suse-ai-lifecycle-manager/charts/aif-operator/values.yaml at cb7f20db02a8bb826ec158e881f7cca76ea6c217 · SUSE/suse-ai-lifecycle-manager · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
global:
  imageRegistry: ""
  imagePullSecrets: []

nameOverride: ""
fullnameOverride: ""

# Credentials for SUSE Application Collection, NVIDIA NGC, and
# SUSE Registry artifact repositories. If not specified, those
# credentials must be created out-of-band and via Settings
# in the UI.
#
# NOTE: the credentials configured in this file are meant to be
# used during installation/configuration of the chart. Therefore,
# credentials must be handled in accordance with your organization's
# security policies. Please sanitize the credentials before checking
# this file into source control.
#
credentials:
  # credential for oci://dp.apps.rancher.io/charts
  applicationCollection:
    username: ""
    password: ""
  # credential to pull NGC artifacts
  # e.g. https://helm.ngc.nvidia.com/nvidia
  nvidia:
    username: ""
    password: ""
  # credential for oci://registry.suse.com/ai/charts
  suseRegistry:
    username: ""
    password: ""

manager:
  replicaCount: 1

  image:
    registry: ghcr.io
    repository: suse/aif-operator
    tag: "0.1.0-dev.5"
    pullPolicy: IfNotPresent

  imagePullSecrets: []

  args:
    - --leader-elect

  env: []

  podAnnotations: {}

  podSecurityContext:
    runAsNonRoot: true
    seccompProfile:
        type: RuntimeDefault

  securityContext:
    allowPrivilegeEscalation: false
    capabilities:
        drop:
            - ALL
    readOnlyRootFilesystem: true

  resources:
    limits:
        cpu: 500m
        memory: 128Mi
    requests:
        cpu: 10m
        memory: 64Mi

  probes:
    liveness:
      enabled: true
      httpGet:
        path: /healthz
        port: 8081
      periodSeconds: 20
      initialDelaySeconds: 15
    readiness:
      enabled: true
      httpGet:
        path: /readyz
        port: 8081
      periodSeconds: 10
      initialDelaySeconds: 5

  nodeSelector: {}
  tolerations: []
  affinity: {}

rbacHelpers:
  enable: false

metrics:
  enable: true
  port: 8443

api:
  port: 8080

# UI extension auto-install — creates an InstallAIExtension CR when the operator is deployed.
# Set aiExtension.enabled=false to skip extension installation.
aiExtension:
  enabled: true
  source:
    kind: Helm
    helm:
      chartURL: "oci://ghcr.io/suse/chart/aif-ui"
      version: "0.1.0-dev.5"
      # values are merged onto the aif-ui chart's default values. Useful for
      # overriding the UI image during development:
      #   aiExtension.source.helm.values.image.registry=ghcr.io
      #   aiExtension.source.helm.values.image.repository=suse/aif-ui
      #   aiExtension.source.helm.values.image.tag=0.1.0-dev.4
      values: {}
  extension:
    name: "aif-ui"
    version: "0.1.0-dev.5"
  cleanup:
    image:
      registry: registry.suse.com
      repository: suse/kubectl
      tag: "1.35"
      pullPolicy: IfNotPresent
    resources:
      limits:
        cpu: 100m
        memory: 64Mi
      requests:
        cpu: 10m
        memory: 32Mi
    podSecurityContext:
      runAsNonRoot: true
      runAsUser: 65534
      seccompProfile:
        type: RuntimeDefault
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
          - ALL
      readOnlyRootFilesystem: true

# Default blueprints bundled with the chart. When enabled, the curated Blueprint
# CRs under files/blueprints/ are created on install and reconciled on upgrade.
# Disable to manage blueprints exclusively through other means (e.g. a future
# git source) without the chart re-creating its defaults.
defaultBlueprints:
  enabled: true