values.yaml

# Default values for landmine.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

domain: bigbang.dev

landmine:
  license:
    organization: ""
    key: ""
  notificationWebhook: ""
  admin:
    hostname: ""
    port: 29999
    protocol: https
    skin: "Landmine"
    banner:
      label: "INTERNET"
      colorTheme: "UNCLASSIFIED"
  deadfall:
    keys:
      public: ""
      private: ""
  sink:
    web:
      hostname: ""
      port: 9999
      protocol: https
    dns:
      hostname: ""
      udpPort: 5300
      tcpPort: 5300
    rdp:
      port: 3389
    email:
      hostname: ""
      port: 2500
    ipRandomizer: false

image:
  repository: registry1.dso.mil/ironbank/radiusmethod/landmine/landmine
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: ""

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

service:
  type: ClusterIP
  port: 29999

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

istio:
  enabled: true
  landmine:
    gateways:
      - "istio-system/public"
    hosts:
      - landmine.{{ .Values.domain }}
  # Default kiali peer authentication
  mtls:
    # STRICT = Allow only mutual TLS traffic
    # PERMISSIVE = Allow both plain text and mutual TLS traffic
    mode: STRICT

ingress:
  enabled: false
  className: ""
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
    - host: versomas.landmine.app
      servicePort: 29999
      paths:
        - path: /
          pathType: Prefix
    - host: versomas.net
      servicePort: 9999
      paths:
        - path: /
          pathType: Prefix

#  tls:
#    - hosts:
#        - "versomas.landmine.app"
#        - "*.versomas.net"
#      secretName: ingress-tls

resources: {}

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

nodeSelector: {}

tolerations: []

affinity: {}

redis:
  auth:
    enabled: false
  replica:
    replicaCount: 0