Updated the README

Ontotext-AD · May 16, 2024 · b0c4d1e · b0c4d1e
1 parent 3cf30d4
commit b0c4d1e
Showing 1 changed file with 110 additions and 48 deletions.
diff --git a/README.md b/README.md
@@ -475,40 +475,45 @@ about defining resource limits.
 | args | list | `[]` |  |
 | automountServiceAccountToken | bool | `false` |  |
 | cluster.clusterCreationTimeout | int | `60` |  |
-| cluster.clusterSecret | string | `"s3cr37"` |  |
+| cluster.config.configmapKey | string | `"cluster-config.json"` |  |
 | cluster.config.electionMinTimeout | int | `8000` |  |
 | cluster.config.electionRangeTimeout | int | `6000` |  |
+| cluster.config.existingConfigmap | string | `""` |  |
 | cluster.config.heartbeatInterval | int | `2000` |  |
 | cluster.config.messageSizeKB | int | `64` |  |
 | cluster.config.transactionLogMaximumSizeGB | int | `50` |  |
 | cluster.config.verificationTimeout | int | `1500` |  |
-| cluster.existingClusterSecret | string | `""` |  |
-| cluster.existingClusterSecretKey | string | `""` |  |
-| cluster.existingConfig | string | `""` |  |
-| cluster.existingConfigmapKey | string | `"cluster-config.json"` |  |
 | cluster.jobs.createCluster.enabled | bool | `true` |  |
 | cluster.jobs.patchCluster.enabled | bool | `true` |  |
 | cluster.jobs.scaleCluster.enabled | bool | `true` |  |
+| cluster.token.existingSecret | string | `""` |  |
+| cluster.token.secret | string | `"s3cr37"` |  |
+| cluster.token.secretKey | string | `""` |  |
 | command | list | `[]` |  |
 | configuration.defaultJavaArguments | string | `"-XX:+UseContainerSupport -XX:MaxRAMPercentage=70 -XX:-UseCompressedOops"` |  |
 | configuration.externalUrl | string | `"http://graphdb.127.0.0.1.nip.io/"` |  |
+| configuration.extraProperties.configmapKey | string | `"graphdb.properties"` |  |
+| configuration.extraProperties.existingConfigmap | string | `""` |  |
+| configuration.extraProperties.existingSecret | string | `""` |  |
+| configuration.extraProperties.secretKey | string | `"graphdb.properties"` |  |
+| configuration.initialSettings.configmapKey | string | `"settings.js"` |  |
+| configuration.initialSettings.existingConfigmap | string | `""` |  |
 | configuration.javaArguments | string | `""` |  |
+| configuration.logback.configmapKey | string | `"logback.xml"` |  |
+| configuration.logback.existingConfigmap | string | `""` |  |
 | configuration.properties | object | `{}` |  |
 | configuration.secretProperties | object | `{}` |  |
 | containerPorts.http | int | `7200` |  |
 | containerPorts.rpc | int | `7300` |  |
 | dnsConfig | object | `{}` |  |
 | dnsPolicy | string | `""` |  |
-| extraConfiguration.properties.configmapKey | string | `"graphdb.properties"` |  |
-| extraConfiguration.properties.existingConfigmap | string | `""` |  |
-| extraConfiguration.properties.existingSecret | string | `""` |  |
-| extraConfiguration.properties.secretKey | string | `"graphdb.properties"` |  |
 | extraContainerPorts | object | `{}` |  |
 | extraContainers | list | `[]` |  |
 | extraEnv | list | `[]` |  |
 | extraEnvFrom | list | `[]` |  |
 | extraInitContainers | list | `[]` |  |
 | extraObjects | list | `[]` |  |
+| extraVolumeClaimTemplates | list | `[]` |  |
 | extraVolumeMounts | list | `[]` |  |
 | extraVolumes | list | `[]` |  |
 | fullnameOverride | string | `""` |  |
@@ -520,17 +525,17 @@ about defining resource limits.
 | headlessService.labels | object | `{}` |  |
 | headlessService.ports.http | int | `7200` |  |
 | headlessService.ports.rpc | int | `7300` |  |
+| image.digest | string | `"sha256:aabf1283664b1cbeeb9880025bbea6820c4a7f5a3a54e5940534e916b8829035"` |  |
 | image.pullPolicy | string | `"IfNotPresent"` |  |
 | image.pullSecrets | list | `[]` |  |
 | image.registry | string | `"docker.io"` |  |
 | image.repository | string | `"ontotext/graphdb"` |  |
-| image.sha | string | `""` |  |
 | image.tag | string | `""` |  |
-| import.volumeMount.annotations | object | `{}` |  |
 | import.volumeMount.enabled | bool | `false` |  |
-| import.volumeMount.labels | object | `{}` |  |
-| import.volumeMount.volumeClaimTemplateSpec.accessModes[0] | string | `"ReadWriteOnce"` |  |
-| import.volumeMount.volumeClaimTemplateSpec.resources.requests.storage | string | `"10Gi"` |  |
+| import.volumeMount.volumeClaimTemplate.annotations | object | `{}` |  |
+| import.volumeMount.volumeClaimTemplate.labels | object | `{}` |  |
+| import.volumeMount.volumeClaimTemplate.spec.accessModes[0] | string | `"ReadWriteOnce"` |  |
+| import.volumeMount.volumeClaimTemplate.spec.resources.requests.storage | string | `"10Gi"` |  |
 | ingress.annotations | object | `{}` |  |
 | ingress.className | string | `""` |  |
 | ingress.enabled | bool | `true` |  |
@@ -542,17 +547,37 @@ about defining resource limits.
 | ingress.pathType | string | `"Prefix"` |  |
 | ingress.tls.enabled | bool | `false` |  |
 | ingress.tls.secretName | string | `nil` |  |
-| initContainerResources | object | `{}` |  |
-| initContainerSecurityContext | object | `{}` |  |
-| initialConfiguration.settings.configmapKey | string | `"settings.js"` |  |
-| initialConfiguration.settings.existingConfigmap | string | `""` |  |
-| initialConfiguration.users.existingSecret | string | `""` |  |
-| initialConfiguration.users.secretKey | string | `"users.js"` |  |
+| initContainerDataPermissions.enabled | bool | `false` |  |
+| initContainerDataPermissions.securityContext.runAsNonRoot | bool | `false` |  |
+| initContainerDataPermissions.securityContext.runAsUser | int | `0` |  |
+| initContainerResources.limits.cpu | string | `"50m"` |  |
+| initContainerResources.limits.ephemeral-storage | string | `"1Mi"` |  |
+| initContainerResources.limits.memory | string | `"16Mi"` |  |
+| initContainerResources.requests.cpu | string | `"50m"` |  |
+| initContainerResources.requests.ephemeral-storage | string | `"1Mi"` |  |
+| initContainerResources.requests.memory | string | `"16Mi"` |  |
+| initContainerSecurityContext.allowPrivilegeEscalation | bool | `false` |  |
+| initContainerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
+| initContainerSecurityContext.readOnlyRootFilesystem | bool | `true` |  |
+| initContainerSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
 | jobs.backoffLimit | int | `10` |  |
 | jobs.persistence.emptyDir.sizeLimit | string | `"10Mi"` |  |
-| jobs.podSecurityContext | object | `{}` |  |
-| jobs.resources | object | `{}` |  |
-| jobs.securityContext | object | `{}` |  |
+| jobs.podSecurityContext.fsGroup | int | `10001` |  |
+| jobs.podSecurityContext.fsGroupChangePolicy | string | `"OnRootMismatch"` |  |
+| jobs.podSecurityContext.runAsGroup | int | `10001` |  |
+| jobs.podSecurityContext.runAsNonRoot | bool | `true` |  |
+| jobs.podSecurityContext.runAsUser | int | `10001` |  |
+| jobs.podSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
+| jobs.resources.limits.cpu | string | `"50m"` |  |
+| jobs.resources.limits.ephemeral-storage | string | `"10Mi"` |  |
+| jobs.resources.limits.memory | string | `"16Mi"` |  |
+| jobs.resources.requests.cpu | string | `"50m"` |  |
+| jobs.resources.requests.ephemeral-storage | string | `"10Mi"` |  |
+| jobs.resources.requests.memory | string | `"16Mi"` |  |
+| jobs.securityContext.allowPrivilegeEscalation | bool | `false` |  |
+| jobs.securityContext.capabilities.drop[0] | string | `"ALL"` |  |
+| jobs.securityContext.readOnlyRootFilesystem | bool | `true` |  |
+| jobs.securityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
 | jobs.ttlSecondsAfterFinished | int | `300` |  |
 | labels | object | `{}` |  |
 | license.existingSecret | string | `""` |  |
@@ -562,44 +587,51 @@ about defining resource limits.
 | livenessProbe.initialDelaySeconds | int | `60` |  |
 | livenessProbe.periodSeconds | int | `10` |  |
 | livenessProbe.timeoutSeconds | int | `5` |  |
-| logging.logback.configmapKey | string | `"logback.xml"` |  |
-| logging.logback.existingConfigmap | string | `""` |  |
 | nameOverride | string | `""` |  |
 | namespaceOverride | string | `""` |  |
 | nodeSelector | object | `{}` |  |
-| persistence.annotations | object | `{}` |  |
+| persistence.emptyDir.sizeLimit | string | `"1Gi"` |  |
 | persistence.enabled | bool | `true` |  |
-| persistence.labels | object | `{}` |  |
-| persistence.volumeClaimTemplateSpec.accessModes[0] | string | `"ReadWriteOnce"` |  |
-| persistence.volumeClaimTemplateSpec.resources.requests.storage | string | `"5Gi"` |  |
+| persistence.volumeClaimTemplate.annotations | object | `{}` |  |
+| persistence.volumeClaimTemplate.labels | object | `{}` |  |
+| persistence.volumeClaimTemplate.spec.accessModes[0] | string | `"ReadWriteOnce"` |  |
+| persistence.volumeClaimTemplate.spec.resources.requests.storage | string | `"5Gi"` |  |
 | podAnnotations | object | `{}` |  |
-| podDisruptionBudget.enabled | bool | `false` |  |
+| podDisruptionBudget.enabled | bool | `true` |  |
 | podDisruptionBudget.maxUnavailable | string | `""` |  |
 | podDisruptionBudget.minAvailable | string | `"51%"` |  |
 | podLabels | object | `{}` |  |
 | podManagementPolicy | string | `"Parallel"` |  |
-| podSecurityContext | object | `{}` |  |
+| podSecurityContext.fsGroup | int | `10001` |  |
+| podSecurityContext.fsGroupChangePolicy | string | `"OnRootMismatch"` |  |
+| podSecurityContext.runAsGroup | int | `10001` |  |
+| podSecurityContext.runAsNonRoot | bool | `true` |  |
+| podSecurityContext.runAsUser | int | `10001` |  |
+| podSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
 | proxy.affinity | object | `{}` |  |
 | proxy.annotations | object | `{}` |  |
 | proxy.args | list | `[]` |  |
 | proxy.command | list | `[]` |  |
 | proxy.configuration.defaultJavaArguments | string | `"-XX:+UseContainerSupport -XX:MaxRAMPercentage=70"` |  |
+| proxy.configuration.extraProperties.configmapKey | string | `"graphdb.properties"` |  |
+| proxy.configuration.extraProperties.existingConfigmap | string | `""` |  |
+| proxy.configuration.extraProperties.existingSecret | string | `""` |  |
+| proxy.configuration.extraProperties.secretKey | string | `"graphdb.properties"` |  |
 | proxy.configuration.javaArguments | string | `""` |  |
+| proxy.configuration.logback.configmapKey | string | `"logback.xml"` |  |
+| proxy.configuration.logback.existingConfigmap | string | `""` |  |
 | proxy.configuration.properties | object | `{}` |  |
 | proxy.configuration.secretProperties | object | `{}` |  |
 | proxy.containerPorts.http | int | `7200` |  |
 | proxy.containerPorts.rpc | int | `7300` |  |
 | proxy.dnsConfig | object | `{}` |  |
 | proxy.dnsPolicy | string | `""` |  |
-| proxy.extraConfiguration.properties.configmapKey | string | `"graphdb.properties"` |  |
-| proxy.extraConfiguration.properties.existingConfigmap | string | `""` |  |
-| proxy.extraConfiguration.properties.existingSecret | string | `""` |  |
-| proxy.extraConfiguration.properties.secretKey | string | `"graphdb.properties"` |  |
 | proxy.extraContainerPorts | object | `{}` |  |
 | proxy.extraContainers | list | `[]` |  |
 | proxy.extraEnv | list | `[]` |  |
 | proxy.extraEnvFrom | list | `[]` |  |
 | proxy.extraInitContainers | list | `[]` |  |
+| proxy.extraVolumeClaimTemplates | list | `[]` |  |
 | proxy.extraVolumeMounts | list | `[]` |  |
 | proxy.extraVolumes | list | `[]` |  |
 | proxy.fullnameOverride | string | `""` |  |
@@ -608,41 +640,61 @@ about defining resource limits.
 | proxy.headlessService.labels | object | `{}` |  |
 | proxy.headlessService.ports.http | int | `7200` |  |
 | proxy.headlessService.ports.rpc | int | `7300` |  |
-| proxy.initContainerResources | object | `{}` |  |
-| proxy.initContainerSecurityContext | object | `{}` |  |
+| proxy.initContainerDataPermissions.enabled | bool | `false` |  |
+| proxy.initContainerDataPermissions.securityContext.runAsNonRoot | bool | `false` |  |
+| proxy.initContainerDataPermissions.securityContext.runAsUser | int | `0` |  |
+| proxy.initContainerResources.limits.cpu | string | `"50m"` |  |
+| proxy.initContainerResources.limits.ephemeral-storage | string | `"1Mi"` |  |
+| proxy.initContainerResources.limits.memory | string | `"16Mi"` |  |
+| proxy.initContainerResources.requests.cpu | string | `"50m"` |  |
+| proxy.initContainerResources.requests.ephemeral-storage | string | `"1Mi"` |  |
+| proxy.initContainerResources.requests.memory | string | `"16Mi"` |  |
+| proxy.initContainerSecurityContext.allowPrivilegeEscalation | bool | `false` |  |
+| proxy.initContainerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
+| proxy.initContainerSecurityContext.readOnlyRootFilesystem | bool | `true` |  |
+| proxy.initContainerSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
 | proxy.labels | object | `{}` |  |
 | proxy.livenessProbe.httpGet.path | string | `"/proxy/health"` |  |
 | proxy.livenessProbe.httpGet.port | string | `"http"` |  |
 | proxy.livenessProbe.initialDelaySeconds | int | `120` |  |
 | proxy.livenessProbe.periodSeconds | int | `10` |  |
 | proxy.livenessProbe.timeoutSeconds | int | `5` |  |
-| proxy.logging.logback.configmapKey | string | `"logback.xml"` |  |
-| proxy.logging.logback.existingConfigmap | string | `""` |  |
 | proxy.nameOverride | string | `""` |  |
 | proxy.nodeSelector | object | `{}` |  |
-| proxy.persistence.annotations | object | `{}` |  |
+| proxy.persistence.emptyDir.sizeLimit | string | `"500Mi"` |  |
 | proxy.persistence.enabled | bool | `true` |  |
-| proxy.persistence.labels | object | `{}` |  |
-| proxy.persistence.volumeClaimTemplateSpec.accessModes[0] | string | `"ReadWriteOnce"` |  |
-| proxy.persistence.volumeClaimTemplateSpec.resources.requests.storage | string | `"500Mi"` |  |
+| proxy.persistence.volumeClaimTemplate.annotations | object | `{}` |  |
+| proxy.persistence.volumeClaimTemplate.labels | object | `{}` |  |
+| proxy.persistence.volumeClaimTemplate.spec.accessModes[0] | string | `"ReadWriteOnce"` |  |
+| proxy.persistence.volumeClaimTemplate.spec.resources.requests.storage | string | `"500Mi"` |  |
 | proxy.podAnnotations | object | `{}` |  |
-| proxy.podDisruptionBudget.enabled | bool | `false` |  |
+| proxy.podDisruptionBudget.enabled | bool | `true` |  |
 | proxy.podDisruptionBudget.maxUnavailable | string | `""` |  |
 | proxy.podDisruptionBudget.minAvailable | string | `"51%"` |  |
 | proxy.podLabels | object | `{}` |  |
 | proxy.podManagementPolicy | string | `"Parallel"` |  |
-| proxy.podSecurityContext | object | `{}` |  |
+| proxy.podSecurityContext.fsGroup | int | `10001` |  |
+| proxy.podSecurityContext.fsGroupChangePolicy | string | `"OnRootMismatch"` |  |
+| proxy.podSecurityContext.runAsGroup | int | `10001` |  |
+| proxy.podSecurityContext.runAsNonRoot | bool | `true` |  |
+| proxy.podSecurityContext.runAsUser | int | `10001` |  |
+| proxy.podSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
 | proxy.readinessProbe.httpGet.path | string | `"/proxy/ready"` |  |
 | proxy.readinessProbe.httpGet.port | string | `"http"` |  |
 | proxy.readinessProbe.periodSeconds | int | `10` |  |
 | proxy.readinessProbe.timeoutSeconds | int | `5` |  |
 | proxy.replicas | int | `1` |  |
+| proxy.resources.limits.ephemeral-storage | string | `"1Mi"` |  |
 | proxy.resources.limits.memory | string | `"1500Mi"` |  |
 | proxy.resources.requests.cpu | string | `"100m"` |  |
+| proxy.resources.requests.ephemeral-storage | string | `"1Mi"` |  |
 | proxy.resources.requests.memory | string | `"1500Mi"` |  |
 | proxy.revisionHistoryLimit | int | `10` |  |
 | proxy.schedulerName | string | `""` |  |
-| proxy.securityContext | object | `{}` |  |
+| proxy.securityContext.allowPrivilegeEscalation | bool | `false` |  |
+| proxy.securityContext.capabilities.drop[0] | string | `"ALL"` |  |
+| proxy.securityContext.readOnlyRootFilesystem | bool | `true` |  |
+| proxy.securityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
 | proxy.service.annotations | object | `{}` |  |
 | proxy.service.enabled | bool | `true` |  |
 | proxy.service.externalIPs | list | `[]` |  |
@@ -670,18 +722,28 @@ about defining resource limits.
 | readinessProbe.periodSeconds | int | `10` |  |
 | readinessProbe.timeoutSeconds | int | `5` |  |
 | replicas | int | `1` |  |
-| repositories.repositoriesConfigmap | string | `""` |  |
+| repositories.existingConfigmap | string | `""` |  |
+| resources.limits.ephemeral-storage | string | `"1Mi"` |  |
 | resources.limits.memory | string | `"2Gi"` |  |
 | resources.requests.cpu | string | `"500m"` |  |
+| resources.requests.ephemeral-storage | string | `"1Mi"` |  |
 | resources.requests.memory | string | `"2Gi"` |  |
 | revisionHistoryLimit | int | `10` |  |
 | schedulerName | string | `""` |  |
+| security.admin.initialPassword | string | `""` |  |
+| security.admin.username | string | `"admin"` |  |
 | security.enabled | bool | `false` |  |
+| security.initialUsers.existingSecret | string | `""` |  |
+| security.initialUsers.secretKey | string | `"users.js"` |  |
+| security.initialUsers.users | object | `{}` |  |
 | security.provisioner.existingSecret | string | `""` |  |
 | security.provisioner.password | string | `"iHaveSuperpowers"` |  |
 | security.provisioner.tokenKey | string | `"GRAPHDB_AUTH_TOKEN"` |  |
 | security.provisioner.username | string | `"provisioner"` |  |
-| securityContext | object | `{}` |  |
+| securityContext.allowPrivilegeEscalation | bool | `false` |  |
+| securityContext.capabilities.drop[0] | string | `"ALL"` |  |
+| securityContext.readOnlyRootFilesystem | bool | `true` |  |
+| securityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
 | service.annotations | object | `{}` |  |
 | service.enabled | bool | `true` |  |
 | service.externalIPs | list | `[]` |  |