Repository navigation
[FEATURE] Base Helm Values for Installers #3186
Description
Defines the value paths, so provider charts and operator values files can be written before the charts exist.
Owner: Helm workstream (#3170). Consumers: GKE workstream (ai-on-gke/substrate-gke#158), sizing workstream (#3165), operators.
Specification (Proposed). Every value maps to one setting in #3172 or #3168.
| Value | Setting |
|---|---|
images.repository, images.tag |
Image coordinates (#3664) |
auth.expectedJWTIssuer |
Service-account token issuer |
auth.actorJWTIssuer |
Actor JWT issuer |
postgres.bundled, postgres.existingSecret, postgres.serverCASecret |
Bundled versus external database; connection Secret; server CA |
storage.backend, storage.pluginImage, storage.env |
Object-store backend |
telemetry.otlpEndpoint, telemetry.workerExporters.{logs,traces,metrics}, telemetry.workerLogFormat |
OpenTelemetry and worker logging |
atelet.imageCredentialProvider.{enabled,binDir,configFile} |
Image credential provider |
credentialProvider.{enabled,name}, credentialProvider.namespacePolicy |
Egress credential provider |
sandbox.assets |
SandboxConfig asset URLs |
bootstrap.enabled |
Bootstrap hooks |
serviceAccounts.<name>.annotations |
Workload identity |
| Sizing values | #3168 |
Enforcement. values.schema.json is generated from ate-setup's settings registry, and CI fails when it is stale. A test renders each documented value and asserts it changes exactly its setting.
Blocked by decisions
atelet.imageCredentialProviderdefaults: credential-provider default ([Bug]: atelet credential-provider configuration is hard-coded to GKE host paths #2669, [FEATURE] atelet image credential provider becomes a documented install setting #3667).- Sizing
nullsemantics: which fields may be unmanaged ([FEATURE] Add Sizing Contract for--componentbased sizing (kustomize) #3168).
Schema generation: #3683. Contracts epic: #3160.
Parent Issue: #3170
Reacted by zerosnacks
Activity