asd
This commit is contained in:
thaoduc
23
label-studio/.helmignore
Normal file
23
label-studio/.helmignore
Normal file
@@ -0,0 +1,23 @@
|
|||||||
|
# Patterns to ignore when building packages.
|
||||||
|
# This supports shell glob matching, relative path matching, and
|
||||||
|
# negation (prefixed with !). Only one pattern per line.
|
||||||
|
.DS_Store
|
||||||
|
# Common VCS dirs
|
||||||
|
.git/
|
||||||
|
.gitignore
|
||||||
|
.bzr/
|
||||||
|
.bzrignore
|
||||||
|
.hg/
|
||||||
|
.hgignore
|
||||||
|
.svn/
|
||||||
|
# Common backup files
|
||||||
|
*.swp
|
||||||
|
*.bak
|
||||||
|
*.tmp
|
||||||
|
*.orig
|
||||||
|
*~
|
||||||
|
# Various IDEs
|
||||||
|
.project
|
||||||
|
.idea/
|
||||||
|
*.tmproj
|
||||||
|
.vscode/
|
||||||
24
label-studio/Chart.yaml
Normal file
24
label-studio/Chart.yaml
Normal file
@@ -0,0 +1,24 @@
|
|||||||
|
apiVersion: v2
|
||||||
|
name: label-studio
|
||||||
|
description: A Helm chart for Kubernetes
|
||||||
|
|
||||||
|
# A chart can be either an 'application' or a 'library' chart.
|
||||||
|
#
|
||||||
|
# Application charts are a collection of templates that can be packaged into versioned archives
|
||||||
|
# to be deployed.
|
||||||
|
#
|
||||||
|
# Library charts provide useful utilities or functions for the chart developer. They're included as
|
||||||
|
# a dependency of application charts to inject those utilities and functions into the rendering
|
||||||
|
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
|
||||||
|
type: application
|
||||||
|
|
||||||
|
# This is the chart version. This version number should be incremented each time you make changes
|
||||||
|
# to the chart and its templates, including the app version.
|
||||||
|
# Versions are expected to follow Semantic Versioning (https://semver.org/)
|
||||||
|
version: 1.1
|
||||||
|
|
||||||
|
# This is the version number of the application being deployed. This version number should be
|
||||||
|
# incremented each time you make changes to the application. Versions are not expected to
|
||||||
|
# follow Semantic Versioning. They should reflect the version the application is using.
|
||||||
|
# It is recommended to use it with quotes.
|
||||||
|
appVersion: "1.16.0"
|
||||||
BIN
label-studio/label-studio-1.1.tgz
Normal file
BIN
label-studio/label-studio-1.1.tgz
Normal file
Binary file not shown.
35
label-studio/templates/NOTES.txt
Normal file
35
label-studio/templates/NOTES.txt
Normal file
@@ -0,0 +1,35 @@
|
|||||||
|
1. Get the application URL by running these commands:
|
||||||
|
{{- if .Values.httpRoute.enabled }}
|
||||||
|
{{- if .Values.httpRoute.hostnames }}
|
||||||
|
export APP_HOSTNAME={{ .Values.httpRoute.hostnames | first }}
|
||||||
|
{{- else }}
|
||||||
|
export APP_HOSTNAME=$(kubectl get --namespace {{(first .Values.httpRoute.parentRefs).namespace | default .Release.Namespace }} gateway/{{ (first .Values.httpRoute.parentRefs).name }} -o jsonpath="{.spec.listeners[0].hostname}")
|
||||||
|
{{- end }}
|
||||||
|
{{- if and .Values.httpRoute.rules (first .Values.httpRoute.rules).matches (first (first .Values.httpRoute.rules).matches).path.value }}
|
||||||
|
echo "Visit http://$APP_HOSTNAME{{ (first (first .Values.httpRoute.rules).matches).path.value }} to use your application"
|
||||||
|
|
||||||
|
NOTE: Your HTTPRoute depends on the listener configuration of your gateway and your HTTPRoute rules.
|
||||||
|
The rules can be set for path, method, header and query parameters.
|
||||||
|
You can check the gateway configuration with 'kubectl get --namespace {{(first .Values.httpRoute.parentRefs).namespace | default .Release.Namespace }} gateway/{{ (first .Values.httpRoute.parentRefs).name }} -o yaml'
|
||||||
|
{{- end }}
|
||||||
|
{{- else if .Values.ingress.enabled }}
|
||||||
|
{{- range $host := .Values.ingress.hosts }}
|
||||||
|
{{- range .paths }}
|
||||||
|
http{{ if $.Values.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- else if contains "NodePort" .Values.service.type }}
|
||||||
|
export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "label-studio.fullname" . }})
|
||||||
|
export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
|
||||||
|
echo http://$NODE_IP:$NODE_PORT
|
||||||
|
{{- else if contains "LoadBalancer" .Values.service.type }}
|
||||||
|
NOTE: It may take a few minutes for the LoadBalancer IP to be available.
|
||||||
|
You can watch its status by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "label-studio.fullname" . }}'
|
||||||
|
export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "label-studio.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
|
||||||
|
echo http://$SERVICE_IP:{{ .Values.service.port }}
|
||||||
|
{{- else if contains "ClusterIP" .Values.service.type }}
|
||||||
|
export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "label-studio.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
|
||||||
|
export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
|
||||||
|
echo "Visit http://127.0.0.1:8080 to use your application"
|
||||||
|
kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$CONTAINER_PORT
|
||||||
|
{{- end }}
|
||||||
62
label-studio/templates/_helpers.tpl
Normal file
62
label-studio/templates/_helpers.tpl
Normal file
@@ -0,0 +1,62 @@
|
|||||||
|
{{/*
|
||||||
|
Expand the name of the chart.
|
||||||
|
*/}}
|
||||||
|
{{- define "label-studio.name" -}}
|
||||||
|
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create a default fully qualified app name.
|
||||||
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
|
If release name contains chart name it will be used as a full name.
|
||||||
|
*/}}
|
||||||
|
{{- define "label-studio.fullname" -}}
|
||||||
|
{{- if .Values.fullnameOverride }}
|
||||||
|
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- $name := default .Chart.Name .Values.nameOverride }}
|
||||||
|
{{- if contains $name .Release.Name }}
|
||||||
|
{{- .Release.Name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create chart name and version as used by the chart label.
|
||||||
|
*/}}
|
||||||
|
{{- define "label-studio.chart" -}}
|
||||||
|
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "label-studio.labels" -}}
|
||||||
|
helm.sh/chart: {{ include "label-studio.chart" . }}
|
||||||
|
{{ include "label-studio.selectorLabels" . }}
|
||||||
|
{{- if .Chart.AppVersion }}
|
||||||
|
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
||||||
|
{{- end }}
|
||||||
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "label-studio.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/name: {{ include "label-studio.name" . }}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the name of the service account to use
|
||||||
|
*/}}
|
||||||
|
{{- define "label-studio.serviceAccountName" -}}
|
||||||
|
{{- if .Values.serviceAccount.create }}
|
||||||
|
{{- default (include "label-studio.fullname" .) .Values.serviceAccount.name }}
|
||||||
|
{{- else }}
|
||||||
|
{{- default "default" .Values.serviceAccount.name }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
78
label-studio/templates/deployment.yaml
Normal file
78
label-studio/templates/deployment.yaml
Normal file
@@ -0,0 +1,78 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: {{ include "label-studio.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "label-studio.labels" . | nindent 4 }}
|
||||||
|
spec:
|
||||||
|
{{- if not .Values.autoscaling.enabled }}
|
||||||
|
replicas: {{ .Values.replicaCount }}
|
||||||
|
{{- end }}
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
{{- include "label-studio.selectorLabels" . | nindent 6 }}
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
{{- with .Values.podAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
{{- include "label-studio.labels" . | nindent 8 }}
|
||||||
|
{{- with .Values.podLabels }}
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
{{- with .Values.imagePullSecrets }}
|
||||||
|
imagePullSecrets:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
serviceAccountName: {{ include "label-studio.serviceAccountName" . }}
|
||||||
|
{{- with .Values.podSecurityContext }}
|
||||||
|
securityContext:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
containers:
|
||||||
|
- name: {{ .Chart.Name }}
|
||||||
|
{{- with .Values.securityContext }}
|
||||||
|
securityContext:
|
||||||
|
{{- toYaml . | nindent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
|
||||||
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
containerPort: {{ .Values.service.port }}
|
||||||
|
protocol: TCP
|
||||||
|
{{- with .Values.livenessProbe }}
|
||||||
|
livenessProbe:
|
||||||
|
{{- toYaml . | nindent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.readinessProbe }}
|
||||||
|
readinessProbe:
|
||||||
|
{{- toYaml . | nindent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.resources }}
|
||||||
|
resources:
|
||||||
|
{{- toYaml . | nindent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.volumeMounts }}
|
||||||
|
volumeMounts:
|
||||||
|
{{- toYaml . | nindent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.volumes }}
|
||||||
|
volumes:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.nodeSelector }}
|
||||||
|
nodeSelector:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.affinity }}
|
||||||
|
affinity:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.tolerations }}
|
||||||
|
tolerations:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
32
label-studio/templates/hpa.yaml
Normal file
32
label-studio/templates/hpa.yaml
Normal file
@@ -0,0 +1,32 @@
|
|||||||
|
{{- if .Values.autoscaling.enabled }}
|
||||||
|
apiVersion: autoscaling/v2
|
||||||
|
kind: HorizontalPodAutoscaler
|
||||||
|
metadata:
|
||||||
|
name: {{ include "label-studio.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "label-studio.labels" . | nindent 4 }}
|
||||||
|
spec:
|
||||||
|
scaleTargetRef:
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
name: {{ include "label-studio.fullname" . }}
|
||||||
|
minReplicas: {{ .Values.autoscaling.minReplicas }}
|
||||||
|
maxReplicas: {{ .Values.autoscaling.maxReplicas }}
|
||||||
|
metrics:
|
||||||
|
{{- if .Values.autoscaling.targetCPUUtilizationPercentage }}
|
||||||
|
- type: Resource
|
||||||
|
resource:
|
||||||
|
name: cpu
|
||||||
|
target:
|
||||||
|
type: Utilization
|
||||||
|
averageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.autoscaling.targetMemoryUtilizationPercentage }}
|
||||||
|
- type: Resource
|
||||||
|
resource:
|
||||||
|
name: memory
|
||||||
|
target:
|
||||||
|
type: Utilization
|
||||||
|
averageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
38
label-studio/templates/httproute.yaml
Normal file
38
label-studio/templates/httproute.yaml
Normal file
@@ -0,0 +1,38 @@
|
|||||||
|
{{- if .Values.httpRoute.enabled -}}
|
||||||
|
{{- $fullName := include "label-studio.fullname" . -}}
|
||||||
|
{{- $svcPort := .Values.service.port -}}
|
||||||
|
apiVersion: gateway.networking.k8s.io/v1
|
||||||
|
kind: HTTPRoute
|
||||||
|
metadata:
|
||||||
|
name: {{ $fullName }}
|
||||||
|
labels:
|
||||||
|
{{- include "label-studio.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.httpRoute.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
parentRefs:
|
||||||
|
{{- with .Values.httpRoute.parentRefs }}
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.httpRoute.hostnames }}
|
||||||
|
hostnames:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
rules:
|
||||||
|
{{- range .Values.httpRoute.rules }}
|
||||||
|
{{- with .matches }}
|
||||||
|
- matches:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .filters }}
|
||||||
|
filters:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
backendRefs:
|
||||||
|
- name: {{ $fullName }}
|
||||||
|
port: {{ $svcPort }}
|
||||||
|
weight: 1
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
43
label-studio/templates/ingress.yaml
Normal file
43
label-studio/templates/ingress.yaml
Normal file
@@ -0,0 +1,43 @@
|
|||||||
|
{{- if .Values.ingress.enabled -}}
|
||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: {{ include "label-studio.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "label-studio.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.ingress.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
{{- with .Values.ingress.className }}
|
||||||
|
ingressClassName: {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.ingress.tls }}
|
||||||
|
tls:
|
||||||
|
{{- range .Values.ingress.tls }}
|
||||||
|
- hosts:
|
||||||
|
{{- range .hosts }}
|
||||||
|
- {{ . | quote }}
|
||||||
|
{{- end }}
|
||||||
|
secretName: {{ .secretName }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
rules:
|
||||||
|
{{- range .Values.ingress.hosts }}
|
||||||
|
- host: {{ .host | quote }}
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
{{- range .paths }}
|
||||||
|
- path: {{ .path }}
|
||||||
|
{{- with .pathType }}
|
||||||
|
pathType: {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: {{ include "label-studio.fullname" $ }}
|
||||||
|
port:
|
||||||
|
number: {{ $.Values.service.port }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
15
label-studio/templates/service.yaml
Normal file
15
label-studio/templates/service.yaml
Normal file
@@ -0,0 +1,15 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: {{ include "label-studio.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "label-studio.labels" . | nindent 4 }}
|
||||||
|
spec:
|
||||||
|
type: {{ .Values.service.type }}
|
||||||
|
ports:
|
||||||
|
- port: {{ .Values.service.port }}
|
||||||
|
targetPort: http
|
||||||
|
protocol: TCP
|
||||||
|
name: http
|
||||||
|
selector:
|
||||||
|
{{- include "label-studio.selectorLabels" . | nindent 4 }}
|
||||||
13
label-studio/templates/serviceaccount.yaml
Normal file
13
label-studio/templates/serviceaccount.yaml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
{{- if .Values.serviceAccount.create -}}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
name: {{ include "label-studio.serviceAccountName" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "label-studio.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.serviceAccount.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
|
||||||
|
{{- end }}
|
||||||
15
label-studio/templates/tests/test-connection.yaml
Normal file
15
label-studio/templates/tests/test-connection.yaml
Normal file
@@ -0,0 +1,15 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Pod
|
||||||
|
metadata:
|
||||||
|
name: "{{ include "label-studio.fullname" . }}-test-connection"
|
||||||
|
labels:
|
||||||
|
{{- include "label-studio.labels" . | nindent 4 }}
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": test
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: wget
|
||||||
|
image: busybox
|
||||||
|
command: ['wget']
|
||||||
|
args: ['{{ include "label-studio.fullname" . }}:{{ .Values.service.port }}']
|
||||||
|
restartPolicy: Never
|
||||||
774
label-studio/values.yaml
Normal file
774
label-studio/values.yaml
Normal file
@@ -0,0 +1,774 @@
|
|||||||
|
# Default values for Label Studio.
|
||||||
|
# This is a YAML-formatted file.
|
||||||
|
# Declare variables to be passed into your templates.
|
||||||
|
|
||||||
|
global:
|
||||||
|
# Image pull secret to use for registry authentication.
|
||||||
|
# Alternatively, you can specify the value as an array of strings.
|
||||||
|
imagePullSecrets: []
|
||||||
|
|
||||||
|
image:
|
||||||
|
registry: docker.io
|
||||||
|
repository: heartexlabs/label-studio
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
tag: ""
|
||||||
|
|
||||||
|
pgConfig:
|
||||||
|
host: "127.0.0.1"
|
||||||
|
port: 5432
|
||||||
|
dbName: "label"
|
||||||
|
userName: "label"
|
||||||
|
password:
|
||||||
|
secretName: "label-studio-pg-password"
|
||||||
|
secretKey: "label-studio-pg-password"
|
||||||
|
ssl:
|
||||||
|
pgSslMode: ""
|
||||||
|
pgSslSecretName: ""
|
||||||
|
pgSslRootCertSecretKey: ""
|
||||||
|
pgSslCertSecretKey: ""
|
||||||
|
pgSslKeySecretKey: ""
|
||||||
|
|
||||||
|
# Redis location, for example redis://[:password]@localhost:6379/1
|
||||||
|
# Supported only in LSE
|
||||||
|
redisConfig:
|
||||||
|
host: "127.0.0.1"
|
||||||
|
password:
|
||||||
|
secretName: "label-studio-redis-password"
|
||||||
|
secretKey: "label-studio-redis-password"
|
||||||
|
ssl:
|
||||||
|
redisSslCertReqs: ""
|
||||||
|
redisSslSecretName: ""
|
||||||
|
redisSslCaCertsSecretKey: ""
|
||||||
|
redisSslCertFileSecretKey: ""
|
||||||
|
redisSslKeyFileSecretKey: ""
|
||||||
|
|
||||||
|
extraEnvironmentVars: {}
|
||||||
|
extraEnvironmentSecrets: { }
|
||||||
|
|
||||||
|
persistence:
|
||||||
|
enabled: true
|
||||||
|
type: volume # s3, azure, gcs
|
||||||
|
config:
|
||||||
|
s3:
|
||||||
|
accessKey: ""
|
||||||
|
secretKey: ""
|
||||||
|
accessKeyExistingSecret: ""
|
||||||
|
accessKeyExistingSecretKey: ""
|
||||||
|
secretKeyExistingSecret: ""
|
||||||
|
secretKeyExistingSecretKey: ""
|
||||||
|
region: ""
|
||||||
|
bucket: ""
|
||||||
|
folder: ""
|
||||||
|
urlExpirationSecs: "86400"
|
||||||
|
endpointUrl: ""
|
||||||
|
objectParameters: {}
|
||||||
|
volume:
|
||||||
|
## If defined, storageClassName: <storageClass>
|
||||||
|
## If set to "-", storageClassName: "", which disables dynamic provisioning
|
||||||
|
## If undefined (the default) or set to null, no storageClassName spec is
|
||||||
|
## set, choosing the default provisioner. (gp2 on AWS, standard on
|
||||||
|
## GKE, AWS & OpenStack)
|
||||||
|
##
|
||||||
|
storageClass: ""
|
||||||
|
size: 10Gi
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteOnce
|
||||||
|
annotations: {}
|
||||||
|
existingClaim: ""
|
||||||
|
resourcePolicy: ""
|
||||||
|
azure:
|
||||||
|
storageAccountName: ""
|
||||||
|
storageAccountKey: ""
|
||||||
|
storageAccountNameExistingSecret: ""
|
||||||
|
storageAccountNameExistingSecretKey: ""
|
||||||
|
storageAccountKeyExistingSecret: ""
|
||||||
|
storageAccountKeyExistingSecretKey: ""
|
||||||
|
containerName: ""
|
||||||
|
folder: ""
|
||||||
|
urlExpirationSecs: "86400"
|
||||||
|
gcs:
|
||||||
|
projectID: ""
|
||||||
|
applicationCredentialsJSON: ""
|
||||||
|
applicationCredentialsJSONExistingSecret: ""
|
||||||
|
applicationCredentialsJSONExistingSecretKey: ""
|
||||||
|
bucket: ""
|
||||||
|
folder: ""
|
||||||
|
urlExpirationSecs: "86400"
|
||||||
|
|
||||||
|
featureFlags: { }
|
||||||
|
# File name of a shell script to load additional template environment variables from.
|
||||||
|
# This is useful when using Vault.
|
||||||
|
# "- /vault/secrets/config"
|
||||||
|
envInjectSources: []
|
||||||
|
|
||||||
|
## @param app.cmdWrapper Additional commands to run prior to starting App. Useful to run wrappers before startup command
|
||||||
|
## e.g:
|
||||||
|
## cmdWrapper: "newrelic-admin run-program"
|
||||||
|
##
|
||||||
|
cmdWrapper: ""
|
||||||
|
|
||||||
|
# File names of a custom SSL root certs. These filename will be appended to existing root certs.
|
||||||
|
# "- /tmp/my_cool_root_cert"
|
||||||
|
customCaCerts: [ ]
|
||||||
|
|
||||||
|
app:
|
||||||
|
# Update strategy - only really applicable for deployments with RWO PVs attached
|
||||||
|
# If replicas = 1, an update can get "stuck", as the previous pod remains attached to the
|
||||||
|
# PV, and the "incoming" pod can never start. Changing the strategy to "Recreate" will
|
||||||
|
# terminate the single previous pod, so that the new, incoming pod can attach to the PV
|
||||||
|
deploymentStrategy:
|
||||||
|
type: RollingUpdate
|
||||||
|
|
||||||
|
deploymentAnnotations: { }
|
||||||
|
|
||||||
|
replicas: 1
|
||||||
|
|
||||||
|
NameOverride: ""
|
||||||
|
FullnameOverride: ""
|
||||||
|
labels: { }
|
||||||
|
podLabels: { }
|
||||||
|
|
||||||
|
## @param app.args Override default container args (useful when using custom images)
|
||||||
|
##
|
||||||
|
args:
|
||||||
|
- "label-studio-uwsgi"
|
||||||
|
|
||||||
|
resources:
|
||||||
|
requests: {}
|
||||||
|
## Example:
|
||||||
|
# memory: "600Mi"
|
||||||
|
# cpu: "250m"
|
||||||
|
limits: {}
|
||||||
|
## Example:
|
||||||
|
# memory: "4000Mi"
|
||||||
|
# cpu: "4"
|
||||||
|
|
||||||
|
initContainer:
|
||||||
|
resources:
|
||||||
|
requests: {}
|
||||||
|
## Example:
|
||||||
|
# memory: 384Mi
|
||||||
|
# cpu: 250m
|
||||||
|
limits: {}
|
||||||
|
## Example:
|
||||||
|
# memory: 512Mi
|
||||||
|
# cpu: 500m
|
||||||
|
|
||||||
|
nginx:
|
||||||
|
args:
|
||||||
|
- "nginx"
|
||||||
|
extraEnvironmentVars: {}
|
||||||
|
extraEnvironmentSecrets: {}
|
||||||
|
resources:
|
||||||
|
requests: {}
|
||||||
|
## Example
|
||||||
|
## memory: 384Mi
|
||||||
|
## cpu: 250m
|
||||||
|
limits: {}
|
||||||
|
## Example:
|
||||||
|
## memory: 1G
|
||||||
|
## cpu: 1000m
|
||||||
|
livenessProbe:
|
||||||
|
enabled: true
|
||||||
|
tcpSocket:
|
||||||
|
port: 8085
|
||||||
|
initialDelaySeconds: 10
|
||||||
|
periodSeconds: 10
|
||||||
|
timeoutSeconds: 3
|
||||||
|
failureThreshold: 3
|
||||||
|
successThreshold: 1
|
||||||
|
readinessProbe:
|
||||||
|
enabled: true
|
||||||
|
httpGet:
|
||||||
|
path: /nginx_health
|
||||||
|
port: 8085
|
||||||
|
initialDelaySeconds: 10
|
||||||
|
periodSeconds: 5
|
||||||
|
timeoutSeconds: 3
|
||||||
|
failureThreshold: 1
|
||||||
|
successThreshold: 1
|
||||||
|
|
||||||
|
# extraEnvironmentVars is a list of extra environment variables to set in the
|
||||||
|
# app deployment.
|
||||||
|
extraEnvironmentVars: { }
|
||||||
|
# KUBERNETES_SERVICE_HOST: kubernetes.default.svc
|
||||||
|
|
||||||
|
# extraEnvironmentSecrets is a list of extra environment variables to set in the
|
||||||
|
# app deployment.
|
||||||
|
extraEnvironmentSecrets: { }
|
||||||
|
# MYSQL_PASSWORD:
|
||||||
|
# secretName: mysql_secret
|
||||||
|
# secretKey: password
|
||||||
|
|
||||||
|
# nodeSelector labels for pod assignment, formatted as a multi-line string or YAML map.
|
||||||
|
# ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
|
||||||
|
# Example:
|
||||||
|
# nodeSelector:
|
||||||
|
# beta.kubernetes.io/arch: amd64
|
||||||
|
nodeSelector: { }
|
||||||
|
|
||||||
|
topologySpreadConstraints: [ ]
|
||||||
|
|
||||||
|
dnsPolicy: "ClusterFirst"
|
||||||
|
|
||||||
|
enableServiceLinks: false
|
||||||
|
|
||||||
|
shareProcessNamespace: false
|
||||||
|
|
||||||
|
automountServiceAccountToken: true
|
||||||
|
|
||||||
|
# Extra k8s annotations to attach to the app pods
|
||||||
|
# This can either be YAML or a YAML-formatted multi-line templated string map
|
||||||
|
# of the annotations to apply to the app pods
|
||||||
|
annotations: { }
|
||||||
|
|
||||||
|
# Extra k8s labels to attach to Label Studio Enterprise.
|
||||||
|
# Provide a YAML map of k8s labels.
|
||||||
|
extraLabels: { }
|
||||||
|
|
||||||
|
affinity: { }
|
||||||
|
|
||||||
|
# Toleration Settings for app pods
|
||||||
|
# Provide either a multi-line string or YAML matching the Toleration array
|
||||||
|
# in a PodSpec.
|
||||||
|
tolerations: []
|
||||||
|
|
||||||
|
# Used to define custom readinessProbe settings
|
||||||
|
readinessProbe:
|
||||||
|
enabled: true
|
||||||
|
httpGet:
|
||||||
|
path: /health
|
||||||
|
port: 8000
|
||||||
|
scheme: HTTP
|
||||||
|
# When a probe fails, Kubernetes will try failureThreshold times before giving up
|
||||||
|
failureThreshold: 1
|
||||||
|
# Number of seconds after the container has started before probe initiates
|
||||||
|
initialDelaySeconds: 60
|
||||||
|
# How often (in seconds) to perform the probe
|
||||||
|
periodSeconds: 5
|
||||||
|
# Minimum consecutive successes for the probe to be considered successful after having failed
|
||||||
|
successThreshold: 1
|
||||||
|
# Number of seconds after which the probe times out.
|
||||||
|
timeoutSeconds: 1
|
||||||
|
# Used to enable a livenessProbe for the pods
|
||||||
|
livenessProbe:
|
||||||
|
enabled: true
|
||||||
|
tcpSocket:
|
||||||
|
port: 8000
|
||||||
|
# When a probe fails, Kubernetes will try failureThreshold times before giving up
|
||||||
|
failureThreshold: 3
|
||||||
|
# Number of seconds after the container has started before probe initiates
|
||||||
|
initialDelaySeconds: 10
|
||||||
|
# How often (in seconds) to perform the probe
|
||||||
|
periodSeconds: 10
|
||||||
|
# Minimum consecutive successes for the probe to be considered successful after having failed
|
||||||
|
successThreshold: 1
|
||||||
|
# Number of seconds after which the probe times out.
|
||||||
|
timeoutSeconds: 5
|
||||||
|
|
||||||
|
service:
|
||||||
|
type: ClusterIP
|
||||||
|
port: 80
|
||||||
|
targetPort: 8085
|
||||||
|
portName: service
|
||||||
|
annotations: { }
|
||||||
|
sessionAffinity: "None"
|
||||||
|
sessionAffinityConfig: { }
|
||||||
|
|
||||||
|
ingress:
|
||||||
|
enabled: false
|
||||||
|
# For Kubernetes >= 1.18 you should specify the ingress-controller using the field ingressClassName
|
||||||
|
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||||
|
className: ""
|
||||||
|
annotations: { }
|
||||||
|
## Examples:
|
||||||
|
## kubernetes.io/tls-acme: "true"
|
||||||
|
host: ""
|
||||||
|
# You may need to set this to '/*' in order to use this with ALB ingress controllers.
|
||||||
|
path: /
|
||||||
|
## Extra paths to prepend to the host configuration. This is useful when working with annotation based services.
|
||||||
|
extraPaths: []
|
||||||
|
pathType: ImplementationSpecific
|
||||||
|
## Examples:
|
||||||
|
## - path: /*
|
||||||
|
## backend:
|
||||||
|
## serviceName: ssl-redirect
|
||||||
|
## servicePort: use-annotation
|
||||||
|
tls: [ ]
|
||||||
|
## Examples:
|
||||||
|
## - secretName: chart-example-tls
|
||||||
|
## hosts:
|
||||||
|
## - app.heartex.local
|
||||||
|
## @param api.ingress.extraHosts An array with additional hostname(s) to be covered with the ingress record
|
||||||
|
## e.g:
|
||||||
|
## extraHosts:
|
||||||
|
## - name: app.humansignal.local
|
||||||
|
## path: /
|
||||||
|
##
|
||||||
|
extraHosts: [ ]
|
||||||
|
|
||||||
|
# Definition of the serviceAccount used to run Label Studio Enterprise
|
||||||
|
serviceAccount:
|
||||||
|
# Specifies whether to create a service account
|
||||||
|
create: true
|
||||||
|
# The name of the service account to use.
|
||||||
|
# If not set and create is true, a name is generated using the fullname template
|
||||||
|
name: ""
|
||||||
|
# Extra k8s annotations for the serviceAccount definition. This can either be
|
||||||
|
# YAML or a YAML-formatted multi-line templated string map of the
|
||||||
|
# k8s annotations to apply to the serviceAccount.
|
||||||
|
annotations: {}
|
||||||
|
|
||||||
|
# Array to add extra volumes
|
||||||
|
extraVolumes: [ ]
|
||||||
|
# Array to add extra mounts (normally used with extraVolumes)
|
||||||
|
extraVolumeMounts: [ ]
|
||||||
|
|
||||||
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
|
||||||
|
## @param app.podSecurityContext.enabled Enable pod Security Context
|
||||||
|
##
|
||||||
|
podSecurityContext:
|
||||||
|
enabled: true
|
||||||
|
fsGroup: 1001
|
||||||
|
|
||||||
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||||
|
## @param containerSecurityContext.enabled Enable container Security Context
|
||||||
|
## @param containerSecurityContext.runAsNonRoot Avoid running as root User
|
||||||
|
## @param containerSecurityContext.allowPrivilegeEscalation Controls whether a process can gain more privileges than its parent process
|
||||||
|
##
|
||||||
|
containerSecurityContext:
|
||||||
|
enabled: true
|
||||||
|
runAsUser: 1001
|
||||||
|
runAsNonRoot: true
|
||||||
|
allowPrivilegeEscalation: false
|
||||||
|
|
||||||
|
## RBAC configuration
|
||||||
|
##
|
||||||
|
rbac:
|
||||||
|
## @param rbac.create Specifies whether RBAC resources should be created
|
||||||
|
##
|
||||||
|
create: false
|
||||||
|
## @param app.rbac.rules Custom RBAC rules to set
|
||||||
|
## e.g:
|
||||||
|
## rules:
|
||||||
|
## - apiGroups:
|
||||||
|
## - ""
|
||||||
|
## resources:
|
||||||
|
## - pods
|
||||||
|
## verbs:
|
||||||
|
## - get
|
||||||
|
## - list
|
||||||
|
##
|
||||||
|
rules: []
|
||||||
|
|
||||||
|
contextPath: /
|
||||||
|
## @param app.cmdWrapper Additional commands to run prior to starting App. Useful to run wrappers before startup command
|
||||||
|
## e.g:
|
||||||
|
## cmdWrapper: "newrelic-admin run-program"
|
||||||
|
##
|
||||||
|
cmdWrapper: ""
|
||||||
|
|
||||||
|
## Minimal number of seconds preStop hook waits before LS is stopped to finish processing requests
|
||||||
|
## Note: must be set to lower value than terminationGracePeriodSeconds so that preStop hook finishes
|
||||||
|
## before grace period expires
|
||||||
|
preStopDelaySeconds: 15
|
||||||
|
# Seconds LS pod needs to terminate gracefully
|
||||||
|
terminationGracePeriodSeconds: 30
|
||||||
|
|
||||||
|
## Add additional init containers to the App Deployment pod
|
||||||
|
## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
|
||||||
|
## e.g:
|
||||||
|
## initContainers:
|
||||||
|
## - name: your-image-name
|
||||||
|
## image: your-image
|
||||||
|
## imagePullPolicy: Always
|
||||||
|
## command: ['sh', '-c', 'echo "hello world"']
|
||||||
|
##
|
||||||
|
initContainers: [ ]
|
||||||
|
|
||||||
|
## Add additional init containers to the App Deployment pod after sql migration
|
||||||
|
## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
|
||||||
|
## e.g:
|
||||||
|
## postMigrationInitContainers:
|
||||||
|
## - name: your-image-name
|
||||||
|
## image: your-image
|
||||||
|
## imagePullPolicy: Always
|
||||||
|
## command: ['sh', '-c', 'echo "hello world"']
|
||||||
|
##
|
||||||
|
postMigrationInitContainers: [ ]
|
||||||
|
|
||||||
|
## Pod Disruption Budget configuration
|
||||||
|
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb
|
||||||
|
## @param app.pdb.create Enable/disable a Pod Disruption Budget creation
|
||||||
|
## @param app.pdb.minAvailable Minimum number/percentage of pods that should remain scheduled
|
||||||
|
## @param app.pdb.maxUnavailable Maximum number/percentage of pods that may be made unavailable. Defaults to `1` if both `app.pdb.minAvailable` and `app.pdb.maxUnavailable` are empty.
|
||||||
|
##
|
||||||
|
pdb:
|
||||||
|
create: false
|
||||||
|
minAvailable: ""
|
||||||
|
maxUnavailable: ""
|
||||||
|
|
||||||
|
|
||||||
|
migrationJob:
|
||||||
|
enabled: false
|
||||||
|
# For Helm hooks, you can use:
|
||||||
|
# "helm.sh/hook": pre-install,pre-upgrade
|
||||||
|
# "helm.sh/hook-weight": "0"
|
||||||
|
# "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
||||||
|
# For ArgoCD, you can also use:
|
||||||
|
# "argocd.argoproj.io/hook": PreSync
|
||||||
|
# "argocd.argoproj.io/hook-delete-policy": BeforeHookCreation
|
||||||
|
annotations: {}
|
||||||
|
|
||||||
|
rqworker:
|
||||||
|
enabled: true
|
||||||
|
|
||||||
|
NameOverride: ""
|
||||||
|
FullnameOverride: ""
|
||||||
|
labels: {}
|
||||||
|
podLabels: {}
|
||||||
|
|
||||||
|
deploymentStrategy:
|
||||||
|
type: Recreate
|
||||||
|
|
||||||
|
deploymentAnnotations: { }
|
||||||
|
|
||||||
|
autoscaling:
|
||||||
|
enabled: false
|
||||||
|
scalingType: deployment
|
||||||
|
|
||||||
|
queues:
|
||||||
|
high:
|
||||||
|
replicas: 1
|
||||||
|
args: '"high"'
|
||||||
|
resources:
|
||||||
|
requests: {}
|
||||||
|
limits: {}
|
||||||
|
scaledOptions:
|
||||||
|
minReplicaCount: 0
|
||||||
|
maxReplicaCount: 5
|
||||||
|
pollingInterval: 5
|
||||||
|
cooldownPeriod: 60
|
||||||
|
listLength: 10
|
||||||
|
low:
|
||||||
|
replicas: 1
|
||||||
|
args: '"low"'
|
||||||
|
resources:
|
||||||
|
requests: {}
|
||||||
|
limits: {}
|
||||||
|
scaledOptions:
|
||||||
|
minReplicaCount: 0
|
||||||
|
maxReplicaCount: 5
|
||||||
|
pollingInterval: 5
|
||||||
|
cooldownPeriod: 60
|
||||||
|
listLength: 10
|
||||||
|
default:
|
||||||
|
replicas: 4
|
||||||
|
args: '"default"'
|
||||||
|
resources:
|
||||||
|
requests: {}
|
||||||
|
limits: {}
|
||||||
|
scaledOptions:
|
||||||
|
minReplicaCount: 0
|
||||||
|
maxReplicaCount: 5
|
||||||
|
pollingInterval: 5
|
||||||
|
cooldownPeriod: 60
|
||||||
|
listLength: 10
|
||||||
|
critical:
|
||||||
|
replicas: 1
|
||||||
|
args: '"critical"'
|
||||||
|
resources:
|
||||||
|
requests: {}
|
||||||
|
limits: {}
|
||||||
|
scaledOptions:
|
||||||
|
minReplicaCount: 0
|
||||||
|
maxReplicaCount: 5
|
||||||
|
pollingInterval: 5
|
||||||
|
cooldownPeriod: 60
|
||||||
|
listLength: 10
|
||||||
|
# Default fallback in the case if queue-specific resources are not set
|
||||||
|
resources:
|
||||||
|
requests: {}
|
||||||
|
## memory: "256Mi"
|
||||||
|
## cpu: "250m"
|
||||||
|
limits: {}
|
||||||
|
## Example:
|
||||||
|
## memory: "1500Mi"
|
||||||
|
## cpu: "1"
|
||||||
|
|
||||||
|
pdb:
|
||||||
|
create: false
|
||||||
|
minAvailable: ""
|
||||||
|
maxUnavailable: ""
|
||||||
|
|
||||||
|
# extraEnvironmentVars is a list of extra environment variables to set in the
|
||||||
|
# rqworker deployment.
|
||||||
|
extraEnvironmentVars: { }
|
||||||
|
# KUBERNETES_SERVICE_HOST: kubernetes.default.svc
|
||||||
|
|
||||||
|
# extraEnvironmentSecrets is a list of extra environment variables to set in the
|
||||||
|
# rqworker deployment.
|
||||||
|
extraEnvironmentSecrets: { }
|
||||||
|
# MYSQL_PASSWORD:
|
||||||
|
# secretName: mysql_secret
|
||||||
|
# secretKey: password
|
||||||
|
|
||||||
|
# nodeSelector labels for pod assignment, formatted as a multi-line string or YAML map.
|
||||||
|
# ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
|
||||||
|
# Example:
|
||||||
|
# nodeSelector:
|
||||||
|
# beta.kubernetes.io/arch: amd64
|
||||||
|
nodeSelector: { }
|
||||||
|
|
||||||
|
topologySpreadConstraints: [ ]
|
||||||
|
|
||||||
|
dnsPolicy: "ClusterFirst"
|
||||||
|
|
||||||
|
enableServiceLinks: false
|
||||||
|
|
||||||
|
shareProcessNamespace: false
|
||||||
|
|
||||||
|
automountServiceAccountToken: true
|
||||||
|
|
||||||
|
# Extra k8s annotations to attach to the rqworker pods
|
||||||
|
# This can either be YAML or a YAML-formatted multi-line templated string map
|
||||||
|
# of the annotations to apply to the rqworker pods
|
||||||
|
annotations: { }
|
||||||
|
|
||||||
|
# Extra k8s labels to attach to the rqworker
|
||||||
|
# This should be a YAML map of the labels to apply to the rqworker
|
||||||
|
extraLabels: { }
|
||||||
|
|
||||||
|
affinity: { }
|
||||||
|
|
||||||
|
# Toleration Settings for rqworker pods
|
||||||
|
# Provide either a multi-line string or YAML matching the Toleration array
|
||||||
|
# in a PodSpec.
|
||||||
|
tolerations: []
|
||||||
|
|
||||||
|
# Used to define custom readinessProbe settings
|
||||||
|
readinessProbe:
|
||||||
|
enabled: false
|
||||||
|
path: /version
|
||||||
|
# When a probe fails, Kubernetes will try failureThreshold times before giving up
|
||||||
|
failureThreshold: 2
|
||||||
|
# Number of seconds after the container has started before probe initiates
|
||||||
|
initialDelaySeconds: 60
|
||||||
|
# How often (in seconds) to perform the probe
|
||||||
|
periodSeconds: 5
|
||||||
|
# Minimum consecutive successes for the probe to be considered successful after having failed
|
||||||
|
successThreshold: 1
|
||||||
|
# Number of seconds after which the probe times out.
|
||||||
|
timeoutSeconds: 3
|
||||||
|
# Used to enable a livenessProbe for the pods
|
||||||
|
livenessProbe:
|
||||||
|
enabled: false
|
||||||
|
path: "/health"
|
||||||
|
# When a probe fails, Kubernetes will try failureThreshold times before giving up
|
||||||
|
failureThreshold: 2
|
||||||
|
# Number of seconds after the container has started before probe initiates
|
||||||
|
initialDelaySeconds: 60
|
||||||
|
# How often (in seconds) to perform the probe
|
||||||
|
periodSeconds: 5
|
||||||
|
# Minimum consecutive successes for the probe to be considered successful after having failed
|
||||||
|
successThreshold: 1
|
||||||
|
# Number of seconds after which the probe times out.
|
||||||
|
timeoutSeconds: 3
|
||||||
|
|
||||||
|
# Definition of the serviceAccount used to run rqworker for Label Studio Enterprise
|
||||||
|
serviceAccount:
|
||||||
|
# Specifies whether to create a service account
|
||||||
|
create: true
|
||||||
|
# The name of the service account to use.
|
||||||
|
# If not set and create is true, a name is generated using the fullname template
|
||||||
|
name: ""
|
||||||
|
# Extra k8s annotations for the serviceAccount definition. This can either be
|
||||||
|
# YAML or a YAML-formatted multi-line templated string map of the
|
||||||
|
# k8s annotations to apply to the serviceAccount.
|
||||||
|
annotations: { }
|
||||||
|
|
||||||
|
# Array to add extra volumes
|
||||||
|
extraVolumes: [ ]
|
||||||
|
# Array to add extra mounts (normally used with extraVolumes)
|
||||||
|
extraVolumeMounts: [ ]
|
||||||
|
|
||||||
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
|
||||||
|
## @param rqworker.podSecurityContext.enabled Enable pod Security Context
|
||||||
|
##
|
||||||
|
podSecurityContext:
|
||||||
|
enabled: true
|
||||||
|
fsGroup: 1001
|
||||||
|
|
||||||
|
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||||
|
## @param containerSecurityContext.enabled Enable container Security Context
|
||||||
|
## @param containerSecurityContext.runAsNonRoot Avoid running as root User
|
||||||
|
## @param containerSecurityContext.allowPrivilegeEscalation Controls whether a process can gain more privileges than its parent process
|
||||||
|
##
|
||||||
|
containerSecurityContext:
|
||||||
|
enabled: true
|
||||||
|
runAsUser: 1001
|
||||||
|
runAsNonRoot: true
|
||||||
|
allowPrivilegeEscalation: false
|
||||||
|
|
||||||
|
## RBAC configuration
|
||||||
|
##
|
||||||
|
rbac:
|
||||||
|
## @param rbac.create Specifies whether RBAC resources should be created
|
||||||
|
##
|
||||||
|
create: false
|
||||||
|
## @param rqworker.rbac.rules Custom RBAC rules to set
|
||||||
|
## e.g:
|
||||||
|
## rules:
|
||||||
|
## - apiGroups:
|
||||||
|
## - ""
|
||||||
|
## resources:
|
||||||
|
## - pods
|
||||||
|
## verbs:
|
||||||
|
## - get
|
||||||
|
## - list
|
||||||
|
##
|
||||||
|
rules: []
|
||||||
|
|
||||||
|
## @param app.cmdWrapper Additional commands to run prior to starting App. Useful to run wrappers before startup command
|
||||||
|
## e.g:
|
||||||
|
## cmdWrapper: "newrelic-admin run-program"
|
||||||
|
##
|
||||||
|
cmdWrapper: ""
|
||||||
|
|
||||||
|
# Seconds rqworker pod needs to terminate gracefully
|
||||||
|
terminationGracePeriodSeconds: 30
|
||||||
|
|
||||||
|
# [Enterprise Only]
|
||||||
|
enterprise:
|
||||||
|
enabled: false
|
||||||
|
# This value refers to a Kubernetes secret that you have
|
||||||
|
# created that contains your enterprise license.
|
||||||
|
enterpriseLicense:
|
||||||
|
# The name of the Kubernetes secret that holds the enterprise license. The
|
||||||
|
# secret must be in the same namespace that Label Studio Enterprise is installed into.
|
||||||
|
secretName: ""
|
||||||
|
# The key within the Kubernetes secret that holds the enterprise license.
|
||||||
|
secretKey: "license"
|
||||||
|
|
||||||
|
postgresql:
|
||||||
|
enabled: true
|
||||||
|
clusterDomain: cluster.local
|
||||||
|
architecture: standalone
|
||||||
|
image:
|
||||||
|
repository: bitnamilegacy/postgresql
|
||||||
|
tag: 13.18.0
|
||||||
|
auth:
|
||||||
|
username: "labelstudio"
|
||||||
|
password: "labelstudio"
|
||||||
|
database: "labelstudio"
|
||||||
|
volumePermissions:
|
||||||
|
image:
|
||||||
|
repository: bitnamilegacy/os-shell
|
||||||
|
metrics:
|
||||||
|
image:
|
||||||
|
repository: bitnamilegacy/postgres-exporter
|
||||||
|
global:
|
||||||
|
security:
|
||||||
|
allowInsecureImages: true
|
||||||
|
|
||||||
|
redis:
|
||||||
|
enabled: false
|
||||||
|
clusterDomain: cluster.local
|
||||||
|
architecture: standalone
|
||||||
|
master:
|
||||||
|
enableServiceLinks: false
|
||||||
|
auth:
|
||||||
|
enabled: false
|
||||||
|
image:
|
||||||
|
repository: bitnamilegacy/redis
|
||||||
|
sentinel:
|
||||||
|
image:
|
||||||
|
repository: bitnamilegacy/redis-sentinel
|
||||||
|
kubectl:
|
||||||
|
image:
|
||||||
|
repository: bitnamilegacy/kubectl
|
||||||
|
sysctl:
|
||||||
|
image:
|
||||||
|
repository: bitnamilegacy/os-shell
|
||||||
|
metrics:
|
||||||
|
image:
|
||||||
|
repository: bitnamilegacy/redis-exporter
|
||||||
|
volumePermissions:
|
||||||
|
image:
|
||||||
|
repository: bitnamilegacy/os-shell
|
||||||
|
global:
|
||||||
|
security:
|
||||||
|
allowInsecureImages: true
|
||||||
|
|
||||||
|
ci: false
|
||||||
|
clusterDomain: cluster.local
|
||||||
|
|
||||||
|
checkConfig:
|
||||||
|
skipEnvValues: false
|
||||||
|
|
||||||
|
cronjob:
|
||||||
|
enabled: false
|
||||||
|
jobs: {}
|
||||||
|
annotations: {}
|
||||||
|
NameOverride: ""
|
||||||
|
FullnameOverride: ""
|
||||||
|
|
||||||
|
metrics:
|
||||||
|
enabled: false
|
||||||
|
serviceMonitor:
|
||||||
|
enabled: false
|
||||||
|
annotations: {}
|
||||||
|
labels: {}
|
||||||
|
jobLabel: ""
|
||||||
|
honorLabels: false
|
||||||
|
interval: ""
|
||||||
|
scrapeTimeout: ""
|
||||||
|
metricRelabelings: []
|
||||||
|
relabelings: []
|
||||||
|
selector: {}
|
||||||
|
|
||||||
|
uwsgiExporter:
|
||||||
|
enabled: false
|
||||||
|
image:
|
||||||
|
registry: "docker.io"
|
||||||
|
repository: "timonwong/uwsgi-exporter"
|
||||||
|
tag: "v1.3.0"
|
||||||
|
pullPolicy: "Always"
|
||||||
|
pullSecrets: [ ]
|
||||||
|
|
||||||
|
containerSecurityContext:
|
||||||
|
enabled: true
|
||||||
|
allowPrivilegeEscalation: false
|
||||||
|
readOnlyRootFilesystem: false
|
||||||
|
runAsUser: 1001
|
||||||
|
|
||||||
|
resources:
|
||||||
|
requests: { }
|
||||||
|
## Example:
|
||||||
|
# cpu: "200m"
|
||||||
|
# memory: "64Mi"
|
||||||
|
limits: { }
|
||||||
|
# cpu: "20m"
|
||||||
|
# memory: "128Mi"
|
||||||
|
|
||||||
|
livenessProbe:
|
||||||
|
enabled: false
|
||||||
|
httpGet:
|
||||||
|
path: "/-/healthy"
|
||||||
|
port: "uwsgimetrics"
|
||||||
|
initialDelaySeconds: 2
|
||||||
|
periodSeconds: 10
|
||||||
|
timeoutSeconds: 5
|
||||||
|
failureThreshold: 3
|
||||||
|
successThreshold: 1
|
||||||
|
|
||||||
|
readinessProbe:
|
||||||
|
enabled: false
|
||||||
|
httpGet:
|
||||||
|
path: "/metrics"
|
||||||
|
port: "uwsgimetrics"
|
||||||
|
initialDelaySeconds: 2
|
||||||
|
periodSeconds: 10
|
||||||
|
timeoutSeconds: 5
|
||||||
|
failureThreshold: 3
|
||||||
|
successThreshold: 1
|
||||||
Reference in New Issue
Block a user