A Helm chart for the control plane for Wallaroo
Configuration
The following table lists the configurable parameters of the Wallaroo chart and their default values.
| Parameter | Description | Default |
|---|---|---|
kubernetes_distribution |
One of: aks, eks, gke, or kurl. May be safe to leave defaulted. | "" |
imageRegistry |
imageRegistry where images are pulled from | "ghcr.io/wallaroolabs" |
imageTag |
imageTag that images default to - can be overridden for each component | "main" |
replImagePrefix |
imageRegistry where images are pulled from, as overridden by Kots | "ghcr.io/wallaroolabs" |
assays.enabled |
Controls the display of Assay data in the Dashboard | true |
custTlsSecretName |
Name of existing Kubernetes TLS type secret | "" |
deploymentStage |
Deployment stage, must be set to “cust” when deployed | "dev" |
custTlsCert |
Customer provided certificate chain when deploymentStage is “cust”. | "" |
custTlsKey |
Customer provided private key when deploymentStage is “cust”. | "" |
nodeSelector |
Global node selector | {} |
tolerations |
Global tolerations | [{"key": "wallaroo", "operator": "Exists", "effect": "NoSchedule"}] |
domainPrefix |
DNS prefix of Wallaroo endpoints, can be empty for none | "xxx" |
domainSuffix |
DNS suffix of Wallaroo endpoints, MUST be provided | "yyy" |
externalIpOverride |
Used in cases where we can’t accurately determine our external, inbound IP address. Normally “”. | "" |
imagePullPolicy |
Global policy saying when K8s pulls images: Always, Never, or IfNotPresent. | "Always" |
wallarooSecretName |
Secret name for pulling Wallaroo images | "regcred" |
apilb.nodeSelector |
standard node selector for API-LB | {} |
apilb.annotations |
Annotations for api-lb service | {} |
apilb.serviceType |
Service type of api-lb service | "ClusterIP" |
apilb.external_inference_endpoints_enabled |
Enable external URL inference endpoints: pipeline inference endpoints that are accessible outside of the Wallaroo cluster. | true |
jupyter.enabled |
If true, a jupyer hub was deployed which components can point to. | false |
keycloak.user |
administrative username | "admin" |
keycloak.password |
default admin password: overridden if generate_secrets is true | "admin" |
keycloak.provider.clientId |
upstream client id | "" |
keycloak.provider.clientSecret |
upstream client secret | "" |
keycloak.provider.name |
human name for provider | "" |
keycloak.provider.id |
Type of provider, one of: “github”, “google”, or “OIDC” | "" |
keycloak.provider.authorizationUrl |
URL to contact the upstream client for auth requests | null |
keycloak.provider.clientAuthMethod |
client auth method - Must be client_secret_post for OIDC provider type, leave blank otherwise. | null |
keycloak.provider.displayName |
human name for provider, displayed to end user in login dialogs | null |
keycloak.provider.tokenUrl |
Used only for ODIC, see token endpoint under Azure endpoints. | null |
dbcleaner.schedule |
when the cleaner runs, default is every eight hours | "* */8 * * *" |
dbcleaner.maxAgeDays |
delete older than this many days | "30" |
plateau.enabled |
Enable Plateau deployment | true |
plateau.diskSize |
Disk space to allocate. Smaller than 100Gi is not recommended. | "100Gi" |
telemetry.enabled |
Used only for our CE product. Leave disabled for EE/Helm installs. | false |
dashboard.enabled |
Enable dashboard service | true |
dashboard.clientName |
Customer display name which appears at the top of the dashboard window. | "Fitzroy Macropods, LLC" |
minio.imagePullSecrets |
Must override for helm + private registry; eg -name: "some-secret" |
[] |
minio.image.repository |
Must override for helm + private registry | "quay.io/minio/minio" |
minio.mcImage.repository |
Must override for helm + private registry | "quay.io/minio/mc" |
minio.persistence.size |
Minio model storage disk size. Smaller than 10Gi is not recommended. | "10Gi" |
fluent-bit.imagePullSecrets |
Must override for helm + private registry; eg -name: "some-secret" |
[] |
fluent-bit.image.repository |
Must override for helm + private registry | "cr.fluentbit.io/fluent/fluent-bit" |
helmTests.enabled |
When enabled, create “helm test” resources. | true |
helmTests.nodeSelector |
When helm test is run, this selector places the test pods. |
{} |
pythonAPIServer.enabled |
This service is used for model conversion. | false |
explainabilityServer.enabled |
Enable the model explainability service | false |