled | bool | `true` | |
|
||||
| cluster.helm.argocd.server.configs.cm."accounts.cloudplatformsvc" | string | `"apiKey,login"` | |
|
||||
| cluster.helm.argocd.server.configs.cm."admin.enabled" | string | `"true"` | |
|
||||
| cluster.helm.argocd.server.configs.cm."application.instanceLabelKey" | string | `"argocd.argoproj.io/instance"` | |
|
||||
| cluster.helm.argocd.server.configs.cm."application.resourceTrackingMethod" | string | `"annotation"` | |
|
||||
| cluster.helm.argocd.server.configs.cm."exec.enabled" | string | `"false"` | |
|
||||
| cluster.helm.argocd.server.configs.cm."oidc.config" | string | `"name: Okta\nissuer: https://reltio.oktapreview.com/oauth2/ausjl38ote7c49Byd1d7\nclientID: 0oajl31dyvdgZDxTC1d7\ncliClientID: 0oajl31dyvdgZDxTC1d7\nclientSecret: $CLIENT_SECRET # Use an env var instead of a hardcoded string\nrequestedScopes: [\"openid\", \"profile\", \"email\", \"groups\"]\nrequestedIDTokenClaims: {\"groups\": {\"essential\": true}}\ngroupsClaim: groups\nusernameClaim: email\n"` | |
|
||||
| cluster.helm.argocd.server.extraEnv[0].name | string | `"CLIENT_SECRET"` | |
|
||||
| cluster.helm.argocd.server.extraEnv[0].valueFrom.secretKeyRef.key | string | `"clientSecret"` | |
|
||||
| cluster.helm.argocd.server.extraEnv[0].valueFrom.secretKeyRef.name | string | `"argocd-oidc-secret"` | |
|
||||
| cluster.helm.argocd.version | string | `"7.8.2"` | |
|
||||
| cluster.helm.config.pullSecretRef.name | string | `"helm-gar-oci-app-common"` | |
|
||||
| cluster.helm.config.pullSecretRef.namespace | string | `"argocd"` | |
|
||||
| cluster.helm.eso.namespace | string | `"secret-operator"` | |
|
||||
| cluster.helm.eso.path | string | `"external-secrets"` | |
|
||||
| cluster.helm.eso.repository | string | `"https://charts.external-secrets.io"` | |
|
||||
| cluster.helm.eso.version | string | `"0.14.2"` | |
|
||||
| cluster.helm.spotinst.account | string | `"act-899591b7"` | |
|
||||
| cluster.helm.spotinst.credentials.secretKeyRef.name | string | `"spotinst-credentials"` | |
|
||||
| cluster.helm.spotinst.credentials.secretKeyRef.namespace | string | `"crossplane-system"` | |
|
||||
| cluster.helm.spotinst.credentials.secretKeyRef.tokenKey | string | `"token"` | |
|
||||
| cluster.helm.spotinst.enabled | bool | `true` | |
|
||||
| cluster.helm.spotinst.version | string | `"0.1.66"` | |
|
||||
| cluster.imageType | string | `"COS_CONTAINERD"` | |
|
||||
| cluster.location | string | `"change-me-location"` | |
|
||||
| cluster.maintenance.daily.startTime | string | `"04:00"` | |
|
||||
| cluster.maintenance.enabled | bool | `true` | |
|
||||
| cluster.name | string | `"change-me-name"` | |
|
||||
| cluster.nativeNodePools[0].autoUpgrade | bool | `false` | |
|
||||
| cluster.nativeNodePools[0].initialNodeCount | int | `1` | |
|
||||
| cluster.nativeNodePools[0].locationPolicy | string | `"BALANCED"` | |
|
||||
| cluster.nativeNodePools[0].machineType | string | `"n1-standard-4"` | |
|
||||
| cluster.nativeNodePools[0].maxNodeCount | int | `2` | |
|
||||
| cluster.nativeNodePools[0].minNodeCount | int | `1` | |
|
||||
| cluster.nativeNodePools[0].nodeLocations[0] | string | `"change-me-location-a"` | |
|
||||
| cluster.nativeNodePools[0].nodeLocations[1] | string | `"change-me-location-c"` | |
|
||||
| cluster.nativeNodePools[0].nodeLocations[2] | string | `"change-me-location-f"` | |
|
||||
| cluster.nativeNodePools[0].spot | bool | `false` | |
|
||||
| cluster.nativeNodePools[1].autoUpgrade | bool | `false` | |
|
||||
| cluster.nativeNodePools[1].initialNodeCount | int | `1` | |
|
||||
| cluster.nativeNodePools[1].locationPolicy | string | `"ANY"` | |
|
||||
| cluster.nativeNodePools[1].machineType | string | `"n1-standard-4"` | |
|
||||
| cluster.nativeNodePools[1].maxNodeCount | int | `10` | |
|
||||
| cluster.nativeNodePools[1].minNodeCount | int | `1` | |
|
||||
| cluster.nativeNodePools[1].nodeLocations[0] | string | `"change-me-location-a"` | |
|
||||
| cluster.nativeNodePools[1].nodeLocations[1] | string | `"change-me-location-c"` | |
|
||||
| cluster.nativeNodePools[1].nodeLocations[2] | string | `"change-me-location-f"` | |
|
||||
| cluster.nativeNodePools[1].spot | bool | `true` | |
|
||||
| cluster.network.masterCidrBlock | string | `"10.x.x.x/28"` | |
|
||||
| cluster.network.podsRange | string | `"change-me-podes-range"` | |
|
||||
| cluster.network.servicesRange | string | `"change-me-services-range"` | |
|
||||
| cluster.network.subnet | string | `"change-me-subnet"` | |
|
||||
| cluster.network.vpc | string | `"change-me-vpc"` | |
|
||||
| cluster.project | string | `"change-me-project"` | |
|
||||
| cluster.releaseChannel | string | `"EXTENDED"` | |
|
||||
| cluster.serviceAccount.roles[0] | string | `"roles/logging.logWriter"` | |
|
||||
| cluster.serviceAccount.roles[1] | string | `"roles/monitoring.metricWriter"` | |
|
||||
| cluster.serviceAccount.roles[2] | string | `"roles/monitoring.viewer"` | |
|
||||
| cluster.serviceAccount.roles[3] | string | `"roles/container.admin"` | |
|
||||
| cluster.shieldedNodes | bool | `false` | |
|
||||
| cluster.spot.desiredSize | int | `2` | |
|
||||
| cluster.spot.enabled | bool | `true` | |
|
||||
| cluster.spot.instanceTypes[0] | string | `"n1-standard-4"` | |
|
||||
| cluster.spot.instanceTypes[1] | string | `"n1-standard-8"` | |
|
||||
| cluster.spot.maxMemoryGb | int | `512` | |
|
||||
| cluster.spot.maxSize | int | `10` | |
|
||||
| cluster.spot.maxVCpu | int | `128` | |
|
||||
| cluster.spot.minSize | int | `1` | |
|
||||
| cluster.spot.virtualNodeGroups[0].maxInstanceCount | int | `2` | |
|
||||
| cluster.spot.virtualNodeGroups[0].minInstanceCount | int | `1` | |
|
||||
| cluster.spot.virtualNodeGroups[0].name | string | `"vng-100"` | |
|
||||
| cluster.spot.virtualNodeGroups[0].spotPercentage | int | `100` | |
|
||||
| cluster.version | string | `"1.29.9-gke.1496000"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,33 @@
|
||||
# foxtrot-aws-vpc
|
||||
|
||||
  
|
||||
|
||||
A Helm chart to bootstrap a template foxtrot vpc
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| accountID | string | `"change-me-account-id"` | |
|
||||
| vpc.cidrBlock | string | `"10.3.0.0/16"` | |
|
||||
| vpc.coreNetwork.arn | string | `"arn:aws:networkmanager::968814677163:core-network/core-network-0d1cc9236bc3bc9ff"` | |
|
||||
| vpc.coreNetwork.attached | bool | `false` | |
|
||||
| vpc.coreNetwork.routes[0] | string | `"0.0.0.0/0"` | |
|
||||
| vpc.coreNetwork.tags.domain | string | `"development"` | |
|
||||
| vpc.defaults.endpoints.gateway.dynamodb | bool | `true` | |
|
||||
| vpc.defaults.endpoints.gateway.s3 | bool | `true` | |
|
||||
| vpc.defaults.endpoints.interface.ecr.api | bool | `false` | |
|
||||
| vpc.defaults.endpoints.interface.ecr.dkr | bool | `false` | |
|
||||
| vpc.defaults.endpoints.interface.sqs | bool | `true` | |
|
||||
| vpc.defaults.internetGateway | bool | `true` | |
|
||||
| vpc.defaults.subnets.private[0].availabilityZone | string | `"eu-west-1x"` | |
|
||||
| vpc.defaults.subnets.private[0].cidrBlock | string | `"10.3.0.0/xx"` | |
|
||||
| vpc.defaults.subnets.private[1].availabilityZone | string | `"eu-west-1x"` | |
|
||||
| vpc.defaults.subnets.private[1].cidrBlock | string | `"10.3.0.16/xx"` | |
|
||||
| vpc.defaults.subnets.private[2].availabilityZone | string | `"eu-west-1x"` | |
|
||||
| vpc.defaults.subnets.private[2].cidrBlock | string | `"10.3.0.32/xx"` | |
|
||||
| vpc.name | string | `"change-me-vpc"` | |
|
||||
| vpc.region | string | `"change-me-region"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,28 @@
|
||||
# foxtrot-azure-vnet
|
||||
|
||||
  
|
||||
|
||||
Azure Virtual Network with Virtual WAN integration for Foxtrot platform
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| Reltio Platform Team | <platform-team@reltio.com> | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| providerConfigRef | string | `"default"` | |
|
||||
| tags.managed-by | string | `"crossplane"` | |
|
||||
| vnet.cidr | string | `""` | |
|
||||
| vnet.name | string | `""` | |
|
||||
| vnet.region | string | `"centralus"` | |
|
||||
| vnet.segment | string | `"production"` | |
|
||||
| vnet.subnets | object | `{}` | |
|
||||
| vnet.virtualWanHub.connection | bool | `true` | |
|
||||
| vnet.virtualWanHub.id | string | `""` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
@@ -0,0 +1,24 @@
|
||||
# foxtrot-gcp-vpc
|
||||
|
||||
  
|
||||
|
||||
A Helm chart to bootstrap a template foxtrot vpc with shared VPC support
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| vpc.name | string | `"change-me-vpc"` | |
|
||||
| vpc.project | string | `"change-me-project"` | |
|
||||
| vpc.region | string | `"change-me-region"` | |
|
||||
| vpc.sharedVpc.createServiceProject | bool | `false` | |
|
||||
| vpc.sharedVpc.enabled | bool | `true` | |
|
||||
| vpc.sharedVpc.hostProject | string | `"network-services-436015"` | |
|
||||
| vpc.subnets[0].cidrBlock | string | `"10.40.0.0/17"` | |
|
||||
| vpc.subnets[0].secondaryIpRanges[0].cidrBlock | string | `"10.40.128.0/17"` | |
|
||||
| vpc.subnets[0].secondaryIpRanges[0].name | string | `"pods-cidr"` | |
|
||||
| vpc.subnets[0].secondaryIpRanges[1].cidrBlock | string | `"10.41.0.0/17"` | |
|
||||
| vpc.subnets[0].secondaryIpRanges[1].name | string | `"services-cidr"` | |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
|
||||
82
foxtrot-docs-v3/reference/helm/index.md
Normal file
82
foxtrot-docs-v3/reference/helm/index.md
Normal file
@@ -0,0 +1,82 @@
|
||||
# Helm Charts
|
||||
|
||||
## Quick Lookup
|
||||
|
||||
| Chart | Path | Dependencies | Values Keys |
|
||||
|---|---|---|---|
|
||||
| account-creation | [account-common/charts/account-creation](charts/account-common-charts-account-creation.md) | none | keys, raw |
|
||||
| account-quota-increase | [account-common/charts/quota-request](charts/account-common-charts-quota-request.md) | none | keys, raw |
|
||||
| cluster | [app-common/apps-provider/addons/charts/common/cluster](charts/app-common-apps-provider-addons-charts-common-cluster.md) | none | keys, raw, _parseError |
|
||||
| external-dns | [app-common/apps-provider/addons/charts/common/external-dns](charts/app-common-apps-provider-addons-charts-common-external-dns.md) | external-dns | keys, raw |
|
||||
| ingress-nginx | [app-common/apps-provider/addons/charts/common/ingress-nginx](charts/app-common-apps-provider-addons-charts-common-ingress-nginx.md) | ingress-nginx | keys, raw |
|
||||
| kube-state-metrics | [app-common/apps-provider/addons/charts/common/kube-state-metrics](charts/app-common-apps-provider-addons-charts-common-kube-state-metrics.md) | kube-state-metrics | keys, raw |
|
||||
| open-telemetry | [app-common/apps-provider/addons/charts/common/otel-collector](charts/app-common-apps-provider-addons-charts-common-otel-collector.md) | opentelemetry-operator, k8s-metrics, agent, common, gw-metrics, gw-traces, prom-scraper | keys, raw |
|
||||
| agent | [app-common/apps-provider/addons/charts/common/otel-collector/charts/agent](charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-agent.md) | none | keys, raw |
|
||||
| common | [app-common/apps-provider/addons/charts/common/otel-collector/charts/common](charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-common.md) | none | keys, raw |
|
||||
| gw-metrics | [app-common/apps-provider/addons/charts/common/otel-collector/charts/gw-metrics](charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-gw-metrics.md) | none | keys, raw |
|
||||
| gw-traces | [app-common/apps-provider/addons/charts/common/otel-collector/charts/gw-traces](charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-gw-traces.md) | none | keys, raw |
|
||||
| k8s-metrics | [app-common/apps-provider/addons/charts/common/otel-collector/charts/k8s-metrics](charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-k8s-metrics.md) | none | keys, raw |
|
||||
| prom-scraper | [app-common/apps-provider/addons/charts/common/otel-collector/charts/prom-scraper](charts/app-common-apps-provider-addons-charts-common-otel-collector-charts-prom-scraper.md) | none | keys, raw |
|
||||
| reltio-prometheus | [app-common/apps-provider/addons/charts/common/prometheus](charts/app-common-apps-provider-addons-charts-common-prometheus.md) | kube-prometheus-stack, prometheus-adapter | keys, raw |
|
||||
| secret-operator | [app-common/apps-provider/addons/charts/common/secret-operator](charts/app-common-apps-provider-addons-charts-common-secret-operator.md) | external-secrets | keys, raw |
|
||||
| twistlock-defender | [app-common/apps-provider/addons/charts/common/twistlock](charts/app-common-apps-provider-addons-charts-common-twistlock.md) | none | keys, raw, _parseError |
|
||||
| eck-operator | [app-common/apps-provider/addons/charts/state-apps/eck-operator](charts/app-common-apps-provider-addons-charts-state-apps-eck-operator.md) | eck-operator-crds | keys, raw |
|
||||
| eck-operator-crds | [app-common/apps-provider/addons/charts/state-apps/eck-operator/charts/eck-operator-crds](charts/app-common-apps-provider-addons-charts-state-apps-eck-operator-charts-eck-operator-crds.md) | none | keys, raw |
|
||||
| elasticsearch | [app-common/apps-provider/addons/charts/state-apps/es](charts/app-common-apps-provider-addons-charts-state-apps-es.md) | none | keys, raw |
|
||||
| hazelcast | [app-common/apps-provider/addons/charts/state-apps/hz](charts/app-common-apps-provider-addons-charts-state-apps-hz.md) | none | keys, raw |
|
||||
| cassandra | [app-common/apps-provider/addons/charts/state-cluster/cassandra](charts/app-common-apps-provider-addons-charts-state-cluster-cassandra.md) | none | keys, raw |
|
||||
| elasticsearch | [app-common/apps-provider/addons/charts/state-cluster/elasticsearch](charts/app-common-apps-provider-addons-charts-state-cluster-elasticsearch.md) | elasticsearch | keys, raw |
|
||||
| hazelcast | [app-common/apps-provider/addons/charts/state-cluster/hazelcast](charts/app-common-apps-provider-addons-charts-state-cluster-hazelcast.md) | hazelcast | keys, raw |
|
||||
| ai-app | [app-common/charts/ai-app](charts/app-common-charts-ai-app.md) | none | keys, raw |
|
||||
| argocd-apps | [app-common/charts/argocd-apps](charts/app-common-charts-argocd-apps.md) | none | keys, raw |
|
||||
| auth-app | [app-common/charts/auth-app](charts/app-common-charts-auth-app.md) | none | keys, raw |
|
||||
| aws-load-balancer-controller | [app-common/charts/aws-load-balancer-controller](charts/app-common-charts-aws-load-balancer-controller.md) | aws-load-balancer-controller | keys, raw |
|
||||
| cleanse-app | [app-common/charts/cleanse-app](charts/app-common-charts-cleanse-app.md) | none | keys, raw |
|
||||
| cluster | [app-common/charts/cluster](charts/app-common-charts-cluster.md) | none | keys, raw, _parseError |
|
||||
| eck-operator | [app-common/charts/eck-operator](charts/app-common-charts-eck-operator.md) | none | keys, raw |
|
||||
| elasticsearch | [app-common/charts/elasticsearch](charts/app-common-charts-elasticsearch.md) | none | keys, raw, _parseError |
|
||||
| external-dns | [app-common/charts/external-dns](charts/app-common-charts-external-dns.md) | external-dns | keys, raw |
|
||||
| hazelcast | [app-common/charts/hazelcast](charts/app-common-charts-hazelcast.md) | none | keys, raw |
|
||||
| ingress-nginx | [app-common/charts/ingress-nginx](charts/app-common-charts-ingress-nginx.md) | none | keys, raw |
|
||||
| jenkins | [app-common/charts/jenkins](charts/app-common-charts-jenkins.md) | none | keys, raw |
|
||||
| kong | [app-common/charts/kong](charts/app-common-charts-kong.md) | none | keys, raw |
|
||||
| kong-gateway-setup | [app-common/charts/kong-gateway-setup](charts/app-common-charts-kong-gateway-setup.md) | none | keys, raw |
|
||||
| kong-gateway-workflow | [app-common/charts/kong-gateway-setup/workflow](charts/app-common-charts-kong-gateway-setup-workflow.md) | none | keys, raw |
|
||||
| kong-log-splitter | [app-common/charts/kong-log-splitter](charts/app-common-charts-kong-log-splitter.md) | none | keys, raw |
|
||||
| kong-log-splitter-workflow | [app-common/charts/kong-log-splitter/workflow](charts/app-common-charts-kong-log-splitter-workflow.md) | none | keys, raw |
|
||||
| kong-routes-automation | [app-common/charts/kong-routes-automation](charts/app-common-charts-kong-routes-automation.md) | none | keys, raw |
|
||||
| kong-routes-workflow | [app-common/charts/kong-routes-automation/workflow](charts/app-common-charts-kong-routes-automation-workflow.md) | none | keys, raw |
|
||||
| loqate-app | [app-common/charts/loqate-app](charts/app-common-charts-loqate-app.md) | storage-and-secrets, installmanager, memberlist, spatial-api, querycoordinator | keys, raw |
|
||||
| installmanager | [app-common/charts/loqate-app/charts/installmanager](charts/app-common-charts-loqate-app-charts-installmanager.md) | none | keys, raw |
|
||||
| memberlist | [app-common/charts/loqate-app/charts/memberlist](charts/app-common-charts-loqate-app-charts-memberlist.md) | none | keys, raw |
|
||||
| querycoordinator | [app-common/charts/loqate-app/charts/querycoordinator](charts/app-common-charts-loqate-app-charts-querycoordinator.md) | none | keys, raw |
|
||||
| spatial-api | [app-common/charts/loqate-app/charts/spatial-api](charts/app-common-charts-loqate-app-charts-spatial-api.md) | none | keys, raw |
|
||||
| storage-and-secrets | [app-common/charts/loqate-app/charts/storage-and-secrets](charts/app-common-charts-loqate-app-charts-storage-and-secrets.md) | none | keys, raw |
|
||||
| mdm-app | [app-common/charts/mdm-app](charts/app-common-charts-mdm-app.md) | none | keys, raw |
|
||||
| milvus | [app-common/charts/milvus](charts/app-common-charts-milvus.md) | none | keys, raw |
|
||||
| nexus-repository-manager | [app-common/charts/nexus-repository-manager](charts/app-common-charts-nexus-repository-manager.md) | none | keys, raw |
|
||||
| otel-collector | [app-common/charts/otel-collector](charts/app-common-charts-otel-collector.md) | opentelemetry-operator, kube-state-metrics, k8s-metrics, agent, common, gw-metrics, gw-traces, prom-scraper | keys, raw |
|
||||
| agent | [app-common/charts/otel-collector/charts/agent](charts/app-common-charts-otel-collector-charts-agent.md) | none | keys, raw |
|
||||
| common | [app-common/charts/otel-collector/charts/common](charts/app-common-charts-otel-collector-charts-common.md) | none | keys, raw |
|
||||
| gw-metrics | [app-common/charts/otel-collector/charts/gw-metrics](charts/app-common-charts-otel-collector-charts-gw-metrics.md) | none | keys, raw |
|
||||
| gw-traces | [app-common/charts/otel-collector/charts/gw-traces](charts/app-common-charts-otel-collector-charts-gw-traces.md) | none | keys, raw |
|
||||
| k8s-metrics | [app-common/charts/otel-collector/charts/k8s-metrics](charts/app-common-charts-otel-collector-charts-k8s-metrics.md) | none | keys, raw |
|
||||
| kube-state-metrics | [app-common/charts/otel-collector/charts/kube-state-metrics](charts/app-common-charts-otel-collector-charts-kube-state-metrics.md) | none | keys, raw |
|
||||
| opentelemetry-operator | [app-common/charts/otel-collector/charts/opentelemetry-operator](charts/app-common-charts-otel-collector-charts-opentelemetry-operator.md) | none | keys, raw |
|
||||
| prom-scraper | [app-common/charts/otel-collector/charts/prom-scraper](charts/app-common-charts-otel-collector-charts-prom-scraper.md) | none | keys, raw |
|
||||
| pms-app | [app-common/charts/pms-app](charts/app-common-charts-pms-app.md) | none | keys, raw |
|
||||
| prometheus | [app-common/charts/prometheus](charts/app-common-charts-prometheus.md) | kube-prometheus-stack, prometheus-adapter | keys, raw |
|
||||
| rdm-app | [app-common/charts/rdm-app](charts/app-common-charts-rdm-app.md) | none | keys, raw |
|
||||
| redis | [app-common/charts/redis](charts/app-common-charts-redis.md) | none | keys, raw |
|
||||
| reloader | [app-common/charts/reloader](charts/app-common-charts-reloader.md) | none | keys, raw |
|
||||
| external-secrets | [app-common/charts/secret-operator](charts/app-common-charts-secret-operator.md) | none | keys, raw |
|
||||
| shared-app | [app-common/charts/shared-app](charts/app-common-charts-shared-app.md) | none | keys, raw |
|
||||
| twistlock | [app-common/charts/twistlock](charts/app-common-charts-twistlock.md) | none | keys, raw, _parseError |
|
||||
| wiz | [app-common/charts/wiz](charts/app-common-charts-wiz.md) | wiz-kubernetes-connector, wiz-admission-controller, wiz-sensor | keys, raw |
|
||||
| foxtrot-aks | [compute-common/templates/foxtrot-aks](charts/compute-common-templates-foxtrot-aks.md) | none | keys, raw |
|
||||
| foxtrot-eks | [compute-common/templates/foxtrot-eks](charts/compute-common-templates-foxtrot-eks.md) | none | keys, raw |
|
||||
| foxtrot-gke | [compute-common/templates/foxtrot-gke](charts/compute-common-templates-foxtrot-gke.md) | none | keys, raw |
|
||||
| foxtrot-aws-vpc | [network-common/charts/foxtrot-aws-vpc](charts/network-common-charts-foxtrot-aws-vpc.md) | none | keys, raw |
|
||||
| foxtrot-azure-vnet | [network-common/charts/foxtrot-azure-vnet](charts/network-common-charts-foxtrot-azure-vnet.md) | none | keys, raw |
|
||||
| foxtrot-gcp-vpc | [network-common/charts/foxtrot-gcp-vpc](charts/network-common-charts-foxtrot-gcp-vpc.md) | none | keys, raw |
|
||||
| prod-gke-us-west3-compute1 | [runtime/compute-runtime/gcp/non-argo-tracked-resources/compute-na07/us-west3/prd-gke-us-west3-05](charts/runtime-compute-runtime-gcp-non-argo-tracked-resources-compute-na07-us-west3-prd-gke-us-west3-05.md) | foxtrot-gke | keys, raw |
|
||||
10
foxtrot-docs-v3/reference/subsystems/account-common.md
Normal file
10
foxtrot-docs-v3/reference/subsystems/account-common.md
Normal file
@@ -0,0 +1,10 @@
|
||||
# Subsystem: account-common
|
||||
|
||||
**Kind:** domain
|
||||
**Files:** 8
|
||||
**Functions:** 0, **Classes:** 0
|
||||
|
||||
## Structural Notes
|
||||
- Zero functions despite 8 files — likely a configuration-only or IaC subsystem
|
||||
- Isolated subsystem with no cross-subsystem dependencies — may be self-contained tooling or unused
|
||||
|
||||
38
foxtrot-docs-v3/reference/subsystems/app-common.md
Normal file
38
foxtrot-docs-v3/reference/subsystems/app-common.md
Normal file
@@ -0,0 +1,38 @@
|
||||
# Subsystem: app-common
|
||||
|
||||
**Kind:** domain
|
||||
**Files:** 934
|
||||
**Functions:** 28, **Classes:** 0
|
||||
|
||||
## Dependencies
|
||||
### Depends On
|
||||
- → app-tools: 1 calls, 0 imports
|
||||
|
||||
## Public Exports
|
||||
- `add_bucket_policy`
|
||||
- `add_destination_to_lambda_function`
|
||||
- `add_resource_based_policy_to_lambda_function`
|
||||
- `check_certificate_exists`
|
||||
- `create_lambda_function`
|
||||
- `create_or_get_gateway`
|
||||
- `delete_lambda_function`
|
||||
- `ensure_s3_bucket_exists`
|
||||
- `find_app_namespaces`
|
||||
- `find_application_jar`
|
||||
- `generate_certificate`
|
||||
- `generate_placeholder_certificate`
|
||||
- `get_aws_account_id`
|
||||
- `get_cloud_config`
|
||||
- `handle_error`
|
||||
- `load_compute_config`
|
||||
- `load_kong_config`
|
||||
- `log_error`
|
||||
- `log_info`
|
||||
- `main`
|
||||
- `make_request`
|
||||
- `read_file_content`
|
||||
- `update_bucket_notification_configuration`
|
||||
- `upload_certificate`
|
||||
- `upload_properties_files`
|
||||
- `with_delay`
|
||||
- `write_file_content`
|
||||
73
foxtrot-docs-v3/reference/subsystems/app-tools.md
Normal file
73
foxtrot-docs-v3/reference/subsystems/app-tools.md
Normal file
@@ -0,0 +1,73 @@
|
||||
# Subsystem: app-tools
|
||||
|
||||
**Kind:** cross-cutting
|
||||
**Files:** 17
|
||||
**Functions:** 92, **Classes:** 4
|
||||
|
||||
## Dependencies
|
||||
### Depended On By
|
||||
- ← app-common: 1 calls, 0 imports
|
||||
- ← compute-tools: 4 calls, 0 imports
|
||||
- ← ipam-tools: 6 calls, 0 imports
|
||||
|
||||
## Public Exports
|
||||
- `Config`
|
||||
- `EnvExporter`
|
||||
- `FILES_TO_COPY`
|
||||
- `GitManager`
|
||||
- `cleanup`
|
||||
- `clone_repo`
|
||||
- `commit_and_push_changes`
|
||||
- `create_ak_sk`
|
||||
- `create_ak_sk_for_dph_user`
|
||||
- `create_ak_sk_for_es_user`
|
||||
- `create_ak_sk_for_export_user`
|
||||
- `create_aurora_mysql_db`
|
||||
- `create_db_subnet_group`
|
||||
- `create_gcp_bq_services`
|
||||
- `create_gcp_project`
|
||||
- `create_kms_key`
|
||||
- `create_rdm_gcp_bq_services`
|
||||
- `create_s3_buckets`
|
||||
- `create_security_group`
|
||||
- `display_help`
|
||||
- `emit_exports`
|
||||
- `enable_api_and_wait`
|
||||
- `enable_project_apis`
|
||||
- `ensure_gcs_bucket_exists`
|
||||
- `ensure_s3_bucket_exists`
|
||||
- `format_seconds`
|
||||
- `gcp_project_exists`
|
||||
- `generate_strong_password`
|
||||
- `get_aws_account_number`
|
||||
- `get_env_vars`
|
||||
- `get_matching_user`
|
||||
- `get_projects`
|
||||
- `get_rdm_mdm_companions`
|
||||
- `get_sensitive_input`
|
||||
- `get_verified_gcs_client`
|
||||
- `get_verified_s3_client`
|
||||
- `handle_api_error`
|
||||
- `list_private_subnets`
|
||||
- `list_rds_subnet_groups`
|
||||
- `log_error`
|
||||
- `log_exception`
|
||||
- `log_info`
|
||||
- `log_step`
|
||||
- `main`
|
||||
- `patch_crossaccount_mdm_companions`
|
||||
- `patch_mdm_policy_rdm_companion_arn`
|
||||
- `patch_mdm_systemdynamodb_shared_devops_api`
|
||||
- `patch_shared_devops_api_mdm_arns`
|
||||
- `patch_trust_policy_for_dataquality_snapshot`
|
||||
- `patch_vault_secret`
|
||||
- `print_summary`
|
||||
- `process_template_file`
|
||||
- `set`
|
||||
- `set_iam_policy_for_project`
|
||||
- `transfer_files`
|
||||
- `update_dynamic_secrets`
|
||||
- `update_terraform_config`
|
||||
- `vault_secret_bootstrap`
|
||||
- `wait_for_dynamodb_role`
|
||||
- `wait_for_operation`
|
||||
24
foxtrot-docs-v3/reference/subsystems/compute-common.md
Normal file
24
foxtrot-docs-v3/reference/subsystems/compute-common.md
Normal file
@@ -0,0 +1,24 @@
|
||||
# Subsystem: compute-common
|
||||
|
||||
**Kind:** domain
|
||||
**Files:** 64
|
||||
**Functions:** 14, **Classes:** 0
|
||||
|
||||
## Structural Notes
|
||||
- Isolated subsystem with no cross-subsystem dependencies — may be self-contained tooling or unused
|
||||
|
||||
## Public Exports
|
||||
- `cleanup_tracker`
|
||||
- `helm_helper`
|
||||
- `kubectl_helper`
|
||||
- `test_aks_full_cluster_lifecycle`
|
||||
- `test_cluster_name`
|
||||
- `test_deploy_for_inspection`
|
||||
- `test_deploy_nginx_workload`
|
||||
- `test_eks_full_cluster_lifecycle`
|
||||
- `test_eks_helm_chart_renders_templates`
|
||||
- `test_eks_helm_chart_smoke`
|
||||
- `test_eks_helm_chart_validates_required_values`
|
||||
- `test_env_config`
|
||||
- `test_pod_can_resolve_dns`
|
||||
- `test_values_file`
|
||||
81
foxtrot-docs-v3/reference/subsystems/compute-tools.md
Normal file
81
foxtrot-docs-v3/reference/subsystems/compute-tools.md
Normal file
@@ -0,0 +1,81 @@
|
||||
# Subsystem: compute-tools
|
||||
|
||||
**Kind:** domain
|
||||
**Files:** 28
|
||||
**Functions:** 108, **Classes:** 8
|
||||
|
||||
## Dependencies
|
||||
### Depends On
|
||||
- → app-tools: 4 calls, 0 imports
|
||||
|
||||
### Depended On By
|
||||
- ← ipam-tools: 1 calls, 0 imports
|
||||
|
||||
## Public Exports
|
||||
- `BritiveAuth`
|
||||
- `ClusterManager`
|
||||
- `ComputeManager`
|
||||
- `GitUtils`
|
||||
- `NamespaceManager`
|
||||
- `NetboxManager`
|
||||
- `TestAzureIPAM`
|
||||
- `VPCManager`
|
||||
- `add_files`
|
||||
- `add_region`
|
||||
- `allocate_create_vpc_cidr_blocks`
|
||||
- `allocate_vnet_registration`
|
||||
- `check_aws_cli`
|
||||
- `check_homebrew`
|
||||
- `check_kubectl`
|
||||
- `cleanup_cidrs`
|
||||
- `cli`
|
||||
- `clone_repo`
|
||||
- `commit`
|
||||
- `commit_and_push`
|
||||
- `contains_prd`
|
||||
- `create_cluster`
|
||||
- `create_namespace`
|
||||
- `create_vpc`
|
||||
- `delete_cluster`
|
||||
- `delete_cluster_config`
|
||||
- `detect_os`
|
||||
- `display_help`
|
||||
- `get_missing_params`
|
||||
- `get_next_available_azure_cidr`
|
||||
- `get_next_available_cidr`
|
||||
- `get_param`
|
||||
- `install_as_user`
|
||||
- `install_aws_cli`
|
||||
- `install_homebrew`
|
||||
- `install_uv`
|
||||
- `is_ssrv`
|
||||
- `is_state`
|
||||
- `main`
|
||||
- `mock_netbox`
|
||||
- `path`
|
||||
- `push`
|
||||
- `register_azure_vnet`
|
||||
- `register_vpc`
|
||||
- `repo_path`
|
||||
- `reserve_create_vpc_cidr_blocks`
|
||||
- `reserve_vnet_cidr_blocks`
|
||||
- `setup_and_configure`
|
||||
- `setup_cidrs`
|
||||
- `setup_cluster_config`
|
||||
- `setup_credentials`
|
||||
- `setup_namespace`
|
||||
- `setup_vpc`
|
||||
- `setup_vpc_config`
|
||||
- `show_usage`
|
||||
- `sync_vpc_to_netbox`
|
||||
- `test_allocation_failure_rollback`
|
||||
- `test_collision_retry_logic`
|
||||
- `test_idempotent_vnet_allocation`
|
||||
- `test_metadata_registration`
|
||||
- `test_metadata_update`
|
||||
- `test_no_partial_state`
|
||||
- `test_output_format`
|
||||
- `test_subnet_carve_non_overlapping`
|
||||
- `update_azure_vnet_metadata`
|
||||
- `validate_account`
|
||||
- `wait_for_deletion`
|
||||
10
foxtrot-docs-v3/reference/subsystems/control-core.md
Normal file
10
foxtrot-docs-v3/reference/subsystems/control-core.md
Normal file
@@ -0,0 +1,10 @@
|
||||
# Subsystem: control-core
|
||||
|
||||
**Kind:** domain
|
||||
**Files:** 336
|
||||
**Functions:** 0, **Classes:** 0
|
||||
|
||||
## Structural Notes
|
||||
- Zero functions despite 336 files — likely a configuration-only or IaC subsystem
|
||||
- Isolated subsystem with no cross-subsystem dependencies — may be self-contained tooling or unused
|
||||
|
||||
12
foxtrot-docs-v3/reference/subsystems/ipam-core.md
Normal file
12
foxtrot-docs-v3/reference/subsystems/ipam-core.md
Normal file
@@ -0,0 +1,12 @@
|
||||
# Subsystem: ipam-core
|
||||
|
||||
**Kind:** domain
|
||||
**Files:** 24
|
||||
**Functions:** 1, **Classes:** 1
|
||||
|
||||
## Structural Notes
|
||||
- Isolated subsystem with no cross-subsystem dependencies — may be self-contained tooling or unused
|
||||
|
||||
## Public Exports
|
||||
- `AuthFailed`
|
||||
- `map_groups`
|
||||
63
foxtrot-docs-v3/reference/subsystems/ipam-tools.md
Normal file
63
foxtrot-docs-v3/reference/subsystems/ipam-tools.md
Normal file
@@ -0,0 +1,63 @@
|
||||
# Subsystem: ipam-tools
|
||||
|
||||
**Kind:** domain
|
||||
**Files:** 17
|
||||
**Functions:** 104, **Classes:** 10
|
||||
|
||||
## Dependencies
|
||||
### Depends On
|
||||
- → app-tools: 6 calls, 0 imports
|
||||
- → compute-tools: 1 calls, 0 imports
|
||||
|
||||
## Public Exports
|
||||
- `AllocationError`
|
||||
- `NetboxAPIConfig`
|
||||
- `NetboxError`
|
||||
- `NetboxVPCAllocator`
|
||||
- `NetboxVPCRegistrar`
|
||||
- `PrefixConfig`
|
||||
- `ResourceNotFoundError`
|
||||
- `SubnetConfig`
|
||||
- `VRFConfig`
|
||||
- `ValidationError`
|
||||
- `add_missing_cidrs`
|
||||
- `add_or_update_prefix_in_netbox`
|
||||
- `allocate_prefix`
|
||||
- `checkout_britive_profile`
|
||||
- `collect_ranges`
|
||||
- `confirm_action`
|
||||
- `create_vrf`
|
||||
- `delete_orphaned_prefixes`
|
||||
- `delete_prefix_in_netbox`
|
||||
- `delete_unused_cidrs`
|
||||
- `export_ranges_to_csv`
|
||||
- `export_to_csv`
|
||||
- `fetch_azure_network_ranges`
|
||||
- `fetch_network_ranges`
|
||||
- `find_next_available_prefix`
|
||||
- `get_account_details`
|
||||
- `get_all_netbox_prefixes`
|
||||
- `get_all_subscriptions`
|
||||
- `get_aws_subnets`
|
||||
- `get_aws_vpc_cidrs`
|
||||
- `get_netbox_prefixes`
|
||||
- `get_next_available_ips`
|
||||
- `get_next_available_prefixes`
|
||||
- `get_or_create_site`
|
||||
- `get_or_create_tenant`
|
||||
- `get_or_create_vrf`
|
||||
- `get_prefix_id_from_cidr`
|
||||
- `get_regions`
|
||||
- `get_resource_groups`
|
||||
- `get_subnet_cidr_ranges`
|
||||
- `get_subnet_ranges`
|
||||
- `get_used_prefixes`
|
||||
- `get_vnet_cidr_ranges`
|
||||
- `get_vpc_ranges`
|
||||
- `identify_missing_cidrs`
|
||||
- `identify_unused_cidrs`
|
||||
- `list_projects_in_folder`
|
||||
- `log_debug`
|
||||
- `main`
|
||||
- `sanitize_slug`
|
||||
- `use_aws_credentials`
|
||||
10
foxtrot-docs-v3/reference/subsystems/network-common.md
Normal file
10
foxtrot-docs-v3/reference/subsystems/network-common.md
Normal file
@@ -0,0 +1,10 @@
|
||||
# Subsystem: network-common
|
||||
|
||||
**Kind:** domain
|
||||
**Files:** 24
|
||||
**Functions:** 0, **Classes:** 0
|
||||
|
||||
## Structural Notes
|
||||
- Zero functions despite 24 files — likely a configuration-only or IaC subsystem
|
||||
- Isolated subsystem with no cross-subsystem dependencies — may be self-contained tooling or unused
|
||||
|
||||
10
foxtrot-docs-v3/reference/subsystems/network-core.md
Normal file
10
foxtrot-docs-v3/reference/subsystems/network-core.md
Normal file
@@ -0,0 +1,10 @@
|
||||
# Subsystem: network-core
|
||||
|
||||
**Kind:** domain
|
||||
**Files:** 87
|
||||
**Functions:** 0, **Classes:** 0
|
||||
|
||||
## Structural Notes
|
||||
- Zero functions despite 87 files — likely a configuration-only or IaC subsystem
|
||||
- Isolated subsystem with no cross-subsystem dependencies — may be self-contained tooling or unused
|
||||
|
||||
79
foxtrot-docs-v3/reference/subsystems/runtime.md
Normal file
79
foxtrot-docs-v3/reference/subsystems/runtime.md
Normal file
@@ -0,0 +1,79 @@
|
||||
# Subsystem: runtime
|
||||
|
||||
**Kind:** domain
|
||||
**Files:** 16309
|
||||
**Functions:** 69, **Classes:** 0
|
||||
|
||||
## Structural Notes
|
||||
- 69 functions with no classes — procedural/script-heavy architecture
|
||||
- Isolated subsystem with no cross-subsystem dependencies — may be self-contained tooling or unused
|
||||
|
||||
## Public Exports
|
||||
- `ci_scripts`
|
||||
- `format_error`
|
||||
- `load_generate_name_module`
|
||||
- `load_logging_utils`
|
||||
- `load_module`
|
||||
- `load_scan_inventory_module`
|
||||
- `load_schema`
|
||||
- `manifest_file`
|
||||
- `manifest_without_name`
|
||||
- `run_script`
|
||||
- `sample_inventory`
|
||||
- `test_ci_pipeline_validation_flow`
|
||||
- `test_clone_or_update_repo_https`
|
||||
- `test_clone_or_update_repo_missing_workspace`
|
||||
- `test_clone_or_update_repo_ssh`
|
||||
- `test_clone_or_update_repo_uses_existing`
|
||||
- `test_commit_files_to_branch`
|
||||
- `test_create_pull_request_returns_url`
|
||||
- `test_deduplicate_environments`
|
||||
- `test_directories_exist`
|
||||
- `test_dockerfile_basics`
|
||||
- `test_error_logging_includes_remediation`
|
||||
- `test_extract_environment_info_invalid`
|
||||
- `test_extract_environment_info_valid`
|
||||
- `test_extract_pr_id_from_url`
|
||||
- `test_extract_spec_missing_fields`
|
||||
- `test_find_lowest_unused_index_empty`
|
||||
- `test_find_lowest_unused_index_gap`
|
||||
- `test_find_lowest_unused_index_no_gap`
|
||||
- `test_generate_app_config_contains_expected_paths`
|
||||
- `test_generate_argo_params_contains_destination`
|
||||
- `test_generate_compute_config_contains_expected_paths`
|
||||
- `test_generate_name_main_updates_manifest`
|
||||
- `test_generate_network_config_contains_expected_paths`
|
||||
- `test_gitignore_patterns_present`
|
||||
- `test_invalid_cloud_has_clear_error`
|
||||
- `test_invalid_phase_has_clear_error`
|
||||
- `test_invalid_type_has_clear_error`
|
||||
- `test_invalid_yaml_exits_one_with_clear_message`
|
||||
- `test_log_format_is_structured`
|
||||
- `test_manifest_lifecycle_new_environment`
|
||||
- `test_manifest_lifecycle_with_existing_environments`
|
||||
- `test_missing_file_returns_error`
|
||||
- `test_missing_required_field_has_clear_error`
|
||||
- `test_missing_required_field_has_line_number`
|
||||
- `test_missing_spec_cloud_has_clear_error`
|
||||
- `test_orchestrate_full_provision`
|
||||
- `test_parse_log_line`
|
||||
- `test_provision_app_calls_bitbucket`
|
||||
- `test_provision_app_requires_compute_complete`
|
||||
- `test_provision_compute_calls_bitbucket`
|
||||
- `test_provision_compute_requires_network_complete`
|
||||
- `test_provision_network_calls_bitbucket`
|
||||
- `test_required_files_exist`
|
||||
- `test_requirements_include_dependencies`
|
||||
- `test_run_inventory_scan_uses_env_file`
|
||||
- `test_save_manifest_preserves_content`
|
||||
- `test_scan_repo_for_environments`
|
||||
- `test_taskfile_has_required_tasks`
|
||||
- `test_update_manifest_adds_metadata`
|
||||
- `test_update_manifest_annotations`
|
||||
- `test_valid_manifest_passes`
|
||||
- `test_valid_yaml_exits_zero`
|
||||
- `test_wait_for_pr_merge_declined`
|
||||
- `test_wait_for_pr_merge_success`
|
||||
- `test_wait_for_pr_merge_timeout`
|
||||
- `valid_manifest`
|
||||
- `validate_manifest`
|
||||
23
foxtrot-docs-v3/reference/system-architecture.md
Normal file
23
foxtrot-docs-v3/reference/system-architecture.md
Normal file
@@ -0,0 +1,23 @@
|
||||
# System Architecture
|
||||
|
||||
## Summary
|
||||
- **Subsystems:** 11
|
||||
- **Helm Charts:** 76
|
||||
- **Terraform Modules:** 727
|
||||
- **Cross-Cutting:** app-tools
|
||||
|
||||
## Subsystems
|
||||
|
||||
| Subsystem | Kind | Files | Functions |
|
||||
|---|---|---|---|
|
||||
| account-common | domain | 8 | 0 |
|
||||
| app-common | domain | 934 | 28 |
|
||||
| app-tools | cross-cutting | 17 | 92 |
|
||||
| compute-common | domain | 64 | 14 |
|
||||
| compute-tools | domain | 28 | 108 |
|
||||
| control-core | domain | 336 | 0 |
|
||||
| ipam-core | domain | 24 | 1 |
|
||||
| ipam-tools | domain | 17 | 104 |
|
||||
| network-common | domain | 24 | 0 |
|
||||
| network-core | domain | 87 | 0 |
|
||||
| runtime | domain | 16309 | 69 |
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user