diff --git a/incubator/authentik/13.0.11/CHANGELOG.md b/incubator/authentik/13.0.11/CHANGELOG.md
new file mode 100644
index 00000000000..f3024190537
--- /dev/null
+++ b/incubator/authentik/13.0.11/CHANGELOG.md
@@ -0,0 +1,99 @@
+**Important:**
+*for the complete changelog, please refer to the website*
+
+
+
+
+## [authentik-13.0.11](https://github.com/truecharts/charts/compare/authentik-13.0.10...authentik-13.0.11) (2023-07-30)
+
+### Fix
+
+- fix bluieprints ([#11041](https://github.com/truecharts/charts/issues/11041))
+
+
+
+
+## [authentik-13.0.10](https://github.com/truecharts/charts/compare/authentik-13.0.9...authentik-13.0.10) (2023-07-30)
+
+### Fix
+
+- remove blueprints mount ([#11033](https://github.com/truecharts/charts/issues/11033))
+
+
+
+
+## [authentik-13.0.9](https://github.com/truecharts/charts/compare/authentik-13.0.8...authentik-13.0.9) (2023-07-29)
+
+### Chore
+
+- bump authentik ([#11000](https://github.com/truecharts/charts/issues/11000))
+
+
+
+
+## [authentik-13.0.8](https://github.com/truecharts/charts/compare/authentik-13.0.7...authentik-13.0.8) (2023-07-29)
+
+### Chore
+
+- update helm general non-major ([#10955](https://github.com/truecharts/charts/issues/10955))
+
+
+
+
+## [authentik-13.0.7](https://github.com/truecharts/charts/compare/authentik-13.0.6...authentik-13.0.7) (2023-07-22)
+
+### Feat
+
+- move to stable ([#10751](https://github.com/truecharts/charts/issues/10751))
+
+
+
+
+## [authentik-13.0.6](https://github.com/truecharts/charts/compare/authentik-13.0.5...authentik-13.0.6) (2023-07-22)
+
+
+
+
+## [authentik-13.0.5](https://github.com/truecharts/charts/compare/authentik-13.0.4...authentik-13.0.5) (2023-07-01)
+
+### Chore
+
+- update helm general non-major ([#10069](https://github.com/truecharts/charts/issues/10069))
+
+
+
+
+## [authentik-13.0.4](https://github.com/truecharts/charts/compare/authentik-13.0.3...authentik-13.0.4) (2023-06-17)
+
+### Chore
+
+- test outposts on CI ([#9721](https://github.com/truecharts/charts/issues/9721))
+
+
+
+
+## [authentik-13.0.3](https://github.com/truecharts/charts/compare/authentik-13.0.2...authentik-13.0.3) (2023-06-16)
+
+### Chore
+
+- add proxy outpost and knob for disabling embeded outpost for testing ([#9704](https://github.com/truecharts/charts/issues/9704))
+
+
+
+
+## [authentik-13.0.2](https://github.com/truecharts/charts/compare/authentik-13.0.1...authentik-13.0.2) (2023-06-16)
+
+### Chore
+
+- bump ([#9699](https://github.com/truecharts/charts/issues/9699))
+
+
+
+
+## [authentik-13.0.1](https://github.com/truecharts/charts/compare/authentik-13.0.0...authentik-13.0.1) (2023-06-16)
+
+
+
+
+## [authentik-13.0.0](https://github.com/truecharts/charts/compare/authentik-12.0.2...authentik-13.0.0) (2023-06-13)
+
diff --git a/incubator/authentik/13.0.11/Chart.yaml b/incubator/authentik/13.0.11/Chart.yaml
new file mode 100644
index 00000000000..adacb1e4f72
--- /dev/null
+++ b/incubator/authentik/13.0.11/Chart.yaml
@@ -0,0 +1,30 @@
+apiVersion: v2
+appVersion: "2023.6.1"
+dependencies:
+ - name: common
+ repository: https://library-charts.truecharts.org
+ version: 13.2.1
+ - condition: redis.enabled
+ name: redis
+ repository: https://deps.truecharts.org
+ version: 7.0.5
+description: Authentik is an open-source Identity Provider focused on flexibility and versatility.
+home: https://truecharts.org/charts/incubator/authentik
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/authentik.png
+keywords:
+ - authentik
+kubeVersion: ">=1.16.0-0"
+maintainers:
+ - email: info@truecharts.org
+ name: TrueCharts
+ url: https://truecharts.org
+name: authentik
+sources:
+ - https://github.com/truecharts/charts/tree/master/charts/incubator/authentik
+ - https://github.com/goauthentik/authentik
+ - https://goauthentik.io/docs/
+version: 13.0.11
+annotations:
+ truecharts.org/catagories: |
+ - authentication
+ truecharts.org/SCALE-support: "true"
diff --git a/incubator/authentik/13.0.11/LICENSE b/incubator/authentik/13.0.11/LICENSE
new file mode 100644
index 00000000000..33a8cbb23f0
--- /dev/null
+++ b/incubator/authentik/13.0.11/LICENSE
@@ -0,0 +1,106 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor: The TrueCharts Project, it's owner and it's contributors
+Licensed Work: The TrueCharts "Blocky" Helm Chart
+Additional Use Grant: You may use the licensed work in production, as long
+ as it is directly sourced from a TrueCharts provided
+ official repository, catalog or source. You may also make private
+ modification to the directly sourced licenced work,
+ when used in production.
+
+ The following cases are, due to their nature, also
+ defined as 'production use' and explicitly prohibited:
+ - Bundling, including or displaying the licensed work
+ with(in) another work intended for production use,
+ with the apparent intend of facilitating and/or
+ promoting production use by third parties in
+ violation of this license.
+
+Change Date: 2050-01-01
+
+Change License: 3-clause BSD license
+
+For information about alternative licensing arrangements for the Software,
+please contact: legal@truecharts.org
+
+Notice
+
+The Business Source License (this document, or the “License”) is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
+“Business Source License” is a trademark of MariaDB Corporation Ab.
+
+-----------------------------------------------------------------------------
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to license
+your works, and to refer to it using the trademark “Business Source License”,
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the “Business
+Source License” name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+ or a license that is compatible with GPL Version 2.0 or a later version,
+ where “compatible” means that software provided under the Change License can
+ be included in a program with software provided under GPL Version 2.0 or a
+ later version. Licensor may specify additional Change Licenses without
+ limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+ impose any additional restriction on the right granted in this License, as
+ the Additional Use Grant; or (b) insert the text “None”.
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.
diff --git a/incubator/authentik/13.0.11/README.md b/incubator/authentik/13.0.11/README.md
new file mode 100644
index 00000000000..83229a60265
--- /dev/null
+++ b/incubator/authentik/13.0.11/README.md
@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/incubator/)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*
diff --git a/incubator/authentik/13.0.11/app-changelog.md b/incubator/authentik/13.0.11/app-changelog.md
new file mode 100644
index 00000000000..2ddde1c872d
--- /dev/null
+++ b/incubator/authentik/13.0.11/app-changelog.md
@@ -0,0 +1,9 @@
+
+
+## [authentik-13.0.11](https://github.com/truecharts/charts/compare/authentik-13.0.10...authentik-13.0.11) (2023-07-30)
+
+### Fix
+
+- fix bluieprints ([#11041](https://github.com/truecharts/charts/issues/11041))
+
+
\ No newline at end of file
diff --git a/incubator/authentik/13.0.11/app-readme.md b/incubator/authentik/13.0.11/app-readme.md
new file mode 100644
index 00000000000..fc1fba72a6a
--- /dev/null
+++ b/incubator/authentik/13.0.11/app-readme.md
@@ -0,0 +1,8 @@
+Authentik is an open-source Identity Provider focused on flexibility and versatility.
+
+This App is supplied by TrueCharts, for more information visit the manual: [https://truecharts.org/charts/incubator/authentik](https://truecharts.org/charts/incubator/authentik)
+
+---
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
diff --git a/incubator/authentik/13.0.11/charts/common-13.2.1.tgz b/incubator/authentik/13.0.11/charts/common-13.2.1.tgz
new file mode 100644
index 00000000000..5e9f8ac6235
Binary files /dev/null and b/incubator/authentik/13.0.11/charts/common-13.2.1.tgz differ
diff --git a/incubator/authentik/13.0.11/charts/redis-7.0.5.tgz b/incubator/authentik/13.0.11/charts/redis-7.0.5.tgz
new file mode 100644
index 00000000000..cb2c715db9c
Binary files /dev/null and b/incubator/authentik/13.0.11/charts/redis-7.0.5.tgz differ
diff --git a/incubator/authentik/13.0.11/ix_values.yaml b/incubator/authentik/13.0.11/ix_values.yaml
new file mode 100644
index 00000000000..7b1be6a7de8
--- /dev/null
+++ b/incubator/authentik/13.0.11/ix_values.yaml
@@ -0,0 +1,515 @@
+image:
+ repository: tccr.io/truecharts/authentik
+ tag: v2023.6.1@sha256:d0ff7fa405776b113dff914991a598a8a9754365e10f83232bede961e1903311
+ pullPolicy: IfNotPresent
+
+geoipImage:
+ repository: tccr.io/truecharts/geoipupdate
+ tag: v5.1.0@sha256:9397c7e4d99ab79d620bd7c6ecbad3558ac581dfc2c9432d98dd066ae7d55c71
+ pullPolicy: IfNotPresent
+
+ldapImage:
+ repository: tccr.io/truecharts/authentik-ldap
+ tag: v2023.6.1@sha256:7c31bdcb9d9fa8b6f8591b2d8d9f1de1365cb2a639201cd6bdb985aa0c9c2620
+ pullPolicy: IfNotPresent
+
+radiusImage:
+ repository: tccr.io/truecharts/authentik-radius
+ tag: v2023.6.1@sha256:35c16ad6031b1ea82b275a7be36bc398f765dc4c44822036fab7f84b800c1c0e
+ pullPolicy: IfNotPresent
+
+proxyImage:
+ repository: tccr.io/truecharts/authentik-proxy
+ tag: v2023.6.1@sha256:c0343cac900479531bb5bf0d2b40d8f1f57c6016a377b33a86b8aab526d76aa3
+ pullPolicy: IfNotPresent
+
+authentik:
+ credentials:
+ # Only works on initial install
+ email: my-mail@example.com
+ password: my-password
+ # Optional, only set if you want to use it
+ bootstrapToken: ""
+ general:
+ disableUpdateCheck: false
+ disableStartupAnalytics: true
+ allowUserChangeName: true
+ allowUserChangeEmail: true
+ allowUserChangeUsername: true
+ overwriteDefaultBlueprints: false
+ gdprCompliance: true
+ tokenLength: 128
+ impersonation: true
+ avatars:
+ - gravatar
+ - initials
+ footerLinks:
+ - name: Authentik
+ href: https://goauthentik.io
+ email:
+ host: ""
+ port: 587
+ username:
+ password:
+ useTLS: true
+ useSSL: false
+ timeout: 10
+ from: ""
+ ldap:
+ tlsCiphers: "null"
+ taskTimeoutHours: 2
+ logging:
+ # info, debug, warning, error, trace
+ logLevel: info
+ errorReporting:
+ enabled: false
+ sendPII: false
+ environment: customer
+ sentryDSN: ""
+ geoip:
+ enabled: false
+ # Ignored if enabled is true
+ # If enabled is false, and this is true, the
+ # built-in GeoIP database will be wiped
+ wipeBuiltInDb: false
+ editionID: GeoLite2-City
+ frequency: 8
+ accountID: ""
+ licenseKey: ""
+ outposts:
+ # Experimental feature
+ disableEmbeddedOutpost: false
+ proxy:
+ enabled: false
+ token: ""
+ radius:
+ enabled: false
+ token: ""
+ ldap:
+ enabled: false
+ token: ""
+
+# ===== DO NOT EDIT BELOW THIS LINE =====
+workload:
+ # ===== Server =====
+ main:
+ enabled: true
+ type: Deployment
+ podSpec:
+ containers:
+ main:
+ enabled: true
+ primary: true
+ imageSelector: image
+ securityContext:
+ runAsUser: 1000
+ runAsGroup: 1000
+ # readOnlyRootFilesystem: false
+ envFrom:
+ - configMapRef:
+ name: server
+ - secretRef:
+ name: server-worker
+ - configMapRef:
+ name: server-worker
+ args:
+ - server
+ probes:
+ liveness:
+ enabled: true
+ type: exec
+ command:
+ - /lifecycle/ak
+ - healthcheck
+ readiness:
+ enabled: true
+ type: exec
+ command:
+ - /lifecycle/ak
+ - healthcheck
+ startup:
+ enabled: true
+ type: exec
+ command:
+ - /lifecycle/ak
+ - healthcheck
+
+ # ===== Worker =====
+ worker:
+ enabled: true
+ type: Deployment
+ podSpec:
+ containers:
+ worker:
+ enabled: true
+ primary: true
+ imageSelector: image
+ securityContext:
+ runAsUser: 1000
+ runAsGroup: 1000
+ # readOnlyRootFilesystem: false
+ envFrom:
+ - secretRef:
+ name: server-worker
+ - configMapRef:
+ name: server-worker
+ args:
+ - worker
+ probes:
+ liveness:
+ enabled: true
+ type: exec
+ command:
+ - /lifecycle/ak
+ - healthcheck
+ readiness:
+ enabled: true
+ type: exec
+ command:
+ - /lifecycle/ak
+ - healthcheck
+ startup:
+ enabled: true
+ type: exec
+ command:
+ - /lifecycle/ak
+ - healthcheck
+
+ # ===== PROXY =====
+ proxy:
+ enabled: true
+ type: Deployment
+ podSpec:
+ containers:
+ proxy:
+ enabled: true
+ primary: true
+ imageSelector: proxyImage
+ securityContext:
+ runAsUser: 1000
+ runAsGroup: 1000
+ envFrom:
+ - configMapRef:
+ name: proxy
+ - secretRef:
+ name: proxy
+ probes:
+ liveness:
+ enabled: true
+ type: exec
+ command:
+ - /proxy
+ - healthcheck
+ readiness:
+ enabled: true
+ type: exec
+ command:
+ - /proxy
+ - healthcheck
+ startup:
+ enabled: true
+ type: exec
+ command:
+ - /proxy
+ - healthcheck
+
+ # ===== RADIUS =====
+ radius:
+ enabled: true
+ type: Deployment
+ podSpec:
+ containers:
+ radius:
+ enabled: true
+ primary: true
+ imageSelector: radiusImage
+ securityContext:
+ runAsUser: 1000
+ runAsGroup: 1000
+ envFrom:
+ - configMapRef:
+ name: radius
+ - secretRef:
+ name: radius
+ probes:
+ liveness:
+ enabled: true
+ type: exec
+ command:
+ - /radius
+ - healthcheck
+ readiness:
+ enabled: true
+ type: exec
+ command:
+ - /radius
+ - healthcheck
+ startup:
+ enabled: true
+ type: exec
+ command:
+ - /radius
+ - healthcheck
+
+ # ===== LDAP =====
+ ldap:
+ enabled: true
+ type: Deployment
+ podSpec:
+ containers:
+ ldap:
+ enabled: true
+ primary: true
+ imageSelector: ldapImage
+ securityContext:
+ runAsUser: 1000
+ runAsGroup: 1000
+ envFrom:
+ - configMapRef:
+ name: ldap
+ - secretRef:
+ name: ldap
+ probes:
+ liveness:
+ enabled: true
+ type: exec
+ command:
+ - /ldap
+ - healthcheck
+ readiness:
+ enabled: true
+ type: exec
+ command:
+ - /ldap
+ - healthcheck
+ startup:
+ enabled: true
+ type: exec
+ command:
+ - /ldap
+ - healthcheck
+
+ # ===== GeoIP Updater =====
+ geoip:
+ enabled: true
+ type: Deployment
+ podSpec:
+ containers:
+ geoip:
+ enabled: true
+ primary: true
+ imageSelector: geoipImage
+ securityContext:
+ runAsUser: 0
+ runAsGroup: 0
+ capabilities:
+ disableS6Caps: true
+ envFrom:
+ - configMapRef:
+ name: geoip
+ - secretRef:
+ name: geoip
+ probes:
+ liveness:
+ enabled: false
+ readiness:
+ enabled: false
+ startup:
+ enabled: false
+
+service:
+ # Server HTTPS
+ main:
+ ports:
+ main:
+ protocol: https
+ port: 10229
+ # Server HTTP
+ http:
+ enabled: true
+ type: ClusterIP
+ ports:
+ http:
+ enabled: true
+ protocol: http
+ port: 10230
+ # Proxy
+ proxy:
+ enabled: true
+ targetSelector: proxy
+ ports:
+ http:
+ enabled: true
+ protocol: http
+ port: 10227
+ targetSelector: proxy
+ https:
+ enabled: true
+ protocol: https
+ port: 10228
+ targetSelector: proxy
+ # Radius
+ radius:
+ enabled: true
+ targetSelector: radius
+ ports:
+ radius:
+ enabled: true
+ protocol: udp
+ targetSelector: radius
+ port: 1812
+ # LDAP
+ ldap:
+ enabled: true
+ targetSelector: ldap
+ ports:
+ ldap:
+ enabled: true
+ port: 389
+ targetSelector: ldap
+ # LDAPS
+ ldaps:
+ enabled: true
+ targetSelector: ldap
+ ports:
+ ldaps:
+ enabled: true
+ port: 636
+ targetSelector: ldap
+ # Server Metrics
+ servermetrics:
+ enabled: true
+ type: ClusterIP
+ ports:
+ servermetrics:
+ enabled: true
+ protocol: http
+ port: 10231
+ # Radius Metrics
+ radiusmetrics:
+ enabled: true
+ type: ClusterIP
+ targetSelector: radius
+ ports:
+ radiusmetrics:
+ enabled: true
+ protocol: http
+ port: 10232
+ targetSelector: radius
+ # LDAP Metrics
+ ldapmetrics:
+ enabled: true
+ type: ClusterIP
+ targetSelector: ldap
+ ports:
+ ldapmetrics:
+ enabled: true
+ protocol: http
+ port: 10233
+ targetSelector: ldap
+ # Proxy Metrics
+ proxymetrics:
+ enabled: true
+ type: ClusterIP
+ targetSelector: proxy
+ ports:
+ proxymetrics:
+ enabled: true
+ protocol: http
+ port: 10234
+ targetSelector: proxy
+persistence:
+ media:
+ enabled: true
+ targetSelector:
+ main:
+ main:
+ mountPath: /media
+ worker:
+ worker:
+ mountPath: /media
+ templates:
+ enabled: true
+ targetSelector:
+ main:
+ main:
+ mountPath: /templates
+ worker:
+ worker:
+ mountPath: /templates
+ blueprints:
+ enabled: true
+ targetSelector:
+ worker:
+ worker:
+ # This will automatically change to `/blueprints`
+ # if `overwriteDefaultBlueprints` is set to `true
+ # Otherwise it will respect the value specified here
+ mountPath: /blueprints/custom
+ certs:
+ enabled: true
+ mountPath: /certs
+ targetSelector:
+ worker:
+ worker:
+ mountPath: /certs
+ geoip:
+ enabled: true
+ targetSelector:
+ main:
+ main:
+ mountPath: /geoip
+ worker:
+ worker:
+ mountPath: /geoip
+ geoip:
+ geoip:
+ mountPath: /usr/share/GeoIP
+
+cnpg:
+ main:
+ enabled: true
+ user: authentik
+ database: authentik
+
+redis:
+ enabled: true
+
+portal:
+ open:
+ enabled: true
+
+metrics:
+ # FIXME: Metrics do not work yet
+ servermetrics:
+ enabled: true
+ type: servicemonitor
+ endpoints:
+ - port: "{{ .Values.service.servermetrics.ports.servermetrics.port }}"
+ path: /metrics
+ prometheusRule:
+ enabled: false
+ radiusmetrics:
+ enabled: true
+ type: servicemonitor
+ endpoints:
+ - port: "{{ .Values.service.radiusmetrics.ports.radiusmetrics.port }}"
+ path: /metrics
+ prometheusRule:
+ enabled: false
+ ldapmetrics:
+ enabled: true
+ type: servicemonitor
+ endpoints:
+ - port: "{{ .Values.service.ldapmetrics.ports.ldapmetrics.port }}"
+ path: /metrics
+ prometheusRule:
+ enabled: false
+ proxymetrics:
+ enabled: true
+ type: servicemonitor
+ endpoints:
+ - port: "{{ .Values.service.proxymetrics.ports.proxymetrics.port }}"
+ path: /metrics
+ prometheusRule:
+ enabled: false
diff --git a/incubator/authentik/13.0.11/questions.yaml b/incubator/authentik/13.0.11/questions.yaml
new file mode 100644
index 00000000000..9d24ac409b2
--- /dev/null
+++ b/incubator/authentik/13.0.11/questions.yaml
@@ -0,0 +1,3222 @@
+groups:
+ - name: Container Image
+ description: Image to be used for container
+ - name: General Settings
+ description: General Deployment Settings
+ - name: Workload Settings
+ description: Workload Settings
+ - name: App Configuration
+ description: App Specific Config Options
+ - name: Networking and Services
+ description: Configure Network and Services for Container
+ - name: Storage and Persistence
+ description: Persist and Share Data that is Separate from the Container
+ - name: Ingress
+ description: Ingress Configuration
+ - name: Security and Permissions
+ description: Configure Security Context and Permissions
+ - name: Resources and Devices
+ description: "Specify Resources/Devices to be Allocated to Workload"
+ - name: Middlewares
+ description: Traefik Middlewares
+ - name: Metrics
+ description: Metrics
+ - name: Addons
+ description: Addon Configuration
+ - name: Advanced
+ description: Advanced Configuration
+ - name: Postgresql
+ description: Postgresql
+ - name: Documentation
+ description: Documentation
+portals:
+ open:
+ protocols:
+ - "$kubernetes-resource_configmap_tcportal-open_protocol"
+ host:
+ - "$kubernetes-resource_configmap_tcportal-open_host"
+ ports:
+ - "$kubernetes-resource_configmap_tcportal-open_port"
+questions:
+ - variable: global
+ group: General Settings
+ label: "Global Settings"
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: stopAll
+ label: Stop All
+ description: "Stops All Running pods and hibernates cnpg"
+ schema:
+ type: boolean
+ default: false
+ - variable: workload
+ group: "Workload Settings"
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: main
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: type
+ label: Type (Advanced)
+ schema:
+ type: string
+ default: Deployment
+ enum:
+ - value: Deployment
+ description: Deployment
+ - value: DaemonSet
+ description: DaemonSet
+ - variable: replicas
+ label: Replicas (Advanced)
+ description: Set the number of Replicas
+ schema:
+ type: int
+ show_if: [["type", "!=", "DaemonSet"]]
+ default: 1
+ - variable: podSpec
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: containers
+ label: Containers
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: main
+ label: Main Container
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: envList
+ label: Extra Environment Variables
+ description: "Please be aware that some variables are set in the background, adding duplicates here might cause issues or prevent the app from starting..."
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: envItem
+ label: Environment Variable
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: name
+ label: Name
+ schema:
+ type: string
+ - variable: value
+ label: Value
+ schema:
+ type: string
+ - variable: extraArgs
+ label: Extra Args
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: arg
+ label: Arg
+ schema:
+ type: string
+ - variable: advanced
+ label: Show Advanced Settings
+ description: Advanced settings are not covered by TrueCharts Support
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: command
+ label: Command
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: param
+ label: Param
+ schema:
+ type: string
+ - variable: authentik
+ group: App Configuration
+ label: Authentik Configuration
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: credentials
+ label: Credentials
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: email
+ label: Email
+ description: |
+ Set the default email address for the akadmin user.
+ Only read on initial install, changing this will have no effect.
+ schema:
+ type: string
+ required: true
+ immutable: true
+ default: ""
+ - variable: password
+ label: Password
+ description: |
+ Set the default password for the akadmin user.
+ Only read on initial install, changing this will have no effect.
+ schema:
+ type: string
+ private: true
+ required: true
+ immutable: true
+ default: ""
+ - variable: bootstrapToken
+ label: (Optional) Bootstrap Token
+ description: |
+ Set the bootstrap token for the authentik server.
+ Only read on initial install, changing this will have no effect.
+ Only set this token if you plan to use the API right after installation.
+ schema:
+ type: string
+ private: true
+ immutable: true
+ default: ""
+ - variable: general
+ label: General
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: disableUpdateCheck
+ label: Disable Update Check
+ description: Disable the inbuilt update-checker
+ schema:
+ type: boolean
+ default: false
+ - variable: disableStartupAnalytics
+ label: Disable Startup Analytics
+ description: Disable startup analytics
+ schema:
+ type: boolean
+ default: true
+ - variable: allowUserChangeName
+ label: Allow User Change Name
+ description: Enable the ability for users to change their Name
+ schema:
+ type: boolean
+ default: true
+ - variable: allowUserChangeEmail
+ label: Allow User Change Mail
+ description: Enable the ability for users to change their Email address
+ schema:
+ type: boolean
+ default: true
+ - variable: allowUserChangeUsername
+ label: Allow User Change Username
+ description: Enable the ability for users to change their Usernames
+ schema:
+ type: boolean
+ default: true
+ - variable: gdprCompliance
+ label: GDPR Compliance
+ description: When enabled, all the events caused by a user will be deleted upon the user's deletion
+ schema:
+ type: boolean
+ default: true
+ - variable: overwriteDefaultBlueprints
+ label: Overwrite Default Blueprints
+ description: |
+ When enabled, all the default blueprints will be overwritten
+ True: mountPath: /blueprints
+ False: mountPath: /blueprints/custom
+ schema:
+ type: boolean
+ default: false
+ - variable: tokenLength
+ label: Token Length
+ description: Configure the length of generated tokens
+ schema:
+ type: int
+ min: 60
+ default: 128
+ - variable: impersonation
+ label: Impersonation
+ description: Globally enable / disable impersonation
+ schema:
+ type: boolean
+ default: true
+ - variable: avatars
+ label: Avatars
+ description: Configure how authentik should show avatars for users
+ schema:
+ type: list
+ default:
+ - gravatar
+ - initials
+ items:
+ - variable: avatar
+ label: Avatar
+ description: Avatar type
+ schema:
+ type: string
+ default: ""
+ required: true
+ - variable: footerLinks
+ label: Footer Links
+ description: This option configures the footer links on the flow executor pages
+ schema:
+ type: list
+ default:
+ - name: Authentik
+ href: https://goauthentik.io
+ items:
+ - variable: footerLink
+ label: Footer Link
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: name
+ label: Name
+ description: Name of the link
+ schema:
+ type: string
+ default: ""
+ required: true
+ - variable: href
+ label: Href
+ description: URL of the link
+ schema:
+ type: string
+ default: ""
+ required: true
+ - variable: email
+ label: Email
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: host
+ label: Mail Server Host
+ description: Sets host of mail server
+ schema:
+ type: string
+ default: ""
+ - variable: port
+ label: Mail Server Port
+ description: Sets port of mail server
+ schema:
+ type: int
+ default: 587
+ - variable: username
+ label: Username
+ description: Sets username of mail server
+ schema:
+ type: string
+ default: ""
+ - variable: password
+ label: Password
+ description: Sets password of mail server
+ schema:
+ type: string
+ private: true
+ default: ""
+ - variable: useTLS
+ label: Use TLS for authentication
+ description: Sets TLS for mail server authentication
+ schema:
+ type: boolean
+ default: true
+ - variable: useSSL
+ label: Use SSL for authentication
+ description: Sets SSL for mail server authentication
+ schema:
+ type: boolean
+ default: false
+ - variable: timeout
+ label: Timeout of authentication
+ description: Sets timeout for mail server authentication
+ schema:
+ type: int
+ default: 10
+ - variable: from
+ label: From Address
+ description: Email address authentik will send from
+ schema:
+ type: string
+ default: ""
+ - variable: ldap
+ label: LDAP
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: tls_ciphers
+ label: TLS Ciphers
+ description: |
+ Allows configuration of TLS Ciphers for LDAP connections used by LDAP sources.
+ Setting applies to all sources
+ schema:
+ type: string
+ default: "null"
+ - variable: taskTimeoutHours
+ label: Task Timeout Hours
+ description: Timeout in hours for LDAP synchronization tasks
+ schema:
+ type: int
+ default: 2
+ - variable: logging
+ label: Logging
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: log_level
+ label: Log Level
+ description: Log level for the server and worker containers
+ schema:
+ type: string
+ default: info
+ enum:
+ - value: trace
+ description: trace
+ - value: debug
+ description: debug
+ - value: info
+ description: info
+ - value: warning
+ description: warning
+ - value: error
+ description: error
+ - variable: error_reporting
+ label: Error Reporting
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable Reporting
+ description: Enables error reporting
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if:
+ subquestions:
+ - variable: sendPII
+ label: Send Personal Data
+ description: Whether or not to send personal data, like usernames
+ schema:
+ type: boolean
+ default: false
+ - variable: environment
+ label: Environment
+ description: The environment tag associated with all data sent to Sentry
+ schema:
+ type: string
+ default: customer
+ - variable: sentryDSN
+ label: Sentry DSN
+ description: Sets the DSN for the Sentry API endpoint.
+ schema:
+ type: string
+ private: true
+ default: ""
+ - variable: geoip
+ label: GeoIP
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: wipeBuiltInDb
+ label: Wipe Built-In GeoIP DB
+ description: |
+ Wipes the built-in GeoIP database.
+ With this set to false, and disabled GeoIP container,
+ It will use the built-in database.
+ schema:
+ type: boolean
+ show_if: [["enabled", "=", false]]
+ default: false
+ - variable: enabled
+ label: Enabled
+ description: |
+ Enables and configures the GeoIP container.
+ This will deploy the GeoIP container.
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: editionID
+ label: Edition ID
+ description: |
+ The edition ID of the database to download.
+ Only one seems to be supported by Authentik.
+ schema:
+ type: string
+ default: GeoLite2-City
+ - variable: frequency
+ label: Frequency
+ description: The number of hours between geoipupdate runs.
+ schema:
+ type: int
+ min: 1
+ default: 8
+ - variable: accountID
+ label: Account ID
+ description: Your MaxMind account ID
+ schema:
+ type: string
+ private: true
+ required: true
+ default: ""
+ - variable: licenseKey
+ label: License Key
+ description: Your MaxMind license key
+ schema:
+ type: string
+ private: true
+ required: true
+ default: ""
+ - variable: outposts
+ label: Outposts
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: disableEmbeddedOutpost
+ label: EXPERIMENTAL - Disable Embedded Outpost
+ description: |
+ Disables the embedded outpost.
+ This will disable the embedded outpost, and will require you to deploy your own outpost.
+ Only use this for testing, it might be removed without notice.
+ schema:
+ type: boolean
+ default: false
+ - variable: proxy
+ label: Proxy
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enabled
+ description: |
+ Enables and configures the Proxy container.
+ This will deploy the Proxy container.
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: token
+ label: Token
+ description: |
+ The token used to authenticate with the authentik server.
+ schema:
+ type: string
+ private: true
+ required: true
+ default: ""
+ - variable: radius
+ label: Radius
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enabled
+ description: |
+ Enables and configures the Radius container.
+ This will deploy the Radius container.
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: token
+ label: Token
+ description: |
+ The token used to authenticate with the authentik server.
+ schema:
+ type: string
+ private: true
+ required: true
+ default: ""
+ - variable: ldap
+ label: LDAP
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enabled
+ description: |
+ Enables and configures the LDAP container.
+ This will deploy the LDAP container.
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: token
+ label: Token
+ description: |
+ The token used to authenticate with the authentik server.
+ schema:
+ type: string
+ private: true
+ required: true
+ default: ""
+ - variable: TZ
+ label: Timezone
+ group: "General Settings"
+ schema:
+ type: string
+ default: "Etc/UTC"
+ $ref:
+ - "definitions/timezone"
+ - variable: podOptions
+ group: "General Settings"
+ label: "Global Pod Options (Advanced)"
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: expertPodOpts
+ label: "Expert - Pod Options"
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: hostNetwork
+ label: "Host Networking"
+ schema:
+ type: boolean
+ default: false
+ - variable: dnsConfig
+ label: "DNS Configuration"
+ schema:
+ type: dict
+ additional_attrs: true
+ attrs:
+ - variable: options
+ label: "Options"
+ schema:
+ type: list
+ default: [{"name": "ndots", "value": "1"}]
+ items:
+ - variable: optionsEntry
+ label: "Option Entry"
+ schema:
+ type: dict
+ additional_attrs: true
+ attrs:
+ - variable: name
+ label: "Name"
+ schema:
+ type: string
+ required: true
+ - variable: value
+ label: "Value"
+ schema:
+ type: string
+ - variable: nameservers
+ label: "Nameservers"
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: nsEntry
+ label: "Nameserver Entry"
+ schema:
+ type: string
+ required: true
+ - variable: searches
+ label: "Searches"
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: searchEntry
+ label: "Search Entry"
+ schema:
+ type: string
+ required: true
+ - variable: service
+ group: Networking and Services
+ label: Configure Service(s)
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: main
+ label: Main Service
+ description: The Primary service on which the healthcheck runs, often the webUI
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable the Service
+ schema:
+ type: boolean
+ default: true
+ hidden: true
+ - variable: type
+ label: Service Type
+ description: "ClusterIP's are only internally available and Loadbalancer exposes the service using the system loadbalancer"
+ schema:
+ type: string
+ default: LoadBalancer
+ enum:
+ - value: LoadBalancer
+ description: LoadBalancer (Expose Ports)
+ - value: ClusterIP
+ description: ClusterIP (Do Not Expose Ports)
+ - variable: loadBalancerIP
+ label: LoadBalancer IP
+ description: "MetalLB Only: Selects the Loadbalancer IP to expose on. Required when using PortalButton with MetalLB"
+ schema:
+ show_if: [["type", "=", "LoadBalancer"]]
+ type: string
+ default: ""
+ - variable: ports
+ label: "Service's Port(s) Configuration"
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: main
+ label: Main Service Port Configuration
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: port
+ label: Port
+ description: This port exposes the container port on the service
+ schema:
+ type: int
+ default: 10229
+ required: true
+ - variable: proxy
+ label: Proxy Service
+ description: The Proxy service.
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable the Service
+ schema:
+ type: boolean
+ default: true
+ hidden: true
+ - variable: type
+ label: Service Type
+ description: "ClusterIP's are only internally available and Loadbalancer exposes the service using the system loadbalancer"
+ schema:
+ type: string
+ default: LoadBalancer
+ enum:
+ - value: LoadBalancer
+ description: LoadBalancer (Expose Ports)
+ - value: ClusterIP
+ description: ClusterIP (Do Not Expose Ports)
+ - variable: loadBalancerIP
+ label: LoadBalancer IP
+ description: "MetalLB Only: Selects the Loadbalancer IP to expose on. Required when using PortalButton with MetalLB"
+ schema:
+ show_if: [["type", "=", "LoadBalancer"]]
+ type: string
+ default: ""
+ - variable: ports
+ label: "Service's Port(s) Configuration"
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: http
+ label: HTTP Service Port Configuration
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: port
+ label: Port
+ description: This port exposes the container port on the service
+ schema:
+ type: int
+ default: 10227
+ required: true
+ - variable: https
+ label: HTTPS Service Port Configuration
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: port
+ label: Port
+ description: This port exposes the container port on the service
+ schema:
+ type: int
+ default: 10228
+ required: true
+ - variable: radius
+ label: RADIUS Service
+ description: The RADIUS service.
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable the Service
+ schema:
+ type: boolean
+ default: true
+ hidden: true
+ - variable: type
+ label: Service Type
+ description: "ClusterIP's are only internally available and Loadbalancer exposes the service using the system loadbalancer"
+ schema:
+ type: string
+ default: LoadBalancer
+ enum:
+ - value: LoadBalancer
+ description: LoadBalancer (Expose Ports)
+ - value: ClusterIP
+ description: ClusterIP (Do Not Expose Ports)
+ - variable: loadBalancerIP
+ label: LoadBalancer IP
+ description: "MetalLB Only: Selects the Loadbalancer IP to expose on. Required when using PortalButton with MetalLB"
+ schema:
+ show_if: [["type", "=", "LoadBalancer"]]
+ type: string
+ default: ""
+ - variable: ports
+ label: "Service's Port(s) Configuration"
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: radius
+ label: RADIUS Service Port Configuration
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: port
+ label: Port
+ description: This port exposes the container port on the service
+ schema:
+ type: int
+ default: 1812
+ required: true
+ - variable: ldap
+ label: LDAP Service
+ description: The LDAP service.
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable the Service
+ schema:
+ type: boolean
+ default: true
+ hidden: true
+ - variable: type
+ label: Service Type
+ description: "ClusterIP's are only internally available and Loadbalancer exposes the service using the system loadbalancer"
+ schema:
+ type: string
+ default: LoadBalancer
+ enum:
+ - value: LoadBalancer
+ description: LoadBalancer (Expose Ports)
+ - value: ClusterIP
+ description: ClusterIP (Do Not Expose Ports)
+ - variable: loadBalancerIP
+ label: LoadBalancer IP
+ description: "MetalLB Only: Selects the Loadbalancer IP to expose on. Required when using PortalButton with MetalLB"
+ schema:
+ show_if: [["type", "=", "LoadBalancer"]]
+ type: string
+ default: ""
+ - variable: ports
+ label: "Service's Port(s) Configuration"
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: ldap
+ label: LDAP Service Port Configuration
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: port
+ label: Port
+ description: This port exposes the container port on the service
+ schema:
+ type: int
+ default: 389
+ required: true
+ - variable: ldaps
+ label: LDAPS Service
+ description: The LDAPS service.
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable the Service
+ schema:
+ type: boolean
+ default: true
+ hidden: true
+ - variable: type
+ label: Service Type
+ description: "ClusterIP's are only internally available and Loadbalancer exposes the service using the system loadbalancer"
+ schema:
+ type: string
+ default: LoadBalancer
+ enum:
+ - value: LoadBalancer
+ description: LoadBalancer (Expose Ports)
+ - value: ClusterIP
+ description: ClusterIP (Do Not Expose Ports)
+ - variable: loadBalancerIP
+ label: LoadBalancer IP
+ description: "MetalLB Only: Selects the Loadbalancer IP to expose on. Required when using PortalButton with MetalLB"
+ schema:
+ show_if: [["type", "=", "LoadBalancer"]]
+ type: string
+ default: ""
+ - variable: ports
+ label: "Service's Port(s) Configuration"
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: ldaps
+ label: LDAPS Service Port Configuration
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: port
+ label: Port
+ description: This port exposes the container port on the service
+ schema:
+ type: int
+ default: 636
+ required: true
+ - variable: serviceexpert
+ group: Networking and Services
+ label: Show Expert Config
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: scaleExternalInterface
+ description: Add External Interfaces
+ label: Add external Interfaces
+ group: Networking
+ schema:
+ type: list
+ items:
+ - variable: interfaceConfiguration
+ description: Interface Configuration
+ label: Interface Configuration
+ schema:
+ additional_attrs: true
+ type: dict
+ $ref:
+ - "normalize/interfaceConfiguration"
+ attrs:
+ - variable: hostInterface
+ description: Please Specify Host Interface
+ label: Host Interface
+ schema:
+ type: string
+ required: true
+ $ref:
+ - "definitions/interface"
+ - variable: ipam
+ description: Define how IP Address will be managed
+ label: IP Address Management
+ schema:
+ additional_attrs: true
+ type: dict
+ required: true
+ attrs:
+ - variable: type
+ description: Specify type for IPAM
+ label: IPAM Type
+ schema:
+ type: string
+ required: true
+ enum:
+ - value: dhcp
+ description: Use DHCP
+ - value: static
+ description: Use Static IP
+ - variable: staticIPConfigurations
+ label: Static IP Addresses
+ schema:
+ type: list
+ show_if: [["type", "=", "static"]]
+ items:
+ - variable: staticIP
+ label: Static IP
+ schema:
+ type: ipaddr
+ cidr: true
+ - variable: staticRoutes
+ label: Static Routes
+ schema:
+ type: list
+ show_if: [["type", "=", "static"]]
+ items:
+ - variable: staticRouteConfiguration
+ label: Static Route Configuration
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: destination
+ label: Destination
+ schema:
+ type: ipaddr
+ cidr: true
+ required: true
+ - variable: gateway
+ label: Gateway
+ schema:
+ type: ipaddr
+ cidr: false
+ required: true
+ - variable: serviceList
+ label: Add Manual Custom Services
+ group: Networking and Services
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: serviceListEntry
+ label: Custom Service
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable the service
+ schema:
+ type: boolean
+ default: true
+ hidden: true
+ - variable: name
+ label: Name
+ schema:
+ type: string
+ default: ""
+ - variable: type
+ label: Service Type
+ description: "ClusterIP's are only internally available and Loadbalancer exposes the service using the system loadbalancer"
+ schema:
+ type: string
+ default: LoadBalancer
+ enum:
+ - value: LoadBalancer
+ description: LoadBalancer (Expose Ports)
+ - value: ClusterIP
+ description: ClusterIP (Do Not Expose Ports)
+ - value: Simple
+ description: Deprecated CHANGE THIS
+ - variable: loadBalancerIP
+ label: LoadBalancer IP
+ description: "MetalLB Only: Selects the Loadbalancer IP to expose on. Required when using PortalButton with MetalLB"
+ schema:
+ show_if: [["type", "=", "LoadBalancer"]]
+ type: string
+ default: ""
+ - variable: advancedsvcset
+ label: Show Advanced Service Settings
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: externalIPs
+ label: "External IP's"
+ description: "External IP's"
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: externalIP
+ label: External IP
+ schema:
+ type: string
+ - variable: ipFamilyPolicy
+ label: IP Family Policy
+ description: Specify the IP Policy
+ schema:
+ type: string
+ default: SingleStack
+ enum:
+ - value: SingleStack
+ description: SingleStack
+ - value: PreferDualStack
+ description: PreferDualStack
+ - value: RequireDualStack
+ description: RequireDualStack
+ - variable: ipFamilies
+ label: IP Families
+ description: (Advanced) The IP Families that should be used
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: ipFamily
+ label: IP Family
+ schema:
+ type: string
+ - variable: portsList
+ label: Additional Service Ports
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: portsListEntry
+ label: Custom ports
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable the Port
+ schema:
+ type: boolean
+ default: true
+ hidden: true
+ - variable: name
+ label: Port Name
+ schema:
+ type: string
+ default: ""
+ - variable: protocol
+ label: Port Type
+ schema:
+ type: string
+ default: tcp
+ enum:
+ - value: http
+ description: HTTP
+ - value: https
+ description: HTTPS
+ - value: tcp
+ description: TCP
+ - value: udp
+ description: UDP
+ - variable: targetPort
+ label: Target Port
+ description: This port exposes the container port on the service
+ schema:
+ type: int
+ required: true
+ - variable: port
+ label: Container Port
+ schema:
+ type: int
+ required: true
+ - variable: persistence
+ label: Integrated Persistent Storage
+ description: Integrated Persistent Storage
+ group: Storage and Persistence
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: media
+ label: App Media Storage
+ description: Stores the Application Media.
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: type
+ label: Type of Storage
+ description: Sets the persistence type, Anything other than PVC could break rollback!
+ schema:
+ type: string
+ default: pvc
+ enum:
+ - value: pvc
+ description: PVC
+ - value: hostPath
+ description: Host Path
+ - value: emptyDir
+ description: emptyDir
+ - value: nfs
+ description: NFS Share
+ - variable: server
+ label: NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: path
+ label: Path on NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: autoPermissions
+ label: Automatic Permissions Configuration
+ description: Automatically set permissions
+ schema:
+ show_if: [["type", "!=", "pvc"]]
+ type: dict
+ additional_attrs: true
+ attrs:
+ - variable: enabled
+ label: enabled
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: chown
+ label: Run CHOWN
+ description: |
+ It will run CHOWN on the path with the given fsGroup
+ schema:
+ type: boolean
+ default: false
+ - variable: chmod
+ label: Run CHMOD
+ description: |
+ It will run CHMOD on the path with the given value
+ Format should be 3 digits, e.g. 770
+ schema:
+ type: string
+ valid_chars: '[0-9]{3}'
+ default: ""
+ - variable: recursive
+ label: Recursive
+ description: |
+ It will run CHOWN and CHMOD recursively
+ schema:
+ type: boolean
+ default: false
+ - variable: readOnly
+ label: Read Only
+ schema:
+ type: boolean
+ default: false
+ - variable: hostPath
+ label: Host Path
+ description: Path inside the container the storage is mounted
+ schema:
+ show_if: [["type", "=", "hostPath"]]
+ type: hostpath
+ - variable: medium
+ label: EmptyDir Medium
+ schema:
+ show_if: [["type", "=", "emptyDir"]]
+ type: string
+ default: ""
+ enum:
+ - value: ""
+ description: Default
+ - value: Memory
+ description: Memory
+ - variable: size
+ label: Size quotum of Storage (Do NOT REDUCE after installation)
+ description: This value can ONLY be INCREASED after the installation
+ schema:
+ show_if: [["type", "=", "pvc"]]
+ type: string
+ default: 256Gi
+ - variable: templates
+ label: App Templates Storage
+ description: Stores the Application Templates.
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: type
+ label: Type of Storage
+ description: Sets the persistence type, Anything other than PVC could break rollback!
+ schema:
+ type: string
+ default: pvc
+ enum:
+ - value: pvc
+ description: PVC
+ - value: hostPath
+ description: Host Path
+ - value: emptyDir
+ description: emptyDir
+ - value: nfs
+ description: NFS Share
+ - variable: server
+ label: NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: path
+ label: Path on NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: autoPermissions
+ label: Automatic Permissions Configuration
+ description: Automatically set permissions
+ schema:
+ show_if: [["type", "!=", "pvc"]]
+ type: dict
+ additional_attrs: true
+ attrs:
+ - variable: enabled
+ label: enabled
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: chown
+ label: Run CHOWN
+ description: |
+ It will run CHOWN on the path with the given fsGroup
+ schema:
+ type: boolean
+ default: false
+ - variable: chmod
+ label: Run CHMOD
+ description: |
+ It will run CHMOD on the path with the given value
+ Format should be 3 digits, e.g. 770
+ schema:
+ type: string
+ valid_chars: '[0-9]{3}'
+ default: ""
+ - variable: recursive
+ label: Recursive
+ description: |
+ It will run CHOWN and CHMOD recursively
+ schema:
+ type: boolean
+ default: false
+ - variable: readOnly
+ label: Read Only
+ schema:
+ type: boolean
+ default: false
+ - variable: hostPath
+ label: Host Path
+ description: Path inside the container the storage is mounted
+ schema:
+ show_if: [["type", "=", "hostPath"]]
+ type: hostpath
+ - variable: medium
+ label: EmptyDir Medium
+ schema:
+ show_if: [["type", "=", "emptyDir"]]
+ type: string
+ default: ""
+ enum:
+ - value: ""
+ description: Default
+ - value: Memory
+ description: Memory
+ - variable: size
+ label: Size quotum of Storage (Do NOT REDUCE after installation)
+ description: This value can ONLY be INCREASED after the installation
+ schema:
+ show_if: [["type", "=", "pvc"]]
+ type: string
+ default: 256Gi
+ - variable: Blueprints
+ label: App Blueprints Storage
+ description: Stores the Application Blueprints.
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: type
+ label: Type of Storage
+ description: Sets the persistence type, Anything other than PVC could break rollback!
+ schema:
+ type: string
+ default: pvc
+ enum:
+ - value: pvc
+ description: PVC
+ - value: hostPath
+ description: Host Path
+ - value: emptyDir
+ description: emptyDir
+ - value: nfs
+ description: NFS Share
+ - variable: server
+ label: NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: path
+ label: Path on NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: autoPermissions
+ label: Automatic Permissions Configuration
+ description: Automatically set permissions
+ schema:
+ show_if: [["type", "!=", "pvc"]]
+ type: dict
+ additional_attrs: true
+ attrs:
+ - variable: enabled
+ label: enabled
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: chown
+ label: Run CHOWN
+ description: |
+ It will run CHOWN on the path with the given fsGroup
+ schema:
+ type: boolean
+ default: false
+ - variable: chmod
+ label: Run CHMOD
+ description: |
+ It will run CHMOD on the path with the given value
+ Format should be 3 digits, e.g. 770
+ schema:
+ type: string
+ valid_chars: '[0-9]{3}'
+ default: ""
+ - variable: recursive
+ label: Recursive
+ description: |
+ It will run CHOWN and CHMOD recursively
+ schema:
+ type: boolean
+ default: false
+ - variable: readOnly
+ label: Read Only
+ schema:
+ type: boolean
+ default: false
+ - variable: hostPath
+ label: Host Path
+ description: Path inside the container the storage is mounted
+ schema:
+ show_if: [["type", "=", "hostPath"]]
+ type: hostpath
+ - variable: medium
+ label: EmptyDir Medium
+ schema:
+ show_if: [["type", "=", "emptyDir"]]
+ type: string
+ default: ""
+ enum:
+ - value: ""
+ description: Default
+ - value: Memory
+ description: Memory
+ - variable: size
+ label: Size quotum of Storage (Do NOT REDUCE after installation)
+ description: This value can ONLY be INCREASED after the installation
+ schema:
+ show_if: [["type", "=", "pvc"]]
+ type: string
+ default: 256Gi
+ - variable: certs
+ label: App Certs Storage
+ description: Stores the Application Certs.
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: type
+ label: Type of Storage
+ description: Sets the persistence type, Anything other than PVC could break rollback!
+ schema:
+ type: string
+ default: pvc
+ enum:
+ - value: pvc
+ description: PVC
+ - value: hostPath
+ description: Host Path
+ - value: emptyDir
+ description: emptyDir
+ - value: nfs
+ description: NFS Share
+ - variable: server
+ label: NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: path
+ label: Path on NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: autoPermissions
+ label: Automatic Permissions Configuration
+ description: Automatically set permissions
+ schema:
+ show_if: [["type", "!=", "pvc"]]
+ type: dict
+ additional_attrs: true
+ attrs:
+ - variable: enabled
+ label: enabled
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: chown
+ label: Run CHOWN
+ description: |
+ It will run CHOWN on the path with the given fsGroup
+ schema:
+ type: boolean
+ default: false
+ - variable: chmod
+ label: Run CHMOD
+ description: |
+ It will run CHMOD on the path with the given value
+ Format should be 3 digits, e.g. 770
+ schema:
+ type: string
+ valid_chars: '[0-9]{3}'
+ default: ""
+ - variable: recursive
+ label: Recursive
+ description: |
+ It will run CHOWN and CHMOD recursively
+ schema:
+ type: boolean
+ default: false
+ - variable: readOnly
+ label: Read Only
+ schema:
+ type: boolean
+ default: false
+ - variable: hostPath
+ label: Host Path
+ description: Path inside the container the storage is mounted
+ schema:
+ show_if: [["type", "=", "hostPath"]]
+ type: hostpath
+ - variable: medium
+ label: EmptyDir Medium
+ schema:
+ show_if: [["type", "=", "emptyDir"]]
+ type: string
+ default: ""
+ enum:
+ - value: ""
+ description: Default
+ - value: Memory
+ description: Memory
+ - variable: size
+ label: Size quotum of Storage (Do NOT REDUCE after installation)
+ description: This value can ONLY be INCREASED after the installation
+ schema:
+ show_if: [["type", "=", "pvc"]]
+ type: string
+ default: 256Gi
+ - variable: geoip
+ label: App GeoIP Storage
+ description: Stores the Application GeoIP.
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: type
+ label: Type of Storage
+ description: Sets the persistence type, Anything other than PVC could break rollback!
+ schema:
+ type: string
+ default: pvc
+ enum:
+ - value: pvc
+ description: PVC
+ - value: hostPath
+ description: Host Path
+ - value: emptyDir
+ description: emptyDir
+ - value: nfs
+ description: NFS Share
+ - variable: server
+ label: NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: path
+ label: Path on NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: autoPermissions
+ label: Automatic Permissions Configuration
+ description: Automatically set permissions
+ schema:
+ show_if: [["type", "!=", "pvc"]]
+ type: dict
+ additional_attrs: true
+ attrs:
+ - variable: enabled
+ label: enabled
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: chown
+ label: Run CHOWN
+ description: |
+ It will run CHOWN on the path with the given fsGroup
+ schema:
+ type: boolean
+ default: false
+ - variable: chmod
+ label: Run CHMOD
+ description: |
+ It will run CHMOD on the path with the given value
+ Format should be 3 digits, e.g. 770
+ schema:
+ type: string
+ valid_chars: '[0-9]{3}'
+ default: ""
+ - variable: recursive
+ label: Recursive
+ description: |
+ It will run CHOWN and CHMOD recursively
+ schema:
+ type: boolean
+ default: false
+ - variable: readOnly
+ label: Read Only
+ schema:
+ type: boolean
+ default: false
+ - variable: hostPath
+ label: Host Path
+ description: Path inside the container the storage is mounted
+ schema:
+ show_if: [["type", "=", "hostPath"]]
+ type: hostpath
+ - variable: medium
+ label: EmptyDir Medium
+ schema:
+ show_if: [["type", "=", "emptyDir"]]
+ type: string
+ default: ""
+ enum:
+ - value: ""
+ description: Default
+ - value: Memory
+ description: Memory
+ - variable: size
+ label: Size quotum of Storage (Do NOT REDUCE after installation)
+ description: This value can ONLY be INCREASED after the installation
+ schema:
+ show_if: [["type", "=", "pvc"]]
+ type: string
+ default: 256Gi
+ - variable: persistenceList
+ label: Additional App Storage
+ group: Storage and Persistence
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: persistenceListEntry
+ label: Custom Storage
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable the storage
+ schema:
+ type: boolean
+ default: true
+ hidden: true
+ - variable: type
+ label: Type of Storage
+ description: Sets the persistence type, Anything other than PVC could break rollback!
+ schema:
+ type: string
+ default: hostPath
+ enum:
+ - value: pvc
+ description: PVC
+ - value: hostPath
+ description: Host Path
+ - value: emptyDir
+ description: emptyDir
+ - value: nfs
+ description: NFS Share
+ - variable: server
+ label: NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: path
+ label: Path on NFS Server
+ schema:
+ show_if: [["type", "=", "nfs"]]
+ type: string
+ default: ""
+ - variable: autoPermissions
+ label: Automatic Permissions Configuration
+ description: Automatically set permissions
+ schema:
+ show_if: [["type", "!=", "pvc"]]
+ type: dict
+ additional_attrs: true
+ attrs:
+ - variable: enabled
+ label: enabled
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: chown
+ label: Run CHOWN
+ description: |
+ It will run CHOWN on the path with the given fsGroup
+ schema:
+ type: boolean
+ default: false
+ - variable: chmod
+ label: Run CHMOD
+ description: |
+ It will run CHMOD on the path with the given value
+ Format should be 3 digits, e.g. 770
+ schema:
+ type: string
+ valid_chars: '[0-9]{3}'
+ default: ""
+ - variable: recursive
+ label: Recursive
+ description: |
+ It will run CHOWN and CHMOD recursively
+ schema:
+ type: boolean
+ default: false
+ - variable: readOnly
+ label: Read Only
+ schema:
+ type: boolean
+ default: false
+ - variable: hostPath
+ label: Host Path
+ description: Path inside the container the storage is mounted
+ schema:
+ show_if: [["type", "=", "hostPath"]]
+ type: hostpath
+ - variable: mountPath
+ label: Mount Path
+ description: Path inside the container the storage is mounted
+ schema:
+ type: string
+ default: ""
+ required: true
+ valid_chars: '^\/([a-zA-Z0-9._-]+(\s?[a-zA-Z0-9._-]+|\/?))+$'
+ - variable: medium
+ label: EmptyDir Medium
+ schema:
+ show_if: [["type", "=", "emptyDir"]]
+ type: string
+ default: ""
+ enum:
+ - value: ""
+ description: Default
+ - value: Memory
+ description: Memory
+ - variable: size
+ label: Size Quotum of Storage
+ schema:
+ show_if: [["type", "=", "pvc"]]
+ type: string
+ default: 256Gi
+ - variable: ingress
+ label: ""
+ group: Ingress
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: main
+ label: Main (HTTPS) Ingress
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable Ingress
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: hosts
+ label: Hosts
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: hostEntry
+ label: Host
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: host
+ label: HostName
+ schema:
+ type: string
+ default: ""
+ required: true
+ - variable: paths
+ label: Paths
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: pathEntry
+ label: Host
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: path
+ label: Path
+ schema:
+ type: string
+ required: true
+ default: "/"
+ - variable: pathType
+ label: Path Type
+ schema:
+ type: string
+ required: true
+ default: Prefix
+ - variable: certificateIssuer
+ label: Cert-Manager clusterIssuer
+ description: 'add the name of your cert-manager clusterIssuer here for automatic tls certificates. Cannot be used combined with tls option below'
+ schema:
+ type: string
+ default: ""
+ - variable: middlewares
+ label: Traefik Middlewares
+ description: Add previously created Traefik Middlewares to this Ingress
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: name
+ label: Name
+ schema:
+ type: string
+ default: ""
+ required: true
+ - variable: advanced
+ label: Show Advanced Settings
+ description: Advanced settings are not covered by TrueCharts Support
+ schema:
+ type: boolean
+ default: false
+ - variable: entrypoint
+ label: (Advanced) Traefik Entrypoint
+ description: Entrypoint used by Traefik when using Traefik as Ingress Provider
+ schema:
+ type: string
+ default: websecure
+ show_if: [["advanced", "=", true]]
+ required: true
+ - variable: ingressClassName
+ label: (Advanced/Optional) IngressClass Name
+ schema:
+ type: string
+ show_if: [["advanced", "=", true]]
+ default: ""
+ - variable: tls
+ label: TLS-Settings
+ schema:
+ type: list
+ show_if: [["advanced", "=", true]]
+ default: []
+ items:
+ - variable: tlsEntry
+ label: Host
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: hosts
+ label: Certificate Hosts
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: host
+ label: Host
+ schema:
+ type: string
+ default: ""
+ required: true
+
+ - variable: certificateIssuer
+ label: Use Cert-Manager clusterIssuer
+ description: 'add the name of your cert-manager clusterIssuer here for automatic tls certificates.'
+ schema:
+ type: string
+ default: ""
+ - variable: scaleCert
+ label: Use TrueNAS SCALE Certificate (Deprecated)
+ schema:
+ show_if: [["certificateIssuer", "=", ""]]
+ type: int
+ $ref:
+ - "definitions/certificate"
+ - variable: secretName
+ label: Use Custom Secret (Advanced)
+ schema:
+ show_if: [["certificateIssuer", "=", ""]]
+ type: string
+ default: ""
+ - variable: proxy
+ label: Proxy (HTTPS) Ingress
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable Ingress
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: hosts
+ label: Hosts
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: hostEntry
+ label: Host
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: host
+ label: HostName
+ schema:
+ type: string
+ default: ""
+ required: true
+ - variable: paths
+ label: Paths
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: pathEntry
+ label: Host
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: path
+ label: Path
+ schema:
+ type: string
+ required: true
+ default: "/"
+ - variable: pathType
+ label: Path Type
+ schema:
+ type: string
+ required: true
+ default: Prefix
+ - variable: certificateIssuer
+ label: Cert-Manager clusterIssuer
+ description: 'add the name of your cert-manager clusterIssuer here for automatic tls certificates. Cannot be used combined with tls option below'
+ schema:
+ type: string
+ default: ""
+ - variable: middlewares
+ label: Traefik Middlewares
+ description: Add previously created Traefik Middlewares to this Ingress
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: name
+ label: Name
+ schema:
+ type: string
+ default: ""
+ required: true
+ - variable: advanced
+ label: Show Advanced Settings
+ description: Advanced settings are not covered by TrueCharts Support
+ schema:
+ type: boolean
+ default: false
+ - variable: entrypoint
+ label: (Advanced) Traefik Entrypoint
+ description: Entrypoint used by Traefik when using Traefik as Ingress Provider
+ schema:
+ type: string
+ default: websecure
+ show_if: [["advanced", "=", true]]
+ required: true
+ - variable: ingressClassName
+ label: (Advanced/Optional) IngressClass Name
+ schema:
+ type: string
+ show_if: [["advanced", "=", true]]
+ default: ""
+ - variable: tls
+ label: TLS-Settings
+ schema:
+ type: list
+ show_if: [["advanced", "=", true]]
+ default: []
+ items:
+ - variable: tlsEntry
+ label: Host
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: hosts
+ label: Certificate Hosts
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: host
+ label: Host
+ schema:
+ type: string
+ default: ""
+ required: true
+
+ - variable: certificateIssuer
+ label: Use Cert-Manager clusterIssuer
+ description: 'add the name of your cert-manager clusterIssuer here for automatic tls certificates.'
+ schema:
+ type: string
+ default: ""
+ - variable: scaleCert
+ label: Use TrueNAS SCALE Certificate (Deprecated)
+ schema:
+ show_if: [["certificateIssuer", "=", ""]]
+ type: int
+ $ref:
+ - "definitions/certificate"
+ - variable: secretName
+ label: Use Custom Secret (Advanced)
+ schema:
+ show_if: [["certificateIssuer", "=", ""]]
+ type: string
+ default: ""
+ - variable: ingressList
+ label: Add Manual Custom Ingresses
+ group: Ingress
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: ingressListEntry
+ label: Custom Ingress
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable Ingress
+ schema:
+ type: boolean
+ default: true
+ hidden: true
+ - variable: name
+ label: Name
+ schema:
+ type: string
+ default: ""
+ - variable: ingressClassName
+ label: IngressClass Name
+ schema:
+ type: string
+ default: ""
+ - variable: hosts
+ label: Hosts
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: hostEntry
+ label: Host
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: host
+ label: HostName
+ schema:
+ type: string
+ default: ""
+ required: true
+ - variable: paths
+ label: Paths
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: pathEntry
+ label: Host
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: path
+ label: Path
+ schema:
+ type: string
+ required: true
+ default: "/"
+ - variable: pathType
+ label: Path Type
+ schema:
+ type: string
+ required: true
+ default: Prefix
+ - variable: service
+ label: Linked Service
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: name
+ label: Service Name
+ schema:
+ type: string
+ default: ""
+ - variable: port
+ label: Service Port
+ schema:
+ type: int
+ - variable: clusterIssuer
+ label: clusterIssuer
+ description: 'add the name of your cert-manager clusterIssuer here for automatic tls certificates. Cannot be used combined with tls option below'
+ schema:
+ type: string
+ default: ""
+ - variable: tls
+ label: TLS-Settings
+ schema:
+ type: list
+ default: []
+ show_if: [["clusterIssuer", "=", ""]]
+ items:
+ - variable: tlsEntry
+ label: Host
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: hosts
+ label: Certificate Hosts
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: host
+ label: Host
+ schema:
+ type: string
+ default: ""
+ required: true
+ - variable: clusterIssuer
+ label: Use Cert-Manager clusterIssuer
+ description: 'add the name of your Cert-Manager clusterIssuer here for automatic tls certificates.'
+ schema:
+ type: string
+ default: ""
+ - variable: scaleCert
+ label: Use TrueNAS SCALE Certificate (Deprecated)
+ schema:
+ show_if: [["clusterIssuer", "=", ""]]
+ type: int
+ $ref:
+ - "definitions/certificate"
+ - variable: secretName
+ label: Use Custom Secret (Advanced)
+ schema:
+ type: string
+ show_if: [["clusterIssuer", "=", ""]]
+ default: ""
+ - variable: entrypoint
+ label: Traefik Entrypoint
+ description: Entrypoint used by Traefik when using Traefik as Ingress Provider
+ schema:
+ type: string
+ default: websecure
+ required: true
+ - variable: middlewares
+ label: Traefik Middlewares
+ description: Add previously created Traefik Middlewares to this Ingress
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: name
+ label: Name
+ schema:
+ type: string
+ default: ""
+ required: true
+ - variable: securityContext
+ group: Security and Permissions
+ label: Security Context
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: container
+ label: Container
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ # Settings from questions.yaml get appended here on a per-app basis
+ - variable: runAsUser
+ label: runAsUser
+ description: The UserID of the user running the application
+ schema:
+ type: int
+ default: 1000
+ - variable: runAsGroup
+ label: runAsGroup
+ description: The groupID of the user running the application
+ schema:
+ type: int
+ default: 1000
+ # Settings from questions.yaml get appended here on a per-app basis
+ - variable: PUID
+ label: Process User ID - PUID
+ description: When supported by the container, this sets the User ID running the Application Process. Not supported by all Apps
+ schema:
+ type: int
+ show_if: [["runAsUser", "=", 0]]
+ default: 568
+ - variable: UMASK
+ label: UMASK
+ description: When supported by the container, this sets the UMASK for the App. Not supported by all Apps
+ schema:
+ type: string
+ default: "0022"
+ - variable: advanced
+ label: Show Advanced Settings
+ description: Advanced settings are not covered by TrueCharts Support
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: privileged
+ label: "Privileged mode"
+ schema:
+ type: boolean
+ default: false
+ - variable: readOnlyRootFilesystem
+ label: "ReadOnly Root Filesystem"
+ schema:
+ type: boolean
+ default: true
+ - variable: pod
+ label: Pod
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: fsGroupChangePolicy
+ label: "When should we take ownership?"
+ schema:
+ type: string
+ default: OnRootMismatch
+ enum:
+ - value: OnRootMismatch
+ description: OnRootMismatch
+ - value: Always
+ description: Always
+ - variable: supplementalGroups
+ label: Supplemental Groups
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: supplementalGroupsEntry
+ label: Supplemental Group
+ schema:
+ type: int
+ # Settings from questions.yaml get appended here on a per-app basis
+ - variable: fsGroup
+ label: fsGroup
+ description: The group that should own ALL storage.
+ schema:
+ type: int
+ default: 568
+ - variable: resources
+ group: Resources and Devices
+ label: "Resource Limits"
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: limits
+ label: Advanced Limit Resource Consumption
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: cpu
+ label: CPU
+ description: "1000m means 1 hyperthread. Detailed info: https://truecharts.org/manual/SCALE/validation"
+ schema:
+ type: string
+ default: 4000m
+ valid_chars: '^(?!^0(\.0|m|)$)([0-9]+)(\.[0-9]|m?)$'
+ - variable: memory
+ label: RAM
+ description: "1Gi means 1 Gibibyte RAM. Detailed info: https://truecharts.org/manual/SCALE/validation"
+ schema:
+ type: string
+ default: 8Gi
+ valid_chars: '^(?!^0(e[0-9]|[EPTGMK]i?|)$)([0-9]+)(|[EPTGMK]i?|e[0-9]+)$'
+ - variable: requests
+ label: "Minimum Resources Required (request)"
+ schema:
+ additional_attrs: true
+ type: dict
+ hidden: true
+ attrs:
+ - variable: cpu
+ label: CPU
+ description: "1000m means 1 hyperthread. Detailed info: https://truecharts.org/manual/SCALE/validation"
+ schema:
+ type: string
+ default: 10m
+ hidden: true
+ valid_chars: '^(?!^0(\.0|m|)$)([0-9]+)(\.[0-9]|m?)$'
+ - variable: memory
+ label: "RAM"
+ description: "1Gi means 1 Gibibyte RAM. Detailed info: https://truecharts.org/manual/SCALE/validation"
+ schema:
+ type: string
+ default: 50Mi
+ hidden: true
+ valid_chars: '^(?!^0(e[0-9]|[EPTGMK]i?|)$)([0-9]+)(|[EPTGMK]i?|e[0-9]+)$'
+ - variable: deviceList
+ label: Mount USB Devices
+ group: Resources and Devices
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: deviceListEntry
+ label: Device
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enable the Storage
+ schema:
+ type: boolean
+ default: true
+ - variable: type
+ label: (Advanced) Type of Storage
+ description: Sets the persistence type
+ schema:
+ type: string
+ default: device
+ hidden: true
+ - variable: readOnly
+ label: readOnly
+ schema:
+ type: boolean
+ default: false
+ - variable: hostPath
+ label: Host Device Path
+ description: Path to the device on the host system
+ schema:
+ type: path
+ - variable: mountPath
+ label: Container Device Path
+ description: Path inside the container the device is mounted
+ schema:
+ type: string
+ default: "/dev/ttyACM0"
+ - variable: scaleGPU
+ label: GPU Configuration
+ group: Resources and Devices
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: scaleGPUEntry
+ label: GPU
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ # Specify GPU configuration
+ - variable: gpu
+ label: Select GPU
+ schema:
+ additional_attrs: true
+ type: dict
+ $ref:
+ - "definitions/gpuConfiguration"
+ attrs: []
+ - variable: workaround
+ label: "Workaround"
+ schema:
+ type: string
+ default: workaround
+ hidden: true
+ - variable: metrics
+ group: Metrics
+ label: Prometheus Metrics
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: main
+ label: Main Metrics
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enabled
+ description: Enable Prometheus Metrics
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: prometheusRule
+ label: PrometheusRule
+ description: Enable and configure Prometheus Rules for the App.
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enabled
+ description: Enable Prometheus Metrics
+ schema:
+ type: boolean
+ default: false
+ # TODO: Rule List section
+# - variable: horizontalPodAutoscaler
+# group: Advanced
+# label: (Advanced) Horizontal Pod Autoscaler
+# schema:
+# type: list
+# default: []
+# items:
+# - variable: hpaEntry
+# label: HPA Entry
+# schema:
+# additional_attrs: true
+# type: dict
+# attrs:
+# - variable: name
+# label: Name
+# schema:
+# type: string
+# required: true
+# default: ""
+# - variable: enabled
+# label: Enabled
+# schema:
+# type: boolean
+# default: false
+# show_subquestions_if: true
+# subquestions:
+# - variable: target
+# label: Target
+# description: Deployment name, Defaults to Main Deployment
+# schema:
+# type: string
+# default: ""
+# - variable: minReplicas
+# label: Minimum Replicas
+# schema:
+# type: int
+# default: 1
+# - variable: maxReplicas
+# label: Maximum Replicas
+# schema:
+# type: int
+# default: 5
+# - variable: targetCPUUtilizationPercentage
+# label: Target CPU Utilization Percentage
+# schema:
+# type: int
+# default: 80
+# - variable: targetMemoryUtilizationPercentage
+# label: Target Memory Utilization Percentage
+# schema:
+# type: int
+# default: 80
+ - variable: networkPolicy
+ group: Advanced
+ label: (Advanced) Network Policy
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: netPolicyEntry
+ label: Network Policy Entry
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: name
+ label: Name
+ schema:
+ type: string
+ required: true
+ default: ""
+ - variable: enabled
+ label: Enabled
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: policyType
+ label: Policy Type
+ schema:
+ type: string
+ default: ""
+ enum:
+ - value: ""
+ description: Default
+ - value: ingress
+ description: Ingress
+ - value: egress
+ description: Egress
+ - value: ingress-egress
+ description: Ingress and Egress
+ - variable: egress
+ label: Egress
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: egressEntry
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: to
+ label: To
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: toEntry
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: ipBlock
+ label: IP Block
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: cidr
+ label: CIDR
+ schema:
+ type: string
+ default: ""
+ - variable: except
+ label: Except
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: exceptint
+ label: ""
+ schema:
+ type: string
+ - variable: namespaceSelector
+ label: Namespace Selector
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: matchExpressions
+ label: Match Expressions
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: expressionEntry
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: key
+ label: Key
+ schema:
+ type: string
+ - variable: operator
+ label: Operator
+ schema:
+ type: string
+ default: TCP
+ enum:
+ - value: In
+ description: In
+ - value: NotIn
+ description: NotIn
+ - value: Exists
+ description: Exists
+ - value: DoesNotExist
+ description: DoesNotExist
+ - variable: values
+ label: Values
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: value
+ label: ""
+ schema:
+ type: string
+ - variable: podSelector
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: matchExpressions
+ label: Match Expressions
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: expressionEntry
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: key
+ label: Key
+ schema:
+ type: string
+ - variable: operator
+ label: Operator
+ schema:
+ type: string
+ default: TCP
+ enum:
+ - value: In
+ description: In
+ - value: NotIn
+ description: NotIn
+ - value: Exists
+ description: Exists
+ - value: DoesNotExist
+ description: DoesNotExist
+ - variable: values
+ label: Values
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: value
+ label: ""
+ schema:
+ type: string
+ - variable: ports
+ label: Ports
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: portsEntry
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: port
+ label: Port
+ schema:
+ type: int
+ - variable: endPort
+ label: End Port
+ schema:
+ type: int
+ - variable: protocol
+ label: Protocol
+ schema:
+ type: string
+ default: TCP
+ enum:
+ - value: TCP
+ description: TCP
+ - value: UDP
+ description: UDP
+ - value: SCTP
+ description: SCTP
+ - variable: ingress
+ label: Ingress
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: ingressEntry
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: from
+ label: From
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: fromEntry
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: ipBlock
+ label: IP Block
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: cidr
+ label: CIDR
+ schema:
+ type: string
+ default: ""
+ - variable: except
+ label: Except
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: exceptint
+ label: ""
+ schema:
+ type: string
+ - variable: namespaceSelector
+ label: Namespace Selector
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: matchExpressions
+ label: Match Expressions
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: expressionEntry
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: key
+ label: Key
+ schema:
+ type: string
+ - variable: operator
+ label: Operator
+ schema:
+ type: string
+ default: TCP
+ enum:
+ - value: In
+ description: In
+ - value: NotIn
+ description: NotIn
+ - value: Exists
+ description: Exists
+ - value: DoesNotExist
+ description: DoesNotExist
+ - variable: values
+ label: Values
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: value
+ label: ""
+ schema:
+ type: string
+ - variable: podSelector
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: matchExpressions
+ label: Match Expressions
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: expressionEntry
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: key
+ label: Key
+ schema:
+ type: string
+ - variable: operator
+ label: Operator
+ schema:
+ type: string
+ default: TCP
+ enum:
+ - value: In
+ description: In
+ - value: NotIn
+ description: NotIn
+ - value: Exists
+ description: Exists
+ - value: DoesNotExist
+ description: DoesNotExist
+ - variable: values
+ label: Values
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: value
+ label: ""
+ schema:
+ type: string
+ - variable: ports
+ label: Ports
+ schema:
+ type: list
+ default: []
+ items:
+ - variable: portsEntry
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: port
+ label: Port
+ schema:
+ type: int
+ - variable: endPort
+ label: End Port
+ schema:
+ type: int
+ - variable: protocol
+ label: Protocol
+ schema:
+ type: string
+ default: TCP
+ enum:
+ - value: TCP
+ description: TCP
+ - value: UDP
+ description: UDP
+ - value: SCTP
+ description: SCTP
+ - variable: addons
+ group: Addons
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: codeserver
+ label: Codeserver
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enabled
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: service
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: type
+ label: Service Type
+ description: "ClusterIP's are only internally available and Loadbalancer exposes the service using the system loadbalancer"
+ schema:
+ type: string
+ default: LoadBalancer
+ enum:
+ - value: NodePort
+ description: Deprecated CHANGE THIS
+ - value: ClusterIP
+ description: ClusterIP
+ - value: LoadBalancer
+ description: LoadBalancer
+ - variable: loadBalancerIP
+ label: LoadBalancer IP
+ description: "MetalLB Only: Selects the Loadbalancer IP to expose on. Required when using PortalButton with MetalLB"
+ schema:
+ show_if: [["type", "=", "LoadBalancer"]]
+ type: string
+ default: ""
+ - variable: ports
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: codeserver
+ label: ""
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: port
+ label: Port
+ schema:
+ type: int
+ default: 36107
+ - variable: envList
+ label: Codeserver Environment Variables
+ schema:
+ type: list
+ show_if: [["type", "!=", "disabled"]]
+ default: []
+ items:
+ - variable: envItem
+ label: Environment Variable
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: name
+ label: Name
+ schema:
+ type: string
+ required: true
+ - variable: value
+ label: Value
+ schema:
+ type: string
+ required: true
+ - variable: netshoot
+ label: Netshoot
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: enabled
+ label: Enabled
+ schema:
+ type: boolean
+ default: false
+ show_subquestions_if: true
+ subquestions:
+ - variable: envList
+ label: Netshoot Environment Variables
+ schema:
+ type: list
+ show_if: [["type", "!=", "disabled"]]
+ default: []
+ items:
+ - variable: envItem
+ label: Environment Variable
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: name
+ label: Name
+ schema:
+ type: string
+ required: true
+ - variable: value
+ label: Value
+ schema:
+ type: string
+ required: true
+ - variable: vpn
+ label: VPN
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: type
+ label: Type
+ schema:
+ type: string
+ default: disabled
+ enum:
+ - value: disabled
+ description: disabled
+ - value: gluetun
+ description: Gluetun
+ - value: tailscale
+ description: Tailscale
+ - value: openvpn
+ description: OpenVPN (Deprecated)
+ - value: wireguard
+ description: Wireguard (Deprecated)
+ - variable: openvpn
+ label: OpenVPN Settings
+ schema:
+ additional_attrs: true
+ type: dict
+ show_if: [["type", "=", "openvpn"]]
+ attrs:
+ - variable: username
+ label: Authentication Username (Optional)
+ description: Authentication Username, Optional
+ schema:
+ type: string
+ default: ""
+ - variable: password
+ label: Authentication Password
+ description: Authentication Credentials
+ schema:
+ type: string
+ show_if: [["username", "!=", ""]]
+ default: ""
+ required: true
+ - variable: tailscale
+ label: Tailscale Settings
+ schema:
+ additional_attrs: true
+ type: dict
+ show_if: [["type", "=", "tailscale"]]
+ attrs:
+ - variable: authkey
+ label: Authentication Key
+ description: Provide an auth key to automatically authenticate the node as your user account.
+ schema:
+ type: string
+ private: true
+ default: ""
+ - variable: auth_once
+ label: Auth Once
+ description: Only attempt to log in if not already logged in.
+ schema:
+ type: boolean
+ default: true
+ - variable: accept_dns
+ label: Accept DNS
+ description: Accept DNS configuration from the admin console.
+ schema:
+ type: boolean
+ default: false
+ - variable: userspace
+ label: Userspace
+ description: Userspace Networking mode allows running Tailscale where you do not have access to create a VPN tunnel device.
+ schema:
+ type: boolean
+ default: false
+ - variable: routes
+ label: Routes
+ description: Expose physical subnet routes to your entire Tailscale network.
+ schema:
+ type: string
+ default: ""
+ - variable: dest_ip
+ label: Destination IP
+ description: Tells the DNAT mechanism which Destination IP to set in the IP header, and where to send packets that are matched.
+ schema:
+ type: string
+ default: ""
+ - variable: sock5_server
+ label: Sock5 Server
+ description: The address on which to listen for SOCKS5 proxying into the tailscale net.
+ schema:
+ type: string
+ default: ""
+ - variable: outbound_http_proxy_listen
+ label: Outbound HTTP Proxy Listen
+ description: The address on which to listen for HTTP proxying into the tailscale net.
+ schema:
+ type: string
+ default: ""
+ - variable: extra_args
+ label: Extra Args
+ description: Extra Args
+ schema:
+ type: string
+ default: ""
+ - variable: daemon_extra_args
+ label: Tailscale Daemon Extra Args
+ description: Tailscale Daemon Extra Args
+ schema:
+ type: string
+ default: ""
+ - variable: killSwitch
+ label: Enable Killswitch
+ schema:
+ type: boolean
+ show_if: [["type", "!=", "disabled"]]
+ default: true
+ - variable: excludedNetworks_IPv4
+ label: Killswitch Excluded IPv4 networks
+ description: List of Killswitch Excluded IPv4 Addresses
+ schema:
+ type: list
+ show_if: [["type", "!=", "disabled"]]
+ default: []
+ items:
+ - variable: networkv4
+ label: IPv4 Network
+ schema:
+ type: string
+ required: true
+ - variable: excludedNetworks_IPv6
+ label: Killswitch Excluded IPv6 networks
+ description: "List of Killswitch Excluded IPv6 Addresses"
+ schema:
+ type: list
+ show_if: [["type", "!=", "disabled"]]
+ default: []
+ items:
+ - variable: networkv6
+ label: IPv6 Network
+ schema:
+ type: string
+ required: true
+ - variable: configFile
+ label: VPN Config File Location
+ schema:
+ type: string
+ show_if: [["type", "!=", "disabled"]]
+ default: ""
+
+ - variable: envList
+ label: VPN Environment Variables
+ schema:
+ type: list
+ show_if: [["type", "!=", "disabled"]]
+ default: []
+ items:
+ - variable: envItem
+ label: Environment Variable
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: name
+ label: Name
+ schema:
+ type: string
+ required: true
+ - variable: value
+ label: Value
+ schema:
+ type: string
+ required: true
+ max_length: 10240
+ - variable: docs
+ group: Documentation
+ label: Please read the documentation at https://truecharts.org
+ description: Please read the documentation at
+
https://truecharts.org
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: confirmDocs
+ label: I have checked the documentation
+ schema:
+ type: boolean
+ default: true
+ - variable: donateNag
+ group: Documentation
+ label: Please consider supporting TrueCharts, see https://truecharts.org/sponsor
+ description: Please consider supporting TrueCharts, see
+
https://truecharts.org/sponsor
+ schema:
+ additional_attrs: true
+ type: dict
+ attrs:
+ - variable: confirmDonate
+ label: I have considered donating
+ schema:
+ type: boolean
+ default: true
+ hidden: true
diff --git a/stable/xen-orchestra/4.0.33/templates/NOTES.txt b/incubator/authentik/13.0.11/templates/NOTES.txt
similarity index 100%
rename from stable/xen-orchestra/4.0.33/templates/NOTES.txt
rename to incubator/authentik/13.0.11/templates/NOTES.txt
diff --git a/incubator/authentik/13.0.11/templates/_config.tpl b/incubator/authentik/13.0.11/templates/_config.tpl
new file mode 100644
index 00000000000..75dacda7771
--- /dev/null
+++ b/incubator/authentik/13.0.11/templates/_config.tpl
@@ -0,0 +1,129 @@
+{{/* Define the configmaps */}}
+{{- define "authentik.configmaps" -}}
+
+ {{- $fullname := include "tc.v1.common.lib.chart.names.fullname" $ -}}
+ {{- $serverHost := printf "https://%v:%v" $fullname .Values.service.main.ports.main.port -}}
+ {{- $host := .Values.chartContext.APPURL }}
+server:
+ enabled: true
+ data:
+ AUTHENTIK_LISTEN__HTTPS: {{ printf "0.0.0.0:%v" .Values.service.main.ports.main.port | quote }}
+ AUTHENTIK_LISTEN__HTTP: {{ printf "0.0.0.0:%v" .Values.service.http.ports.http.port | quote }}
+ AUTHENTIK_LISTEN__METRICS: {{ printf "0.0.0.0:%v" .Values.service.servermetrics.ports.servermetrics.port | quote }}
+
+server-worker:
+ enabled: true
+ data:
+ {{/* Dependencies */}}
+ AUTHENTIK_POSTGRESQL__NAME: {{ .Values.cnpg.main.database }}
+ AUTHENTIK_POSTGRESQL__USER: {{ .Values.cnpg.main.user }}
+ AUTHENTIK_POSTGRESQL__HOST: {{ .Values.cnpg.main.creds.host }}
+ AUTHENTIK_POSTGRESQL__PORT: "5432"
+ AUTHENTIK_REDIS__HOST: {{ .Values.redis.creds.plain }}
+ AUTHENTIK_REDIS__PORT: "6379"
+
+ {{/* Outposts */}}
+ AUTHENTIK_OUTPOSTS__DISCOVER: "false"
+ AUTHENTIK_OUTPOSTS__DISABLE_EMBEDDED_OUTPOST: {{ .Values.authentik.outposts.disableEmbeddedOutpost | quote }}
+
+ {{/* GeoIP */}}
+ {{- $geoipPath := (printf "/geoip/%v.mmdb" .Values.authentik.geoip.editionID) -}}
+ {{- if not .Values.authentik.geoip.enabled -}}
+ {{- $geoipPath = "/tmp/non-existent-file" -}}
+ {{- end -}}
+
+ {{- if or .Values.authentik.geoip.enabled .Values.authentik.geoip.wipeBuiltInDb }}
+ AUTHENTIK_GEOIP: {{ $geoipPath }}
+ {{- end }}
+
+ {{/* Mail */}}
+ AUTHENTIK_EMAIL__USE_TLS: {{ .Values.authentik.email.useTLS | quote }}
+ AUTHENTIK_EMAIL__USE_SSL: {{ .Values.authentik.email.useSSL | quote }}
+ {{- with .Values.authentik.email.port }}
+ AUTHENTIK_EMAIL__PORT: {{ . | quote }}
+ {{- end -}}
+ {{- with .Values.authentik.email.timeout }}
+ AUTHENTIK_EMAIL__TIMEOUT: {{ . | quote }}
+ {{- end }}
+
+ {{/* LDAP */}}
+ AUTHENTIK_LDAP__TASK_TIMEOUT_HOURS: {{ .Values.authentik.ldap.taskTimeoutHours | quote }}
+ AUTHENTIK_LDAP__TLS__CIPHERS: {{ .Values.authentik.ldap.tlsCiphers | quote }}
+
+ {{/* Logging */}}
+ AUTHENTIK_LOG_LEVEL: {{ .Values.authentik.logging.logLevel }}
+
+ {{/* Error Reporting */}}
+ AUTHENTIK_ERROR_REPORTING__ENABLED: {{ .Values.authentik.errorReporting.enabled | quote }}
+ AUTHENTIK_ERROR_REPORTING__SEND_PII: {{ .Values.authentik.errorReporting.sendPII | quote }}
+ {{- with .Values.authentik.errorReporting.environment }}
+ AUTHENTIK_ERROR_REPORTING__ENVIRONMENT: {{ . | quote }}
+ {{- end -}}
+ {{- with .Values.authentik.errorReporting.sentryDSN }}
+ AUTHENTIK_ERROR_REPORTING__SENTRY_DSN: {{ . | quote }}
+ {{- end -}}
+ {{- with .Values.authentik.general.avatars }}
+ AUTHENTIK_AVATARS: {{ join "," . }}
+ {{- end -}}
+ {{- with .Values.authentik.general.footerLinks }}
+ AUTHENTIK_FOOTER_LINKS: {{ toJson . | squote }}
+ {{- end }}
+
+ {{/* General */}}
+ AUTHENTIK_DISABLE_UPDATE_CHECK: {{ .Values.authentik.general.disableUpdateCheck | quote }}
+ AUTHENTIK_DISABLE_STARTUP_ANALYTICS: {{ .Values.authentik.general.disableStartupAnalytics | quote }}
+ AUTHENTIK_DEFAULT_USER_CHANGE_NAME: {{ .Values.authentik.general.allowUserChangeName | quote }}
+ AUTHENTIK_DEFAULT_USER_CHANGE_EMAIL: {{ .Values.authentik.general.allowUserChangeEmail | quote }}
+ AUTHENTIK_DEFAULT_USER_CHANGE_USERNAME: {{ .Values.authentik.general.allowUserChangeUsername | quote }}
+ AUTHENTIK_GDPR_COMPLIANCE: {{ .Values.authentik.general.gdprCompliance | quote }}
+ AUTHENTIK_DEFAULT_TOKEN_LENGTH: {{ .Values.authentik.general.tokenLength | quote }}
+ AUTHENTIK_IMPERSONATION: {{ .Values.authentik.general.impersonation | quote }}
+
+{{- if .Values.authentik.outposts.proxy.enabled }}
+proxy:
+ enabled: true
+ data:
+ AUTHENTIK_LISTEN__HTTP: {{ printf "0.0.0.0:%v" .Values.service.proxy.ports.http.port | quote }}
+ AUTHENTIK_LISTEN__HTTPS: {{ printf "0.0.0.0:%v" .Values.service.proxy.ports.https.port | quote }}
+ AUTHENTIK_LISTEN__METRICS: {{ printf "0.0.0.0:%v" .Values.service.proxymetrics.ports.proxymetrics.port | quote }}
+ AUTHENTIK_HOST: {{ $serverHost }}
+ AUTHENTIK_INSECURE: "true"
+ # TODO: node ip or ingress host
+ AUTHENTIK_HOST_BROWSER: {{ $host }}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.radius.enabled }}
+radius:
+ enabled: true
+ data:
+ AUTHENTIK_LISTEN__RADIUS: {{ printf "0.0.0.0:%v" .Values.service.radius.ports.radius.port | quote }}
+ AUTHENTIK_LISTEN__METRICS: {{ printf "0.0.0.0:%v" .Values.service.radiusmetrics.ports.radiusmetrics.port | quote }}
+ AUTHENTIK_HOST: {{ $serverHost }}
+ AUTHENTIK_INSECURE: "true"
+ # TODO: node ip or ingress host
+ AUTHENTIK_HOST_BROWSER: {{ $host }}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.ldap.enabled }}
+ldap:
+ enabled: true
+ data:
+ AUTHENTIK_LISTEN__LDAP: {{ printf "0.0.0.0:%v" .Values.service.ldap.ports.ldap.port | quote }}
+ AUTHENTIK_LISTEN__LDAPS: {{ printf "0.0.0.0:%v" .Values.service.ldaps.ports.ldaps.port | quote }}
+ AUTHENTIK_LISTEN__METRICS: {{ printf "0.0.0.0:%v" .Values.service.ldapmetrics.ports.ldapmetrics.port | quote }}
+ AUTHENTIK_HOST: {{ $serverHost }}
+ AUTHENTIK_INSECURE: "true"
+ # TODO: node ip or ingress host
+ AUTHENTIK_HOST_BROWSER: {{ $host }}
+{{- end -}}
+
+{{- if .Values.authentik.geoip.enabled }}
+geoip:
+ enabled: true
+ data:
+ GEOIPUPDATE_EDITION_IDS: {{ .Values.authentik.geoip.editionID }}
+ GEOIPUPDATE_FREQUENCY: {{ .Values.authentik.geoip.frequency | quote }}
+ GEOIPUPDATE_DB_DIR: {{ .Values.persistence.geoip.targetSelector.geoip.geoip.mountPath | quote }}
+{{- end -}}
+
+{{- end -}}
diff --git a/incubator/authentik/13.0.11/templates/_secret.tpl b/incubator/authentik/13.0.11/templates/_secret.tpl
new file mode 100644
index 00000000000..7104932c349
--- /dev/null
+++ b/incubator/authentik/13.0.11/templates/_secret.tpl
@@ -0,0 +1,74 @@
+{{/* Define the secrets */}}
+{{- define "authentik.secrets" -}}
+
+ {{- $fullname := include "tc.v1.common.lib.chart.names.fullname" $ -}}
+ {{- $fetchname := printf "%v-server-worker" $fullname -}}
+
+ {{- $secretKey := randAlphaNum 32 -}}
+ {{- with (lookup "v1" "Secret" .Release.Namespace $fetchname) -}}
+ {{ $secretKey = index .data "AUTHENTIK_SECRET_KEY" }}
+ {{- end }}
+
+server-worker:
+ enabled: true
+ data:
+ {{/* Dependencies */}}
+ AUTHENTIK_POSTGRESQL__PASSWORD: {{ .Values.cnpg.main.creds.password | trimAll "\"" }}
+ AUTHENTIK_REDIS__PASSWORD: {{ .Values.redis.creds.redisPassword | trimAll "\"" }}
+
+ {{/* Secret Key */}}
+ AUTHENTIK_SECRET_KEY: {{ $secretKey }}
+
+ {{/* Initial credentials */}}
+ AUTHENTIK_BOOTSTRAP_EMAIL: {{ .Values.authentik.credentials.email | quote }}
+ AUTHENTIK_BOOTSTRAP_PASSWORD: {{ .Values.authentik.credentials.password | quote }}
+ {{- with .Values.authentik.credentials.bootstrapToken }}
+ AUTHENTIK_BOOTSTRAP_TOKEN: {{ . }}
+ {{- end }}
+
+ {{/* Mail */}}
+ {{- with .Values.authentik.email.host }}
+ AUTHENTIK_EMAIL__HOST: {{ . }}
+ {{- end -}}
+ {{- with .Values.authentik.email.user }}
+ AUTHENTIK_EMAIL__USERNAME: {{ . }}
+ {{- end -}}
+ {{- with .Values.authentik.email.pass }}
+ AUTHENTIK_EMAIL__PASSWORD: {{ . }}
+ {{- end -}}
+ {{- with .Values.authentik.email.from }}
+ AUTHENTIK_EMAIL__FROM: {{ . }}
+ {{- end -}}
+
+{{- if .Values.authentik.geoip.enabled }}
+geoip:
+ enabled: true
+ data:
+ GEOIPUPDATE_VERBOSE: "0"
+ GEOIPUPDATE_PRESERVE_FILE_TIMES: "1"
+ GEOIPUPDATE_ACCOUNT_ID: {{ .Values.authentik.geoip.accountID | quote }}
+ GEOIPUPDATE_LICENSE_KEY: {{ .Values.authentik.geoip.licenseKey | quote }}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.proxy.enabled }}
+proxy:
+ enabled: true
+ data:
+ AUTHENTIK_TOKEN: {{ .Values.authentik.outposts.proxy.token | quote }}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.radius.enabled }}
+radius:
+ enabled: true
+ data:
+ AUTHENTIK_TOKEN: {{ .Values.authentik.outposts.radius.token | quote }}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.ldap.enabled }}
+ldap:
+ enabled: true
+ data:
+ AUTHENTIK_TOKEN: {{ .Values.authentik.outposts.ldap.token | quote }}
+{{- end -}}
+
+{{- end -}}
diff --git a/incubator/authentik/13.0.11/templates/_validation.tpl b/incubator/authentik/13.0.11/templates/_validation.tpl
new file mode 100644
index 00000000000..5a1b5f029b8
--- /dev/null
+++ b/incubator/authentik/13.0.11/templates/_validation.tpl
@@ -0,0 +1,23 @@
+{{- define "authentik.validation" -}}
+ {{- range $outpost, $values := .Values.authentik.outposts -}}
+ {{- if (kindIs "dict" $values) -}}
+ {{- if and $values.enabled (not $values.token) -}}
+ {{- fail (printf "Authentik - Outpost [%v] is enabled, but [token] was not provided" ($outpost | upper)) -}}
+ {{- end -}}
+ {{- end -}}
+ {{- end -}}
+
+ {{- if .Values.authentik.geoip.enabled -}}
+ {{- if not .Values.authentik.geoip.accountID -}}
+ {{- fail "Authentik - GeoIP is enabled but [accountID] was not provided" -}}
+ {{- end -}}
+
+ {{- if not .Values.authentik.geoip.licenseKey -}}
+ {{- fail "Authentik - GeoIP is enabled but [licenseKey] was not provided" -}}
+ {{- end -}}
+
+ {{- if contains " " .Values.authentik.geoip.editionID -}}
+ {{- fail "Authentik - GeoIP is enabled but [editionID] cannot contain spaces" -}}
+ {{- end -}}
+ {{- end -}}
+{{- end -}}
diff --git a/incubator/authentik/13.0.11/templates/_waitAuthentik.tpl b/incubator/authentik/13.0.11/templates/_waitAuthentik.tpl
new file mode 100644
index 00000000000..b2421746cef
--- /dev/null
+++ b/incubator/authentik/13.0.11/templates/_waitAuthentik.tpl
@@ -0,0 +1,20 @@
+{{- define "authentik.wait.server" -}}
+{{- $fullname := (include "tc.v1.common.lib.chart.names.fullname" $) -}}
+{{- $serverUrl := printf "https://%v:%v/-/health/ready/" $fullname .Values.service.main.ports.main.port }}
+enabled: true
+type: init
+imageSelector: alpineImage
+command: /bin/sh
+args:
+ - -c
+ - |
+ echo "Waiting Authentik Server [{{ $serverUrl }}] to be ready..."
+ until wget --no-check-certificate --spider --quiet "{{ $serverUrl }}";
+ do
+ echo "Waiting Authentik Server [{{ $serverUrl }}] to be ready..."
+ sleep 3
+ done
+
+ echo "Authentik [{{ $serverUrl }}] is ready..."
+ echo "Starting Outpost..."
+{{- end -}}
diff --git a/incubator/authentik/13.0.11/templates/common.yaml b/incubator/authentik/13.0.11/templates/common.yaml
new file mode 100644
index 00000000000..f60f125473f
--- /dev/null
+++ b/incubator/authentik/13.0.11/templates/common.yaml
@@ -0,0 +1,97 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.v1.common.loader.init" . }}
+
+{{- include "authentik.validation" $ -}}
+
+{{/* Render secrets for authentik and friends */}}
+{{- $secrets := include "authentik.secrets" . | fromYaml -}}
+{{- if $secrets -}}
+ {{ $secrets := (mustMergeOverwrite .Values.secret $secrets) }}
+ {{- $_ := set .Values "secret" $secrets -}}
+{{- end -}}
+
+{{/* Render configmaps for authentik and friends */}}
+{{- $configmaps := include "authentik.configmaps" . | fromYaml -}}
+{{- if $configmaps -}}
+ {{ $configmaps := (mustMergeOverwrite .Values.configmap $configmaps) }}
+ {{- $_ := set .Values "configmap" $configmaps -}}
+{{- end -}}
+
+{{- if .Values.authentik.general.overwriteDefaultBlueprints -}}
+ {{- $_ := set .Values.persistence.blueprints.targetSelector.worker.worker "mountPath" "/blueprints" -}}
+{{- end -}}
+
+{{- if .Values.authentik.geoip.enabled -}}
+ {{- $_ := set .Values.workload.geoip "enabled" true -}}
+{{- else -}}
+ {{- $_ := set .Values.workload.geoip "enabled" false -}}
+ {{- $_ := set .Values.persistence.geoip "enabled" false -}}
+{{- end -}}
+
+{{- if or .Values.authentik.geoip.enabled .Values.authentik.geoip.wipeBuiltInDb -}}
+ {{- $_ := set .Values.persistence.geoip "enabled" true -}}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.proxy.enabled -}}
+ {{- $_ := set .Values.workload.proxy "enabled" true -}}
+ {{- if not .Values.workload.proxy.podSpec.initContainers -}}
+ {{- $_ := set .Values.workload.proxy.podSpec "initContainers" dict -}}
+ {{- end -}}
+ {{- $_ := set .Values.workload.proxy.podSpec.initContainers "wait-server" (include "authentik.wait.server" . | fromYaml) -}}
+ {{- $_ := set .Values.service.proxy "enabled" true -}}
+ {{- $_ := set .Values.service.proxymetrics "enabled" true -}}
+ {{- $_ := set .Values.metrics.proxymetrics "enabled" true -}}
+{{- else -}}
+ {{- $_ := set .Values.workload.proxy "enabled" false -}}
+ {{- $_ := set .Values.service.proxy "enabled" false -}}
+ {{- $_ := set .Values.service.proxymetrics "enabled" false -}}
+ {{- $_ := set .Values.metrics.proxymetrics "enabled" false -}}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.radius.enabled -}}
+ {{- $_ := set .Values.workload.radius "enabled" true -}}
+ {{- if not .Values.workload.radius.podSpec.initContainers -}}
+ {{- $_ := set .Values.workload.radius.podSpec "initContainers" dict -}}
+ {{- end -}}
+ {{- $_ := set .Values.workload.radius.podSpec.initContainers "wait-server" (include "authentik.wait.server" . | fromYaml) -}}
+ {{- $_ := set .Values.service.radius "enabled" true -}}
+ {{- $_ := set .Values.service.radiusmetrics "enabled" true -}}
+ {{- $_ := set .Values.metrics.radiusmetrics "enabled" true -}}
+{{- else -}}
+ {{- $_ := set .Values.workload.radius "enabled" false -}}
+ {{- $_ := set .Values.service.radius "enabled" false -}}
+ {{- $_ := set .Values.service.radiusmetrics "enabled" false -}}
+ {{- $_ := set .Values.metrics.radiusmetrics "enabled" false -}}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.ldap.enabled -}}
+ {{- $_ := set .Values.workload.ldap "enabled" true -}}
+ {{- if not .Values.workload.ldap.podSpec.initContainers -}}
+ {{- $_ := set .Values.workload.ldap.podSpec "initContainers" dict -}}
+ {{- end -}}
+ {{- $_ := set .Values.workload.ldap.podSpec.initContainers "wait-server" (include "authentik.wait.server" . | fromYaml) -}}
+ {{- $_ := set .Values.service.ldap "enabled" true -}}
+ {{- $_ := set .Values.service.ldaps "enabled" true -}}
+ {{- $_ := set .Values.service.ldapmetrics "enabled" true -}}
+ {{- $_ := set .Values.metrics.ldapmetrics "enabled" true -}}
+{{- else -}}
+ {{- $_ := set .Values.workload.ldap "enabled" false -}}
+ {{- $_ := set .Values.service.ldap "enabled" false -}}
+ {{- $_ := set .Values.service.ldaps "enabled" false -}}
+ {{- $_ := set .Values.service.ldapmetrics "enabled" false -}}
+ {{- $_ := set .Values.metrics.ldapmetrics "enabled" false -}}
+{{- end -}}
+
+{{/* FIXME: See values.yaml */}}
+{{- $_ := set .Values.service.servermetrics "enabled" false -}}
+{{- $_ := set .Values.service.proxymetrics "enabled" false -}}
+{{- $_ := set .Values.service.radiusmetrics "enabled" false -}}
+{{- $_ := set .Values.service.ldapmetrics "enabled" false -}}
+
+{{- $_ := set .Values.metrics.servermetrics "enabled" false -}}
+{{- $_ := set .Values.metrics.proxymetrics "enabled" false -}}
+{{- $_ := set .Values.metrics.radiusmetrics "enabled" false -}}
+{{- $_ := set .Values.metrics.ldapmetrics "enabled" false -}}
+
+{{/* Render the templates */}}
+{{ include "tc.v1.common.loader.apply" . }}
diff --git a/stable/xen-orchestra/4.0.33/values.yaml b/incubator/authentik/13.0.11/values.yaml
similarity index 100%
rename from stable/xen-orchestra/4.0.33/values.yaml
rename to incubator/authentik/13.0.11/values.yaml
diff --git a/stable/xen-orchestra/4.0.33/app-changelog.md b/stable/xen-orchestra/4.0.33/app-changelog.md
deleted file mode 100644
index 5187be272b2..00000000000
--- a/stable/xen-orchestra/4.0.33/app-changelog.md
+++ /dev/null
@@ -1,9 +0,0 @@
-
-
-## [xen-orchestra-4.0.33](https://github.com/truecharts/charts/compare/xen-orchestra-4.0.32...xen-orchestra-4.0.33) (2023-07-29)
-
-### Chore
-
-- update helm general non-major ([#10955](https://github.com/truecharts/charts/issues/10955))
-
-
\ No newline at end of file
diff --git a/stable/xen-orchestra/4.0.33/CHANGELOG.md b/stable/xen-orchestra/4.0.34/CHANGELOG.md
similarity index 93%
rename from stable/xen-orchestra/4.0.33/CHANGELOG.md
rename to stable/xen-orchestra/4.0.34/CHANGELOG.md
index 5da9f26f13d..ae1eddfc70c 100644
--- a/stable/xen-orchestra/4.0.33/CHANGELOG.md
+++ b/stable/xen-orchestra/4.0.34/CHANGELOG.md
@@ -4,6 +4,15 @@
+## [xen-orchestra-4.0.34](https://github.com/truecharts/charts/compare/xen-orchestra-4.0.33...xen-orchestra-4.0.34) (2023-07-30)
+
+### Chore
+
+- update container image tccr.io/truecharts/xenorchestra to v5.119.0 ([#11043](https://github.com/truecharts/charts/issues/11043))
+
+
+
+
## [xen-orchestra-4.0.33](https://github.com/truecharts/charts/compare/xen-orchestra-4.0.32...xen-orchestra-4.0.33) (2023-07-29)
### Chore
@@ -85,15 +94,6 @@
-## [xen-orchestra-4.0.25](https://github.com/truecharts/charts/compare/xen-orchestra-4.0.24...xen-orchestra-4.0.25) (2023-06-14)
-
-### Chore
-
-- update container image tccr.io/truecharts/xenorchestra to v5.116.3 ([#9644](https://github.com/truecharts/charts/issues/9644))
-
-
-
-
## [xen-orchestra-4.0.25](https://github.com/truecharts/charts/compare/xen-orchestra-4.0.24...xen-orchestra-4.0.25) (2023-06-14)
### Chore
diff --git a/stable/xen-orchestra/4.0.33/Chart.yaml b/stable/xen-orchestra/4.0.34/Chart.yaml
similarity index 94%
rename from stable/xen-orchestra/4.0.33/Chart.yaml
rename to stable/xen-orchestra/4.0.34/Chart.yaml
index 5b84cf4848c..69d311a2936 100644
--- a/stable/xen-orchestra/4.0.33/Chart.yaml
+++ b/stable/xen-orchestra/4.0.34/Chart.yaml
@@ -1,5 +1,5 @@
apiVersion: v2
-appVersion: "5.118.0"
+appVersion: "5.119.0"
dependencies:
- name: common
repository: https://library-charts.truecharts.org
@@ -17,7 +17,7 @@ maintainers:
name: xen-orchestra
sources:
- https://github.com/truecharts/charts/tree/master/charts/stable/xen-orchestra
-version: 4.0.33
+version: 4.0.34
annotations:
truecharts.org/catagories: |
- management
diff --git a/stable/xen-orchestra/4.0.33/README.md b/stable/xen-orchestra/4.0.34/README.md
similarity index 100%
rename from stable/xen-orchestra/4.0.33/README.md
rename to stable/xen-orchestra/4.0.34/README.md
diff --git a/stable/xen-orchestra/4.0.34/app-changelog.md b/stable/xen-orchestra/4.0.34/app-changelog.md
new file mode 100644
index 00000000000..34381d31dd2
--- /dev/null
+++ b/stable/xen-orchestra/4.0.34/app-changelog.md
@@ -0,0 +1,9 @@
+
+
+## [xen-orchestra-4.0.34](https://github.com/truecharts/charts/compare/xen-orchestra-4.0.33...xen-orchestra-4.0.34) (2023-07-30)
+
+### Chore
+
+- update container image tccr.io/truecharts/xenorchestra to v5.119.0 ([#11043](https://github.com/truecharts/charts/issues/11043))
+
+
\ No newline at end of file
diff --git a/stable/xen-orchestra/4.0.33/app-readme.md b/stable/xen-orchestra/4.0.34/app-readme.md
similarity index 100%
rename from stable/xen-orchestra/4.0.33/app-readme.md
rename to stable/xen-orchestra/4.0.34/app-readme.md
diff --git a/stable/xen-orchestra/4.0.33/charts/common-12.15.0.tgz b/stable/xen-orchestra/4.0.34/charts/common-12.15.0.tgz
similarity index 100%
rename from stable/xen-orchestra/4.0.33/charts/common-12.15.0.tgz
rename to stable/xen-orchestra/4.0.34/charts/common-12.15.0.tgz
diff --git a/stable/xen-orchestra/4.0.33/ix_values.yaml b/stable/xen-orchestra/4.0.34/ix_values.yaml
similarity index 93%
rename from stable/xen-orchestra/4.0.33/ix_values.yaml
rename to stable/xen-orchestra/4.0.34/ix_values.yaml
index 45180de3c71..fe31b1b8aff 100644
--- a/stable/xen-orchestra/4.0.33/ix_values.yaml
+++ b/stable/xen-orchestra/4.0.34/ix_values.yaml
@@ -1,6 +1,6 @@
image:
repository: tccr.io/truecharts/xenorchestra
- tag: v5.118.0@sha256:416314393e58e02186f3b715b76b98560a6a7c073683e3a6ae1ecbb07ee6561f
+ tag: v5.119.0@sha256:479030d23f29bf423210c186325a8fb448fc9a91563c205e7a6f3a2fca74264c
pullPolicy: IfNotPresent
service:
main:
diff --git a/stable/xen-orchestra/4.0.33/questions.yaml b/stable/xen-orchestra/4.0.34/questions.yaml
similarity index 100%
rename from stable/xen-orchestra/4.0.33/questions.yaml
rename to stable/xen-orchestra/4.0.34/questions.yaml
diff --git a/stable/xen-orchestra/4.0.34/templates/NOTES.txt b/stable/xen-orchestra/4.0.34/templates/NOTES.txt
new file mode 100644
index 00000000000..efcb74cb772
--- /dev/null
+++ b/stable/xen-orchestra/4.0.34/templates/NOTES.txt
@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}
diff --git a/stable/xen-orchestra/4.0.33/templates/common.yaml b/stable/xen-orchestra/4.0.34/templates/common.yaml
similarity index 100%
rename from stable/xen-orchestra/4.0.33/templates/common.yaml
rename to stable/xen-orchestra/4.0.34/templates/common.yaml
diff --git a/stable/xen-orchestra/4.0.34/values.yaml b/stable/xen-orchestra/4.0.34/values.yaml
new file mode 100644
index 00000000000..e69de29bb2d