ODM for production configuration parameters

license: true

usersPassword: odmAdmin

customization:
  authSecretRef: my-auth-secret

customization:
  baiEmitterSecretRef: mybaieventsecret

customization:
  cp4baLicense: true

customization:
  dedicatedNodeLabel: myLabel

customization:
  deployForProduction: false

customization:
  downloadUrl:
  - http://<host>:<port>/file1.zip
  - http://<host>:<port>/file2.jar

customization:
  enabledCiphers: "MY_CIPHER1 MY_CYPHER_2"

--set customization.enabledCiphers="MY_CIPHER1 MY_CYPHER_2"

customization:
  enableFips: true

customization: 
  labels: 
    key: value
    isSomething: "true"

--set customization.labels.key=value

--set customization.labels."label\.with\.dot"=value

$ helm get values RELEASE_NAME > get-values.yaml 
$ helm upgrade RELEASE_NAME -f get-values.yaml \
   --set customization.labels.key=null \
   charts/ibm-odm-prod-CHART_VERSION.tgz

customization: 
  meteringServerUrl: http://my-odm-metering-service.com/

customization:
  nodeAffinity:
  - key: topology.kubernetes.io/zone
    operator: In
    values:
      - eu-west-3b 

customization:
  readOnlyRootFilesystem: false

For more information, see Installing containerized ODM.

customization:
  runAsUser: ““

--set customization.runAsUser=

customization:
  seccompProfile:
    type: RuntimeDefault

customization:
  seccompProfile:
    type: Locahost
    localhostProfile: : profiles/audit.json

For more information, see Defining the security certificate.

customization:
  securitySecretRef: mysecuritysecret

customization:
  tolerations:
  - key: "odm"
    operator: "Exists"
    effect: "NoExecute"

For more information, see Importing the certificate of an external service.

customization:
  trustedCertificateList:
  - service1-secret
  - service2-secret

--set customization.trustedCertificateList={"service1-secret"\, "service2-secret"}

See https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#schedule-syntax / '* * * * *' /.

decisionCenter.autoscaling.enabled

decisionCenter.autoscaling.minReplicas

decisionCenter.autoscaling.maxReplicas

decisionCenter.autoscaling.targetAverageUtilization

Enable and configure autoscaling for Decision Center.

For more information, see Autoscaling

false

2

3

75

decisionCenter:
  autoscaling:
    enabled: true
    minReplicas: 1
    maxReplicas: 4
    targetAverageUtilization: 80

For more information, see Configuring external access.

decisionCenter:
  contextRoot: “/dev-dc"

For more information, see Persisting the Decision Center ruleset cache and (Deprecated) Customizing the Decision Center Business console.

decisionCenter:
  customlibPvc: my-custom-dc-libs-pvc

For more information, see Synchronizing users and groups in Decision Center.

decisionCenter:
  disableAllAuthenticatedUser: true

decisionCenter:
  disableDbDump: true

decisionCenter:
  downloadUrl:
  - http://<host>:<port>/file1.zip
  - http://<host>:<port>/file2.jar

decisionCenter:
  enabled: false

Ignored if oidc.enabled is set to true.

For more information, see Migrating your LDAP connection.

See an example in Persisting the Decision Center ruleset cache.

decisionCenter:
  jvmOptionsRef: my-dc-jvm-options-configmap

decisionCenter:
  lifecycleHooksSecretRef: my-dc-hooks-secret

decisionCenter: 
  labels: 
    key: value
    isSomething: "true"

You can add labels with a command line by using the following syntax:

--set decisionCenter.labels.key=value

To add a label name that includes dots:

--set decisionCenter.labels."label\.with\.dot"=value

To remove a label, set it to null with the following command:

$ helm get values RELEASE_NAME > get-values.yaml
$ helm upgrade RELEASE_NAME -f get-values.yaml \ 
--set decisionCenter.labels.key=null \ 
charts/ibm-odm-prod-CHART_VERSION.tgz

For more information, see Customizing log levels.

decisionCenter:
  loggingRef: my-dc-logging-configmap

decisionCenter: 
  networkPolicy: 
    egress:
    - ports:
        - protocol: TCP
          port: <DC_DATABASE_PORT>
        - protocol: TCP
          port: 9443   # DS service port
      to:
        - ipBlock:
            cidr: <DC_DATABASE_IP>/32
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: <RELEASE_NAME>-ibm-odm-prod

decisionCenter: 
  networkPolicy: 
    ingress:
      - ports:
          - protocol: TCP
            port: 9453

For more information, see Configuring multi-zone support.

decisionCenter:
  nodeAffinity:
  - key: topology.kubernetes.io/zone
    operator: In
    values:
      - eu-west-3c 

decisionCenter:
  persistenceLocale: “en_GB”

This parameter is ignored if decisionCenter.autoscaling.enabled is set to true.

For more information, see Manual scaling.

decisionCenter:
  replicaCount: 2

decisionCenter.resources.limits.cpu

decisionCenter.resources.limits.memory

decisionCenter.resources.limits.ephemeral-storage

decisionCenter.resources.requests.cpu

decisionCenter.resources.requests.memory

decisionCenter.resources.requests.ephemeral-storage

The CPU/Memory/Ephemeral Storage resource requests/limits for Decision Center.

For more information, see Managing Resources for Containers.

2

4096Mi

2G

500m

1500Mi

1G

decisionCenter:
  resources:
    requests:
      cpu: 500m
      memory: 1500Mi
      ephemeral-storage: 1G
    limits:
      cpu: 2
      memory: 4096Mi
      ephemeral-storage: 2G

decisionCenter:
  sidecar:
    enabled: true

decisionCenter:
  sidecar:
    image: <IMAGE_NAME>:<IMAGE_TAG>

decisionCenter:
  sidecar:
    resources:
      requests:
        cpu: 500m
        memory: 1500Mi
        ephemeral-storage: 1G
      limits:
        cpu: 2
        memory: 4096Mi
        ephemeral-storage: 2G

decisionCenter:
  sidecar:
    probes:
      startupProbe:
        exec:
          command: ["/bin/sh","-c","/script/sidecar-startup-probe.sh"]
        failureThreshold: 20
        initialDelaySeconds: 5
        periodSeconds: 30
        timeoutSeconds: 5
        successThreshold: 1
      readinessProbe:
        exec:
          command: ["/bin/sh","-c","/script/sidecar-readiness-probe.sh"]
        failureThreshold: 20
        initialDelaySeconds: 5
        periodSeconds: 30
        timeoutSeconds: 5
        successThreshold: 1
      livenessProbe:
        exec:
          command: ["/bin/sh","-c","/script/sidecar-liveness-probe.sh"]
        failureThreshold: 20
        initialDelaySeconds: 5
        periodSeconds: 30
        timeoutSeconds: 5
        successThreshold: 1

Ignored if oidc.enabled is set to true.

For more information, see Migrating your LDAP connection.

decisionCenter:
  extendRoleMapping: true

decisionCenter:
  tagOrDigest: my-custom-tag

decisionCenter:
  tolerations:
  - key: "dc"
    operator: "Exists"
    effect: "NoSchedule"

For more information, see Customizing Decision Center.

decisionCenter:
  webConfigRef: my-odm-dc-web-configmap

decisionRunner.autoscaling.enabled

decisionRunner.autoscaling.minReplicas

decisionRunner.autoscaling.maxReplicas

decisionRunner.autoscaling.targetAverageUtilization

Enable and configure autoscaling for Decision Runner.

For more information, see Autoscaling

false

2

3

75

decisionRunner:
  autoscaling:
    enabled: true
    minReplicas: 1
    maxReplicas: 4
    targetAverageUtilization: 80

For more information, see Configuring external access.

decisionRunner:
  contextRoot: “/dev-dr"

decisionRunner:
  downloadUrl:
  - http://<host>:<port>/file1.zip
  - http://<host>:<port>/file2.jar

decisionRunner:
  enabled: false

See an example in Persisting the Decision Center ruleset cache.

decisionRunner:
  jvmOptionsRef: my-dr-jvm-options-configmap

decisionRunner:
  lifecycleHooksSecretRef: my-dr-hooks-secret

decisionRunner: 
  labels: 
    key: value
    isSomething: "true"

You can add labels with a command line by using the following syntax:

--set decisionRunner.labels.key=value

To add a label name that includes dots:

--set decisionRunner.labels."label\.with\.dot"=value

To remove a label, set it to null with the following command:

$ helm get values RELEASE_NAME > get-values.yaml
$ helm upgrade RELEASE_NAME -f get-values.yaml \ 
--set decisionRunner.labels.key=null \ 
charts/ibm-odm-prod-CHART_VERSION.tgz

For more information, see Customizing log levels.

decisionRunner:
  loggingRef: my-dr-logging-configmap

decisionRunner: 
  networkPolicy: 
    egress:
    - ports:
        - protocol: TCP
          port: 9443   # DS service port
        - protocol: TCP
          port: 9453   # DC service port
      to:
        - ipBlock:
          cidr: <DS_DATABASE_IP>/32
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: <RELEASE_NAME>-ibm-odm-prod

decisionRunner:
  networkPolicy:
    ingress:
    - ports:
        - protocol: TCP
          port: 9443
    - from:
        - podSelector:
            matchLabels:
              run: <RELEASE>-odm-decisioncenter
        - podSelector:
            matchLabels:
              run: <RELEASE>-odm-decisionserverconsole

For more information, see Configuring multi-zone support.

decisionRunner:
  nodeAffinity:
  - key: topology.kubernetes.io/zone
    operator: In
    values:
      - eu-west-3c 

This parameter is ignored if decisionRunner.autoscaling.enabled is set to true.

For more information, see Manual scaling.

decisionRunner:
  replicaCount: 2

decisionRunner.resources.limits.cpu

decisionRunner.resources.limits.memory

decisionRunner.resources.limits.ephemeral-storage

decisionRunner.resources.requests.cpu

decisionRunner.resources.requests.memory

decisionRunner.resources.requests.ephemeral-storage

The CPU/Memory/Ephemeral Storage resource requests/limits for Decision Runner.

For more information, see Managing Resources for Containers.

2

4096Mi

200Mi

500m

512Mi

1G

decisionRunner:
  resources:
    requests:
      cpu: 500m
      memory: 512Mi
      ephemeral-storage: 200Mi
    limits:
      cpu: 2
      memory: 4096Mi
      ephemeral-storage: 1G

Ignored if oidc.enabled is set to true.

For more information, see Migrating your LDAP connection.

decisionRunner:
  extendRoleMapping: true

For more information, see Customizing Decision Runner.

decisionRunner:
  resURL: "https://my_desination_cluster.domain.com/res,https://<project_name>-odm-decisionserverconsole:9443/<context_root>/res"

decisionRunner:
  tolerations:
  - key: "dr"
    operator: "Exists"
    effect: "NoSchedule"

For more information, see Configuring external access.

decisionServerConsole:
  contextRoot: “/dev-res"

decisionServerConsole:
  downloadUrl:
  - http://<host>:<port>/file1.zip
  - http://<host>:<port>/file2.jar

See an example in Persisting the Decision Center ruleset cache.

decisionServerConsole:
  jvmOptionsRef: my-dsc-jvm-options-configmap

decisionServerConsole:
  lifecycleHooksSecretRef: my-dsc-hooks-secret

decisionServerConsole: 
  labels: 
    key: value
    isSomething: "true"

You can add labels with a command line by using the following syntax:

--set decisionServerConsole.labels.key=value

To add a label name that includes dots:

--set decisionServerConsole.labels."label\.with\.dot"=value

To remove a label, set it to null with the following command:

$ helm get values RELEASE_NAME > get-values.yaml 
$ helm upgrade RELEASE_NAME -f get-values.yaml \ 
--set decisionServerConsole.labels.key=null \ 
charts/ibm-odm-prod-CHART_VERSION.tgz

For more information, see Customizing log levels.

decisionServerConsole:
  loggingRef: my-dsc-logging-configmap

decisionServerConsole: 
  networkPolicy: 
    egress:
    - ports:
          port: 9443   # DS service port
        - protocol: TCP
          port: 9453   # DC service port
      to:
        - ipBlock:
          cidr: <DS_DATABASE_IP>/32
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: <RELEASE_NAME>-ibm-odm-prod

decisionServerConsole:
  networkPolicy:
    ingress:
    - ports:
        - protocol: TCP
          port: 9443
        - protocol: TCP
          port: 1883
    - from:
        - podSelector:
            matchLabels:
              run: <RELEASE>-odm-decisioncenter
        - podSelector:
            matchLabels:
              run: <RELEASE>-odm-decisionrunner
        - podSelector:
            matchLabels:
              run: <RELEASE>-odm-decisionserverruntime

For more information, see Configuring multi-zone support.

decisionServerConsole:
  nodeAffinity:
  - key: topology.kubernetes.io/zone
    operator: In
    values:
      - eu-west-3c 

decisionServerConsole.resources.limits.cpu

decisionServerConsole.resources.limits.memory

decisionServerConsole.resources.limits.ephemeral-storage

decisionServerConsole.resources.requests.cpu

decisionServerConsole.resources.requests.memory

decisionServerConsole.resources.requests.ephemeral-storage

The CPU/Memory/Ephemeral Storage resource requests/limits for the Decision Server console.

For more information, see Managing Resources for Containers.

2

1024Mi

1G

500m

512Mi

200Mi

decisionServerConsole:
  resources:
    requests:
      cpu: 500m
      memory: 512Mi
      ephemeral-storage: 200Mi
    limits:
      cpu: 2
      memory: 1024Mi
      ephemeral-storage: 1G

Ignored if oidc.enabled is set to true.

For more information, see Migrating your LDAP connection.

decisionServerConsole:
  extendRoleMapping: true

decisionServerConsole:
  runtime:
    webConfigRef: my-dsc-web-configmap

decisionServerConsole:
  title: “ODM Console”

decisionServerConsole:
  description: “Decision Server Console”

decisionServerConsole:
  tolerations:
  - key: "dsc"
    operator: "Exists"
    effect: "NoSchedule"

decisionServerRuntime.autoscaling.enabled

decisionServerRuntime.autoscaling.minReplicas

decisionServerRuntime.autoscaling.maxReplicas

decisionServerRuntime.autoscaling.targetAverageUtilization

Enable and configure autoscaling for Decision Server runtime.

For more information, see Autoscaling

false

2

3

75

decisionServerRuntime:
  autoscaling:
    enabled: true
    minReplicas: 1
    maxReplicas: 4
    targetAverageUtilization: 80

For more information, see Configuring external access.

decisionServerRuntime:
  contextRoot: “/dev-dsr"

decisionServerRuntime:
  downloadUrl:
  - http://<host>:<port>/file1.zip
  - http://<host>:<port>/file2.jar

decisionServerRuntime:
  enabled: false

See an example in Persisting the Decision Center ruleset cache.

decisionServerRuntime:
  jvmOptionsRef: my-dsr-jvm-options-configmap

decisionServerRuntime:
  lifecycleHooksSecretRef: my-dsr-hooks-secret

decisionServerRuntime: 
  labels: 
    key: value
    isSomething: "true"

You can add labels with a command line by using the following syntax:

--set decisionServerRuntime.labels.key=value

To add a label name that includes dots:

--set decisionServerRuntime.labels."label\.with\.dot"=value

To remove a label, set it to null with the following command:

$ helm get values RELEASE_NAME > get-values.yaml
$ helm upgrade RELEASE_NAME -f get-values.yaml \ 
--set decisionServerRuntime.labels.key=null \ 
charts/ibm-odm-prod-CHART_VERSION.tgz

For more information, see Customizing log levels.

decisionServerRuntime:
  loggingRef: my-dsr-logging-configmap

decisionServerRuntime: 
  networkPolicy: 
    egress:
    - ports:
        - protocol: TCP
          port: <DS_DATABASE_PORT>
        - protocol: TCP
          port: 9443   # DS service port
        - protocol: TCP
          port: 9453   # DC service port
      to:
        - ipBlock:
            cidr: <DS_DATABASE_IP>/32
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: <RELEASE_NAME>-ibm-odm-prod

decisionServerRuntime:
  networkPolicy:
    ingress:
    - ports:
        - protocol: TCP
          port: 9443
    - from:
        - podSelector:
            matchLabels:
              run: <RELEASE>-odm-decisionserverconsole

For more information, see Configuring multi-zone support.

decisionServerRuntime:
  nodeAffinity:
  - key: topology.kubernetes.io/zone
    operator: In
    values:
      - eu-west-3c 

This parameter is ignored if decisionServerRuntime.autoscaling.enabled is set to true.

For more information, see Manual scaling.

decisionServerRuntime:
  replicaCount: 2

decisionServerRuntime.resources.limits.cpu

decisionServerRuntime.resources.limits.memory

decisionServerRuntime.resources.limits.ephemeral-storage

decisionServerRuntime.resources.requests.cpu

decisionServerRuntime.resources.requests.memory

decisionServerRuntime.resources.requests.ephemeral-storage

The CPU/Memory/Ephemeral Storage resource requests/limits for Decision Server runtime.

For more information, see Managing Resources for Containers.

2

4096Mi

1G

500m

512Mi

200Mi

decisionServerRuntime:
  resources:
    requests:
      cpu: 500m
      memory: 512Mi
      ephemeral-storage: 200Mi
    limits:
      cpu: 2
      memory: 4096Mi
      ephemeral-storage: 1G

Ignored if oidc.enabled is set to true.

For more information, see Migrating your LDAP connection.

decisionServerRuntime:
  extendRoleMapping: true

decisionServerRuntime:
  tolerations:
  - key: "dsr"
    operator: "Exists"
    effect: "NoSchedule"

For more information, see Customizing the Decision Server Runtime.

decisionServerRuntime:
  webConfigRef: my-odm-web-configmap

For more information, see Configuring a custom external database.

externalCustomDatabase:
  datasourceRef:customdatasource-secret

externalDatabase:
  databaseName: odmdb
  port: 5432
  secretCredentials: odm-prod-secret-psql
  serverName: postgresql.odm-restricted.svc.cluster.local
  type: postgresql

For more information, see Configuring an external database.

For more information, see Configuring an external database.

externalDatabase:
  driversUrl:
  - https://repo1.maven.org/maven2/mysql/mysql-connector-java/5.1.49/mysql-connector-java-5.1.49.jar
  - url2

--set externalDatabase.driversUrl="{url1,url2}"

For more information, see Configuring an external database.

externalDatabase:
  sslSecretRef: db2-ssl-secret

For more information, see Configuring an external database.

externalDatabase:
  url: "jdbc:oracle:thin:@serverName:port:databaseName"

externalDatabase:
  decisionCenter:
    databaseName: dcdb
    port: 5432
    secretCredentials: odm-prod-secret-psql-dc
    serverName: postgresqldc.odm-restricted.svc.cluster.local
    type: postgresql

For more information, see Configuring an external database.

For more information, see Configuring an external database.

externalDatabase:
  decisionCenter:
    driversUrl:
    - url1
    - url2

--set externalDatabase.decisionCenter.driversUrl="{url1,url2}"

For more information, see Configuring an external database.

externalDatabase:
  decisionCenter:
    sslSecretRef: db2-ssl-secret

For more information, see Configuring an external database.

externalDatabase:
  decisionCenter:
    url: "jdbc:oracle:thin:@serverName:port:databaseName"

externalDatabase:
  decisionServer:
    databaseName: dsdb
    port: 5432
    secretCredentials: odm-prod-secret-psql-ds
    serverName: postgresqlds.odm-restricted.svc.cluster.local
    type: postgresql

For more information, see Configuring an external database.

For more information, see Configuring an external database.

externalDatabase:
  decisionServer:
    driversUrl:
    - url1
    - url2

--set externalDatabase.decisionServer.driversUrl="{url1,url2}"

For more information, see Configuring an external database.

externalDatabase:
  decisionServer:
    sslSecretRef: db2-ssl-secret

For more information, see Configuring an external database.

externalDatabase:
  decisionServer:
    url: "jdbc:oracle:thin:@serverName:port:databaseName"

Set the policy to Always to pull the latest version of the docker image.

image:
  pullPolicy: Always

image:
  pullSecrets: 
  - admin.registrykey
  - admin.registrykey

image:
  tag: 9.0.0.1-IF00n

image:
  repository: your.private.registry.example.com

internalDatabase:
  persistence:
    enabled: true
    resources:
      requests:
        storage: 5Gi
    storageClassName: my-storage-class
    useDynamicProvisioning: true

For more information, see Configuring the internal database.

internalDatabase:
  populateSampleData: true

internalDatabase.resources.limits.cpu

internalDatabase.resources.limits.memory

internalDatabase.resources.limits.ephemeral-storage

internalDatabase.resources.requests.cpu

internalDatabase.resources.requests.memory

internalDatabase.resources.requests.ephemeral-storage

2

4096Mi

1G

500m

512Mi

500Mi

internalDatabase:
  resources:
    requests:
      cpu: 500m
      memory: 512Mi
      ephemeral-storage: 500Mi
    limits:
      cpu: 2
      memory: 4096Mi
      ephemeral-storage: 1G

For more information, see Preparing to install Operational Decision Manager.

internalDatabase:
  runAsUser: ““

--set internalDatabase.runAsUser=

For more information, see Configuring the internal database.

internalDatabase:
  secretCredentials: my-secret

internalDatabase:
  tagOrDigest: my-custom-tag

livenessProbe.failureThreshold

livenessProbe.initialDelaySeconds

livenessProbe.periodSeconds

livenessProbe.timeoutSeconds

4

300

30

5

livenessProbe:
  failureThreshold: 4
  initialDelaySeconds: 300
  periodSeconds: 30
  timeoutSeconds: 5

networkPolicy:
  enable: false

networkPolicy:        
  egress:
  - ports:
      - protocol: TCP
        port: <DC_DATABASE_PORT>
      - protocol: TCP
        port: <DS_DATABASE_PORT>
      - protocol: TCP
        port: 9443   # DS service port
      - protocol: TCP
        port: 9453   # DC service port
    to:
      - ipBlock:
          cidr: <DC_DATABASE_IP>/32
      - ipBlock:
          cidr: <DS_DATABASE_IP>/32
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: <RELEASE_NAME>-ibm-odm-prod

networkPolicy:
  ingress:
  - {}

oidc:
  disableLoginPanel: true

oidc:
  enabled: true
  serverUrl: my-openid-serverUrl
  adminRef: my-openid-admin-secret
  allowedDomains: my-openid-allowed-domains

For more information, see Configuring user access with OpenID.

For more information, see Configuring user access with OpenID.

oidc:
  clientRef: my_openid_clientid_secret

For more information, see Configuring user access with OpenID.

oidc:
  provider: myopenidprovider

oidc:
  redirectUrisRef: my-odm-oidc-redirect-uris-configmap

readinessProbe.failureThreshold

readinessProbe.initialDelaySeconds

readinessProbe.periodSeconds

readinessProbe.timeoutSeconds

45

5

5

5

readinessProbe:
  failureThreshold: 45
  initialDelaySeconds: 5
  periodSeconds: 5
  timeoutSeconds: 5

For more information, see Preparing to install Operational Decision Manager.

serviceAccountName: my-custom-sa

For more information, see Configuring external access.

service:
  enableRoute: true

For more information, see Configuring external access.

service:
  enableTLS: false

The following hostname is generated <component-name>.odm.<release-name>.<service.hostname>.

If empty, OpenShift automatically generates a hostname of the form <route-name>.<suffix>, where the generated hostname suffix is the default routing subdomain of your cluster according to the OpenShift documentation.

empty

service:
  hostname: my-custom-route.com

service.ingress.enabled

service.ingress.annotations

service.ingress.tlsHosts

service.ingress.tlsSecretRef

service.ingress.host

Specify whether an Ingress is created automatically. If true, an Ingress is created for each Operational Decision Manager component.

Specify the Ingress annotations. For an example, see odm-docker-kubernetes documentation.

Specify the TLS domains of the Ingress.

Specify the name of the secret that contains the TLS certificate that you want to use for the Ingress Domain.

Specify the name of the Ingress Domain.

For more information, see Configuring external access.

false

empty

[]

empty

empty

service:
  ingress:
    enabled: true
    annotations: 
      kubernetes.io/ingress.class: alb
      alb.ingress.kubernetes.io/scheme: internet-facing         
      alb.ingress.kubernetes.io/backend-protocol: "HTTPS"      
      alb.ingress.kubernetes.io/certificate-arn: "arn:aws:iam::<AWS-AccountId>:server-certificate/mycompany"
    tlsHosts: 
      - tls-host-1
      - tls-host-2
    tlsSecretRef: my-tls-secret
    host: mycompany.com

For more information, see Configuring external access.

NodePort

ClusterIP (if service.enableRoute is set to true)

service:
  type: ClusterIP

Define how IP families (IPv4 and IPv6) are handled for the Service. This

setting becomes particularly relevant in dual-stack environments where

both IPv4 and IPv6 are enabled. Here are the options you can specify for ipFamilyPolicy: SingleStack , PreferDualStack , RequireDualStack (New since version 9.0.0.1)

service:
  ipFamilyPolicy: RequireDualStack

service:
  ipFamilies: 
   - IPv6

startupProbe.failureThreshold

startupProbe.initialDelaySeconds

startupProbe.periodSeconds

startupProbe.timeoutSeconds

30

15

10

5

startupProbe:
  failureThreshold: 30
  initialDelaySeconds: 15
  periodSeconds: 20
  timeoutSeconds: 5

vault:
  enabled: true
  type: spc

vault:
  enabled: true
  type: spc