-
Notifications
You must be signed in to change notification settings - Fork 3
/
values.yaml
4580 lines (4552 loc) · 227 KB
/
values.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# Default values for subchart Onlyoffice Docs
# ref: https://github.com/ONLYOFFICE/Kubernetes-Docs/blob/master/values.yaml
#
docs:
# docs.enabled Enables Onlyoffice Docs subchart installation
# Set to `false` if you plan to use the already installed Onlyoffice Docs or install DocSpace without it
enabled: true
connections:
# Onlyoffice Docs Database connection parameters
# By default, the same Database connection is used as for DocSpace
# docs.connections.dbType The Database type
dbType: mysql
# docs.connections.dbHost The IP address or the name of the Database host
dbHost: mysql
# docs.connections.dbUser Database user
dbUser: onlyoffice_user
# docs.connections.dbPort Database server port number
dbPort: "3306"
# docs.connections.dbName Name of the Database database the application will be connected with
# The database must already exist
dbName: docspace
# docs.connections.dbExistingSecret Name of existing secret to use for Database password
# Must contain the key specified in `docs.connections.dbSecretKeyName`
dbExistingSecret: mysql
# docs.connections.dbSecretKeyName The name of the key that contains the Database user password
# If you set a password in `docs.connections.dbPassword`, a secret will be automatically created, the key name of which will be the value set here
dbSecretKeyName: mysql-password
# docs.connections.dbPassword Database user password
# If set to, it takes priority over the `docs.connections.dbExistingSecret`
dbPassword: ""
# Onlyoffice Docs Redis connection parameters
# By default, the same Redis connection is used as for DocSpace, except for `docs.connections.redisDBNum`
# docs.connections.redisHost The IP address or the name of the Redis host
redisHost: redis-master
# docs.connections.redisPort The Redis server port number
redisPort: "6379"
# docs.connections.redisUser The Redis user name
# ref: https://redis.io/docs/management/security/acl/
redisUser: default
# docs.connections.redisDBNum Number of the Redis logical database to be selected
# ref: https://redis.io/commands/select/
redisDBNum: "1"
# docs.connections.redisExistingSecret Name of existing secret to use for Redis password
# Must contain the key specified in `docs.connections.redisSecretKeyName`
redisExistingSecret: redis
# docs.connections.redisSecretKeyName The name of the key that contains the Redis user password
# If you set a password in `docs.connections.redisPassword`, a secret will be automatically created, the key name of which will be the value set here
redisSecretKeyName: redis-password
# docs.connections.redisPassword The password set for the Redis account
# If set to, it takes priority over the `docs.connections.redisExistingSecret`
redisPassword: ""
# docs.connections.redisNoPass Defines whether to use a Redis auth without a password
# If the connection to Redis server does not require a password, set the value to `true`
redisNoPass: false
# Onlyoffice Docs RabbitMQ connection parameters
# By default, the same RabbitMQ connection is used as for DocSpace
# docs.connections.amqpType Defines the AMQP server type
amqpType: rabbitmq
# docs.connections.amqpHost The IP address or the name of the AMQP server
amqpHost: rabbitmq
# docs.connections.amqpPort The port for the connection to AMQP server
amqpPort: "5672"
# docs.connections.amqpVhost The virtual host for the connection to AMQP server
amqpVhost: "/"
# docs.connections.amqpUser The username for the AMQP server account
amqpUser: user
# docs.connections.amqpProto The protocol for the connection to AMQP server
amqpProto: amqp
# docs.connections.amqpExistingSecret The name of existing secret to use for AMQP server password
# Must contain the key specified in `docs.connections.amqpSecretKeyName`
amqpExistingSecret: rabbitmq
# docs.connections.amqpSecretKeyName The name of the key that contains the AMQP server user password
# If you set a password in `docs.connections.amqpPassword`, a secret will be automatically created, the key name of which will be the value set here
amqpSecretKeyName: rabbitmq-password
# docs.connections.amqpPassword AMQP server user password
# If set to, it takes priority over the `docs.connections.amqpExistingSecret`
amqpPassword: ""
# docs.service.port ONLYOFFICE Docs service port
service:
port: "80"
# docs.license.existingClaim Name of the existing PVC in which the license is stored
# Must contain the file `license.lic`
# By default, a PVC is connected, in which a license is added when using DocSpace Enterprise
license:
existingClaim: "docspace-data"
# docs.jwt.existingSecret The name of an existing secret containing variables for jwt
# If not specified, a secret named `jwt` will be created
# By default, the jwt secret is used, which will be created with values from the jwt DocSpace
jwt:
existingSecret: "docspace-jwt"
# docs.docservice.image.repository Docservice container image repository
# Depending on your license type, add the suffix "-de" - Developer Edition or "-ee" Enterprise Edition
# By default - Community version
docservice:
image:
repository: onlyoffice/docs-docservice
# docs.proxy.image.repository Proxy container image repository
# Depending on your license type, add the suffix "-de" - Developer Edition or "-ee" Enterprise Edition
# By default - Community version
proxy:
image:
repository: onlyoffice/docs-proxy
# docs.converter.image.repository Converter container image repository
# Depending on your license type, add the suffix "-de" - Developer Edition or "-ee" Enterprise Edition
# By default - Community version
converter:
image:
repository: onlyoffice/docs-converter
# docs.upgrade.job.enabled Enable the execution of job Docs pre-upgrade before upgrading
# Set to `false` when upgrading to version `3.0.0` from earlier
# When installing `3.0.0` and also when upgrading from version `3.0.0` to a later one, this parameter should be set to `true`
upgrade:
job:
enabled: true
# docs.clearCache.job.enabled Enable the execution of job Docs Clear Cache after upgrading
# Set to `false` when upgrading to version `3.0.0` from earlier
# When installing `3.0.0` and also when upgrading from version `3.0.0` to a later one, this parameter should be set to `true`
clearCache:
job:
enabled: true
# Default values for DocSpace
## product.name Specifies name of the product
## This is a service variable. You don't need to change it
product:
name: onlyoffice
# DocSpace common parameters
# This block defines common parameters for all DocSpace Apps services
#
# Connection parameters to services
connections:
# connections.envExtension Defines whether an environment will be used
envExtension: ""
# connections.installationType Defines solution type
installationType: COMMUNITY
# connections.migrationType Defines migration type
migrationType: STANDALONE
# connections.mysqlDatabaseMigration Enables database migration
mysqlDatabaseMigration: "false"
# connections.mysqlHost The IP address or the name of the Database host
mysqlHost: mysql
# connections.mysqlPort Database server port number
mysqlPort: "3306"
# connections.mysqlDatabase Name of the Database the application will be connected with
# The database must already exist
mysqlDatabase: docspace
# connections.mysqlUser Database user
mysqlUser: onlyoffice_user
# connections.mysqlPassword Database user password
# If set to, it takes priority over the `connections.mysqlExistingSecret`
mysqlPassword: ""
# connections.mysqlExistingSecret Name of existing secret to use for Database passwords
# Must contain the key specified in `connections.mysqlSecretKeyPassword`
mysqlExistingSecret: mysql
# connections.mysqlSecretKeyPassword The name of the key that contains the Database user password
# If you set a password in `connections.mysqlPassword`, a secret will be automatically created, the key name of which will be the value set here
mysqlSecretKeyPassword: mysql-password
# connections.redisHost The IP address or the name of the Redis host
# If Redis is deployed inside a k8s cluster, then you need to specify the FQDN name of the service
# ref: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#services
redisHost: redis-master.default.svc.cluster.local
# connections.redisPort The Redis server port number
redisPort: "6379"
# connections.redisUser The Redis user name
# ref: https://redis.io/docs/management/security/acl/
redisUser: default
# connections.redisExistingSecret Name of existing secret to use for Redis password
# Must contain the key specified in `connections.redisSecretKeyName`
redisExistingSecret: redis
# connections.redisSecretKeyName The name of the key that contains the Redis user password
# If you set a password in `connections.redisPassword`, a secret will be automatically created, the key name of which will be the value set here
redisSecretKeyName: redis-password
# connections.redisPassword The password set for the Redis account
# If set to, it takes priority over the `connections.redisExistingSecret`
redisPassword: ""
# connections.redisNoPass Defines whether to use a Redis auth without a password
# If the connection to Redis server does not require a password, set the value to `true`
redisNoPass: false
# connections.brokerHost The IP address or the name of the Broker host
brokerHost: rabbitmq
# connections.brokerPort The port for the connection to Broker host
brokerPort: "5672"
# connections.brokerVhost The virtual host for the connection to Broker host
brokerVhost: "/"
# connections.brokerUser The username for the Broker account
brokerUser: user
# connections.brokerProto The protocol for the connection to Broker host
brokerProto: amqp
# connections.brokerUri A string containing the necessary connection parameters to Broker
# If set to, it takes priority
brokerUri: ""
# connections.brokerExistingSecret The name of existing secret to use for Broker password
# Must contain the key specified in `connections.brokerSecretKeyName`
brokerExistingSecret: rabbitmq
# connections.brokerSecretKeyName The name of the key that contains the Broker user password
# If you set a password in `connections.brokerPassword`, a secret will be automatically created, the key name of which will be the value set here
brokerSecretKeyName: rabbitmq-password
# connections.brokerPassword Broker user password
# If set to, it takes priority over the `connections.brokerExistingSecret`
brokerPassword: ""
# connections.elkSheme The protocol for the connection to Opensearch
elkSheme: http
# connections.elkHost The IP address or the name of the Opensearch host
elkHost: opensearch
# connections.elkPort The port for the connection to Opensearch
elkPort: "9200"
# connections.elkThreads Number of threads in Opensearch
elkThreads: "1"
# connections.apiHost The name of the DocSpace Api service
apiHost: api
# connections.apiSystemHost The name of the DocSpace Api System service
apiSystemHost: api-system
# connections.notifyHost The name of the DocSpace Notify service
notifyHost: notify
# connections.studioNotifyHost The name of the DocSpace Studio Notify service
studioNotifyHost: studio-notify
# connections.socketHost The name of the DocSpace Socket service
socketHost: socket
# connections.peopleServerHost The name of the DocSpace People Server service
peopleServerHost: people-server
# connections.filesHost The name of the DocSpace Files service
filesHost: files
# connections.filesServicesHost The name of the DocSpace Files Services service
filesServicesHost: files-services
# connections.studioHost The name of the DocSpace Studio service
studioHost: studio
# connections.backupHost The name of the DocSpace Backup service
backupHost: backup
# connections.ssoauthHost The name of the DocSpace SSO service
ssoauthHost: ssoauth
# connections.clearEventsHost The name of the DocSpace Clear Events service
clearEventsHost: clear-events
# connections.doceditorHost The name of the DocSpace Doceditor service
doceditorHost: doceditor
# connections.backupBackgroundTasksHost The name of the DocSpace Backup Background Tasks service
backupBackgroundTasksHost: backup-background-tasks
# connections.loginHost The name of the DocSpace Login service
loginHost: login
# connections.healthchecksHost The name of the DocSpace Healthchecks service
healthchecksHost: healthchecks
# connections.identityApiHost The name of the DocSpace Identity Api service
identityApiHost: identity-api
# connections.identityAuthorizationHost The name of the DocSpace Identity service
identityAuthorizationHost: identity-authorization
# connections.documentServerHost The name of the Document Server service
# Used when installing a local Document Server (by default `docs.enabled=true`)
# If you want to install DocSpace without Document Server then specify an empty value
documentServerHost: documentserver
# connections.documentServerUrlExternal The address of the external Document Server
# If set, the local Document Server will not be installed
# The address must be in the `http(s)://<documentserver-address>/` format
documentServerUrlExternal: ""
# connections.appUrlPortal URL for DocSpace requests
# By default, the name of the routing (Router) service and the port on which it accepts requests are used
appUrlPortal: "http://router:8092"
# connections.appCoreBaseDomain The base domain on which the DocSpace will be available
appCoreBaseDomain: localhost
appCoreMachinekey:
# connections.appCoreMachinekey.secretKey The secret key used in the DocSpace
secretKey: "your_core_machinekey"
# connections.appCoreMachinekey.existingSecret The name of an existing secret containing Core Machine Key
# Must contain the `APP_CORE_MACHINEKEY` key
# If not specified, a secret will be created with the value set in `connections.appCoreMachinekey.secretKey`
existingSecret: ""
# connections.countWorkerConnections Defines the nginx config worker_connections directive for routing (Router) service
# ref: https://nginx.org/en/docs/ngx_core_module.html#worker_connections
countWorkerConnections: "1024"
# connections.nginxSnvsubstTemplateSuffix A suffix of template files for rendering nginx configs in routing (Router) service
nginxSnvsubstTemplateSuffix: ".template"
# connections.wrongPortalNameURL
wrongPortalNameURL: ""
# connections.oauthOrigin The address of the OAUTH2 server
oauthOrigin: ""
# connections.appKnownNetworks Defines the address ranges of known networks to accept forwarded headers from for DocSpace services
# In particular, the networks in which the proxies that you are using in front of DocSpace services are located should be indicated here
# Provide IP ranges using CIDR notation
# Example:
# appKnownNetworks: "10.244.0.0/16,10.245.0.0/16"
appKnownNetworks: "10.244.0.0/16"
# connections.appKnownProxies Deprecated parameter. Use `connections.appKnownNetworks` instead
appKnownProxies: ""
# connections.oauthRedirectURL Address of the oauth authorization server
oauthRedirectURL: "https://service.onlyoffice.com/oauth2.aspx"
# namespaceOverride The name of the namespace in which DocSpace will be deployed
# If not set, the name will be taken from .Release.Namespace
namespaceOverride: ""
# commonLabels Defines labels that will be additionally added to all the deployed resources
# You can also use `tpl` as the value for the key
# ref: https://helm.sh/docs/chart_best_practices/labels/
# Example:
# commonLabels:
# app.kubernetes.io/name: "{{ .Chart.Name }}"
# helm.sh/chart: '{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}'
# app.kubernetes.io/managed-by: "{{ .Release.Service }}"
# app.kubernetes.io/instance: "{{ .Release.Name }}"
# app.kubernetes.io/version: "{{ .Chart.AppVersion }}"
commonLabels: {}
# commonAnnotations Defines annotations that will be additionally added to all the deployed resources
# You can also use `tpl` as the value for the key
# Some resources may override the values specified here with their own
# Example:
# commonAnnotations:
# "key1": "value1"
# "key2": "{{ value2 }}"
commonAnnotations: {}
# podAnnotations Map of annotations to add to the DocSpace pods
# Each Docspace application can override the values specified here with its own
podAnnotations:
rollme: "{{ randAlphaNum 5 | quote }}"
# Service account parameters
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
serviceAccount:
# serviceAccount.create Enable ServiceAccount creation
create: false
# serviceAccount.name Name of the ServiceAccount to be used
# If not set and `serviceAccount.create` is `true` the name will be taken from .Release.Name
# If not set and `serviceAccount.create` is `false` the name will be "default"
name: ""
# serviceAccount.annotations Map of annotations to add to the ServiceAccount
annotations: {}
# serviceAccount.automountServiceAccountToken Enable auto mount of ServiceAccountToken on the serviceAccount created
# Used only if `serviceAccount.create` is `true`
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#opt-out-of-api-credential-automounting
automountServiceAccountToken: true
# Configure a Security Context for the DocSpace application Pods
# Each Docspace application can override the values specified here with its own
# Individual values for `docs` and `elasticsearch`
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
podSecurityContext:
# podSecurityContext.enabled Enable security context for the pods
# If set to true, `podSecurityContext` is enabled for all resources describing the podTemplate
enabled: false
# podSecurityContext.fsGroup Defines the Group ID to which the owner and permissions for all files in volumes are changed when mounted in the DocSpace application Pods
fsGroup: 107
# Configure a Security Context for containers in DocSpace application Pods
# Each Docspace application can override the values specified here with its own
# Individual values for `docs` and `elasticsearch`
containerSecurityContext:
# containerSecurityContext.enabled Enable security context for containers in DocSpace application pods
enabled: false
# containerSecurityContext.runAsUser User ID for the DocSpace application containers
runAsUser: 104
# containerSecurityContext.runAsGroup Group ID for the DocSpace application containers
runAsGroup: 107
# containerSecurityContext.runAsNonRoot Require that the container will run with a user with UID other than 0
runAsNonRoot: true
# containerSecurityContext.allowPrivilegeEscalation Controls whether a process can gain more privileges than its parent process
allowPrivilegeEscalation: false
# containerSecurityContext.seLinuxOptions Defines SELinux labels for the DocSpace application containers
seLinuxOptions: {}
# containerSecurityContext.seccompProfile Defines the Seccomp profile for the DocSpace application containers
seccompProfile:
type: RuntimeDefault
# containerSecurityContext.capabilities Defines the privileges granted to the process
capabilities:
drop: ["ALL"]
# nodeSelector Node labels for DocSpace application pods assignment
# Each Docspace application can override the values specified here with its own
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector
nodeSelector: {}
# tolerations Tolerations for DocSpace application pods assignment
# Each Docspace application can override the values specified here with its own
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
tolerations: []
# imagePullSecrets Container image registry secret name
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
imagePullSecrets: ""
# Global image parameters for for all DocSpace applications
# Does not apply to the Document Server, Elasticsearch and Proxy Frontend
images:
# images.repoPrefix Global repository prefix for all DocSpace applications
repoPrefix: ""
# images.tag Global image tag for all DocSpace applications
# Does not apply to the Document Server and Elasticsearch
tag: 3.0.1
# JSON Web Token parameters
jwt:
# jwt.enabled Specifies the enabling the JSON Web Token validation by the DocSpace
enabled: true
# jwt.secret Defines the secret key to validate the JSON Web Token in the request to the DocSpace
secret: "jwt_secret"
# jwt.header Defines the http header that will be used to send the JSON Web Token
header: "AuthorizationJwt"
# jwt.inBody Specifies the enabling the token validation in the request body to the DocSpace
inBody: false
# jwt.existingSecret The name of an existing secret containing variables for jwt
# If not specified, a secret named `jwt` will be created
existingSecret: ""
# Configs for overriding default values and additional configuration files for DocSpace
extraConf:
# extraConf.secretName The name of the Secret containing the json files that override the default values and additional configuration files
secretName: ""
# extraConf.filename The name of the json files that contains custom values and name additional configuration files
# Must be the same as the `key` name in `extraConf.secretName`
# May contain multiple values
fileName:
- appsettings.test.json
# log.level Defines the type and severity of a logged event
log:
level: "Warning"
# debug.enabled Enable debug
debug:
enabled: "false"
# nodeOptions
nodeOptions: "--max_old_space_size=4096"
# DocSpace Init Containers parameters
# Containers that run before containers in a Pods
# ref:https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
initContainers:
# Parameters of the Check DB initContainers
checkDB:
image:
# initContainers.checkDB.image.repository check-db initContainer image repository
repository: onlyoffice/docs-utils
# initContainers.checkDB.image.tag check-db initContainer image tag
tag: 8.2.2-1
# initContainers.checkDB.image.pullPolicy check-db initContainer image pull policy
pullPolicy: IfNotPresent
# check-db initContainer resource requests and limits
# ref: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
# initContainers.checkDB.resources.requests The requested resources for the check-db initContainer
# initContainers.checkDB.resources.limits The resources limits for the check-db initContainer
resources:
requests:
memory: "256Mi"
cpu: "100m"
limits:
memory: "1Gi"
cpu: "1000m"
# Parameters of the Wait Storage initContainers
waitStorage:
image:
# initContainers.waitStorage.image.repository app-wait-storage initContainer image repository
repository: onlyoffice/docspace-wait-bin-share
# initContainers.waitStorage.image.tag app-wait-storage initContainer image tag
# If set to, it takes priority over the `images.tag`
tag: ""
# initContainers.waitStorage.image.pullPolicy app-wait-storage initContainer image pull policy
pullPolicy: IfNotPresent
# app-wait-storage initContainer resource requests and limits
# ref: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
# initContainers.waitStorage.resources.requests The requested resources for the app-wait-storage initContainer
# initContainers.waitStorage.resources.limits The resources limits for the app-wait-storage initContainer
resources:
requests:
memory: "256Mi"
cpu: "100m"
limits:
memory: "1Gi"
cpu: "1000m"
# Parameters of the Init Storage initContainers
initStorage:
image:
# initContainers.initStorage.image.repository app-init-storage initContainer image repository
repository: onlyoffice/docspace-bin-share
# initContainers.initStorage.image.tag app-init-storage initContainer image tag
# If set to, it takes priority over the `images.tag`
tag: ""
# initContainers.initStorage.image.pullPolicy app-init-storage initContainer image pull policy
pullPolicy: IfNotPresent
# app-init-storage initContainer resource requests and limits
# ref: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
# initContainers.initStorage.resources.requests The requested resources for the app-init-storage initContainer
# initContainers.initStorage.resources.limits The resources limits for the app-init-storage initContainer
resources:
requests:
memory: "256Mi"
cpu: "100m"
limits:
memory: "2Gi"
cpu: "1000m"
# initContainers.custom Custom initContainers parameters
# Does not apply to the following services: `Docs`, `Router`, `Opensearch` and `Proxy Frontend`. The corresponding individual parameters are used for them
# Example:
# custom:
# - name: additional-init-container
# image: busybox:latest
# command: ['chown', '-R', '104:107', '/app/onlyoffice/data']
# volumeMounts:
# - name: docspace-data
# mountPath: /app/onlyoffice/data
custom: []
# DocSpace persistence parameters
persistence:
# persistence.storageClass PVC Storage Class for DocSpace data volume
storageClass: "nfs"
docspaceData:
# persistence.docspaceData.existingClaim The name of the existing PVC for storing files common to all services
# If not specified, a PVC named "docspace-data" will be created
existingClaim: ""
# persistence.docspaceData.annotations Defines annotations that will be additionally added to common files PVC
# If set to, it takes priority over the `commonAnnotations`
# You can also use `tpl` as the value for the key
annotations: {}
# persistence.docspaceData.size PVC Storage Request for common files volume
size: 8Gi
filesData:
# persistence.filesData.existingClaim The name of the existing PVC for use in the Files service
# If not specified, a PVC named "files-data" will be created
existingClaim: ""
# persistence.filesData.annotations Defines annotations that will be additionally added to Files PVC
# If set to, it takes priority over the `commonAnnotations`
# You can also use `tpl` as the value for the key
annotations: {}
# persistence.filesData.size PVC Storage Request for Files volume
size: 2Gi
peopleData:
# persistence.peopleData.existingClaim The name of the existing PVC for use in the People Server service
# If not specified, a PVC named "people-data" will be created
existingClaim: ""
# persistence.peopleData.annotations Defines annotations that will be additionally added to People Server PVC
# If set to, it takes priority over the `commonAnnotations`
# You can also use `tpl` as the value for the key
annotations: {}
# persistence.peopleData.size PVC Storage Request for People Server volume
size: 2Gi
routerLog:
# persistence.routerLog.existingClaim The name of the existing PVC for storing Nginx logs of the Router service
# If not specified, a PVC named "router-log" will be created
existingClaim: ""
# persistence.routerLog.annotations Defines annotations that will be additionally added to Nginx logs PVC
# If set to, it takes priority over the `commonAnnotations`
# You can also use `tpl` as the value for the key
annotations: {}
# persistence.routerLog.size PVC Storage Request for Nginx logs volume
size: 5Gi
# Pod anti-affinity parameters
# Pod anti-affinity prohibits at all (required) or, if possible (preferred), placing a second pod with the same label on the same node
# Does not apply to `Docs` and `Opensearch`
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
podAntiAffinity:
# podAntiAffinity.type Types of Pod antiaffinity. Allowed values: `preferred` or `required`
type: "preferred"
# podAntiAffinity.topologyKey Node label key to match
topologyKey: kubernetes.io/hostname
# podAntiAffinity.weight Priority when selecting node. It is in the range from 1 to 100. Used only when `podAntiAffinity.type=preferred`
weight: "100"
# DocSpace Files application parameters
# This block defines the parameters common to all the Pods of this application
#
files:
# files.enabled Enables Files installation
enabled: true
# files.kind The controller used for deploy
# Possible values are `Deployment` (default) or `StatefulSet`
kind: Deployment
# files.annotations Defines annotations that will be additionally added to Files deploy
# If set to, it takes priority over the `commonAnnotations`
# You can also use `tpl` as the value for the key
annotations: {}
# files.replicaCount Number of Files replicas to deploy
replicaCount: 2
# Update strategy used to replace old Pods by new ones
updateStrategy:
# files.updateStrategy.type Files update strategy type
# Allowed values: `RollingUpdate` or `OnDelete` if `files.kind` is set to `StatefulSet` and `RollingUpdate` or `Recreate` if `files.kind` is set to `Deployment`
type: RollingUpdate
# files.updateStrategy.rollingUpdate Used only when `files.updateStrategy.type=RollingUpdate`
rollingUpdate:
# files.updateStrategy.rollingUpdate.maxUnavailable Maximum number of Files Pods unavailable during the update process
maxUnavailable: 25%
# files.updateStrategy.rollingUpdate.maxSurge Maximum number of Files Pods created over the desired number of Pods
maxSurge: 25%
# files.podManagementPolicy The Files Pods scaling operations policy
# Used if `files.kind` is set to `StatefulSet`
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#pod-management-policies
podManagementPolicy: OrderedReady
# files.podAnnotations Map of annotations to add to the Files pods
podAnnotations: {}
# Configure a Security Context for the Files Pods
# If set to, it takes priority over the `podSecurityContext`
podSecurityContext:
# files.podSecurityContext.enabled Enable security context for the Files pods
enabled: false
# files.customPodAntiAffinity Prohibiting the scheduling of Files Pods relative to other Pods containing the specified labels on the same node
# Example:
# customPodAntiAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# - labelSelector:
# matchExpressions:
# - key: app
# operator: In
# values:
# - files-services
# topologyKey: kubernetes.io/hostname
customPodAntiAffinity: {}
# Pod affinity rules for Files Pods scheduling by nodes relative to other Pods
# Pod affinity allow you to constrain which nodes Files Pods can be scheduled on based on the labels of Pods already running on that node
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
# Example:
# podAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# - labelSelector:
# matchExpressions:
# - key: app
# operator: In
# values:
# - store
# topologyKey: topology.kubernetes.io/zone
podAffinity: {}
# Node affinity rules for Files Pods scheduling by nodes
# Node affinity allow you to constrain which nodes Files Pods can be scheduled on based on node labels
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
# Example:
# nodeAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# nodeSelectorTerms:
# - matchExpressions:
# - key: topology.kubernetes.io/zone
# operator: In
# values:
# - zone1
# - zone2
nodeAffinity: {}
# files.nodeSelector Node labels for Files pods assignment
# If set to, it takes priority over the `nodeSelector`
nodeSelector: {}
# files.tolerations Tolerations for Files pods assignment
# If set to, it takes priority over the `tolerations`
tolerations: []
# Files container image parameters
image:
# files.image.repository files container image repository
repository: onlyoffice/docspace-files
# files.image.tag files container image tag
# If set to, it takes priority over the `images.tag`
tag: ""
# files.image.pullPolicy files container image pull policy
pullPolicy: IfNotPresent
# Configure a Security Context for containers in Files Pods
# If set to, it takes priority over the `containerSecurityContext`
containerSecurityContext:
# files.containerSecurityContext.enabled Enable security context for containers in Files pods
enabled: false
# files.lifecycleHooks Defines the Files container lifecycle hooks
# ref: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/
# It is used to trigger events to run at certain points in a container's lifecycle
# There are two hooks that are exposed: `PostStart` and `PreStop`
# Example:
# lifecycleHooks:
# preStop:
# exec:
# command: ["/bin/sh", "-c", "sleep 25"]
lifecycleHooks: {}
# files.containerPorts.app files container port
containerPorts:
app: 5050
# Probe used for the files container: startup, readiness and liveness probes
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
# The parameters below for startup probes are used only when `files.startupProbe.enabled=true`
startupProbe:
# files.startupProbe.enabled Enable startupProbe for files container
enabled: true
httpGet:
# files.startupProbe.httpGet.path Checking the path for startupProbe
path: /health
# files.startupProbe.httpGet.port Checking the port for startupProbe
port: 5050
# files.startupProbe.failureThreshold Failure threshold for startupProbe
failureThreshold: 30
# files.startupProbe.periodSeconds Period seconds for startupProbe
periodSeconds: 10
# The parameters below for readiness probes are used only when `files.readinessProbe.enabled=true`
readinessProbe:
# files.readinessProbe.enabled Enable readinessProbe for files container
enabled: true
# files.readinessProbe.failureThreshold Failure threshold for readinessProbe
failureThreshold: 2
httpGet:
# files.readinessProbe.httpGet.path Checking the path for readinessProbe
path: /health
# files.readinessProbe.httpGet.port Checking the port for readinessProbe
port: 5050
# files.readinessProbe.periodSeconds Period seconds for readinessProbe
periodSeconds: 20
# files.readinessProbe.successThreshold Success threshold for readinessProbe
successThreshold: 1
# files.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
timeoutSeconds: 5
# The parameters below for liveness probes are used only when `files.livenessProbe.enabled=true`
livenessProbe:
# files.livenessProbe.enabled Enable livenessProbe for files container
enabled: true
# files.livenessProbe.failureThreshold Failure threshold for livenessProbe
failureThreshold: 3
httpGet:
# files.livenessProbe.httpGet.path Checking the path for livenessProbe
path: /health
# files.livenessProbe.httpGet.port Checking the port for livenessProbe
port: 5050
# files.livenessProbe.periodSeconds Period seconds for livenessProbe
periodSeconds: 20
# files.livenessProbe.successThreshold Success threshold for livenessProbe
successThreshold: 1
# files.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
timeoutSeconds: 5
# files container resource requests and limits
# ref: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
# files.resources.requests The requested resources for the files container
# files.resources.limits The resources limits for the files container
resources:
requests:
memory: "256Mi"
cpu: "100m"
limits:
memory: "4Gi"
cpu: "4000m"
# files.mysqlUser Database user who will be used by the Files service to connect to the database
# If not set, `connections.mysqlUser` will be used
# If set to, it takes priority over the `connections.mysqlUser`
mysqlUser: ""
# DocSpace People Server application parameters
# This block defines the parameters common to all the Pods of this application
#
peopleServer:
# peopleServer.enabled Enables People Server installation
enabled: true
# peopleServer.kind The controller used for deploy
# Possible values are `Deployment` (default) or `StatefulSet`
kind: Deployment
# peopleServer.annotations Defines annotations that will be additionally added to People Server deploy
# If set to, it takes priority over the `commonAnnotations`
# You can also use `tpl` as the value for the key
annotations: {}
# peopleServer.replicaCount Number of People Server replicas to deploy
replicaCount: 2
# Update strategy used to replace old Pods by new ones
updateStrategy:
# peopleServer.updateStrategy.type People Server update strategy type
# Allowed values: `RollingUpdate` or `OnDelete` if `peopleServer.kind` is set to `StatefulSet` and `RollingUpdate` or `Recreate` if `peopleServer.kind` is set to `Deployment`
type: RollingUpdate
# peopleServer.updateStrategy.rollingUpdate Used only when `peopleServer.updateStrategy.type=RollingUpdate`
rollingUpdate:
# peopleServer.updateStrategy.rollingUpdate.maxUnavailable Maximum number of People Server Pods unavailable during the update process
maxUnavailable: 25%
# peopleServer.updateStrategy.rollingUpdate.maxSurge Maximum number of People Server Pods created over the desired number of Pods
maxSurge: 25%
# peopleServer.podManagementPolicy The People Server Pods scaling operations policy
# Used if `peopleServer.kind` is set to `StatefulSet`
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#pod-management-policies
podManagementPolicy: OrderedReady
# peopleServer.podAnnotations Map of annotations to add to the People Server pods
podAnnotations: {}
# Configure a Security Context for the People Server Pods
# If set to, it takes priority over the `podSecurityContext`
podSecurityContext:
# peopleServer.podSecurityContext.enabled Enable security context for the People Server pods
enabled: false
# peopleServer.customPodAntiAffinity Prohibiting the scheduling of People Server Pods relative to other Pods containing the specified labels on the same node
customPodAntiAffinity: {}
# Pod affinity rules for People Server Pods scheduling by nodes relative to other Pods
# Pod affinity allow you to constrain which nodes People Server Pods can be scheduled on based on the labels of Pods already running on that node
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
# Example:
# podAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# - labelSelector:
# matchExpressions:
# - key: app
# operator: In
# values:
# - store
# topologyKey: topology.kubernetes.io/zone
podAffinity: {}
# Node affinity rules for People Server Pods scheduling by nodes
# Node affinity allow you to constrain which nodes People Server Pods can be scheduled on based on node labels
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
# Example:
# nodeAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# nodeSelectorTerms:
# - matchExpressions:
# - key: topology.kubernetes.io/zone
# operator: In
# values:
# - zone1
# - zone2
nodeAffinity: {}
# peopleServer.nodeSelector Node labels for People Server pods assignment
# If set to, it takes priority over the `nodeSelector`
nodeSelector: {}
# peopleServer.tolerations Tolerations for People Server pods assignment
# If set to, it takes priority over the `tolerations`
tolerations: []
# People Server container image parameters
image:
# peopleServer.image.repository People Server container image repository
repository: onlyoffice/docspace-people-server
# peopleServer.image.tag People Server container image tag
# If set to, it takes priority over the `images.tag`
tag: ""
# peopleServer.image.pullPolicy People Server container image pull policy
pullPolicy: IfNotPresent
# Configure a Security Context for containers in People Server Pods
# If set to, it takes priority over the `containerSecurityContext`
containerSecurityContext:
# peopleServer.containerSecurityContext.enabled Enable security context for containers in People Server pods
enabled: false
# peopleServer.lifecycleHooks Defines the People Server container lifecycle hooks
# ref: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/
# It is used to trigger events to run at certain points in a container's lifecycle
# There are two hooks that are exposed: `PostStart` and `PreStop`
lifecycleHooks: {}
# peopleServer.containerPorts.app People Server container port
containerPorts:
app: 5050
# Probe used for the People Server container: startup, readiness and liveness probes
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
# The parameters below for startup probes are used only when `peopleServer.startupProbe.enabled=true`
startupProbe:
# peopleServer.startupProbe.enabled Enable startupProbe for People Server container
enabled: true
httpGet:
# peopleServer.startupProbe.httpGet.path Checking the path for startupProbe
path: /health
# peopleServer.startupProbe.httpGet.port Checking the port for startupProbe
port: 5050
# peopleServer.startupProbe.failureThreshold Failure threshold for startupProbe
failureThreshold: 30
# peopleServer.startupProbe.periodSeconds Period seconds for startupProbe
periodSeconds: 10
# The parameters below for readiness probes are used only when `peopleServer.readinessProbe.enabled=true`
readinessProbe:
# peopleServer.readinessProbe.enabled Enable readinessProbe for People Server container
enabled: true
# peopleServer.readinessProbe.failureThreshold Failure threshold for readinessProbe
failureThreshold: 2
httpGet:
# peopleServer.readinessProbe.httpGet.path Checking the path for readinessProbe
path: /health
# peopleServer.readinessProbe.httpGet.port Checking the port for readinessProbe
port: 5050
# peopleServer.readinessProbe.periodSeconds Period seconds for readinessProbe
periodSeconds: 10
# peopleServer.readinessProbe.successThreshold Success threshold for readinessProbe
successThreshold: 1
# peopleServer.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
timeoutSeconds: 5
# The parameters below for liveness probes are used only when `peopleServer.livenessProbe.enabled=true`
livenessProbe:
# peopleServer.livenessProbe.enabled Enable livenessProbe for People Server container
enabled: true
# peopleServer.livenessProbe.failureThreshold Failure threshold for livenessProbe
failureThreshold: 3
httpGet:
# peopleServer.livenessProbe.httpGet.path Checking the path for livenessProbe
path: /health
# peopleServer.livenessProbe.httpGet.port Checking the port for livenessProbe
port: 5050
# peopleServer.livenessProbe.periodSeconds Period seconds for livenessProbe
periodSeconds: 10
# peopleServer.livenessProbe.successThreshold Success threshold for livenessProbe
successThreshold: 1
# peopleServer.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
timeoutSeconds: 5
# People Server container resource requests and limits
# ref: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
# peopleServer.resources.requests The requested resources for the People Server container
# peopleServer.resources.limits The resources limits for the People Server container
resources:
requests:
memory: "256Mi"
cpu: "100m"
limits:
memory: "2Gi"
cpu: "2000m"
# peopleServer.mysqlUser Database user who will be used by the People Server service to connect to the database
# If not set, `connections.mysqlUser` will be used
# If set to, it takes priority over the `connections.mysqlUser`
mysqlUser: ""
# DocSpace Router application parameters
# This block defines the parameters common to all the Pods of this application
#
router:
# router.enabled Enables Router installation
enabled: true
# router.kind The controller used for deploy
# Possible values are `Deployment` (default) or `StatefulSet`
kind: Deployment
# router.annotations Defines annotations that will be additionally added to Router deploy
# If set to, it takes priority over the `commonAnnotations`
# You can also use `tpl` as the value for the key
annotations: {}
# router.replicaCount Number of Router replicas to deploy
replicaCount: 2
# Update strategy used to replace old Pods by new ones
updateStrategy:
# router.updateStrategy.type Router update strategy type
# Allowed values: `RollingUpdate` or `OnDelete` if `router.kind` is set to `StatefulSet` and `RollingUpdate` or `Recreate` if `router.kind` is set to `Deployment`
type: RollingUpdate
# router.updateStrategy.rollingUpdate Used only when `router.updateStrategy.type=RollingUpdate`
rollingUpdate:
# router.updateStrategy.rollingUpdate.maxUnavailable Maximum number of Router Pods unavailable during the update process
maxUnavailable: 25%
# router.updateStrategy.rollingUpdate.maxSurge Maximum number of Router Pods created over the desired number of Pods
maxSurge: 25%
# router.podManagementPolicy The Router Pods scaling operations policy
# Used if `router.kind` is set to `StatefulSet`
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#pod-management-policies
podManagementPolicy: OrderedReady
# router.podAnnotations Map of annotations to add to the Router pods
podAnnotations: {}
# Configure a Security Context for the Router Pods
# If set to, it takes priority over the `podSecurityContext`
podSecurityContext:
# router.podSecurityContext.enabled Enable security context for the Router pods
enabled: false
# router.customPodAntiAffinity Prohibiting the scheduling of Router Pods relative to other Pods containing the specified labels on the same node
customPodAntiAffinity: {}
# Pod affinity rules for Router Pods scheduling by nodes relative to other Pods
# Pod affinity allow you to constrain which nodes Router Pods can be scheduled on based on the labels of Pods already running on that node
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
# Example:
# podAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# - labelSelector:
# matchExpressions:
# - key: app
# operator: In
# values:
# - store
# topologyKey: topology.kubernetes.io/zone
podAffinity: {}
# Node affinity rules for Router Pods scheduling by nodes
# Node affinity allow you to constrain which nodes Router Pods can be scheduled on based on node labels
# ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
# Example:
# nodeAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# nodeSelectorTerms:
# - matchExpressions:
# - key: topology.kubernetes.io/zone
# operator: In
# values:
# - zone1
# - zone2
nodeAffinity: {}
# router.nodeSelector Node labels for Router pods assignment
# If set to, it takes priority over the `nodeSelector`
nodeSelector: {}
# router.tolerations Tolerations for Router pods assignment
# If set to, it takes priority over the `tolerations`
tolerations: []
# Router initContainers parameters
# router.initContainers Containers that run before Router container in a Pod
# ref:https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
# Example:
# initContainers:
# - name: custom-init-container
# image: busybox:latest
# command: ['sh', '-c', 'sleep 180']
initContainers: []
# Router container image parameters
image:
# router.image.repository Router container image repository
repository: onlyoffice/docspace-router
# router.image.tag Router container image tag
# If set to, it takes priority over the `images.tag`
tag: ""
# router.image.pullPolicy Router container image pull policy
pullPolicy: IfNotPresent
# Configure a Security Context for containers in Router Pods
# If set to, it takes priority over the `containerSecurityContext`
containerSecurityContext:
# router.containerSecurityContext.enabled Enable security context for containers in Router pods
enabled: false
# router.lifecycleHooks Defines the Router container lifecycle hooks
# ref: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/
# It is used to trigger events to run at certain points in a container's lifecycle
# There are two hooks that are exposed: `PostStart` and `PreStop`
lifecycleHooks: {}
# router.containerPorts.external Router container port
containerPorts:
external: 8092
# Probe used for the Router container: startup, readiness and liveness probes
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
# The parameters below for startup probes are used only when `router.startupProbe.enabled=true`
startupProbe:
# router.startupProbe.enabled Enable startupProbe for Router container
enabled: true
httpGet:
# router.startupProbe.httpGet.path Checking the path for startupProbe
path: /
# router.startupProbe.httpGet.port Checking the port for startupProbe
port: 8092
# router.startupProbe.failureThreshold Failure threshold for startupProbe
failureThreshold: 30
# router.startupProbe.periodSeconds Period seconds for startupProbe
periodSeconds: 10
# The parameters below for readiness probes are used only when `router.readinessProbe.enabled=true`
readinessProbe:
# router.readinessProbe.enabled Enable readinessProbe for Router container
enabled: true
# router.readinessProbe.failureThreshold Failure threshold for readinessProbe
failureThreshold: 2