garage

# Default values for garage.

# This is a YAML-formatted file.

# Declare variables to be passed into your templates.

# -- Additional labels to add to all resources created by this chart

commonLabels: {}

# app.kubernetes.io/part-of: storage

# team: platform

# Garage configuration. These values configure Garage and render to garage.toml unless noted otherwise.

garage:

# -- Can be changed for better performance on certain systems, use "sqlite" to prioritize durability

# https://garagehq.deuxfleurs.fr/documentation/reference-manual/configuration/#db_engine

dbEngine: "lmdb"

# -- Defaults is 1MB, an increase can result in better performance in certain scenarios

# https://garagehq.deuxfleurs.fr/documentation/reference-manual/configuration/#block_size

blockSize: "1048576"

# -- Default to 3 replicas, see the replication_factor section at

# https://garagehq.deuxfleurs.fr/documentation/reference-manual/configuration/#replication_factor

replicationFactor: "3"

# -- Start Garage with `--single-node`, run one StatefulSet replica, and render replication_factor = 1 in the generated garage.toml,

# if using garageTomlString or existingConfigMap, set replication_factor = 1 yourself.

singleNode: false

# -- By default, enable read-after-write consistency guarantees, see the consistency_mode section at

# https://garagehq.deuxfleurs.fr/documentation/reference-manual/configuration/#consistency_mode

consistencyMode: "consistent"

# -- zstd compression level of stored blocks

# https://garagehq.deuxfleurs.fr/documentation/reference-manual/configuration/#compression_level

compressionLevel: "1"

# -- If this value is set, Garage will automatically take a snapshot of the metadata DB file at a regular interval and save it in the metadata directory.

# https://garagehq.deuxfleurs.fr/documentation/reference-manual/configuration/#metadata_auto_snapshot_interval

metadataAutoSnapshotInterval: ""

# -- Port used for node-to-node RPC

rpcBindAddr: "[::]:3901"

# -- If not given, a random secret will be generated and stored in a Secret object

rpcSecret: ""

# -- If you want to provide an rpcSecret within an existing k8s secret,

# specify the secret name here, and store the value under the secret key `rpcSecret`

# the default secret will not be created

existingRpcSecret: ""

# -- This is not required if you use the integrated kubernetes discovery

bootstrapPeers: []

# -- Set to true if you want to use k8s discovery but install the CRDs manually outside

# of the helm chart, for example if you operate at namespace level without cluster resources

kubernetesSkipCrd: false

# -- Set to true if you want to use roles instead of cluster roles

noClusterRole: false

s3:

api:

bindAddr: "[::]:3900"

region: "garage"

rootDomain: ".s3.garage.tld"

web:

bindAddr: "[::]:3902"

rootDomain: ".web.garage.tld"

index: "index.html"

admin:

apiBindAddr: "[::]:3903"

# -- Additional configuration to append to garage.toml. Use a multi-line string for custom config.

# Example:

# additionalTopLevelConfig: |-

# data_fsync = true

additionalTopLevelConfig: ""

# -- if not empty string, allow using an existing ConfigMap for the garage.toml,

# if set, ignores garage.toml

existingConfigMap: ""

# -- String Template for the garage configuration

# if set, ignores above values.

# Values can be templated,

# see https://garagehq.deuxfleurs.fr/documentation/reference-manual/configuration/

garageTomlString: ""

# Data persistence

persistence:

enabled: true

meta:

# storageClass: "fast-storage-class"

size: 100Mi

# used only for daemon sets

hostPath: /var/lib/garage/meta

data:

# storageClass: "slow-storage-class"

size: 100Mi

# used only for daemon sets

hostPath: /var/lib/garage/data

# Deployment configuration

deployment:

# -- Switchable to DaemonSet

kind: StatefulSet

# -- Number of StatefulSet replicas/garage nodes to start

replicaCount: 3

# -- If using statefulset, allow Parallel or OrderedReady (default)

podManagementPolicy: OrderedReady

image:

# -- default to amd64 docker image

repository: chainreg.biz/chainguard-private/garage

# -- set the image tag, please prefer using the chart version and not this,

# to avoid compatibility issues

tag: 2.4.1-r3@sha256:ab207d538f50ecfa01c042df32423f41725db6bfb3a8e20c84e2486f7389bc12

pullPolicy: IfNotPresent

initImage:

repository: chainreg.biz/chainguard-private/busybox

tag: glibc-1.38.0-r2@sha256:7a438bd8593293ec90b6249fd8a51259874dadc11c3a9976bbcc0b935ce4cb51

pullPolicy: IfNotPresent

# -- set if you need credentials to pull your custom image

imagePullSecrets: []

nameOverride: ""

fullnameOverride: ""

serviceAccount:

# -- Specifies whether a service account should be created

create: true

# -- Annotations to add to the service account

annotations: {}

# -- The name of the service account to use.

# If not set and create is true, a name is generated using the fullname template

name: ""

# -- additional pod annotations

podAnnotations: {}

podSecurityContext:

runAsUser: 1000

runAsGroup: 1000

fsGroup: 1000

fsGroupChangePolicy: "OnRootMismatch"

runAsNonRoot: true

securityContext:

# -- The default security context is heavily restricted,

# feel free to tune it to your requirements

capabilities:

drop:

- ALL

readOnlyRootFilesystem: true

service:

# -- You can rely on any service to expose your cluster

# - ClusterIP (+ Ingress)

# - NodePort (+ Ingress)

# - LoadBalancer

type: ClusterIP

# -- Annotations to add to the service

annotations: {}

s3:

api:

port: 3900

web:

port: 3902

# NOTE: the admin API is excluded for now as it is not consistent across nodes

ingress:

s3:

api:

enabled: false

# -- Rely _either_ on the className or the annotation below but not both!

# If you want to use the className, set

# className: "nginx"

# and replace "nginx" by an Ingress controller name,

# examples [here](https://kubernetes.io/docs/concepts/services-networking/ingress-controllers).

annotations: {}

# kubernetes.io/ingress.class: "nginx"

# kubernetes.io/tls-acme: "true"

labels: {}

hosts:

# -- garage S3 API endpoint, to be used with awscli for example

- host: "s3.garage.tld"

paths:

- path: /

pathType: Prefix

# -- garage S3 API endpoint, DNS style bucket access

- host: "*.s3.garage.tld"

paths:

- path: /

pathType: Prefix

tls: []

# - secretName: my-garage-cluster-tls

# hosts:

# - kubernetes.docker.internal

web:

enabled: false

# -- Rely _either_ on the className or the annotation below but not both!

# If you want to use the className, set

# className: "nginx"

# and replace "nginx" by an Ingress controller name,

# examples [here](https://kubernetes.io/docs/concepts/services-networking/ingress-controllers).

annotations: {}

# kubernetes.io/ingress.class: nginx

# kubernetes.io/tls-acme: "true"

labels: {}

hosts:

# -- wildcard website access with bucket name prefix

- host: "*.web.garage.tld"

paths:

- path: /

pathType: Prefix

# -- specific bucket access with FQDN bucket

- host: "mywebpage.example.com"

paths:

- path: /

pathType: Prefix

tls: []

# - secretName: my-garage-cluster-tls

# hosts:

# - kubernetes.docker.internal

resources: {}

# The following are indicative for a small-size deployment, for anything serious double them.

# limits:

# cpu: 100m

# memory: 1024Mi

# requests:

# cpu: 100m

# memory: 512Mi

# -- Specifies a livenessProbe

livenessProbe: {}

#httpGet:

# path: /health

# port: 3903 # or the port from garage.admin.apiBindAddr

#initialDelaySeconds: 5

#periodSeconds: 30

# -- Specifies a readinessProbe

readinessProbe: {}

#httpGet:

# path: /health

# port: 3903 # or the port from garage.admin.apiBindAddr

#initialDelaySeconds: 5

#periodSeconds: 30

nodeSelector: {}

tolerations: []

affinity: {}

# -- Optional priority class name to assign to the pods.

# See https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/

priorityClassName: ""

# -- Extra container env vars, as a list of {name, value} objects (same shape

# as a Pod container's env)

environment: {}

# -- Override the container entrypoint.

command: []

# -- Override the container arguments.

args: []

# -- Extra volumes, as a list of volume objects (same shape as a PodSpec's volumes)

extraVolumes: {}

# -- Extra volume mounts, as a list of mount objects (same shape as a container's volumeMounts)

extraVolumeMounts: {}

monitoring:

metrics:

# -- If true, a service for monitoring is created with a prometheus.io/scrape annotation

enabled: false

serviceMonitor:

# -- If true, a ServiceMonitor CRD is created for a prometheus operator

# https://github.com/coreos/prometheus-operator

enabled: false

path: /metrics

# namespace: monitoring (defaults to use the namespace this chart is deployed to)

labels: {}

interval: 15s

scheme: http

tlsConfig: {}

scrapeTimeout: 10s

relabelings: []

tracing:

# -- specify a sink endpoint for OpenTelemetry Traces, eg. `http://localhost:4317`

sink: ""