values.yaml

# Default values for quorum-key-manager.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: docker.io/consensys/quorum-key-manager
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: "v21.12.1"

environment: {}
environmentSecrets: {}
# 'existingSecret' specifies name of externally created secret
# existingSecret:

nameOverride: ""
fullnameOverride: ""

imageCredentials:
  create: false
  name: existing-secret
  registry: docker.consensys.net
  username: someone
  password: sillyness

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

service:
  type: ClusterIP
  http:
    port: 8080
  metrics:
    port: 8081

ingress:
  enabled: false
  className: ""
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
    - host: qkm.local
      paths:
        - path: /
          pathType: ImplementationSpecific
          servicePort: 8080
        - path: /isalive
          pathType: ImplementationSpecific
          servicePort: 8081
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - chart-example.local

resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

# autoscaling:
#   enabled: false
#   minReplicas: 1
#   maxReplicas: 100
#   targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

nodeSelector: {}

tolerations: []

affinity: {}

manifests: ""
# manifests: |
#   - kind: HashicorpKeys
#     version: 0.0.1
#     name: hashicorp-keys
#     specs:
#       mountPoint: orchestrate
#       address: http://vault.qkm:8200
#       tokenPath: '/vault/token/.vault-token'
#       namespace: ''
#   - kind: Node
#     name: quorum-node
#     version: 0.0.1
#     specs:
#       rpc:
#         addr: http://quorum-node1.quorum:8545
#       tessera:
#         addr: http://quorum-node1.quorum:9080

postgresql:
  tls:
    enabled: true
  certs:
    ca: ""
    client:
      crt: ""
      key: ""

auth:
  apikey:
    enabled: false
    contents: ""
    file: "/apikey/sample.csv"
  oidc:
    enabled: false
    ca: ""
    issuer: ""
    pubKey: ""
  tls:
    enabled: false
    ca: ""
    secretName: ""

vault:
  tls:
    enabled: true
  agents: {}
    

storage:
  nfs:
    enabled: false
    driver: efs.csi.aws.com
    provisioner: efs.csi.aws.com 
    fsID: ""
  mountPath: /vault/token

migrate:
  ttlSecondsAfterFinished: 120
  backoffLimit: 6
  environment: {}
  environmentSecrets: {}
  # 'existingSecret' specifies name of externally created secret
  # existingSecret:

sync:
  enabled: true
  storeName: ""
  environment: {}