Helm Values File in Production

kubernetes-helm-values-in-production.yaml

replicaCount: 1

image:
  repository: technologyleads/ecosystem-identity-api
  pullPolicy: Always

  # Overrides the image tag whose default is the chart appVersion.
  tag: "v1.0.0"
env:          
  - name: "ASPNETCORE_ENVIRONMENT"
    value: "Production"
  - name: "ContainerMode"
    value: "true"
  - name: "ASPNETCORE_FORWARDEDHEADERS_ENABLED"
    value: "true"
  - name:  SubscriptionApiSettings__BaseUrl
    value: http://ecosystem-subscription-api-release
  - name: "MessagingApiSettings__BaseUrl"
    value: "http://ecosystem-messaging-api-release"
  - name: "DeepLinkSettings__WebClient"
    value: "https://pellerex.com"
  - name: "AppHost"
    value: "api.pellerex.com"
  - name: "BasePath"
    value: "/identity"
  - name: AuthSettings__ExternalIdentityProviderBackendRedirectUrl
    value: https://api.pellerex.com/identity/v1/account/external-auth-callback

global:
  # Environment variables shared between all the pods, populated with valueFrom: fieldRef
  envValuesFrom:
    Runtime__IpAddress: status.podIP

volumes:
  - name: technologyleads-identity-api-azure-keyvault-volume
    csiSecretProviderClass: azure-es-identity-api-vault

volumeMounts:
  - name: technologyleads-identity-api-azure-keyvault-volume
    readOnly: true
    mountPath: /root/.microsoft/usersecrets

imagePullSecrets: 
  - name: technologyleads-registry-key
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: false
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

service:
  type: ClusterIP
  port: 80
  targetPort: 8001

ingress:
  enabled: true
  className: ""
  annotations: 
    nginx.ingress.kubernetes.io/enable-cors: "true"
    nginx.ingress.kubernetes.io/cors-allow-origin: "http://pellerex.com"
    nginx.ingress.kubernetes.io/rewrite-target: /$2
    kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
    - host: api.pellerex.com
      paths:
        - path: /identity(/|$)(.*)
          pathType: Prefix

  defaultBackend:
    service:
  tls: 
   - secretName: technologyleads-ecosystem-api-certificate
     hosts:
       - api.pellerex.com

resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

nodeSelector: {}

tolerations: []

affinity: {}