Helm Chart System Values

These variables control resource allocation and limits (CPU and memory) for each Gramax service, as well as network access through Ingress. They let you define how many resources each component needs for stable operation and set upper limits to avoid cluster overload.

Values are split into two types:

  • requests — minimum guaranteed resources reserved by Kubernetes for the container.

  • limits — maximum resources the container can use. If the limit is exceeded, the container is throttled or restarted.

ingress settings control external hosts, TLS secrets, and domain routing.

Variable

Value

Description

docportal.requests.cpu

Default: 170m

CPU for the documentation portal service.

docportal.requests.memory

Default: 450Mi

Memory for the documentation portal service.

docportal.limits.cpu

Default: 200m

CPU usage limit for the documentation portal service.

docportal.limits.memory

Default: 500Mi

Memory usage limit for the documentation portal service.

browser.requests.cpu

Default: 20m

CPU for the Browser service.

browser.requests.memory

Default: 30Mi

Memory for the Browser service.

browser.limits.cpu

Default: 25m

CPU usage limit for the Browser service.

browser.limits.memory

Default: 45Mi

Memory usage limit for the Browser service.

enterprise.requests.cpu

Default: 110m

CPU for the Enterprise service.

enterprise.requests.memory

Default: 270Mi

Memory for the Enterprise service.

enterprise.limits.cpu

Default: 190m

CPU usage limit for the Enterprise service.

enterprise.limits.memory

Default: 410Mi

Memory usage limit for the Enterprise service.

caddy.requests.cpu

Default: 20m

CPU for the Caddy service.

caddy.requests.memory

Default: 20Mi

Memory for the Caddy service.

caddy.limits.cpu

Default: 25m

CPU usage limit for the Caddy service.

caddy.limits.memory

Default: 30Mi

Memory usage limit for the Caddy service.

diagramrenderer.requests.cpu

Default: 210m

CPU for the DiagramRenderer service.

diagramrenderer.requests.memory

Default: 580Mi

Memory for the DiagramRenderer service.

diagramrenderer.limits.cpu

Default: 290m

CPU usage limit for the DiagramRenderer service.

diagramrenderer.limits.memory

Default: 770Mi

Memory usage limit for the DiagramRenderer service.

auth.requests.cpu

Default: 50m

CPU for the Auth service.

auth.requests.memory

Default: 100Mi

Memory for the Auth service.

auth.limits.cpu

Default: 70m

CPU usage limit for the Auth service.

auth.limits.memory

Default: 150Mi

Memory usage limit for the Auth service.

qdrant.requests.cpu

Default: 125m

CPU for the Qdrant service.

qdrant.requests.memory

Default: 250Mi

Memory for the Qdrant service.

qdrant.limits.cpu

Default: 500m

CPU usage limit for the Qdrant service.

qdrant.limits.memory

Default: 500Mi

Memory usage limit for the Qdrant service.

gesai.requests.cpu

Default: 125m

CPU for the Ges-ai service.

gesai.requests.memory

Default: 200Mi

Memory for the Ges-ai service.

gesai.limits.cpu

Default: 250m

CPU usage limit for the Ges-ai service.

gesai.limits.memory

Default: 400Mi

Memory usage limit for the Ges-ai service.

AI_PROFILE

Default: false

Enables rendering of additional templates related to AI services.

ingress.enabled

Default: false

Enables creation of Ingress. If false, no Ingress resource is created.

ingress.tls.enabled

Default: false

Enables TLS termination. If true, secrets must be set for all hosts. Recommended value: True.

ingress.tls.GES_SECRET

ges_tls

Name of the existing TLS secret for GES_URL. Required if ingress.tls.enabled=true.

ingress.tls.PORTAL_SECRET

portal_tls

TLS secret for PORTAL_URL. Required if ingress.tls.enabled=true.

ingress.tls.APP_SECRET

app_tls

TLS secret for APP_URL. Required if ingress.tls.enabled=true.

ingress.host.GES_URL

Example: ges.example.com

Fully qualified domain name for GES. Required if ingress.enabled=true.

ingress.host.PORTAL_URL

Example: portal.example.com

Portal domain. Required if ingress.enabled=true.

ingress.host.APP_URL

Example: app.example.com

Application domain. Required if ingress.enabled=true.

ingress.className

Example: nginx

Ingress class name. Lets you choose ingress controller without changing templates.

ingress.annotations

Example: nginx.ingress.kubernetes.io/rewrite-target: /

Additional annotations for ingress resources. Applied to all ingresses created by the chart.

createPV

Default: true

Creates a PersistentVolume (PV) during chart deployment. Used for hostPath storage.

storageClassName

Example: local-path

StorageClass name set for all created PVs and PVCs.

imagePullSecrets.enabled

Default: true

Enables or disables adding imagePullSecrets to Pod spec.

imagePullSecrets.useSecretName

Example: regcred

Name of an existing Kubernetes secret attached to Pods for private image pulls.

registryCredentials.create

Default: false

Whether the chart should create a docker-registry secret.

registryCredentials.secretName

Example: regcred

Name of the secret created by the chart. If equal to imagePullSecrets.useSecretName, only one secret is added to Pod spec.

registryCredentials.server

Example: registry.gram.ax

Docker registry address used for the created pull secret.

registryCredentials.username

Example: owner

Username for the registry secret.

registryCredentials.password

Example: pass123

Password or token for the registry secret.

registryCredentials.email

Example: user@example.com

Email for the registry secret.

commonLabels

Default: {}

Common labels added to chart resources.

podAnnotations

Default: {}

Annotations for Pods.

podLabels

Default: {}

Additional labels for Pods.

nodeSelector

Example: cpu_freq: "5"

Node selection for running Pods by Kubernetes labels.

affinity

Default: {}

Pod affinity / anti-affinity settings.

tolerations

Default: []

Tolerations for running Pods on tainted nodes.

priorityClassName

Default: ""

PriorityClass for Pods.

env.includeEmpty

Default: false

If false, empty environment variables are not rendered in Deployment. If true, empty values are also rendered.