values.yaml

# This is a YAML-formatted file.
# It declares variables to be passed into your templates.
# ACS will be created in a k8s cluster with a minimum of 16GB memory to split
# among below nodes:
# 2 x repository, 1 x share, 1 x postgres and
# 1 x transformers (pdfrenderer, imagemagick, libreoffice, tika, misc)
#
# Limit container memory and assign X percentage to JVM. There are couple of
# ways to allocate JVM Memory for ACS Containers, for example:
# JAVA_OPTS: "-XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap"
# But, as per Oracle docs
# (https://docs.oracle.com/javase/9/gctuning/parallel-collector1.htm#JSGCT-GUID-CAB83393-3438-44ED-98F0-D15641B43C7D)
# If container memory is not explicitly set, then the above flags will default
# max heap to 1/4th of container's memory which may not be ideal. Hence, setting
# up explicit Container memory and then assigning a percentage of it to the JVM
# for performance tuning.
repository:
  # -- Administrator password for ACS in NTLM hash format to set at bootstrap time
  adminPassword: "209c6174da490caeb422f3fa5a7ae634"
  # -- The name of the secret holding the ACS repository license if any.
  # it must be contained within a `data['*.lic']` property
  # For details on how to manage license, see:
  # https://github.com/Alfresco/acs-deployment/blob/master/docs/helm/examples/alf_license.md
  licenseSecret: null
  edition: Enterprise
  replicaCount: 2
  nodeSelector: {}
  strategy:
    type: Recreate
  image:
    repository: quay.io/alfresco/alfresco-content-repository
    tag: 7.4.0-M2
    pullPolicy: IfNotPresent
    internalPort: 8080
    hazelcastPort: 5701
  initContainers:
    db:
      image:
        repository: busybox
        tag: 1.35.0
        pullPolicy: IfNotPresent
      resources:
        limits:
          cpu: "0.25"
          memory: "10Mi"
  service:
    name: alfresco
    type: ClusterIP
    externalPort: &repositoryExternalPort 80
  ingress:
    path: /
    maxUploadSize: "5g"
    annotations: {}
    #   nginx.ingress.kubernetes.io/enable-cors: "true"
    tls: []
    #  - secretName: chart-example-tls
    #    hosts:
    #      - chart-example.local
  java_opts_secrets:
    enabled: false
  environment:
    JAVA_OPTS: >-
      $JAVA_OPTS_SECRETS
      -Dtransform.service.enabled=true
      -XX:MinRAMPercentage=50
      -XX:MaxRAMPercentage=80
      -Dencryption.keystore.type=JCEKS
      -Dencryption.cipherAlgorithm=DESede/CBC/PKCS5Padding
      -Dencryption.keyAlgorithm=DESede
      -Dencryption.keystore.location=/usr/local/tomcat/shared/classes/alfresco/extension/keystore/keystore
      -Dmetadata-keystore.aliases=metadata
      -Dmetadata-keystore.metadata.algorithm=DESede
  podAnnotations: {}
  podLabels: {}
  podSecurityContext:
    runAsNonRoot: true
    runAsUser: 33000
    runAsGroup: 1000
    fsGroup: 1000
  resources:
    requests:
      cpu: "1"
      memory: "1500Mi"
    limits:
      cpu: "4"
      memory: "3000Mi"
  # -- The startup probe to cover the worse case startup time for slow clusters
  startupProbe:
    periodSeconds: 30
    failureThreshold: 10
  # The repository readiness probe is used to check startup only as a failure
  # of the liveness probe later will result in the pod being restarted.
  readinessProbe:
    initialDelaySeconds: 60
    periodSeconds: 20
    timeoutSeconds: 10
    failureThreshold: 6
  livenessProbe:
    initialDelaySeconds: 130
    periodSeconds: 20
    timeoutSeconds: 10
  persistence:
    # -- Persist repository data
    enabled: true
    baseSize: 20Gi
    # -- Specify a storageClass for dynamic provisioning
    accessModes:
      - ReadWriteMany
    # -- Bind PVC based on storageClass (e.g. dynamic provisioning)
    storageClass:
    # -- Use pre-provisioned pv through its claim (e.g. static provisioning)
    existingClaim:
    data:
      mountPath: /usr/local/tomcat/alf_data
      subPath: alfresco-content-services/repository-data
  extraVolumes: []
  extraVolumeMounts: []
  extraSideContainers: []
  extraInitContainers: []
  command: []
  # -- Provide additional log statements by adding classes and/or packages in a
  # key:value maner org.alfresco.repo.content.transform.TransformerDebug: debug
  extraLogStatements: {}
  # -- An existing secret that contains REPO_ADMIN_PASSWORD as an alternative for `repository.adminPassword` value
  existingSecretName:
# -- Declares the api-explorer service used by the content repository
apiexplorer:
  ingress:
    path: /api-explorer
ooiService:
  replicaCount: 2
  nodeSelector: {}
  image:
    repository: quay.io/alfresco/alfresco-ooi-service
    tag: 1.1.3
    pullPolicy: IfNotPresent
    internalPort: 9095
  service:
    name: ooi-service
    type: ClusterIP
    externalPort: 80
  ingress:
    enabled: true
    path: /ooi-service
    tls: []
    #  - secretName: chart-example-tls
    #    hosts:
    #      - chart-example.local
  podSecurityContext:
    runAsNonRoot: true
    runAsUser: 33006
  resources:
    requests:
      cpu: "0.25"
      memory: "1000Mi"
    limits:
      cpu: "2"
      memory: "1000Mi"
  environment:
    JAVA_OPTS: " -Dalfresco.base-url=http://acs-alfresco-cs-repository:80"
  readinessProbe:
    initialDelaySeconds: 20
    periodSeconds: 60
    timeoutSeconds: 10
  livenessProbe:
    initialDelaySeconds: 10
    periodSeconds: 20
    timeoutSeconds: 10
# -- Enable/Disable Alfresco Content Connector for Microsoft Teams
msTeams:
  enabled: false
msTeamsService:
  replicaCount: 2
  nodeSelector: {}
  image:
    repository: quay.io/alfresco/alfresco-ms-teams-service
    tag: 1.1.0
    pullPolicy: IfNotPresent
    internalPort: 3978
  service:
    name: ms-teams-service
    type: ClusterIP
    externalPort: 80
  ingress:
    path: /ms-teams-service
    tls: []
    #  - secretName: chart-example-tls
    #    hosts:
    #      - chart-example.local
  podSecurityContext:
    runAsNonRoot: true
    runAsUser: 33041
  resources:
    requests:
      cpu: "0.5"
      memory: "1000Mi"
    limits:
      cpu: "1"
      memory: "1000Mi"
  readinessProbe:
    initialDelaySeconds: 20
    periodSeconds: 60
    timeoutSeconds: 10
  livenessProbe:
    initialDelaySeconds: 10
    periodSeconds: 20
    timeoutSeconds: 10
  alfresco:
    baseUrl: change_me_alf_base_url
    digitalWorkspace:
      contextPath: /workspace/
  microsoft:
    app:
      id: change_me_app_id
      password: change_me_app_pwd
      oauth:
        connectionName: alfresco
  teams:
    chat:
      filenameEnabled: true
      metadataEnabled: true
      imageEnabled: true
transformrouter:
  replicaCount: 2
  nodeSelector: {}
  image:
    repository: quay.io/alfresco/alfresco-transform-router
    tag: 2.0.0
    pullPolicy: IfNotPresent
    internalPort: 8095
  service:
    name: transform-router
    type: ClusterIP
    externalPort: 80
  environment:
    JAVA_OPTS: >-
      -XX:MinRAMPercentage=50
      -XX:MaxRAMPercentage=80
  readinessProbe:
    initialDelaySeconds: 140
    periodSeconds: 60
    timeoutSeconds: 10
  livenessProbe:
    initialDelaySeconds: 140
    periodSeconds: 120
    timeoutSeconds: 60
  podLabels: {}
  podSecurityContext:
    runAsNonRoot: true
    runAsUser: 33016
  resources:
    requests:
      cpu: "0.25"
      memory: "300Mi"
    limits:
      cpu: "1"
      memory: "512Mi"
# -- Declares the alfresco-pdf-renderer service used by the content repository
# to transform pdf files
pdfrenderer:
  replicaCount: 2
  nodeSelector: {}
  image:
    repository: alfresco/alfresco-pdf-renderer
    tag: 3.0.0
    pullPolicy: IfNotPresent
    internalPort: 8090
  service:
    name: pdfrenderer
    type: ClusterIP
    externalPort: 80
  podLabels: {}
  podSecurityContext:
    runAsNonRoot: true
    runAsUser: 33001
  resources:
    requests:
      cpu: "0.25"
      memory: "300Mi"
    limits:
      cpu: "2"
      memory: "1000Mi"
  environment:
    JAVA_OPTS: >-
      -XX:MinRAMPercentage=50
      -XX:MaxRAMPercentage=80
  readinessProbe:
    initialDelaySeconds: 20
    periodSeconds: 60
    timeoutSeconds: 10
  livenessProbe:
    initialDelaySeconds: 10
    periodSeconds: 20
    timeoutSeconds: 10
    livenessPercent: 150
    livenessTransformPeriodSeconds: 600
    maxTransforms: 10000
    maxTransformSeconds: 1200
# -- Declares the alfresco-imagemagick service used by the content repository
# to transform image files
imagemagick:
  replicaCount: 2
  nodeSelector: {}
  image:
    repository: alfresco/alfresco-imagemagick
    tag: 3.0.0
    pullPolicy: IfNotPresent
    internalPort: 8090
  service:
    name: imagemagick
    type: ClusterIP
    externalPort: 80
  podLabels: {}
  podSecurityContext:
    runAsNonRoot: true
    runAsUser: 33002
  resources:
    requests:
      cpu: "0.5"
      memory: "300Mi"
    limits:
      cpu: "4"
      memory: "1000Mi"
  environment:
    JAVA_OPTS: >-
      -XX:MinRAMPercentage=50
      -XX:MaxRAMPercentage=80
  readinessProbe:
    initialDelaySeconds: 20
    periodSeconds: 60
    timeoutSeconds: 10
  livenessProbe:
    initialDelaySeconds: 10
    periodSeconds: 20
    timeoutSeconds: 10
    livenessPercent: 150
    livenessTransformPeriodSeconds: 600
    maxTransforms: 10000
    maxTransformSeconds: 900
# -- Declares the alfresco-libreoffice service used by the content repository
# to transform office files
libreoffice:
  replicaCount: 2
  nodeSelector: {}
  image:
    repository: alfresco/alfresco-libreoffice
    tag: 3.0.0
    pullPolicy: IfNotPresent
    internalPort: 8090
  service:
    name: libreoffice
    type: ClusterIP
    externalPort: 80
  resources:
    requests:
      cpu: "0.5"
      memory: "400Mi"
    limits:
      cpu: "4"
      memory: "1000Mi"
  podLabels: {}
  podSecurityContext:
    runAsNonRoot: true
    runAsUser: 33003
  environment:
    JAVA_OPTS: >-
      -XX:MinRAMPercentage=50
      -XX:MaxRAMPercentage=80
  readinessProbe:
    initialDelaySeconds: 20
    periodSeconds: 60
    timeoutSeconds: 10
  livenessProbe:
    initialDelaySeconds: 10
    periodSeconds: 20
    timeoutSeconds: 10
    livenessPercent: 250
    livenessTransformPeriodSeconds: 600
    maxTransforms: 99999
    maxTransformSeconds: 1800
# -- Declares the alfresco-tika service used by the content repository
# to transform office files
tika:
  replicaCount: 2
  nodeSelector: {}
  image:
    repository: alfresco/alfresco-tika
    tag: 3.0.0
    pullPolicy: IfNotPresent
    internalPort: 8090
  service:
    name: tika
    type: ClusterIP
    externalPort: 80
  podLabels: {}
  podSecurityContext:
    runAsNonRoot: true
    runAsUser: 33004
  resources:
    requests:
      cpu: "0.25"
      memory: "600Mi"
    limits:
      cpu: "2"
      memory: "1000Mi"
  environment:
    JAVA_OPTS: >-
      -XX:MinRAMPercentage=50
      -XX:MaxRAMPercentage=80
  readinessProbe:
    initialDelaySeconds: 60
    periodSeconds: 60
    timeoutSeconds: 10
  livenessProbe:
    initialDelaySeconds: 60
    periodSeconds: 20
    timeoutSeconds: 10
    livenessPercent: 400
    livenessTransformPeriodSeconds: 600
    maxTransforms: 10000
    maxTransformSeconds: 1800
# -- Declares the alfresco-tika service used by the content repository
# to transform office files
transformmisc:
  enabled: true
  replicaCount: 2
  nodeSelector: {}
  image:
    repository: alfresco/alfresco-transform-misc
    tag: 3.0.0
    pullPolicy: IfNotPresent
    internalPort: 8090
  service:
    name: transformmisc
    type: ClusterIP
    externalPort: 80
  podLabels: {}
  podSecurityContext:
    runAsNonRoot: true
    runAsUser: 33006
  resources:
    requests:
      cpu: "0.25"
      memory: "300Mi"
    limits:
      cpu: "2"
      memory: "1000Mi"
  environment:
    JAVA_OPTS: >-
      -XX:MinRAMPercentage=50
      -XX:MaxRAMPercentage=80
  readinessProbe:
    initialDelaySeconds: 20
    periodSeconds: 60
    timeoutSeconds: 10
  livenessProbe:
    initialDelaySeconds: 10
    periodSeconds: 20
    timeoutSeconds: 10
    livenessPercent: 400
    livenessTransformPeriodSeconds: 600
    maxTransforms: 10000
    maxTransformSeconds: 1800
aiTransformer:
  replicaCount: 2
  nodeSelector: {}
  image:
    repository: quay.io/alfresco/alfresco-ai-docker-engine
    tag: 1.4.5
    pullPolicy: IfNotPresent
    internalPort: 8090
  service:
    name: ai-transformer
    type: ClusterIP
    externalPort: 80
  podSecurityContext:
    runAsUser: 33015
  resources:
    requests:
      cpu: "0.25"
      memory: "1000Mi"
    limits:
      cpu: "2"
      memory: "1000Mi"
  environment:
    JAVA_OPTS: >-
      -XX:MinRAMPercentage=50
      -XX:MaxRAMPercentage=80
  readinessProbe:
    initialDelaySeconds: 20
    periodSeconds: 60
    timeoutSeconds: 10
  livenessProbe:
    initialDelaySeconds: 10
    periodSeconds: 20
    timeoutSeconds: 10
    livenessPercent: 400
    livenessTransformPeriodSeconds: 600
    maxTransforms: 10000
    maxTransformSeconds: 1800
# -- Declares the alfresco-shared-file-store used by the content repository
# and transform service
filestore:
  replicaCount: 1
  nodeSelector: {}
  image:
    repository: quay.io/alfresco/alfresco-shared-file-store
    tag: 2.0.0
    pullPolicy: IfNotPresent
    internalPort: 8099
  initContainer:
    image:
      repository: busybox
      tag: 1.35.0
      pullPolicy: IfNotPresent
    resources:
      limits:
        cpu: "0.50"
        memory: "10Mi"
  service:
    name: filestore
    type: ClusterIP
    externalPort: 80
  podAnnotations: {}
  podLabels: {}
  podSecurityContext:
    runAsUser: 33030
    runAsGroup: 1000
    fsGroup: 1000
  resources:
    requests:
      cpu: "0.25"
      memory: "200Mi"
    limits:
      cpu: "2"
      memory: "1000Mi"
  environment:
    scheduler.content.age.millis: "86400000"
    scheduler.cleanup.interval: "86400000"
    JAVA_OPTS: >-
      -XX:MinRAMPercentage=50
      -XX:MaxRAMPercentage=80
  readinessProbe:
    initialDelaySeconds: 20
    periodSeconds: 60
    timeoutSeconds: 10
  livenessProbe:
    initialDelaySeconds: 10
    periodSeconds: 20
    timeoutSeconds: 10
    livenessPercent: 150
    livenessSavePeriodSeconds: 600
  persistence:
    # -- Persist filestore data
    enabled: true
    # -- Specify a storageClass for dynamic provisioning
    accessModes:
      - ReadWriteOnce
    # -- Bind PVC based on storageClass (e.g. dynamic provisionning)
    storageClass:
    # -- Use pre-provisioned pv through its claim (e.g. static provisionning)
    existingClaim: null
    data:
      mountPath: "/tmp/Alfresco"
      subPath: "alfresco-content-services/filestore-data"
# -- Define the alfresco-share properties to use in the k8s cluster
# This is the default presentation layer(UI) of Alfresco Content Services
share:
  replicaCount: 1
  nodeSelector: {}
  image:
    repository: quay.io/alfresco/alfresco-share
    tag: 7.4.0-M2
    pullPolicy: IfNotPresent
    internalPort: 8080
  service:
    name: share
    type: ClusterIP
    externalPort: 80
  ingress:
    path: /share
    annotations: {}
    tls: []
    #  - secretName: chart-example-tls
    #    hosts:
    #      - chart-example.local
  securityContext:
    runAsNonRoot: false
    capabilities:
      drop:
        - NET_RAW
        - ALL
  podLabels: {}
  podSecurityContext:
    runAsNonRoot: true
  resources:
    requests:
      cpu: "1"
      memory: "512Mi"
    limits:
      cpu: "4"
      memory: "2000Mi"
  environment:
    CATALINA_OPTS: >-
      -XX:MinRAMPercentage=50
      -XX:MaxRAMPercentage=80
  readinessProbe:
    initialDelaySeconds: 60
    periodSeconds: 20
    timeoutSeconds: 15
  livenessProbe:
    initialDelaySeconds: 200
    periodSeconds: 20
    timeoutSeconds: 10
  extraVolumeMounts: []
  extraVolumes: []
  extraSideContainers: []
  extraInitContainers: []
  command: []
activemq:
  enabled: true
  # -- Possibility to choose Node for pod, with a key-value pair label
  # e.g {"kubernetes.io/hostname": multinode-demo-m02}
  nodeSelector: {}
  adminUser:
    # -- Default username for the embedded broker admin user
    user: admin
    # -- Default password for the embedded broker admin user
    password: admin
# -- external activemq connection setting when activemq.enabled=false
messageBroker: &acs_messageBroker
  url: null
  user: null
  password: null
  existingSecretName: null
alfresco-search:
  nodeSelector: {}
  type: "search-services"
  enabled: true
  # If an external Solr service is to be used then enabled must be set to false
  # and external has to be configured accordingly.
  external:
    # -- Host dns/ip of the external solr6 instance.
    host: null
    # -- Port of the external solr6 instance.
    port: null
  repository: &repositoryHostPort
    # The value for "host" is the name of this chart
    host: alfresco-cs
    port: *repositoryExternalPort
  alfresco-insight-zeppelin:
    insightzeppelin:
      enabled: false
    repository: *repositoryHostPort
  ingress:
    # -- Alfresco Search services endpoint ('/solr')
    enabled: false
    # -- Default solr basic auth user/password: admin / admin
    # You can create your own with htpasswd utilility & encode it with base64.
    # Example: `echo -n "$(htpasswd -nbm admin admin)" | base64 | tr -d '\n'`
    # basicAuth: YWRtaW46JGFwcjEkVVJqb29uS00kSEMuS1EwVkRScFpwSHB2a3JwTDd1Lg==
    basicAuth:
    tls: []
    #  - secretName: chart-example-tls
    #    hosts:
    #      - chart-example.local
alfresco-elasticsearch-connector:
  enabled: false
  messageBroker: *acs_messageBroker
  reindexing:
    enabled: true
    postgresql:
      url:
      hostname: postgresql-acs
      database: alfresco
  # -- Overrides .Values.global.elasticsearch
  elasticsearch:
    host: null
    port: null
    protocol: null
    user: null
    password: null
alfresco-digital-workspace:
  nodeSelector: {}
  enabled: true
  nameOverride: "alfresco-dw"
  service:
    envType: frontend
  ingress:
    path: /workspace
    annotations:
      kubernetes.io/ingress.class: nginx
      nginx.ingress.kubernetes.io/proxy-body-size: "5g"
    tls: []
    #  - secretName: chart-example-tls
    #    hosts:
    #      - chart-example.local
  image:
    repository: quay.io/alfresco/alfresco-digital-workspace
    tag: 4.0.0-A.2
    pullPolicy: IfNotPresent
  env:
    APP_CONFIG_AUTH_TYPE: "BASIC"
    API_URL: "{protocol}//{hostname}{:port}"
    # APP_CONFIG_PLUGIN_MICROSOFT_ONLINE:
    # APP_CONFIG_MICROSOFT_ONLINE_OOI_URL:
    # APP_CONFIG_MICROSOFT_ONLINE_CLIENTID:
    # APP_CONFIG_MICROSOFT_ONLINE_AUTHORITY:
    # APP_CONFIG_MICROSOFT_ONLINE_REDIRECT:
  extraEnv: |-
    {{- if .Values.global.ai.enabled }}
    - name: APP_CONFIG_PLUGIN_AI_SERVICE
      value: '{{ .Values.global.ai.enabled }}'
    {{- end }}
  securityContext:
    runAsNonRoot: true
    runAsUser: 101
    capabilities:
      drop:
        - NET_RAW
        - ALL
  resources:
    requests:
      cpu: "0.25"
      memory: "256Mi"
    limits:
      cpu: "1"
      memory: "1024Mi"
alfresco-admin-app:
  nodeSelector: {}
  enabled: true
  nameOverride: "alfresco-cc"
  service:
    envType: frontend
  ingress:
    path: /control-center
    annotations:
      kubernetes.io/ingress.class: nginx
    tls: []
    #  - secretName: chart-example-tls
    #    hosts:
    #      - chart-example.local
  image:
    repository: quay.io/alfresco/alfresco-admin-app
    tag: 7.8.1
    pullPolicy: IfNotPresent
  env:
    APP_CONFIG_PROVIDER: "ECM"
    APP_CONFIG_AUTH_TYPE: "BASIC"
    API_URL: "{protocol}//{hostname}{:port}"
  securityContext:
    runAsNonRoot: true
    runAsUser: 101
    capabilities:
      drop:
        - NET_RAW
        - ALL
  resources:
    requests:
      cpu: "0.25"
      memory: "256Mi"
    limits:
      cpu: "1"
      memory: "1024Mi"
# -- Enable/Disable Alfresco Collaboration Connector for Microsoft 365
ooi:
  enabled: false
database:
  # -- Enable using an external database for Alfresco Content Services. Must disable `postgresql.enabled` when true.
  external: false
  # -- Postgresql jdbc driver name ex: org.postgresql.Driver. It should be available in the container image.
  driver:
  # -- External Postgresql database user
  user:
  # -- External Postgresql database password
  password:
  # -- External Postgresql jdbc url ex: `jdbc:postgresql://oldfashioned-mule-postgresql-acs:5432/alfresco`
  url:
  # -- An existing secret that contains DATABASE_USERNAME and DATABASE_PASSWORD keys.
  # When using embedded postgres you need to also set `postgresql.existingSecret`.
  existingSecretName:
postgresql:
  # -- Enable embedded postgres for Alfresco Content Services leveraging the postgresql Bitnami chart
  enabled: true
  replicaCount: 1
  nameOverride: postgresql-acs
  image:
    tag: 14.4.0
    pullPolicy: IfNotPresent
  commonAnnotations:
    application: alfresco-content-services
  # -- Name of existing secret to use for PostgreSQL passwords
  # The secret has to contain the keys postgresql-password which is the password for postgresqlUsername when it is
  # different of postgres, postgresql-postgres-password which will override postgresqlPassword.
  # The same secret must be set also as `database.existingSecretName` to provide the credentials to ACS.
  existingSecret:
  # -- Postgresql database user
  postgresqlUsername: alfresco
  # -- Postgresql database password
  postgresqlPassword: alfresco
  # -- Postgresql database name
  postgresqlDatabase: alfresco
  postgresqlExtendedConf:
    max_connections: 300
    log_min_messages: LOG
  primary:
    nodeSelector: {}
  persistence:
    # -- set the storageClass to use for dynamic provisioning.
    # setting it to null means "default storageClass".
    storageClass: null
    # -- provide an existing persistent volume claim name to persist SQL data
    # Make sure the root folder has the appropriate permissions/ownhership set.
    existingClaim: null
    subPath: "alfresco-content-services/database-data"
  resources:
    requests:
      cpu: "0.5"
      memory: "1500Mi"
    limits:
      cpu: "4"
      memory: "1500Mi"
postgresql-syncservice:
  name: postgresql-syncservice
  # -- Enable embedded postgres for Alfresco Sync service leveraging the postgresql Bitnami chart
  enabled: true
  replicaCount: 1
  nameOverride: postgresql-syncservice
  image:
    tag: 14.4.0
    pullPolicy: IfNotPresent
  commonAnnotations:
    application: alfresco-content-services
  postgresqlUsername: alfresco
  postgresqlPassword: admin
  postgresqlDatabase: syncservice-postgresql
  postgresqlExtendedConf:
    max_connections: 450
    log_min_messages: LOG
  service:
    port: 5432
  primary:
    nodeSelector: {}
  resources:
    requests:
      cpu: "0.5"
      memory: "1500Mi"
    limits:
      cpu: "4"
      memory: "1500Mi"
# -- Embedded ElasticSearch cluster powered by Bitnami charts
elasticsearch:
  # -- Enable the embedded ElasticSearch cluster
  enabled: false
  image: "docker.elastic.co/elasticsearch/elasticsearch-oss"
  replicas: 1
  clusterHealthCheckParams: "wait_for_status=yellow&timeout=1s"
s3connector:
  # -- Enable the S3 Connector
  # For a full list of properties on the S3 connector see:
  # https://docs.alfresco.com/s3connector/references/s3-contentstore-ref-config-props.html
  enabled: false
  config:
    bucketName:
    bucketLocation:
  secrets:
    accessKey:
    secretKey:
    encryption:
    awsKmsKeyId:
  # -- An existing kubernetes secret that contains ACCESSKEY, SECRETKEY, ENCRYPTION, KMSKEYID keys
  existingSecretName:
# -- For a full information of configuring the inbound email system, see
# https://docs.alfresco.com/content-services/latest/config/email/#manage-inbound-emails
email:
  server:
    enabled: false
    port: 1125
    domain:
    enableTLS: true
    hideTLS: false
    requireTLS: false
    auth:
      enabled: true
    connections:
      max: 3
    allowed:
      senders: .*
    blocked:
      senders:
  inbound:
    enabled: false
    unknownUser: anonymous
    emailContributorsAuthority: EMAIL_CONTRIBUTORS
  handler:
    folder:
      overwriteDuplicates: true
  ssl:
    secretName:
  initContainers:
    pemToKeystore:
      image:
        repository: registry.access.redhat.com/redhat-sso-7/sso71-openshift
        tag: 1.1-16
        pullPolicy: IfNotPresent
    pemToTruststore:
      image:
        repository: registry.access.redhat.com/redhat-sso-7/sso71-openshift
        tag: 1.1-16
        pullPolicy: IfNotPresent
    setPerms:
      image:
        repository: busybox
        tag: 1.35.0
        pullPolicy: IfNotPresent
# -- For a full information of configuring the outbound email system, see
# https://docs.alfresco.com/content-services/latest/config/email/#manage-outbound-emails
mail:
  # -- SMTP(S) host server to enable delivery of site invitations, activity notifications and workflow tasks by email
  host:
  port: 25
  protocol: smtps
  encoding: UTF-8
  username:
  password:
  # -- An existing kubernetes secret that contains MAIL_PASSWORD as per `mail.password` value
  existingSecretName:
  from:
    # -- Specifies the email address from which email notifications are sent
    default:
    enabled: false
  smtp:
    auth: true
    debug: false
    timeout: 30000
    starttls:
      enable: true
  smtps:
    auth: true
    starttls:
      enable: true
# -- For a full information of configuring the imap subsystem, see
# https://docs.alfresco.com/content-services/latest/config/email/#enable-imap-protocol-using-alfresco-globalproperties
imap:
  server:
    enabled: false
    host: "0.0.0.0"
    port: 1143
    imap:
      enabled: true
    imaps:
      enabled: true
      port: 1144
  mail:
    from:
      default:
    to:
      default:
metadataKeystore:
  # keystorePassword: ""
  # keyPassword: ""
  defaultKeystorePassword: "mp6yc0UD9e"
  defaultKeyPassword: "oKIWzVdEdA"
  existingSecretName:
alfresco-sync-service:
  messageBroker: *acs_messageBroker
  nodeSelector: {}
  syncservice:
    enabled: true
  image:
    repository: quay.io/alfresco/service-sync
    tag: 3.8.0
global:
  # A shared secret is now required in order to authenticate connections between
  # solr and repo (typically: tracking)
  tracking:
    # -- Select how solr and repo authenticate to each other
    # none: work only prior to acs 7.2 (and was the default)
    # secret: use a shared secret (to specify using `tracking.sharedsecret`)
    # https: to use mTLS auth (require appropriate certificate configuration)
    auth: secret
    # -- Shared secret to authenticate repo/solr traffic.
    # Strong enough secret can be generated with `openssl rand 20 -base64`
    sharedsecret: null
  # -- If a private image registry a secret can be defined and passed to
  # kubernetes, see:
  # https://github.com/Alfresco/acs-deployment/blob/a924ad6670911f64f1bba680682d266dd4ea27fb/docs/helm/eks-deployment.md#docker-registry-secret
  alfrescoRegistryPullSecrets:
  strategy:
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
  registryPullSecrets:
    - quay-registry-secret
  # -- Choose if you want AI capabilities (globally - including ADW AI plugin)
  ai:
    enabled: false
    # ai:
    #   aws:
    #   accessKey:
    #   secretAccessKey:
    #   region:
    #   s3Bucket:
    #   comprehendRoleARN:
  # -- Shared connections details for Elasticsearch/Opensearch, required when
  # alfresco-elasticsearch-connector.enabled is true
  elasticsearch:
    # -- The host where service is available. The provided default is for when
    # elasticsearch.enabled is true
    host: elasticsearch-master
    # -- The port where service is available
    port: 9200
    # -- Valid values are http or https
    protocol: http
    # -- The username required to access the service, if any
    user: null
    # -- The password required to access the service, if any
    password: null