This helm chart installs the passbolt container and a mysql database (mariadb)
For more parameters you should have a look at ...
- the values.yaml file of this helm chart
- the values.yaml file of the mariadb helm chart
- the enviroment variables of the passbold docker image.
| Parameter | Description | Default |
|---|---|---|
replicaCount |
How many replicas should be deployed | 1 |
image.repository |
Passbolt image repository | "passbolt/passbolt" |
image.tag |
Passbolt image tag | "latest" |
image.pullPolicy |
Image pull policy | IfNotPresent |
imagePullSecrets |
Image pull secrets | [] |
nameOverride |
Name override | "" |
fullnameOverride |
Full name override | "" |
service.type |
Service type | ClusterIP |
service.port |
Service port | 80 |
ingress.enabled |
Enable ingress | true |
ingress.host |
Ingress host | passbolt.yourdomain.com |
| Parameter | Description | Default |
|---|---|---|
passbolt.persistence.enabled |
Enable/Disable persistence Disk for uploaded Files (Avatars) | true |
passbolt.persistence.storageClass |
Disk storageclass | - |
passbolt.persistence.accessMode |
Disk access mode | ReadWriteMany |
passbolt.persistence.size |
Disk size | 1Gi |
passbolt.config.debug |
Enable/Disable debug output in passbolt image | false |
passbolt.config.registration |
Enable/Disable user can register | false |
passbolt.config.salt |
Salt. Generate: openssl rand -base64 32 |
"your salt" |
passbolt.config.gpgServerKeyFingerprint |
The GPG server key fingerprint. See GPG key generation | "your gpg server key fingerprint" |
passbolt.config.serverkey |
The GPG server key. If set the key will not be read from file | |
passbolt.config.serverkey_private |
The GPG private server key. If set the private key will not be read from file | |
passbolt.config.license.enabled |
Set true if you own a license key. Add the license key in secrets/pro-license/license | false |
passbolt.config.license.key |
The license key. If set the license key will not be read from file. | false |
passbolt.config.plugins.exportenabled |
Enable export plugin | true |
passbolt.config.plugins.importenabled |
Enable import plugin | true |
passbolt.config.email.enabled |
Enable/Disable sending emails transport | false |
passbolt.config.email.from |
From email address | you@localhost |
passbolt.config.email.host |
Email server hostname | localhost |
passbolt.config.email.port |
Email server port | 25 |
passbolt.config.email.timeout |
Email server timeout | 30 |
passbolt.config.email.username |
Username for email server auth | username |
passbolt.config.email.password |
Password for email server auth | password |
passbolt.config.livenessProbe.failureThreshold |
failureThreshold for livenessProbe | 3 |
passbolt.config.livenessProbe.successThreshold |
successThreshold for livenessProbe | 1 |
passbolt.config.livenessProbe.periodSeconds |
periodSeconds for livenessProbe | 10 |
passbolt.config.livenessProbe.initialDelaySeconds |
initialDelaySeconds for livenessProbe | 60 |
passbolt.config.livenessProbe.timeoutSeconds |
timeoutSeconds for livenessProbe | 10 |
passbolt.config.readinessProbe.failureThreshold |
failureThreshold for readinessProbe | 3 |
passbolt.config.readinessProbe.successThreshold |
successThreshold for readinessProbe | 1 |
passbolt.config.readinessProbe.periodSeconds |
periodSeconds for readinessProbe | 10 |
passbolt.config.readinessProbe.initialDelaySeconds |
initialDelaySeconds for readinessProbe | 60 |
passbolt.config.readinessProbe.timeoutSeconds |
timeoutSeconds for readinessProbe | 10 |
| Parameter | Description | Default |
|---|---|---|
mariadb.db.name |
Name of the passbolt database | passbolt |
mariadb.db.user |
Username of the passbolt user | passbolt |
mariadb.db.password |
Passwort for the passbold database user | passbolt |
-
Create GPG config file gpg-server-key.conf with the following content
%echo Generating a basic OpenPGP key Key-Type: RSA Key-Length: 4096 Subkey-Type: RSA Subkey-Length: 4096 Name-Email: [email protected] Name-Real: Joe Tester Expire-Date: 0 %echo done -
Create GPG keys
⚠️ do not set a password, since passbolt won't start⚠️ gpg --gen-key --batch gpg-server-key.conf -
List GPG keys
gpg --list-secret-keys --keyid-format LONGYou will need this to export it and in your values.yaml to validate the keys.
-
Export keys
KEY_ID=<put your key here> gpg --armor --export $KEY_ID > serverkey.asc gpg --armor --export-secret-keys $KEY_ID > serverkey_private.asc
root@passbolt-passbolt-app:/var/www/passbolt# su -m -c "bin/cake passbolt register_user -u [email protected] -f Admin -l Istrator -r admin" -s /bin/sh www-data
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent