Installation Instructions

kubectl create ns `${ns_name`}

asciidocCopied!

kubectl create secret intellecteu-jfrog-access regcred --docker-server=intellecteu-catbp-docker-cpm.jfrog.io --docker-username= ${your-name} --docker-password= ${your-password} --docker-email=`${your-email} -n ${ns_name}

asciidocCopied!

# -- Domain name where the application will be hosted
domainName: ""
# -- Override for the full release name used in resource names
fullnameOverride: "canton-package-manager"

ledger:
  # -- Canton ledger API host address
  host: ""
  # -- Canton ledger API port number
  port: "5001"
  # -- Canton domain identifier
  domainId: ""
  # -- URL for the Canton ledger API
  url: ""

mainService:
  # -- Override for the main service name
  nameOverride: ""
  # -- Enable or disable the main service
  enabled: true
  # -- Additional environment variables for the main service
  extraEnv: {}
  image:
    # -- Docker image repository
    repository: intellecteu-catbp-docker-cpm.jfrog.io/catbp/canton/cmp/main-service
    # -- Image tag
    tag: ""
    # -- Image pull policy
    pullPolicy: IfNotPresent
  # -- Secrets to use for pulling the image
  imagePullSecrets: []
  # -- Number of replicas
  replicas: 1
  service:
    # -- Kubernetes service type
    type: ClusterIP
    # -- Service port number
    port: 80
    # -- Service port name
    portName: http
  # -- Container port to expose
  containerPort: 80
  # -- Custom labels for pods
  labels: {}
  # -- Resource requests and limits
  resources: {}
  # -- Node selector for scheduling
  nodeSelector: {}

listingService:
  # -- Override for the listing service name
  nameOverride: ""
  # -- Enable or disable the listing service
  enabled: true
  auth:
    keycloak:
      # -- Keycloak realm for authentication
      realm: ""
      # -- Keycloak server URL
      url: ""
      # -- Token endpoint URL
      tokenUrl: ""
      # -- Keycloak client ID
      clientId: ""
      # -- Keycloak client secret
      clientSecret: ""
      externalSecret:
        # -- Enable external secret reference
        enabled: false
        # -- Reference to the remote secret
        remoteSecretRef: ""
        secretStoreRef:
          # -- Name of the secret store
          name: ""
          # -- Kind of the secret store (SecretStore or ClusterSecretStore)
          kind: "SecretStore"
  image:
    # -- Docker image repository
    repository: intellecteu-catbp-docker-cpm.jfrog.io/catbp/canton/cmp/listing-service
    # -- Image tag
    tag: ""
    # -- Image pull policy
    pullPolicy: IfNotPresent
  # -- Secrets to use for pulling the image
  imagePullSecrets: []
  # -- Number of replicas
  replicas: 1
  service:
    # -- Kubernetes service type
    type: ClusterIP
    # -- Service port number
    port: 80
    # -- Service port name
    portName: http
  # -- Container port to expose
  containerPort: 80
  # -- Additional environment variables for the listing service
  extraEnv: {}
  # -- Custom labels for pods
  labels: {}
  # -- Resource requests and limits
  resources: {}
  # -- Node selector for scheduling
  nodeSelector: {}

# UI component values
ui:
  # -- Override for the ui name
  nameOverride: ""
  # -- number of ui pods to run
  replicaCount: 1
  # -- api image settings
  image:
    repository: intellecteu-catbp-docker-cpm.jfrog.io/catbp/canton/cmp/cpm-ui
    pullPolicy: IfNotPresent
    # defaults to appVersion
    tag: ""
  # -- api image pull secrets
  imagePullSecrets: []
  #   - name: ""
  # -- extra env variables for ui pods
  extraEnv: {}
  # -- labels for ui pods
  labels: {}
  # -- api service port and name
  service:
    port: 80
    portName: http
  # -- annotations for api pods
  podAnnotations: {}
  # -- securtiry context on a pod level
  podSecurityContext:
  #   runAsNonRoot: true
  #   runAsUser: 4444
  #   runAsGroup: 5555
  #   fsGroup: 4444
  # -- security context on a container level
  securityContext: {}
  # Define update strategy for UI pods
  updateStrategy: {}
  # -- CPU and Memory requests and limits
  resources: {}
  #   requests:
  #     cpu: "100m"
  #     memory: "50Mi"
  #   limits:
  #     cpu: "200m"
  #   memory: "200Mi"
  # -- Specify Node Labels to place api pods on
  nodeSelector: {}
  # -- https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
  tolerations: []
  # -- https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
  affinity: {}
  # -- keycloak client secret is used to get token from keycloak (set in env-specific values)
  keycloakClient:
    id: ""

ingressConfig:
  # Enable the creation of Ingress resources
  enabled: false
  # Select the ingress provider (supported: traefik, traefikCRD)
  provider:
    name: traefikCRD
    traefik:
      # Ingress class name to use when provider is "traefik"
      ingressClass: ""
    traefikCRD:
      tlsStore:
        # Enable or disable creation of TLSStore
        enabled: false
        # Name of the TLSStore to be used (default by Traefik)
        name: default

  # Ingress class name to be applied to all ingress resources
  className: traefik

  # Annotations for HTTP ingress routes
  annotationsHttp:
    traefik.ingress.kubernetes.io/router.entrypoints: web

  # Annotations for HTTPS ingress routes
  annotationsHttps:
    traefik.ingress.kubernetes.io/router.entrypoints: websecure

  # List of domains and their associated paths and services
  hosts:
    - host: ""
      paths:
        - path: /cpm-main-service
          pathType: Prefix
          service: cpm-main-service
        - path: /cpm-listing-service
          pathType: Prefix
          service: cpm-listing-service

  # TLS configuration options
  tls:
    # Enable or disable TLS for ingress
    enabled: false
    # Name of the existing secret with TLS certs (ignored if certManager is enabled)
    secretName: canton-package-manager-tls
    certManager:
      # Enable automatic certificate management using Cert-Manager
      enabled: true
      # Email to use for Let's Encrypt registration
      email: services.cat-bp@intellecteu.com
      # ACME server URL (production or staging)
      server: https://acme-v02.api.letsencrypt.org/directory

  # Middleware configuration to strip path prefixes before routing
  stripApplicationPrefix:
    enabled: true
    type: regex
    # List of regex patterns to remove from the request path
    regex:
      - "^/[^/]+/api/"

yamlCopied!