vaultwarden helm

No introduction found. Create it?

More popular helm chart found

vaultwarden from bjw-s-labs/charts/ is more popular with 22 repositories.

Install

Install with:

helm repo add bjw-s https://bjw-s-labs.github.io/helm-charts/
helm install vaultwarden bjw-s/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (2 out of 15)

NameRepoStarsVersionTimestamp
vaultwardenvaskozl/home-infra1014.6.29 days ago
vaultwardenbo0tzz/kube421.3.211 days ago

Values

See the most popular values for this chart:

KeyTypes
ingress.main.hosts[].host (6)
vaultwarden.kaminek.me
bitwarden.kaminek.me
string
ingress.main.hosts[].paths[].path (6)
/
string
ingress.main.hosts[].paths[].service.identifier (5)
main
main
main
main
string
ingress.main.hosts[].paths[].service.port (5)
http
string
ingress.main.hosts[].paths[].pathType (2)
Prefix
string
ingress.main.tls[].hosts[] (6)
- vaultwarden.kaminek.me
- bitwarden.kaminek.me
string
ingress.main.tls[].secretName (5)
vaultwarden-tls
string
ingress.main.className (5)
external
string
ingress.main.annotations."cert-manager.io/cluster-issuer" (4)
letsencrypt-production
string
ingress.main.annotations."hajimari.io/enable" (3)
true
string
ingress.main.annotations."hajimari.io/group" (3)
Security
string
ingress.main.annotations."hajimari.io/icon" (3)
shield-key
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/hostname" (2)
vaultwarden.kaminek.me,bitwarden.kaminek.me
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (2)
bo0tzz.me
string
ingress.main.annotations."hajimari.io/appName" (2)
Vaultwarden
string
ingress.main.annotations."gatus.io/enabled" (1)
true
string
ingress.main.annotations."hajimari.io/url" (1)
https://bw.${SECRET_DOMAIN}/
string
ingress.main.annotations."kubernetes.io/ingress.class" (1)
nginx
string
ingress.main.annotations."nginx.ingress.kubernetes.io/proxy-body-size" (1)
1G
string
ingress.main.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)
websecure
string
ingress.main.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)
networking-traefik-middleware-chain-no-auth@kubernetescrd
string
ingress.main.enabled (2)
true
boolean
ingress.app.className (3)
nginx
string
ingress.app.hosts[].host (2)
bitwarden.${SECRET_DOMAIN_2}
string
ingress.app.hosts[].paths[].path (2)
/
/notifications/hub/negotiate
/notifications/hub
string
ingress.app.hosts[].paths[].service.port (2)
80
80
3012
number
ingress.app.hosts[].paths[].service.identifier (1)
app
string
ingress.app.hosts[].paths[].service.name (1)
vaultwarden
vaultwarden
vaultwarden
string
ingress.app.hosts[].paths[].pathType (1)
Prefix
Prefix
Prefix
string
ingress.app.tls[].hosts[] (2)
- bitwarden.${SECRET_DOMAIN_2}
string
ingress.app.tls[].secretName (1)
bitwarden-${SECRET_DOMAIN_2/./-}-production-tls
string
ingress.app.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.app.annotations."external-dns.home.arpa/enabled" (1)
true
string
ingress.app.annotations."gethomepage.dev/description" (1)
Bitwarden Password Manager
string
ingress.app.annotations."gethomepage.dev/enabled" (1)
true
string
ingress.app.annotations."gethomepage.dev/group" (1)
Services
string
ingress.app.annotations."gethomepage.dev/icon" (1)
bitwarden.png
string
ingress.app.annotations."gethomepage.dev/name" (1)
Bitwarden
string
ingress.app.annotations."gethomepage.dev/siteMonitor" (1)
http://vaultwarden.default.svc.cluster.local:80
string
ingress.app.annotations."kubernetes.io/tls-acme" (1)
true
string
ingress.app.annotations."nginx.ingress.kubernetes.io/custom-http-errors" (1)
500,501,502,503,504,505,506,510
string
ingress.app.annotations."nginx.ingress.kubernetes.io/force-ssl-redirect" (1)
true
string
ingress.app.annotations."nginx.ingress.kubernetes.io/ssl-redirect" (1)
true
string
ingress.app.enabled (1)
false
boolean
ingress.admin.annotations."nginx.ingress.kubernetes.io/auth-signin" (2)
https://oauth.kaminek.me/oauth2/start?rd=$scheme://$host$request_uri
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/auth-url" (2)
https://oauth.kaminek.me/oauth2/auth
string
ingress.admin.className (2)
external
string
ingress.admin.hosts[].host (2)
vaultwarden.kaminek.me
bitwarden.kaminek.me
string
ingress.admin.hosts[].paths[].path (2)
/admin
/admin
string
ingress.admin.hosts[].paths[].service.identifier (2)
main
main
string
ingress.admin.hosts[].paths[].service.port (2)
http
http
string
ingress.admin.tls[].hosts[] (2)
- vaultwarden.kaminek.me
- bitwarden.kaminek.me
string
ingress.admin.tls[].secretName (2)
vaultwarden-tls
string
ingress.vaultwarden.enabled (2)
true
boolean
ingress.vaultwarden.hosts[].host (2)
vaultwarden.${SECRET_DEFAULT_DOMAIN}
string
ingress.vaultwarden.hosts[].paths[].path (2)
/
string
ingress.vaultwarden.hosts[].paths[].service.identifier (2)
vaultwarden
string
ingress.vaultwarden.hosts[].paths[].service.port (2)
http
string
ingress.vaultwarden.annotations."haproxy.org/allow-list" (1)
${HAPROXY_WHITELIST}
string
ingress.vaultwarden.annotations."haproxy.org/response-set-header" (1)
Strict-Transport-Security "max-age=31536000" X-Frame-Options "DENY" X-Content-Type-Options "nosniff" Referrer-Policy "strict-origin-when-cross-origin"
string
ingress.vaultwarden.annotations."haproxy.org/ssl-redirect-port" (1)
443
string
ingress.vaultwarden.annotations."route.openshift.io/termination" (1)
edge
string
ingress.vaultwarden.className (1)
openshift-default
string
ingress.vaultwarden.tls[].hosts[] (1)
- vaultwarden.${SECRET_DEFAULT_DOMAIN}
string
service.app.controller (6)
vaultwarden
string
service.app.ports.http.port (6)
80
number
service.app.ports.http.protocol (1)
TCP
string
service.app.ports.websocket.port (1)
3012
number
service.app.enabled (1)
true
boolean
service.app.type (1)
ClusterIP
string
service.main.ports.http.port (4)
80
number
service.main.ports.websocket.port (2)
3012
number
service.main.controller (3)
main
string
service.vaultwarden.controller (3)
vaultwarden
string
service.vaultwarden.ports.http.port (3)
80
number
service.vaultwarden.ports.websocket.enabled (1)
true
boolean
service.vaultwarden.ports.websocket.port (1)
3012
number
service.vaultwarden.primary (1)
true
boolean
service.http.controller (1)
main
string
service.http.ports.http.port (1)
80
number
controllers.vaultwarden.containers.app.image.repository (5)
ghcr.io/dani-garcia/vaultwarden
string
controllers.vaultwarden.containers.app.image.tag (5)
1.35.7@sha256:9a8eec71f4a52411cc43edc7a50f33e9b6f62b5baca0dd95f0c6e7fd60f1a341
string
controllers.vaultwarden.containers.app.probes.liveness.enabled (5)
true
boolean
controllers.vaultwarden.containers.app.probes.liveness.custom (2)
true
boolean
controllers.vaultwarden.containers.app.probes.liveness.spec.failureThreshold (2)
3
number
controllers.vaultwarden.containers.app.probes.liveness.spec.httpGet.path (2)
/
string
controllers.vaultwarden.containers.app.probes.liveness.spec.httpGet.port (2)
80
number
controllers.vaultwarden.containers.app.probes.liveness.spec.initialDelaySeconds (2)
0
number
controllers.vaultwarden.containers.app.probes.liveness.spec.periodSeconds (2)
10
number
controllers.vaultwarden.containers.app.probes.liveness.spec.timeoutSeconds (2)
1
number
controllers.vaultwarden.containers.app.probes.readiness.enabled (5)
true
boolean
controllers.vaultwarden.containers.app.probes.readiness.custom (2)
true
boolean
controllers.vaultwarden.containers.app.probes.readiness.spec.failureThreshold (2)
3
number
controllers.vaultwarden.containers.app.probes.readiness.spec.httpGet.path (2)
/
string
controllers.vaultwarden.containers.app.probes.readiness.spec.httpGet.port (2)
80
number
controllers.vaultwarden.containers.app.probes.readiness.spec.initialDelaySeconds (2)
0
number
controllers.vaultwarden.containers.app.probes.readiness.spec.periodSeconds (2)
10
number
controllers.vaultwarden.containers.app.probes.readiness.spec.timeoutSeconds (2)
1
number
controllers.vaultwarden.containers.app.probes.startup.enabled (2)
true
boolean
controllers.vaultwarden.containers.app.probes.startup.spec.failureThreshold (1)
30
number
controllers.vaultwarden.containers.app.probes.startup.spec.periodSeconds (1)
5
number
controllers.vaultwarden.containers.app.resources.requests.cpu (4)
100m
string
controllers.vaultwarden.containers.app.resources.requests.memory (3)
100Mi
string
controllers.vaultwarden.containers.app.resources.limits.memory (3)
100Mi
string
controllers.vaultwarden.containers.app.env.DOMAIN (3)
https://passwords.${S_HOMEPROD_DOMAIN}
string
controllers.vaultwarden.containers.app.env.TZ (3)
${TZ}
string
controllers.vaultwarden.containers.app.env.ATTACHMENTS_FOLDER (2)
data/attachments
string
controllers.vaultwarden.containers.app.env.DATA_FOLDER (2)
data
string
controllers.vaultwarden.containers.app.env.ICON_CACHE_FOLDER (2)
data/icon_cache
string
controllers.vaultwarden.containers.app.env.SIGNUPS_ALLOWED (2)
false
string, boolean
controllers.vaultwarden.containers.app.env.WEBSOCKET_ADDRESS (2)
0.0.0.0
string
controllers.vaultwarden.containers.app.env.WEBSOCKET_ENABLED (2)
true
string, boolean
controllers.vaultwarden.containers.app.env.WEBSOCKET_PORT (2)
3012
number
controllers.vaultwarden.containers.app.env.ADMIN_TOKEN.valueFrom.secretKeyRef.key (1)
ADMIN_TOKEN
string
controllers.vaultwarden.containers.app.env.ADMIN_TOKEN.valueFrom.secretKeyRef.name (1)
vaultwarden
string
controllers.vaultwarden.containers.app.env.DATABASE_URL.valueFrom.secretKeyRef.key (1)
uri
string
controllers.vaultwarden.containers.app.env.DATABASE_URL.valueFrom.secretKeyRef.name (1)
default-cluster-pguser-vaultwarden
string
controllers.vaultwarden.containers.app.env.DISABLE_2FA_REMEMBER (1)
false
boolean
controllers.vaultwarden.containers.app.env.DISABLE_ICON_DOWNLOAD (1)
false
boolean
controllers.vaultwarden.containers.app.env.EMERGENCY_ACCESS_ALLOWED (1)
true
boolean
controllers.vaultwarden.containers.app.env.INVITATIONS_ALLOWED (1)
true
boolean
controllers.vaultwarden.containers.app.env.PASSWORD_HINTS_ALLOWED (1)
false
boolean
controllers.vaultwarden.containers.app.env.ROCKET_PORT (1)
8080
number
controllers.vaultwarden.containers.app.env.SENDS_ALLOWED (1)
true
boolean
controllers.vaultwarden.containers.app.env.SENDS_FOLDER (1)
config/sends
string
controllers.vaultwarden.containers.app.env.SMTP_ACCEPT_INVALID_CERTS (1)
true
boolean
controllers.vaultwarden.containers.app.env.SMTP_ACCEPT_INVALID_HOSTNAMES (1)
true
boolean
controllers.vaultwarden.containers.app.env.SMTP_PORT (1)
587
number
controllers.vaultwarden.containers.app.env.SMTP_SECURITY (1)
starttls
string
controllers.vaultwarden.containers.app.envFrom[].secretRef.name (2)
vaultwarden
string
controllers.vaultwarden.containers.app.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.vaultwarden.containers.app.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.vaultwarden.containers.app.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.vaultwarden.containers.app.env[].name (1)
DOMAIN
ADMIN_TOKEN
SIGNUPS_ALLOWED
string
controllers.vaultwarden.containers.app.env[].value (1)
https://vaultwarden.${domain_name}
false
string
controllers.vaultwarden.containers.app.env[].valueFrom.secretKeyRef.key (1)
admin_token
string
controllers.vaultwarden.containers.app.env[].valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.vaultwarden.containers.vaultwarden.env.DATABASE_URL.valueFrom.secretKeyRef.key (3)
uri
string
controllers.vaultwarden.containers.vaultwarden.env.DATABASE_URL.valueFrom.secretKeyRef.name (3)
pg-vaultwarden-app
string
controllers.vaultwarden.containers.vaultwarden.env.TZ (3)
${TIMEZONE}
string
controllers.vaultwarden.containers.vaultwarden.env.DATA_FOLDER (2)
data
string
controllers.vaultwarden.containers.vaultwarden.env.DOMAIN (2)
https://vault.${EXTERNAL_DOMAIN}
string
controllers.vaultwarden.containers.vaultwarden.env.INVITATIONS_ALLOWED (2)
true
boolean, string
controllers.vaultwarden.containers.vaultwarden.env.SIGNUPS_ALLOWED (2)
false
string
controllers.vaultwarden.containers.vaultwarden.env.ADMIN_TOKEN.valueFrom.secretKeyRef.key (1)
admin-password
string
controllers.vaultwarden.containers.vaultwarden.env.ADMIN_TOKEN.valueFrom.secretKeyRef.name (1)
vaultwarden-credentials
string
controllers.vaultwarden.containers.vaultwarden.env.ATTACHMENTS_FOLDER (1)
data/attachments
string
controllers.vaultwarden.containers.vaultwarden.env.DISABLE_2FA_REMEMBER (1)
false
boolean
controllers.vaultwarden.containers.vaultwarden.env.DISABLE_ICON_DOWNLOAD (1)
false
boolean
controllers.vaultwarden.containers.vaultwarden.env.EMERGENCY_ACCESS_ALLOWED (1)
true
boolean
controllers.vaultwarden.containers.vaultwarden.env.ICON_CACHE_FOLDER (1)
icons
string
controllers.vaultwarden.containers.vaultwarden.env.PASSWORD_HINTS_ALLOWED (1)
false
boolean
controllers.vaultwarden.containers.vaultwarden.env.PUSH_ENABLED (1)
true
string
controllers.vaultwarden.containers.vaultwarden.env.ROCKET_PORT (1)
80
number
controllers.vaultwarden.containers.vaultwarden.env.SENDS_ALLOWED (1)
true
boolean
controllers.vaultwarden.containers.vaultwarden.env.SENDS_FOLDER (1)
data/sends
string
controllers.vaultwarden.containers.vaultwarden.env.SHOW_PASSWORD_HINT (1)
false
string
controllers.vaultwarden.containers.vaultwarden.env.SMTP_FROM (1)
vault@${EXTERNAL_DOMAIN}
string
controllers.vaultwarden.containers.vaultwarden.env.SMTP_FROM_NAME (1)
Vault
string
controllers.vaultwarden.containers.vaultwarden.env.SMTP_HOST (1)
smtp-relay.network.svc.cluster.local
string
controllers.vaultwarden.containers.vaultwarden.env.SMTP_PORT (1)
2525
number
controllers.vaultwarden.containers.vaultwarden.env.SMTP_SECURITY (1)
off
string
controllers.vaultwarden.containers.vaultwarden.env.TMP_FOLDER (1)
/tmp
string
controllers.vaultwarden.containers.vaultwarden.image.repository (3)
vaultwarden/server
string
controllers.vaultwarden.containers.vaultwarden.image.tag (3)
1.33.2
string
controllers.vaultwarden.containers.vaultwarden.image.pullPolicy (1)
IfNotPresent
string
controllers.vaultwarden.containers.vaultwarden.resources.limits.memory (2)
164Mi
string
controllers.vaultwarden.containers.vaultwarden.resources.requests.cpu (2)
5m
string
controllers.vaultwarden.containers.vaultwarden.resources.requests.memory (1)
64Mi
string
controllers.vaultwarden.containers.vaultwarden.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.vaultwarden.containers.vaultwarden.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.vaultwarden.containers.vaultwarden.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.vaultwarden.containers.vaultwarden.securityContext.privileged (1)
true
boolean
controllers.vaultwarden.containers.vaultwarden.envFrom[].secretRef.name (1)
vaultwarden-secret
string
controllers.vaultwarden.containers.vaultwarden.probes.liveness.enabled (1)
true
boolean
controllers.vaultwarden.containers.vaultwarden.probes.readiness.enabled (1)
true
boolean
controllers.vaultwarden.containers.vaultwarden.probes.startup.enabled (1)
true
boolean
controllers.vaultwarden.annotations."reloader.stakater.com/auto" (3)
true
string
controllers.vaultwarden.type (3)
statefulset
string
controllers.vaultwarden.statefulset.podManagementPolicy (2)
Parallel
string
controllers.vaultwarden.statefulset.volumeClaimTemplates[].accessMode (2)
ReadWriteOnce
string
controllers.vaultwarden.statefulset.volumeClaimTemplates[].globalMounts[].path (2)
/data
string
controllers.vaultwarden.statefulset.volumeClaimTemplates[].name (2)
data
string
controllers.vaultwarden.statefulset.volumeClaimTemplates[].size (2)
1Gi
string
controllers.vaultwarden.statefulset.volumeClaimTemplates[].storageClass (1)
longhorn-fast
string
controllers.vaultwarden.defaultContainerOptions.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.vaultwarden.defaultContainerOptions.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.vaultwarden.pod.securityContext.fsGroup (1)
1000
number
controllers.vaultwarden.pod.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
controllers.vaultwarden.pod.securityContext.runAsGroup (1)
1000
number
controllers.vaultwarden.pod.securityContext.runAsNonRoot (1)
true
boolean
controllers.vaultwarden.pod.securityContext.runAsUser (1)
1000
number
controllers.vaultwarden.pod.securityContext.seccompProfile.type (1)
RuntimeDefault
string
controllers.vaultwarden.strategy (1)
Recreate
string
controllers.main.containers.main.image.repository (4)
vaultwarden/server
string
controllers.main.containers.main.image.tag (4)
1.35.4
string
controllers.main.containers.main.env.DOMAIN (3)
https://vaultwarden.kaminek.me
string
controllers.main.containers.main.env.INVITATIONS_ALLOWED (3)
false
string
controllers.main.containers.main.env.SHOW_PASSWORD_HINT (3)
false
string
controllers.main.containers.main.env.SIGNUPS_ALLOWED (3)
false
string
controllers.main.containers.main.env.WEBSOCKET_ENABLED (3)
true
string
controllers.main.containers.main.env.DATABASE_URL.valueFrom.secretKeyRef.key (2)
DATABASE_URL
string
controllers.main.containers.main.env.DATABASE_URL.valueFrom.secretKeyRef.name (2)
vaultwarden-secret
string
controllers.main.containers.main.env.DISABLE_ICON_DOWNLOAD (2)
true
string
controllers.main.containers.main.env.EXTENDED_LOGGING (2)
true
string
controllers.main.containers.main.env.INCOMPLETE_2FA_TIME_LIMIT (2)
3
string
controllers.main.containers.main.env.IP_HEADER (2)
X-Forwarded-For
string
controllers.main.containers.main.env.LOG_LEVEL (2)
warn
string
controllers.main.containers.main.env.LOGIN_RATELIMIT_MAX_BURST (2)
5
string
controllers.main.containers.main.env.LOGIN_RATELIMIT_SECONDS (2)
60
string
controllers.main.containers.main.env.ORG_CREATION_USERS (2)

string
controllers.main.containers.main.env.PASSWORD_HINTS_ALLOWED (2)
false
string
controllers.main.containers.main.env.SENDS_ALLOWED (2)
false
string
controllers.main.containers.main.env.ATTACHMENTS_FOLDER (1)
data/attachments
string
controllers.main.containers.main.env.DATA_FOLDER (1)
data
string
controllers.main.containers.main.env.EVENTS_DAYS_RETAIN (1)
730
string
controllers.main.containers.main.env.ICON_CACHE_FOLDER (1)
data/icon_cache
string
controllers.main.containers.main.env.ORG_EVENTS_ENABLED (1)
true
string
controllers.main.containers.main.env.PASSWORD_ITERATIONS (1)
321000
string
controllers.main.containers.main.env.PUSH_ENABLED (1)
true
string
controllers.main.containers.main.env.PUSH_INSTALLATION_ID (1)
${VAULTWARDEN_PUSH_ID}
string
controllers.main.containers.main.env.PUSH_INSTALLATION_KEY (1)
${VAULTWARDEN_PUSH_KEY}
string
controllers.main.containers.main.env.REQUIRE_DEVICE_EMAIL (1)
true
string
controllers.main.containers.main.env.SMTP_FROM (1)
vaultwarden@${SECRET_DOMAIN}
string
controllers.main.containers.main.env.SMTP_FROM_NAME.valueFrom.secretKeyRef.key (1)
SMTP_FROM_NAME
string
controllers.main.containers.main.env.SMTP_FROM_NAME.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.main.containers.main.env.SMTP_FROM_NAME (1)
vaultwarden@${SECRET_DOMAIN}
string
controllers.main.containers.main.env.SMTP_FROM.valueFrom.secretKeyRef.key (1)
SMTP_FROM
string
controllers.main.containers.main.env.SMTP_FROM.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.main.containers.main.env.SMTP_HOST.valueFrom.secretKeyRef.key (1)
SMTP_HOST
string
controllers.main.containers.main.env.SMTP_HOST.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.main.containers.main.env.SMTP_HOST (1)
smtp-relay.system.svc.cluster.local
string
controllers.main.containers.main.env.SMTP_PASSWORD.valueFrom.secretKeyRef.key (1)
SMTP_PASSWORD
string
controllers.main.containers.main.env.SMTP_PASSWORD.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.main.containers.main.env.SMTP_PORT.valueFrom.secretKeyRef.key (1)
SMTP_PORT
string
controllers.main.containers.main.env.SMTP_PORT.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.main.containers.main.env.SMTP_PORT (1)
2525
number
controllers.main.containers.main.env.SMTP_SECURITY.valueFrom.secretKeyRef.key (1)
SMTP_SECURITY
string
controllers.main.containers.main.env.SMTP_SECURITY.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.main.containers.main.env.SMTP_SECURITY (1)
off
string
controllers.main.containers.main.env.SMTP_USERNAME.valueFrom.secretKeyRef.key (1)
SMTP_USERNAME
string
controllers.main.containers.main.env.SMTP_USERNAME.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.main.containers.main.env.TZ (1)
${TIMEZONE}
string
controllers.main.containers.main.env.WEBSOCKET_ADDRESS (1)
0.0.0.0
string
controllers.main.containers.main.resources.limits.memory (3)
256Mi
string
controllers.main.containers.main.resources.requests.cpu (3)
100m
string
controllers.main.containers.main.resources.requests.memory (3)
128Mi
string
controllers.main.containers.main.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.main.containers.main.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.main.containers.main.securityContext.readOnlyRootFilesystem (2)
false
boolean
controllers.main.containers.main.probes.liveness.custom (1)
true
boolean
controllers.main.containers.main.probes.liveness.enabled (1)
true
boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (1)
3
number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (1)
/alive
string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (1)
80
number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (1)
0
number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (1)
10
number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (1)
1
number
controllers.main.containers.main.probes.readiness.custom (1)
true
boolean
controllers.main.containers.main.probes.readiness.enabled (1)
true
boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (1)
3
number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (1)
/alive
string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (1)
80
number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (1)
0
number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (1)
10
number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (1)
1
number
controllers.main.containers.backups.env.BACKUP_DIR (1)
/backups
string
controllers.main.containers.backups.env.BACKUP_ON_STARTUP (1)
true
boolean
controllers.main.containers.backups.env.CRON_TIME (1)
0 * * * *
string
controllers.main.containers.backups.env.DELETE_AFTER (1)
30
number
controllers.main.containers.backups.env.ENCRYPTION_PASSWORD (1)
${VAULTWARDEN_BACKUP_PASS}
string
controllers.main.containers.backups.env.GID (1)
0
number
controllers.main.containers.backups.env.TIMESTAMP (1)
true
boolean
controllers.main.containers.backups.env.UID (1)
0
number
controllers.main.containers.backups.image.repository (1)
bruceforce/vaultwarden-backup
string
controllers.main.containers.backups.image.tag (1)
2.1.4
string
controllers.main.pod.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."cnpg.io/cluster" (2)
main
string
controllers.main.pod.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."cnpg.io/instanceRole" (2)
primary
string
controllers.main.pod.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.namespaces[] (2)
- database
string
controllers.main.pod.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (2)
kubernetes.io/hostname
string
controllers.main.pod.affinity.podAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (2)
100
number
controllers.main.pod.securityContext.fsGroup (2)
1000
number
controllers.main.pod.securityContext.runAsGroup (2)
1000
number
controllers.main.pod.securityContext.runAsUser (2)
1000
number
controllers.main.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.${vaultwarden_app_name}.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.${vaultwarden_app_name}.containers.app.image.repository (1)
vaultwarden/server
string
controllers.${vaultwarden_app_name}.containers.app.image.tag (1)
1.35.3
string
controllers.${vaultwarden_app_name}.containers.app.ports[].containerPort (1)
80
number
controllers.${vaultwarden_app_name}.containers.app.ports[].name (1)
http
string
controllers.${vaultwarden_app_name}.containers.app.resources.limits.memory (1)
1Gi
string
controllers.${vaultwarden_app_name}.containers.app.resources.requests.cpu (1)
10m
string
controllers.${vaultwarden_app_name}.containers.app.resources.requests.memory (1)
128Mi
string
controllers.${vaultwarden_app_name}.replicas (1)
1
number
defaultPodOptions.securityContext.runAsGroup (5)
1000
number, string
defaultPodOptions.securityContext.runAsUser (5)
1000
number, string
defaultPodOptions.securityContext.fsGroup (4)
1000
number, string
defaultPodOptions.securityContext.fsGroupChangePolicy (4)
OnRootMismatch
string
defaultPodOptions.securityContext.runAsNonRoot (3)
true
boolean
defaultPodOptions.securityContext.seccompProfile.type (3)
RuntimeDefault
string
defaultPodOptions.annotations."secret.reloader.stakater.com/reload" (1)
vaultwarden
string
defaultPodOptions.automountServiceAccountToken (1)
false
boolean
defaultPodOptions.enableServiceLinks (1)
false
boolean
defaultPodOptions.runtimeClassName (1)
gvisor
string
persistence.data.existingClaim (5)
vaultwarden-data
string
persistence.data.globalMounts[].path (4)
/data
string
persistence.data.enabled (3)
true
boolean
persistence.data.accessMode (2)
ReadWriteOnce
string
persistence.data.size (2)
1Gi
string
persistence.data.type (2)
persistentVolumeClaim
string
persistence.data.suffix (1)
data
string
persistence.config.globalMounts[].path (3)
/config
string
persistence.config.accessMode (2)
ReadWriteOnce
string
persistence.config.enabled (2)
true
boolean
persistence.config.existingClaim (2)
vaultwarden-config
string
persistence.config.size (2)
5Gi
string
persistence.config.storageClass (2)
longhorn-crypto-global
string
persistence.config.suffix (1)
config
string
persistence.config.type (1)
persistentVolumeClaim
string
persistence.tmp.type (3)
emptyDir
string
persistence.tmp.enabled (1)
true
boolean
persistence.backups.globalMounts[].path (1)
/backups
string
persistence.backups.path (1)
/mnt/user/backups/vaultwarden
string
persistence.backups.server (1)
${CORE_NFS_SERVER:=nas0}
string
persistence.backups.type (1)
nfs
string
persistence.icons.type (1)
emptyDir
string
persistence.storage.existingClaim (1)
vaultwarden-storage
string
persistence.storage.globalMounts[].path (1)
/data
string
env.DATABASE_URL.valueFrom.secretKeyRef.key (1)
POSTGRES_URL
string
env.DATABASE_URL.valueFrom.secretKeyRef.name (1)
database-vaultwarden-user
string
env.SIGNUPS_ALLOWED (1)
false
boolean
fullnameOverride (1)
vaultwarden
string
image.repository (1)
vaultwarden/server
string
image.tag (1)
1.35.7-alpine
string
networkpolicies.vaultwarden.controller (1)
vaultwarden
string
networkpolicies.vaultwarden.enabled (1)
true
boolean
networkpolicies.vaultwarden.policyTypes[] (1)
- Egress
- Ingress
string
networkpolicies.vaultwarden.rules.egress[].ports[].port (1)
53
5432
number
networkpolicies.vaultwarden.rules.egress[].ports[].protocol (1)
UDP
string
networkpolicies.vaultwarden.rules.egress[].to[].namespaceSelector.matchLabels."kubernetes.io/metadata.name" (1)
kube-system
string
networkpolicies.vaultwarden.rules.egress[].to[].podSelector.matchLabels."cnpg.io/cluster" (1)
vaultwarden-postgres-v18
string
networkpolicies.vaultwarden.rules.egress[].to[].podSelector.matchLabels."cnpg.io/instanceRole" (1)
primary
string
networkpolicies.vaultwarden.rules.egress[].to[].podSelector.matchLabels.k8s-app (1)
kube-dns
string
networkpolicies.vaultwarden.rules.ingress[].from[].namespaceSelector.matchLabels."kubernetes.io/metadata.name" (1)
haproxy-controller
string
networkpolicies.vaultwarden.rules.ingress[].from[].podSelector.matchLabels."app.kubernetes.io/name" (1)
kubernetes-ingress
string
networkpolicies.vaultwarden.rules.ingress[].ports[].port (1)
80
number
resources.requests.cpu (1)
100m
string
resources.requests.memory (1)
250M
string
route.app.annotations."gethomepage.dev/description" (1)
Password Manager
string
route.app.annotations."gethomepage.dev/enabled" (1)
true
string
route.app.annotations."gethomepage.dev/group" (1)
Cloud
string
route.app.annotations."gethomepage.dev/icon" (1)
bitwarden
string
route.app.annotations."gethomepage.dev/name" (1)
Bitwarden
string
route.app.hostnames[] (1)
- bw.sko.ai
string
route.app.parentRefs[].name (1)
internal-noauth
string
route.app.parentRefs[].namespace (1)
agentgateway
string
route.vaultwarden.annotations."hajimari.io/enable" (1)
true
string
route.vaultwarden.annotations."hajimari.io/icon" (1)
ph:password-fill
string
route.vaultwarden.enabled (1)
true
boolean
route.vaultwarden.hostnames[] (1)
- vault.${EXTERNAL_DOMAIN}
string
route.vaultwarden.kind (1)
HTTPRoute
string
route.vaultwarden.parentRefs[].kind (1)
Gateway
string
route.vaultwarden.parentRefs[].name (1)
public-gateway
string
route.vaultwarden.parentRefs[].namespace (1)
gateway
string
route.vaultwarden.rules[].backendRefs[].kind (1)
Service
string
route.vaultwarden.rules[].backendRefs[].name (1)
vaultwarden
string
route.vaultwarden.rules[].backendRefs[].port (1)
80
number
route.vaultwarden.rules[].matches[].path.type (1)
PathPrefix
string
route.vaultwarden.rules[].matches[].path.value (1)
/
string