ansible/roles/pypiserver/defaults/main.yaml
2021-02-12 17:06:25 +03:00

53 lines
1.9 KiB
YAML

pypiserver_enabled: true
pypiserver_publish: false
pypiserver_short_name: "pip"
pypiserver_default_values:
## If you want more than 1 replica you will have to use a ReadWriteMany volume
replicaCount: 1
image:
repository: pypiserver/pypiserver
tag: v1.3.2
pullPolicy: IfNotPresent
pullSecrets: []
pypiserver:
# for a list of options see: https://github.com/pypiserver/pypiserver
extraArgs: []
# - --disable-fallback
# - --log-conf=/path/to/file
auth:
## comma-separated list of (case-insensitive) actions to authenticate
## Use '.' or '' for empty. Requires to have set the password (option below).
## Available actions are update, download and list
actions: update
## Map of username / encoded passwords that will be put to the htpasswd file
## use `htpasswd -n -b username password` to generate them
credentials:
pypiserver_admin: "{{ pypiserver_admin_htpasswd_hash }}"
ingress:
enabled: true
labels: {}
annotations:
kubernetes.io/ingress.class: "{{ external_ingress_class if registry_publish else internal_ingress_class }}"
cert-manager.io/cluster-issuer: "letsencrypt-prod"
nginx.ingress.kubernetes.io/proxy-body-size: "0"
nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
path: "/"
hosts:
- "{{ pypiserver_short_name }}.{{ domain }}"
tls:
- secretName: "{{ pypiserver_short_name }}.{{ domain }}-tls"
hosts:
- "{{ pypiserver_short_name }}.{{ domain }}"
persistence:
enabled: true
storageClass: "{{ pypiserver_storage | default('nfs-hdd') }}"
size: "{{ pypiserver_size | default('20Gi') }}"
accessMode: "{{ pypiserver_storage_mode | default('ReadWriteMany') }}"
mountPropagation: None
securityContext:
enabled: true
runAsUser: 0
runAsGroup: 0
fsGroup: 1000