values.yaml

planeVersion: v2.5.0

dockerRegistry:
  enabled: false
  registry: 'index.docker.io/v1/'
  loginid: ''
  password: ''
  # Name of an existing Kubernetes secret containing docker registry credentials
  existingSecret: ''

license:
  licenseServer: https://prime.plane.so
  licenseDomain: 'plane.example.com'

airgapped:
  enabled: false
  # The boto module used by API does not use the CA bundles in the container, so we need to
  # mount the CA bundle into the API pod by passing it in as an environment
  # variable.
  # Preferred: list of Kubernetes Secrets containing CA certificates (supports multiple certs).
  # Example:
  # s3Secrets:
  #   - name: plane-s3-ca
  #     key: s3-custom-ca.crt
  #   - name: plane-s3-ca-2
  #     key: s3-custom-ca-2.crt
  s3Secrets: []

  # Deprecated (backward compatibility): use a single secret for custom S3 CA.
  # If set, used when s3Secrets is empty. Prefer migrating to s3Secrets.
  # Example:
  # s3SecretName: plane-s3-ca
  # s3SecretKey: s3-custom-ca.crt
  s3SecretName: ""
  s3SecretKey: ""

ingress:
  enabled: true
  minioHost: ''
  rabbitmqHost: ''
  ingressClass: 'nginx'
  ingress_annotations: { "nginx.ingress.kubernetes.io/proxy-body-size": "5m" }

ssl:
  tls_secret_name: '' # If you have a custom TLS secret name
  # If you want to use Let's Encrypt, set createIssuer and generateCerts to true
  createIssuer: false
  issuer: http # Allowed : cloudflare, digitalocean, http
  token: '' # not required for http
  server: https://acme-v02.api.letsencrypt.org/directory
  email: plane@example.com
  generateCerts: false

services:
  redis:
    local_setup: true
    image: valkey/valkey:7.2.11-alpine
    servicePort: 6379
    volumeSize: 500Mi
    pullPolicy: IfNotPresent
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  postgres:
    local_setup: true
    image: postgres:15.7-alpine
    servicePort: 5432
    volumeSize: 2Gi
    pullPolicy: IfNotPresent
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  rabbitmq:
    local_setup: true
    image: rabbitmq:3.13.6-management-alpine
    servicePort: 5672
    managementPort: 15672
    volumeSize: 100Mi
    pullPolicy: IfNotPresent
    default_user: plane
    default_password: plane
    external_rabbitmq_url: ''
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  opensearch:
    local_setup: false
    image: opensearchproject/opensearch:3.3.2
    servicePort: 9200
    volumeSize: 5Gi
    pullPolicy: IfNotPresent
    username: plane
    password: Secure@Pass#123!%^&*
    memoryLimit: 3Gi
    cpuLimit: 750m
    memoryRequest: 2Gi
    cpuRequest: 500m
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  minio:
    local_setup: true
    image: minio/minio:latest
    image_mc: minio/mc:latest
    volumeSize: 3Gi
    pullPolicy: IfNotPresent
    root_user: admin
    root_password: password
    assign_cluster_ip: false
    env:
      minio_endpoint_ssl: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  iframely:
    enabled: false
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    image: artifacts.plane.so/makeplane/iframely:v1.2.0
    pullPolicy: Always
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  web:
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    image: artifacts.plane.so/makeplane/web-commercial
    pullPolicy: Always
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  monitor:
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    image: artifacts.plane.so/makeplane/monitor-commercial
    pullPolicy: Always
    volumeSize: 100Mi
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  space:
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    image: artifacts.plane.so/makeplane/space-commercial
    pullPolicy: Always
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  admin:
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    image: artifacts.plane.so/makeplane/admin-commercial
    pullPolicy: Always
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  live:
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    image: artifacts.plane.so/makeplane/live-commercial
    pullPolicy: Always
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  api:
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    image: artifacts.plane.so/makeplane/backend-commercial
    pullPolicy: Always
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  worker:
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  beatworker:
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  silo:
    enabled: true
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    image: artifacts.plane.so/makeplane/silo-commercial
    pullPolicy: Always
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}
    connectors:
      slack:
        enabled: false
        client_id: ''
        client_secret: ''
      github:
        enabled: false
        client_id: ''
        client_secret: ''
        app_name: ''
        app_id: ''
        private_key: ''
      gitlab:
        enabled: false
        client_id: ''
        client_secret: ''

  email_service:
    enabled: false
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    image: artifacts.plane.so/makeplane/email-commercial
    pullPolicy: Always
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  outbox_poller:
    enabled: false
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    pullPolicy: Always
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  automation_consumer:
    enabled: false
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    pullPolicy: Always
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  pi:
    enabled: false
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    image: artifacts.plane.so/makeplane/plane-pi-commercial
    pullPolicy: Always
    assign_cluster_ip: false
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}
    ai_providers:
      openai:
        enabled: false
        base_url: ''
        api_key: ''
      claude:
        enabled: false
        base_url: ''
        api_key: ''
      groq:
        enabled: false
        base_url: ''
        api_key: ''
      cohere:
        enabled: false
        base_url: ''
        api_key: ''
      custom_llm:
        enabled: false
        api_key: ''
        base_url: ''
        model_key: 'gpt-oss-120b'
        name: 'GPT-OSS-120B'
        max_tokens: 128000
        provider: ''
        aws_region: ''
      embedding_model:
        enabled: false
        name: ''
        model_id: ''
        aws_access_key: ''
        aws_secret_access_key: ''
        aws_region: 'us-east-1'
        aws_session_token: ''

    apiSecrets:
      # Used by PI API to look up external secrets/credentials.
      # Values are expected to be base64-encoded strings (as provided by the user).
      follower_rds_secret_arn: ''
      model_secret_arn: ''
      amazonmq_secret_arn: ''
      rds_secret_arn: ''

  pi_beat_worker:
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

  pi_worker:
    replicas: 1
    memoryLimit: 1000Mi
    cpuLimit: 500m
    memoryRequest: 50Mi
    cpuRequest: 50m
    nodeSelector: {}
    tolerations: []
    affinity: {}
    labels: {}
    annotations: {}

serviceAccount:
  # ServiceAccount annotations to apply to the chart's ServiceAccount.
  # Common use-case: IRSA (IAM Roles for Service Accounts).
  annotations: {}

irsa:
  # When set, the chart automatically sets:
  #   eks.amazonaws.com/role-arn: <roleArn>
  roleArn: ''
  # Additional/override IRSA annotations to apply to the ServiceAccount.
  annotations: {}

podIdentity:
  # EKS Pod Identity is configured out-of-band (for example with `eksctl`).
  # This chart only renders install-time guidance; it does not create the
  # PodIdentityAssociation resource.
  enabled: false
  # Cluster name for the `eksctl create podidentityassociation` command.
  clusterName: ''
  # Namespace for the ServiceAccount (defaults to the Helm release namespace).
  namespace: ''
  # ServiceAccount name (defaults to `<releaseName>-srv-account`).
  serviceAccountName: ''
  # IAM role ARN to associate for Pod Identity.
  roleArn: ''

external_secrets:
  # Name of the existing Kubernetes Secret resource; see README for more details
  rabbitmq_existingSecret: ''
  pgdb_existingSecret: ''
  opensearch_existingSecret: ''
  doc_store_existingSecret: ''
  app_env_existingSecret: ''
  live_env_existingSecret: ''
  silo_env_existingSecret: ''
  pi_api_env_existingSecret: ''

env:
  storageClass: ''

  # Secrets Manager credential cache TTL (seconds)
  aws_secret_cache_ttl: "300"

  apiSecrets:
    # Shared AWS Secrets Manager ARNs used by api/live/pi workloads.
    # Values are expected to be base64-encoded strings (as provided by the user).
    amazonmq_secret_arn: "arn:aws:secretsmanager:us-east-1:426043895157:secret:gp/api/mq/secrets-GMMWoG"
    elasticache_secret_arn: "arn:aws:secretsmanager:us-east-1:426043895157:secret:gp/api/redis/secrets-K0zoig"
    rds_secret_arn: "arn:aws:secretsmanager:us-east-1:426043895157:secret:gp/api/secrets-oFsQ2M"

  # AWS Secrets Manager key mappings used by the main app (plane-app-vars).
  # The templates render:
  # - `REDIS_AUTH_TOKEN_KEY` only when `env.apiSecrets.elasticache_secret_arn` is set
  # - `RABBITMQ_*_KEY` only when `env.apiSecrets.amazonmq_secret_arn` is set
  # - `RDS_DB_*_KEY` only when `env.apiSecrets.rds_secret_arn` is set
  redis_auth_token_key: authToken
  rabbitmq_user_key: username
  rabbitmq_password_key: password
  rds_db_host_key: host
  rds_db_name_key: dbname
  rds_db_password_key: password
  rds_db_port_key: port
  rds_db_username_key: username

  # Base URL for the automation runner (defaults via template).
  runner_base_url: ''

  # REDIS
  remote_redis_url: '' #INCASE OF REMOTE REDIS ONLY

  # POSTGRES DB VALUES
  pgdb_username: plane
  pgdb_password: plane
  pgdb_name: plane
  pg_pi_db_name: plane_pi
  pgdb_remote_url: '' #INCASE OF REMOTE PG DB URL ONLY
  pg_pi_db_remote_url: '' #INCASE OF REMOTE Plane AI (PI) PG DB URL ONLY

  # DATA STORE
  docstore_bucket: uploads
  doc_upload_size_limit: '5242880' # 5MB

  # REQUIRED IF MINIO LOCAL SETUP IS FALSE
  aws_access_key: ''
  aws_secret_access_key: ''
  aws_region: ''
  aws_s3_endpoint_url: ''

  use_storage_proxy: false
  allow_all_attachment_types: false

  #OPENSEARCH ENVS
  opensearch_remote_url: ''
  opensearch_remote_username: ''
  opensearch_remote_password: ''
  opensearch_index_prefix: ''

  #API KEYS
  secret_key: "60gp0byfz2dvffa45cxl20p1scy9xbpf6d8c5y0geejgkyp1b5"
  api_key_rate_limit: "60/minute"

  sentry_dsn: ''
  sentry_environment: ''

  cors_allowed_origins: ''
  instance_admin_email: ''
  web_url: ''

  live_sentry_dsn: ""
  live_sentry_environment: ""
  live_sentry_traces_sample_rate: ""
  live_server_secret_key: "htbqvBJAgpm9bzvf3r4urJer0ENReatceh"
  external_iframely_url: ""

  silo_envs:
    sentry_dsn: ''
    sentry_environment: ''
    sentry_traces_sample_rate: ''
    batch_size: 100
    mq_prefetch_count: 1
    request_interval: 400
    hmac_secret_key: 'gzb7MRLr0FoN129NyWARZEs84P9LzQ'
    aes_secret_key: 'dsOdt7YrvxsTIFJ37pOaEVvLxN8KGBCr'
    cors_allowed_origins: ''

  email_service_envs:
    smtp_domain: ''
    max_attachment_size: '10485760' # 10MB in bytes

  outbox_poller_envs:
    memory_limit_mb: 400
    interval_min: 0.25
    interval_max: 2
    batch_size: 250
    memory_check_interval: 30
    pool:
      size: 4
      min_size: 2
      max_size: 10
      timeout: 30.0
      max_idle: 300.0
      max_lifetime: 3600
      reconnect_timeout: 5.0
      health_check_interval: 60

  automation_consumer_envs:
    event_stream_queue_name: "plane.event_stream.automations"
    event_stream_prefetch: 10
    exchange_name: "plane.event_stream"
    event_types: "issue"

  pi_envs:
    plane_oauth:
      state_expiry_seconds: 82800
    plane_api_host: ''
    follower_postgres_uri: ''
    cors_allowed_origins: ''
    internal_secret: 'tyfvfqvBJAgpm9bzvf3r4urJer0Ehfdubk'
    log_level: 'DEBUG'

    # Names/keys that PI API uses to retrieve credentials from external secret managers.
    # The templates render:
    # - `RABBITMQ_*_KEY` only when `env.apiSecrets.amazonmq_secret_arn` is set
    # - `RDS_DB_*_KEY` only when `env.apiSecrets.rds_secret_arn` is set
    # - `FOLLOWER_RDS_DB_*_KEY` only when `services.pi.apiSecrets.follower_rds_secret_arn` is set
    # - `MODEL_CUSTOM_LLM_API_KEY` only when `services.pi.apiSecrets.model_secret_arn` is set
    rabbitmq_password_key: password
    rabbitmq_user_key: username
    rds_db_host_key: host
    rds_db_name_key: dbname
    rds_db_password_key: password
    rds_db_port_key: port
    rds_db_username_key: username
    follower_rds_db_host_key: host
    follower_rds_db_name_key: dbname
    follower_rds_db_password_key: password
    follower_rds_db_port_key: port
    follower_rds_db_username_key: username

    celery:
      vector_sync_enabled: false
      vector_sync_interval: 3
      workspace_plan_sync_enabled: false
      workspace_plan_sync_interval: 86400
      docs_sync_enabled: false
      docs_sync_interval: 86400

# Global extra environment variables that will be applied to all workloads
extraEnv: []
  # - name: HTTP_PROXY
  #   value: "http://proxy.example.com:8080"
  # - name: HTTPS_PROXY
  #   value: "http://proxy.example.com:8080"
  # - name: NO_PROXY
  #   value: "localhost,127.0.0.1,.example.com"