values.yaml Description

autoscaling.enabled

Enables autoscaling. When set to true, replicas is no longer applied.

autoscaling.maxReplicas

Sets maximum replicas for autoscaling.

autoscaling.metrics

Metrics to use for autoscaling

autoscaling.minReplicas

Sets minimum replicas for autoscaling.

cache.nodes

Nodes of the cache to use.

cache.type

Type of the cache to use. It defaults to no cache or a in memory cache depending on the service. To disable the cache, set to "noop". Can be set to "redis", "redis-sentinel" or "etcd", then the address of Redis (Sentinel) / etcd node(s) needs to be set to cache.nodes.

configRefs.graphConfigRef

Reference to an existing graph config.

configRefs.storageusersConfigRef

Reference to an existing storage-users config.

configRefs.webThemeAssetsConfigRef

Optional reference to an existing web theme assets config. Will be mounted to /var/lib/ocis/web/assets/themes/owncloud/assets for Web. Does not get autogenerated. Hint: if you set this, you’ll no longer be able to change the instance logo via the Web UI.

configRefs.webThemeConfigRef

Optional reference to an existing web theme config. Will be mounted to /var/lib/ocis/web/assets/themes/owncloud for Web. Does not get autogenerated. Hint: if you set this, you’ll no longer be able to change the instance logo via the Web UI.

debug.profiling

Profiling enables the http://<pod>:<debug-metrics>/debug/pprof endpoint to inspect various Go runtime internals. You can use the endpoint on your machine by forwarding the port, eg: kubectl port-forward -n ocis pod/authbasic-8587dc9d64-fs24l 9147:9147 and then accessing the port on https://localhost:9147/debug/pprof or using the pprof command line tool: go tool pprof -web http://localhost:9147/debug/pprof/symbol\?seconds\=10

deploymentStrategy

Deployment strategy.

externalDomain

Domain where oCIS is reachable for the outside world

extraLabels

Custom labels for all manifests

extraResources

Extra resources to be included.

features.appsIntegration.enabled

Enables the apps integration.

features.appsIntegration.mimetypes

Mimetype configuration. Let’s you configure a mimetypes' default application, if it is allowed to create a new file and more.

features.appsIntegration.wopiIntegration.officeSuites[0].enabled

Enables the office suite.

features.appsIntegration.wopiIntegration.officeSuites[0].iconURI

URI for the icon of the office suite. Will be displayed to the users.

features.appsIntegration.wopiIntegration.officeSuites[0].insecure

Disables SSL certificate checking for connections to the office suites http api. Not recommended for production installations.

features.appsIntegration.wopiIntegration.officeSuites[0].name

Name of the office suite. Will be displayed to the users.

features.appsIntegration.wopiIntegration.officeSuites[0].uri

URI of the office suite.

features.appsIntegration.wopiIntegration.officeSuites[1].disableChat

Disables Chat functionality of OnlyOffice

features.appsIntegration.wopiIntegration.officeSuites[1].enabled

Enables the office suite.

features.appsIntegration.wopiIntegration.officeSuites[1].iconURI

URI for the icon of the office suite. Will be displayed to the users.

features.appsIntegration.wopiIntegration.officeSuites[1].insecure

Disables SSL certificate checking for connections to the office suites http api. Not recommended for production installations.

features.appsIntegration.wopiIntegration.officeSuites[1].name

Name of the office suite. Will be displayed to the users.

features.appsIntegration.wopiIntegration.officeSuites[1].uri

URI of the office suite.

features.appsIntegration.wopiIntegration.wopiFolderURI

Base url to navigate back from the app to the containing folder in the file list.

features.appsIntegration.wopiIntegration.wopiFolderURIPathTemplate

Path template for the url to navigate back from the app to the containing folder in the file list. null uses the default value of oCIS, so that one also can set it to "" to not have a path template.

features.appsIntegration.wopiIntegration.wopiServerURI

URL of the cs3org/wopiserver. Can be deployed with this Chart.

features.archiver.maxNumFiles

Max number of files that can be packed into an archive.

features.archiver.maxSize

Max size in bytes of the zip archive the archiver can create.

features.basicAuthentication

Enable basic authentication. Not recommended for production installations.

features.demoUsers

Create demo users on the first startup. Not recommended for production installations.

features.edition

Edition of ownCloud Infinite Scale.

features.emailNotifications.branding.enabled

Enables mail branding. If enabled, you need to provide the text and html template ConfigMap. The image ConfigMap is optional.

features.emailNotifications.branding.htmlMailImagesConfigRef

Reference to a ConfigMap containing images that can be referenced from the html mail template. This ConfigMap is optional and can be omitted when images are not used.

features.emailNotifications.branding.htmlMailTemplatesConfigRef

Reference to a ConfigMap containing the html mail template. The template file must be named "email.html.tmpl". The default template can be seen here: https://github.com/owncloud/ocis/blob/master/services/notifications/pkg/email/templates/html/email.html.tmpl

features.emailNotifications.branding.textMailTemplatesConfigRef

Reference to a ConfigMap containing the text mail template. The template file must be named "email.text.tmpl". The default template can be seen here: https://github.com/owncloud/ocis/blob/master/services/notifications/pkg/email/templates/text/email.text.tmpl

features.emailNotifications.enabled

Enables email notifications.

features.emailNotifications.smtp.authentication

Authentication method for the SMTP communication. Possible values are ‘login’, ‘plain’, ‘crammd5’, ‘none’ If set to another value than none, a secret referenced by notificationsSmtpSecretRef needs to be present.

features.emailNotifications.smtp.encryption

Encryption method for the SMTP communication. Possible values are ‘starttls’, ‘ssl’, ‘ssltls’, ‘tls’ and ‘none’.

features.emailNotifications.smtp.host

SMTP host to connect to.

features.emailNotifications.smtp.port

Port of the SMTP host to connect to.

features.emailNotifications.smtp.sender

Sender address of emails that will be sent. Example: 'ownCloud <noreply@example.com>'

features.externalUserManagement.adminUUID

UUID of the inital admin user. If the given value matches a user’s value from features.externalUserManagement.oidc.userIDClaim, the admin role will be assigned. Consider that the UUID can be encoded in some LDAP deployment configurations like in .ldif files. These need to be decoded beforehand. Note: Enabling roleAssignment will disable adminUUID.

features.externalUserManagement.enabled

Enables external user management (and disables internal user management). Needs an external OpenID Connect Identity Provider and an external LDAP server.

features.externalUserManagement.ldap.bindDN

DN of the user to use to bind to the LDAP server. The password for the user needs to be set in the secret referenced by secretRefs.ldapSecretRef as reva-ldap-bind-password. The user needs to have permission to list users and groups.

features.externalUserManagement.ldap.certTrusted

Set only to false, if the certificate of your LDAP secure service is not trusted. If set to false, you need to put the CA cert of the LDAP secure server into the secret referenced by "ldapCaRef"

features.externalUserManagement.ldap.disableUsers

When using external user management, users can be set as disabled by either belonging to a group or using an ldap attribute.

features.externalUserManagement.ldap.disableUsers.disableMechanism

Enables disabling users if configured as "attribute" or "group"

features.externalUserManagement.ldap.disableUsers.disabledUsersGroupDN

Group that a user can be added to and by that being marked as disabled.

features.externalUserManagement.ldap.disableUsers.userEnabledAttribute

Attribute to use for disabling users.

features.externalUserManagement.ldap.group.baseDN

Search base DN for looking up LDAP groups.

features.externalUserManagement.ldap.group.createBaseDN

BaseDN where new groups are created and are considered as editable. All existing groups with a DN outside the features.externalUserManagement.ldap.group.createBaseDN will be treated as read-only groups. Defaults to the value features.externalUserManagement.ldap.group.baseDN. Only applicable if features.externalUserManagement.ldap.writeable is set to true

features.externalUserManagement.ldap.group.filter

LDAP filter to add to the default filters for group searches.

features.externalUserManagement.ldap.group.objectClass

The object class to use for groups in the default group search filter like groupOfNames.

features.externalUserManagement.ldap.group.schema.displayName

LDAP Attribute to use for the displayname of groups (often the same as groupname attribute).

features.externalUserManagement.ldap.group.schema.groupName

LDAP Attribute to use for the name of groups.

features.externalUserManagement.ldap.group.schema.id

LDAP Attribute to use as the unique ID for groups. This should be a stable globally unique ID like a UUID.

features.externalUserManagement.ldap.group.schema.idIsOctetString

Set this to true if the defined id attribute for groups is of the OCTETSTRING syntax. This is e.g. required when using the objectGUID attribute of Active Directory for the group ID`s.

features.externalUserManagement.ldap.group.schema.mail

LDAP Attribute to use for the email address of groups (can be empty).

features.externalUserManagement.ldap.group.schema.member

LDAP Attribute that is used for group members.

features.externalUserManagement.ldap.group.scope

LDAP search scope to use when looking up groups. Supported values are base, one and sub.

features.externalUserManagement.ldap.insecure

For self signed certificates, consider to put the CA cert of the LDAP secure server into the secret referenced by "ldapCaRef" Not recommended for production installations.

features.externalUserManagement.ldap.passwordModifyExOpEnabled

Use the Password Modify Extended Operation for updating user passwords.

features.externalUserManagement.ldap.readOnlyAttributes

If the LDAP server is set to writable in general, some user attributes can be restricted to read only in the UI. Note: This only disables editing in the UI. The readonly permissions need to be enforced in the LDAP server itself.

features.externalUserManagement.ldap.refintEnabled

Signals that the LDAP server has the refint plugin enabled, which makes some actions not needed.

features.externalUserManagement.ldap.uri

URI to connect to the LDAP secure server.

features.externalUserManagement.ldap.useServerUUID

If set to true, rely on the LDAP Server to generate a unique ID for users and groups, like when using 'entryUUID' as the user ID attribute.

features.externalUserManagement.ldap.user.baseDN

Search base DN for looking up LDAP users.

features.externalUserManagement.ldap.user.filter

LDAP filter to add to the default filters for user search like (objectclass=ownCloud).

features.externalUserManagement.ldap.user.objectClass

The object class to use for users in the default user search filter like inetOrgPerson.

features.externalUserManagement.ldap.user.schema.displayName

LDAP Attribute to use for the displayname of users.

features.externalUserManagement.ldap.user.schema.id

LDAP Attribute to use as the unique id for users. This should be a stable globally unique id like a UUID.

features.externalUserManagement.ldap.user.schema.idIsOctetString

Set this to true if the defined id attribute for users is of the OCTETSTRING syntax. This is e.g. required when using the objectGUID attribute of Active Directory for the user ID`s.

features.externalUserManagement.ldap.user.schema.mail

LDAP Attribute to use for the email address of users.

features.externalUserManagement.ldap.user.schema.userName

LDAP Attribute to use for username of users.

features.externalUserManagement.ldap.user.schema.userType

LDAP Attribute to distinguish between 'Member' and 'Guest' users. Default is 'ownCloudUserType'.

features.externalUserManagement.ldap.user.scope

LDAP search scope to use when looking up users. Supported values are base, one and sub.

features.externalUserManagement.ldap.user.substringFilterType

Type of substring search filter to use for substring searches for users. Possible values: initial for doing prefix only searches, final for doing suffix only searches or any for doing full substring searches

features.externalUserManagement.ldap.writeable

Writeable configures if oCIS is allowed to write to the LDAP server, to eg. create or edit users.

features.externalUserManagement.oidc.accessTokenVerifyMethod

OIDC Acces Token Verify Method Set to "jwt" or "none"

features.externalUserManagement.oidc.editAccountLink

Link to the OIDC provider’s user accessible account editing page. This will be shown to the user on the personal account page. When using Keycloak with the a realm named "ocis" this could point to eg. https://keycloak.owncloud.test/realms/ocis/account/

features.externalUserManagement.oidc.issuerURI

Issuer URI of the OpenID Connect Identity Provider. If the IDP doesn’t have valid / trusted SSL certificates, certificate validation can be disabled with the insecure.oidcIdpInsecure option.

features.externalUserManagement.oidc.roleAssignment

Configure OIDC role assignment. If activated, oCIS will read the role assigment from the OIDC token, see Automatic Role Assignments

features.externalUserManagement.oidc.roleAssignment.claim

The name of the OIDC claim holding the role assignment

features.externalUserManagement.oidc.roleAssignment.mapping

Configure the mapping for the role assignment

features.externalUserManagement.oidc.sessionManagementLink

Link to the OIDC provider’s user accessible session management. This will be shown to the user on the personal account page. When using Keycloak with the a realm named "ocis" this could point to eg. https://keycloak.owncloud.test/realms/ocis/account/

features.externalUserManagement.oidc.userIDClaim

Claim to take an unique user identifier from. It will be used to look up the user on the LDAP server.

features.externalUserManagement.oidc.userIDClaimAttributeMapping

Attribute mapping of for the userIDClaim. Set to userid if the claim specified in …​oidc.userIDClaim holds the value of the ldap user attribute specified in …​ldap.user.schema.id. Set to mail if the claim specified in …​oidc.userIDClaim holds the value of the ldap user attribute specified in …​ldap.user.schema.mail. Set to username if the claim specified in …​oidc.userIDClaim holds the value of the ldap user attribute specified in …​ldap.user.schema.userName.

features.externalUserManagement.oidc.webClientID

Specify the client ID which the web frontend will use

features.gdprReport.integrations

Controls the separate GDPR integrations

features.gdprReport.integrations.keycloak.basePath

Base URI of keycloak.

features.gdprReport.integrations.keycloak.clientID

Client ID to authenticate against keycloak with.

features.gdprReport.integrations.keycloak.clientRealm

Realm that the client ID is configured in, usually master.

features.gdprReport.integrations.keycloak.enabled

Enable keycloak data export.

features.gdprReport.integrations.keycloak.insecure

Disables SSL certificate checking for connections to the GDPR export service. Not recommended for production installations.

features.gdprReport.integrations.keycloak.userRealm

Realm that the users are in.

features.policies.enabled

Enables policies

features.policies.engineTimeout

Sets the timeout the rego expression evaluation can take. The timeout can be set as number followed by a unit identifier like ms, s, etc. Rules default to deny if the timeout was reached.

features.policies.policies

Sets the policies. Each policy file is defined by a fileName and a content. The content takes the rego script as text. For further information, please have a look at https://doc.owncloud.com/ocis/next/deployment/services/s-list/policies.html Attention: All scripts provided here will end up in a ConfigMap. The data stored in a ConfigMap cannot exceed 1 MiB. see https://kubernetes.io/docs/concepts/configuration/configmap/#:~:text=The%20data%20stored%20in%20a,separate%20database%20or%20file%20service.

features.quotas.default

Sets the default quota for spaces in bytes. So 1000 sets the default quota to 1KB. 0 means unlimited.

features.quotas.max

Sets the maximum quota for spaces in bytes. So 1000 sets the max quota to 1KB.

features.quotas.roles

Sets specific quotas for roles

features.roles.customRoles

Define the roles by providing the JSON text here.

features.roles.customRolesConfigRef

Define the roles by specifying a name of a ConfigMap which already contains the the role description (might also be defined in the extraResources section). The ConfigMap needs to contain a file named custom-roles.json which holds the role description in JSON format Please note that you have to restart the settings service manually if you change the content of you ConfigMap.

features.sharing.publiclink.writeableShareMustHavePassword

Enforce a password on writable public link shares.

features.sharing.users.resharing

Allow a share receiver to share the share with a 3rd person.

features.sharing.users.search.minLengthLimit

Minimum number of characters to enter before a client should start a search for Share receivers. This setting can be used to customize the user experience if e.g too many results are displayed.

features.virusscan.enabled

Enables virus scanning

features.virusscan.icap

Define icap parameters

features.virusscan.icap.service

Sets the service to be used in icap

features.virusscan.icap.timeout

Sets the timeout for icap scans

features.virusscan.icap.url

Sets the icap url

features.virusscan.infectedFileHandling

Define what should happen with infected files. Supported options are: 'delete', 'continue' and 'abort '. Delete will delete the file. Continue will mark the file as infected but continues further processing. Abort will keep the file in the uploads folder for further admin inspection and will not move it to its final destination.

features.virusscan.maxScanSize

Sets a maximum file size for scans. Only this many bytes of a file will be scanned. 0 means unlimited and is the default. Usable common abbreviations: [KB, KiB, GB, GiB, TB, TiB, PB, PiB, EB, EiB], example: 2GB.

http.cors.allow_origins

image.pullPolicy

Image pull policy

image.pullSecrets

Names of the secret containing the credentials to pull an image from the registry. More information how a secret can be defined at https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/ Note: These secrets also apply to initContainers, so you need to provide secrets for the initContainer image here as well.

image.repository

Image repository

image.sha

Image sha / digest (optional).

image.tag

Image tag. Defaults to the chart’s appVersion.

ingress.annotations

Ingress annotations.

ingress.enabled

Enables the Ingress.

ingress.ingressClassName

Ingress class to use. Uses the default ingress class if not set.

ingress.labels

Labels for the ingress.

ingress.tls

Ingress TLS configuration.

initContainerImage

InitContainer image used for oCIS services. Only used if services.xxx.persistence.chownInitContainer.enabled is set to true for at least one service.

initContainerImage.pullPolicy

Image pull policy

initContainerImage.repository

Image repository

initContainerImage.sha

Image sha / digest (optional).

initContainerImage.tag

Image tag.

insecure.ocisHttpApiInsecure

Disables SSL certificate checking for connections to the oCIS http apis. Not recommended for production installations.

insecure.oidcIdpInsecure

Disables SSL certificate checking for connections to the openID connect identity provider. Not recommended for production installations.

jobNodeSelector

Default nodeSelector to apply to all jobs, except per-service job nodeSelector configuration in services.<service-name>.jobNodeSelector is set.

jobResources

Default resources to apply to all jobs in services, except per-service resources configuration in services.<service-name>.jobResources is set. Best practice is to: - set memory request == memory limit (compare to https://home.robusta.dev/blog/kubernetes-memory-limit) - set cpu request and omit cpu limit (compare to https://home.robusta.dev/blog/stop-using-cpu-limits)

logging.color

Activates colorized log output. Not recommended for production installations.

logging.level

Log level. Valid values: panic, fatal, error, warn, info, debug, trace.

logging.pretty

Activates pretty log output. Not recommended for production installations.

messagingSystem.external.cluster

Cluster name to use with the messaging system.

messagingSystem.external.enabled

Use an external NATS messaging system instead of the internal one. Recommended for all production instances. Needs to be used if HighAvailability is needed. Needs to be used if oCIS shall be used by more than a 2-digit user count.

messagingSystem.external.endpoint

Endpoint of the messaging system.

messagingSystem.external.tls.certTrusted

Set only to false, if the certificate of your messaging system service is not trusted. If set to false, you need to put the CA cert of the messaging system server into the secret referenced by "messagingSystemCaRef"

messagingSystem.external.tls.enabled

Enables TLS encrypted communication with the messaging system. Recommended for production installations.

messagingSystem.external.tls.insecure

For self signed certificates, consider to put the CA cert of the messaging system secure server into the secret referenced by "messagingSystemCaRef" Not recommended for production installations.

monitoring

Service monitoring configuration. Requires the monitoring.coreos.com/v1 CRDs to be installed.

monitoring.enabled

Enable service monitoring.

monitoring.interval

Interval at which to scrape metrics.

monitoring.scrapeTimeout

Scrape timeout.

namespaceOverride

Override the deployment namespace of all resources in this Helm chart.

nodeSelector

Default nodeSelector to apply to all services, except per-service nodeSelector configuration in services.<service-name>.nodeSelector is set.

podDisruptionBudget

registry.nodes

Nodes of the service registry to use.

registry.type

Configure the service registry type. Defaults to "kubernetes". Can be set to "etcd" or "nats", then the address of etcd / nats node(s) needs to be set to registry.nodes.

replicas

Number of replicas for each scalable service. Has no effect when autoscaling.enabled is set to true.

resources

Default resources to apply to all services, except per-service resources configuration in services.<service-name>.resources is set. Best practice is to: - set memory request == memory limit (compare to https://home.robusta.dev/blog/kubernetes-memory-limit) - set cpu request and omit cpu limit (compare to https://home.robusta.dev/blog/stop-using-cpu-limits)

secretRefs.adminUserSecretRef

Reference to an existing admin user secret (see Secrets). Not used if features.externalUserManagement.enabled equals true.

secretRefs.gdprExportClientSecretRef

Reference to an existing keycloak client secret, used for the GDPR export. Only used if features.externalUserManagement.gdprExport.enabled equals true.

secretRefs.idpSecretRef

Reference to an existing IDP secret (see Secrets). Not used if features.externalUserManagement.enabled equals true.

secretRefs.jwtSecretRef

Reference to an existing JWT secret (see Secrets).

secretRefs.ldapCaRef

Reference to an existing LDAP certificate authority secret (see Secrets)

secretRefs.ldapCertRef

Reference to an existing LDAP cert secret (see Secrets). Not used if features.externalUserManagement.enabled equals true.

secretRefs.ldapSecretRef

Reference to an existing LDAP bind secret (see Secrets).

secretRefs.machineAuthApiKeySecretRef

Reference to an existing machine auth api key secret (see Secrets)

secretRefs.messagingSystemCaRef

Reference to an existing messaging system certificate authority secret (see Secrets)

secretRefs.notificationsSmtpSecretRef

Reference to an existing SMTP email server settings secret (see Secrets). Not used if features.emailNotifications.enabled equals false. Not used if features.emailNotifications.smtp.authentication equals none.

secretRefs.s3CredentialsSecretRef

Reference to an existing s3 secret (see Secrets) If not filled in, will attempt to use values in .storageusers.storageBackend.s3.driverConfig.s3ng instead.

secretRefs.storagesystemJwtSecretRef

Reference to an existing storage-system JWT secret (see Secrets)

secretRefs.storagesystemSecretRef

Reference to an existing storage-system secret (see Secrets)

secretRefs.thumbnailsSecretRef

Reference to an existing thumbnails transfer secret (see Secrets)

secretRefs.transferSecretSecretRef

Reference to an existing transfer secret (see Secrets)

securityContext.fsGroup

File system group for all volumes.

securityContext.fsGroupChangePolicy

File system group change policy for all volumes. Possible values "Always" and "OnRootMismatch". This will also apply to all services' chownInitContainer.

securityContext.runAsGroup

Group ID that all processes within any containers will run with.

securityContext.runAsUser

User ID that all processes within any containers will run with.

services.antivirus

ANTIVIRUS service. Not used if features.virusscan.enabled equals false.

services.antivirus.affinity

Affinity settings for the antivirus service. See the documentation of this setting in approvider for examples.

services.antivirus.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.antivirus.extraLabels

Per-service custom labels

services.antivirus.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.antivirus.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.antivirus.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.appprovider

APP PROVIDER service. Not used if features.appsIntegration.enabled equals false.

services.appprovider.affinity

Affinity settings for the approvider service.

services.appprovider.extraLabels

Per-service custom labels

services.appprovider.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.appprovider.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.appregistry

APP REGISTRY service. Not used if features.appsIntegration.enabled equals false.

services.appregistry.affinity

Affinity settings for the appregistry service. See the documentation of this setting in approvider for examples.

services.appregistry.extraLabels

Per-service custom labels

services.appregistry.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.appregistry.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.audit

AUDIT service.

services.audit.affinity

Affinity settings for the audit service. See the documentation of this setting in approvider for examples.

services.audit.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.audit.extraLabels

Per-service custom labels

services.audit.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.audit.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.audit.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.authbasic

AUTH BASIC service. Not used if features.externalUserManagement.enabled equals true.

services.authbasic.affinity

Affinity settings for the authbasic service. See the documentation of this setting in approvider for examples.

services.authbasic.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.authbasic.extraLabels

Per-service custom labels

services.authbasic.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.authbasic.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.authbasic.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.authmachine

AUTH MACHINE service.

services.authmachine.affinity

Affinity settings for the authmachine service. See the documentation of this setting in approvider for examples.

services.authmachine.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.authmachine.extraLabels

Per-service custom labels

services.authmachine.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.authmachine.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.authmachine.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.eventhistory

EVENT HISTORY service.

services.eventhistory.affinity

Affinity settings for the eventhistory service. See the documentation of this setting in approvider for examples.

services.eventhistory.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.eventhistory.extraLabels

Per-service custom labels

services.eventhistory.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.eventhistory.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.eventhistory.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.eventhistory.store

Per-service store configuration for the eventhistory service. Overrides the default setting from store if set.

services.frontend

FRONTEND service.

services.frontend.affinity

Affinity settings for the frontend service. See the documentation of this setting in approvider for examples.

services.frontend.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.frontend.extraLabels

Per-service custom labels

services.frontend.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.frontend.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.frontend.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.gateway

GATEWAY service.

services.gateway.affinity

Affinity settings for the gateway service. See the documentation of this setting in approvider for examples.

services.gateway.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.gateway.extraLabels

Per-service custom labels

services.gateway.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.gateway.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.gateway.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.graph

GRAPH service.

services.graph.affinity

Affinity settings for the graph service. See the documentation of this setting in approvider for examples.

services.graph.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.graph.extraLabels

Per-service custom labels

services.graph.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.graph.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.graph.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.groups

GROUPS service.

services.groups.affinity

Affinity settings for the groups service. See the documentation of this setting in approvider for examples.

services.groups.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.groups.extraLabels

Per-service custom labels

services.groups.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.groups.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.groups.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.idm

IDM service. Not used if features.externalUserManagement.enabled equals true.

services.idm.affinity

Affinity settings for the idm service. See the documentation of this setting in approvider for examples.

services.idm.extraLabels

Per-service custom labels

services.idm.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.idm.persistence

Persistence settings.

services.idm.persistence.accessModes

Persistent volume access modes. Needs to be ["ReadWriteMany"] when scaling this service beyond one instance.

services.idm.persistence.annotations

Persistent volume annotations.

services.idm.persistence.chownInitContainer

Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in initContainerImage will be used for this container.

services.idm.persistence.claimName

Use a custom name for the PVC instead of the default one.

services.idm.persistence.enabled

Enables persistence. Needs to be enabled on production installations, except features.externalUserManagement.enabled equals true. If not enabled, pod restarts will lead to data loss. Also scaling this service beyond one instance is not possible if the service instances don’t share the same storage.

services.idm.persistence.existingClaim

Use an existing PersistentVolumeClaim for persistence.

services.idm.persistence.finalizers

Persistent volume finalizers.

services.idm.persistence.selectorLabels

Persistent volume selector labels.

services.idm.persistence.size

Size of the persistent volume.

services.idm.persistence.storageClassName

Storage class to use. Uses the default storage class if not set.

services.idm.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.idp

IDP service. Not used if features.externalUserManagement.enabled equals true.

services.idp.affinity

Affinity settings for the idp service. See the documentation of this setting in approvider for examples.

services.idp.extraLabels

Per-service custom labels

services.idp.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.idp.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.nats

NATS service. Not used if messagingSystem.external.enabled equals true.

services.nats.affinity

Affinity settings for the nats service. See the documentation of this setting in approvider for examples.

services.nats.extraLabels

Per-service custom labels

services.nats.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.nats.persistence

Persistence settings.

services.nats.persistence.accessModes

Persistent volume access modes. Needs to be ["ReadWriteMany"] when scaling this service beyond one instance.

services.nats.persistence.annotations

Persistent volume annotations.

services.nats.persistence.chownInitContainer

Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in initContainerImage will be used for this container.

services.nats.persistence.claimName

Use a custom name for the PVC instead of the default one.

services.nats.persistence.enabled

Enables persistence. Needs to be enabled on production installations, except messagingSystem.external.enabled equals true. If not enabled, pod restarts will lead to data loss. Also scaling this service beyond one instance is not possible if the service instances don’t share the same storage.

services.nats.persistence.existingClaim

Use an existing PersistentVolumeClaim for persistence.

services.nats.persistence.finalizers

Persistent volume finalizers.

services.nats.persistence.selectorLabels

Persistent volume selector labels.

services.nats.persistence.size

Size of the persistent volume.

services.nats.persistence.storageClassName

Storage class to use. Uses the default storage class if not set.

services.nats.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.notifications

NOTIFICATIONS service. Not used if features.emailNotifications.enabled equals true.

services.notifications.affinity

Affinity settings for the notifications service. See the documentation of this setting in approvider for examples.

services.notifications.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.notifications.extraLabels

Per-service custom labels

services.notifications.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.notifications.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.notifications.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.ocdav

OCDAV service.

services.ocdav.affinity

Affinity settings for the ocdav service. See the documentation of this setting in approvider for examples.

services.ocdav.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.ocdav.extraLabels

Per-service custom labels

services.ocdav.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.ocdav.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.ocdav.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.ocs

OCS service.

services.ocs.affinity

Affinity settings for the ocs service. See the documentation of this setting in approvider for examples.

services.ocs.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.ocs.extraLabels

Per-service custom labels

services.ocs.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.ocs.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.ocs.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.policies

POLICIES service.

services.policies.affinity

Affinity settings for the policies service. See the documentation of this setting in approvider for examples.

services.policies.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.policies.extraLabels

Per-service custom labels

services.policies.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.policies.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.policies.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.postprocessing

POSTPROCESSING service.

services.postprocessing.affinity

Affinity settings for the postprocessing service. See the documentation of this setting in approvider for examples.

services.postprocessing.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.postprocessing.extraLabels

Per-service custom labels

services.postprocessing.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.postprocessing.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.postprocessing.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.postprocessing.store

Per-service store configuration for the eventhistory service. Overrides the default setting from store if set.

services.proxy

PROXY service.

services.proxy.affinity

Affinity settings for the proxy service. See the documentation of this setting in approvider for examples.

services.proxy.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.proxy.extraLabels

Per-service custom labels

services.proxy.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.proxy.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.proxy.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.search

SEARCH service.

services.search.affinity

Affinity settings for the search service. See the documentation of this setting in approvider for examples.

services.search.extraLabels

Per-service custom labels

services.search.extractor

Search Extractor settings.

services.search.extractor.sizeLimit

Configures the maximum file size in bytes that is allowed for content extraction. For the default value see https://doc.owncloud.com/ocis/next/deployment/services/s-list/search.html

services.search.extractor.tika.url

Set the URL to Tika. Only applicable if services.search.extractor.type == tika.

services.search.extractor.type

Configures the search extractor type to be used. Possible extractors: - basic: the default search extractor. - tika: the Tika search extractor. If set to this value, additional settings in the tika section apply.

services.search.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.search.persistence

Persistence settings.

services.search.persistence.accessModes

Persistent volume access modes. Needs to be ["ReadWriteMany"] when scaling this service beyond one instance.

services.search.persistence.annotations

Persistent volume annotations.

services.search.persistence.chownInitContainer

Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in initContainerImage will be used for this container.

services.search.persistence.claimName

Use a custom name for the PVC instead of the default one.

services.search.persistence.enabled

Enables persistence. Needs to be enabled on production installations. If not enabled, pod restarts will lead to data loss. Also scaling this service beyond one instance is not possible if the service instances don’t share the same storage.

services.search.persistence.existingClaim

Use an existing PersistentVolumeClaim for persistence.

services.search.persistence.finalizers

Persistent volume finalizers.

services.search.persistence.selectorLabels

Persistent volume selector labels.

services.search.persistence.size

Size of the persistent volume.

services.search.persistence.storageClassName

Storage class to use. Uses the default storage class if not set.

services.search.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.search.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.settings

SETTINGS service.

services.settings.affinity

Affinity settings for the settings service. See the documentation of this setting in approvider for examples.

services.settings.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.settings.extraLabels

Per-service custom labels

services.settings.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.settings.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.settings.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.sharing

SHARING service.

services.sharing.affinity

Affinity settings for the sharing service. See the documentation of this setting in approvider for examples.

services.sharing.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.sharing.extraLabels

Per-service custom labels

services.sharing.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.sharing.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.sharing.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.storagepubliclink

STORAGE-PUBLICLINK service.

services.storagepubliclink.affinity

Affinity settings for the storagepubliclink service. See the documentation of this setting in approvider for examples.

services.storagepubliclink.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.storagepubliclink.extraLabels

Per-service custom labels

services.storagepubliclink.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.storagepubliclink.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.storagepubliclink.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.storageshares

STORAGE-SHARES service.

services.storageshares.affinity

Affinity settings for the storageshares service. See the documentation of this setting in approvider for examples.

services.storageshares.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.storageshares.extraLabels

Per-service custom labels

services.storageshares.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.storageshares.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.storageshares.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.storagesystem

STORAGE-SYSTEM service.

services.storagesystem.affinity

Affinity settings for the storagesystem service. See the documentation of this setting in approvider for examples.

services.storagesystem.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.storagesystem.extraLabels

Per-service custom labels

services.storagesystem.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.storagesystem.persistence

Persistence settings.

services.storagesystem.persistence.accessModes

Persistent volume access modes. Needs to be ["ReadWriteMany"] when scaling this service beyond one instance.

services.storagesystem.persistence.annotations

Persistent volume annotations.

services.storagesystem.persistence.chownInitContainer

Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in initContainerImage will be used for this container.

services.storagesystem.persistence.claimName

Use a custom name for the PVC instead of the default one.

services.storagesystem.persistence.enabled

Enables persistence. Needs to be enabled on production installations. If not enabled, pod restarts will lead to data loss. Also scaling this service beyond one instance is not possible if the service instances don’t share the same storage.

services.storagesystem.persistence.existingClaim

Use an existing PersistentVolumeClaim for persistence.

services.storagesystem.persistence.finalizers

Persistent volume finalizers.

services.storagesystem.persistence.selectorLabels

Persistent volume selector labels.

services.storagesystem.persistence.size

Size of the persistent volume.

services.storagesystem.persistence.storageClassName

Storage class to use. Uses the default storage class if not set.

services.storagesystem.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.storagesystem.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.storageusers

STORAGE-USERS service.

services.storageusers.affinity

Affinity settings for the storageusers service. See the documentation of this setting in approvider for examples.

services.storageusers.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.storageusers.extraLabels

Per-service custom labels

services.storageusers.jobNodeSelector

Per-service jobNodeSelector configuration. Overrides the default setting from jobNodeSelector if set.

services.storageusers.jobResources

Per-service jobResources configuration. Overrides the default setting from jobResources if set.

services.storageusers.maintenance.cleanUpExpiredUploads.enabled

Enables a job, that cleans up expired uploads. Requires persistence to be enabled and RWX storage.

services.storageusers.maintenance.cleanUpExpiredUploads.schedule

Cron pattern for the job to be run. Defaults to every minute.

services.storageusers.maintenance.cleanUpExpiredUploads.uploadExpiration

Duration in seconds after which uploads will expire. WARNING: Setting this to a low number will lead to uploads being cancelled before they are finished and returning a 403 to the user.

services.storageusers.maintenance.image

Image for the storageusers service maintenance jobs Defaults to the same values as image

services.storageusers.maintenance.image.pullPolicy

Image pull policy

services.storageusers.maintenance.image.repository

Image repository

services.storageusers.maintenance.image.sha

Image sha / digest (optional).

services.storageusers.maintenance.image.tag

Image tag.

services.storageusers.maintenance.purgeExpiredTrashBinItems.enabled

Enables a job, that purges expired trash bin items. Requires persistence to be enabled.

services.storageusers.maintenance.purgeExpiredTrashBinItems.personalDeleteBefore

Setting that makes the command delete all trashed personal files older than the value. The value is a number and a unit "d", "h", "m", "s".

services.storageusers.maintenance.purgeExpiredTrashBinItems.projectDeleteBefore

Setting that makes the command delete all trashed project files older than the value. The value is a number and a unit "d", "h", "m", "s".

services.storageusers.maintenance.purgeExpiredTrashBinItems.purgeTrashBinUserID

User ID of a user that has permissions to list all personal and project spaces.

services.storageusers.maintenance.purgeExpiredTrashBinItems.schedule

Cron pattern for the job to be run. Defaults to every minute.

services.storageusers.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.storageusers.persistence

Persistence settings.

services.storageusers.persistence.accessModes

Persistent volume access modes. Needs to be ["ReadWriteMany"] when scaling this service beyond one instance.

services.storageusers.persistence.annotations

Persistent volume annotations.

services.storageusers.persistence.chownInitContainer

Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in initContainerImage will be used for this container.

services.storageusers.persistence.claimName

Use a custom name for the PVC instead of the default one.

services.storageusers.persistence.enabled

Enables persistence. Needs to be enabled on production installations. If not enabled, pod restarts will lead to data loss. Also scaling this service beyond one instance is not possible if the service instances don’t share the same storage.

services.storageusers.persistence.existingClaim

Use an existing PersistentVolumeClaim for persistence.

services.storageusers.persistence.finalizers

Persistent volume finalizers.

services.storageusers.persistence.selectorLabels

Persistent volume selector labels.

services.storageusers.persistence.size

Size of the persistent volume.

services.storageusers.persistence.storageClassName

Storage class to use. Uses the default storage class if not set.

services.storageusers.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.storageusers.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.storageusers.storageBackend.driver

Configures the storage driver. Possible values are "ocis" and "s3ng". The oCIS driver stores all data in the persistent volume if persistence is enabled. The S3NG driver stores all metadata in the persistent volume and uploads blobs to s3 if persistence is enabled.

services.storageusers.storageBackend.driverConfig.ocis.metadataBackend

Metadata backend to use for the oCIS storage driver. Valid values are: "messagepack", "xattrs".

services.storageusers.storageBackend.driverConfig.s3ng.accessKey

S3 access key to use for the S3NG driver. Only used if driver is set to "s3ng". DEPRECATION WARNING: These values will be removed in the future. Predefine secretRefs.s3CredentialsSecretRef instead.

services.storageusers.storageBackend.driverConfig.s3ng.bucket

S3 bucket to use for the S3NG driver. Only used if driver is set to "s3ng".

services.storageusers.storageBackend.driverConfig.s3ng.endpoint

S3 endpoint to use for the S3NG driver. Only used if driver is set to "s3ng".

services.storageusers.storageBackend.driverConfig.s3ng.metadataBackend

Metadata backend to use for the S3NG storage driver. Valid values are: "messagepack", "xattrs".

services.storageusers.storageBackend.driverConfig.s3ng.region

S3 region to use for the S3NG driver. Only used if driver is set to "s3ng".

services.storageusers.storageBackend.driverConfig.s3ng.secretKey

S3 secret key to use for the S3NG driver. Only used if driver is set to "s3ng". DEPRECATION WARNING: These values will be removed in the future. Predefine secretRefs.s3CredentialsSecretRef instead.

services.store

STORE service.

services.store.affinity

Affinity settings for the store service. See the documentation of this setting in approvider for examples.

services.store.extraLabels

Per-service custom labels

services.store.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.store.persistence

Persistence settings.

services.store.persistence.accessModes

Persistent volume access modes. Needs to be ["ReadWriteMany"] when scaling this service beyond one instance.

services.store.persistence.annotations

Persistent volume annotations.

services.store.persistence.chownInitContainer

Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in initContainerImage will be used for this container.

services.store.persistence.claimName

Use a custom name for the PVC instead of the default one.

services.store.persistence.enabled

Enables persistence. Needs to be enabled on production installations. If not enabled, pod restarts will lead to data loss. Also scaling this service beyond one instance is not possible if the service instances don’t share the same storage.

services.store.persistence.existingClaim

Use an existing PersistentVolumeClaim for persistence.

services.store.persistence.finalizers

Persistent volume finalizers.

services.store.persistence.selectorLabels

Persistent volume selector labels.

services.store.persistence.size

Size of the persistent volume.

services.store.persistence.storageClassName

Storage class to use. Uses the default storage class if not set.

services.store.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.thumbnails

THUMBNAILS service.

services.thumbnails.affinity

Affinity settings for the thumbnails service. See the documentation of this setting in approvider for examples.

services.thumbnails.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.thumbnails.extraLabels

Per-service custom labels

services.thumbnails.jobNodeSelector

Per-service jobNodeSelector configuration. Overrides the default setting from jobNodeSelector if set.

services.thumbnails.jobResources

Per-service jobResources configuration. Overrides the default setting from jobResources if set.

services.thumbnails.maintenance

Maintenance configuration for cleanup jobs.

services.thumbnails.maintenance.cleanUpOldThumbnails.deleteBefore

Setting that makes the command delete all thumbnails older than the value. The value is a number in days.

services.thumbnails.maintenance.cleanUpOldThumbnails.enabled

Enables a job, that cleans up old thumbnails. Requires persistence to be enabled.

services.thumbnails.maintenance.cleanUpOldThumbnails.method

Method to use with BusyBox "find" for finding old thumbnails. Can be mtime, atime or ctime.

services.thumbnails.maintenance.cleanUpOldThumbnails.schedule

Cron pattern for the job to be run. Defaults to every minute.

services.thumbnails.maintenance.image.pullPolicy

Image pull policy

services.thumbnails.maintenance.image.repository

Image repository

services.thumbnails.maintenance.image.sha

Image sha / digest (optional).

services.thumbnails.maintenance.image.tag

Image tag.

services.thumbnails.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.thumbnails.persistence

Persistence settings.

services.thumbnails.persistence.accessModes

Persistent volume access modes. Needs to be ["ReadWriteMany"] when scaling this service beyond one instance or persistence needs to be disabled.

services.thumbnails.persistence.annotations

Persistent volume annotations.

services.thumbnails.persistence.chownInitContainer

Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in initContainerImage will be used for this container.

services.thumbnails.persistence.claimName

Use a custom name for the PVC instead of the default one.

services.thumbnails.persistence.enabled

Enables persistence. Is recommended to be enabled on production installations. If enabled, generated thumbnails are cached on this volume and available across pod restarts and service instances. If not enabled, thumbnail generation might lead to higher CPU usage.

services.thumbnails.persistence.existingClaim

Use an existing PersistentVolumeClaim for persistence.

services.thumbnails.persistence.finalizers

Persistent volume finalizers.

services.thumbnails.persistence.selectorLabels

Persistent volume selector labels.

services.thumbnails.persistence.size

Size of the persistent volume.

services.thumbnails.persistence.storageClassName

Storage class to use. Uses the default storage class if not set.

services.thumbnails.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.thumbnails.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.userlog

USERLOG service.

services.userlog.affinity

Affinity settings for the userlog service. See the documentation of this setting in approvider for examples.

services.userlog.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.userlog.extraLabels

Per-service custom labels

services.userlog.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.userlog.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.userlog.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.userlog.store

Per-service store configuration for the userlog service. Overrides the default setting from store if set.

services.users

USERS service.

services.users.affinity

Affinity settings for the users service. See the documentation of this setting in approvider for examples.

services.users.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.users.extraLabels

Per-service custom labels

services.users.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.users.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.users.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.web

ownCloud WEB service.

services.web.affinity

Affinity settings for the web service. See the documentation of this setting in approvider for examples.

services.web.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.web.config.applications

Configure the {"applications": []} section in the Web config.json.

services.web.config.apps

Configure the {"apps": []} section in the Web config.json.

services.web.config.contextHelpersReadMore.enabled

Specifies whether the “Read more” link should be displayed or not.

services.web.config.customTranslations

Configure custom translations

services.web.config.externalApplications

Configure the {"external_apps": []} section in the Web config.json.

services.web.config.feedbackLink.ariaLabel

Screen reader accessible label for the feedback link. Uses the ownCloud default label if empty.

services.web.config.feedbackLink.description

Description to be shown for the feedback link. Uses the ownCloud default description if empty.

services.web.config.feedbackLink.enabled

Enables the feedback link in the Web UI.

services.web.config.feedbackLink.href

URI where the feedback link points. Uses the ownCloud default href if empty.

services.web.config.previewFileMimeTypes

Specifies which mimeTypes will be previewed in the UI.

services.web.config.scripts

Configure the {"styles": []} section in the Web config.json.

services.web.config.styles

Configure the {"styles": []} section in the Web config.json.

services.web.config.theme.path

URL path to load themes from. The theme server will be prepended. Defaults to the ownCloud Web default theme.

services.web.config.theme.server

URL to load themes from. Will be prepended to the theme path. Defaults to the value of "externalDomain".

services.web.extraLabels

Per-service custom labels

services.web.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.web.persistence

Persistence settings.

services.web.persistence.accessModes

Persistent volume access modes. Needs to be ["ReadWriteMany"] when scaling this service beyond one instance or persistence needs to be disabled.

services.web.persistence.annotations

Persistent volume annotations.

services.web.persistence.chownInitContainer

Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in initContainerImage will be used for this container.

services.web.persistence.claimName

Use a custom name for the PVC instead of the default one.

services.web.persistence.enabled

Enables persistence. Is recommended to be enabled on production installations. If enabled, generated thumbnails are cached on this volume and available across pod restarts and service instances. If not enabled, thumbnail generation might lead to higher CPU usage.

services.web.persistence.existingClaim

Use an existing PersistentVolumeClaim for persistence.

services.web.persistence.finalizers

Persistent volume finalizers.

services.web.persistence.selectorLabels

Persistent volume selector labels.

services.web.persistence.size

Size of the persistent volume.

services.web.persistence.storageClassName

Storage class to use. Uses the default storage class if not set.

services.web.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.web.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.webdav

WEBDAV service.

services.webdav.affinity

Affinity settings for the webdav service. See the documentation of this setting in approvider for examples.

services.webdav.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.webdav.extraLabels

Per-service custom labels

services.webdav.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.webdav.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.webdav.resources

Per-service resources configuration. Overrides the default setting from resources if set.

store.nodes

Nodes of the store to use.

store.type

Configure the store type. To disable the cache, set to "noop". Defaults to "nats-js". Therefore store.nodes defaults to the address of the builtin NATS. Can be set to "redis", "redis-sentinel" or "etcd", then the address of Redis (Sentinel) / etcd node(s) needs to be set to cache.nodes.

topologySpreadConstraints

TopologySpreadConstraints controls how Pods of a service are spread across the cluster among failure-domains. Defaults to allow skew no more then 1 node per node. Passed through tpl and therefore needs to be configured as string.

tracing.collector

The HTTP endpoint for sending spans directly to a collector, i.e. http://jaeger-collector.observability.svc.cluster.local:14268/api/traces. Only used if the tracing endpoint is unset.

tracing.enabled

Tracing enables sending traces

tracing.endpoint

Endpoint of the tracing system, jaeger-agent.observability.svc.cluster.local:6831 or similar.

tracing.type

Type of trace provider to use