image: repository: semaphoreui/semaphore tag: v2.9.70@sha256:7ff94a05c7fc60b1a7e597546d7429a030d4c85c263994642caa55ede5e1529b pullPolicy: IfNotPresent securityContext: container: readOnlyRootFilesystem: false runAsNonRoot: false runAsUser: 0 runAsGroup: 0 service: main: ports: main: port: 3000 protocol: http targetPort: 3000 workload: main: podSpec: containers: main: env: # DB SEMAPHORE_DB_DIALECT: postgres SEMAPHORE_DB_USER: "{{ .Values.cnpg.main.user }}" SEMAPHORE_DB: "{{ .Values.cnpg.main.database }}" SEMAPHORE_DB_PORT: 5432 SEMAPHORE_DB_HOST: secretKeyRef: name: cnpg-main-urls key: host SEMAPHORE_DB_PASS: secretKeyRef: name: cnpg-main-user key: password SEMAPHORE_ACCESS_KEY_ENCRYPTION: secretKeyRef: name: semaphore-secrets key: SEMAPHORE_ACCESS_KEY_ENCRYPTION # set paths to /data SEMAPHORE_PLAYBOOK_PATH: "{{.Values.persistence.data.mountPath }}" SEMAPHORE_ADMIN: admin SEMAPHORE_ADMIN_NAME: admin SEMAPHORE_ADMIN_PASSWORD: changeme SEMAPHORE_ADMIN_EMAIL: admin@localhost # LDAP # no | yes SEMAPHORE_LDAP_ACTIVATED: "no" # SEMAPHORE_LDAP_HOST: dc01.local.example.com # SEMAPHORE_LDAP_PORT: '636' # no | yes SEMAPHORE_LDAP_NEEDTLS: "no" # SEMAPHORE_LDAP_DN_BIND: 'uid=bind_user,cn=users,cn=accounts,dc=local,dc=shiftsystems,dc=net' # SEMAPHORE_LDAP_PASSWORD: 'ldap_bind_account_password' # SEMAPHORE_LDAP_DN_SEARCH: 'dc=local,dc=example,dc=com' # SEMAPHORE_LDAP_SEARCH_FILTER: "(\u0026(uid=%s)(memberOf=cn=ipausers,cn=groups,cn=accounts,dc=local,dc=example,dc=com))" persistence: config: enabled: true mountPath: /etc/semaphore data: enabled: true mountPath: /data cnpg: main: enabled: true user: semaphore database: semaphore portal: open: enabled: true