71 lines
1.8 KiB
YAML
71 lines
1.8 KiB
YAML
image:
|
|
repository: einar/meshcentral
|
|
pullPolicy: IfNotPresent
|
|
tag: latest@sha256:3a80bced48bdb0fa5b9043cfe51553d72ec01290f456b328c9e3921d19e472a5
|
|
|
|
securityContext:
|
|
readOnlyRootFilesystem: false
|
|
runAsNonRoot: false
|
|
|
|
podSecurityContext:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
|
|
env:
|
|
HOSTNAME: "my.domain.com"
|
|
# your hostname
|
|
REVERSE_PROXY: false
|
|
# set to your reverse proxy IP if you want to put meshcentral behind a reverse proxy
|
|
REVERSE_PROXY_TLS_PORT: ""
|
|
IFRAME: false
|
|
# set to true if you wish to enable iframe support
|
|
ALLOW_NEW_ACCOUNTS: true
|
|
# set to false if you want disable self-service creation of new accounts besides the first (admin)
|
|
WEBRTC: false
|
|
# set to true to enable WebRTC - per documentation it is not officially released with meshcentral, but is solid enough to work with. Use with caution
|
|
ALLOWPLUGINS: false
|
|
# set to true to allow plugins
|
|
LOCALSESSIONRECORDING: false
|
|
# set to true to allow session recording
|
|
MINIFY: true
|
|
# set to enable or disable minification of json, reduces traffic
|
|
|
|
service:
|
|
main:
|
|
ports:
|
|
main:
|
|
targetPort: 443
|
|
port: 10205
|
|
|
|
initContainers:
|
|
init:
|
|
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
|
command: ["/init/meshcentral/init.sh"]
|
|
volumeMounts:
|
|
- name: init
|
|
mountPath: "/init/meshcentral"
|
|
|
|
mongodb:
|
|
enabled: true
|
|
mongodbUsername: meshcentral
|
|
mongodbDatabase: meshcentral
|
|
existingSecret: "mongodbcreds"
|
|
|
|
persistence:
|
|
data:
|
|
enabled: true
|
|
mountPath: "/opt/meshcentral/meshcentral-data"
|
|
user:
|
|
enabled: true
|
|
mountPath: "/opt/meshcentral/meshcentral-files"
|
|
init:
|
|
enabled: "true"
|
|
mountPath: "/init/meshcentral"
|
|
noMount: true
|
|
readOnly: true
|
|
type: "custom"
|
|
volumeSpec:
|
|
configMap:
|
|
name: meshcentral-init
|
|
defaultMode: 0777
|