Custom Resources

CodeInstance

Scope: Cluster
Version: v1

• apiVersion

  string

  APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
• kind

  string

  Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
• metadata

  object
• spec

  object

  CodeInstanceSpec defines the desired state of the CodeInstance.
  • spec.appConfig

    object

    AppConfig defines application-specific configurations.

    Default: {}

    • spec.appConfig.contentSecurityPolicy

      object

      Content Security Policy (CSP) settings for prevent XSS attack

      Default: {}

      • spec.appConfig.contentSecurityPolicy.directives

        object

        Content Security Policy directives

        Default: {}

        • spec.appConfig.contentSecurityPolicy.directives.child_src

          string
        • spec.appConfig.contentSecurityPolicy.directives.connect_src

          string
        • spec.appConfig.contentSecurityPolicy.directives.default_src

          string
        • spec.appConfig.contentSecurityPolicy.directives.font_src

          string
        • spec.appConfig.contentSecurityPolicy.directives.frame_ancestors

          string
        • spec.appConfig.contentSecurityPolicy.directives.frame_src

          string
        • spec.appConfig.contentSecurityPolicy.directives.img_src

          string
        • spec.appConfig.contentSecurityPolicy.directives.media_src

          string
        • spec.appConfig.contentSecurityPolicy.directives.object_src

          string
        • spec.appConfig.contentSecurityPolicy.directives.script_src

          string
        • spec.appConfig.contentSecurityPolicy.directives.style_src

          string
      • spec.appConfig.contentSecurityPolicy.enabled

        boolean

        Enable Content Security Policy

        Default: true

      • spec.appConfig.contentSecurityPolicy.reportOnly

        boolean

        Enable Content Security Policy in report-only mode

        Default: false

    • spec.appConfig.cronJobs

      object

      Periodically executed jobs, to self-heal GitLab, do external synchronizations, etc.

      Default: {}

    • spec.appConfig.customHtmlHeaderTags

      string

      Option to add some header tags for scripts and stylesheets

      Default:

    • spec.appConfig.defaultColorMode

      string

      Default color mode for GitLab UI

      Default: Light

      Allowed values: Light, Dark, Auto

    • spec.appConfig.ldap

      object

      Settings for LDAP integration with module
      • spec.appConfig.ldap.preventSignin

        boolean

        When LDAP web sign in is disabled, users don’t see an LDAP tab on the sign-in page

        Default: false

      • spec.appConfig.ldap.servers

        object

        Required value

        LDAP servers settings. Refer to documentation for more details

        Default: {}

    • spec.appConfig.omniauth

      object

      Omniauth defines OmniAuth configurations.
      • spec.appConfig.omniauth.allowBypassTwoFactor

        array of strings

        sign in without using two-factor authentication (2FA) with certain OmniAuth provider

        Default: []

      • spec.appConfig.omniauth.allowSingleSignOn

        array of strings

        AllowSingleSignOn defines the list of providers that can be used for single sign-on

        Default: []

      • spec.appConfig.omniauth.autoLinkLdapUser

        boolean

        automatically link OmniAuth users with existing GitLab users if their email addresses match

        Default: false

      • spec.appConfig.omniauth.autoLinkSamlUser

        boolean

        automatically link OmniAuth users with existing GitLab users if their email addresses match

        Default: false

      • spec.appConfig.omniauth.autoLinkUser

        array of strings

        automatically link OmniAuth users with existing GitLab users if their email addresses match

        Default: []

      • spec.appConfig.omniauth.autoSignInWithProvider

        string

        to redirect login requests to your OmniAuth provider for authentication
      • spec.appConfig.omniauth.blockAutoCreatedUsers

        boolean

        Places automatically-created users in a pending approval state (unable to sign in) until they are approved by an administrator

        Default: true

      • spec.appConfig.omniauth.enabled

        boolean

        Enable OmniAuth

        Default: false

      • spec.appConfig.omniauth.externalProviders

        array of strings

        Enables you to define which OmniAuth providers you want to be external, so that all users creating accounts, or signing in through these providers are unable to access internal projects

        Default: []

      • spec.appConfig.omniauth.providers

        array of objects

        The provider names are available in the supported providers list

        Default: []

        • spec.appConfig.omniauth.providers.args

          object
        • spec.appConfig.omniauth.providers.icon

          string
        • spec.appConfig.omniauth.providers.label

          string
        • spec.appConfig.omniauth.providers.name

          string

          Allowed values: alicloud, atlassioan_oauth2, auth0, cognito, azute_activedirectory_v2, bitbucket, oauth2_generic, github, gitlab, google_oauth2, jwt, kerberos, openid_connect, salesforce, saml, shibboleth

      • spec.appConfig.omniauth.syncProfileAttributes

        array of strings

        List of profile attributes to sync from the provider when signing in

        Default: [ "name", "email" ]

      • spec.appConfig.omniauth.syncProfileFromProvider

        array of strings

        List of provider names that GitLab should automatically sync profile information from

        Default: []

    • spec.appConfig.rackAttack

      object

      RackAttack contains basic authentication settings.
      • spec.appConfig.rackAttack.gitlabBasicAuth

        object

        GitlabBasicAuth defines rate-limiting configurations.
        • spec.appConfig.rackAttack.gitlabBasicAuth.banTime

          integer

          Allowed values: 0 <= X

        • spec.appConfig.rackAttack.gitlabBasicAuth.findTime

          integer

          Allowed values: 0 <= X

        • spec.appConfig.rackAttack.gitlabBasicAuth.ipWhitelist

          array of strings
        • spec.appConfig.rackAttack.gitlabBasicAuth.maxRetry

          integer

          Allowed values: 0 <= X

    • spec.appConfig.signInEnabled

      boolean

      whether to enable sign-in page or not

      Default: true

    • spec.appConfig.signUpEnabled

      boolean

      whether to enable sign-up for new users or not

      Default: false

    • spec.appConfig.usernameChangingEnabled

      boolean

      allow username changes for existing users

      Default: false

  • spec.backup

    object

    Backup defines backup configurations.

    Default: {}

    • spec.backup.backupBeforeUpdate

      boolean

      Automatic backup creation before module update

      Default: false

    • spec.backup.backupStorageGb

      integer

      expected overall size of backups (tar archive) to tune up underlying storage

      Default: 3

      Allowed values: 1 <= X

    • spec.backup.cronSchedule

      string

      Cron schedule for automatic backups

      Default: 0 0 1 * *

    • spec.backup.enabled

      boolean

      Enable automatic backups

      Default: false

    • spec.backup.nodeSelector

      object

      kubernetes selector to choose node where to run backup process from (by toolbox)
    • spec.backup.persistentVolumeClaim

      object

      section to describe params of persistent k8s storage used during backup and restore

      Default: {}

      • spec.backup.persistentVolumeClaim.enabled

        boolean

        whether to use persistent volumes. Otherwise emptyDir will be used

        Default: false

      • spec.backup.persistentVolumeClaim.storageClass

        string

        whether to use specific k8s storageClass for persistence volumes
    • spec.backup.restoreFromBackupMode

      Deprecated

      boolean

      Default: false

    • spec.backup.s3

      object

      prarams of remote object storage that will keep your backups
      • spec.backup.s3.bucketName

        string

        name of the backet where backups will be stored

        Default: d8-code-backups

      • spec.backup.s3.external

        object
        • spec.backup.s3.external.accessKey

          string

          access key for the bucket
        • spec.backup.s3.external.endpoint

          string

          endpoint for the bucket

          Default:

        • spec.backup.s3.external.provider

          string

          Required value

          object storage provider

          Allowed values: Generic, YCloud

        • spec.backup.s3.external.region

          string

          bucket’s region

          Default:

        • spec.backup.s3.external.secretKey

          string

          secret key for the bucket
      • spec.backup.s3.mode

        string

        whether to use external object storage or internal one

        Default: External

      • spec.backup.s3.tmpBucketName

        string

        name of the temp bucket where backups will be stored before upload

        Default: d8-code-tmp

    • spec.backup.skipComponents

      array of strings

      List of components to skip during backup

      Default: [ "Artifacts" ]

      • spec.backup.skipComponents.Element of the array

        string

        Allowed values: Db, Repositories, Uploads, Builds, Artifacts, Pages, Lfs, TerraformState, Registry, Packages, CiSecureFiles, ExternalDiffs

    • spec.backup.tolerations

      array of objects

      Tolerations for backup pod(toolbox)

      Default: []

      • spec.backup.tolerations.effect

        string
      • spec.backup.tolerations.key

        string
      • spec.backup.tolerations.operator

        string
      • spec.backup.tolerations.tolerationSeconds

        integer
      • spec.backup.tolerations.value

        string
  • spec.features

    object

    Features defines additional feature configurations.

    Default: {}

    • spec.features.mail

      object

      Mail defines configurations for email-related features.

      Default: {}

      • spec.features.mail.incomingEmail

        object

        MailIncomingEmail defines incoming email configurations for Mail.

        Default: { "address": "", "enabled": false, "host": "", "password": "", "user": "" }

        • spec.features.mail.incomingEmail.address

          string

          Required value

          The email address to reference the item being replied to (example - gitlab-incoming+%{key}@gmail.com). Note that the +%{key} suffix should be included in its entirety within the email address and not replaced by another value.

          Default:

        • spec.features.mail.incomingEmail.enabled

          boolean

          Required value

          enable incoming email

          Default: false

        • spec.features.mail.incomingEmail.host

          string

          Required value

          Host for IMAP

          Default: imap.gmail.com

        • spec.features.mail.incomingEmail.password

          string

          Required value

          IMAP password

          Default:

        • spec.features.mail.incomingEmail.port

          integer

          Port for IMAP

          Default: 993

        • spec.features.mail.incomingEmail.serviceDeskEmail

          object

          MailServiceDeskEmail defines incoming email configurations for Mail.

          Default: { "address": "", "enabled": false, "host": "", "password": "", "user": "" }

          • spec.features.mail.incomingEmail.serviceDeskEmail.address

            string

            Required value

            The email address to reference the item being replied to (example - project_contact+%{key}@gmail.com)

            Default:

          • spec.features.mail.incomingEmail.serviceDeskEmail.enabled

            boolean

            Required value

            Enable Service Desk email

            Default: false

          • spec.features.mail.incomingEmail.serviceDeskEmail.host

            string

            Required value

            Host for IMAP

            Default: imap.gmail.com

          • spec.features.mail.incomingEmail.serviceDeskEmail.password

            string

            Required value

            Password for IMAP

            Default:

          • spec.features.mail.incomingEmail.serviceDeskEmail.port

            integer

            Port for IMAP

            Default: 993

          • spec.features.mail.incomingEmail.serviceDeskEmail.ssl

            boolean

            Whether IMAP server uses SSL

            Default: true

          • spec.features.mail.incomingEmail.serviceDeskEmail.startTls

            boolean

            Whether IMAP server uses StartTLS

            Default: false

          • spec.features.mail.incomingEmail.serviceDeskEmail.user

            string

            Required value

            Username for IMAP authentication

            Default:

        • spec.features.mail.incomingEmail.ssl

          boolean

          Whether IMAP server uses SSL

          Default: true

        • spec.features.mail.incomingEmail.startTls

          boolean

          Whether IMAP server uses StartTLS

          Default: false

        • spec.features.mail.incomingEmail.user

          string

          Required value

          Username for IMAP authentication

          Default:

      • spec.features.mail.outgoingEmail

        object

        Default: { "displayName": "Deckhouse", "from": "no-reply@deckhouse.io", "replyTo": "no-reply@deckhouse.io" }

        • spec.features.mail.outgoingEmail.displayName

          string

          Required value

          Name that appears as the sender for emails from GitLab

          Default: Deckhouse Code

        • spec.features.mail.outgoingEmail.from

          string

          Required value

          Email address that appears as the sender for emails from GitLab

          Default: deckhouse.code@example.com

        • spec.features.mail.outgoingEmail.replyTo

          string

          Required value

          Reply-to email listed in emails from GitLab

          Default: noreply@example.com

        • spec.features.mail.outgoingEmail.smtp

          object

          MailSMTP defines SMTP-related configurations for Mail.

          Default: {}

          • spec.features.mail.outgoingEmail.smtp.address

            string

            Hostname or IP of the remote mail server

            Default: smtp.mailgun.org

          • spec.features.mail.outgoingEmail.smtp.authentication

            string

            Type of SMTP authentication (Plain, Login, CramMd5, or None for no authentication)

            Allowed values: None, Plain, Login, CramMd5

          • spec.features.mail.outgoingEmail.smtp.domain

            string

            Optional HELO domain for SMTP

            Default:

          • spec.features.mail.outgoingEmail.smtp.enabled

            boolean

            enable outgoing email

            Default: false

          • spec.features.mail.outgoingEmail.smtp.opensslVerifyMode

            string

            TLS verification mode (“None”, “Peer”, “ClientOnce”, or “FailIfNoPeerCert”)

            Default: Peer

            Allowed values: None, Peer, ClientOnce, FailIfNoPeerCert

          • spec.features.mail.outgoingEmail.smtp.password

            string

            SMTP password

            Default:

          • spec.features.mail.outgoingEmail.smtp.port

            integer

            Port for SMTP

            Default: 2525

          • spec.features.mail.outgoingEmail.smtp.starttlsAuto

            boolean

            Use STARTTLS if enabled on the mail server

            Default: false

          • spec.features.mail.outgoingEmail.smtp.tls

            boolean

            Enables SMTP/TLS (SMTPS - SMTP over direct TLS connection)

            Default: false

          • spec.features.mail.outgoingEmail.smtp.username

            string

            Username for SMTP authentication https

            Default:

        • spec.features.mail.outgoingEmail.subjectSuffix

          string

          Suffix on the subject of all outgoing email from GitLab

          Default:

    • spec.features.pages

      object

      Pages defines configurations for GitLab Pages.

      Default: {}

      • spec.features.pages.enabled

        boolean

        whether to enable GitLab Pages component

        Default: false

      • spec.features.pages.s3

        object

        StorageS3 defines S3 storage configurations.
        • spec.features.pages.s3.bucketPrefix

          string

          prefix for bucket name

          Default: d8-code

        • spec.features.pages.s3.external

          object

          S3External defines external S3 storage settings.
          • spec.features.pages.s3.external.accessKey

            string

            access key for the bucket
          • spec.features.pages.s3.external.endpoint

            string

            bucket endpoint

            Default:

          • spec.features.pages.s3.external.provider

            string

            Required value

            bucket provider name

            Allowed values: Generic, YCloud

          • spec.features.pages.s3.external.region

            string

            bucket region

            Default:

          • spec.features.pages.s3.external.secretKey

            string

            bucket secret key
          • spec.features.pages.s3.external.storageOptions

            object

            Default: {}

            • spec.features.pages.s3.external.storageOptions.serverSideEncryption

              string

              Encryption mode for S3 bucket (AES256 or AwsKms)

              Allowed values: AES256, AwsKms

            • spec.features.pages.s3.external.storageOptions.serverSideEncryptionKmsKeyId

              string

              Amazon Resource Name. Only needed when AwsKms is used in serverSideEncryption.
        • spec.features.pages.s3.mode

          string

          whether to use external or internal object storage for Pages component

          Default: External

          Allowed values: Internal, External

    • spec.features.registry

      object

      Registry defines configurations for GitLab Registry.

      Default: {}

      • spec.features.registry.enabled

        boolean

        whether registry service enabled or not

        Default: false

      • spec.features.registry.ingress

        object

        defines the network-related configurations for registry

        Default: {}

        • spec.features.registry.ingress.annotations

          object

          map of additional annotations to be populated for registry service
        • spec.features.registry.ingress.hostname

          string

          top-level prefix for registry hostname

          Default: code.

        • spec.features.registry.ingress.https

          object

          HttpsConfig specifies the HTTPS configuration.
          • spec.features.registry.ingress.https.certManager

            object

            CertManager contains CertManager-related parameters.
            • spec.features.registry.ingress.https.certManager.clusterIssuerName

              string

              name of cluster issuer of SSL certificates

              Default: letsencrypt

          • spec.features.registry.ingress.https.customCertificate

            object

            CustomCertificate contains parameters for custom certificate usage.
            • spec.features.registry.ingress.https.customCertificate.secretName

              string

              name of secret where custom certificate is stored
          • spec.features.registry.ingress.https.mode

            string

            Default: CertManager

            Allowed values: CertManager, CustomCertificate, Global

      • spec.features.registry.maintenance

        object

        RegistryMaintenance defines maintenance-related configurations for Registry.

        Default: {}

        • spec.features.registry.maintenance.readOnly

          object

          ReadOnlyMaintenance enables or disables read-only mode.

          Default: {}

          • spec.features.registry.maintenance.readOnly.enabled

            boolean

            Enable read-only mode for registry for maintenance purposes

            Default: false

        • spec.features.registry.maintenance.uploadPurging

          object

          UploadPurging defines configurations for purging uploads.

          Default: {}

          • spec.features.registry.maintenance.uploadPurging.age

            string

            age thresholds for artifacts to be deleted. Measured in hours

            Default: 168h

          • spec.features.registry.maintenance.uploadPurging.dryrun

            boolean

            whether to use in test / dry-run mode or not

            Default: false

          • spec.features.registry.maintenance.uploadPurging.enabled

            boolean

            whether to enable uploadPurging or not. Disabled while in readOnly mode

            Default: true

          • spec.features.registry.maintenance.uploadPurging.interval

            string

            interval of run

            Default: 24h

      • spec.features.registry.s3

        object

        StorageS3 defines S3 storage configurations.

        Default: {}

        • spec.features.registry.s3.bucketName

          string

          name of registry’s bucket

          Default: d8-code-registry

        • spec.features.registry.s3.external

          object
          • spec.features.registry.s3.external.accessKey

            string

            access key for the bucket
          • spec.features.registry.s3.external.endpoint

            string

            bucket endpoint

            Default:

          • spec.features.registry.s3.external.provider

            string

            Required value

            s3 storage provider name

            Allowed values: Generic, YCloud

          • spec.features.registry.s3.external.region

            string

            bucket region

            Default:

          • spec.features.registry.s3.external.secretKey

            string

            secret key for the bucket
        • spec.features.registry.s3.mode

          string

          whether use external or internal object storage for Registry component

          Default: External

          Allowed values: Internal, External

  • spec.gitData

    object

    GitData defines Git-related data configurations.
    • spec.gitData.resources

      object

      ResourceList is a set of (resource name, quantity) pairs.
    • spec.gitData.storageClass

      string

      kubernetes storageClass to be used for persistence volumes
    • spec.gitData.storagePerReplicaGb

      integer

      size of all your git data. Needed to calculate size of Volumes for each replica

      Default: 1

      Allowed values: 1 <= X

  • spec.network

    object

    NetworkSettings contains the network-related configurations.

    Default: {}

    • spec.network.gitSsh

      object

      GitSshConfig contains SSH-related configurations.
      • spec.network.gitSsh.hostname

        string

        Define hostname where Git SSH will be available. If prefix is stated, it defaults to cluster domain template. Set it to ' to inherit UI hostname. Be sure that Ingress Nginx controller and SSH Service share same IP address.

        Default: code-ssh.

      • spec.network.gitSsh.service

        object

        GitSshService specifies the service type for Git SSH.
        • spec.network.gitSsh.service.annotations

          object

          map of additional annotations to be populated for shell deployment
        • spec.network.gitSsh.service.nodePort

          integer

          nodePort used to expose your service. Applicable only for service.type=NodePort

          Default: 32022

          Allowed values: 1024 <= X <= 65535

        • spec.network.gitSsh.service.type

          string

          type of kubernetes service for exposing your shell component. For singleNode cluster nodePort is reasonable, otherwise LoadBalancer is recommended

          Allowed values: LoadBalancer, NodePort, ClusterIP

    • spec.network.ingressClass

      string

      Ingress class to use in module. If empty defaults to deckhouse global ingress class

      Default:

    • spec.network.useOwnLoadBalancer

      boolean

      If true define one LoadBalance service for both Git SSH and UI.

      Default: false

    • spec.network.web

      object

      WebConfig defines the web-related configurations.
      • spec.network.web.annotations

        object

        map of additional annotations to be populated for webservice deployment
      • spec.network.web.hostname

        string

        Define hostname where UI will be available. If prefix is stated, it defaults to cluster domain template Warning! Be sure that https mode and TLS certificate are valid for given hostname

        Default: code.

      • spec.network.web.https

        object

        HttpsConfig specifies the HTTPS configuration.
        • spec.network.web.https.certManager

          object

          CertManager contains CertManager-related parameters.
          • spec.network.web.https.certManager.clusterIssuerName

            string

            name of the clusterIssuer to be used for certificate generations

            Default: letsencrypt

        • spec.network.web.https.customCertificate

          object

          CustomCertificate contains parameters for custom certificate usage
          • spec.network.web.https.customCertificate.secretName

            string

            name of secret where custom certificate is tored
        • spec.network.web.https.mode

          string

          way you store/issue certificate. Might be custom/certManager/global

          Default: CertManager

          Allowed values: CertManager, CustomCertificate, Global

  • spec.scaling

    object

    scaling-related configurations

    Default: {}

    • spec.scaling.highAvailability

      boolean

      Switch to enable the high availability mode.

      Default: false

    • spec.scaling.targetUserCount

      integer

      how many users are expecte to use the app

      Default: 100

      Allowed values: 10, 100, 300, 500, 1000

  • spec.storages

    object

    Required value

    Storages defines the storage-related configurations.
    • spec.storages.postgres

      object

      Required value

      StoragePostgres defines Postgres database configurations.
      • spec.storages.postgres.external

        object

        PostgresExternal defines external Postgres settings.
        • spec.storages.postgres.external.database

          string

          Required value

          name of the main database
        • spec.storages.postgres.external.host

          string

          Required value

          FQDN address of database server

          Default: localhost

        • spec.storages.postgres.external.password

          string

          password for main database
        • spec.storages.postgres.external.port

          integer

          port of the database server

          Default: 5432

        • spec.storages.postgres.external.praefectDatabase

          string

          name of the praefect database

          Default:

        • spec.storages.postgres.external.praefectPassword

          string

          password for praefect database
        • spec.storages.postgres.external.praefectUsername

          string

          username for praefect database

          Default: postgres

        • spec.storages.postgres.external.sslMode

          string

          SSL mode priority for database connection

          Allowed values: disabled, allow, prefer, require, verify-ca, verify-full

        • spec.storages.postgres.external.username

          string

          Required value

          username for main database

          Default: postgres

      • spec.storages.postgres.mode

        string

        whether to use external database or internal one

        Allowed values: Internal, External

    • spec.storages.redis

      object

      Required value

      StorageRedis defines Redis configurations.
      • spec.storages.redis.external

        object

        RedisExternal defines external Redis settings.
        • spec.storages.redis.external.auth

          object

          Required value

          RedisAuth defines authentication settings for Redis.
          • spec.storages.redis.external.auth.enabled

            boolean

            Required value

            redis auth enabled

            Default: false

          • spec.storages.redis.external.auth.password

            string

            redis auth password
          • spec.storages.redis.external.auth.username

            string

            redis auth username
        • spec.storages.redis.external.host

          string

          FQDN address of redis server

          Default:

        • spec.storages.redis.external.masterName

          string

          name of the master node in case of sentinel
        • spec.storages.redis.external.port

          integer

          redis server port

          Default: 6379

        • spec.storages.redis.external.scheme

          string

          redis connection scheme

          Default: redis

          Allowed values: redis, rediss, tcp

        • spec.storages.redis.external.sentinels

          array of objects
          • spec.storages.redis.external.sentinels.host

            string
          • spec.storages.redis.external.sentinels.port

            integer
        • spec.storages.redis.external.serverCA

          string

          CA certificate for redis server
      • spec.storages.redis.mode

        string

        Required value

        whether to use external redis or internal one

        Allowed values: Internal, External

    • spec.storages.s3

      object

      Required value

      defines S3 storage configurations.
      • spec.storages.s3.bucketNames

        object

        S3BucketNames defines bucket naming conventions for S3 storage

        Default: {}

        • spec.storages.s3.bucketNames.artifacts

          string

          name of the bucket for artifacts

          Default: d8-code-artifacts

        • spec.storages.s3.bucketNames.ciSecureFiles

          string

          name of the bucket for ci secure files like CI secrets

          Default: d8-code-ci-secure-files

        • spec.storages.s3.bucketNames.dependencyProxy

          string

          name of the bucket for dependecy proxy

          Default: d8-code-dependency-proxy

        • spec.storages.s3.bucketNames.externalDiffs

          string

          name of the bucket for mr diffs

          Default: d8-code-mr-diffs

        • spec.storages.s3.bucketNames.lfs

          string

          name of the bucket for git-lfs

          Default: d8-code-git-lfs

        • spec.storages.s3.bucketNames.packages

          string

          name of the bucket for packages

          Default: d8-code-packages

        • spec.storages.s3.bucketNames.terraformState

          string

          name of the bucket for terraform states

          Default: d8-code-terraform-state

        • spec.storages.s3.bucketNames.uploads

          string

          name of the bucket for uploads

          Default: d8-code-uploads

      • spec.storages.s3.external

        object

        defines external S3 storage settings.
        • spec.storages.s3.external.accessKey

          string

          access key for the bucket
        • spec.storages.s3.external.endpoint

          string

          bucket endpoint

          Default:

        • spec.storages.s3.external.provider

          string

          Required value

          s3 storage provider name

          Allowed values: Generic, YCloud

        • spec.storages.s3.external.proxyDownload

          boolean

          Option allows to reduce egress traffic as this allows clients to download directly from remote storage instead of proxying all data

          Default: true

        • spec.storages.s3.external.region

          string

          bucket region

          Default:

        • spec.storages.s3.external.secretKey

          string

          secret key for the bucket
        • spec.storages.s3.external.storageOptions

          object

          Default: {}

          • spec.storages.s3.external.storageOptions.serverSideEncryption

            string

            Encryption mode for S3 bucket (AES256 or AwsKms)

            Allowed values: AES256, AwsKms

          • spec.storages.s3.external.storageOptions.serverSideEncryptionKmsKeyId

            string

            Amazon Resource Name. Only needed when AwsKms is used in serverSideEncryption.
      • spec.storages.s3.mode

        string

        Default: External

        Allowed values: Internal, External