eks-test-values.yaml

# Values overrides for EKS pipelines
# These values inherit and override values from tests/test-values.yaml
networkPolicies:
  controlPlaneCidr: 10.0.0.0/8

istio:
  values:
    global: 
      proxy:
        resources:
          requests:
            cpu: 100m
            memory: 256Mi
          limits: null
    defaultConfig:
      proxyMetadata:
        ISTIO_META_DNS_CAPTURE: "true"
        ISTIO_META_DNS_AUTO_ALLOCATE: "true"
    bbtests:
      cypress:
        artifacts: false

neuvector:
  values:
    k3s:
      enabled: false
    containerd:
      enabled: true
    bbtests:
      cypress:
        artifacts: false

clusterAuditor:
  values:
    resources:
      requests:
        cpu: 300m
        memory: 300Mi
      limits: null
    bbtests:
      cypress:
        artifacts: false
    
gatekeeper:
  values:
    replicas: 1
    controllerManager:
      resources:
        limits: null
        requests:
          cpu: 175m
          memory: 512Mi
    bbtests:
      cypress:
        artifacts: false

kyverno:
  values:
    replicaCount: 3
    resources:
      limits: null
      requests:
        cpu: 500m
        memory: 384Mi
    bbtests:
      cypress:
        artifacts: false

elasticsearchKibana:
  values:
    bbtests:
      cypress:
        artifacts: false
    elasticsearch:
      master:
        count: 1
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: .5
          limits: null
      data:
        count: 2
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: .5
          limits: null

loki:
  values:
    bbtests:
      cypress:
        artifacts: false
    loki-simple-scalable:
      write:
        resources:
          limits: null
      read:
        resources:
          limits: null

tempo:
  values:
    bbtests:
      cypress:
        artifacts: false
    tempo:
      resources:
        limits: null
        requests:
          cpu: 500m
          memory: 1024Mi
    persistence:
      size: 5Gi
    tempoQuery:
      resources:
        limits: null
        requests:
          cpu: 300m
          memory: 256Mi
    opentelemetryCollector:
      resources:
        limits: null
        requests:
          cpu: 300m
          memory: 256Mi

monitoring:
  values:
    bbtests:
      cypress:
        artifacts: false
    prometheus:
      prometheusSpec:
        additionalScrapeConfigs: []
        podMetadata:
          annotations:
            vault.hashicorp.com/agent-inject: "false"
            vault.hashicorp.com/agent-init-first: "true"
            vault.hashicorp.com/agent-inject-token: "true"
            vault.hashicorp.com/role: "prometheus"
            vault.hashicorp.com/agent-pre-populate: "false"
### COMMENTED OUT DUE TO ISSUES WITH THANOS-SIDECAR CONTAINER AND PROMETHEUS ###
#            proxy.istio.io/config: |
#              holdApplicationUntilProxyStarts: true
        resources:
          requests:
            cpu: 300m
            memory: 5Gi
          limits: null
    kube-state-metrics:
      resources:
        requests:
          cpu: 100m
          memory: 128Mi
        limits: null
    prometheus-node-exporter:
      resources:
        requests:
          cpu: 200m
          memory: 50Mi
        limits: null
    grafana:
      downloadDashboards:
        resources:
          limits: null
          requests:
            cpu: 20m
            memory: 20Mi

twistlock:
  values:
    bbtests:
      cypress:
        artifacts: false
    console:
      persistence:
        size: 5Gi

jaeger:
  values:
    bbtests:
      cypress:
        artifacts: false

kiali:
  values:
    bbtests:
      cypress:
        artifacts: false

grafana:
  values:
    bbtests:
      cypress:
        artifacts: false

# Addons are toggled based on labels in CI
addons:
  argocd:
    values:
      bbtests:
        cypress:
          artifacts: false
      controller:
        resources:
          requests:
            cpu: 500m
            memory: 2Gi
          limits: null
      dex:
        resources:
          requests:
            cpu: 10m
            memory: 128Mi
          limits: null
      redis-bb:
        master:
          persistence:
            size: 512Mi
        replica:
          persistence:
            size: 512Mi
      redis:
        resources:
          requests:
            cpu: 50m
            memory: 256Mi
          limits: null
      server:
        resources:
          requests:
            cpu: 20m
            memory: 128Mi
          limits: null
      repoServer:
        resources:
          requests:
            cpu: 100m
            memory: 256Mi
          limits: null

  authservice:
    values:
      bbtests:
        cypress:
          artifacts: false
      resources:
        requests:
          cpu: 100m
          memory: 256Mi
        limits: null
      redis:
        master:
          persistence:
            size: 256Mi
        replica:
          persistence:
            size: 256Mi

  gitlab:
    flux:
      timeout: 30m
    values:
      bbtests:
        cypress:
          artifacts: false
      gitlab-runner:
        resources:
          requests:
            cpu: 20m
          limits: null
      gitlab:
        gitaly:
          persistence:
            size: 256Mi
          resources:
            ## values raised to help pass CI after default values for gitaly are fixed then can revert to original request.
            #requests:
            #  cpu: 50m
            #limits: null
            requests:
              cpu: 400m
              memory: 600Mi
            limits: null
        shared-secrets:
          resources:
            requests:
              cpu: 30m
            limits: null
        migrations:
          resources:
            requests:
              cpu: 30m
            limits: null
        toolbox:
          persistence:
            size: 256Mi
          resources:
            requests:
              cpu: 20m
            limits: null
      postgresql:
        persistence:
          size: 256Mi
        metrics:
          resources:
            requests:
              cpu: 50m
            limits: null
      minio:
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: 100m
          limits: null
      redis:
        master:
          persistence:
            size: 256Mi
        slave:
          persistence:
            size: 256Mi

  gitlabRunner:
    values:
      bbtests:
        cypress:
          artifacts: false
      resources:
        requests:
          memory: 128Mi
          cpu: 100m
        limits: null

  anchore:
    values:
      bbtests:
        cypress:
          artifacts: false
      ensureDbJobs:
        resources:
          requests:
            cpu: 100m
            memory: 256Mi
          limits: null
      sso:
        resources:
          requests:
            cpu: 100m
            memory: 256Mi
          limits: null
      postgresql:
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: 100m
            memory: 256Mi
          limits: null
        metrics:
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
            limits: null
      anchoreAnalyzer:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchoreApi:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchoreCatalog:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchorePolicyEngine:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchoreSimpleQueue:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchoreEngineUpgradeJob:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchore-feeds-db:
        resources:
          requests:
            cpu: 100m
            memory: 256Mi
          limits: null
        metrics:
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
            limits: null
      anchoreEnterpriseFeeds:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchoreEnterpriseFeedsUpgradeJob:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchoreEnterpriseRbac:
        authResources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
        managerResources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchoreEnterpriseReports:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchoreEnterpriseNotifications:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchoreEntperpiseUi:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
      anchoreEnterpriseEngineUpgradeJob:
        resources:
          requests:
            cpu: 200m
            memory: 512Mi
          limits: null
    
  sonarqube:
    values:
      bbtests:
        cypress:
          artifacts: false
      resources:
        requests:
          cpu: 200m
          memory: 512Mi
        limits: null
      persistence:
        size: 5Gi
      postgresql:
        persistence:
          size: 256Mi
        resources:
          requests:
            cpu: 100m
            memory: 200Mi
          limits: null

  minio:
    values:
      bbtests:
        cypress:
          artifacts: false
      tenant:
        pools:
        - name: pool-0
          servers: 3
          volumesPerServer: 4
          size: 256Mi
          resources:
            requests:
              cpu: 250m
              memory: 512Mi
            limits: null
          securityContext:
            runAsUser: 1001
            runAsGroup: 1001
            fsGroup: 1001
            runAsNonRoot: true
          containerSecurityContext:
            runAsUser: 1001
            runAsGroup: 1001
            runAsNonRoot: true
            capabilities:
              drop:
              - ALL

  mattermost:
    values:
      bbtests:
        cypress:
          artifacts: false
      postgresql:
        persistence:
          size: 256Mi
      resources:
        requests:
          cpu: 200m
          memory: 256Mi
        limits: null
      minio:
        tenants:
          pools:
          - name: pool-0
            servers: 1
            volumesPerServer: 4
            size: 256Mi
            resources:
              requests:
                cpu: 250m
                memory: 512Mi
              limits: null
            securityContext:
              runAsUser: 1001
              runAsGroup: 1001
              fsGroup: 1001
              runAsNonRoot: true
            containerSecurityContext:
              runAsUser: 1001
              runAsGroup: 1001
              runAsNonRoot: true
            
  nexusRepositoryManager:
    values:
      bbtests:
        cypress:
          artifacts: false
      persistence:
        # Do NOT set this below 5Gi, nexus will fail to boot
        storageSize: 5Gi
      nexus:
        resources:
          requests:
            cpu: 100m
            memory: 1500Mi
          limits: null
  
  keycloak:
    values:
      bbtests:
        cypress:
          artifacts: false
      resources:
        requests:
          cpu: 100m
          memory: 256Mi
        limits: null

  harbor:
    values:
      bbtests:
        cypress:
          artifacts: false
    
  holocron:
    values:
      bbtests:
        cypress:
          artifacts: false

  fortify:
    values:
      bbtests:
        cypress:
          artifacts: false

  minioOperator:
    values:
      bbtests:
        cypress:
          artifacts: false