> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mogenius.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Self hosted
The mogenius platform is available as a SaaS option on [app.mogenius.com](https://app.mogenius.com). If you prefer the self-hosted version of mogenius, you can install it with our Helm chart. This way you can run mogenius on your own clusters and even in air-gapped environments.
## Prerequisites
* A Kubernetes cluster with at least 1 CPU and 1 GB of memory available.
* Credentials for pulling the mogenius images from the container registry (see below).
* The traefik ingress controller.
* A working local installation of [Helm](https://helm.sh/).
* A MySQL server (optional).
Running the platform as a self-hosted version requires a subscription. Contact our sales team for more information.
## Quickstart
For a quick installation of the mogenius platform with defaults where possible, follow these steps.
### Create a Namespace
On the cluster where you're installing the mogenius platform, create a new namespace `mogenius-platform`.
### Create Secrets
The platform services require a few secrets containing critical credentials that aren't created by the Helm chart. The following secrets are required for the minimum configuration. Additional secrets can be used when working with more sophisticated Helm chart configurations.
**1. Container Registry**\
After obtaining a subscription for the self-hosted version, you will have received credentials for the container registry where the platform images are stored. In your `mogenius-platform` namespace create a new secret `mo-registry-credentials` and store the credentials as type `kubernetes.io/dockerconfigjson`.
**2. Redis**\
Create a secret `mo-redis-secret` with the key `REDIS_SECRET`. Define a secure password as a value that you store in a safe place (e.g. a vault).
**3. Encryption Key**\
Create a secret `mo-platform-shared` with the key `MO_CORE_NEST__SSH_SYM_ENC_KEY`. As a value, use `openssl rand -base64 32` or a similar method on your terminal to create a base64-encrypted key.
**4. MySQL**\
Create the secret `mo-mysql-secret` with the keys `MYSQL_PASSWORD` and `MYSQL_ROOT_PASSWORD`. Use secure passwords as values.
**5. Admin User**\
Create the secret `mo-platform-user-secret` with the following keys and values:
`MO_USER_NEST__SYSTEM_ADMIN_EMAIL`\
The email address to log in with your admin user.
`MO_USER_NEST__SYSTEM_ADMIN_PASSWORD`\
The password for your admin user.
`MO_CORE_NEST__SSH_SYM_ENC_KEY`\
Use the same value that you set in the secret `mo-platform-shared`.
`MO_USER_NEST__JWT_PRIVATE`\
Create a private key using the following commands and retrieve the value from the text file.
```
openssl ecparam -genkey -name secp521r1 -noout -out ec512-key-pair.pem
openssl base64 -A -in ec512-key-pair.pem -out ec512-key-pair.txt
```
`MO_USER_NEST__JWT_PUBLIC`\
Create a public key using the following commands and retrieve the value from the text file.
```
openssl ec -in ec512-key-pair.pem -pubout -out public.pem
openssl base64 -A -in public.pem -out public.txt
```
`MO_USER_NEST__SESSION_SECRET`\
Define a secure secret of your choice.
### Prepare your values.yaml
The Helm chart supports wide range of values that you can use to configure your installation of the mogenius platform. Skip to [values](/cluster-management/self-hosted#values) for a full reference of the chart.
Below is an example `values.yaml` for a minimal setup to install the mogenius platform in a development environment. Make sure to review the configuration and ensure that it matches your infrastructure.
```yaml values.yaml quickstart example theme={null}
ingress:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-cluster-issuer
traefik.ingress.kubernetes.io/forward-headers: "true"
traefik.ingress.kubernetes.io/router.middlewares: mogenius-platform-cors-middleware@kubernetescrd
traefik.ingress.kubernetes.io/secure-headers: "true"
api_service_url: platform-api.YOURDOMAIN.com
hostname: mogenius.YOURDOMAIN.com
k8s_cmd_stream_url: k8s-cmd-stream.YOURDOMAIN.com
k8s_dispatcher_url: k8s-dispatcher.YOURDOMAIN.com
k8s_logs_url: k8s-logs.YOURDOMAIN.com
k8s_websocket_url: k8s-ws.YOURDOMAIN.com
rootDomain: YOURDOMAIN.com
socket_service_url: platform-ws.YOURDOMAIN.com
tls:
- hosts:
- mogenius.YOURDOMAIN.com
- platform-api.YOURDOMAIN.com
- platform-user.YOURDOMAIN.com
- platform-ws.YOURDOMAIN.com
- k8s-ws.YOURDOMAIN.com
- k8s-logs.YOURDOMAIN.com
- k8s-cmd-stream.YOURDOMAIN.com
- k8s-dispatcher.YOURDOMAIN.com
secretName: mo-platform-tls
traefik:
apiVersion: traefik.io/v1alpha1
user_service_url: platform-user.YOURDOMAIN.com
mo_platform:
metrics:
enabled: true
resources:
requests:
cpu: 10m
memory: 50Mi
mo_platform_api:
enableAutoRefreshToken: true
refreshTokenTask: true
mo_platform_user:
openid:
enabled: false
mogenius:
imagePullSecrets:
- mo-registry-credentials
mysql:
enabled: true
ssl: false
storage:
accessMode: ReadWriteOnce
className: local-path
persistentVolume:
create: false
```
This chart configuration deploys the MySQL Docker image as part of the platform deployment. This setup is not recommended for running the mogenius platform in production scenarios. We recommend configuring the `mysql` values with connection to a high-availability MySQL for use in a production environment.
### Deploy the Helm chart
Run the following command on your cluster to install the Helm chart with your values.yaml.
```
helm repo add mogenius https://helm.mogenius.com/private
helm install mogenius-platform mogenius/mo-infrastructure -n mogenius-platform -f values.yaml
```
### Access the mogenius web interface
Check the status of the installation and make sure all Pods are starting properly.
```
kubectl get Pods -n mogenius-platform
```
When all Pods are `Running`, access the mogenius platform with the hostname you specified in your Ingress (e.g. mogenius.yourdomain.com). You can log in with the credentials of your admin user.
### Next steps
Now that mogenius is up and running you can prepare the platform for your team. Check out the following resources as next steps:
* [Quickstart guide](../overview/quickstart) for connecting your first cluster and getting started with Workspaces.
* [Enable Single Sign-On](./single-sign-on) to enable your team joining the mogenius platform.
* [Configure GitOps](./gitops) for enabling Git-based workflows in mogenius using Argo CD.
### Support
Need help setting up the mogenius platform? Contact us via [support@mogenius.com](mailto:support@mogenius.com).
## Values
| Key | Type | Default | Description |
| ----------------------------------------------------------------------------- | ------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------- |
| demo.enabled | bool | `true` | |
| demo.secretName | string | `"mo-platform-demo"` | |
| dockersecrets | object | `{}` | |
| global.imagePullSecrets | list | `[]` | list(of string) set the image pull secrets for all images |
| global.serviceMonitor.fallbackScrapeProtocol | string | `"PrometheusText0.0.4"` | fallback scrape protocol for service monitors |
| ingress.annotations | object | `{"traefik.ingress.kubernetes.io/forward-headers":"true","traefik.ingress.kubernetes.io/router.middlewares":"mogenius-cors-middleware@kubernetescrd","traefik.ingress.kubernetes.io/secure-headers":"true"}` | annotations to be placed on the ingress |
| ingress.api\_service\_url | string | `nil` | api hostname e.g. api-app.example.com |
| ingress.hostname | string | `nil` | platform hostname e.g. app.example.com |
| ingress.ingressClassName | string | `"traefik"` | |
| ingress.k8s\_cmd\_stream\_url | string | `nil` | kubernetes cmd stream hostname e.g. k8s-cmd-stream.example.com |
| ingress.k8s\_dispatcher\_url | string | `nil` | kubernetes dispatcher hostname e.g. k8s-dispatcher.example.com |
| ingress.k8s\_logs\_url | string | `nil` | kubernetes log hostname e.g. k8s-logs.example.com |
| ingress.k8s\_websocket\_url | string | `nil` | kubernetes websocket hostname e.g. k8s-ws.example.com |
| ingress.rootDomain | string | `nil` | Root domain that the platorm will be hosted on, e.g. example.com |
| ingress.socket\_service\_url | string | `nil` | websocket hostname e.g. ws-app.example.com |
| ingress.tls | list | `[]` | secret reference for tls |
| ingress.traefik | object | `{"apiVersion":"traefik.containo.us/v1alpha1"}` | traefik specific settings |
| ingress.traefik.apiVersion | string | `"traefik.containo.us/v1alpha1"` | the apiVersion that shall be used for traefik resources |
| ingress.user\_service\_url | string | `nil` | user service hostname e.g. user-app.example.com |
| mo\_platform.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
| mo\_platform.containerSecurityContext.capabilities.drop\[0] | string | `"ALL"` | |
| mo\_platform.containerSecurityContext.readOnlyRootFilesystem | bool | `true` | |
| mo\_platform.enabled | bool | `true` | |
| mo\_platform.image.registry | string | `"ghcr.io"` | |
| mo\_platform.image.repository | string | `"mogenius/mo-frontend"` | |
| mo\_platform.image.tag | string | `"v2.5.7"` | |
| mo\_platform.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform.metrics | object | `{"containerSecurityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true},"enabled":false,"image":{"registry":"docker.io","repository":"nginx/nginx-prometheus-exporter","tag":"1.5.1"},"port":9113,"resources":{},"serviceMonitor":{"enabled":false}}` | prometheus exporter for nginx |
| mo\_platform.podSecurityContext.fsGroup | int | `101` | |
| mo\_platform.podSecurityContext.runAsUser | int | `101` | |
| mo\_platform.podSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` | |
| mo\_platform.port | int | `8080` | |
| mo\_platform.replicas | int | `1` | |
| mo\_platform.resources | object | `{}` | |
| mo\_platform.tolerations | object | `{}` | |
| mo\_platform\_api.containerSecurityContext | object | `{}` | |
| mo\_platform\_api.enableAutoRefreshToken | bool | `false` | |
| mo\_platform\_api.enabled | bool | `true` | |
| mo\_platform\_api.image.registry | string | `"ghcr.io"` | |
| mo\_platform\_api.image.repository | string | `"mogenius/mo-platform-api-service"` | |
| mo\_platform\_api.image.tag | string | `"v3.0.23"` | |
| mo\_platform\_api.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform\_api.initContainer.containerSecurityContext | object | `{}` | |
| mo\_platform\_api.initContainer.image.registry | string | `"docker.io"` | |
| mo\_platform\_api.initContainer.image.repository | string | `"alpine/curl"` | |
| mo\_platform\_api.initContainer.image.tag | string | `"8.14.1"` | |
| mo\_platform\_api.podSecurityContext | object | `{}` | |
| mo\_platform\_api.port | int | `1337` | |
| mo\_platform\_api.port\_tcp | int | `7000` | |
| mo\_platform\_api.probes.enabled | bool | `true` | |
| mo\_platform\_api.probes.livenessProbe.enabled | bool | `true` | |
| mo\_platform\_api.probes.livenessProbe.path | string | `"/core/status"` | |
| mo\_platform\_api.probes.port | int | `1337` | |
| mo\_platform\_api.probes.readinessProbe.enabled | bool | `true` | |
| mo\_platform\_api.probes.readinessProbe.path | string | `"/core/status"` | |
| mo\_platform\_api.probes.startupProbe.enabled | bool | `true` | |
| mo\_platform\_api.probes.startupProbe.path | string | `"/core/status"` | |
| mo\_platform\_api.refreshTokenTask | bool | `false` | if set to true will refresh the tokens in the database |
| mo\_platform\_api.replicas | int | `1` | |
| mo\_platform\_api.resources | object | `{}` | |
| mo\_platform\_api.sshSymEncKey.secretKey | string | `"MO_CORE_NEST__SSH_SYM_ENC_KEY"` | |
| mo\_platform\_api.sshSymEncKey.secretName | string | `"mo-platform-shared"` | |
| mo\_platform\_api.tolerations | object | `{}` | |
| mo\_platform\_api.ws\_cmd\_stream\_port | int | `7003` | |
| mo\_platform\_api.ws\_log\_port | int | `7002` | |
| mo\_platform\_api.ws\_port | int | `7001` | |
| mo\_platform\_api\_valkey.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
| mo\_platform\_api\_valkey.containerSecurityContext.capabilities.drop\[0] | string | `"ALL"` | |
| mo\_platform\_api\_valkey.containerSecurityContext.readOnlyRootFilesystem | bool | `true` | |
| mo\_platform\_api\_valkey.containerSecurityContext.runAsGroup | int | `999` | |
| mo\_platform\_api\_valkey.containerSecurityContext.runAsNonRoot | bool | `true` | |
| mo\_platform\_api\_valkey.containerSecurityContext.runAsUser | int | `999` | |
| mo\_platform\_api\_valkey.enabled | bool | `true` | |
| mo\_platform\_api\_valkey.host | string | `"mo-platform-api-valkey"` | |
| mo\_platform\_api\_valkey.image.registry | string | `"docker.io"` | |
| mo\_platform\_api\_valkey.image.repository | string | `"valkey/valkey"` | |
| mo\_platform\_api\_valkey.image.tag | float | `8.1` | |
| mo\_platform\_api\_valkey.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform\_api\_valkey.password.secretKey | string | `"REDIS_SECRET"` | |
| mo\_platform\_api\_valkey.password.secretName | string | `"mo-redis-secret"` | |
| mo\_platform\_api\_valkey.podSecurityContext.fsGroup | int | `999` | |
| mo\_platform\_api\_valkey.podSecurityContext.runAsGroup | int | `999` | |
| mo\_platform\_api\_valkey.podSecurityContext.runAsUser | int | `999` | |
| mo\_platform\_api\_valkey.podSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` | |
| mo\_platform\_api\_valkey.port | int | `6379` | |
| mo\_platform\_api\_valkey.resources | object | `{}` | |
| mo\_platform\_message\_dispatcher.containerSecurityContext | object | `{}` | |
| mo\_platform\_message\_dispatcher.enabled | bool | `true` | |
| mo\_platform\_message\_dispatcher.image.registry | string | `"ghcr.io"` | |
| mo\_platform\_message\_dispatcher.image.repository | string | `"mogenius/mo-platform-message-dispatcher"` | |
| mo\_platform\_message\_dispatcher.image.tag | string | `"v1.1.1"` | |
| mo\_platform\_message\_dispatcher.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform\_message\_dispatcher.listen\_host | string | `"0.0.0.0"` | |
| mo\_platform\_message\_dispatcher.podSecurityContext | object | `{}` | |
| mo\_platform\_message\_dispatcher.port | int | `7060` | |
| mo\_platform\_message\_dispatcher.redis.host | string | `"localhost"` | |
| mo\_platform\_message\_dispatcher.redis.image.registry | string | `"docker.io"` | |
| mo\_platform\_message\_dispatcher.redis.image.repository | string | `"redis"` | |
| mo\_platform\_message\_dispatcher.redis.image.tag | string | `"7.4.6"` | |
| mo\_platform\_message\_dispatcher.redis.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform\_message\_dispatcher.redis.password.secretKey | string | `"REDIS_SECRET"` | |
| mo\_platform\_message\_dispatcher.redis.password.secretName | string | `"mo-redis-secret"` | |
| mo\_platform\_message\_dispatcher.redis.port | int | `6379` | |
| mo\_platform\_message\_dispatcher.redis.tls | bool | `false` | |
| mo\_platform\_message\_dispatcher.replicas | int | `1` | |
| mo\_platform\_message\_dispatcher.resources | object | `{}` | |
| mo\_platform\_message\_dispatcher.tolerations | object | `{}` | |
| mo\_platform\_notification.containerSecurityContext | object | `{}` | |
| mo\_platform\_notification.email.fromAddress | string | `"no-reply@mogenius.com"` | |
| mo\_platform\_notification.email.fromName | string | `"Mogenius Team"` | |
| mo\_platform\_notification.enabled | bool | `true` | |
| mo\_platform\_notification.image.registry | string | `"ghcr.io"` | |
| mo\_platform\_notification.image.repository | string | `"mogenius/mo-platform-notification"` | |
| mo\_platform\_notification.image.tag | string | `"v2.0.2"` | |
| mo\_platform\_notification.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform\_notification.podSecurityContext | object | `{}` | |
| mo\_platform\_notification.port | int | `7000` | |
| mo\_platform\_notification.replicas | int | `1` | |
| mo\_platform\_notification.resources | object | `{}` | |
| mo\_platform\_notification.sshSymEncKey.secretKey | string | `"MO_CORE_NEST__SSH_SYM_ENC_KEY"` | |
| mo\_platform\_notification.sshSymEncKey.secretName | string | `"mo-platform-shared"` | |
| mo\_platform\_notification.tolerations | object | `{}` | |
| mo\_platform\_queue.containerSecurityContext | object | `{}` | |
| mo\_platform\_queue.enabled | bool | `true` | |
| mo\_platform\_queue.image.registry | string | `"ghcr.io"` | |
| mo\_platform\_queue.image.repository | string | `"mogenius/mo-platform-queue"` | |
| mo\_platform\_queue.image.tag | string | `"v2.0.4"` | |
| mo\_platform\_queue.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform\_queue.podSecurityContext | object | `{}` | |
| mo\_platform\_queue.redis.host | string | `"localhost"` | |
| mo\_platform\_queue.redis.image.registry | string | `"docker.io"` | |
| mo\_platform\_queue.redis.image.repository | string | `"redis"` | |
| mo\_platform\_queue.redis.image.tag | string | `"7.4.6"` | |
| mo\_platform\_queue.redis.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform\_queue.redis.password.secretKey | string | `"REDIS_SECRET"` | |
| mo\_platform\_queue.redis.password.secretName | string | `"mo-redis-secret"` | |
| mo\_platform\_queue.redis.port | int | `6379` | |
| mo\_platform\_queue.replicas | int | `1` | |
| mo\_platform\_queue.resources | object | `{}` | |
| mo\_platform\_queue.sshSymEncKey.secretKey | string | `"MO_CORE_NEST__SSH_SYM_ENC_KEY"` | |
| mo\_platform\_queue.sshSymEncKey.secretName | string | `"mo-platform-shared"` | |
| mo\_platform\_queue.tolerations | object | `{}` | |
| mo\_platform\_queue\_valkey.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
| mo\_platform\_queue\_valkey.containerSecurityContext.capabilities.drop\[0] | string | `"ALL"` | |
| mo\_platform\_queue\_valkey.containerSecurityContext.readOnlyRootFilesystem | bool | `true` | |
| mo\_platform\_queue\_valkey.containerSecurityContext.runAsGroup | int | `999` | |
| mo\_platform\_queue\_valkey.containerSecurityContext.runAsNonRoot | bool | `true` | |
| mo\_platform\_queue\_valkey.containerSecurityContext.runAsUser | int | `999` | |
| mo\_platform\_queue\_valkey.enabled | bool | `true` | |
| mo\_platform\_queue\_valkey.host | string | `"mo-platform-queue-valkey"` | |
| mo\_platform\_queue\_valkey.image.registry | string | `"docker.io"` | |
| mo\_platform\_queue\_valkey.image.repository | string | `"valkey/valkey"` | |
| mo\_platform\_queue\_valkey.image.tag | float | `8.1` | |
| mo\_platform\_queue\_valkey.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform\_queue\_valkey.password.secretKey | string | `"REDIS_SECRET"` | |
| mo\_platform\_queue\_valkey.password.secretName | string | `"mo-redis-secret"` | |
| mo\_platform\_queue\_valkey.podSecurityContext.fsGroup | int | `999` | |
| mo\_platform\_queue\_valkey.podSecurityContext.runAsGroup | int | `999` | |
| mo\_platform\_queue\_valkey.podSecurityContext.runAsUser | int | `999` | |
| mo\_platform\_queue\_valkey.podSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` | |
| mo\_platform\_queue\_valkey.port | int | `6379` | |
| mo\_platform\_queue\_valkey.resources | object | `{}` | |
| mo\_platform\_user.containerSecurityContext | object | `{}` | |
| mo\_platform\_user.enabled | bool | `true` | |
| mo\_platform\_user.image.registry | string | `"ghcr.io"` | |
| mo\_platform\_user.image.repository | string | `"mogenius/mo-platform-user"` | |
| mo\_platform\_user.image.tag | string | `"v2.0.4"` | |
| mo\_platform\_user.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform\_user.openid.accessTokenLifetime | int | `600` | |
| mo\_platform\_user.openid.adminAccessTokenLifetime | int | `28800` | |
| mo\_platform\_user.openid.enabled | bool | `true` | |
| mo\_platform\_user.openid.issuer | string | `"https://login-dev.mogenius.com"` | |
| mo\_platform\_user.openid.provider | object | `{"github":{"displayName":"GitHub","enabled":false,"secretKey":"github","secretName":"mo-openid-secret"},"gitlab":{"displayName":"GitLab","enabled":false,"secretKey":"gitlab","secretName":"mo-openid-secret"},"google":{"displayName":"Google","enabled":false,"secretKey":"google","secretName":"mo-openid-secret"},"linkedin":{"displayName":"LinkedIn","enabled":false,"secretKey":"linkedin","secretName":"mo-openid-secret"},"microsoft":{"displayName":"Microsoft","enabled":false,"secretKey":"microsoft","secretName":"mo-openid-secret"}}` | open id provider, e.g. openid.provider.gitlab.secret: `` |
| mo\_platform\_user.openid.refreshTokenLifetime | int | `7776000` | |
| mo\_platform\_user.podSecurityContext | object | `{}` | |
| mo\_platform\_user.port | int | `1337` | |
| mo\_platform\_user.port\_ws | int | `7000` | |
| mo\_platform\_user.probes.enabled | bool | `true` | |
| mo\_platform\_user.probes.livenessProbe.enabled | bool | `true` | |
| mo\_platform\_user.probes.livenessProbe.path | string | `"/core/status"` | |
| mo\_platform\_user.probes.port | int | `1337` | |
| mo\_platform\_user.probes.readinessProbe.enabled | bool | `true` | |
| mo\_platform\_user.probes.readinessProbe.path | string | `"/core/status"` | |
| mo\_platform\_user.probes.startupProbe.enabled | bool | `true` | |
| mo\_platform\_user.probes.startupProbe.path | string | `"/core/status"` | |
| mo\_platform\_user.redis.host | string | `"localhost"` | |
| mo\_platform\_user.redis.image.registry | string | `"docker.io"` | |
| mo\_platform\_user.redis.image.repository | string | `"redis"` | |
| mo\_platform\_user.redis.image.tag | string | `"7.4.6"` | |
| mo\_platform\_user.redis.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform\_user.redis.password.secretKey | string | `"REDIS_SECRET"` | |
| mo\_platform\_user.redis.password.secretName | string | `"mo-redis-secret"` | |
| mo\_platform\_user.redis.port | int | `6379` | |
| mo\_platform\_user.replicas | int | `1` | |
| mo\_platform\_user.resources | object | `{}` | |
| mo\_platform\_user.sshSymEncKey.secretKey | string | `"MO_CORE_NEST__SSH_SYM_ENC_KEY"` | |
| mo\_platform\_user.sshSymEncKey.secretName | string | `"mo-platform-shared"` | |
| mo\_platform\_user.tolerations | object | `{}` | |
| mo\_platform\_websocket.containerSecurityContext | object | `{}` | |
| mo\_platform\_websocket.enabled | bool | `true` | |
| mo\_platform\_websocket.image.registry | string | `"ghcr.io"` | |
| mo\_platform\_websocket.image.repository | string | `"mogenius/mo-platform-websocket"` | |
| mo\_platform\_websocket.image.tag | string | `"v2.0.2"` | |
| mo\_platform\_websocket.imagePullPolicy | string | `"IfNotPresent"` | |
| mo\_platform\_websocket.podSecurityContext | object | `{}` | |
| mo\_platform\_websocket.port | int | `1337` | |
| mo\_platform\_websocket.port\_ws | int | `7000` | |
| mo\_platform\_websocket.replicas | int | `1` | |
| mo\_platform\_websocket.resources | object | `{}` | |
| mo\_platform\_websocket.sshSymEncKey.secretKey | string | `"MO_CORE_NEST__SSH_SYM_ENC_KEY"` | |
| mo\_platform\_websocket.sshSymEncKey.secretName | string | `"mo-platform-shared"` | |
| mo\_platform\_websocket.tolerations | object | `{}` | |
| mogenius.imagePullSecrets | list | `[]` | list(of string) set the image pull secret for mogenius images |
| mysql.allow\_empty\_root\_password | int | `0` | |
| mysql.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
| mysql.containerSecurityContext.capabilities.drop\[0] | string | `"ALL"` | |
| mysql.containerSecurityContext.readOnlyRootFilesystem | bool | `false` | |
| mysql.containerSecurityContext.runAsGroup | int | `999` | |
| mysql.containerSecurityContext.runAsNonRoot | bool | `true` | |
| mysql.containerSecurityContext.runAsUser | int | `999` | |
| mysql.database | string | `"platform"` | |
| mysql.enabled | bool | `false` | |
| mysql.host | string | `"mysql"` | |
| mysql.image.registry | string | `"docker.io"` | |
| mysql.image.repository | string | `"mysql"` | |
| mysql.image.tag | string | `"8.4.7"` | |
| mysql.imagePullPolicy | string | `"IfNotPresent"` | |
| mysql.mountpoint | string | `"/var/lib/mysql"` | |
| mysql.password.secretKey | string | `"MYSQL_PASSWORD"` | |
| mysql.password.secretName | string | `"mo-mysql-secret"` | |
| mysql.podSecurityContext.fsGroup | int | `999` | |
| mysql.port | int | `3306` | |
| mysql.replicas | int | `1` | |
| mysql.resources | object | `{}` | |
| mysql.root\_password.secretKey | string | `"MYSQL_ROOT_PASSWORD"` | |
| mysql.root\_password.secretName | string | `"mo-mysql-secret"` | |
| mysql.ssl | bool | `false` | |
| mysql.sslRejectUnauthorized | bool | `true` | |
| mysql.subpath | string | `"{{ tpl .Release.Namespace }}-mysql-storage"` | |
| mysql.tolerations | object | `{}` | |
| mysql.user | string | `"platform_user"` | |
| platform\_websocket\_redis.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
| platform\_websocket\_redis.containerSecurityContext.capabilities.drop\[0] | string | `"ALL"` | |
| platform\_websocket\_redis.containerSecurityContext.readOnlyRootFilesystem | bool | `true` | |
| platform\_websocket\_redis.containerSecurityContext.runAsGroup | int | `999` | |
| platform\_websocket\_redis.containerSecurityContext.runAsNonRoot | bool | `true` | |
| platform\_websocket\_redis.containerSecurityContext.runAsUser | int | `999` | |
| platform\_websocket\_redis.enabled | bool | `true` | |
| platform\_websocket\_redis.host | string | `"mo-platform-websocket-redis"` | |
| platform\_websocket\_redis.image.registry | string | `"docker.io"` | |
| platform\_websocket\_redis.image.repository | string | `"redis"` | |
| platform\_websocket\_redis.image.tag | string | `"7.4.6"` | |
| platform\_websocket\_redis.imagePullPolicy | string | `"IfNotPresent"` | |
| platform\_websocket\_redis.password.secretKey | string | `"REDIS_SECRET"` | |
| platform\_websocket\_redis.password.secretName | string | `"mo-redis-secret"` | |
| platform\_websocket\_redis.podSecurityContext.fsGroup | int | `999` | |
| platform\_websocket\_redis.port | int | `6379` | |
| platform\_websocket\_redis.replicas | int | `1` | |
| platform\_websocket\_redis.resources | object | `{}` | |
| platform\_websocket\_redis.tolerations | object | `{}` | |
| progressDeadlineSeconds | int | `600` | |
| redis\_master.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
| redis\_master.containerSecurityContext.capabilities.drop\[0] | string | `"ALL"` | |
| redis\_master.containerSecurityContext.readOnlyRootFilesystem | bool | `true` | |
| redis\_master.containerSecurityContext.runAsGroup | int | `999` | |
| redis\_master.containerSecurityContext.runAsNonRoot | bool | `true` | |
| redis\_master.containerSecurityContext.runAsUser | int | `999` | |
| redis\_master.enabled | bool | `true` | |
| redis\_master.host | string | `"redis-master"` | |
| redis\_master.image.registry | string | `"docker.io"` | |
| redis\_master.image.repository | string | `"redis"` | |
| redis\_master.image.tag | string | `"7.4.6"` | |
| redis\_master.imagePullPolicy | string | `"IfNotPresent"` | |
| redis\_master.password.secretKey | string | `"REDIS_SECRET"` | |
| redis\_master.password.secretName | string | `"mo-redis-secret"` | |
| redis\_master.podSecurityContext.fsGroup | int | `999` | |
| redis\_master.port | int | `6379` | |
| redis\_master.queue\_db | int | `7` | |
| redis\_master.replicas | int | `1` | |
| redis\_master.resources | object | `{}` | |
| redis\_master.tls | bool | `false` | |
| redis\_master.tolerations | object | `{}` | |
| revisionHistoryLimit | int | `1` | global revisionHistorylimit for all resources |
| secrets | object | `{}` | secrets.``.``.`` |
| stage | string | `"production"` | current environment, one of \[dev, production] |
| storage.accessMode | string | `"ReadWriteMany"` | |
| storage.className | string | `"default"` | |
| storage.persistentVolume.basePath | string | `"/data"` | basePath for pv's ${basePath}/mysql and ${basePath}/redis must be present on host machine |
| storage.persistentVolume.create | bool | `true` | |
| storage.persistentVolume.nodeAffinity | object | `{}` | |