205 lines
3.9 KiB
YAML
205 lines
3.9 KiB
YAML
# Default values for phpmyadmin-nginx
|
|
# This is a YAML-formatted file.
|
|
# Declare variables to be passed into your templates.
|
|
|
|
replicaCount: 1
|
|
|
|
image:
|
|
nginx:
|
|
registry: docker.io
|
|
repository: nginx
|
|
tag: "1.29.3-alpine-perl"
|
|
pullPolicy: IfNotPresent
|
|
phpmyadmin:
|
|
registry: docker.io
|
|
repository: phpmyadmin
|
|
tag: "5.2.3-fpm-alpine"
|
|
pullPolicy: IfNotPresent
|
|
|
|
imagePullSecrets: []
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
serviceAccount:
|
|
create: true
|
|
annotations: {}
|
|
name: ""
|
|
|
|
podAnnotations: {}
|
|
|
|
podSecurityContext:
|
|
fsGroup: 82
|
|
runAsNonRoot: true
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
securityContext:
|
|
nginx:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: true
|
|
runAsUser: 101
|
|
phpmyadmin:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: false
|
|
runAsNonRoot: true
|
|
runAsUser: 82
|
|
|
|
service:
|
|
# type: ClusterIP
|
|
type: LoadBalancer
|
|
port: 80
|
|
targetPort: 8080
|
|
annotations: {}
|
|
|
|
ingress:
|
|
enabled: false
|
|
className: "nginx"
|
|
annotations: {}
|
|
# {
|
|
# acme.cert-manager.io/http01-ingress-class: "nginx",
|
|
# cert-manager.io/cluster-issuer: "letsencrypt-issuer",
|
|
# nginx.ingress.kubernetes.io/from-to-www-redirect: "true",
|
|
# nginx.ingress.kubernetes.io/proxy-body-size: "100m",
|
|
# nginx.ingress.kubernetes.io/rate-limit: "10"
|
|
# }
|
|
hosts:
|
|
- host: phpmyadmin.local
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls: []
|
|
# - secretName: phpmyadmin-tls
|
|
# hosts:
|
|
# - phpmyadmin.local
|
|
|
|
resources:
|
|
nginx:
|
|
limits:
|
|
cpu: 200m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 64Mi
|
|
phpmyadmin:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
requests:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
|
|
autoscaling:
|
|
enabled: false
|
|
minReplicas: 2
|
|
maxReplicas: 10
|
|
targetCPUUtilizationPercentage: 80
|
|
targetMemoryUtilizationPercentage: 80
|
|
|
|
nodeSelector: {}
|
|
|
|
tolerations: []
|
|
|
|
affinity:
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- weight: 100
|
|
podAffinityTerm:
|
|
labelSelector:
|
|
matchExpressions:
|
|
- key: app.kubernetes.io/name
|
|
operator: In
|
|
values:
|
|
- phpmyadmin-nginx
|
|
topologyKey: kubernetes.io/hostname
|
|
|
|
# phpMyAdmin specific configuration
|
|
phpmyadmin:
|
|
# MySQL/MariaDB server configuration
|
|
hosts:
|
|
- host: mysql.default.svc.cluster.local
|
|
port: 3306
|
|
|
|
# Environment variables
|
|
env:
|
|
PMA_ARBITRARY: "0"
|
|
PMA_ABSOLUTE_URI: ""
|
|
UPLOAD_LIMIT: "128M"
|
|
MEMORY_LIMIT: "512M"
|
|
MAX_EXECUTION_TIME: "600"
|
|
|
|
# Secret for blowfish secret (auto-generated if not provided)
|
|
blowfishSecret: ""
|
|
existingSecret: ""
|
|
|
|
# Nginx configuration
|
|
nginx:
|
|
config:
|
|
clientMaxBodySize: "128m"
|
|
workerProcesses: "auto"
|
|
workerConnections: "1024"
|
|
|
|
# Persistence for sessions
|
|
persistence:
|
|
enabled: false
|
|
storageClass: ""
|
|
accessMode: ReadWriteMany
|
|
size: 1Gi
|
|
annotations: {}
|
|
|
|
# Liveness and readiness probes
|
|
livenessProbe:
|
|
enabled: true
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 6
|
|
successThreshold: 1
|
|
|
|
readinessProbe:
|
|
enabled: true
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 5
|
|
timeoutSeconds: 3
|
|
failureThreshold: 3
|
|
successThreshold: 1
|
|
|
|
# Network Policy
|
|
networkPolicy:
|
|
enabled: false
|
|
policyTypes:
|
|
- Ingress
|
|
- Egress
|
|
ingress:
|
|
- from:
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
name: ingress-nginx
|
|
ports:
|
|
- protocol: TCP
|
|
port: 8080
|
|
egress:
|
|
- to:
|
|
- namespaceSelector: {}
|
|
ports:
|
|
- protocol: TCP
|
|
port: 3306
|
|
- to:
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
name: kube-system
|
|
ports:
|
|
- protocol: UDP
|
|
port: 53
|
|
|
|
# Pod Disruption Budget
|
|
podDisruptionBudget:
|
|
enabled: true
|
|
minAvailable: 1
|
|
# maxUnavailable: 1 |