values.yaml Description

autoscaling.enabled

Enables autoscaling. When set to true, replicas is no longer applied.

autoscaling.maxReplicas

Sets maximum replicas for autoscaling.

autoscaling.metrics

Metrics to use for autoscaling

autoscaling.minReplicas

Sets minimum replicas for autoscaling.

backup.configMapLabels

Labels that are added to ConfigMaps that are manged by this Chart and must be included in a backup when backing up Kubernetes resources.

backup.pvcLabels

Labels that are added to PVCs that are manged by this Chart and must be included in a backup when backing up Kubernetes resources.

backup.secretLabels

Labels that are added to Secrets that are manged by this Chart and must be included in a backup when backing up Kubernetes resources.

cache.nodes

Nodes of the cache to use.

cache.type

Type of the cache to use. Can be set to "nats-js-kv" or "redis-sentinel". There are also the non-recommended options "memory" and "noop". The address of NATS / Redis Sentinel node(s) needs to be set to cache.nodes.

configRefs.authServiceConfigRef

Reference to an existing authservice config.

configRefs.graphConfigRef

Reference to an existing graph config.

configRefs.storageusersConfigRef

Reference to an existing storage-users config.

configRefs.webThemeAssetsConfigRef

Optional reference to an existing web theme assets config. Will be mounted to /var/lib/ocis/web/assets/themes/owncloud/assets for Web. Does not get autogenerated. Hint: if you set this, you’ll no longer be able to change the instance logo via the Web UI.

configRefs.webThemeConfigRef

Optional reference to an existing web theme config. Will be mounted to /var/lib/ocis/web/assets/themes/owncloud for Web. Does not get autogenerated. Hint: if you set this, you’ll no longer be able to change the instance logo via the Web UI.

customCAChain.enabled

Custom CA enables SSL_CERT_DIR in pods with the additional path /etc/ssl/custom.

customCAChain.existingConfigMap

If custom CA chain is enabled this attribute mounts the existing ConfigMap to /etc/ssl/custom.

debug.profiling

Profiling enables the http://<pod>:<debug-metrics>/debug/pprof endpoint to inspect various Go runtime internals. You can use the endpoint on your machine by forwarding the port, eg: kubectl port-forward -n ocis pod/proxy-8587dc9d64-fs24l 9205:9205 and then accessing the port on https://localhost:9147/debug/pprof or using the pprof command line tool: go tool pprof -web http://localhost:9205/debug/pprof/symbol\?seconds\=10

deploymentStrategy

Deployment strategy.

externalDomain

Domain where oCIS is reachable for the outside world

extraLabels

Custom labels for all manifests

extraResources

Extra resources to be included.

features.appsIntegration.enabled

Enables the apps integration.

features.appsIntegration.mimetypes

Mimetype configuration. Let’s you configure a mimetypes' default application, if it is allowed to create a new file and more.

features.appsIntegration.wopiIntegration.officeSuites[0].description

Description of the office suite

features.appsIntegration.wopiIntegration.officeSuites[0].disableChat

Disables the chat in the office suite. Note: This currently only applies to OnlyOffice

features.appsIntegration.wopiIntegration.officeSuites[0].disableProof

Disables verifying requests via WOPI proof keys. Not recommended to be disabled for production installations.

features.appsIntegration.wopiIntegration.officeSuites[0].enabled

Enables the office suite.

features.appsIntegration.wopiIntegration.officeSuites[0].iconURI

URI for the icon of the office suite. Will be displayed to the users.

features.appsIntegration.wopiIntegration.officeSuites[0].ingress.annotations

Ingress annotations.

features.appsIntegration.wopiIntegration.officeSuites[0].ingress.domain

Domain of the Ingress.

features.appsIntegration.wopiIntegration.officeSuites[0].ingress.enabled

Enables the Ingress. Only needed if the office application is not running within the same cluster.

features.appsIntegration.wopiIntegration.officeSuites[0].ingress.ingressClassName

Ingress class to use. Uses the default ingress class if not set.

features.appsIntegration.wopiIntegration.officeSuites[0].ingress.labels

Labels for the ingress.

features.appsIntegration.wopiIntegration.officeSuites[0].ingress.tls

Ingress TLS configuration.

features.appsIntegration.wopiIntegration.officeSuites[0].insecure

Disables SSL certificate checking for connections to the office suites http api. Not recommended for production installations.

features.appsIntegration.wopiIntegration.officeSuites[0].name

Name of the office suite. Will be displayed to the users.

features.appsIntegration.wopiIntegration.officeSuites[0].product

Product type of the office suite. Will be used to determine certain product specifics. Supports "Collabora", "OnlyOffice", "Microsoft365" or "MicrosoftOfficeOnline".

features.appsIntegration.wopiIntegration.officeSuites[0].secureViewEnabled

Enable secure view for this office suite

features.appsIntegration.wopiIntegration.officeSuites[0].uri

URI of the office suite.

features.appsIntegration.wopiIntegration.officeSuites[1].description

Description of the office suite

features.appsIntegration.wopiIntegration.officeSuites[1].disableChat

Disables the chat in the office suite. Note: This currently only applies to OnlyOffice

features.appsIntegration.wopiIntegration.officeSuites[1].disableProof

Disables verifying requests via WOPI proof keys. Not recommended to be disabled for production installations.

features.appsIntegration.wopiIntegration.officeSuites[1].enabled

Enables the office suite.

features.appsIntegration.wopiIntegration.officeSuites[1].iconURI

URI for the icon of the office suite. Will be displayed to the users.

features.appsIntegration.wopiIntegration.officeSuites[1].ingress.annotations

Ingress annotations.

features.appsIntegration.wopiIntegration.officeSuites[1].ingress.domain

Domain of the Ingress.

features.appsIntegration.wopiIntegration.officeSuites[1].ingress.enabled

Enables the Ingress. Only needed if the office application is not running within the same cluster.

features.appsIntegration.wopiIntegration.officeSuites[1].ingress.ingressClassName

Ingress class to use. Uses the default ingress class if not set.

features.appsIntegration.wopiIntegration.officeSuites[1].ingress.labels

Labels for the ingress.

features.appsIntegration.wopiIntegration.officeSuites[1].ingress.tls

Ingress TLS configuration.

features.appsIntegration.wopiIntegration.officeSuites[1].insecure

Disables SSL certificate checking for connections to the office suites http api. Not recommended for production installations.

features.appsIntegration.wopiIntegration.officeSuites[1].name

Name of the office suite. Will be displayed to the users.

features.appsIntegration.wopiIntegration.officeSuites[1].product

Product type of the office suite. Will be used to determine certain product specifics. Supports "Collabora", "OnlyOffice", "Microsoft365" or "MicrosoftOfficeOnline".

features.appsIntegration.wopiIntegration.officeSuites[1].secureViewEnabled

Enable secure view for this office suite. Note: OnlyOffice doesn’t support secureView right now

features.appsIntegration.wopiIntegration.officeSuites[1].uri

URI of the office suite.

features.appsIntegration.wopiIntegration.wopiFolderURIPathTemplate

Path template for the url to navigate back from the app to the containing folder in the file list. null uses the default value of oCIS, so that one also can set it to "" to not have a path template.

features.appsIntegration.wopiIntegration.wopiServerURI

URL of the cs3org/wopiserver. Can be deployed with this Chart.

features.archiver.maxNumFiles

Max number of files that can be packed into an archive.

features.archiver.maxSize

Max size in bytes of the zip archive the archiver can create.

features.demoUsers

Create demo users on the first startup. Not recommended for production installations.

features.edition

Edition of ownCloud Infinite Scale.

features.emailNotifications.branding.enabled

Enables mail branding. If enabled, you need to provide the text and html template ConfigMap. The image ConfigMap is optional.

features.emailNotifications.branding.htmlMailImagesConfigRef

Reference to a ConfigMap containing images that can be referenced from the html mail template. This ConfigMap is optional and can be omitted when images are not used.

features.emailNotifications.branding.htmlMailTemplatesConfigRef

Reference to a ConfigMap containing the html mail template. The template file must be named "email.html.tmpl". The default template can be seen here: https://github.com/owncloud/ocis/blob/master/services/notifications/pkg/email/templates/html/email.html.tmpl

features.emailNotifications.branding.textMailTemplatesConfigRef

Reference to a ConfigMap containing the text mail template. The template file must be named "email.text.tmpl". The default template can be seen here: https://github.com/owncloud/ocis/blob/master/services/notifications/pkg/email/templates/text/email.text.tmpl

features.emailNotifications.enabled

Enables email notifications.

features.emailNotifications.smtp.authentication

Authentication method for the SMTP communication. Possible values are ‘login’, ‘plain’, ‘crammd5’, ‘none’, 'auto' If set to another value than none, a secret referenced by notificationsSmtpSecretRef needs to be present.

features.emailNotifications.smtp.encryption

Encryption method for the SMTP communication. Possible values are starttls, ssl, ssltls, tls and none

features.emailNotifications.smtp.host

SMTP host to connect to.

features.emailNotifications.smtp.port

Port of the SMTP host to connect to.

features.emailNotifications.smtp.sender

Sender address of emails that will be sent. Example: 'ownCloud <noreply@example.com>'

features.externalUserManagement.adminUUID

UUID of the inital admin user. If the given value matches a user’s value from features.externalUserManagement.oidc.userIDClaim, the admin role will be assigned. Consider that the UUID can be encoded in some LDAP deployment configurations like in .ldif files. These need to be decoded beforehand. Note: Enabling roleAssignment will disable adminUUID.

features.externalUserManagement.autoprovisionAccounts

Enables account auto provisioning. It will create missing users on the LDAP server from OIDC information. Needs features.externalUserManagement.ldap.writeable to be be set to true.

features.externalUserManagement.autoprovisionAccounts.claimDisplayname

The name of the OIDC claim that holds the display name.

features.externalUserManagement.autoprovisionAccounts.claimEmail

The name of the OIDC claim that holds the email.

features.externalUserManagement.autoprovisionAccounts.claimGroups

The name of the OIDC claim that holds the groups.

features.externalUserManagement.autoprovisionAccounts.claimUserName

The name of the OIDC claim that holds the username.

features.externalUserManagement.autoprovisionAccounts.enabled

Enables account auto provisioning. It will create missing users on the LDAP server from OIDC information. Needs features.externalUserManagement.ldap.writeable to be be set to true.

features.externalUserManagement.enabled

Enables external user management (and disables internal user management). Needs an external OpenID Connect Identity Provider and an external LDAP server.

features.externalUserManagement.ldap.bindDN

DN of the user to use to bind to the LDAP server. The password for the user needs to be set in the secret referenced by secretRefs.ldapSecretRef as reva-ldap-bind-password. The user needs to have permission to list users and groups.

features.externalUserManagement.ldap.certTrusted

Set only to false, if the certificate of your LDAP secure service is not trusted. If set to false, you need to put the CA cert of the LDAP secure server into the secret referenced by "ldapCaRef"

features.externalUserManagement.ldap.disableUsers.disableMechanism

Enables disabling users if configured as "attribute" or "group"

features.externalUserManagement.ldap.disableUsers.disabledUsersGroupDN

Group that a user can be added to and by that being marked as disabled.

features.externalUserManagement.ldap.disableUsers.userEnabledAttribute

Attribute to use for disabling users.

features.externalUserManagement.ldap.group.baseDN

Search base DN for looking up LDAP groups.

features.externalUserManagement.ldap.group.createBaseDN

BaseDN where new groups are created and are considered as editable. All existing groups with a DN outside the features.externalUserManagement.ldap.group.createBaseDN will be treated as read-only groups. Defaults to the value features.externalUserManagement.ldap.group.baseDN. Only applicable if features.externalUserManagement.ldap.writeable is set to true

features.externalUserManagement.ldap.group.filter

LDAP filter to add to the default filters for group searches.

features.externalUserManagement.ldap.group.objectClass

The object class to use for groups in the default group search filter like groupOfNames.

features.externalUserManagement.ldap.group.schema.displayName

LDAP Attribute to use for the displayname of groups (often the same as groupname attribute).

features.externalUserManagement.ldap.group.schema.groupName

LDAP Attribute to use for the name of groups.

features.externalUserManagement.ldap.group.schema.id

LDAP Attribute to use as the unique ID for groups. This should be a stable globally unique ID like a UUID.

features.externalUserManagement.ldap.group.schema.idIsOctetString

Set this to true if the defined id attribute for groups is of the OCTETSTRING syntax. This is e.g. required when using the objectGUID attribute of Active Directory for the group ID`s.

features.externalUserManagement.ldap.group.schema.mail

LDAP Attribute to use for the email address of groups (can be empty).

features.externalUserManagement.ldap.group.schema.member

LDAP Attribute that is used for group members.

features.externalUserManagement.ldap.group.scope

LDAP search scope to use when looking up groups. Supported values are base, one and sub.

features.externalUserManagement.ldap.insecure

For self signed certificates, consider to put the CA cert of the LDAP secure server into the secret referenced by "ldapCaRef" Not recommended for production installations.

features.externalUserManagement.ldap.passwordModifyExOpEnabled

Use the Password Modify Extended Operation for updating user passwords.

features.externalUserManagement.ldap.readOnlyAttributes

If the LDAP server is set to writable in general, some user attributes can be restricted to read only in the UI. Note: This only disables editing in the UI. The readonly permissions need to be enforced in the LDAP server itself.

features.externalUserManagement.ldap.refintEnabled

Signals that the LDAP server has the refint plugin enabled, which makes some actions not needed.

features.externalUserManagement.ldap.uri

URI to connect to the LDAP secure server.

features.externalUserManagement.ldap.useServerUUID

If set to true, rely on the LDAP Server to generate a unique ID for users and groups, like when using 'entryUUID' as the user ID attribute.

features.externalUserManagement.ldap.user.baseDN

Search base DN for looking up LDAP users.

features.externalUserManagement.ldap.user.filter

LDAP filter to add to the default filters for user search like (objectclass=ownCloud).

features.externalUserManagement.ldap.user.objectClass

The object class to use for users in the default user search filter like inetOrgPerson.

features.externalUserManagement.ldap.user.schema.displayName

LDAP Attribute to use for the displayname of users.

features.externalUserManagement.ldap.user.schema.id

LDAP Attribute to use as the unique id for users. This should be a stable globally unique id like a UUID.

features.externalUserManagement.ldap.user.schema.idIsOctetString

Set this to true if the defined id attribute for users is of the OCTETSTRING syntax. This is e.g. required when using the objectGUID attribute of Active Directory for the user ID`s.

features.externalUserManagement.ldap.user.schema.mail

LDAP Attribute to use for the email address of users.

features.externalUserManagement.ldap.user.schema.userName

LDAP Attribute to use for username of users.

features.externalUserManagement.ldap.user.schema.userType

LDAP Attribute to distinguish between 'Member' and 'Guest' users. Default is 'ownCloudUserType'.

features.externalUserManagement.ldap.user.scope

LDAP search scope to use when looking up users. Supported values are base, one and sub.

features.externalUserManagement.ldap.user.substringFilterType

Type of substring search filter to use for substring searches for users. Possible values: initial for doing prefix only searches, final for doing suffix only searches or any for doing full substring searches

features.externalUserManagement.ldap.user.userNameMatch

Apply restrictions to usernames. Supported values are 'default' and 'none'. When set to 'default', user names must not start with a number and are restricted to ASCII characters. When set to 'none', no restrictions are applied. The default value is 'default'.

features.externalUserManagement.ldap.writeable

Writeable configures if oCIS is allowed to write to the LDAP server, to eg. create or edit users.

features.externalUserManagement.oidc.accessTokenVerifyMethod

OIDC Acces Token Verify Method Set to "jwt" or "none"

features.externalUserManagement.oidc.editAccountLink

Link to the OIDC provider’s user accessible account editing page. This will be shown to the user on the personal account page. When using Keycloak with the a realm named "ocis" this could point to eg. https://keycloak.owncloud.test/realms/ocis/account/

features.externalUserManagement.oidc.issuerURI

Issuer URI of the OpenID Connect Identity Provider. If the IDP doesn’t have valid / trusted SSL certificates, certificate validation can be disabled with the insecure.oidcIdpInsecure option. The issuerURI will be automatically be added to http.csp.directives.connectSrc

features.externalUserManagement.oidc.roleAssignment.claim

The name of the OIDC claim holding the role assignment

features.externalUserManagement.oidc.roleAssignment.enabled

enable OIDC role assignment.

features.externalUserManagement.oidc.roleAssignment.mapping

Configure the mapping for the role assignment

features.externalUserManagement.oidc.sessionManagementLink

Link to the OIDC provider’s user accessible session management. This will be shown to the user on the personal account page. When using Keycloak with the a realm named "ocis" this could point to eg. https://keycloak.owncloud.test/realms/ocis/account/

features.externalUserManagement.oidc.skipUserInfo

Do not look up user claims at the userinfo endpoint and directly read them from the access token. Incompatible with 'accessTokenVerifyMethod=none'

features.externalUserManagement.oidc.userIDClaim

Claim to take an unique user identifier from. It will be used to look up the user on the LDAP server.

features.externalUserManagement.oidc.userIDClaimAttributeMapping

Attribute mapping of for the userIDClaim. Set to userid if the claim specified in …​oidc.userIDClaim holds the value of the ldap user attribute specified in …​ldap.user.schema.id. Set to mail if the claim specified in …​oidc.userIDClaim holds the value of the ldap user attribute specified in …​ldap.user.schema.mail. Set to username if the claim specified in …​oidc.userIDClaim holds the value of the ldap user attribute specified in …​ldap.user.schema.userName.

features.gdprReport.integrations.keycloak.basePath

Base URI of keycloak.

features.gdprReport.integrations.keycloak.clientID

Client ID to authenticate against keycloak with.

features.gdprReport.integrations.keycloak.clientRealm

Realm that the client ID is configured in, usually master.

features.gdprReport.integrations.keycloak.enabled

Enable keycloak data export.

features.gdprReport.integrations.keycloak.insecure

Disables SSL certificate checking for connections to the GDPR export service. Not recommended for production installations.

features.gdprReport.integrations.keycloak.userRealm

Realm that the users are in.

features.language.default

The default language. If not defined, English will be used as default. See the documentation for more details.

features.ocm.enabled

Enables OCM service

features.ocm.invitationExpiry

Expiry duration for invite tokens.

features.ocm.providersConfigRef

Required reference to an existing provider config. Will be mounted to /etc/ocis Does not get autogenerated. Documentation can be found at https://doc.owncloud.com/ocis/next/deployment/services/s-list/ocm.html#trust-between-instances

features.ocm.requestTimeout

Timeout specifies a time limit for requests made to OCM endpoints.

features.policies.enabled

Enables policies

features.policies.engineTimeout

Sets the timeout the rego expression evaluation can take. The timeout can be set as number followed by a unit identifier like ms, s, etc. Rules default to deny if the timeout was reached.

features.policies.policies

Sets the policies. Each policy file is defined by a fileName and a content. The content takes the rego script as text. For further information, please have a look at https://doc.owncloud.com/ocis/next/deployment/services/s-list/policies.html Attention: All scripts provided here will end up in a ConfigMap. The data stored in a ConfigMap cannot exceed 1 MiB. see https://kubernetes.io/docs/concepts/configuration/configmap/#:~:text=The%20data%20stored%20in%20a,separate%20database%20or%20file%20service.

features.quotas.default

Sets the default quota for spaces in bytes. So 1000 sets the default quota to 1KB. 0 means unlimited.

features.quotas.max

Sets the maximum quota for spaces in bytes. So 1000 sets the max quota to 1KB.

features.quotas.roles

Sets specific quotas for roles

features.roles.availableUnifiedRoles

Define a list of unified roles to make them available. The default of an empty list means all unified roles are available. You can read about unified roles in https://doc.owncloud.com/ocis/next/deployment/services/s-list/graph.html. The IDs of the roles and a description can be found by running: kubectl -n ocis exec deployments/graph — ocis graph list-unified-roles

features.roles.customRoles

Define the roles by providing the JSON text here.

features.roles.customRolesConfigRef

Define the roles by specifying a name of a ConfigMap which already contains the the role description (might also be defined in the extraResources section). The ConfigMap needs to contain a file named custom-roles.json which holds the role description in JSON format Please note that you have to restart the settings service manually if you change the content of you ConfigMap.

features.sharing.autoAcceptShares

automatically accept incoming shares

features.sharing.passwordPolicies.bannedPasswords

list of banned passwords

features.sharing.passwordPolicies.minCharacters

the minimum amount of characters the password needs to have

features.sharing.passwordPolicies.minDigits

the minimum amount of digits the password needs to have

features.sharing.passwordPolicies.minLowerCharacters

the minimum amount of lower case characters the password needs to have

features.sharing.passwordPolicies.minSpecialCharacters

the minimum amount of special characters the password needs to have

features.sharing.passwordPolicies.minUpperCharacters

the minimum amount of upper case characters the password needs to have

features.sharing.publiclink.shareMustHavePassword

Enforce a password on all public link shares.

features.sharing.publiclink.writeableShareMustHavePassword

Enforce a password only on writable public link shares. Is already enforced if features.sharing.publiclink.shareMustHavePassword option is set to true`.

features.sharing.users.search.minLengthLimit

Minimum number of characters to enter before a client should start a search for Share receivers. This setting can be used to customize the user experience if e.g too many results are displayed.

features.sharing.users.search.showUserEmail

Show user email when searching for other users to share with.

features.virusscan.enabled

Enables virus scanning

features.virusscan.icap.service

Sets the service to be used in icap

features.virusscan.icap.timeout

Sets the timeout for icap scans

features.virusscan.icap.url

Sets the icap url

features.virusscan.infectedFileHandling

Define what should happen with infected files. Supported options are: 'delete', 'continue' and 'abort '. Delete will delete the file. Continue will mark the file as infected but continues further processing. Abort will keep the file in the uploads folder for further admin inspection and will not move it to its final destination.

features.virusscan.maxScanSize

Sets a maximum file size for scans. Only this many bytes of a file will be scanned. 0 means unlimited and is the default. Usable common abbreviations: [KB, KiB, MB, MiB, GB, GiB, TB, TiB, PB, PiB, EB, EiB], example: 2GB.

hostAliases

provide custom hostnames to every oCIS pods

http.cors.allow_origins

http.csp.directives.childSrc

child-src directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/child-src

http.csp.directives.connectSrc

connect-src directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/connect-src

http.csp.directives.defaultSrc

default-src directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/default-src

http.csp.directives.fontSrc

front-src directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/front-src

http.csp.directives.frameAncestors

frame-ancestors directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors

http.csp.directives.frameSrc

frame-src directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-src

http.csp.directives.imgSrc

img-src directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/img-src

http.csp.directives.manifestSrc

manifest-src directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/manifest-src

http.csp.directives.mediaSrc

media-src directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/media-src

http.csp.directives.objectSrc

object-src directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/object-src

http.csp.directives.scriptSrc

script-src directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src

http.csp.directives.styleSrc

style-src directive, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src

image.pullPolicy

Image pull policy

image.pullSecrets

Names of the secret containing the credentials to pull an image from the registry. More information how a secret can be defined at https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/ Note: These secrets also apply to initContainers, so you need to provide secrets for the initContainer image here as well.

image.repository

Image repository

image.sha

Image sha / digest (optional).

image.tag

Image tag. Defaults to the chart’s appVersion.

ingress.annotations

Ingress annotations.

ingress.enabled

Enables the Ingress.

ingress.ingressClassName

Ingress class to use. Uses the default ingress class if not set.

ingress.labels

Labels for the ingress.

ingress.tls

Ingress TLS configuration.

initContainerImage.pullPolicy

Image pull policy

initContainerImage.repository

Image repository

initContainerImage.sha

Image sha / digest (optional).

initContainerImage.tag

Image tag.

insecure.ocisHttpApiInsecure

Disables SSL certificate checking for connections to the oCIS http apis. Not recommended for production installations.

insecure.ocmInsecure

Disables SSL certificate checking for connections to all OCM instances Not recommended for production installations.

insecure.oidcIdpInsecure

Disables SSL certificate checking for connections to the openID connect identity provider. Not recommended for production installations.

jobNodeSelector

Default nodeSelector to apply to all jobs, except per-service job nodeSelector configuration in services.<service-name>.jobNodeSelector is set.

jobPriorityClassName

Default priorityClassName to apply to all services, except per-service jobPriorityClassName configuration in services.<service-name>.jobPriorityClassName is set.

jobResources

Default resources to apply to all jobs in services, except per-service resources configuration in services.<service-name>.jobResources is set. Best practice is to: - set memory request == memory limit (compare to https://home.robusta.dev/blog/kubernetes-memory-limit) - set cpu request and omit cpu limit (compare to https://home.robusta.dev/blog/stop-using-cpu-limits)

logging.color

Activates colorized log output. Not recommended for production installations.

logging.level

Log level. Valid values: panic, fatal, error, warn, info, debug, trace.

logging.pretty

Activates pretty log output. Not recommended for production installations.

messagingSystem.external.cluster

Cluster name to use with the messaging system.

messagingSystem.external.enabled

Use an external NATS messaging system instead of the internal one. Recommended for all production instances. Needs to be used if HighAvailability is needed. Needs to be used if oCIS shall be used by more than a 2-digit user count.

messagingSystem.external.endpoint

Endpoint of the messaging system.

messagingSystem.external.tls.certTrusted

Set only to false, if the certificate of your messaging system service is not trusted. If set to false, you need to put the CA cert of the messaging system server into the secret referenced by "messagingSystemCaRef"

messagingSystem.external.tls.enabled

Enables TLS encrypted communication with the messaging system. Recommended for production installations.

messagingSystem.external.tls.insecure

For self signed certificates, consider to put the CA cert of the messaging system secure server into the secret referenced by "messagingSystemCaRef" Not recommended for production installations.

monitoring.enabled

Enable service monitoring.

monitoring.interval

Interval at which to scrape metrics.

monitoring.scrapeTimeout

Scrape timeout.

namespaceOverride

Override the deployment namespace of all resources in this Helm chart.

nodeSelector

Default nodeSelector to apply to all services, except per-service nodeSelector configuration in services.<service-name>.nodeSelector is set.

podDisruptionBudget

Default PodDisruptionBudget to apply to all services, except per-service PodDisruptionBudget configuration in services.<service-name>.podDisruptionBudget is set.

priorityClassName

Default priorityClassName to apply to all services, except per-service priorityClassName configuration in services.<service-name>.priorityClassName is set.

registry.nodes

Nodes of the service registry to use.

registry.type

Configure the service registry type. Can be set to "nats-js-kv". The address of NATS node(s) needs to be set to cache.nodes.

replicas

Number of replicas for each scalable service. Has no effect when autoscaling.enabled is set to true.

resources

Default resources to apply to all services, except per-service resources configuration in services.<service-name>.resources is set. Best practice is to: - set memory request == memory limit (compare to https://home.robusta.dev/blog/kubernetes-memory-limit) - set cpu request and omit cpu limit (compare to https://home.robusta.dev/blog/stop-using-cpu-limits)

secretRefs.adminUserSecretRef

Reference to an existing admin user secret (see Secrets). Not used if features.externalUserManagement.enabled equals true.

secretRefs.collaborationWopiSecret

secretRefs.gdprExportClientSecretRef

Reference to an existing keycloak client secret, used for the GDPR export. Only used if features.externalUserManagement.gdprExport.enabled equals true.

secretRefs.globalNotificationsSecretRef

The secret to secure the global notifications endpoint. Only system admins and users knowing that secret can call the global notifications POST/DELETE endpoints.

secretRefs.idpSecretRef

Reference to an existing IDP secret (see Secrets). Not used if features.externalUserManagement.enabled equals true.

secretRefs.jwtSecretRef

Reference to an existing JWT secret (see Secrets).

secretRefs.ldapCaRef

Reference to an existing LDAP certificate authority secret (see Secrets)

secretRefs.ldapCertRef

Reference to an existing LDAP cert secret (see Secrets). Not used if features.externalUserManagement.enabled equals true.

secretRefs.ldapSecretRef

Reference to an existing LDAP bind secret (see Secrets).

secretRefs.machineAuthApiKeySecretRef

Reference to an existing machine auth api key secret (see Secrets)

secretRefs.messagingSystemCaRef

Reference to an existing messaging system certificate authority secret (see Secrets)

secretRefs.notificationsSmtpSecretRef

Reference to an existing SMTP email server settings secret (see Secrets). Not used if features.emailNotifications.enabled equals false. Not used if features.emailNotifications.smtp.authentication equals none.

secretRefs.s3CredentialsSecretRef

Reference to an existing s3 secret (see Secrets) If not filled in, will attempt to use values in .storageusers.storageBackend.s3.driverConfig.s3ng instead.

secretRefs.serviceAccountSecretRef

Reference to an existing service account secret (see Secrets)

secretRefs.storagesystemJwtSecretRef

Reference to an existing storage-system JWT secret (see Secrets)

secretRefs.storagesystemSecretRef

Reference to an existing storage-system secret (see Secrets)

secretRefs.thumbnailsSecretRef

Reference to an existing thumbnails transfer secret (see Secrets)

secretRefs.transferSecretSecretRef

Reference to an existing transfer secret (see Secrets)

securityContext.fsGroup

File system group for all volumes.

securityContext.fsGroupChangePolicy

File system group change policy for all volumes. Possible values "Always" and "OnRootMismatch". This will also apply to all services' chownInitContainer.

securityContext.runAsGroup

Group ID that all processes within any containers will run with.

securityContext.runAsUser

User ID that all processes within any containers will run with.

service.appProtocol.grpc

appProtocol to be used for service ports that use the grpc protocol.

service.appProtocol.http

appProtocol to be used for service ports that use the http protocol.

service.appProtocol.ldaps

appProtocol to be used for service ports that use the ldaps protocol. Not used if features.externalUserManagement.enabled equals true.

service.appProtocol.nats

appProtocol to be used for service ports that use the nats wire protocol. Not used if messagingSystem.external.enabled equals true.

services.activitylog

ACTIVITYLOG service.

services.activitylog.affinity

Affinity settings for the activitylog service. See the documentation of this setting in approvider for examples.

services.activitylog.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.activitylog.extraLabels

Per-service custom labels

services.activitylog.image.pullPolicy

Image pull policy

services.activitylog.image.repository

Image repository

services.activitylog.image.sha

Image sha / digest (optional).

services.activitylog.image.tag

Image tag.

services.activitylog.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.activitylog.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.activitylog.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.activitylog.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.antivirus

ANTIVIRUS service. Not used if features.virusscan.enabled equals false.

services.antivirus.affinity

Affinity settings for the antivirus service. See the documentation of this setting in approvider for examples.

services.antivirus.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.antivirus.events.consumer.concurrency

Number of event consumers to be started that concurrently consume events.

services.antivirus.extraLabels

Per-service custom labels

services.antivirus.image.pullPolicy

Image pull policy

services.antivirus.image.repository

Image repository

services.antivirus.image.sha

Image sha / digest (optional).

services.antivirus.image.tag

Image tag.

services.antivirus.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.antivirus.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.antivirus.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.antivirus.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.appregistry

APP REGISTRY service. Not used if features.appsIntegration.enabled equals false.

services.appregistry.affinity

Affinity settings for the appregistry service. See the documentation of this setting in approvider for examples.

services.appregistry.extraLabels

Per-service custom labels

services.appregistry.image.pullPolicy

Image pull policy

services.appregistry.image.repository

Image repository

services.appregistry.image.sha

Image sha / digest (optional).

services.appregistry.image.tag

Image tag.

services.appregistry.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.appregistry.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.appregistry.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.audit

AUDIT service.

services.audit.affinity

Affinity settings for the audit service. See the documentation of this setting in approvider for examples.

services.audit.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.audit.extraLabels

Per-service custom labels

services.audit.image.pullPolicy

Image pull policy

services.audit.image.repository

Image repository

services.audit.image.sha

Image sha / digest (optional).

services.audit.image.tag

Image tag.

services.audit.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.audit.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.audit.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.audit.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.authmachine

AUTH MACHINE service.

services.authmachine.affinity

Affinity settings for the authmachine service. See the documentation of this setting in approvider for examples.

services.authmachine.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.authmachine.extraLabels

Per-service custom labels

services.authmachine.image.pullPolicy

Image pull policy

services.authmachine.image.repository

Image repository

services.authmachine.image.sha

Image sha / digest (optional).

services.authmachine.image.tag

Image tag.

services.authmachine.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.authmachine.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.authmachine.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.authmachine.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.authservice

AUTH SERVICE service.

services.authservice.affinity

Affinity settings for the authservice service. See the documentation of this setting in approvider for examples.

services.authservice.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.authservice.extraLabels

Per-service custom labels

services.authservice.image.pullPolicy

Image pull policy

services.authservice.image.repository

Image repository

services.authservice.image.sha

Image sha / digest (optional).

services.authservice.image.tag

Image tag.

services.authservice.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.authservice.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.authservice.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.authservice.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.clientlog

CLIENTLOG service.

services.clientlog.affinity

Affinity settings for the clientlog service. See the documentation of this setting in approvider for examples.

services.clientlog.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.clientlog.extraLabels

Per-service custom labels

services.clientlog.image.pullPolicy

Image pull policy

services.clientlog.image.repository

Image repository

services.clientlog.image.sha

Image sha / digest (optional).

services.clientlog.image.tag

Image tag.

services.clientlog.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.clientlog.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.clientlog.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.clientlog.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.collaboration

COLLABORATION service. Not used if features.appsIntegration.enabled equals false.

services.collaboration.affinity

Affinity settings for the approvider service.

services.collaboration.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.collaboration.extraLabels

Per-service custom labels

services.collaboration.image.pullPolicy

Image pull policy

services.collaboration.image.repository

Image repository

services.collaboration.image.sha

Image sha / digest (optional).

services.collaboration.image.tag

Image tag.

services.collaboration.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.collaboration.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.collaboration.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.collaboration.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.eventhistory

EVENT HISTORY service.

services.eventhistory.affinity

Affinity settings for the eventhistory service. See the documentation of this setting in approvider for examples.

services.eventhistory.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.eventhistory.extraLabels

Per-service custom labels

services.eventhistory.image.pullPolicy

Image pull policy

services.eventhistory.image.repository

Image repository

services.eventhistory.image.sha

Image sha / digest (optional).

services.eventhistory.image.tag

Image tag.

services.eventhistory.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.eventhistory.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.eventhistory.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.eventhistory.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.frontend

FRONTEND service.

services.frontend.affinity

Affinity settings for the frontend service. See the documentation of this setting in approvider for examples.

services.frontend.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.frontend.events.consumer.concurrency

Number of event consumers to be started that concurrently consume events (used for auto-accepting shares, see features.sharing.autoAcceptShares)

services.frontend.extraLabels

Per-service custom labels

services.frontend.image.pullPolicy

Image pull policy

services.frontend.image.repository

Image repository

services.frontend.image.sha

Image sha / digest (optional).

services.frontend.image.tag

Image tag.

services.frontend.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.frontend.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.frontend.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.frontend.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.gateway

GATEWAY service.

services.gateway.affinity

Affinity settings for the gateway service. See the documentation of this setting in approvider for examples.

services.gateway.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.gateway.extraLabels

Per-service custom labels

services.gateway.image.pullPolicy

Image pull policy

services.gateway.image.repository

Image repository

services.gateway.image.sha

Image sha / digest (optional).

services.gateway.image.tag

Image tag.

services.gateway.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.gateway.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.gateway.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.gateway.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.graph

GRAPH service.

services.graph.affinity

Affinity settings for the graph service. See the documentation of this setting in approvider for examples.

services.graph.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.graph.extraLabels

Per-service custom labels

services.graph.image.pullPolicy

Image pull policy

services.graph.image.repository

Image repository

services.graph.image.sha

Image sha / digest (optional).

services.graph.image.tag

Image tag.

services.graph.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.graph.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.graph.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.graph.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.groups

GROUPS service.

services.groups.affinity

Affinity settings for the groups service. See the documentation of this setting in approvider for examples.

services.groups.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.groups.extraLabels

Per-service custom labels

services.groups.image.pullPolicy

Image pull policy

services.groups.image.repository

Image repository

services.groups.image.sha

Image sha / digest (optional).

services.groups.image.tag

Image tag.

services.groups.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.groups.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.groups.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.groups.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.idm

IDM service. Not used if features.externalUserManagement.enabled equals true.

services.idm.affinity

Affinity settings for the idm service. See the documentation of this setting in approvider for examples.

services.idm.extraLabels

Per-service custom labels

services.idm.image.pullPolicy

Image pull policy

services.idm.image.repository

Image repository

services.idm.image.sha

Image sha / digest (optional).

services.idm.image.tag

Image tag.

services.idm.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.idm.persistence

Persistence settings.

services.idm.persistence.accessModes

Persistent volume access modes.

services.idm.persistence.annotations

Persistent volume annotations.

services.idm.persistence.chownInitContainer

Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in initContainerImage will be used for this container.

services.idm.persistence.claimName

Use a custom name for the PVC instead of the default one.

services.idm.persistence.enabled

Enables persistence. Needs to be enabled on production installations, except features.externalUserManagement.enabled equals true. If not enabled, pod restarts will lead to data loss.

services.idm.persistence.existingClaim

Use an existing PersistentVolumeClaim for persistence.

services.idm.persistence.finalizers

Persistent volume finalizers.

services.idm.persistence.selectorLabels

Persistent volume selector labels.

services.idm.persistence.size

Size of the persistent volume.

services.idm.persistence.storageClassName

Storage class to use. Uses the default storage class if not set.

services.idm.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.idm.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.idp

IDP service. Not used if features.externalUserManagement.enabled equals true.

services.idp.affinity

Affinity settings for the idp service. See the documentation of this setting in approvider for examples.

services.idp.extraLabels

Per-service custom labels

services.idp.image.pullPolicy

Image pull policy

services.idp.image.repository

Image repository

services.idp.image.sha

Image sha / digest (optional).

services.idp.image.tag

Image tag.

services.idp.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.idp.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.idp.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.nats

NATS service. Not used if messagingSystem.external.enabled equals true.

services.nats.affinity

Affinity settings for the nats service. See the documentation of this setting in approvider for examples.

services.nats.extraLabels

Per-service custom labels

services.nats.image.pullPolicy

Image pull policy

services.nats.image.repository

Image repository

services.nats.image.sha

Image sha / digest (optional).

services.nats.image.tag

Image tag.

services.nats.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.nats.persistence

Persistence settings.

services.nats.persistence.accessModes

Persistent volume access modes.

services.nats.persistence.annotations

Persistent volume annotations.

services.nats.persistence.chownInitContainer

Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in initContainerImage will be used for this container.

services.nats.persistence.claimName

Use a custom name for the PVC instead of the default one.

services.nats.persistence.enabled

Enables persistence. Needs to be enabled on production installations, except messagingSystem.external.enabled equals true. If not enabled, pod restarts will lead to data loss.

services.nats.persistence.existingClaim

Use an existing PersistentVolumeClaim for persistence.

services.nats.persistence.finalizers

Persistent volume finalizers.

services.nats.persistence.selectorLabels

Persistent volume selector labels.

services.nats.persistence.size

Size of the persistent volume.

services.nats.persistence.storageClassName

Storage class to use. Uses the default storage class if not set.

services.nats.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.nats.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.notifications

NOTIFICATIONS service. Not used if features.emailNotifications.enabled equals true.

services.notifications.affinity

Affinity settings for the notifications service. See the documentation of this setting in approvider for examples.

services.notifications.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.notifications.extraLabels

Per-service custom labels

services.notifications.image.pullPolicy

Image pull policy

services.notifications.image.repository

Image repository

services.notifications.image.sha

Image sha / digest (optional).

services.notifications.image.tag

Image tag.

services.notifications.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.notifications.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.notifications.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.notifications.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.ocdav

OCDAV service.

services.ocdav.affinity

Affinity settings for the ocdav service. See the documentation of this setting in approvider for examples.

services.ocdav.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.ocdav.extraLabels

Per-service custom labels

services.ocdav.image.pullPolicy

Image pull policy

services.ocdav.image.repository

Image repository

services.ocdav.image.sha

Image sha / digest (optional).

services.ocdav.image.tag

Image tag.

services.ocdav.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.ocdav.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.ocdav.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.ocdav.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.ocm

OCM service.

services.ocm.affinity

Affinity settings for the ocs service. See the documentation of this setting in approvider for examples.

services.ocm.extraLabels

Per-service custom labels

services.ocm.image.pullPolicy

Image pull policy

services.ocm.image.repository

Image repository

services.ocm.image.sha

Image sha / digest (optional).

services.ocm.image.tag

Image tag.

services.ocm.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.ocm.persistence

Persistence settings.

services.ocm.persistence.accessModes

Persistent volume access modes.

services.ocm.persistence.annotations

Persistent volume annotations.

services.ocm.persistence.chownInitContainer

Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in initContainerImage will be used for this container.

services.ocm.persistence.claimName

Use a custom name for the PVC instead of the default one.

services.ocm.persistence.enabled

Enables persistence. Needs to be enabled on production installations. If not enabled, pod restarts will lead to data loss. Also scaling this service to more than one replica is not possible if the pods don’t share the same volume.

services.ocm.persistence.existingClaim

Use an existing PersistentVolumeClaim for persistence.

services.ocm.persistence.finalizers

Persistent volume finalizers.

services.ocm.persistence.selectorLabels

Persistent volume selector labels.

services.ocm.persistence.size

Size of the persistent volume.

services.ocm.persistence.storageClassName

Storage class to use. Uses the default storage class if not set.

services.ocm.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.ocm.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.ocs

OCS service.

services.ocs.affinity

Affinity settings for the ocs service. See the documentation of this setting in approvider for examples.

services.ocs.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.ocs.extraLabels

Per-service custom labels

services.ocs.image.pullPolicy

Image pull policy

services.ocs.image.repository

Image repository

services.ocs.image.sha

Image sha / digest (optional).

services.ocs.image.tag

Image tag.

services.ocs.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.ocs.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.ocs.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.ocs.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.policies

POLICIES service.

services.policies.affinity

Affinity settings for the policies service. See the documentation of this setting in approvider for examples.

services.policies.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.policies.extraLabels

Per-service custom labels

services.policies.image.pullPolicy

Image pull policy

services.policies.image.repository

Image repository

services.policies.image.sha

Image sha / digest (optional).

services.policies.image.tag

Image tag.

services.policies.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.policies.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.policies.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.policies.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.postprocessing

POSTPROCESSING service.

services.postprocessing.affinity

Affinity settings for the postprocessing service. See the documentation of this setting in approvider for examples.

services.postprocessing.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.postprocessing.events.consumer.concurrency

Number of event consumers to be started that concurrently consume events

services.postprocessing.extraLabels

Per-service custom labels

services.postprocessing.image.pullPolicy

Image pull policy

services.postprocessing.image.repository

Image repository

services.postprocessing.image.sha

Image sha / digest (optional).

services.postprocessing.image.tag

Image tag.

services.postprocessing.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.postprocessing.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.postprocessing.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.postprocessing.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.proxy

PROXY service.

services.proxy.additionalPolicies

Specifies additional policies for the proxy service. Routes are appended to the default routes of specified policies. The policy name should always be 'ocis'.

services.proxy.affinity

Affinity settings for the proxy service. See the documentation of this setting in approvider for examples.

services.proxy.autoscaling

Per-service autoscaling. Overrides the default setting from autoscaling if set.

services.proxy.extraLabels

Per-service custom labels

services.proxy.image.pullPolicy

Image pull policy

services.proxy.image.repository

Image repository

services.proxy.image.sha

Image sha / digest (optional).

services.proxy.image.tag

Image tag.

services.proxy.nodeSelector

Per-service nodeSelector configuration. Overrides the default setting from nodeSelector if set.

services.proxy.podDisruptionBudget

Per-service PodDisruptionBudget. Overrides the default setting from podDisruptionBudget if set.

services.proxy.priorityClassName

Per-service priorityClassName configuration. Overrides the default setting from priorityClassName if set.

services.proxy.resources

Per-service resources configuration. Overrides the default setting from resources if set.

services.search

SEARCH service.

services.search.affinity

Affinity settings for the search service. See the documentation of this setting in approvider for examples.

services.search.extraLabels

Per-service custom labels

services.search.extractor

Search Extractor settings.

services.search.extractor.sizeLimit

Configures the maximum file size in bytes that is allowed for content extraction. For the default value see https://doc.owncloud.com/ocis/next/deployment/services/s-list/search.html

services.search.extractor.tika.cleanStopWords

Defines if stop words should be cleaned or not.

services.search.extractor.tika.url

Set the URL to Tika. Only applicable if services.search.extractor.type == tika.

services.search.extractor.type

Configures the search extractor type to be used. Possible extractors: - basic: the default search extractor. - tika: the Tika search extractor. If set to this value, additional settings in the tika section apply.

services.search.image.pullPolicy