image: repository: ronivay/xen-orchestra tag: 5.145.0@sha256:a799d32d0d8481916d0680b0db156086e3dbdc2220ffdfd58a367219d1048621 pullPolicy: IfNotPresent service: main: ports: main: protocol: https port: 10324 persistence: xo-data: enabled: true mountPath: "/var/lib/xo-server" redis-data: enabled: true mountPath: "/var/lib/redis" portal: open: enabled: true securityContext: container: readOnlyRootFilesystem: false runAsNonRoot: false capabilities: add: - SYS_ADMIN runAsUser: 0 runAsGroup: 0 workload: main: podSpec: containers: main: probes: liveness: enabled: true type: exec command: - /healthcheck.sh readiness: enabled: true type: exec command: - /healthcheck.sh startup: enabled: true type: exec command: - /healthcheck.sh env: HTTPS_PORT: "{{ .Values.service.main.ports.main.port }}" # Just so it doesn't try to bind port 80 HTTP_PORT: "{{ add1 .Values.service.main.ports.main.port }}" REDIRECT_TO_HTTPS: true