kubernetes/common/elasticsearch/values.yaml

   1 # Copyright (c) 2020 Bitnami, AT&T, Amdocs, Bell Canada, highstreet technologies
   2 # Modification Copyright (c) 2020 Nokia
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #       http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 #################################################################
  17 # Global configuration defaults.
  18 #################################################################
  19 global:
  20   nodePortPrefix: 302
  21   clusterName: cluster.local
  22
  23 persistence:
  24   mountPath: /dockerdata-nfs
  25   backup:
  26     mountPath: /dockerdata-nfs/backup
  27   storageClass:
  28
  29 #################################################################
  30 # Application configuration defaults.
  31 #################################################################
  32 ## Init containers parameters:
  33 sysctlImage:
  34   enabled: true
  35
  36 # application image
  37 image: bitnami/elasticsearch:7.9.3
  38 ## Specify a imagePullPolicy
  39 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
  40 ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
  41 ##
  42 pullPolicy: IfNotPresent
  43 ## Optionally specify an array of imagePullSecrets.
  44 ## Secrets must be manually created in the namespace.
  45 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
  46 ##
  47 # pullSecrets:
  48 #   - myRegistryKeySecretName
  49 ## Set to true if you would like to see extra information on logs
  50 ## ref:  https://github.com/bitnami/minideb-extras/#turn-on-bash-debugging
  51 ##
  52 debug: false
  53
  54 ## String to partially override common.fullname template (will maintain the release name)
  55 ##
  56 # nameOverride:
  57
  58 ## String to fully override common.fullname template
  59 ##
  60 # fullnameOverride:
  61 ## updateStrategy for ElasticSearch coordinating deployment
  62 ## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
  63 ##
  64 updateStrategy:
  65   type: RollingUpdate
  66 heapSize: 128m
  67 ## Provide annotations for the coordinating-only pods.
  68 ##
  69 podAnnotations: {}
  70 ## Pod Security Context for coordinating-only pods.
  71 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
  72 ##
  73 securityContext:
  74   enabled: true
  75   fsGroup: 1001
  76   runAsUser: 1001
  77 ## Affinity for pod assignment.
  78 ## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
  79 ##
  80 affinity: {}
  81 ## Node labels for pod assignment. Evaluated as a template.
  82 ## Ref: https://kubernetes.io/docs/user-guide/node-selection/
  83 ##
  84 nodeSelector: {}
  85 ## Tolerations for pod assignment. Evaluated as a template.
  86 ## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
  87 ##
  88 tolerations: []
  89 ## Elasticsearch coordinating-only container's resource requests and limits
  90 ## ref: http://kubernetes.io/docs/user-guide/compute-resources/
  91 ##
  92 resources:
  93   ## We usually recommend not to specify default resources and to leave this as a conscious
  94   ## choice for the user. This also increases chances charts run on environments with little
  95   ## resources, such as Minikube.
  96   limits: {}
  97   #   cpu: "100m"
  98   #   memory: "100Mi"
  99   requests:
 100     cpu: "25m"
 101     memory: "200Mi"
 102 ## Elasticsearch coordinating-only container's liveness and readiness probes
 103 ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes
 104 ##
 105 livenessProbe:
 106   enabled: false
 107 #  initialDelaySeconds: 90
 108 #  periodSeconds: 10
 109 #  timeoutSeconds: 5
 110 #  successThreshold: 1
 111 #  failureThreshold: 5
 112 readinessProbe:
 113   enabled: false
 114 #  initialDelaySeconds: 90
 115 #  periodSeconds: 10
 116 #  timeoutSeconds: 5
 117 #  successThreshold: 1
 118 #  failureThreshold: 5
 119 ## Service parameters for coordinating-only node(s)
 120 ##
 121 serviceAccount:
 122   ## Specifies whether a ServiceAccount should be created for the coordinating node
 123   ##
 124   create: false
 125   ## The name of the ServiceAccount to use.
 126   ## If not set and create is true, a name is generated using the fullname template
 127   ##
 128   # name:
 129
 130 sysctlImage:
 131   enabled: true
 132   ## Specify a imagePullPolicy
 133   ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
 134   ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
 135   ##
 136   pullPolicy: Always
 137   ## Optionally specify an array of imagePullSecrets.
 138   ## Secrets must be manually created in the namespace.
 139   ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
 140   ##
 141   # pullSecrets:
 142   #   - myRegistryKeySecretName
 143
 144 # nginx image
 145 nginx:
 146   pullPolicy: IfNotPresent
 147   service:
 148     name: nginx
 149     ports:
 150     - name: http-es
 151       port: 8080
 152 ## Custom server block to be added to NGINX configuration
 153 ## PHP-FPM example server block:
 154   serverBlock:
 155     https: |-
 156       server {
 157         listen 9200 ssl;
 158         #server_name ;
 159         # auth_basic "server auth";
 160         # auth_basic_user_file /etc/nginx/passwords;
 161         ssl_certificate /opt/app/osaaf/local/certs/cert.pem;
 162         ssl_certificate_key /opt/app/osaaf/local/certs/key.pem;
 163         location / {
 164           # deny node shutdown api
 165           if ($request_filename ~ "_shutdown") {
 166             return 403;
 167             break;
 168           }
 169
 170           proxy_pass http://localhost:9000;
 171           proxy_http_version 1.1;
 172           proxy_set_header Connection "Keep-Alive";
 173           proxy_set_header Proxy-Connection "Keep-Alive";
 174           proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 175           proxy_set_header X-Forwarded-Proto $scheme;
 176           proxy_set_header X-Real-IP $remote_addr;
 177           proxy_set_header Host $http_host;
 178           proxy_redirect off;
 179         }
 180
 181         location = / {
 182           proxy_pass http://localhost:9000;
 183           proxy_http_version 1.1;
 184           proxy_set_header Connection "Keep-Alive";
 185           proxy_set_header Proxy-Connection "Keep-Alive";
 186           proxy_redirect off;
 187           auth_basic "off";
 188         }
 189       }
 190     http: |-
 191       server {
 192         listen 9200 ;
 193         #server_name ;
 194         location / {
 195           # deny node shutdown api
 196           if ($request_filename ~ "_shutdown") {
 197             return 403;
 198             break;
 199           }
 200
 201           proxy_pass http://localhost:9000;
 202           proxy_http_version 1.1;
 203           proxy_set_header Connection "Keep-Alive";
 204           proxy_set_header Proxy-Connection "Keep-Alive";
 205           proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 206           proxy_set_header X-Forwarded-Proto $scheme;
 207           proxy_set_header X-Real-IP $remote_addr;
 208           proxy_set_header Host $http_host;
 209           proxy_redirect off;
 210         }
 211
 212         location = / {
 213           proxy_pass http://localhost:9000;
 214           proxy_http_version 1.1;
 215           proxy_set_header Connection "Keep-Alive";
 216           proxy_set_header Proxy-Connection "Keep-Alive";
 217           proxy_redirect off;
 218           auth_basic "off";
 219         }
 220       }
 221 #################################################################
 222 # coordinating service configuration defaults.
 223 #################################################################
 224
 225 service:
 226   name: ""
 227   suffix: ""
 228   ## coordinating-only service type
 229   ##
 230   type: ClusterIP
 231   headlessPorts:
 232   - name: tcp-transport
 233     port: 9300
 234   headless:
 235     suffix: discovery
 236     annotations:
 237       service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
 238     publishNotReadyAddresses: true
 239   ## Elasticsearch tREST API port
 240   ##
 241   ports:
 242   - name: http-es
 243     port: 9200
 244
 245
 246   ## Specify the nodePort value for the LoadBalancer and NodePort service types.
 247   ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport
 248   ##
 249   # nodePort:
 250   ## Provide any additional annotations which may be required. This can be used to
 251   ## set the LoadBalancer service type to internal only.
 252   ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
 253   ##
 254   annotations: {}
 255   ## Set the LoadBalancer service type to internal only.
 256   ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
 257   ##
 258   # loadBalancerIP:
 259   ## Provide functionality to use RBAC
 260   ##
 261
 262 #################################################################
 263 # subcharts configuration defaults.
 264 #################################################################
 265
 266
 267 #data:
 268 #  enabled: false
 269
 270 #curator:
 271 #  enabled: false
 272
 273 ## Change nameOverride to be consistent accross all elasticsearch (sub)-charts
 274
 275 master:
 276   replicaCount: 3
 277   # dedicatednode: "yes"
 278   # working as master node only, in this case increase replicaCount for elasticsearch-data
 279   # dedicatednode: "no"
 280   # handles master and data node functionality
 281   dedicatednode: "no"
 282   cluster_name: elasticsearch
 283 data:
 284   enabled: false
 285   cluster_name: elasticsearch
 286 curator:
 287   enabled: false