global:
storageClass: glusterfs-storage
sde:
superuserEmail: sde-superuser@acme.com
superuserPassword: thePasswordForTheDefaultWebSuperUser
defaultFromEmail: "ACME Corp. <noreply@acme.com>"
serverEmail: host@acme.com
defaultOrg: default
feedbackEmail: sde-feedback@acme.com
supportEmail: sde-admin@acme.com
Configuration
Configuration defaults are defined in the values.yaml
file found in the Helm chart.
Note
|
See Configure SDE in the Helm section for configuration update instructions. |
Advanced Settings
The following are examples of advanced optional settings. Please review values.yaml
in the
SD Elements Helm Chart for the full list of options and comments. If in doubt, contact support@sdelements.com.
Configuring External Database
-
When using an external database, set the internal database subchart to false and and set values for external-database
-
The external database should be Postgress 12.x.
sc-database: enabled: false external-database: host: dbhost user: dbuser password: dbpwd
Common Customizations
Parameter |
Comments |
Default |
|
Sets the default storageclass for all persistent volumes |
(unset) |
|
Set to |
|
|
Set to |
|
|
Sets the storageclass for the database data volume, overrides global.storageClass |
(unset) |
|
Sets the size of the database data volume |
|
|
The default FROM address to send regular email as |
|
|
The default organization to create SDE users under |
default |
|
Set to 'true' to enable JITT (additional license required) |
|
|
E-mail address to which user feedback will be sent |
|
|
Set your site hostname |
|
|
The email address that error messages come from |
|
|
E-mail address to direct in-app support requests to |
|
|
The user session inactivity timeout (seconds) |
|
|
The default admin user email address |
|
|
Adjust the SDE application logging level |
|
|
Adjust the log level of the admin email process |
|
|
Adjust the wsgi/apache process logging level |
|
Jobs
Asyncronous jobs are defined in values.yaml
. You can remove default jobs and add new custom jobs.
The jobs must be included under the specifications
section and in map format.
The following are examples of custom jobs added under specifications
:
job:
specifications:
custom_job:
schedule: "01 1 * * *"
niceness: 15
command: ["/bin/sde.sh"]
args:
- "custom_management_command"
failedJobsHistoryLimit: 1
successfulJobsHistoryLimit: 1
concurrencyPolicy: Forbid
restartPolicy: OnFailure
volumeWritePermission: false
env:
- name: ENV_VAR_NAME
value: ENV_VAR_VALUE
resources:
requests:
cpu: 1
memory: 1024Mi
limits:
cpu: 2
memory: 2048Mi
Shared Object Storage
SDE makes use of Shared Object Storage via AWS S3 or an S3 compatible API object storage for sharing files between SDE microservices.
Requirements
-
An existing S3 bucket
-
An AWS IAM service account that has read/write access to the S3 bucket
-
The Access Key and Secret Key for the IAM service account
See Amazon S3: Allows read and write access to objects in an S3 Bucket for details on IAM policy configuration.
If you do not have access to AWS S3, see Alternative Configuration
below for details.
S3 Configuration
SDE can be configured to use S3 by modifying the follow section in your values.yaml overlay:
global:
sharedStorage:
storageType: S3
s3BucketName: my-s3-bucket-name
s3BucketPath: /
s3AccessKey: AwsServiceAccountAccessKey
s3SecretKey: AwsServiceAccountSecretKey
s3Url: https://s3.us-east-1.amazonaws.com/my-s3-bucket-name
Alternative S3 Configuration
If you are deploying in an environment without AWS S3 object storage, an alternative option is to enable the
MinIO subchart within SDE which provides an S3 compatible API service as a replacement. In order to use
MinIO, you should configure both the global.sharedStorage
and minio
sections in your values.yaml overlay and
ensure certain properties match.
global:
sharedStorage:
storageType: S3
bucketName: my-bucket-name # If using MinIO, ensure value matches a bucket in `minio` section
s3Url: "http://sde-minio:9000/"
s3BucketPath: /
s3AccessKey: AccessKeyGoesHere # If using MinIO, ensure value matches `accessKey` in `minio` section
s3SecretKey: SecretKeyGoesHere # If using MinIO, ensure value matches `secretKey` in `minio` section
minio:
enabled: true
rootUser: admin
rootPassword: Password
persistence:
storageClass: myStorageclassName
tls:
enabled: false
buckets:
- name: my-bucket-name # should match global.sharedStorage.bucketName
policy: none
purge: false
users:
- accessKey: AccessKeyGoesHere # should match global.sharedStorage.s3AccessKey
secretKey: SecretKeyGoesHere # should match global.sharedStorage.s3SecretKey
policy: readwrite