questions.yml

questions:

- variable: dockerRegistry.enabled
  label: Docker Registry Enabled
  type: boolean
  default: false
  group: "Docker Registry"
  show_subquestion_if: true
  subquestions:
  - variable: dockerRegistry.host
    label: "Registry Host"
    type: string
  - variable: dockerRegistry.loginid
    label: "Login ID"
    type: string
  - variable: dockerRegistry.password
    label: "Password/Token"
    type: password

- variable: planeVersion
  label: Plane Version (Docker Image Tag)
  type: string
  default: v1.4.1
  required: true
  group: "Docker Registry"

- variable: web.image
  label: Frontend Docker Image
  type: string
  required: true
  default: "artifacts.plane.so/makeplane/plane-frontend"
  group: "Web Setup"
  subquestions:
  - variable: web.pullPolicy
    label: "Image Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "Always"
  - variable: web.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: web.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: web.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: web.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
  - variable: web.memoryRequest
    label: "Memory Request"
    type: string
    default: 50Mi
  - variable: web.cpuRequest
    label: "CPU Request"
    type: string
    default: 50m

- variable: space.image
  label: Space Docker Image
  type: string
  required: true
  default: "artifacts.plane.so/makeplane/plane-space"
  group: "Spaces Setup"
  subquestions:
  - variable: space.pullPolicy
    label: "Image Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "Always"
  - variable: space.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: space.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: space.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: space.memoryRequest
    label: "Memory Request"
    type: string
    default: 50Mi
  - variable: space.cpuRequest
    label: "CPU Request"
    type: string
    default: 50m
  - variable: space.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false

- variable: admin.image
  label: Admin Docker Image
  type: string
  required: true
  default: "artifacts.plane.so/makeplane/plane-admin"
  group: "Admin Setup"
  subquestions:
  - variable: admin.pullPolicy
    label: "Image Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "Always"
  - variable: admin.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: admin.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: admin.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: admin.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: true
  - variable: admin.memoryRequest
    label: "Memory Request"
    type: string
    default: 50Mi
  - variable: admin.cpuRequest
    label: "CPU Request"
    type: string
    default: 50m
- variable: live.image
  label: Live Docker Image
  type: string
  required: true
  default: "artifacts.plane.so/makeplane/plane-live"
  description: "Live Server Setup"
  group: "Live Setup"
  subquestions:
  - variable: live.pullPolicy
    label: "Image Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "Always"
  - variable: live.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: live.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: live.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: live.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
  - variable: live.memoryRequest
    label: "Memory Request"
    type: string
    default: 50Mi
  - variable: live.cpuRequest
    label: "CPU Request"
    type: string
    default: 50m
  - variable: env.live_server_secret_key
    label: "Live Server Secret Key"
    type: string
    default: "htbqvBJAgpm9bzvf3r4urJer0ENReatceh"

- variable: api.image
  label: Backend Docker Image
  type: string
  required: true
  default: "artifacts.plane.so/makeplane/plane-backend"
  description: "Used by API, Worker, Beat-Worker"
  group: "API Setup"
  subquestions:
  - variable: api.pullPolicy
    label: "Image Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "Always"
  - variable: api.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: api.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: api.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: api.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
  - variable: api.memoryRequest
    label: "Memory Request"
    type: string
    default: 50Mi
  - variable: api.cpuRequest
    label: "CPU Request"
    type: string
    default: 50m
  - variable: env.cors_allowed_origins
    label: "CORS Allowed Origins"
    type: string
    default: ""
  - variable: env.sentry_dsn
    label: "Sentry DSN"
    type: string
    default: ""
  - variable: env.sentry_environment
    label: "Sentry Environment"
    type: string
    default: "Development"
  - variable: env.secret_key
    label: "Random Secret Key"
    type: string
    required: true
    default: "60gp0byfz2dvffa45cxl20p1scy9xbpf6d8c5y0geejgkyp1b5"
  - variable: env.api_key_rate_limit
    label: "API Key Rate Limit"
    type: string
    default: "60/minute"

- variable: worker.replicas
  label: "Default Replica Count"
  type: int
  default: 1
  group: "Worker Setup"
  subquestions:
  - variable: worker.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: worker.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: worker.memoryRequest
    label: "Memory Request"
    type: string
    default: 50Mi
  - variable: worker.cpuRequest
    label: "CPU Request"
    type: string
    default: 50m
- variable: beatworker.replicas
  label: "Default Replica Count"
  type: int
  default: 1
  group: "Beat Worker Setup"
  subquestions:
  - variable: beatworker.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: beatworker.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: beatworker.memoryRequest
    label: "Memory Request"
    type: string
    default: 50Mi
  - variable: beatworker.cpuRequest
    label: "CPU Request"
    type: string
    default: 50m
- variable: redis.local_setup
  label: "Install Redis"
  type: boolean
  default: true
  group: "Redis Setup"
  subquestions:
  - variable: redis.pullPolicy
    label: "Redis Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "IfNotPresent"
  - variable: redis.image
    label: "Docker Image"
    type: string
    default: "valkey/valkey:7.2.11-alpine"
    show_if: "redis.local_setup=true"
  - variable: redis.servicePort
    label: Port
    type: int
    default: 6379
    show_if: "redis.local_setup=true"
  - variable: redis.storageClass
    label: "Storage Class"
    type: storageclass
    show_if: "redis.local_setup=true"
  - variable: redis.volumeSize
    label: "Volume Size"
    type: string
    default: "100Mi"
    show_if: "redis.local_setup=true"
  - variable: redis.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
    show_if: "redis.local_setup=true"
  - variable: env.remote_redis_url
    label: "Remote Redis URL"
    type: string
    default: "redis://"
    show_if: "redis.local_setup=false"

- variable: postgres.local_setup
  label: "Install Postgres"
  type: boolean
  default: true
  group: "Postgres Setup"
  # show_subquestion_if: true
  subquestions:
  - variable: postgres.pullPolicy
    label: "Postgres Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "IfNotPresent"
  - variable: postgres.image
    label: "Docker Image"
    type: string
    default: "postgres:15.7-alpine"
    show_if: "postgres.local_setup=true"
  - variable: postgres.servicePort
    label: Service Port
    type: int
    default: 5432
    show_if: "postgres.local_setup=true"
  - variable: postgres.storageClass
    label: "Storage Class"
    type: storageclass
    show_if: "postgres.local_setup=true"
  - variable: postgres.volumeSize
    label: "Volume Size"
    type: string
    default: "1Gi"
    show_if: "postgres.local_setup=true"
  - variable: env.pgdb_username
    label: "Username"
    type: string
    default: "plane"
    show_if: "postgres.local_setup=true"
  - variable: env.pgdb_password
    label: "Password"
    type: password
    default: "plane"
    show_if: "postgres.local_setup=true"
  - variable: env.pgdb_name
    label: "DB Name"
    type: string
    default: "plane"
    show_if: "postgres.local_setup=true"
  - variable: postgres.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
    show_if: "postgres.local_setup=true"
  - variable: env.pgdb_remote_url
    label: "Remote URL"
    type: string
    default: "postrgres://"
    show_if: "postgres.local_setup=false"

- variable: rabbitmq.local_setup
  label: "Install RabbitMQ"
  type: boolean
  default: true
  group: "RabbitMQ Setup"
  subquestions:
  - variable: rabbitmq.image
    label: "Docker Image"
    type: string
    default: "rabbitmq:4.2.9-management-alpine"
    show_if: "rabbitmq.local_setup=true"
  - variable: rabbitmq.pullPolicy
    label: "Image Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "IfNotPresent"
    show_if: "rabbitmq.local_setup=true"
  - variable: rabbitmq.servicePort
    label: Service Port
    type: int
    default: 5672
    show_if: "rabbitmq.local_setup=true"
  - variable: rabbitmq.managementPort
    label: Management Port
    type: int
    default: 15672
    show_if: "rabbitmq.local_setup=true"
  - variable: rabbitmq.assign_cluster_ip
    label: "Assign ClusterIP"
    type: boolean
    default: false
    show_if: "rabbitmq.local_setup=true"
  - variable: rabbitmq.storageClass
    label: "Storage Class"
    type: storageclass
    show_if: "rabbitmq.local_setup=true"
  - variable: rabbitmq.volumeSize
    label: "Volume Size"
    type: string
    default: "100Mi"
    show_if: "rabbitmq.local_setup=true"
  - variable: rabbitmq.default_user
    label: "Username"
    type: string
    default: "plane"
    show_if: "rabbitmq.local_setup=true"
  - variable: rabbitmq.default_password
    label: "Password"
    type: password
    default: "plane"
    show_if: "rabbitmq.local_setup=true"
  - variable: rabbitmq.external_rabbitmq_url
    label: "Remote URL"
    type: string
    show_if: "rabbitmq.local_setup=false"

- variable: minio.local_setup
  label: "Install Minio"
  type: boolean
  default: true
  group: "Storage Setup"
  subquestions:
  - variable: minio.pullPolicy
    label: "Minio Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "IfNotPresent"
  - variable: minio.image
    label: "Docker Image"
    type: string
    default: "minio/minio:latest"
    show_if: "minio.local_setup=true"
  - variable: minio.image_mc
    label: "MinIO Client Docker Image"
    type: string
    default: "minio/mc:latest"
    show_if: "minio.local_setup=true"
  - variable: minio.init_image
    label: "Init Docker Image"
    type: string
    default: "busybox"
    show_if: "minio.local_setup=true"
  - variable: minio.root_user
    label: "Root User"
    type: string
    default: "admin"
    show_if: "minio.local_setup=true"
  - variable: minio.root_password
    label: "Root Password"
    type: password
    default: "password"
    show_if: "minio.local_setup=true"
  - variable: minio.storageClass
    label: "Storage Class"
    type: storageclass
    show_if: "minio.local_setup=true"
  - variable: minio.volumeSize
    label: "Volume Size"
    type: string
    default: "1Gi"
    show_if: "minio.local_setup=true"
  - variable: minio.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
    show_if: "minio.local_setup=true"
  - variable: env.aws_access_key
    label: "AWS Access Key"
    type: string
    default: ""
    show_if: "minio.local_setup=false"
  - variable: env.aws_secret_access_key
    label: "AWS Secret Key"
    type: password
    default: ""
    show_if: "minio.local_setup=false"
  - variable: env.aws_region
    label: "AWS Region"
    type: string
    default: ""
    show_if: "minio.local_setup=false"
  - variable: env.aws_s3_endpoint_url
    label: "AWS S3 Endpoint URL"
    type: string
    default: ""
    show_if: "minio.local_setup=false"
  - variable: env.docstore_bucket
    label: "Bucket Name"
    type: string
    default: "uploads"
  - variable: env.doc_upload_size_limit
    label: "FIle Upload Size Limit"
    type: string
    default: "5242880"
  - variable: minio.env.minio_endpoint_ssl
    label: "Minio Endpoint SSL"
    type: boolean
    default: false

- variable: ingress.enabled
  label: "Install Ingress"
  type: boolean
  default: true
  required: true
  group: "Ingress"
  subquestions:
  - variable: ingress.appHost
    label: "App. Host"
    type: string
    default: "plane.example.com"
    required: true
  - variable: ingress.minioHost
    label: "Minio Host"
    type: string
    default: ""
    show_if: "minio.local_setup=true"
  - variable: ingress.rabbitmqHost
    label: "Rabbitmq Host"
    type: string
    default: ""
    show_if: "rabbitmq.local_setup=true"
  - variable: ingress.ingressClass
    label: "Ingress Classname"
    type: string
    default: "nginx"
    show_if: "ingress.enabled=true"

- variable: ssl.createIssuer
  label: "Create Issuer"
  type: boolean
  default: false
  group: "Ingress"
  show_if: "ingress.enabled=true"
  show_subquestion_if: true
  subquestions:
  - variable: ssl.issuer
    label: "SSL Issuer"
    type: enum
    options:
    - "http"
    - "cloudflare"
    - "digitalocean"
    default: "http"
  - variable: ssl.server
    label: "Let's Encrypt Server URL"
    type: string
    default: "https://acme-staging-v02.api.letsencrypt.org/directory"
  - variable: ssl.email
    label: "Let's Encrypt Reg. Email"
    type: string
    default: "plane@example.com"
  - variable: ssl.token
    label: "Provider API Token"
    type: password
    default: ""
    description: "Not required for 'http' issuer"
    show_if: "ssl.issuer=cloudflare || ssl.issuer=digitalocean"
  - variable: ssl.generateCerts
    label: "Enable to generate certificates"
    type: boolean
    default: false

- variable: ssl.tls_secret_name
  label: "Custom TLS Secret Name"
  type: string
  default: ""
  group: "Ingress"
  show_if: "ssl.createIssuer=false"

- variable: external_secrets.rabbitmq_existingSecret
  label: "RabbitMQ Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.pgdb_existingSecret
  label: "Postgres Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.doc_store_existingSecret
  label: "Doc Store and Minio Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.app_env_existingSecret
  label: "App Envs Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.live_env_existingSecret
  label: "Live Envs Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"

# --- Shared key groups --------------------------------------------------------
- variable: external_secrets.app_keys_existingSecret
  label: "Signing Keys Secret"
  description: "SECRET_KEY and LIVE_SERVER_SECRET_KEY. SECRET_KEY derives the key that encrypts the instance-configuration rows — SMTP password, OAuth client secrets — so changing it makes them undecryptable, silently. Keep it per environment and never rotate it."
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.ssl_token_existingSecret
  label: "DNS-01 Token Secret"
  description: "cert-manager DNS provider API token, under the key api-token. Usually one token covers a whole wildcard domain, so this is safe to share."
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.storage.secretName
  label: "Object Storage Credential Secret"
  description: "Leave empty on a cloud and annotate the ServiceAccount instead — a pod identity beats a stored access key. Ignored while the bundled MinIO is deployed."
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.storage.accessKeyIdKey
  label: "Storage Access Key ID Key"
  type: string
  default: ""
  group: "External Secrets"
  show_if: "external_secrets.storage.secretName!="
- variable: external_secrets.storage.secretAccessKeyKey
  label: "Storage Secret Access Key Key"
  type: string
  default: ""
  group: "External Secrets"
  show_if: "external_secrets.storage.secretName!="
- variable: dockerRegistry.existingSecret
  label: "Existing Image Pull Secret"
  description: "Use a pull secret that already exists in the namespace instead of building one from the login below."
  type: string
  default: ""
  group: "Docker Registry"

# --- Cloud identity -----------------------------------------------------------
- variable: serviceAccount.create
  label: "Create the ServiceAccount"
  description: "Turn off to run as a ServiceAccount managed outside this chart."
  type: boolean
  default: true
  group: "Service Account"
- variable: serviceAccount.name
  label: "ServiceAccount Name"
  description: "Defaults to <release>-srv-account."
  type: string
  default: ""
  group: "Service Account"
- variable: serviceAccount.cloudIdentity
  label: "ServiceAccount Has a Cloud Identity"
  description: "Advisory. Turns on the install notes that catch a static credential shadowing the identity."
  type: boolean
  default: false
  group: "Service Account"
- variable: env.requireExplicitSecrets
  label: "Refuse to Render Default Signing Keys"
  description: "Fails the render instead of falling back to this chart's PUBLIC example values for SECRET_KEY and LIVE_SERVER_SECRET_KEY."
  type: boolean
  default: false
  group: "Service Account"