Skip to content

Chart Values

This document explains the configurable parameters in the values.yaml file for the Kite Helm chart.

Global Settings

ParameterDescriptionDefault
replicaCountNumber of replicas for the Kite deployment.1
image.repositoryImage repository for the Kite container.ghcr.io/zxh326/kite
image.pullPolicyImage pull policy.IfNotPresent
image.tagImage tag. Overrides the chart's appVersion.""
imagePullSecretsSecrets for pulling images from a private repository.[]
nameOverrideOverride the chart name.""
fullnameOverrideOverride the full chart name.""

Multi-Cluster Configuration

ParameterDescriptionDefault
multiCluster.enabledEnable multi-cluster mode by mounting a kubeconfig.false
multiCluster.kubeconfig.fromContentCreate a secret from the kubeconfig content. If true, content must be provided.false
multiCluster.kubeconfig.contentThe kubeconfig file content in plain text. Used when fromContent is true.""
multiCluster.kubeconfig.existingSecretUse an existing secret containing the kubeconfig. If specified, fromContent is ignored.""
multiCluster.kubeconfig.secretKeyThe key in the secret that contains the kubeconfig. Used when existingSecret is specified.kubeconfig
multiCluster.prometheusPrometheus configuration for each cluster. The key is the cluster name, and the value is the Prometheus URL.{}
multiCluster.defaultPrometheusUrlDefault Prometheus URL for clusters without a specific configuration.""

Role Configuration

ParameterDescriptionDefault
roleConfig.rolesDefines custom roles with specific permissions (clusters, resources, namespaces, verbs).See values.yaml for admin and viewer roles.
roleConfig.roleMappingMaps users or OIDC groups to the defined roles.[]

Authentication and Authorization

ParameterDescriptionDefault
jwtSecretThe secret key for signing JWT tokens."your_jwt_secret_key_here"
basicAuth.enabledEnable basic authentication.true
basicAuth.usernameUsername for basic authentication."kite"
basicAuth.passwordPassword for basic authentication."password"
oauth.enabledEnable OAuth authentication.false
oauth.allowUsersComma-separated list of allowed users. * means all users are allowed."*"
oauth.redirectThe redirect URL for OAuth callbacks."http://localhost:8080/api/auth/callback"
oauth.providersConfiguration for OAuth providers.{}

Other Configurations

ParameterDescriptionDefault
extraEnvsExtra environment variables to be added to the container.[]
webhook.enabledEnable the webhook handler.false
webhook.usernameUsername for webhook authentication."kite"
webhook.passwordPassword for webhook authentication."password"

Service Account

ParameterDescriptionDefault
serviceAccount.createSpecifies whether a service account should be created.true
serviceAccount.automountAutomatically mount a ServiceAccount's API credentials.true
serviceAccount.annotationsAnnotations to add to the service account.{}
serviceAccount.nameThe name of the service account to use. If not set and create is true, a name is generated.""

RBAC

ParameterDescriptionDefault
rbac.createSpecifies whether RBAC resources should be created.true
rbac.rulesA list of RBAC rules.See values.yaml

Pod Configuration

ParameterDescriptionDefault
podAnnotationsAnnotations to add to the pod.{}
podLabelsLabels to add to the pod.{}
podSecurityContextSecurity context for the pod.{}
securityContextSecurity context for the container.{}

Service

ParameterDescriptionDefault
service.typeThe type of service to create.ClusterIP
service.portThe port the service will expose.8080

Ingress

ParameterDescriptionDefault
ingress.enabledEnable ingress resource.false
ingress.classNameThe class of the ingress."nginx"
ingress.annotationsAnnotations for the ingress.{}
ingress.hostsHost configuration for the ingress.See values.yaml
ingress.tlsTLS configuration for the ingress.[]

Resource Management

ParameterDescriptionDefault
resourcesCPU/Memory resource requests and limits.{}
nodeSelectorNode selector for pod assignment.{}
tolerationsTolerations for pod assignment.[]
affinityAffinity for pod assignment.{}

Probes

ParameterDescriptionDefault
livenessProbeConfiguration for the liveness probe.See values.yaml
readinessProbeConfiguration for the readiness probe.See values.yaml

Volumes

ParameterDescriptionDefault
volumesAdditional volumes to add to the deployment.[]
volumeMountsAdditional volume mounts to add to the container.[]

Released under the Apache License.