# Artifact Hub Chart default configuration values # Common labels to add to all resources commonLabels: {} imagePullSecrets: [] imageTag: '' nameOverride: '' pullPolicy: IfNotPresent nodeSelector: {} tolerations: [] # Enable dynamic resource name prefix # # Enabling the dynamic resource name prefix ensures that the resources are named dynamically based on the Helm # installation's name. This allows multiple installations of this chart in a single Kubernetes namespace. The prefix # can be defined by using the `fullnameOverride`. dynamicResourceNamePrefixEnabled: false # Overwrites the installation's fullname generation (used for the dynamic resource name prefix) fullnameOverride: '' # Enable restricted HTTP client # # Artifact Hub makes external HTTP requests for several purposes, like getting repositories metadata, dispatching # webhooks, etc. When this option is enabled, requests to the private network space as well as to some other special # addresses won't be allowed. restrictedHTTPClient: true # Logging configuration log: # Log level # Options: "trace", "debug", "info", "warn", "error", "fatal", "panic" level: debug # Enable pretty logging pretty: false # Database configuration db: host: '' port: '5432' database: hub user: hub password: hub sslmode: prefer # Email configuration email: # From name used in emails fromName: '' # From address used in emails. This field is required if you want to enable email sending in Artifact Hub from: '' # Reply-to address used in emails replyTo: '' # SMTP server configuration smtp: # Authentication mechanism # Options: "login", "plain" auth: plain # SMTP host. This field is required if you want to enable email sending in Artifact Hub host: '' # SMTP port. This field is required if you want to enable email sending in Artifact Hub port: 587 username: '' password: '' # Credentials creds: # Docker registry username dockerUsername: '' # Docker registry password dockerPassword: '' # Images configuration images: # Images store # Options: "pg" store: pg # Events configuration events: # Enable repository scanning errors events scanningErrors: true # Enable repository tracking errors events trackingErrors: true # Database migrator configuration dbMigrator: job: image: # Database migrator image repository (without the tag) repository: artifacthub/db-migrator # Optionally specify extra list of additional labels for the dbMigrator job extraJobLabels: {} # Optionally specify extra list of additional labels for the dbMigrator pod extraPodLabels: {} # Limits the lifetime of the job after it has finished execution ttlSecondsAfterFinished: null automountServiceAccountToken: true serviceAccountName: default securityContext: {} containerSecurityContext: {} resources: {} # If you do want to specify resources, uncomment the following # lines and adjust them as necessary. # limits: # cpu: 100m # memory: 128Mi # requests: # cpu: 100m # memory: 128Mi # Optionally specify a node selector for the dbMigrator pod nodeSelector: {} # Optionally specify a list of tolerations for the dbMigrator pod tolerations: [] # Optionally specify extra list of additional environment variables for the db-migrator container extraEnvVars: [] # Optionally specify extra list of additional volume mounts for the dbMigrator job extraVolumeMounts: [] # Optionally specify extra list of additional volumes for the dbMigrator job extraVolumes: [] # Load demo user and sample repositories loadSampleData: false # Directory path where the configuration files should be mounted configDir: /home/db-migrator/.cfg # Hub configuration hub: ingress: enabled: true ingressClassName: '' annotations: kubernetes.io/ingress.class: alb alb.ingress.kubernetes.io/scheme: internet-facing alb.ingress.kubernetes.io/target-type: ip alb.ingress.kubernetes.io/listen-ports: '[{ "HTTP": 80 }, { "HTTPS": 443 }]' alb.ingress.kubernetes.io/actions.ssl-redirect: '{"Type": "redirect", "RedirectConfig": {"Protocol": "HTTPS", "Port": "443", "StatusCode": "HTTP_301" }}' alb.ingress.kubernetes.io/actions.artifacthub-redirect: '{"Type":"redirect", "RedirectConfig": {"Host": "artifacthub.io", "Port": "443", "Protocol": "HTTPS", "StatusCode": "HTTP_301"}}' extraLabels: {} defaultBackendEnabled: true rules: - host: hub.helm.sh http: paths: - path: / pathType: Prefix backend: service: name: artifacthub-redirect port: name: use-annotation - http: paths: - path: / pathType: Prefix backend: service: name: ssl-redirect port: name: use-annotation - path: / pathType: Prefix backend: # This reference expects a static name of the service. # If dynamicResourceNamePrefixEnabled=true, the serviceName needs to be changed to include the dynamic prefix. # The "dynamic-prefix" is generated in the helper function `chart.resourceNamePrefix`. service: name: hub port: number: 80 tls: [] service: type: NodePort port: 80 # Service account for Artifact Hub to use serviceAccount: # Enable creation of ServiceAccount for Artifact Hub pod create: true # The name of the ServiceAccount to use. If not set and create is true, a name is generated name: '' # Allows auto mount of ServiceAccountToken on the serviceAccount created automountServiceAccountToken: true # Create and bind role for service account rbac: # Enable creation and binding of role create: true deploy: readinessGates: [] replicaCount: 3 image: # Hub image repository (without the tag) repository: artifacthub/hub securityContext: {} containerSecurityContext: {} resources: requests: cpu: 2 memory: 8000Mi # If you do want to specify resources, uncomment the following # lines and adjust them as necessary. # limits: # cpu: 100m # memory: 128Mi # requests: # cpu: 100m # memory: 128Mi initContainers: checkDbMigrator: image: repository: rancher/kubectl # tag: v1.36.2 resources: {} # If you do want to specify resources, uncomment the following # lines and adjust them as necessary. # limits: # cpu: 100m # memory: 128Mi # requests: # cpu: 100m # memory: 128Mi securityContext: {} checkDbIsReady: resources: {} # If you do want to specify resources, uncomment the following # lines and adjust them as necessary. # limits: # cpu: 100m # memory: 128Mi # requests: # cpu: 100m # memory: 128Mi securityContext: {} # Optionally specify extra list of additional labels for the hub deployment extraDeploymentLabels: {} # Optionally specify extra list of additional labels for hub pods extraPodLabels: {} # Optionally specify extra list of additional volumes for the hub deployment extraVolumes: [] # Optionally specify extra list of additional volume mounts for the hub deployment extraVolumeMounts: [] # Optionally specify a node selector for the hub deployment nodeSelector: {} # Optionally specify a list of tolerations for the hub deployment tolerations: [] # Optionally specify extra list of additional containers for the hub deployment extraContainers: [] # Optionally specify extra list of additional environment variables for the hub container extraEnvVars: [] server: # Allow adding private repositories to the Hub allowPrivateRepositories: false # Allow new Users to Sign Up allowUserSignUp: true # Cache directory path. If set, the cache directory for the Helm client will be explicitly set (otherwise # defaults to $HOME/.cache), and the directory will be mounted as ephemeral volume (emptyDir) cacheDir: '' # Directory path where the configuration files should be mounted configDir: /home/hub/.cfg # Banners configuration file url bannersURL: https://cncf.github.io/banners/banners.yml # Hub server base url baseURL: https://artifacthub.io # Hub server shutdown timeout shutdownTimeout: 20s # Message of the day. The message of the day will be displayed in a banner on the top of the Artifact Hub UI motd: '' # Message of the day severity. The color used for the banner will be based on the severity selected # Options: "info", "warning", "error" motdSeverity: info basicAuth: # Enable Hub basic auth enabled: false # Hub basic auth username username: hub # Hub basic auth password password: changeme cookie: # Hub cookie hash key hashKey: default-unsafe-key # Enable Hub secure cookies secure: false csrf: # CSRF authentication key authKey: default-unsafe-key # CSRF secure cookie secure: false oauth: github: # Enable GitHub OAuth enabled: true # GitHub OAuth client id clientID: '' # GitHub OAuth client secret clientSecret: '' # GitHub OAuth redirect url redirectURL: https://artifacthub.io/oauth/github/callback # GitHub OAuth scopes scopes: - read:user - user:email google: # Enable Google oauth enabled: true # Google oauth client id clientID: '' # Google oauth client secret clientSecret: '' # Google oauth redirect url redirectURL: https://artifacthub.io/oauth/google/callback # Google oauth scopes scopes: - https://www.googleapis.com/auth/userinfo.email - https://www.googleapis.com/auth/userinfo.profile oidc: # Enable OIDC enabled: false # OpenID connect issuer url issuerURL: '' # OpenID connect oauth client id clientID: '' # OpenID connect oauth client secret clientSecret: '' # OpenID connect oauth redirect url redirectURL: '' # OpenID connect oauth scopes scopes: - openid - profile - email # Skip email verified check skipEmailVerifiedCheck: false # X-Forwarded-For IP index xffIndex: 0 analytics: # Google Analytics tracking id gaTrackingID: '' theme: # Colors used in the website colors: # Primary color used in the website. For an optimal experience, it's better to use colors that play well with # white fonts primary: '#417598' # Secondary color used in the website, usually a darker version of the primary color. For an optimal experience, # it's better to use colors that play well with white fonts secondary: '#2D4857' # Images used in the website images: # URL of the image used for the Apple touch icon (192x192) appleTouchIcon192: /static/media/logo192_v2.png # URL of the image used for the Apple touch icon (512x512) appleTouchIcon512: /static/media/logo512_v2.png # URL of the image used in the og:image tag. This image is displayed when an Artifact Hub link is shared in # Twitter or Slack, for example. The URL must use `https` openGraphImage: /static/media/artifactHub_v2.png # URL of the image used for the shortcut icon (also known as favicon) shortcutIcon: /static/media/logo_v2.png # URL of the logo used in the website header. For an optimal experience, it's better to use a white logo with # transparent background, with no margin around it. It'll be displayed using a maximum height of 20px and a # maximum width of 185px websiteLogo: /static/media/logo/artifacthub-brand-white.svg # Sample search queries used in home and no results found pages sampleQueries: - name: OLM operators for databases querystring: kind=3&category=2 - name: Packages of any kind related to etcd querystring: ts_query_web=etcd - name: Falco rules for CVE querystring: kind=1&ts_query_web=cve - name: OLM operators in the monitoring category querystring: kind=3&category=4 - name: Packages from verified publishers querystring: verified_publisher=true - name: Official Prometheus packages querystring: ts_query_web=prometheus&official=true - name: Operators with auto pilot capabilities querystring: capabilities=auto+pilot - name: Helm Charts in the storage category querystring: kind=0&category=7 - name: Packages with Apache-2.0 license querystring: license=Apache-2.0 - name: OPA policies with MIT license querystring: kind=2&license=MIT - name: Helm plugins querystring: kind=6 - name: Kubectl plugins querystring: kind=5 - name: Tekton tasks and pipelines querystring: kind=7&kind=11 - name: Gatekeeper policies querystring: kind=14 - name: Kubewarden policies querystring: kind=13 - name: KEDA scalers querystring: kind=8 - name: Keptn integrations querystring: kind=10 - name: Tinkerbell actions querystring: kind=4 - name: CoreDNS plugins querystring: kind=9 - name: Backstage plugins querystring: kind=17 - name: Container images querystring: kind=12 - name: Kyverno policies querystring: kind=15 - name: Knative clients querystring: kind=16 - name: Argo templates querystring: kind=18 - name: KubeArmor policies querystring: kind=19 - name: KCL modules querystring: kind=20 - name: Headlamp plugins querystring: kind=21 - name: Inspektor gadgets querystring: kind=22 - name: Tekton step actions querystring: kind=23 - name: Meshery designs querystring: kind=24 - name: OpenCost plugins querystring: kind=25 - name: Radius recipes querystring: kind=26 - name: Bootable containers querystring: kind=27 - name: Kagent agents querystring: kind=28 # Name of the site. This name is displayed in some places in the website and email templates. When a different # value than the default one (Artifact Hub) is provided, the site enters `white label` mode. In this mode, some # sections of the website are displayed in a more generic way, omitting certain parts that are unique to Artifact Hub siteName: Artifact hub reportURL: https://github.com/artifacthub/hub/issues/new?assignees=&labels=abuse+report&template=report-abuse.md&title=%5BABUSE-REPORT%5D+Repository+or+package+name # Scanner configuration scanner: enabled: true cronjob: image: # Scanner image repository (without the tag) repository: artifacthub/scanner securityContext: {} containerSecurityContext: {} serviceAccountName: default resources: requests: cpu: 2 memory: 8000Mi # If you do want to specify resources, uncomment the following # lines and adjust them as necessary. # limits: # cpu: 100m # memory: 128Mi # requests: # cpu: 100m # memory: 128Mi # Optionally specify extra list of additional labels for the scanner cronjob extraCronJobLabels: {} # Optionally specify extra list of additional labels for the jobs spawned by the scanner cronjob extraJobLabels: {} # Optionally specify extra list of additional volumes for the scanner cronjob extraVolumes: [] # Optionally specify extra list of additional volume mounts for the scanner cronjob extraVolumeMounts: [] # Optionally specify extra list of additional environment variables for the scanner container extraEnvVars: [] # Optionally specify a node selector for the scanner cronjob nodeSelector: {} # Optionally specify a list of tolerations for the scanner cronjob tolerations: [] # Number of snapshots to process concurrently concurrency: 5 # Trivy server url. Defaults to the Trivy service's internal URL trivyURL: '' # Cache directory path. If set, the cache directory for the Trivy client will be explicitly set (otherwise defaults # to $HOME/.cache), and the directory will be mounted as ephemeral volume (emptyDir) cacheDir: '' # Directory path where the configuration files should be mounted configDir: /home/scanner/.cfg # Tracker configuration tracker: cronjob: image: # Tracker image repository (without the tag) repository: artifacthub/tracker securityContext: {} containerSecurityContext: {} serviceAccountName: default resources: requests: cpu: 2 memory: 4000Mi # If you do want to specify resources, uncomment the following # lines and adjust them as necessary. # limits: # cpu: 100m # memory: 128Mi # requests: # cpu: 100m # memory: 128Mi # Optionally specify extra list of additional labels for the tracker cronjob extraCronJobLabels: {} # Optionally specify extra list of additional labels for the Jobs spawned by the tracker cronjob extraJobLabels: {} # Optionally specify extra list of additional volumes for the tracker cronjob extraVolumes: [] # Optionally specify extra list of additional volume mounts for the tracker cronjob extraVolumeMounts: [] # Optionally specify extra list of additional environment variables for the tracker container extraEnvVars: [] # Optionally specify a node selector for the tracker cronjob nodeSelector: {} # Optionally specify a list of tolerations for the tracker cronjob tolerations: [] # Cache directory path. If set, the cache directory for the Helm client will be explicitly set (otherwise defaults # to $HOME/.cache), and the directory will be mounted as ephemeral volume (emptyDir) cacheDir: '' # Directory path where the configuration files should be mounted configDir: /home/tracker/.cfg # Number of repositories to process concurrently concurrency: 10 # Maximum duration for the tracking of a single repository repositoryTimeout: 45m # Repositories names to process ([] = all) repositoriesNames: [] # Repositories kinds to process ([] = all) repositoriesKinds: [] # Bypass digest check. Use this option to force already indexed packages to be reprocessed (use with caution) bypassDigestCheck: false # Trivy configuration trivy: enabled: true deploy: image: aquasec/trivy:0.69.3 securityContext: {} resources: requests: cpu: 1 memory: 4000Mi # If you do want to specify resources, uncomment the following # lines and adjust them as necessary. # limits: # cpu: 100m # memory: 128Mi # requests: # cpu: 100m # memory: 128Mi # Optionally specify extra list of additional labels for the trivy deployment extraDeploymentLabels: {} # Optionally specify extra list of additional labels for trivy pods extraPodLabels: {} # Optionally specify extra list of additional volumes for the trivy deployment extraVolumes: [] # Optionally specify extra list of additional volume mounts for the trivy deployment extraVolumeMounts: [] # Optionally specify a node selector for the trivy deployment nodeSelector: {} # Optionally specify a list of tolerations for the trivy deployment tolerations: [] persistence: enabled: true size: 100Gi storageClassName: gp2 # Values for postgresql chart dependency postgresql: enabled: false auth: username: hub password: hub database: hub global: security: allowInsecureImages: true image: repository: artifacthub/postgres tag: latest primary: extraVolumes: - name: run emptyDir: {} extraVolumeMounts: - name: run mountPath: /var/run/postgresql # Extra objects to deploy (value evaluated as a template) extraDeploy: []