mirror of
https://github.com/bitnami/charts.git
synced 2026-02-20 03:58:02 +08:00
573 lines
17 KiB
YAML
573 lines
17 KiB
YAML
## Global Docker image parameters
|
|
## Please, note that this will override the image parameters, including dependencies, configured to use the global value
|
|
## Current available global Docker image parameters: imageRegistry and imagePullSecrets
|
|
##
|
|
# global:
|
|
# imageRegistry: myRegistryName
|
|
# imagePullSecrets:
|
|
# - myRegistryKeySecretName
|
|
# storageClass: myStorageClass
|
|
|
|
## Bitnami WordPress image version
|
|
## ref: https://hub.docker.com/r/bitnami/wordpress/tags/
|
|
##
|
|
image:
|
|
registry: docker.io
|
|
repository: bitnami/wordpress
|
|
tag: 5.5.3-debian-10-r11
|
|
## Specify a imagePullPolicy
|
|
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
|
## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
|
|
##
|
|
pullPolicy: IfNotPresent
|
|
## Optionally specify an array of imagePullSecrets.
|
|
## Secrets must be manually created in the namespace.
|
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
|
##
|
|
# pullSecrets:
|
|
# - myRegistryKeySecretName
|
|
## Set to true if you would like to see extra information on logs
|
|
##
|
|
debug: false
|
|
|
|
## String to partially override wordpress.fullname template (will maintain the release name)
|
|
##
|
|
# nameOverride:
|
|
|
|
## String to fully override wordpress.fullname template
|
|
##
|
|
# fullnameOverride:
|
|
|
|
## Kubernetes Cluster Domain
|
|
##
|
|
clusterDomain: cluster.local
|
|
|
|
## Add labels to all the deployed resources
|
|
##
|
|
commonLabels: {}
|
|
|
|
## Add annotations to all the deployed resources
|
|
##
|
|
commonAnnotations: {}
|
|
|
|
## Use existing secret (does not create the WordPress Secret object)
|
|
## Must contain key `wordpress-secret`
|
|
## NOTE: When it's set, the `wordpressPassword` parameter is ignored
|
|
# existingSecret:
|
|
|
|
## User of the application
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress#environment-variables
|
|
##
|
|
wordpressUsername: user
|
|
|
|
## Application password
|
|
## Defaults to a random 10-character alphanumeric string if not set
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress#environment-variables
|
|
##
|
|
# wordpressPassword:
|
|
|
|
## Admin email
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress#environment-variables
|
|
##
|
|
wordpressEmail: user@example.com
|
|
|
|
## First name
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress#environment-variables
|
|
##
|
|
wordpressFirstName: FirstName
|
|
|
|
## Last name
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress#environment-variables
|
|
##
|
|
wordpressLastName: LastName
|
|
|
|
## Blog name
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress#environment-variables
|
|
##
|
|
wordpressBlogName: User's Blog!
|
|
|
|
## Table prefix
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress#environment-variables
|
|
##
|
|
wordpressTablePrefix: wp_
|
|
|
|
## Scheme to generate application URLs
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress#environment-variables
|
|
##
|
|
wordpressScheme: http
|
|
|
|
## Skip wizard installation (only if you use an external database that already contains WordPress data)
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress#connect-wordpress-docker-container-to-an-existing-database
|
|
##
|
|
wordpressSkipInstall: false
|
|
|
|
## Add extra content to the default configuration file
|
|
##
|
|
wordpressExtraConfigContent: ""
|
|
|
|
## Set to `false` to allow the container to be started with blank passwords
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress#environment-variables
|
|
##
|
|
allowEmptyPassword: true
|
|
|
|
## Set Apache allowOverride to None
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress#environment-variables
|
|
##
|
|
allowOverrideNone: false
|
|
|
|
## Persist the custom changes of the htaccess. It depends on the value of
|
|
## `.Values.allowOverrideNone`, when `yes` it will persist `/opt/bitnami/wordpress/wordpress-htaccess.conf`
|
|
## if `no` it will persist `/opt/bitnami/wordpress/.htaccess`
|
|
##
|
|
htaccessPersistenceEnabled: false
|
|
|
|
## ConfigMap with custom wordpress-htaccess.conf file (requires allowOverrideNone to true)
|
|
##
|
|
customHTAccessCM:
|
|
|
|
## Command and args for running the container (set to default if not set). Use array form
|
|
##
|
|
command: []
|
|
args: []
|
|
|
|
## Set up update strategy for wordpress installation. Set to Recreate if you use persistent volume that cannot be mounted by more than one pods to makesure the pods is destroyed first.
|
|
## ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
|
|
## Example:
|
|
## updateStrategy:
|
|
## type: RollingUpdate
|
|
## rollingUpdate:
|
|
## maxSurge: 25%
|
|
## maxUnavailable: 25%
|
|
##
|
|
updateStrategy:
|
|
type: RollingUpdate
|
|
|
|
## Use an alternate scheduler, e.g. "stork".
|
|
## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
|
|
##
|
|
# schedulerName:
|
|
|
|
## SMTP mail delivery configuration
|
|
## ref: https://github.com/bitnami/bitnami-docker-wordpress/#smtp-configuration
|
|
##
|
|
|
|
## Use an existing secret for the SMTP Password
|
|
## Can be the same secret as existingSecret
|
|
## Must contain key `smtp-password`
|
|
## NOTE: When it's set, the `smtpPassword` parameter is ignored
|
|
# smtpExistingSecret:
|
|
|
|
# smtpHost:
|
|
# smtpPort:
|
|
# smtpUser:
|
|
# smtpPassword:
|
|
# smtpUsername:
|
|
# smtpProtocol:
|
|
|
|
replicaCount: 1
|
|
|
|
## Additional container environment variables
|
|
## Example: Configure SSL for database
|
|
## extraEnv:
|
|
## - name: WORDPRESS_DATABASE_SSL_CA_FILE
|
|
## value: /path/to/ca_cert
|
|
##
|
|
extraEnv: []
|
|
|
|
## Additional volume mounts
|
|
## Example: Mount CA file
|
|
## extraVolumeMounts
|
|
## - name: ca-cert
|
|
## subPath: ca_cert
|
|
## mountPath: /path/to/ca_cert
|
|
##
|
|
extraVolumeMounts: []
|
|
|
|
## Additional volumes
|
|
## Example: Add secret volume
|
|
## extraVolumes:
|
|
## - name: ca-cert
|
|
## secret:
|
|
## secretName: ca-cert
|
|
## items:
|
|
## - key: ca-cert
|
|
## path: ca_cert
|
|
##
|
|
extraVolumes: []
|
|
|
|
## WordPress containers' resource requests and limits
|
|
## ref: http://kubernetes.io/docs/user-guide/compute-resources/
|
|
##
|
|
resources:
|
|
limits: {}
|
|
# cpu: 500m
|
|
# memory: 1Gi
|
|
requests:
|
|
memory: 512Mi
|
|
cpu: 300m
|
|
|
|
## Affinity for pod assignment
|
|
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
|
|
##
|
|
affinity: {}
|
|
|
|
## Node labels for pod assignment. Evaluated as a template.
|
|
## ref: https://kubernetes.io/docs/user-guide/node-selection/
|
|
##
|
|
nodeSelector: {}
|
|
|
|
## Tolerations for pod assignment. Evaluated as a template.
|
|
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
|
##
|
|
tolerations: {}
|
|
|
|
## Pod Labels
|
|
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
|
|
##
|
|
podLabels: {}
|
|
|
|
## Pod annotations
|
|
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
|
|
##
|
|
podAnnotations: {}
|
|
|
|
## K8s Security Context for WordPress pods
|
|
## https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
|
|
##
|
|
securityContext:
|
|
enabled: true
|
|
fsGroup: 1001
|
|
runAsUser: 1001
|
|
|
|
## WordPress pod extra options for liveness and readiness probes
|
|
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes
|
|
##
|
|
livenessProbe:
|
|
enabled: true
|
|
initialDelaySeconds: 120
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 6
|
|
successThreshold: 1
|
|
readinessProbe:
|
|
enabled: true
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 6
|
|
successThreshold: 1
|
|
|
|
## Allow health checks to be pointed at the https port
|
|
##
|
|
healthcheckHttps: false
|
|
|
|
## Custom liveness and readiness probes, it overrides the default one (evaluated as a template)
|
|
##
|
|
customLivenessProbe: {}
|
|
customReadinessProbe: {}
|
|
|
|
## If using an HTTPS-terminating load-balancer, the probes may need to behave
|
|
## like the balancer to prevent HTTP 302 responses. According to the Kubernetes
|
|
## docs, 302 should be considered "successful", but this issue on GitHub
|
|
## (https://github.com/kubernetes/kubernetes/issues/47893) shows that it isn't.
|
|
##
|
|
# livenessProbeHeaders:
|
|
# - name: X-Forwarded-Proto
|
|
# value: https
|
|
# readinessProbeHeaders:
|
|
# - name: X-Forwarded-Proto
|
|
# value: https
|
|
livenessProbeHeaders: {}
|
|
readinessProbeHeaders: {}
|
|
|
|
## Kubernetes configuration
|
|
## For minikube, set this to NodePort, elsewhere use LoadBalancer or ClusterIP
|
|
##
|
|
service:
|
|
type: LoadBalancer
|
|
## HTTP Port
|
|
##
|
|
port: 80
|
|
## HTTPS Port
|
|
##
|
|
httpsPort: 443
|
|
## HTTPS Target Port
|
|
## defaults to https unless overridden to the specified port.
|
|
## if you want the target port to be "http" or "80" you can specify that here.
|
|
##
|
|
httpsTargetPort: https
|
|
## Metrics Port
|
|
##
|
|
metricsPort: 9117
|
|
## Node Ports to expose
|
|
## nodePorts:
|
|
## http: <to set explicitly, choose port between 30000-32767>
|
|
## https: <to set explicitly, choose port between 30000-32767>
|
|
## metrics: <to set explicitly, choose port between 30000-32767>
|
|
##
|
|
nodePorts:
|
|
http: ""
|
|
https: ""
|
|
metrics: ""
|
|
## Enable client source IP preservation
|
|
## ref http://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
|
|
##
|
|
externalTrafficPolicy: Cluster
|
|
annotations: {}
|
|
## Limits which cidr blocks can connect to service's load balancer
|
|
## Only valid if service.type: LoadBalancer
|
|
##
|
|
loadBalancerSourceRanges: []
|
|
## Extra ports to expose (normally used with the `sidecar` value)
|
|
# extraPorts:
|
|
|
|
## Configure the ingress resource that allows you to access the
|
|
## WordPress installation. Set up the URL
|
|
## ref: http://kubernetes.io/docs/user-guide/ingress/
|
|
##
|
|
ingress:
|
|
## Set to true to enable ingress record generation
|
|
##
|
|
enabled: false
|
|
|
|
## Set this to true in order to add the corresponding annotations for cert-manager
|
|
##
|
|
certManager: false
|
|
|
|
## When the ingress is enabled, a host pointing to this will be created
|
|
##
|
|
hostname: wordpress.local
|
|
|
|
## The Path to WordPress. You may need to set this to '/*' in order to use this
|
|
## with ALB ingress controllers.
|
|
##
|
|
path: /
|
|
|
|
## Ingress annotations done as key:value pairs
|
|
## For a full list of possible ingress annotations, please see
|
|
## ref: https://github.com/kubernetes/ingress-nginx/blob/master/docs/user-guide/nginx-configuration/annotations.md
|
|
##
|
|
## If certManager is set to true, annotation kubernetes.io/tls-acme: "true" will automatically be set
|
|
##
|
|
annotations: {}
|
|
|
|
## Enable TLS configuration for the hostname defined at ingress.hostname parameter
|
|
## TLS certificates will be retrieved from a TLS secret with name: {{- printf "%s-tls" .Values.ingress.hostname }}
|
|
## You can use the ingress.secrets parameter to create this TLS secret or relay on cert-manager to create it
|
|
##
|
|
tls: false
|
|
|
|
## The list of additional hostnames to be covered with this ingress record.
|
|
## Most likely the hostname above will be enough, but in the event more hosts are needed, this is an array
|
|
## extraHosts:
|
|
## - name: wordpress.local
|
|
## path: /
|
|
##
|
|
|
|
## Any additional arbitrary paths that may need to be added to the ingress under the main host.
|
|
## For example: The ALB ingress controller requires a special rule for handling SSL redirection.
|
|
## extraPaths:
|
|
## - path: /*
|
|
## backend:
|
|
## serviceName: ssl-redirect
|
|
## servicePort: use-annotation
|
|
|
|
## The tls configuration for additional hostnames to be covered with this ingress record.
|
|
## see: https://kubernetes.io/docs/concepts/services-networking/ingress/#tls
|
|
## extraTls:
|
|
## - hosts:
|
|
## - wordpress.local
|
|
## secretName: wordpress.local-tls
|
|
##
|
|
|
|
## If you're providing your own certificates, please use this to add the certificates as secrets
|
|
## key and certificate should start with -----BEGIN CERTIFICATE----- or
|
|
## -----BEGIN RSA PRIVATE KEY-----
|
|
##
|
|
## name should line up with a tlsSecret set further up
|
|
## If you're using cert-manager, this is unneeded, as it will create the secret for you if it is not set
|
|
##
|
|
## It is also possible to create and manage the certificates outside of this helm chart
|
|
## Please see README.md for more information
|
|
##
|
|
secrets: []
|
|
## - name: wordpress.local-tls
|
|
## key:
|
|
## certificate:
|
|
##
|
|
|
|
## Enable persistence using Persistent Volume Claims
|
|
## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
|
|
##
|
|
persistence:
|
|
enabled: true
|
|
## wordpress data Persistent Volume Storage Class
|
|
## If defined, storageClassName: <storageClass>
|
|
## If set to "-", storageClassName: "", which disables dynamic provisioning
|
|
## If undefined (the default) or set to null, no storageClassName spec is
|
|
## set, choosing the default provisioner. (gp2 on AWS, standard on
|
|
## GKE, AWS & OpenStack)
|
|
##
|
|
# storageClass: "-"
|
|
##
|
|
## If you want to reuse an existing claim, you can pass the name of the PVC using
|
|
## the existingClaim variable
|
|
# existingClaim: your-claim
|
|
accessMode: ReadWriteOnce
|
|
size: 10Gi
|
|
|
|
##
|
|
## MariaDB chart configuration
|
|
##
|
|
## https://github.com/bitnami/charts/blob/master/bitnami/mariadb/values.yaml
|
|
##
|
|
mariadb:
|
|
## Whether to deploy a mariadb server to satisfy the applications database requirements. To use an external database set this to false and configure the externalDatabase parameters
|
|
##
|
|
enabled: true
|
|
## Disable MariaDB replication
|
|
##
|
|
replication:
|
|
enabled: false
|
|
|
|
## Create a database and a database user
|
|
## ref: https://github.com/bitnami/bitnami-docker-mariadb/blob/master/README.md#creating-a-database-user-on-first-run
|
|
##
|
|
db:
|
|
name: bitnami_wordpress
|
|
user: bn_wordpress
|
|
## If the password is not specified, mariadb will generates a random password
|
|
##
|
|
# password:
|
|
|
|
## MariaDB admin password
|
|
## ref: https://github.com/bitnami/bitnami-docker-mariadb/blob/master/README.md#setting-the-root-password-on-first-run
|
|
##
|
|
# rootUser:
|
|
# password:
|
|
|
|
## Enable persistence using Persistent Volume Claims
|
|
## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
|
|
##
|
|
master:
|
|
persistence:
|
|
enabled: true
|
|
## mariadb data Persistent Volume Storage Class
|
|
## If defined, storageClassName: <storageClass>
|
|
## If set to "-", storageClassName: "", which disables dynamic provisioning
|
|
## If undefined (the default) or set to null, no storageClassName spec is
|
|
## set, choosing the default provisioner. (gp2 on AWS, standard on
|
|
## GKE, AWS & OpenStack)
|
|
##
|
|
# storageClass: "-"
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
size: 8Gi
|
|
|
|
##
|
|
## External Database Configuration
|
|
##
|
|
## All of these values are only used when mariadb.enabled is set to false
|
|
##
|
|
externalDatabase:
|
|
## Use existing secret (ignores previous password)
|
|
## must contain key `mariadb-password`
|
|
## NOTE: When it's set, the `externalDatabase.password` parameter is ignored
|
|
# existingSecret:
|
|
|
|
## Database host
|
|
##
|
|
host: localhost
|
|
|
|
## non-root Username for Wordpress Database
|
|
##
|
|
user: bn_wordpress
|
|
|
|
## Database password
|
|
##
|
|
password: ""
|
|
|
|
## Database name
|
|
##
|
|
database: bitnami_wordpress
|
|
|
|
## Database port number
|
|
##
|
|
port: 3306
|
|
|
|
## Prometheus Exporter / Metrics
|
|
##
|
|
metrics:
|
|
enabled: false
|
|
image:
|
|
registry: docker.io
|
|
repository: bitnami/apache-exporter
|
|
tag: 0.8.0-debian-10-r209
|
|
pullPolicy: IfNotPresent
|
|
## Optionally specify an array of imagePullSecrets.
|
|
## Secrets must be manually created in the namespace.
|
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
|
##
|
|
# pullSecrets:
|
|
# - myRegistryKeySecretName
|
|
## Metrics exporter pod Annotation and Labels
|
|
##
|
|
podAnnotations:
|
|
prometheus.io/scrape: "true"
|
|
prometheus.io/port: "9117"
|
|
|
|
## Metrics exporter containers' resource requests and limits
|
|
## ref: http://kubernetes.io/docs/user-guide/compute-resources/
|
|
##
|
|
resources:
|
|
limits: {}
|
|
requests: {}
|
|
|
|
## Prometheus Service Monitor
|
|
## ref: https://github.com/coreos/prometheus-operator
|
|
## https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint
|
|
##
|
|
serviceMonitor:
|
|
## If the operator is installed in your cluster, set to true to create a Service Monitor Entry
|
|
##
|
|
enabled: false
|
|
## Specify the namespace in which the serviceMonitor resource will be created
|
|
# namespace: ""
|
|
## Specify the interval at which metrics should be scraped
|
|
##
|
|
interval: 30s
|
|
## Specify the timeout after which the scrape is ended
|
|
# scrapeTimeout: 30s
|
|
## Specify Metric Relabellings to add to the scrape endpoint
|
|
# relabellings:
|
|
## Specify honorLabels parameter to add the scrape endpoint
|
|
##
|
|
honorLabels: false
|
|
## Used to pass Labels that are used by the Prometheus installed in your cluster to select Service Monitors to work with
|
|
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
|
|
##
|
|
additionalLabels: {}
|
|
|
|
## Add sidecars to the pod.
|
|
## Example:
|
|
## sidecars:
|
|
## - name: your-image-name
|
|
## image: your-image
|
|
## imagePullPolicy: Always
|
|
## ports:
|
|
## - name: portname
|
|
## containerPort: 1234
|
|
##
|
|
sidecars: {}
|
|
|
|
## Add init containers to the pod.
|
|
## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
|
|
## Example:
|
|
## initContainers:
|
|
## - name: your-image-name
|
|
## image: your-image
|
|
## imagePullPolicy: Always
|
|
## command: ['sh', '-c', 'copy themes and plugins from git and push to /bitnami/wordpress/wp-content. Should work with extraVolumeMounts and extraVolumes']
|
|
##
|
|
initContainers: {}
|