pocket-id helm

No introduction found. Create it?

More popular helm chart found

pocket-id from bjw-s-labs/charts is more popular with 13 repositories.

Install

Install with:

helm repo add pocket-id oci://ghcr.io/bjw-s-labs/charts/
helm install pocket-id pocket-id/pocket-id -f values.yaml

Examples

See examples from other people.

Top Repositories (1 out of 8)

NameRepoStarsVersionTimestamp
pocket-idharaldkoch/kochhaus-home1795.2.14 days ago

Values

See the most popular values for this chart:

KeyTypes
controllers.pocket-id.annotations."reloader.stakater.com/auto" (7)
true
string
controllers.pocket-id.containers.app.env.APP_URL (6)
https://id.${SECRET_DOMAIN}
string
controllers.pocket-id.containers.app.env.TRUST_PROXY (5)
true
string, boolean
controllers.pocket-id.containers.app.env.UPLOAD_PATH (5)
/data/uploads
string
controllers.pocket-id.containers.app.env.ANALYTICS_DISABLED (4)
true
boolean, string
controllers.pocket-id.containers.app.env.TZ (4)
${TIMEZONE}
string
controllers.pocket-id.containers.app.env.DB_CONNECTION_STRING (3)
file:/data/pocket-id.db?_pragma=journal_mode(WAL)&_pragma=busy_timeout(2500)&_txlock=immediate
string
controllers.pocket-id.containers.app.env.EMAILS_VERIFIED (3)
true
boolean
controllers.pocket-id.containers.app.env.SMTP_HOST (3)
smtp-relay.network.svc.cluster.local
string
controllers.pocket-id.containers.app.env.SMTP_PORT (3)
2525
number, string
controllers.pocket-id.containers.app.env.UI_CONFIG_DISABLED (3)
true
boolean
controllers.pocket-id.containers.app.env.ALLOW_USER_SIGNUPS (2)
disabled
string
controllers.pocket-id.containers.app.env.DB_PROVIDER (2)
sqlite
string
controllers.pocket-id.containers.app.env.EMAIL_LOGIN_NOTIFICATION_ENABLED (2)
true
boolean
controllers.pocket-id.containers.app.env.LOG_JSON (2)
true
boolean
controllers.pocket-id.containers.app.env.LOG_LEVEL (2)
info
string
controllers.pocket-id.containers.app.env.PORT (2)
1411
number
controllers.pocket-id.containers.app.env.SESSION_DURATION (2)
28800
number
controllers.pocket-id.containers.app.env.SMTP_FROM (2)
postmaster@${SECRET_DOMAIN}
string
controllers.pocket-id.containers.app.env.EMAIL_ONE_TIME_ACCESS_AS_UNAUTHENTICATED_ENABLED (1)
false
boolean
controllers.pocket-id.containers.app.env.EMAIL_VERIFICATION_ENABLED (1)
true
boolean
controllers.pocket-id.containers.app.env.ENCRYPTION_KEY.valueFrom.secretKeyRef.key (1)
ENCRYPTION_KEY
string
controllers.pocket-id.containers.app.env.ENCRYPTION_KEY.valueFrom.secretKeyRef.name (1)
pocket-id-secret
string
controllers.pocket-id.containers.app.env.FILE_BACKEND (1)
s3
string
controllers.pocket-id.containers.app.env.GEOLITE_DB_PATH (1)
/app/data/GeoLite2-City.mmdb
string
controllers.pocket-id.containers.app.env.HOST (1)
0.0.0.0
string
controllers.pocket-id.containers.app.env.KEYS_PATH (1)
/data/keys
string
controllers.pocket-id.containers.app.env.LDAP_ADMIN_GROUP_NAME (1)
sso_admins
string
controllers.pocket-id.containers.app.env.LDAP_ATTRIBUTE_GROUP_MEMBER (1)
member
string
controllers.pocket-id.containers.app.env.LDAP_ATTRIBUTE_GROUP_NAME (1)
cn
string
controllers.pocket-id.containers.app.env.LDAP_ATTRIBUTE_GROUP_UNIQUE_IDENTIFIER (1)
uid
string
controllers.pocket-id.containers.app.env.LDAP_ATTRIBUTE_USER_EMAIL (1)
mail
string
controllers.pocket-id.containers.app.env.LDAP_ATTRIBUTE_USER_FIRST_NAME (1)
givenName
string
controllers.pocket-id.containers.app.env.LDAP_ATTRIBUTE_USER_LAST_NAME (1)
sn
string
controllers.pocket-id.containers.app.env.LDAP_ATTRIBUTE_USER_UNIQUE_IDENTIFIER (1)
uid
string
controllers.pocket-id.containers.app.env.LDAP_ATTRIBUTE_USER_USERNAME (1)
uid
string
controllers.pocket-id.containers.app.env.LDAP_ENABLED (1)
true
boolean
controllers.pocket-id.containers.app.env.LDAP_SKIP_CERT_VERIFY (1)
true
boolean
controllers.pocket-id.containers.app.env.LDAP_URL (1)
ldap://lldap.auth.svc.cluster.local:389
string
controllers.pocket-id.containers.app.env.METRICS_ENABLED (1)
true
boolean
controllers.pocket-id.containers.app.env.OTEL_METRICS_EXPORTER (1)
prometheus
string
controllers.pocket-id.containers.app.env.S3_ACCESS_KEY_ID.valueFrom.secretKeyRef.key (1)
AWS_ACCESS_KEY_ID
string
controllers.pocket-id.containers.app.env.S3_ACCESS_KEY_ID.valueFrom.secretKeyRef.name (1)
pocket-id-bucket
string
controllers.pocket-id.containers.app.env.S3_BUCKET.valueFrom.configMapKeyRef.key (1)
BUCKET_NAME
string
controllers.pocket-id.containers.app.env.S3_BUCKET.valueFrom.configMapKeyRef.name (1)
pocket-id-bucket
string
controllers.pocket-id.containers.app.env.S3_DISABLE_DEFAULT_INTEGRITY_CHECKS (1)
true
string
controllers.pocket-id.containers.app.env.S3_ENDPOINT (1)
http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc.cluster.local:80
string
controllers.pocket-id.containers.app.env.S3_FORCE_PATH_STYLE (1)
true
string
controllers.pocket-id.containers.app.env.S3_REGION (1)
us-east-1
string
controllers.pocket-id.containers.app.env.S3_SECRET_ACCESS_KEY.valueFrom.secretKeyRef.key (1)
AWS_SECRET_ACCESS_KEY
string
controllers.pocket-id.containers.app.env.S3_SECRET_ACCESS_KEY.valueFrom.secretKeyRef.name (1)
pocket-id-bucket
string
controllers.pocket-id.containers.app.env.SMTP_TLS (1)
none
string
controllers.pocket-id.containers.app.env.VERSION_CHECK_DISABLED (1)
true
string
controllers.pocket-id.containers.app.image.repository (6)
ghcr.io/pocket-id/pocket-id
string
controllers.pocket-id.containers.app.image.tag (6)
v2.16.0@sha256:9366436f3fd21619ed7e5709fa0acac88130f73414ec8ee1caf768fc487111ea
string
controllers.pocket-id.containers.app.probes.liveness.enabled (6)
true
boolean
controllers.pocket-id.containers.app.probes.liveness.spec.failureThreshold (4)
5
number
controllers.pocket-id.containers.app.probes.liveness.spec.periodSeconds (4)
10
number
controllers.pocket-id.containers.app.probes.liveness.spec.timeoutSeconds (4)
1
number
controllers.pocket-id.containers.app.probes.liveness.spec.initialDelaySeconds (3)
10
number
controllers.pocket-id.containers.app.probes.liveness.spec.httpGet.path (2)
/health
string
controllers.pocket-id.containers.app.probes.liveness.spec.httpGet.port (2)
1411
number
controllers.pocket-id.containers.app.probes.liveness.spec.exec.command[] (1)
- /app/pocket-id
- healthcheck
string
controllers.pocket-id.containers.app.probes.liveness.custom (3)
true
boolean
controllers.pocket-id.containers.app.probes.readiness.enabled (6)
true
boolean
controllers.pocket-id.containers.app.probes.readiness.custom (4)
true
boolean
controllers.pocket-id.containers.app.probes.readiness.spec.failureThreshold (4)
5
number
controllers.pocket-id.containers.app.probes.readiness.spec.periodSeconds (4)
10
number
controllers.pocket-id.containers.app.probes.readiness.spec.timeoutSeconds (4)
1
number
controllers.pocket-id.containers.app.probes.readiness.spec.httpGet.path (3)
/healthz
string
controllers.pocket-id.containers.app.probes.readiness.spec.httpGet.port (3)
1411
number
controllers.pocket-id.containers.app.probes.readiness.spec.initialDelaySeconds (3)
5
number
controllers.pocket-id.containers.app.probes.readiness.spec.exec.command[] (1)
- /app/pocket-id
- healthcheck
string
controllers.pocket-id.containers.app.probes.startup.enabled (3)
true
boolean
controllers.pocket-id.containers.app.probes.startup.spec.failureThreshold (3)
30
number
controllers.pocket-id.containers.app.probes.startup.spec.periodSeconds (3)
5
number
controllers.pocket-id.containers.app.resources.limits.memory (6)
256Mi
string
controllers.pocket-id.containers.app.resources.requests.cpu (6)
10m
string
controllers.pocket-id.containers.app.resources.requests.memory (6)
64Mi
string
controllers.pocket-id.containers.app.securityContext.allowPrivilegeEscalation (6)
false
boolean
controllers.pocket-id.containers.app.securityContext.capabilities.drop[] (6)
- ALL
string
controllers.pocket-id.containers.app.securityContext.readOnlyRootFilesystem (6)
true
boolean
controllers.pocket-id.containers.app.envFrom[].secretRef.name (5)
pocket-id-secret
string
controllers.pocket-id.containers.pocket-id.env.APP_URL (2)
https://id.${SECRET_DEFAULT_DOMAIN}
string
controllers.pocket-id.containers.pocket-id.env.TRUST_PROXY (2)
true
string
controllers.pocket-id.containers.pocket-id.env.UI_CONFIG_DISABLED (2)
true
string
controllers.pocket-id.containers.pocket-id.env.ALLOW_USER_SIGNUPS (1)
disabled
string
controllers.pocket-id.containers.pocket-id.env.ANALYTICS_DISABLED (1)
true
string
controllers.pocket-id.containers.pocket-id.env.DB_CONNECTION_STRING.valueFrom.secretKeyRef.key (1)
uri
string
controllers.pocket-id.containers.pocket-id.env.DB_CONNECTION_STRING.valueFrom.secretKeyRef.name (1)
pocket-id-postgres-app
string
controllers.pocket-id.containers.pocket-id.env.DB_CONNECTION_STRING (1)
file:/data/pocket-id.db?_pragma=journal_mode(WAL)&_pragma=busy_timeout(2500)&_txlock=immediate
string
controllers.pocket-id.containers.pocket-id.env.EMAILS_VERIFIED (1)
true
string
controllers.pocket-id.containers.pocket-id.env.ENCRYPTION_KEY.valueFrom.secretKeyRef.key (1)
ENCRYPTION_KEY
string
controllers.pocket-id.containers.pocket-id.env.ENCRYPTION_KEY.valueFrom.secretKeyRef.name (1)
pocket-id-secret
string
controllers.pocket-id.containers.pocket-id.env.FILE_BACKEND (1)
database
string
controllers.pocket-id.containers.pocket-id.env.GEOLITE_DB_PATH (1)
/data/GeoLite2-City.mmdb
string
controllers.pocket-id.containers.pocket-id.env.INTERNAL_APP_URL (1)
http://pocket-id.pocket-id.svc.cluster.local:8081
string
controllers.pocket-id.containers.pocket-id.env.LDAP_ADMIN_GROUP_NAME (1)
admins
string
controllers.pocket-id.containers.pocket-id.env.LDAP_ATTRIBUTE_GROUP_MEMBER (1)
memberOf
string
controllers.pocket-id.containers.pocket-id.env.LDAP_ATTRIBUTE_GROUP_NAME (1)
cn
string
controllers.pocket-id.containers.pocket-id.env.LDAP_ATTRIBUTE_USER_EMAIL (1)
mail
string
controllers.pocket-id.containers.pocket-id.env.LDAP_ATTRIBUTE_USER_FIRST_NAME (1)
givenName
string
controllers.pocket-id.containers.pocket-id.env.LDAP_ATTRIBUTE_USER_LAST_NAME (1)
sn
string
controllers.pocket-id.containers.pocket-id.env.LDAP_ATTRIBUTE_USER_UNIQUE_IDENTIFIER (1)
uuid
string
controllers.pocket-id.containers.pocket-id.env.LDAP_ATTRIBUTE_USER_USERNAME (1)
uid
string
controllers.pocket-id.containers.pocket-id.env.LDAP_BASE (1)
dc=home,dc=arpa
string
controllers.pocket-id.containers.pocket-id.env.LDAP_ENABLED (1)
true
string
controllers.pocket-id.containers.pocket-id.env.LDAP_URL (1)
ldap://lldap.${CLUSTER_DOMAIN}:389
string
controllers.pocket-id.containers.pocket-id.env.LDAP_USER_GROUP_SEARCH_FILTER (1)
(objectClass=groupOfNames)
string
controllers.pocket-id.containers.pocket-id.env.LDAP_USER_SEARCH_FILTER (1)
(objectClass=person)
string
controllers.pocket-id.containers.pocket-id.env.METRICS_ENABLED (1)
true
string
controllers.pocket-id.containers.pocket-id.env.OTEL_EXPORTER_PROMETHEUS_HOST (1)
0.0.0.0
string
controllers.pocket-id.containers.pocket-id.env.OTEL_EXPORTER_PROMETHEUS_PORT (1)
9464
number
controllers.pocket-id.containers.pocket-id.env.OTEL_METRICS_EXPORTER (1)
prometheus
string
controllers.pocket-id.containers.pocket-id.env.PORT (1)
8081
string
controllers.pocket-id.containers.pocket-id.env.SMTP_FROM (1)
no-reply@${CLUSTER_DOMAIN}
string
controllers.pocket-id.containers.pocket-id.env.SMTP_HOST (1)
smtp-relay.default.svc.cluster.local.
string
controllers.pocket-id.containers.pocket-id.env.SMTP_PORT (1)
25
string
controllers.pocket-id.containers.pocket-id.env.TRUSTED_PLATFORM (1)
CF-Connecting-IP
string
controllers.pocket-id.containers.pocket-id.env.TZ (1)
America/Toronto
string
controllers.pocket-id.containers.pocket-id.env.UPLOAD_PATH (1)
/data/uploads
string
controllers.pocket-id.containers.pocket-id.env.VERSION_CHECK_DISABLED (1)
true
boolean
controllers.pocket-id.containers.pocket-id.image.repository (2)
ghcr.io/pocket-id/pocket-id
string
controllers.pocket-id.containers.pocket-id.image.tag (2)
v2.16.0@sha256:9e216a29115a852bd1e384c16f27312b0ebb52150543cc2138942815742711f8
string
controllers.pocket-id.containers.pocket-id.probes.liveness.custom (2)
true
boolean
controllers.pocket-id.containers.pocket-id.probes.liveness.enabled (2)
true
boolean
controllers.pocket-id.containers.pocket-id.probes.liveness.spec.exec.command[] (1)
- /app/pocket-id
- healthcheck
string
controllers.pocket-id.containers.pocket-id.probes.liveness.spec.failureThreshold (1)
3
number
controllers.pocket-id.containers.pocket-id.probes.liveness.spec.httpGet.path (1)
/health
string
controllers.pocket-id.containers.pocket-id.probes.liveness.spec.httpGet.port (1)
1411
number
controllers.pocket-id.containers.pocket-id.probes.liveness.spec.initialDelaySeconds (1)
30
number
controllers.pocket-id.containers.pocket-id.probes.liveness.spec.periodSeconds (1)
30
number
controllers.pocket-id.containers.pocket-id.probes.liveness.spec.timeoutSeconds (1)
5
number
controllers.pocket-id.containers.pocket-id.probes.readiness.custom (1)
true
boolean
controllers.pocket-id.containers.pocket-id.probes.readiness.enabled (1)
true
boolean
controllers.pocket-id.containers.pocket-id.probes.readiness.spec.exec.command[] (1)
- /app/pocket-id
- healthcheck
string
controllers.pocket-id.containers.pocket-id.probes.readiness.spec.failureThreshold (1)
3
number
controllers.pocket-id.containers.pocket-id.probes.readiness.spec.initialDelaySeconds (1)
30
number
controllers.pocket-id.containers.pocket-id.probes.readiness.spec.periodSeconds (1)
30
number
controllers.pocket-id.containers.pocket-id.probes.readiness.spec.timeoutSeconds (1)
5
number
controllers.pocket-id.containers.pocket-id.probes.startup.custom (1)
true
boolean
controllers.pocket-id.containers.pocket-id.probes.startup.enabled (1)
true
boolean
controllers.pocket-id.containers.pocket-id.probes.startup.spec.exec.command[] (1)
- /app/pocket-id
- healthcheck
string
controllers.pocket-id.containers.pocket-id.probes.startup.spec.failureThreshold (1)
30
number
controllers.pocket-id.containers.pocket-id.probes.startup.spec.initialDelaySeconds (1)
5
number
controllers.pocket-id.containers.pocket-id.probes.startup.spec.periodSeconds (1)
5
number
controllers.pocket-id.containers.pocket-id.probes.startup.spec.timeoutSeconds (1)
5
number
controllers.pocket-id.containers.pocket-id.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.pocket-id.containers.pocket-id.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.pocket-id.containers.pocket-id.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.pocket-id.containers.pocket-id.envFrom[].secretRef.name (1)
pocket-id-secret
string
controllers.pocket-id.containers.pocket-id.resources.limits.memory (1)
256Mi
string
controllers.pocket-id.containers.pocket-id.resources.requests.cpu (1)
50m
string
controllers.pocket-id.containers.pocket-id.resources.requests.memory (1)
128Mi
string
controllers.pocket-id.pod.securityContext.fsGroup (3)
1000
number
controllers.pocket-id.pod.securityContext.fsGroupChangePolicy (3)
OnRootMismatch
string
controllers.pocket-id.pod.securityContext.runAsGroup (3)
1000
number
controllers.pocket-id.pod.securityContext.runAsUser (3)
1000
number
controllers.pocket-id.pod.securityContext.runAsNonRoot (2)
true
boolean
controllers.pocket-id.replicas (3)
1
number
controllers.pocket-id.strategy (3)
RollingUpdate
string
controllers.pocket-id.initContainers.init-db.envFrom[].secretRef.name (2)
pocket-id-secret
string
controllers.pocket-id.initContainers.init-db.image.repository (2)
ghcr.io/home-operations/postgres-init
string
controllers.pocket-id.initContainers.init-db.image.tag (2)
17.6.0@sha256:86a1992d46273c58fd4ad95b626081dfaabfe16bd56944675169e406d1a660dd
string, number
controllers.pocket-id.initContainers.init-db.image.pullPolicy (1)
IfNotPresent
string
controllers.pocket-id.initContainers.init-db.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.pocket-id.initContainers.init-db.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.pocket-id.type (2)
statefulset
string
controllers.pocket-id.rollingUpdate.surge (1)
0
string
controllers.pocket-id.rollingUpdate.unavailable (1)
1
number
service.app.ports.http.port (6)
1411
number
service.app.controller (1)
pocket-id
string
service.pocket-id.controller (2)
pocket-id
string
service.pocket-id.ports.http.port (2)
8081
number
service.pocket-id.ports.http.primary (1)
true
boolean
service.pocket-id.ports.metrics.port (1)
9464
number
defaultPodOptions.securityContext.fsGroup (5)
1000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (5)
OnRootMismatch
string
defaultPodOptions.securityContext.runAsGroup (5)
1000
number
defaultPodOptions.securityContext.runAsNonRoot (5)
true
boolean
defaultPodOptions.securityContext.runAsUser (5)
1000
number
defaultPodOptions.securityContext.seccompProfile.type (2)
RuntimeDefault
string
defaultPodOptions.securityContext.supplementalGroups[] (1)
- "100"
number
defaultPodOptions.automountServiceAccountToken (1)
false
boolean
defaultPodOptions.enableServiceLinks (1)
false
boolean
persistence.data.existingClaim (5)
pocket-id-pvc
string
persistence.data.globalMounts[].path (3)
/app/data
string
persistence.data.globalMounts[].subPath (1)
backend
string
persistence.data.advancedMounts.pocket-id.app[].path (1)
/data
string
persistence.data.enabled (1)
true
boolean
persistence.data.type (1)
emptyDir
string
persistence.var.sizeLimit (4)
1Gi
string
persistence.var.type (4)
emptyDir
string
persistence.tmp.type (3)
emptyDir
string
persistence.tmp.globalMounts[].path (2)
/tmp
string
persistence.tmp.advancedMounts.pocket-id.app[].path (1)
/tmp
string
persistence.tmp.enabled (1)
true
boolean
persistence.config.existingClaim (1)
{{ .Release.Name }}
string
persistence.config.globalMounts[].path (1)
/app/data
string
persistence.tmpfs.advancedMounts.pocket-id.app[].path (1)
/tmp
string
persistence.tmpfs.advancedMounts.pocket-id.app[].subPath (1)
tmp
string
persistence.tmpfs.type (1)
emptyDir
string
route.app.hostnames[] (5)
- id.${SECRET_DOMAIN}
string
route.app.parentRefs[].name (5)
envoy-external
string
route.app.parentRefs[].namespace (5)
network
string
route.app.parentRefs[].sectionName (3)
https
string
route.pocket-id.hostnames[] (1)
- ${APP_SUBDOMAIN:-${APP}}.${CLUSTER_DOMAIN}
string
route.pocket-id.parentRefs[].name (1)
envoy-external
string
route.pocket-id.parentRefs[].namespace (1)
network
string
fullnameOverride (1)
pocket-id
string
rawResources.db-egress.manifest.apiVersion (1)
cilium.io/v2
string
rawResources.db-egress.manifest.kind (1)
CiliumNetworkPolicy
string
rawResources.db-egress.manifest.spec.egress[].toEndpoints[].matchLabels."cnpg.io/cluster" (1)
pocket-id-postgres
string
rawResources.db-egress.manifest.spec.egress[].toPorts[].ports[].port (1)
5432
string
rawResources.db-egress.manifest.spec.egress[].toPorts[].ports[].protocol (1)
TCP
string
rawResources.db-egress.manifest.spec.endpointSelector.matchLabels."app.kubernetes.io/controller" (1)
pocket-id
string
rawResources.network-policy.manifest.apiVersion (1)
cilium.io/v2
string
rawResources.network-policy.manifest.kind (1)
CiliumNetworkPolicy
string
rawResources.network-policy.manifest.spec.egress[].toEndpoints[].matchLabels.k8s-app (1)
kube-dns
string
rawResources.network-policy.manifest.spec.egress[].toEndpoints[].matchLabels.k8s:"io.kubernetes.pod.namespace" (1)
kube-system
string
rawResources.network-policy.manifest.spec.egress[].toPorts[].ports[].port (1)
53
53
string
rawResources.network-policy.manifest.spec.egress[].toPorts[].ports[].protocol (1)
UDP
TCP
string
rawResources.network-policy.manifest.spec.egress[].toPorts[].rules.dns[].matchPattern (1)
*
string
rawResources.network-policy.manifest.spec.endpointSelector.matchLabels."app.kubernetes.io/controller" (1)
pocket-id
string
rawResources.network-policy.manifest.spec.ingress[].fromEndpoints[].matchLabels."app.kubernetes.io/controller" (1)
cloudflared
string
rawResources.network-policy.manifest.spec.ingress[].fromEndpoints[].matchLabels."app.kubernetes.io/name" (1)
forgejo
string
rawResources.network-policy.manifest.spec.ingress[].fromEndpoints[].matchLabels.k8s:"app.kubernetes.io/name" (1)
prometheus
string
rawResources.network-policy.manifest.spec.ingress[].fromEndpoints[].matchLabels.k8s:"io.kubernetes.pod.namespace" (1)
cloudflared
forgejo
prometheus
string
rawResources.network-policy.manifest.spec.ingress[].toPorts[].ports[].port (1)
8081
8081
8081
string
rawResources.network-policy.manifest.spec.ingress[].toPorts[].ports[].protocol (1)
TCP
TCP
TCP
string
serviceMonitor.pocket-id.endpoints[].port (1)
metrics
string