## ## Global options relating to Develocity as a whole rather than a specific subsystem. ## # # global: # # ## ## Public URL ## # # hostname: ge.example.com # Hostname used to access the web interface by web browsers, etc. Required. # externalSSLTermination: true # If we are using HTTPS but not with termination in the built-in ingress or proxy. Default false. # externalPort: 8180 # Set to specify the external port the installation is available on. Only required if differs from `ingress.port.http(s)`. # # ## ## Develocity license settings ## ## # # license: # file: ABCD1234 # Full license file content as a multiline string or Base64 data part of the license. Can also be set using --set-file global.license.file=/path/to/file # # ## ## Image pull settings ## # # image: # registry: registry.example.com/gradle-enterprise # Registry to pull images from. The default is 'registry.gradle.com/develocity'. # tag: some-custom-tag # Tag to pull. Default is the Develocity version. # imagePullPolicy: Always # Default IfNotPresent. # # ## ## Storage settings ## ## By default Develocity will store data under /opt/gradle. ## This base directory can be configured, and separate directories for backups and logs can also be set. ## # # storage: # directory: /mnt/big-volume/ge # Default /opt/gradle # logs: # directory: /var/log/gradle-enterprise # Default (global.storage.directory)/logs # backup: # directory: /mnt/vol2/ge-backups # Default (global.storage.directory)/backups # ## ## Unattended installation ## ## These cover autoconfiguring aspects of Develocity that are controlled by the Administration section of the application. ## Contact Gradle Support for assistance with unattended installation. ## WARNING: Making changes to the unattended configuration will *overwrite* any configuration changes made in the user interface. ## See https://gradle.com/help/helm-admin-unattended-configuration for details. ## # # unattended: # key: oijqefoijqOIQJFoijefoiqjfoij # Encryption key for secrets in the configuration, if any. Default none. # configuration: # version: 12 # advanced: # app: # heapMemory: 4608 # offHeapMemory: 1024 # params: {} # scanPayloadCacheSize: 2048 # appBackgroundProcessor: # heapMemory: 3584 # offHeapMemory: 1024 # params: {} # distributionBroker: # heapMemory: 1024 # offHeapMemory: 768 # params: {} # auth: # anonymousPermissions: # - viewScan # - publishScan # external: null # projects: # acceptAnonymousProjects: true # enabled: false # roles: # admin: # assignToNewExternalUsers: false # description: Administer Develocity # displayName: Administrator # identityProviderAttributeValue: null # permissions: # - administerGe # - administerProjects # - administerCache # - generateSupportBundle # ci-agent: # assignToNewExternalUsers: false # description: Use Develocity for CI builds # displayName: CI Agent # identityProviderAttributeValue: null # permissions: # - publishScan # - testDistribution # - predictiveTestSelection # - readCache # - writeCache # - accessAllDataWithOrWithoutAssociatedProject # - accessDataWithoutAssociatedProject # developer: # assignToNewExternalUsers: false # description: Use Develocity # displayName: Developer # identityProviderAttributeValue: null # permissions: # - viewScan # - publishScan # - testDistribution # - predictiveTestSelection # - readCache # - readCacheWriteCas # scim: # enabled: false # token: null # timeouts: # accessTokenLifespan: 10 # ssoSessionIdleTimeout: 5760 # ssoSessionMaxLifespan: 43200 # backups: null # buildCache: # allowUntrustedNodeSsl: false # storageSize: 10000 # buildScans: # diskSpaceMonitoring: # autoDeleteWhileFreeSpaceLessThanPercentage: null # rejectIncomingWhileFreeSpaceLessThanPercentage: null # sendWarningEmailWhenFreeSpaceLessThanPercentage: null # incomingStorageType: null # keepDays: null # dailyMaintenanceTime: 04:00 # edge: null # email: null # helpContact: # email: null # name: null # network: null # # systemPassword: [SYSTEM_PASSWORD_VALUE] ## ## ## Not all settings need to be set when providing an unattended config. The following example shows how to only configure an HTTP proxy: ## ## unattended: ## key: oijqefoijqOIQJFoijefoiqjfoij # Encryption key for secrets in the configuration, if any. Default none. ## configuration: ## version: 12 ## network: ## additionalTrust: # The default is 'none'. ## proxy: ## protocol: https # The default is 'http'. ## host: proxy.gradle.com ## port: 8080 # The default is '80'. ## excludedHosts: # The default is empty list. ## - some.external ## - '*.internal' ## auth: # The default is 'none' ## username: user ## password: "FEIpqflj265QEFq2efq54e" # # ## ## Database section ## ## By default, Develocity will store data in an embedded database. ## To connect to a user-managed database, configure connection details here. ## # # database: # location: user-managed # Default "embedded" # # ## ## Embedded database resources and storage ## ## If using the embedded database, its resources can be configured here. ## # # storage: # data: # capacity: 500Gi # Default 250Gi # backup: # capacity: 750Gi # Default 250Gi # # ## ## User-managed database connection details. ## ## Connection details can be set here directly or specified by a ConfigMap. ## # # connection: # configMapName: my-example-database-connection-config-map # # OR # host: db.example.com # Required for user-managed database. # port: 5555 # Default 5432 # databaseName: example_gradle_enterprise_prod # Required for user-managed database. # params: "?ssl=false" # No default. # ## ## User-managed database credentials. ## ## Credentials details can be set here directly. ## ## Typically only a superuser account credential is required - Develocity can then create other ## necessary accounts and schemas for the app automatically. ## ## It is also possible to instead set up the database using a script and only configure the more restricted ## application account credentials here. ## # # credentials: # # superuser: # username: postgres # password: "superS3cret!" # # # OR # app: # password: "superS3cret!" # migrator: # password: "superS3cret!" # ## ## End database section ## # ## ## Ingress section ## ## Develocity creates an Ingress to route traffic. ## # # ingress: # ## ## Ingress SSL settings ## ## By default, the generated Ingress will have HTTPS support and use self-signed SSL certificates. ## Both of these can be changed. Certificates can be set directly here, set using ## --set-file ingress.ssl.key=keyfile --set-file ingress.ssl.cert=certfile ## # # ssl: # enabled: false # Default true except if `global.externalSSLTermination: true` # # OR # key: | # -----BEGIN RSA PRIVATE KEY----- # MIIEpQIBAAKCAQEA4qV8JlqDMi7y85Ykq8dn7uIsi609D6KuFtlc+UvNYjatz0+u # ... # G7tI0qQ6F20e5R4tPpEDKCFZykyvgGMhfLzsvVlrgaVW8QbVK4YWNtQ= # -----END RSA PRIVATE KEY----- # cert: | # -----BEGIN CERTIFICATE----- # MIIDKjCCAhKgAwIBAgIRAPNTIHf6/oUuzMKm3ffGNOgwDQYJKoZIhvcNAQELBQAw # .. # z+P5RmRxU/kaaFB+Vuw1pRezbaAtZNorVgXnBwrdseY4zLGyhAcGcR9v+VtCiQ== # -----END CERTIFICATE----- # # ## ## Ingress TCP ports ## ## The ports that the application accepts traffic on can be altered from the default of 443 (or 80 if ## accepting plain HTTP): ## # # port: # http: 8080 # default 80 # https: 8443 # default 443 # # ## ## End ingress section ## # ## ## ## Enterprise app section ## ## # enterprise: # bazel: ## Used to configure access to a non-Develocity Bazel cache for use by Bazel Build Scans. # remoteCacheConnection: ## Can be either GRPC or GRPCS. # url: grpc://cache.example.com:9090 # authType: bearerToken # The default is 'none'. ## There should only be one block under this # auth: # tls: # cert: |- # -----BEGIN CERTIFICATE----- # MIIDKjCCAhKgAwIBAgIRAPNTIHf6/oUuzMKm3ffGNOgwDQYJKoZIhvcNAQELBQAw # .. # z+P5RmRxU/kaaFB+Vuw1pRezbaAtZNorVgXnBwrdseY4zLGyhAcGcR9v+VtCiQ== # -----END CERTIFICATE----- # key: |- # -----BEGIN RSA PRIVATE KEY----- # MIIEpQIBAAKCAQEA4qV8JlqDMi7y85Ykq8dn7uIsi609D6KuFtlc+UvNYjatz0+u # ... # G7tI0qQ6F20e5R4tPpEDKCFZykyvgGMhfLzsvVlrgaVW8QbVK4YWNtQ= # -----END RSA PRIVATE KEY----- # bearerToken: # token: ar3rgsdgggsafrertregrgrbgvrb ## ## End enterprise app section ## # # # ## Authentication broker section ## # authenticationBroker: # adminPassword: # value: "superS3cret!" # clientSecret: # value: "superS3cret!" # ## ## End authentication broker section # ## ## Monitoring section ## ## Controls the monitoring components (capturing logs and Prometheus metrics) of Develocity. ## # # monitoring: # enabled: false # The default is 'true'. Controls all components of the monitoring. # # metrics: # enabled: false # The default is 'true'. Controls the metrics components of the monitoring. # # logging: # enabled: false # The default is 'true'. Controls the logging components of the monitoring # # ## ## End monitoring section ## # ## ## Object Storage section ## ## If no Object Storage provider is specified, `embedded` Object Storage is used by default. ## # # objectStorage: # type: "embedded" # Supported values: `embedded`, `s3`, `googleCloudStorage`, `azureBlobStorage`. # # Default: `embedded`. # # embedded: # # storage: # Storage configuration for each subcomponent using the embedded Object Storage. # # Capacities are by default configured using the Gi unit, and all must use the same Unit. # internalBuffer: # capacity: 5Gi # Internal buffer storage space used by the embedded Object Storage. # # Default set to 5Gi, should be adjusted if the customer-support team # # recommends it. # buildCache: # capacity: 10Gi # Capacity offered to the data hosted for the build-cache feature. # # Default set to 10Gi. # # monitoring: # capacity: 20Gi # Capacity offered to the data hosted for the monitoring component. # # Default set to 20Gi. # # credentials: # app: # password: "my-embedded-app-password" # migrator: # password: "my-embedded-migrator-password" # superuser: # password: "my-embedded-superuser-password" # # s3: # This block configures the connection and location where `build-scan` and `build-cache` data are stored. # bucket: "develocity-application-data" # Bucket used for `build-scan` and `build-cache` data. # region: "aws-region" # Region used for `build-scan` and `build-cache` data. # # OR # endpoint: "https://my-s3-endpoint.aws.com" # Endpoint used for `build-scan` and `build-cache` data. # credentials: # type: # Authentication method you will use for Object Storage Connection. # # * `instanceProfile` leverages role associated to the EC2 instance. # # * `keys` uses a combo of `accessKey` and `secretKey`. # # This required value specifies the authentication configuration block you must provide. # keys: # accessKey: "my-s3-access-key" # secretKey: "my-s3-secret-key" # # advancedParams: # List of advanced parameters used to fine-tune the client library. # # You should only configure advanced parameters if you have been directed to do so by Develocity support. # client.maxConcurrency: 200 # client.useCrt: "true" # presignedUrl.enabled: "true" # presignedUrl.expiresAfter: "PT5M" # # monitoring: # This mandatory block configures the connection and location where `monitoring` data are stored. # # Those values can be the same as `objectStorage.s3` to share the same bucket # # and credentials, or different if you want to separate application data (build cache, build scans) # # from monitoring data (metrics). # # bucket: "develocity-monitoring-data" # Bucket used for `monitoring` data, stored by the `monitoring` component. # region: "aws-region" # Region used for `monitoring` data. # # OR # endpoint: "https://my-s3-endpoint.aws.com" # Endpoint used for `monitoring` data, stored by the `monitoring` component. # # credentials: # type: # Authentication method you will use for Object Storage Connection. # # * `instanceProfile` leverages role associated to the EC2 instance. # # * `keys` uses a combo of `accessKey` and `secretKey`. # # This required value specifies the authentication configuration block you must provide. # keys: # accessKey: "my-s3-monitoring-access-key" # secretKey: "my-s3-monitoring-secret-key" # # # advancedParams cannot be configured in the monitoring block. # # googleCloudStorage: # This block configures the connection and location where `build-scan` and `build-cache` data are stored. # bucket: "develocity-application-data" # Bucket used for `build-scan` and `build-cache` data. # # credentials: # type: # Authentication method you will use for Object Storage Connection. # # * `gceServiceAccount` leverages the service-account attached to your Google Compute Engine instance. # # * `serviceAccount` uses the service account key JSON file. # # This required value specifies the authentication configuration block you must provide. # # serviceAccount: # The content of the service account key JSON file. # key: "my-google-cloud-storage-service-account-json-file" # # advancedParams: # List of advanced parameters used to fine-tune the client library. # # You should only configure advanced parameters if you have been directed to do so by Develocity support. # blockSize: "8000000" # maxConcurrency: 5 # presignedUrl.enabled: "true" # presignedUrl.expiresAfter: "PT5M" # # monitoring: # This mandatory block configures the connection and location where `monitoring` data are stored. # # Those values can be the same as `objectStorage.googleCloudStorage` to share the same bucket # # and credentials, or different if you want to separate application data (build cache, build scans) # # from monitoring data (metrics). # # bucket: "develocity-monitoring-data" # Bucket used for `monitoring` data, stored by the `monitoring` component. # credentials: # type: # Authentication method used for Object Storage, where `monitoring` data are stored. # # * `serviceAccount` uses the service account key JSON file. # # This required value specifies the authentication configuration block you must provide. # # serviceAccount: # The content of the service account key JSON file. # key: "my-google-cloud-storage-service-account-json-file-for-monitoring" # # # advancedParams cannot be configured in the monitoring block. # # azureBlobStorage: # This block configures the connection and location where `build-scan` and `build-cache` data are stored. # container: "develocity-application-data" # Container used for `build-scan` and `build-cache` data. # # credentials: # type: # Authentication method you will use for Object Storage Connection, where `build-scan` and `build-cache` data are stored. # # * `accountInformation` uses a combo of `accountName` and `accountKey`. # # This required value specifies the authentication configuration block you must provide. # # accountInformation: # The `accountKey` and `accountName` of the Azure Blob Storage account. # accountName: "my-azure-account-name" # accountKey: "my-azure-account" # endpointSuffix: "my-azure-endpoint-suffix" # The endpoint suffix, default is `core.windows.net`. # # advancedParams: # List of advanced parameters used to fine-tune the client library. # # You should only configure advanced parameters if you have been directed to do so by Develocity support. # blockSize: "8000000" # maxConcurrency: 5 # # monitoring: # This mandatory block configures the connection and location where `monitoring` data are stored. # # Those values can be the same as `objectStorage.azureBlobStorage` to share the same bucket # # and credentials, or different if you want to separate application data (build cache, build scans) # # from monitoring data (metrics). # # container: "develocity-monitoring-data" # Container used for `monitoring` data, stored by the `monitoring` component. # # credentials: # type: # Authentication method used for Object Storage, where `monitoring` data are stored. # # * `accountInformation` uses a combo of `accountName`, `accountKey`. # # This required value specifies the authentication configuration block you must provide. # # accountInformation: # The account information of the Azure Blob Storage account. # accountName: "my-azure-account-name" # The account name. # accountKey: "my-azure-account-key" # The account key. # endpointSuffix: "my-azure-endpoint-suffix" # The endpoint suffix, default is `core.windows.net`. # # # advancedParams cannot be configured in the monitoring block. ## ## End objectStorage section ## # # ## ## Access control section ## ## Develocity will use a set of access control policies that are secure by default. ## The settings can be customized to better match your organization's policies. ## # # accessControl: # accessKeys: # maxLifespan: # Policy for requiring access key expiration; can be disabled # enabled: false # Whether the maximum access key lifespan policy should be enabled; default true # duration: P30D # The maximum access key lifespan to allow when the policy is enabled; ISO 8601 duration with default of "P365D" (365 days) # ## ## End access control section ## #