mirror of
https://github.com/pgadmin-org/pgadmin4.git
synced 2026-08-17 16:34:44 -05:00
somaz
7e76fb4eb0
Add an opt-in Gateway API HTTPRoute template to the Helm chart as an alternative to the existing Ingress, addressing #9942. It is disabled by default (httpRoute.enabled: false) so existing installs are unaffected. The template mirrors the existing ingress.yaml conventions: the pgadmin4.fullname backend, commonLabels/commonAnnotations propagation, and a hostname that falls back to ingress.hostname when httpRoute.hostnames is unset. parentRefs is required (a fail guard fires when it is empty), apiVersion defaults to gateway.networking.k8s.io/v1, and the default rule forwards "/" (PathPrefix) to the pgAdmin service. Custom hostnames and rules can be supplied for full control. The new values are documented in the chart README.
183 lines
3.8 KiB
YAML
183 lines
3.8 KiB
YAML
global:
|
|
imageRegistry: ""
|
|
defaultStorageClass: ""
|
|
imagePullSecrets: []
|
|
compatibility:
|
|
openshift:
|
|
adaptSecurityContext: auto
|
|
appArmor:
|
|
enabled: false
|
|
|
|
fullname: pgadmin4
|
|
|
|
image:
|
|
registry: docker.io
|
|
repository: dpage/pgadmin4
|
|
tag: ""
|
|
pullPolicy: IfNotPresent
|
|
pullSecrets: []
|
|
|
|
commonLabels:
|
|
app: pgadmin4
|
|
commonAnnotations: {}
|
|
|
|
extraDeploy: []
|
|
|
|
replicas: 1
|
|
|
|
# strategy:
|
|
# type: RollingUpdate
|
|
# rollingUpdate:
|
|
# maxSurge: 25%
|
|
# maxUnavailable: 25%
|
|
|
|
containerPort: 5050
|
|
disablePostfix: true
|
|
enableServiceLinks: false
|
|
auth:
|
|
email: admin@pgadmin.org
|
|
password: ""
|
|
existingSecret: ""
|
|
passwordKey: password
|
|
extraEnvVars: []
|
|
# - name: PGADMIN_CONFIG_LOGIN_BANNER
|
|
# value: '"Welcome to pgAdmin4 :)"'
|
|
extraVolumes: []
|
|
extraVolumeMounts: []
|
|
|
|
config_local:
|
|
enabled: false
|
|
existingSecret: ""
|
|
configKey: config_local.py
|
|
data: ""
|
|
# data: |
|
|
# DEBUG = True
|
|
# JSON_LOGGER = True
|
|
# AUTHENTICATION_SOURCES = ['oauth2', 'internal']
|
|
|
|
serverDefinitions:
|
|
enabled: false
|
|
data: {}
|
|
# "1":
|
|
# Name: Minimally Defined Server
|
|
# Group: Servers
|
|
# Port: 5432
|
|
# Username: postgres
|
|
# Host: myHost
|
|
# MaintenanceDB: postgres
|
|
# ConnectionParameters:
|
|
# sslmode: prefer
|
|
# connect_timeout: 10
|
|
|
|
preferences:
|
|
enabled: false
|
|
data: {}
|
|
# misc:user_interface:theme: dark
|
|
# file_manager:options:file_upload_size: 500
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 500m
|
|
memory: 1Gi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 1Gi
|
|
|
|
persistence:
|
|
enabled: true
|
|
size: 1Gi
|
|
storageClass: ""
|
|
accessModes: ["ReadWriteOnce"]
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 80
|
|
annotations: {}
|
|
loadBalancerIP: ""
|
|
|
|
serviceAccount:
|
|
create: true
|
|
name: ""
|
|
automountServiceAccountToken: false
|
|
|
|
ingress:
|
|
enabled: false
|
|
hostname: pgadmin4.local
|
|
annotations: {}
|
|
# If set, enables TLS configuration in the Ingress resource.
|
|
tlsSecret: ""
|
|
httpRoute:
|
|
# Enable a Gateway API HTTPRoute as an alternative to the Ingress above.
|
|
enabled: false
|
|
# apiVersion for the HTTPRoute resource. Override if your Gateway API
|
|
# implementation still serves the resource under v1beta1.
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
# parentRefs is required when httpRoute.enabled is true. It references the
|
|
# Gateway (and optionally a listener) that should route to pgAdmin.
|
|
parentRefs: []
|
|
# - name: my-gateway
|
|
# namespace: gateway-system
|
|
# sectionName: https
|
|
# hostnames for the route. When empty, falls back to ingress.hostname.
|
|
hostnames: []
|
|
# - pgadmin4.example.com
|
|
annotations: {}
|
|
# Custom routing rules. When empty, a single rule forwards all traffic
|
|
# ("/" PathPrefix) to the pgAdmin service.
|
|
rules: []
|
|
startupProbe:
|
|
enabled: false
|
|
httpGet:
|
|
path: /misc/ping
|
|
port: http
|
|
initialDelaySeconds: null
|
|
periodSeconds: null
|
|
timeoutSeconds: null
|
|
failureThreshold: null
|
|
|
|
readinessProbe:
|
|
enabled: true
|
|
httpGet:
|
|
path: /misc/ping
|
|
port: http
|
|
initialDelaySeconds: null
|
|
periodSeconds: null
|
|
timeoutSeconds: null
|
|
failureThreshold: null
|
|
|
|
livenessProbe:
|
|
enabled: false
|
|
httpGet:
|
|
path: /misc/ping
|
|
port: http
|
|
initialDelaySeconds: null
|
|
periodSeconds: null
|
|
timeoutSeconds: null
|
|
failureThreshold: null
|
|
|
|
podSecurityContext:
|
|
enabled: true
|
|
fsGroupChangePolicy: Always
|
|
sysctls: []
|
|
supplementalGroups: []
|
|
fsGroup: 1001
|
|
|
|
containerSecurityContext:
|
|
enabled: true
|
|
seLinuxOptions: {}
|
|
runAsUser: 1001
|
|
runAsGroup: 1001
|
|
runAsNonRoot: true
|
|
privileged: false
|
|
readOnlyRootFilesystem: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
appArmorProfile:
|
|
type: RuntimeDefault
|
|
windowsOptions:
|
|
hostProcess: false
|
|
|