A Configuration Parameters for the oudsm Helm Chart
The following table lists the configurable parameters of the oudsm chart
and their default values.
| Parameter | Description | Default Value |
|---|---|---|
| replicaCount | Number of Oracle Unified Directory Services Manager instances/pods/services to be created | 1 |
| restartPolicyName | restartPolicy to be configured for each POD containing Oracle Unified Directory Services Manager instance | OnFailure |
| image.repository | Oracle Unified Directory Services Manager Image Registry/Repository and name. Based on this, image parameter would be configured for Oracle Unified Directory Services Manager pods/containers. | oracle/oudsm |
| image.tag | Oracle Unified Directory Services Manager Image Tag. Based on this, image parameter would be configured for Oracle Unified Directory Services Manager pods/containers | 14.1.2.1.0 |
| image.pullPolicy | Policy to pull the image. | IfnotPresent |
| imagePullSecrets.name | Name of Secret resource containing private registry credentials. | regcred |
| nameOverride | override the fullname with this name. | |
| fullnameOverride | Overrides the fullname with the provided string. | |
| serviceAccount.create | Specifies whether a service account should be created. | true |
| serviceAccount.name | If not set and create is true, a name is generated using the fullname template. | oudsm-< fullname >-token-< randomalphanum > |
| podSecurityContext | Security context policies to add to the controller pod. | |
| securityContext | Security context policies to add by default. | |
| service.type | Type of controller service to create. | ClusterIP |
| nodeSelector | Node labels for pod assignment. | |
| tolerations | Node taints to tolerate. | |
| affinity | Node/pod affinities. | |
| ingress.enabled | true | |
| ingress.type | Supported value: nginx. | nginx |
| ingress.host | Hostname to be used with Ingress Rules. If not set, hostname would be configured according to fullname. Hosts would be configured as < fullname >-http.< domain >, < fullname >-http-0.< domain >, < fullname >-http-1.< domain >, etc. | |
| ingress.domain | Domain name to be used with Ingress Rules. In ingress rules, hosts would be configured as < host >.< domain >, < host >-0.< domain >, < host >-1.< domain >, etc. | |
| ingress.backendPort | http | |
| ingress.nginxAnnotations | { kubernetes.io/ingress.class: “nginx" nginx.ingress.kubernetes.io/affinity-mode: “persistent” nginx.ingress.kubernetes.io/affinity: “cookie” } | |
| ingress.ingress.tlsSecret | Secret name to use an already created TLS Secret. If such secret is not provided, one would be created with name < fullname >-tls-cert. If the TLS Secret is in different namespace, name can be mentioned as < namespace >/< tlsSecretName > | |
| ingress.certCN | Subject’s common name (cn) for SelfSigned Cert. | < fullname > |
| ingress.certValidityDays | Validity of Self-Signed Cert in days | 365 |
| ingress.ingress.tlsSecret | Secret name to use an already created TLS Secret. If such secret is not provided, one would be created with name < fullname >-tls-cert. If the TLS Secret is in different namespace, name can be mentioned as < namespace >/< tlsSecretName > | |
| ingress.certCN | Subject’s common name (cn) for SelfSigned Cert. | < fullname > |
| ingress.certValidityDays | Validity of Self-Signed Cert in days | 365 |
| secret.enabled | If enabled it will use the secret created with base64 encoding. if value is false, secret would not be used and input values (through –set, –values, etc.) would be used while creation of pods. | true |
| secret.name | Secret name to use an already created xecret. | oudsm-< fullname >-creds |
| secret.type | Specifies the type of the secret | Opaque |
| persistence.enabled | If enabled, it will use the persistent volume. if value is false, PV and PVC would not be used and pods would be using the default emptyDir mount volume. | true |
| persistence.pvname | pvname to use an already created Persistent Volume , If blank will use the default name. | oudsm-< fullname >-pv |
| persistence.pvcname | pvcname to use an already created Persistent Volume Claim , If blank will use default name. | oudsm-< fullname >-pvc |
| persistence.type | supported values: either filesystem or networkstorage or blockstorage or custom. | filesystem |
| persistence.filesystem.hostPath.path | The path location mentioned should be created and accessible from the local host provided with necessary privileges for the user. | /scratch/shared/oudsm_user_projects |
| persistence.networkstorage.nfs.path | Path of NFS Share location. | /scratch/shared/oudsm_user_projects |
| persistence.networkstorage.nfs.server | IP or hostname of NFS Server. | 0.0.0.0 |
| persistence.custom.* | Based on values/data, YAML content would be included in PersistenceVolume Object. | |
| persistence.accessMode | Specifies the access mode of the location provided. ReadWriteMany for Filesystem/NFS, ReadWriteOnce for block storage. | ReadWriteMany |
| persistence.size | Specifies the size of the storage. | 10Gi |
| persistence.storageClassCreate | If true, it will create the storageclass. if value is false, please provide existing storage class (storageClass) to be used. | empty |
| persistence.storageClass | Specifies the storageclass of the persistence volume. | empty |
| persistence.provisioner | If storageClassCreate is true, provide the custom provisioner if any. | kubernetes.io/is-default-class |
| persistence.annotations | specifies any annotations that will be used. | { } |
| oudsm.adminUser | oudsm.adminUser | weblogic |
| oudsm.adminPass | Password for Weblogic Administration User | |
| oudsm.startupTime | Expected startup time. After specified seconds readinessProbe would start | 900 |
| oudsm.livenessProbeInitialDelay | Parameter to decide livenessProbe initialDelaySeconds | 1200 |
| elk.logStashImage | The version of logstash you want to install. | logstash:8.3.1 |
| elk.sslenabled | If SSL is enabled for ELK set the value to true, or if NON-SSL set to false. This value must be lowercase. | TRUE |
| elk.eshosts | The URL for sending logs to Elasticsearch. HTTP if NON-SSL is used. | https://elasticsearch.example.com:9200 |
| elk.esuser | The name of the user for logstash to access Elasticsearch. | logstash_internal |
| elk.espassword | The password for ELK_USER. | password |
| elk.esapikey | The API key details. | apikey |
| elk.esindex | The log name. | oudlogs-00001 |
| elk.imagePullSecrets | Secret to be used for pulling logstash image. | dockercred |