1515 configMapName : # Option 1: Specify a ConfigMap containing your EJBCA ConfigDump JSON data
1616 configMapKey : # (Optional) The key in the ConfigMap where the EJBCA ConfigDump data is found (default: "configdump.json")
1717 inlineConfigdump : # Option 2: Directly insert your EJBCA ConfigDump JSON data here
18-
1918 # # not recommended: applicable only when direct HTTP access to EJBCA is enabled
2019 importAppserverKeystore : false
2120 # appserverKeystoreSecret: keystore-secret
@@ -40,18 +39,15 @@ ejbca:
4039 # INFO, DEBUG, TRACE, ERROR
4140 LOG_LEVEL_APP : " INFO"
4241 LOG_LEVEL_SERVER : " INFO"
43-
4442 # # Observability
4543 # The IP address where port 8090 will listen for requests to /health, /health/ready,
4644 # /health/live and /metrics . Set this to 0.0.0.0 to bind to all container interfaces.
4745 OBSERVABLE_BIND : " 127.0.0.1"
4846 # Set this to "true" to collect metrics and expose them at the /metrics endpoint for scraping.
4947 METRICS_ENABLED : false
50-
5148 # # Global OCSP configurations
5249 OCSP_CHECK_SIGN_CERT_VALIDITY : true
5350 OCSP_NON_EXISTING_IS_GOOD : false
54-
5551 # # SMTP configuration
5652 # Specify the FQDN or IP Address of the SMTP host for EJBCA to send email notifications.
5753 SMTP_DESTINATION : " localhost"
6460 SMTP_USERNAME : ejbca-mail
6561 # SMTP password should be given as secrets, see SMTP_PASSWORD secret in envRaw
6662 # SMTP_PASSWORD: ejbca
67-
6863 # envRaw:
6964 # - name: DATABASE_USER
7065 # valueFrom:
@@ -104,9 +99,7 @@ ejbca:
10499 volumes : []
105100 # Extra volume mounts to be added to the deployment
106101 volumeMounts : []
107-
108102replicaCount : 1
109-
110103# https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
111104updateStrategy : {}
112105# type: RollingUpdate
@@ -116,7 +109,7 @@ image:
116109 # Application variant: not set for full EJBCA, "ra" or "va"
117110 # variant: ra
118111 repository : keyfactor/ejbca-ce
119- tag : latest
112+ tag : 9.0.0
120113 pullPolicy : IfNotPresent
121114imagePullSecrets : []
122115nameOverride : " "
@@ -135,7 +128,6 @@ podSecurityContext: {}
135128# fsGroup: 2000
136129# Annotations to add to the service EJBCA and nginx
137130serviceAnnotations : {}
138-
139131securityContext : {}
140132# capabilities:
141133# drop:
@@ -167,7 +159,6 @@ services:
167159 # Extra sidecar ports to be added to the service, optionally used when sidecarContainers
168160 # are defined and need to expose ports
169161 sidecarPorts : []
170-
171162# Recommended for cluster internal communications
172163# Requires services.proxyHttp to be enabled
173164nginx :
@@ -190,7 +181,6 @@ nginx:
190181 # create a load balancer service for each Pod with separate IP address
191182 enableReplicaSpecificAccess : false
192183 additionalHosts :
193-
194184# External communication from cluster
195185# Requires services.proxyAJP or services.proxyHttp to be enabled for adminweb access
196186ingress :
@@ -238,28 +228,21 @@ autoscaling:
238228 # value: 4
239229 # periodSeconds: 15
240230 # selectPolicy: Max
241-
242231# https://kubernetes.io/docs/tasks/run-application/configure-pdb/
243232podDisruptionBudget :
244233 create : false
245234 minAvailable : 1
246235 maxUnavailable : " "
247-
248236# https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/
249237nodeSelector : {}
250238affinity : {}
251-
252239# https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
253240tolerations : []
254-
255241# https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/
256242topologySpreadConstraints : []
257-
258243# https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/
259244priorityClassName : " "
260-
261245# https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/
262246schedulerName : " "
263-
264247# https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/
265248terminationGracePeriodSeconds : " "
0 commit comments