3129e88e95
1. Changing the Maps API Key doesn't need restart anymore. 2. The `isRestartRequired` field in the response of updating env settings, was being ignored. The client owns the decision of when to restart (which is correct), so removed this from the server. 3. Write Maps API Key to the database, in the tenant configuration. 4. The Settings page for Maps Ke gets the current value from `/tenant/current` response, and not `/admin/env`. 5. Removed `APPSMITH_GOOGLE_MAPS_API_KEY` from `/admin/env` response. 6. Tests. DO NOT MERGE. Please only review/approve. This is expected to break EE once it goes there, which I intend to solve alongside merging this. Changing the Maps API Key will update it both in the tenant config in the database, as well as in the `docker.env` file. This is predominantly for backwards compatibility, and phased rollout. As part of a separate PR, we'll have a migration that proactively copies the env variable value to the database, and comment out the value in the `docker.env` file. Then we can stop updating the `docker.env` file as well. ## New  ## Old  --------- Co-authored-by: Ankita Kinger <ankita@appsmith.com>
310 lines
9.6 KiB
YAML
310 lines
9.6 KiB
YAML
## Redis parameters
|
|
redis:
|
|
enabled: true
|
|
auth:
|
|
enabled: false
|
|
master:
|
|
nodeSelector: {}
|
|
replica:
|
|
replicaCount: 1
|
|
nodeSelector: {}
|
|
|
|
mongodb:
|
|
enabled: true
|
|
service:
|
|
nameOverride: appsmith-mongodb
|
|
auth:
|
|
rootUser: root
|
|
rootPassword: password
|
|
replicaCount: 2
|
|
architecture: "replicaset"
|
|
replicaSetName: rs0
|
|
nodeSelector: {}
|
|
arbiter:
|
|
nodeSelector: {}
|
|
hidden:
|
|
nodeSelector: {}
|
|
|
|
## @section Global parameters
|
|
## Global Docker image parameters
|
|
## Please, note that this will override the image parameters, including dependencies, configured to use the global value
|
|
## Current available global Docker image parameters: imageRegistry, imagePullSecrets and storageClass
|
|
##
|
|
|
|
## @param global.storageClass Global StorageClass for Persistent Volume(s)
|
|
## @param global.namespaceOverride Override the namespace for resource deployed by the chart, but can itself be overridden by the local namespaceOverride
|
|
##
|
|
global:
|
|
storageClass: ""
|
|
namespaceOverride: ""
|
|
## @param fullnameOverride String to fully override appsmith.fullname template
|
|
##
|
|
fullnameOverride: ""
|
|
## @param containerName specify running container name in a pod
|
|
##
|
|
containerName: "appsmith"
|
|
## @param commonLabels Labels to add to all deployed objects
|
|
##
|
|
commonLabels: {}
|
|
## @param commonAnnotations Common annotations to add to all Appsmith resources (sub-charts are not considered). Evaluated as a template
|
|
##
|
|
commonAnnotations: {}
|
|
## @param schedulerName Name of the scheduler (other than default) to dispatch pods
|
|
## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
|
|
##
|
|
schedulerName: ""
|
|
## @param strategyType StrategyType for Appsmith® statefulset
|
|
## It can be set to RollingUpdate or Recreate by default.
|
|
##
|
|
strategyType: RollingUpdate
|
|
##
|
|
## Init containers for redis & mongodb
|
|
##
|
|
initContainer: {}
|
|
# redis:
|
|
# image: alpine
|
|
# mongodb:
|
|
# image: docker.io/bitnami/mongodb:4.4.11-debian-10-r12
|
|
## Image
|
|
##
|
|
image:
|
|
registry: index.docker.io
|
|
repository: appsmith/appsmith-ce
|
|
pullPolicy: IfNotPresent
|
|
pullSecrets: ""
|
|
# Overrides the image tag whose default is the chart appVersion.
|
|
tag: "latest"
|
|
## ServiceAccount
|
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
|
|
##
|
|
serviceAccount:
|
|
## @param serviceAccount.create Enable creation of ServiceAccount for Appsmith; pods
|
|
##
|
|
create: true
|
|
## @param serviceAccount.name Name of the created serviceAccount
|
|
## If not set and create is true, a name is generated using the appsmith.fullname template
|
|
##
|
|
name: ""
|
|
## @param serviceAccount.annotations Additional Service Account annotations
|
|
##
|
|
annotations: {}
|
|
|
|
podAnnotations: {}
|
|
|
|
podLabels: {}
|
|
|
|
podSecurityContext: {}
|
|
# fsGroup: 2000
|
|
|
|
securityContext: {}
|
|
# capabilities:
|
|
# drop:
|
|
# - ALL
|
|
# readOnlyRootFilesystem: true
|
|
# runAsNonRoot: true
|
|
# runAsUser: 1000
|
|
|
|
service:
|
|
## @param service.type Kubernetes Service type
|
|
##
|
|
type: ClusterIP
|
|
## @param service.port; service port
|
|
##
|
|
port: 80
|
|
## @param service.nodePort; Node port to expose if service type is "LoadBalancer" or "NodePort"
|
|
##
|
|
nodePort: 8000
|
|
## @param service.portName Appsmith; service port name
|
|
##
|
|
portName: appsmith
|
|
## @param service.clusterIP Appsmith; service cluster IP
|
|
## e.g:
|
|
## clusterIP: None
|
|
##
|
|
clusterIP: ""
|
|
## @param service.loadBalancerIP loadBalancerIP for Appsmith® Service
|
|
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer
|
|
##
|
|
loadBalancerIP: ""
|
|
## @param service.loadBalancerSourceRanges Address(es) that are allowed when service is LoadBalancer
|
|
## ref: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service
|
|
##
|
|
loadBalancerSourceRanges: []
|
|
## @param service.annotations Provide any additional annotations that may be required
|
|
##
|
|
annotations: {}
|
|
|
|
ingress:
|
|
## @param ingress.enabled Enable ingress record generation for Ghost
|
|
##
|
|
enabled: false
|
|
## @param ingress.annotations Additional custom annotations for the ingress record
|
|
## NOTE: If `ingress.certManager=true`, annotation `kubernetes.io/tls-acme: "true"` will automatically be added
|
|
##
|
|
annotations: {}
|
|
# kubernetes.io/ingress.class: nginx
|
|
# cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
|
# nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
|
# nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
hosts: []
|
|
# - host: appsmith-domain.me
|
|
## @param ingress.tls Enable TLS configuration for the host defined at `ingress.hosts` parameter
|
|
## You can:
|
|
## - Use the `ingress.secrets` parameter to create this TLS secret
|
|
## - Relay on cert-manager to create it by setting `ingress.certManager=true`
|
|
## - Relay on Helm to create self-signed certificates by setting `ingress.selfSigned=true`
|
|
##
|
|
tls: false
|
|
## @param ingress.secrets Custom TLS certificates as secrets
|
|
## NOTE: 'key' and 'certificate' are expected in PEM format
|
|
## NOTE: 'name' should line up with a 'secretName' set further up
|
|
## If it is not set and you're using cert-manager, this is unneeded, as it will create a secret for you with valid certificates
|
|
## If it is not set and you're NOT using cert-manager either, self-signed certificates will be created valid for 365 days
|
|
## It is also possible to create and manage the certificates outside of this helm chart
|
|
## Please see README.md for more information
|
|
## e.g:
|
|
## secrets:
|
|
## - host: chart-example.local
|
|
## key: |-
|
|
## -----BEGIN RSA PRIVATE KEY-----
|
|
## ...
|
|
## -----END RSA PRIVATE KEY-----
|
|
## certificate: |-
|
|
## -----BEGIN CERTIFICATE-----
|
|
## ...
|
|
## -----END CERTIFICATE-----
|
|
##
|
|
secrets: []
|
|
## @param ingress.certManager Enable ingress to use TLS certificates provided by Cert Manager
|
|
##
|
|
certManager: false
|
|
## @param ingress.certManagerTls Specify the TLS secret created by Cert Manager
|
|
## e.g:
|
|
## certManagerTls:
|
|
## - hosts:
|
|
## - appsmith-domain.me
|
|
## secretName: appsmith-tls
|
|
certManagerTls: []
|
|
## @parm ingress.className Configure Ingress class that being used in ingress resource
|
|
## e.g:
|
|
## className: "nginx"
|
|
##
|
|
className: "nginx"
|
|
|
|
resources:
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
limits: {}
|
|
requests: {}
|
|
|
|
nodeSelector: {}
|
|
|
|
tolerations: []
|
|
|
|
affinity: {}
|
|
|
|
persistence:
|
|
## @param persistence.enabled - Enable data persistence using PVC
|
|
##
|
|
enabled: true
|
|
## @param persistence.storageClass PVC Storage Class
|
|
##
|
|
storageClass: ""
|
|
## @param persistence.annotations Additional custom annotations for the PVC
|
|
##
|
|
annotations: {}
|
|
## @param persistence.localStorage - Use local storage for PVC
|
|
##
|
|
localStorage: false
|
|
## @param persistence.storagePath - local storage path
|
|
##
|
|
storagePath: /tmp/hostpath_pv
|
|
## @param persistence.localCluster
|
|
##
|
|
localCluster:
|
|
- minikube
|
|
## @param persistence.accessModes PV Access Mode
|
|
##
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
## @param persistence.size PVC Storage Request
|
|
##
|
|
size: 10Gi
|
|
# tags:
|
|
# install-ingress-nginx: true
|
|
storageClass:
|
|
## @param storageClass.enabled - Enable config storage class
|
|
##
|
|
enabled: false
|
|
## @param storageClass.bindingMode - the binding mode for PVCs using this storage class
|
|
##
|
|
bindingMode: Immediate
|
|
## @param storageClass.defaultClass - boolean to set annotation designating this object as the default storage class
|
|
##
|
|
defaultClass: false
|
|
## @param storageClass.allowVolumeExpansion - allow expansion of PVCs using this storage class
|
|
##
|
|
allowVolumeExpansion: true
|
|
## @param storageClass.reclaimPolicy - configures the retention of the PV when dynamically created using this class
|
|
##
|
|
reclaimPolicy: Delete
|
|
## @param storageClass.provisioner - storage class parameters used for volumes created with this storage class
|
|
##
|
|
provisioner: ""
|
|
## @param storageClass.annotations - annotations in yaml map format to be added to the object
|
|
##
|
|
annotations: {}
|
|
## @param storageClass.mountOptions - options used by volumes created by this storage class
|
|
##
|
|
mountOptions: {}
|
|
## @param storageClass.parameters - storage class parameters used for volumes created with this storage class
|
|
##
|
|
parameters: {}
|
|
|
|
autoupdate:
|
|
## @param autoupdate.enabled - Enable config autoupdate
|
|
##
|
|
enabled: false
|
|
## @param autoupdate.scheduler - Schedule cron job to check & update Helm image
|
|
##
|
|
scheduler: "0 * * * *"
|
|
|
|
secretName: ""
|
|
|
|
applicationConfig:
|
|
APPSMITH_OAUTH2_GOOGLE_CLIENT_ID: ""
|
|
APPSMITH_OAUTH2_GOOGLE_CLIENT_SECRET: ""
|
|
APPSMITH_OAUTH2_GITHUB_CLIENT_ID: ""
|
|
APPSMITH_OAUTH2_GITHUB_CLIENT_SECRET: ""
|
|
APPSMITH_FORM_LOGIN_DISABLED: ""
|
|
APPSMITH_SIGNUP_DISABLED: ""
|
|
APPSMITH_CLIENT_LOG_LEVEL: ""
|
|
APPSMITH_MAIL_ENABLED: ""
|
|
APPSMITH_MAIL_HOST: ""
|
|
APPSMITH_MAIL_PORT: ""
|
|
APPSMITH_MAIL_USERNAME: ""
|
|
APPSMITH_MAIL_PASSWORD: ""
|
|
APPSMITH_MAIL_FROM: ""
|
|
APPSMITH_REPLY_TO: ""
|
|
APPSMITH_MAIL_SMTP_AUTH: ""
|
|
APPSMITH_MAIL_SMTP_TLS_ENABLED: ""
|
|
APPSMITH_DISABLE_TELEMETRY: ""
|
|
APPSMITH_RECAPTCHA_SITE_KEY: ""
|
|
APPSMITH_RECAPTCHA_SECRET_KEY: ""
|
|
APPSMITH_RECAPTCHA_ENABLED: ""
|
|
APPSMITH_MONGODB_URI: ""
|
|
APPSMITH_REDIS_URL: ""
|
|
APPSMITH_ENCRYPTION_PASSWORD: ""
|
|
APPSMITH_ENCRYPTION_SALT: ""
|
|
APPSMITH_CUSTOM_DOMAIN: ""
|
|
APPSMITH_DISABLE_IFRAME_WIDGET_SANDBOX: "false"
|
|
APPSMITH_ENABLE_EMBEDDED_DB: 0
|