charts/stable/frontier/values.yaml at f8e103fd83a0f8745b36fd76bd2d401bf8666bda · raystack/charts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
frontier-app:
  enabled: true
  image:
    repository: raystack/frontier
    pullPolicy: IfNotPresent
    tag: v0.90.0
  container:
    command: ["frontier", "server", "start"]
    livenessProbe:
      grpc:
        port: 8082
      httpGet: null
    readinessProbe:
      grpc:
        port: 8082
      httpGet: null
    ports:
      - name: admin-ui
        containerPort: 3000
        protocol: TCP
      - name: connectrpc
        containerPort: 8082
        protocol: TCP
  service:
    type: ClusterIP
    ports:
      - port: 3000
        targetPort: admin-ui
        protocol: TCP
        name: admin-ui
      - port: 8082
        targetPort: connectrpc
        protocol: TCP
        name: connectrpc
    annotations: {}
  ingress:
    enabled: false
    annotations: {}
    hosts:
      - host: frontier.example.com
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                port:
                  number: 8082
  config:
    FRONTIER_SPICEDB_HOST: spicedb.namespace.svc.local
    FRONTIER_SPICEDB_PORT: 50051
    FRONTIER_APP_CONNECT_PORT: 8082
    FRONTIER_LOG_LEVEL: info
    FRONTIER_DB_DRIVER: postgres
    FRONTIER_APP_BILLING_REFRESH_INTERVAL_CUSTOMER: 0
    FRONTIER_APP_BILLING_REFRESH_INTERVAL_SUBSCRIPTION: 0
    FRONTIER_APP_BILLING_REFRESH_INTERVAL_CHECKOUT: 0
    FRONTIER_APP_BILLING_REFRESH_INTERVAL_INVOICE: 0
  secretConfig:
    FRONTIER_DB_URL:
    FRONTIER_SPICEDB_PRE_SHARED_KEY:

frontier-worker:
  enabled: true
  replicaCount: 1
  image:
    repository: raystack/frontier
    pullPolicy: IfNotPresent
    tag: v0.65.0
  container:
    command: ["frontier", "server", "start"]
    livenessProbe:
      grpc:
        port: 8082
      httpGet: null
    readinessProbe:
      grpc:
        port: 8082
      httpGet: null
    ports:
      - name: admin-ui
        containerPort: 3000
        protocol: TCP
      - name: connectrpc
        containerPort: 8082
        protocol: TCP
  service:
    enabled: false
  ingress:
    enabled: false
  config:
    FRONTIER_SPICEDB_HOST: spicedb.namespace.svc.local
    FRONTIER_SPICEDB_PORT: 50051
    FRONTIER_APP_CONNECT_PORT: 8082
    FRONTIER_LOG_LEVEL: info
    FRONTIER_DB_DRIVER: postgres
  secretConfig:
    FRONTIER_DB_URL:
    FRONTIER_SPICEDB_PRE_SHARED_KEY:

spicedb:
  enabled: true
  nameOverride: frontier-spicedb
  replicaCount: 2
  image:
    repository: quay.io/authzed/spicedb
    tag: v1.30.1
  secretConfig:
    SPICEDB_GRPC_PRESHARED_KEY:
    SPICEDB_DATASTORE_CONN_URI:
  config:
    SPICEDB_LOG_LEVEL: info
    SPICEDB_DATASTORE_ENGINE:
    SPICEDB_GRPC_ENABLED: "true"
    SPICEDB_HTTP_ENABLED: "true"
    SPICEDB_GRPC_SHUTDOWN_GRACE_PERIOD: "5s"
  container:
    ports:
      - containerPort: 50051
        protocol: TCP
      - containerPort: 8443
        protocol: TCP
    livenessProbe:
      exec:
        command: ["grpc_health_probe", "-v", "-addr=localhost:50051"]
    readinessProbe:
      exec:
        command: ["grpc_health_probe", "-v", "-addr=localhost:50051"]
    command: ["spicedb", "serve"]
  service:
    type: ClusterIP
    ports:
      - port: 80
        name: rest
        targetPort: 8443
        protocol: TCP
      - port: 50051
        name: grpc
        targetPort: 50051
        protocol: TCP
    annotations: {}
  ingress:
    enabled: false
    annotations: {}
    hosts:
      - host: spicedb.example.com
        paths:
          - path: /
            pathType: ImplementationSpecific
            backend:
              service:
                port:
                  number: 80