mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-25 06:42:52 +08:00
45 lines
1.7 KiB
YAML
45 lines
1.7 KiB
YAML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
# HelmChart CR for auto-deploying OpenShell via k3s Helm controller
|
|
# This manifest is placed in /var/lib/rancher/k3s/server/manifests/ and
|
|
# automatically installed when the k3s cluster starts.
|
|
#
|
|
# The chart tarball is served from the k3s static file server at:
|
|
# https://<k8s-api>/static/charts/openshell-0.1.0.tgz
|
|
#
|
|
# Component images are pulled at runtime from ghcr.io.
|
|
# Authentication is configured via /etc/rancher/k3s/registries.yaml
|
|
# (containerd-level) and a Kubernetes imagePullSecret (pod-level),
|
|
# both generated by the bootstrap process.
|
|
|
|
apiVersion: helm.cattle.io/v1
|
|
kind: HelmChart
|
|
metadata:
|
|
name: openshell
|
|
namespace: kube-system
|
|
spec:
|
|
chart: https://%{KUBERNETES_API}%/static/charts/openshell-0.1.0.tgz
|
|
targetNamespace: openshell
|
|
createNamespace: true
|
|
valuesContent: |-
|
|
chartChecksum: __CHART_CHECKSUM__
|
|
image:
|
|
repository: ghcr.io/nvidia/openshell/gateway
|
|
tag: latest
|
|
pullPolicy: __IMAGE_PULL_POLICY__
|
|
server:
|
|
sandboxImage: ghcr.io/nvidia/openshell-community/sandboxes/base:latest
|
|
sandboxImagePullPolicy: __SANDBOX_IMAGE_PULL_POLICY__
|
|
dbUrl: __DB_URL__
|
|
sshGatewayHost: __SSH_GATEWAY_HOST__
|
|
sshGatewayPort: __SSH_GATEWAY_PORT__
|
|
grpcEndpoint: "https://openshell.openshell.svc.cluster.local:8080"
|
|
hostGatewayIP: __HOST_GATEWAY_IP__
|
|
disableGatewayAuth: __DISABLE_GATEWAY_AUTH__
|
|
disableTls: __DISABLE_TLS__
|
|
tls:
|
|
certSecretName: openshell-server-tls
|
|
clientCaSecretName: openshell-server-client-ca
|
|
clientTlsSecretName: openshell-client-tls
|