## ## Global options relating to Gradle Enterprise as a whole rather than a specific subsystem. ## # # global: # ## ## Public URL ## # # hostname: ge.example.com # Hostname used to access the web interface by web browsers, etc. Required. # externalSSLTermination: true # If we are using HTTPS but not with termination in the built-in ingress or proxy. Default false. # externalPort: 8180 # Set to specify the external port the installation is available on. Only required if differs from `ingress.port.http(s)`. # ## ## Gradle Enterprise license settings ## ## Exactly one of these options must be set. ## ## If performing an online (ie not airgapped) installation that pulls images from the Gradle image registry, ## and you are setting the license via global.license.secretName, you will also need to set an imagePullSecret ## with the license in dockerconfigjson form. If setting the license via global.license.file, the image pull ## secret is generated automatically. ## # # license: # file: ABCD1234 # Full license file or Base64 data part of the license. Can also be set using --set-file global.license.file=/path/to/file # secretName: my-example-license-secret # Name of Secret that contains the license. License should be in the "license" key in the secret. # ## ## Image pull settings ## ## For airgap installations, the registry and an image pull secret that can pull from that registry are required. ## # # image: # registry: registry.example.com/gradle-enterprise # Registry to pull images from. Default registry.gradle.com/gradle-enterprise # imagePullSecret: my-example-image-pull-secret # # tag: some-custom-tag # Tag to pull. Default is the Gradle Enterprise version. # imagePullPolicy: Always # Default IfNotPresent. # ## ## Storage settings ## ## By default Gradle Enterprise will store data under /opt/gradle. ## This base directory can be configured, and separate directories for backups and logs can also be set. ## # # storage: # directory: /mnt/big-volume/ge # Default /opt/gradle # logs: # directory: /var/log/gradle-enterprise # Default (global.storage.directory)/logs # backup: # directory: /mnt/vol2/ge-backups # Default (global.storage.directory)/backups ## ## Unattended installation ## ## These cover auto-configuring aspects of Gradle Enterprise that are controlled by the Administration section of the application. ## Contact Gradle Support for assistance with unattended installation. ## # # unattended: # key: oijqefoijqOIQJFoijefoiqjfoij # Encryption key for secrets in the configuration, if any. Default none. # configuration: # version: 3 # systemPassword: "FEIpqflj265QEFq2efq54e" # auth: # anonymousRoles: # - buildScanView # - buildScanPublish # advanced: # jvmOptions: # app: # heapMemory: 7168 # ## ## Database section ## ## By default, Gradle Enterprise will store data in an embedded database. ## To connect to a user-managed database, configure connection details here. ## # # database: # location: user-managed # Default "embedded" # ## ## Embedded database resources and storage ## ## If using the embedded database, its resources can be configured here. ## # # resources: # requests: # cpu: 500m # Default 250m # memory: 2Gi # Default 1Gi # limits: # cpu: 4 # Default 2 # memory: 20Gi # Default 8Gi # # storage: # data: # capacity: 500Gi # Default 250Gi # backup: # capacity: 750Gi # Default 250Gi # ## ## User-managed database connection details ## ## Connection details can be set here directly or specified by a ConfigMap. ## # # connection: # configMapName: my-example-database-connection-config-map # # OR # host: db.example.com # Required for user-managed database if connection secret not provided. # port: 5555 # Default 5432 # databaseName: example_gradle_enterprise_prod # Required for user-managed database if connection secret not provided. # params: "?ssl=false" # No default. # ## ## User-managed database credentials ## ## Credentials details can be set here directly or specified by secrets. ## ## Typically only a superuser account credential is required - Gradle Enterprise can then create other ## necessary accounts and schemas for the app automatically. ## ## It is also possible to instead set up the database using a script and only configure the more restricted ## application account credentials here. ## # # credentials: # # superuser: # secretName: my-example-db-superuser-secret # # OR # username: postgres # password: "superS3cret!" # # # OR # app: # secretName: my-example-db-app-secret # # OR # password: "superS3cret!" # migrator: # secretName: my-example-db-migrator-secret # # OR # password: "superS3cret!" # ## ## End database section ## ## ## Ingress section ## ## By default, Gradle Enterprise creates an Ingress to route traffic. ## It can be disabled here if some other method to route web traffic is preferred. ## # # ingress: # enabled: false # Default true ## ## Ingress SSL settings ## ## By default, the generated Ingress will have HTTPS support and use self-signed SSL certificates. ## Both of these can be changed. Certificates can be set directly here, set using ## --set-file ingress.ssl.key=keyfile --set-file ingress.ssl.cert=certfile ## or set in a Secret. ## # # ssl: # enabled: false # Default true except if `global.externalSSLTermination: true` # # OR # key: | # -----BEGIN RSA PRIVATE KEY----- # MIIEpQIBAAKCAQEA4qV8JlqDMi7y85Ykq8dn7uIsi609D6KuFtlc+UvNYjatz0+u # ... # G7tI0qQ6F20e5R4tPpEDKCFZykyvgGMhfLzsvVlrgaVW8QbVK4YWNtQ= # -----END RSA PRIVATE KEY----- # cert: | # -----BEGIN CERTIFICATE----- # MIIDKjCCAhKgAwIBAgIRAPNTIHf6/oUuzMKm3ffGNOgwDQYJKoZIhvcNAQELBQAw # .. # z+P5RmRxU/kaaFB+Vuw1pRezbaAtZNorVgXnBwrdseY4zLGyhAcGcR9v+VtCiQ== # -----END CERTIFICATE----- # # OR # secretName: my-example-ingress-ssl-cert-secret # ## ## Ingress TCP ports ## ## The ports that the application accepts traffic on can be altered from the default of 443 (or 80 if ## accepting plain HTTP): ## # # port: # http: 8080 # default 80 # https: 8443 # default 443 # ## ## End ingress section ## ## ## Proxy section ## ## The proxy is the main entrypoint for web-based traffic into Gradle Enterprise. ## If not using the default Ingress, you should route traffic to the gradle-proxy service ## using a service with an external ip, a node port, a load balancer, an OpenShift route ## or some other method. ## If the method used passes TCP traffic straight through to the proxy, and you want to use HTTPS (strongly recommended), ## enable it here, similar to the ingress ssl option above. ## # # proxy: # ssl: # enabled: true # Default false # # OR # key: | # -----BEGIN RSA PRIVATE KEY----- # MIIEpQIBAAKCAQEA4qV8JlqDMi7y85Ykq8dn7uIsi609D6KuFtlc+UvNYjatz0+u # ... # G7tI0qQ6F20e5R4tPpEDKCFZykyvgGMhfLzsvVlrgaVW8QbVK4YWNtQ= # -----END RSA PRIVATE KEY----- # cert: | # -----BEGIN CERTIFICATE----- # MIIDKjCCAhKgAwIBAgIRAPNTIHf6/oUuzMKm3ffGNOgwDQYJKoZIhvcNAQELBQAw # .. # z+P5RmRxU/kaaFB+Vuw1pRezbaAtZNorVgXnBwrdseY4zLGyhAcGcR9v+VtCiQ== # -----END CERTIFICATE----- # # OR # secretName: my-example-proxy-ssl-cert-secret ## ## End proxy section ##