gitlab helm

No introduction found. Create it?

Install

Install with:

helm repo add gitlab-charts https://charts.gitlab.io/
helm install gitlab gitlab-charts/gitlab -f values.yaml

Examples

See examples from other people.

Top Repositories (1 out of 5)

NameRepoStarsVersionTimestamp
gitlabvaskozl/home-infra959.6.221 hours ago

Values

See the most popular values for this chart:

KeyTypes
global.edition (5)
ee
string
global.email.display_name (5)
GitLab
string
global.email.from (5)

string
global.email.reply_to (5)

string
global.email.smime.enabled (2)
false
boolean
global.email.smime.certName (1)
tls.crt
string
global.email.smime.keyName (1)
tls.key
string
global.email.smime.secretName (1)

string
global.email.subject_suffix (2)

string
global.hosts.domain (5)
${DOMAIN_NAME}
string
global.hosts.https (3)
true
boolean
global.hosts.minio.name (2)
minio-gitlab.${SECRET_DOMAIN}
string
global.hosts.minio.https (1)
true
boolean
global.hosts.gitlab.name (1)
gitlab-helm.${SECRET_DOMAIN}
string
global.hosts.hostSuffix (1)
staging
string
global.hosts.tls.enabled (1)
false
boolean
global.ingress.class (5)
traefik
string
global.ingress.configureCertmanager (5)
false
boolean
global.ingress.tls.enabled (5)
true
boolean
global.ingress.tls.secretName (3)
acme-crt-secret-iwrite-software
string
global.ingress.enabled (2)
true
boolean
global.ingress.provider (2)
cloudflare-tunnel
string
global.ingress.useNewIngressForCerts (2)
false
boolean
global.ingress.annotations."nginx.ingress.kubernetes.io/enable-global-auth" (1)
false
string
global.ingress.apiVersion (1)

string
global.ingress."nginx.ingress.kubernetes.io/enable-global-auth" (1)
false
string
global.ingress.path (1)
/
string
global.ingress.pathType (1)
Prefix
string
global.kas.enabled (5)
true
boolean
global.kas.service.apiExternalPort (1)
8153
number
global.kas.tls.enabled (1)
false
boolean
global.kas.tls.verify (1)
true
boolean
global.pages.enabled (5)
true
boolean
global.pages.accessControl (1)
false
boolean
global.pages.apiSecret.key (1)
shared_secret
string
global.pages.apiSecret.secret (1)
gitlab-pages-secret
string
global.pages.artifactsServer (1)
true
boolean
global.pages.localStore.enabled (1)
false
boolean
global.pages.namespaceInPath (1)
false
boolean
global.pages.objectStore.bucket (1)
gitlab-pages
string
global.pages.objectStore.enabled (1)
true
boolean
global.smtp.enabled (5)
true
boolean
global.smtp.address (3)
smtp.mailgun.org
string
global.smtp.password.key (3)
password
string
global.smtp.password.secret (3)

string
global.smtp.port (3)
2525
number
global.smtp.starttls_auto (3)
true
boolean
global.smtp.authentication (2)
plain
string
global.smtp.domain (2)
${SECRET_DOMAIN}
string
global.smtp.user_name (2)

string
global.smtp.open_timeout (1)
30
number
global.smtp.openssl_verify_mode (1)
peer
string
global.smtp.pool (1)
false
boolean
global.smtp.read_timeout (1)
60
number
global.smtp.tls (1)
false
boolean
global.appConfig.omniauth.enabled (4)
false
boolean
global.appConfig.omniauth.allowSingleSignOn[] (3)
- saml
string
global.appConfig.omniauth.blockAutoCreatedUsers (3)
true
boolean
global.appConfig.omniauth.syncProfileAttributes[] (3)
- email
string
global.appConfig.omniauth.autoLinkLdapUser (2)
false
boolean
global.appConfig.omniauth.autoLinkSamlUser (2)
false
boolean
global.appConfig.omniauth.providers[].secret (2)
pi-oauth2
string
global.appConfig.omniauth.allowBypassTwoFactor[] (1)
- openid_connect
string
global.appConfig.omniauth.syncProfileFromProvider[] (1)
- openid_connect
string
global.appConfig.artifacts.bucket (2)
gitlab-artifacts
string
global.appConfig.artifacts.enabled (2)
true
boolean
global.appConfig.artifacts.connection.key (1)
rails.minio.yaml
string
global.appConfig.artifacts.connection.secret (1)
object-storage
string
global.appConfig.artifacts.proxy_download (1)
true
boolean
global.appConfig.backups.bucket (2)
gitlab-backups
string
global.appConfig.backups.tmpBucket (2)
gitlab-tmp
string
global.appConfig.ciSecureFiles.bucket (2)
gitlab-ci-secure-files
string
global.appConfig.ciSecureFiles.enabled (2)
true
boolean
global.appConfig.ciSecureFiles.connection.key (1)
rails.minio.yaml
string
global.appConfig.ciSecureFiles.connection.secret (1)
object-storage
string
global.appConfig.contentSecurityPolicy.enabled (2)
true
boolean
global.appConfig.contentSecurityPolicy.report_only (2)
false
boolean
global.appConfig.dependencyProxy.bucket (2)
gitlab-dependency-proxy
string
global.appConfig.dependencyProxy.enabled (2)
true
boolean
global.appConfig.dependencyProxy.connection.key (1)
rails.minio.yaml
string
global.appConfig.dependencyProxy.connection.secret (1)
object-storage
string
global.appConfig.dependencyProxy.proxy_download (1)
true
boolean
global.appConfig.enableSeatLink (2)
false
boolean
global.appConfig.enableUsagePing (2)
false
boolean
global.appConfig.externalDiffs.bucket (2)
gitlab-external-diffs
string
global.appConfig.externalDiffs.enabled (2)
true
boolean
global.appConfig.externalDiffs.connection.key (1)
rails.minio.yaml
string
global.appConfig.externalDiffs.connection.secret (1)
object-storage
string
global.appConfig.externalDiffs.proxy_download (1)
true
boolean
global.appConfig.externalDiffs.when (1)
outdated
string
global.appConfig.gitlab_docs.enabled (2)
false
boolean
global.appConfig.gitlab_docs.host (1)

string
global.appConfig.lfs.bucket (2)
gitlab-lfs
string
global.appConfig.lfs.enabled (2)
true
boolean
global.appConfig.lfs.connection.key (1)
rails.minio.yaml
string
global.appConfig.lfs.connection.secret (1)
object-storage
string
global.appConfig.lfs.proxy_download (1)
true
boolean
global.appConfig.object_store.enabled (2)
true
boolean
global.appConfig.object_store.proxy_download (2)
true
boolean
global.appConfig.packages.bucket (2)
gitlab-packages
string
global.appConfig.packages.enabled (2)
true
boolean
global.appConfig.packages.connection.key (1)
rails.minio.yaml
string
global.appConfig.packages.connection.secret (1)
object-storage
string
global.appConfig.packages.proxy_download (1)
true
boolean
global.appConfig.smartcard.enabled (2)
false
boolean
global.appConfig.smartcard.requiredForGitAccess (1)
false
boolean
global.appConfig.smartcard.sanExtensions (1)
false
boolean
global.appConfig.terraformState.bucket (2)
gitlab-terraform-state
string
global.appConfig.terraformState.enabled (2)
true
boolean
global.appConfig.terraformState.connection.key (1)
rails.minio.yaml
string
global.appConfig.terraformState.connection.secret (1)
object-storage
string
global.appConfig.uploads.bucket (2)
gitlab-uploads
string
global.appConfig.uploads.enabled (2)
true
boolean
global.appConfig.uploads.connection.key (1)
rails.minio.yaml
string
global.appConfig.uploads.connection.secret (1)
object-storage
string
global.appConfig.uploads.proxy_download (1)
true
boolean
global.appConfig.usernameChangingEnabled (2)
false
boolean
global.appConfig.applicationSettingsCacheSeconds (1)
60
number
global.appConfig.cell.database.skipSequenceAlteration (1)
false
boolean
global.appConfig.cell.enabled (1)
false
boolean
global.appConfig.defaultProjectsFeatures.builds (1)
true
boolean
global.appConfig.defaultProjectsFeatures.issues (1)
true
boolean
global.appConfig.defaultProjectsFeatures.mergeRequests (1)
true
boolean
global.appConfig.defaultProjectsFeatures.snippets (1)
true
boolean
global.appConfig.defaultProjectsFeatures.wiki (1)
true
boolean
global.appConfig.duoAuth.enabled (1)
false
boolean
global.appConfig.enableImpersonation (1)
true
boolean
global.appConfig.gitlab_kas.enabled (1)
true
boolean
global.appConfig.gitlab_kas.key (1)
kas_shared_secret
string
global.appConfig.gitlab_kas.secret (1)
gitlab-kas-secret
string
global.appConfig.incomingEmail.address (1)

string
global.appConfig.incomingEmail.clientSecret.key (1)
secret
string
global.appConfig.incomingEmail.deleteAfterDelivery (1)
true
boolean
global.appConfig.incomingEmail.deliveryMethod (1)
webhook
string
global.appConfig.incomingEmail.enabled (1)
false
boolean
global.appConfig.incomingEmail.expungeDeleted (1)
false
boolean
global.appConfig.incomingEmail.host (1)
imap.gmail.com
string
global.appConfig.incomingEmail.idleTimeout (1)
60
number
global.appConfig.incomingEmail.inboxMethod (1)
imap
string
global.appConfig.incomingEmail.logger.logPath (1)
/dev/stdout
string
global.appConfig.incomingEmail.mailbox (1)
inbox
string
global.appConfig.incomingEmail.password.key (1)
password
string
global.appConfig.incomingEmail.password.secret (1)

string
global.appConfig.incomingEmail.pollInterval (1)
60
number
global.appConfig.incomingEmail.port (1)
993
number
global.appConfig.incomingEmail.ssl (1)
true
boolean
global.appConfig.incomingEmail.startTls (1)
false
boolean
global.appConfig.incomingEmail.user (1)

string
global.appConfig.kerberos.dedicatedPort.enabled (1)
false
boolean
global.appConfig.kerberos.dedicatedPort.https (1)
true
boolean
global.appConfig.kerberos.dedicatedPort.port (1)
8443
number
global.appConfig.kerberos.enabled (1)
false
boolean
global.appConfig.kerberos.keytab.key (1)
keytab
string
global.appConfig.kerberos.krb5Config (1)

string
global.appConfig.kerberos.servicePrincipalName (1)

string
global.appConfig.ldap.preventSignin (1)
false
boolean
global.appConfig.microsoft_graph_mailer.azure_ad_endpoint (1)
https://login.microsoftonline.com
string
global.appConfig.microsoft_graph_mailer.client_id (1)

string
global.appConfig.microsoft_graph_mailer.client_secret.key (1)
secret
string
global.appConfig.microsoft_graph_mailer.client_secret.secret (1)

string
global.appConfig.microsoft_graph_mailer.enabled (1)
false
boolean
global.appConfig.microsoft_graph_mailer.graph_endpoint (1)
https://graph.microsoft.com
string
global.appConfig.microsoft_graph_mailer.tenant (1)

string
global.appConfig.microsoft_graph_mailer.user_id (1)

string
global.appConfig.oidcProvider.openidIdTokenExpireInSeconds (1)
120
number
global.appConfig.sentry.enabled (1)
false
boolean
global.appConfig.serviceDeskEmail.address (1)

string
global.appConfig.serviceDeskEmail.clientSecret.key (1)
secret
string
global.appConfig.serviceDeskEmail.deleteAfterDelivery (1)
true
boolean
global.appConfig.serviceDeskEmail.deliveryMethod (1)
webhook
string
global.appConfig.serviceDeskEmail.enabled (1)
false
boolean
global.appConfig.serviceDeskEmail.expungeDeleted (1)
false
boolean
global.appConfig.serviceDeskEmail.host (1)
imap.gmail.com
string
global.appConfig.serviceDeskEmail.idleTimeout (1)
60
number
global.appConfig.serviceDeskEmail.inboxMethod (1)
imap
string
global.appConfig.serviceDeskEmail.logger.logPath (1)
/dev/stdout
string
global.appConfig.serviceDeskEmail.mailbox (1)
inbox
string
global.appConfig.serviceDeskEmail.password.key (1)
password
string
global.appConfig.serviceDeskEmail.password.secret (1)

string
global.appConfig.serviceDeskEmail.pollInterval (1)
60
number
global.appConfig.serviceDeskEmail.port (1)
993
number
global.appConfig.serviceDeskEmail.ssl (1)
true
boolean
global.appConfig.serviceDeskEmail.startTls (1)
false
boolean
global.appConfig.serviceDeskEmail.user (1)

string
global.minio.enabled (4)
true
boolean
global.minio.credentials.secret (1)
gitlab-minio-secret
string
global.time_zone (4)
${TIMEZONE}
string
global.certificates.image.repository (3)
registry.gitlab.com/gitlab-org/build/cng/certificates
string
global.certificates.image.tag (1)
18.2.4@sha256:4c6e24768e6af70e932ee5e8867b8e448325bdd62e5c9988847100fb41c4d693
string
global.extraEnv.GITLAB_LOG_LEVEL (3)
error
string
global.extraEnv.GITLAB_ALLOW_SEPARATE_CI_DATABASE (1)
1
number
global.extraEnv.GITLAB_LOGGER_TRUNCATE_LOGS (1)
true
boolean
global.initialRootPassword.key (3)
initialRootPassword
string
global.initialRootPassword.secret (3)
gitlab-admin-secret
string
global.praefect.enabled (3)
false
boolean
global.praefect.virtualStorages[].gitalyReplicas (2)
3
number
global.praefect.virtualStorages[].maxUnavailable (2)
1
number
global.praefect.virtualStorages[].name (2)
default
string
global.praefect.autoMigrate (1)
true
boolean
global.praefect.ntpHost (1)
pool.ntp.org
string
global.praefect.psql.sslMode (1)
disable
string
global.praefect.replaceInternalGitaly (1)
true
boolean
global.praefect.service.externalPort (1)
8075
number
global.praefect.service.internalPort (1)
8075
number
global.praefect.service.name (1)
praefect
string
global.praefect.service.tls.externalPort (1)
8076
number
global.praefect.service.tls.internalPort (1)
8076
number
global.praefect.service.type (1)
ClusterIP
string
global.praefect.tls.enabled (1)
false
boolean
global.psql.password.key (3)
postgres_password
string
global.psql.password.secret (3)
gitlab-config
string
global.psql.password.useSecret (1)
true
boolean
global.psql.host (2)
postgres.database
string
global.psql.ci.enabled (1)
true
boolean
global.psql.ci.password.key (1)
PASSWORD
string
global.psql.ci.password.secret (1)
database-gitlab-ci-staging
string
global.psql.ci.password.useSecret (1)
true
boolean
global.psql.database (1)
gitlab
string
global.psql.knownDecompositions[] (1)
- main
- ci
- embedding
- sec
string
global.psql.main.password.key (1)
PASSWORD
string
global.psql.main.password.secret (1)
database-gitlab-staging
string
global.psql.main.password.useSecret (1)
true
boolean
global.psql.port (1)
5000
number
global.psql.username (1)
gitlab
string
global.redis.auth.enabled (3)
false
boolean
global.redis.auth.key (1)
secret
string
global.redis.auth.secret (1)
gitlab-redis-secret
string
global.redis.host (3)
gitlab-dragonfly.gitlab.svc.cluster.local
string
global.redis.sentinelAuth.enabled (1)
false
boolean
global.gitaly.enabled (2)
true
boolean
global.gitaly.internal.names[] (2)
- default
string
global.gitaly.authToken.key (1)
authToken
string
global.gitaly.authToken.secret (1)
gitlab-gitaly-secret
string
global.gitaly.service.externalPort (1)
8075
number
global.gitaly.service.internalPort (1)
8075
number
global.gitaly.service.name (1)
gitaly
string
global.gitaly.service.tls.externalPort (1)
8076
number
global.gitaly.service.tls.internalPort (1)
8076
number
global.gitaly.service.type (1)
ClusterIP
string
global.gitaly.tls.enabled (1)
false
boolean
global.gitlabBase.image.repository (2)
registry.gitlab.com/gitlab-org/build/cng/gitlab-base
string
global.gitlabBase.image.tag (1)
18.2.4@sha256:0e0e167ba7b25438a93730e2b44816b3f8617f9270d0aa8e813c75895010d105
string
global.monitoring.enabled (2)
true
boolean
global.nodeSelector."kubernetes.io/arch" (2)
amd64
string
global.rails.bootsnap.enabled (2)
true
boolean
global.rails.sessionStore.sessionCookieTokenPrefix (1)

string
global.registry.bucket (2)
gitlab-registry
string
global.registry.enabled (2)
true
boolean
global.registry.api.port (1)
5000
number
global.registry.api.protocol (1)
http
string
global.registry.api.serviceName (1)
registry
string
global.registry.httpSecret.key (1)
secret
string
global.registry.httpSecret.secret (1)
gitlab-registry-httpsecret
string
global.registry.notificationSecret.key (1)
secret
string
global.registry.notificationSecret.secret (1)
gitlab-registry-notification
string
global.registry.tls.enabled (1)
false
boolean
global.registry.tokenIssuer (1)
gitlab-issuer
string
global.serviceAccount.create (2)
true
boolean
global.serviceAccount.enabled (2)
false
boolean
global.serviceAccount.automountServiceAccountToken (1)
false
boolean
global.spamcheck.enabled (2)
false
boolean
global.tracing.connection.string (2)

string
global.tracing.urlTemplate (2)

string
global.workhorse.serviceName (2)
webservice-default
string
global.workhorse.tls.enabled (2)
false
boolean
global.workhorse.key (1)
shared_secret
string
global.workhorse.secret (1)
gitlab-workhorse-secret
string
global.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)
kubernetes.io/arch
string
global.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)
In
string
global.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].values[] (1)
- amd64
string
global.affinity.podAntiAffinity.topologyKey (1)
kubernetes.io/hostname
string
global.antiAffinity (1)
soft
string
global.application.allowClusterRoles (1)
true
boolean
global.application.create (1)
false
boolean
global.batch.cronJob.apiVersion (1)

string
global.certmanager.install (1)
false
boolean
global.certmanager.installCRDs (1)
false
boolean
global.certmanager.rbac.create (1)
false
boolean
global.geo.enabled (1)
false
boolean
global.geo.registry.replication.enabled (1)
false
boolean
global.geo.role (1)
primary
string
global.hpa.apiVersion (1)

string
global.keda.enabled (1)
false
boolean
global.kubectl.image.repository (1)
registry.gitlab.com/gitlab-org/build/cng/kubectl
string
global.kubectl.securityContext.fsGroup (1)
65534
number
global.kubectl.securityContext.runAsUser (1)
65534
number
global.kubectl.securityContext.seccompProfile.type (1)
RuntimeDefault
string
global.oauth.gitlab-pages.appIdKey (1)
appId
string
global.oauth.gitlab-pages.appSecretKey (1)
appSecret
string
global.oauth.gitlab-pages.secret (1)
oauth-gitlab-pages-secret
string
global.pdb.apiVersion (1)

string
global.priorityClassName (1)

string
global.railsSecrets.secret (1)
gitlab-rails-secret
string
global.shell.authToken.key (1)
secret
string
global.shell.authToken.secret (1)
gitlab-shell-secret
string
global.shell.hostKeys.secret (1)
gitlab-shell-host-keys
string
global.shell.tcp.proxyProtocol (1)
false
boolean
global.traefik.apiVersion (1)

string
global.webservice.workerTimeout (1)
60
number
global.zoekt.gateway.basicAuth.secretName (1)
gitlab-zoekt-basicauth
string
nginx-ingress.enabled (5)
false
boolean
nginx-ingress.controller.addHeaders.Referrer-Policy (1)
strict-origin-when-cross-origin
string
nginx-ingress.controller.admissionWebhooks.enabled (1)
false
boolean
nginx-ingress.controller.config.annotation-value-word-blocklist (1)
load_module,lua_package,_by_lua,location,root,proxy_pass,serviceaccount,{,},',"
string
nginx-ingress.controller.config.hsts (1)
true
string
nginx-ingress.controller.config.hsts-include-subdomains (1)
false
string
nginx-ingress.controller.config.hsts-max-age (1)
63072000
string
nginx-ingress.controller.config.server-name-hash-bucket-size (1)
256
string
nginx-ingress.controller.config.server-tokens (1)
false
string
nginx-ingress.controller.config.ssl-ciphers (1)
ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4
string
nginx-ingress.controller.config.ssl-protocols (1)
TLSv1.3 TLSv1.2
string
nginx-ingress.controller.config.upstream-keepalive-connections (1)
100
number
nginx-ingress.controller.config.upstream-keepalive-requests (1)
1000
number
nginx-ingress.controller.config.upstream-keepalive-time (1)
30s
string
nginx-ingress.controller.config.upstream-keepalive-timeout (1)
5
number
nginx-ingress.controller.config.use-http2 (1)
true
string
nginx-ingress.controller.ingressClassByName (1)
false
boolean
nginx-ingress.controller.ingressClassResource.name (1)
{{ include "ingress.class.name" $ | quote }}
string
nginx-ingress.controller.metrics.enabled (1)
true
boolean
nginx-ingress.controller.metrics.service.annotations."gitlab.com/prometheus_port" (1)
10254
string
nginx-ingress.controller.metrics.service.annotations."gitlab.com/prometheus_scrape" (1)
true
string
nginx-ingress.controller.metrics.service.annotations."prometheus.io/port" (1)
10254
string
nginx-ingress.controller.metrics.service.annotations."prometheus.io/scrape" (1)
true
string
nginx-ingress.controller.minAvailable (1)
1
number
nginx-ingress.controller.publishService.enabled (1)
true
boolean
nginx-ingress.controller.replicaCount (1)
2
number
nginx-ingress.controller.resources.requests.cpu (1)
100m
string
nginx-ingress.controller.resources.requests.memory (1)
100Mi
string
nginx-ingress.controller.scope.enabled (1)
true
boolean
nginx-ingress.controller.service.externalTrafficPolicy (1)
Local
string
nginx-ingress.defaultBackend.resources.requests.cpu (1)
5m
string
nginx-ingress.defaultBackend.resources.requests.memory (1)
5Mi
string
nginx-ingress.rbac.create (1)
true
boolean
nginx-ingress.rbac.scope (1)
false
boolean
nginx-ingress.serviceAccount.create (1)
true
boolean
nginx-ingress.tcpExternalConfig (1)
true
string
postgresql.install (5)
false
boolean
postgresql.auth.existingSecret (1)
{{ include "gitlab.psql.password.secret" . }}
string
postgresql.auth.password (1)
bogus-satisfy-upgrade
string
postgresql.auth.postgresPassword (1)
bogus-satisfy-upgrade
string
postgresql.auth.secretKeys.adminPasswordKey (1)
postgresql-postgres-password
string
postgresql.auth.secretKeys.userPasswordKey (1)
{{ include "gitlab.psql.password.key" $ }}
string
postgresql.auth.usePasswordFiles (1)
false
boolean
postgresql.image.repository (1)
bitnamilegacy/postgresql
string
postgresql.image.tag (1)
16.6.0
string
postgresql.metrics.enabled (1)
true
boolean
postgresql.metrics.service.annotations."gitlab.com/prometheus_port" (1)
9187
string
postgresql.metrics.service.annotations."gitlab.com/prometheus_scrape" (1)
true
string
postgresql.metrics.service.annotations."prometheus.io/port" (1)
9187
string
postgresql.metrics.service.annotations."prometheus.io/scrape" (1)
true
string
postgresql.persistence.size (1)
19Gi
string
postgresql.persistence.storageClass (1)
ceph-block
string
postgresql.primary.initdb.extraVolumeMounts[].mountPath (1)
/docker-entrypoint-preinitdb.d/init_revision.sh
/etc/gitlab/postgres/registry_database_password
string
postgresql.primary.initdb.extraVolumeMounts[].name (1)
custom-init-scripts
registry-database-password
string
postgresql.primary.initdb.extraVolumeMounts[].readOnly (1)
true
boolean
postgresql.primary.initdb.extraVolumeMounts[].subPath (1)
init_revision.sh
database_password
string
postgresql.primary.initdb.extraVolumes[].name (1)
registry-database-password
string
postgresql.primary.initdb.extraVolumes[].projected.sources[].secret.items[].key (1)
{{ include "gitlab.registry.database.password.key" . }}
string
postgresql.primary.initdb.extraVolumes[].projected.sources[].secret.items[].path (1)
database_password
string
postgresql.primary.initdb.extraVolumes[].projected.sources[].secret.name (1)
{{ include "gitlab.registry.database.password.secret" . }}
string
postgresql.primary.initdb.scriptsConfigMap (1)
{{ include "gitlab.psql.initdbscripts" $}}
string
postgresql.primary.podAnnotations."postgresql.gitlab/init-revision" (1)
1
string
prometheus.install (5)
false
boolean
prometheus.alertmanager.enabled (1)
false
boolean
prometheus.configmapReload.prometheus.containerSecurityContext.allowPrivilegeEscalation (1)
false
boolean
prometheus.configmapReload.prometheus.containerSecurityContext.capabilities.drop[] (1)
- ALL
string
prometheus.configmapReload.prometheus.containerSecurityContext.runAsNonRoot (1)
true
boolean
prometheus.configmapReload.prometheus.containerSecurityContext.runAsUser (1)
1000
number
prometheus.configmapReload.prometheus.containerSecurityContext.seccompProfile.type (1)
RuntimeDefault
string
prometheus.kube-state-metrics.enabled (1)
false
boolean
prometheus.podSecurityPolicy.enabled (1)
false
boolean
prometheus.prometheus-node-exporter.enabled (1)
false
boolean
prometheus.prometheus-pushgateway.enabled (1)
false
boolean
prometheus.rbac.create (1)
true
boolean
prometheus.server.containerSecurityContext.allowPrivilegeEscalation (1)
false
boolean
prometheus.server.containerSecurityContext.capabilities.drop[] (1)
- ALL
string
prometheus.server.containerSecurityContext.runAsNonRoot (1)
true
boolean
prometheus.server.containerSecurityContext.runAsUser (1)
1000
number
prometheus.server.containerSecurityContext.seccompProfile.type (1)
RuntimeDefault
string
prometheus.server.retention (1)
15d
string
prometheus.server.strategy.type (1)
Recreate
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].bearer_token_file (1)
/var/run/secrets/kubernetes.io/serviceaccount/token
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].job_name (1)
prometheus
kubernetes-apiservers
kubernetes-pods
kubernetes-service-endpoints
kubernetes-services
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].kubernetes_sd_configs[].role (1)
endpoints
pod
endpoints
service
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].metrics_path (1)
/probe
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].params.module[] (1)
- http_2xx
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].relabel_configs[].action (1)
keep
keep
replace
replace
replace
labelmap
replace
replace
keep
replace
replace
replace
labelmap
replace
replace
replace
keep
labelmap
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].relabel_configs[].regex (1)
default;kubernetes;https
true
(https?)
(.+)
([^:]+)(?::\d+)?;(\d+)
__meta_kubernetes_pod_label_(.+)
true
(https?)
(.+)
([^:]+)(?::\d+)?;(\d+)
__meta_kubernetes_service_label_(.+)
true
__meta_kubernetes_service_label_(.+)
string, boolean
prometheus.serverFiles.prometheus.yml.scrape_configs[].relabel_configs[].replacement (1)
$1:$2
$1:$2
blackbox
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].relabel_configs[].source_labels[] (1)
- __meta_kubernetes_namespace
- __meta_kubernetes_service_name
- __meta_kubernetes_endpoint_port_name
- __meta_kubernetes_pod_annotation_gitlab_com_prometheus_scrape
- __meta_kubernetes_pod_annotation_gitlab_com_prometheus_scheme
- __meta_kubernetes_pod_annotation_gitlab_com_prometheus_path
- __address__
- __meta_kubernetes_pod_annotation_gitlab_com_prometheus_port
- __meta_kubernetes_namespace
- __meta_kubernetes_pod_name
- __meta_kubernetes_service_annotation_gitlab_com_prometheus_scrape
- __meta_kubernetes_service_annotation_gitlab_com_prometheus_scheme
- __meta_kubernetes_service_annotation_gitlab_com_prometheus_path
- __address__
- __meta_kubernetes_service_annotation_gitlab_com_prometheus_port
- __meta_kubernetes_namespace
- __meta_kubernetes_service_name
- __meta_kubernetes_pod_node_name
- __meta_kubernetes_service_annotation_gitlab_com_prometheus_probe
- __address__
- __param_target
- __meta_kubernetes_namespace
- __meta_kubernetes_service_name
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].relabel_configs[].target_label (1)
__scheme__
__metrics_path__
__address__
kubernetes_namespace
kubernetes_pod_name
__scheme__
__metrics_path__
__address__
kubernetes_namespace
kubernetes_name
kubernetes_node
__param_target
__address__
instance
kubernetes_namespace
kubernetes_name
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].scheme (1)
https
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].static_configs[].targets[] (1)
- localhost:9090
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].tls_config.ca_file (1)
/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
string
prometheus.serverFiles.prometheus.yml.scrape_configs[].tls_config.insecure_skip_verify (1)
true
boolean
redis.install (5)
false
boolean
redis.architecture (1)
standalone
string
redis.auth.existingSecret (1)
gitlab-redis-secret
string
redis.auth.existingSecretKey (1)
redis-password
string
redis.auth.usePasswordFiles (1)
true
boolean
redis.cluster.enabled (1)
false
boolean
redis.master.persistence.size (1)
15Gi
string
redis.master.persistence.storageClass (1)
ceph-block
string
redis.metrics.enabled (1)
true
boolean
gitlab.webservice.maxReplicas (4)
2
number
gitlab.webservice.minReplicas (4)
1
number
gitlab.webservice.resources.limits.memory (3)
2Gi
string
gitlab.webservice.resources.requests.cpu (3)
100m
string
gitlab.webservice.resources.requests.memory (3)
2Gi
string
gitlab.webservice.workerProcesses (3)
1
number
gitlab.webservice.ingress.annotations."gethomepage.dev/description" (1)
Git and everything but the kitchen sink
string
gitlab.webservice.ingress.annotations."gethomepage.dev/enabled" (1)
true
string
gitlab.webservice.ingress.annotations."gethomepage.dev/group" (1)
Cloud
string
gitlab.webservice.ingress.annotations."gethomepage.dev/icon" (1)
gitlab
string
gitlab.webservice.ingress.annotations."gethomepage.dev/name" (1)
Gitlab
string
gitlab.webservice.ingress.annotations."gethomepage.dev/pod-selector" (1)
app=webservice
string
gitlab.webservice.ingress.tls.enabled (1)
true
boolean
gitlab.webservice.ingress.tls.secretName (1)
gitlab-webservice-tls
string
gitlab.webservice.maxUnavailable (1)
1
number
gitlab.gitaly.resources.requests.cpu (3)
80m
string
gitlab.gitaly.resources.requests.memory (3)
660M
string
gitlab.gitaly.resources.limits.memory (2)
660M
string
gitlab.gitaly.resources.limits.cpu (1)
1800m
string
gitlab.gitaly.persistence.size (1)
350Gi
string
gitlab.gitaly.persistence.storageClass (1)
ceph-filesystem
string
gitlab.gitlab-pages.resources.requests.cpu (3)
10m
string
gitlab.gitlab-pages.resources.requests.memory (3)
10Mi
string
gitlab.gitlab-pages.resources.limits.cpu (1)
200m
string
gitlab.gitlab-pages.resources.limits.memory (1)
256Mi
string
gitlab.gitlab-pages.image.repository (1)
ghcr.io/vaskozl/gitlab-pages
string
gitlab.gitlab-pages.image.tag (1)
18.6.2@sha256:8466fce5ee2346a792414dbe95fd7068ff8b90163eafa0415b3928a1ae7f655f
string
gitlab.gitlab-pages.maxReplicas (1)
2
number
gitlab.gitlab-pages.maxUnavailable (1)
1
number
gitlab.gitlab-pages.minReplicas (1)
1
number
gitlab.gitlab-shell.maxReplicas (3)
2
number
gitlab.gitlab-shell.minReplicas (3)
1
number
gitlab.gitlab-shell.extraVolumeMounts (1)
- name: var-log-gitlab-shell mountPath: /var/log/gitlab-shell
string
gitlab.gitlab-shell.extraVolumes (1)
- name: var-log-gitlab-shell emptyDir: {}
string
gitlab.gitlab-shell.image.repository (1)
ghcr.io/vaskozl/gitlab-shell
string
gitlab.gitlab-shell.image.tag (1)
18.2.4@sha256:cce0df3d58374d46b7dc13191a48b1fbb52e3bf1967c3386ea5e2143622e4ca3
string
gitlab.gitlab-shell.maxUnavailable (1)
1
number
gitlab.sidekiq.maxReplicas (3)
2
number
gitlab.sidekiq.minReplicas (3)
1
number
gitlab.sidekiq.maxUnavailable (1)
1
number
gitlab.sidekiq.resources.requests.cpu (1)
100m
string
gitlab.sidekiq.resources.requests.memory (1)
600M
string
gitlab.gitlab-exporter.image.repository (1)
ghcr.io/vaskozl/gitlab-exporter
string
gitlab.gitlab-exporter.image.tag (1)
18.2.4@sha256:c46411c0335fbacbdeb2f3414b02104436c30c987b0675301608556c83a419c0
string
gitlab.gitlab-kas.maxReplicas (1)
2
number
gitlab.gitlab-kas.maxUnavailable (1)
1
number
gitlab.gitlab-kas.minReplicas (1)
1
number
gitlab.gitlab-registry.maxReplicas (1)
2
number
gitlab.gitlab-registry.maxUnavailable (1)
1
number
gitlab.gitlab-registry.minReplicas (1)
1
number
gitlab.toolbox.antiAffinityLabels.matchLabels.app (1)
gitaly
string
gitlab.toolbox.backups.objectStorage.config.key (1)
toolbox.minio.toml
string
gitlab.toolbox.backups.objectStorage.config.secret (1)
object-storage
string
gitlab.toolbox.migrations.enabled (1)
true
boolean
gitlab.toolbox.replicas (1)
1
number
certmanager.install (3)
false
boolean
certmanager.installCRDs (2)
false
boolean
certmanager.nameOverride (1)
certmanager
string
certmanager.rbac.create (1)
true
boolean
gitlab-runner.install (3)
false
boolean
gitlab-runner.runners.config (3)
[[runners]] [runners.docker] tls_verify = false image = "docker:stable" privileged = true disable_cache = false volumes = ["/certs/client", "/cache"] [runners.kubernetes] image = "ubuntu:latest" privileged = true [[runners.kubernetes.volumes.empty_dir]] name = "docker-certs" mount_path = "/certs/client" medium = "Memory" {{- if .Values.global.minio.enabled }} [runners.cache] Type = "s3" Path = "gitlab-runner" Shared = true [runners.cache.s3] ServerAddress = {{ include "gitlab-runner.cache-tpl.s3ServerAddress" . }} BucketName = "runner-cache" BucketLocation = "us-east-1" Insecure = false {{ end }}
string
gitlab-runner.runners.secret (2)
nonempty
string
gitlab-runner.runners.locked (1)
false
boolean
gitlab-runner.runners.nodeSelector."kubernetes.io/arch" (1)
amd64
string
gitlab-runner.runners.privileged (1)
true
boolean
gitlab-runner.concurrent (1)
2
number
gitlab-runner.podAnnotations."gitlab.com/prometheus_port" (1)
9252
number
gitlab-runner.podAnnotations."gitlab.com/prometheus_scrape" (1)
true
string
gitlab-runner.rbac.create (1)
true
boolean
gitlab-runner.resources.requests.cpu (1)
1000m
string
gitlab-runner.resources.requests.memory (1)
512M
string
gitlab-runner.securityContext.fsGroup (1)
999
number
gitlab-runner.securityContext.runAsUser (1)
999
number
gitlab-runner.volumeMounts[].mountPath (1)
/.gitlab-runner
string
gitlab-runner.volumeMounts[].name (1)
root-gitlab-runner
string
gitlab-runner.volumes[].emptyDir.medium (1)
Memory
string
gitlab-runner.volumes[].name (1)
root-gitlab-runner
string
grafana.enabled (3)
false
boolean
gitlab-zoekt.install (2)
true
boolean
gitlab-zoekt.gateway.basicAuth.enabled (1)
true
boolean
gitlab-zoekt.gateway.basicAuth.secretName (1)
{{ include "gitlab.zoekt.gateway.basicAuth.secretName" $ }}
string
gitlab-zoekt.indexer.internalApi.enabled (1)
true
boolean
gitlab-zoekt.indexer.internalApi.gitlabUrl (1)
{{ include "gitlab.zoekt.indexer.internalApi.gitlabUrl" $ }}
string
gitlab-zoekt.indexer.internalApi.secretKey (1)
{{ include "gitlab.zoekt.indexer.internalApi.secretKey" $ }}
string
gitlab-zoekt.indexer.internalApi.secretName (1)
{{ include "gitlab.zoekt.indexer.internalApi.secretName" $ }}
string
haproxy.install (2)
false
boolean
haproxy.controller.extraArgs[] (1)
- --configmap-tcp-services=$(POD_NAMESPACE)/$(POD_NAMESPACE)-haproxy-tcp
string
haproxy.controller.service.tcpPorts[].name (1)
ssh
string
haproxy.controller.service.tcpPorts[].port (1)
22
number
haproxy.controller.service.tcpPorts[].targetPort (1)
22
number
haproxy.controller.service.type (1)
LoadBalancer
string
installCertmanager (2)
false
boolean
traefik.install (2)
false
boolean
traefik.ports.gitlab-shell.expose (1)
true
boolean
traefik.ports.gitlab-shell.exposedPort (1)
22
number
traefik.ports.gitlab-shell.port (1)
2222
number
upgradeCheck.enabled (2)
true
boolean
upgradeCheck.containerSecurityContext.allowPrivilegeEscalation (1)
false
boolean
upgradeCheck.containerSecurityContext.capabilities.drop[] (1)
- ALL
string
upgradeCheck.containerSecurityContext.runAsNonRoot (1)
true
boolean
upgradeCheck.containerSecurityContext.runAsUser (1)
65534
number
upgradeCheck.priorityClassName (1)

string
upgradeCheck.resources.requests.cpu (1)
50m
string
upgradeCheck.securityContext.fsGroup (1)
65534
number
upgradeCheck.securityContext.runAsUser (1)
65534
number
upgradeCheck.securityContext.seccompProfile.type (1)
RuntimeDefault
string
minio.ingress.tls.enabled (1)
true
boolean
minio.ingress.tls.secretName (1)
minio-tls
string
minio.persistence.size (1)
40Gi
string
minio.persistence.storageClass (1)
ceph-block
string
nginx-ingress-geo.controller.addHeaders.Referrer-Policy (1)
strict-origin-when-cross-origin
string
nginx-ingress-geo.controller.admissionWebhooks.enabled (1)
false
boolean
nginx-ingress-geo.controller.config.annotation-value-word-blocklist (1)
load_module,lua_package,_by_lua,location,root,proxy_pass,serviceaccount,{,},',"
string
nginx-ingress-geo.controller.config.hsts (1)
true
string
nginx-ingress-geo.controller.config.hsts-include-subdomains (1)
false
string
nginx-ingress-geo.controller.config.hsts-max-age (1)
63072000
string
nginx-ingress-geo.controller.config.server-name-hash-bucket-size (1)
256
string
nginx-ingress-geo.controller.config.server-tokens (1)
false
string
nginx-ingress-geo.controller.config.ssl-ciphers (1)
ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4
string
nginx-ingress-geo.controller.config.ssl-protocols (1)
TLSv1.3 TLSv1.2
string
nginx-ingress-geo.controller.config.upstream-keepalive-connections (1)
100
number
nginx-ingress-geo.controller.config.upstream-keepalive-requests (1)
1000
number
nginx-ingress-geo.controller.config.upstream-keepalive-time (1)
30s
string
nginx-ingress-geo.controller.config.upstream-keepalive-timeout (1)
5
number
nginx-ingress-geo.controller.config.use-forwarded-headers (1)
true
boolean
nginx-ingress-geo.controller.config.use-http2 (1)
true
string
nginx-ingress-geo.controller.electionID (1)
ingress-controller-leader-geo
string
nginx-ingress-geo.controller.ingressClassByName (1)
false
boolean
nginx-ingress-geo.controller.ingressClassResource.controllerValue (1)
k8s.io/nginx-ingress-geo
string
nginx-ingress-geo.controller.ingressClassResource.name (1)
{{ include "gitlab.geo.ingress.class.name" $ | quote }}
string
nginx-ingress-geo.controller.metrics.enabled (1)
true
boolean
nginx-ingress-geo.controller.metrics.service.annotations."gitlab.com/prometheus_port" (1)
10254
string
nginx-ingress-geo.controller.metrics.service.annotations."gitlab.com/prometheus_scrape" (1)
true
string
nginx-ingress-geo.controller.metrics.service.annotations."prometheus.io/port" (1)
10254
string
nginx-ingress-geo.controller.metrics.service.annotations."prometheus.io/scrape" (1)
true
string
nginx-ingress-geo.controller.minAvailable (1)
1
number
nginx-ingress-geo.controller.publishService.enabled (1)
true
boolean
nginx-ingress-geo.controller.replicaCount (1)
2
number
nginx-ingress-geo.controller.resources.requests.cpu (1)
100m
string
nginx-ingress-geo.controller.resources.requests.memory (1)
100Mi
string
nginx-ingress-geo.controller.scope.enabled (1)
true
boolean
nginx-ingress-geo.controller.service.externalTrafficPolicy (1)
Local
string
nginx-ingress-geo.defaultBackend.resources.requests.cpu (1)
5m
string
nginx-ingress-geo.defaultBackend.resources.requests.memory (1)
5Mi
string
nginx-ingress-geo.enabled (1)
false
boolean
nginx-ingress-geo.externalIpTpl (1)
{{ .Values.global.hosts.externalGeoIP }}
string
nginx-ingress-geo.rbac.create (1)
true
boolean
nginx-ingress-geo.rbac.scope (1)
false
boolean
nginx-ingress-geo.serviceAccount.create (1)
true
boolean
nginx-ingress-geo.tcpExternalConfig (1)
true
string
registry.enabled (1)
true
boolean
registry.image.repository (1)
ghcr.io/vaskozl/gitlab-container-registry
string
registry.image.tag (1)
18.2.4@sha256:3af0990adf2e303fc483a5448bb9cbc2866923b1da8154f4e00bd08a10978732
string
registry.ingress.annotations."haproxy.org/timeout-server" (1)
600s
string
registry.storage.key (1)
registry.minio.yaml
string
registry.storage.secret (1)
object-storage
string
shared-secrets.containerSecurityContext.allowPrivilegeEscalation (1)
false
boolean
shared-secrets.containerSecurityContext.capabilities.drop[] (1)
- ALL
string
shared-secrets.containerSecurityContext.runAsNonRoot (1)
true
boolean
shared-secrets.enabled (1)
true
boolean
shared-secrets.env (1)
production
string
shared-secrets.rbac.create (1)
true
boolean
shared-secrets.resources.requests.cpu (1)
50m
string
shared-secrets.securityContext.fsGroup (1)
65534
number
shared-secrets.securityContext.runAsUser (1)
65534
number
shared-secrets.securityContext.seccompProfile.type (1)
RuntimeDefault
string
shared-secrets.selfsign.caSubject (1)
GitLab Helm Chart
string
shared-secrets.selfsign.expiry (1)
3650d
string
shared-secrets.selfsign.image.repository (1)
registry.gitlab.com/gitlab-org/build/cng/cfssl-self-sign
string
shared-secrets.selfsign.keyAlgorithm (1)
rsa
string
shared-secrets.selfsign.keySize (1)
4096
string
shared-secrets.serviceAccount.create (1)
true
boolean
shared-secrets.serviceAccount.enabled (1)
true
boolean