env:
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: zitadel-db-superuser
key: password
- name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
valueFrom:
secretKeyRef:
name: zitadel-db-secret
key: password
replicaCount: 2
zitadel:
masterkeySecretName: zitadel-masterkey
configmapConfig:
ExternalSecure: true
ExternalDomain: "id.****.****"
ExternalPort: 443
TLS:
Enabled: false
Database:
Postgres:
Host: "zitadel-db-rw"
Port: 5432
Database: "zitadel"
User:
Username: "zitadel"
SSL:
Mode: disable
Admin:
Username: "postgres"
SSL:
Mode: disable
FirstInstance:
Org:
Human:
UserName: "****"
Password: "****"
Email: "****"
PasswordChangeRequired: false
service:
port: 8080
annotations:
kubernetes.io/app-protocol: "kubernetes.io/h2c"
ingress:
enabled: false
postgresql:
enabled: false
cockroachdb:
enabled: false
podSecurityContext:
runAsNonRoot: true
runAsUser: 1000
fsGroup: 1000
seccompProfile:
type: RuntimeDefault
containerSecurityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
runAsNonRoot: true
readOnlyRootFilesystem: true
env:
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: zitadel-db-superuser
key: password
- name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
valueFrom:
secretKeyRef:
name: zitadel-db-secret
key: password
replicaCount: 2
zitadel:
masterkeySecretName: zitadel-masterkey
configmapConfig:
ExternalSecure: true
ExternalDomain: "id.****.****"
ExternalPort: 443
TLS:
Enabled: false
Database:
Postgres:
Host: "zitadel-db-rw"
Port: 5432
Database: "zitadel"
User:
Username: "zitadel"
SSL:
Mode: disable
Admin:
Username: "postgres"
SSL:
Mode: disable
FirstInstance:
Org:
Human:
UserName: "****"
Password: "****"
Email: "****"
PasswordChangeRequired: false
service:
port: 8080
annotations:
kubernetes.io/app-protocol: "kubernetes.io/h2c"
ingress:
enabled: false
postgresql:
enabled: false
cockroachdb:
enabled: false
podSecurityContext:
runAsNonRoot: true
runAsUser: 1000
fsGroup: 1000
seccompProfile:
type: RuntimeDefault
containerSecurityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
runAsNonRoot: true
readOnlyRootFilesystem: true