Gen3/values.yaml at main · Duke-MatSci/Gen3 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
global:
  hostname: localhost
  dev: true

# --- Persistent Storage ---
postgresql:
  primary:
    persistence:
      enabled: true
      size: 5Gi

elasticsearch:
  persistence:
    enabled: true
    size: 5Gi

# --- Aggressive Resource Overrides (16 GB Mac) ---
portal:
  resources:
    requests:
      cpu: "0.1"
      memory: 64Mi
    limits:
      cpu: "0.5"
      memory: 512Mi
  image:
    repository: quay.io/cdis/data-portal-prebuilt
    tag: dev

fence:
  resources:
    requests:
      cpu: "0.1"
      memory: 64Mi
    limits:
      cpu: "0.5"
      memory: 512Mi
  FENCE_CONFIG:
    MOCK_AUTH: true
  USER_YAML: |
    authz:
      anonymous_policies: []
      all_users_policies: []
      groups: []
      resources:
        - name: programs
          subresources:
            - name: open
              subresources:
                - name: projects
                  subresources:
                    - name: test
        - name: open
        - name: data_file
      policies:
        - id: open_data_reader
          description: Read access to open data
          role_ids:
            - reader
            - storage_reader
          resource_paths:
            - /open
            - /programs/open
        - id: all_programs_reader
          description: Read access to all programs
          role_ids:
            - reader
            - storage_reader
          resource_paths:
            - /programs
        - id: data_upload
          description: Upload data files
          role_ids:
            - file_uploader
          resource_paths:
            - /data_file
      roles:
        - id: reader
          permissions:
            - id: reader
              action:
                service: '*'
                method: read
        - id: storage_reader
          permissions:
            - id: storage_reader
              action:
                service: '*'
                method: read-storage
        - id: file_uploader
          permissions:
            - id: file_uploader
              action:
                service: '*'
                method: file_upload
    users:
      tolulomofateye@gmail.com:
        tags:
          name: Admin User
        policies:
          - open_data_reader
          - all_programs_reader
          - data_upload

arborist:
  enabled: true
  resources:
    requests:
      cpu: "0.1"
      memory: 64Mi
    limits:
      cpu: "0.3"
      memory: 256Mi

indexd:
  resources:
    requests:
      cpu: "0.1"
      memory: 64Mi
    limits:
      cpu: "0.3"
      memory: 256Mi

sheepdog:
  resources:
    requests:
      cpu: "0.1"
      memory: 64Mi
    limits:
      cpu: "0.5"
      memory: 512Mi

peregrine:
  resources:
    requests:
      cpu: "0.1"
      memory: 64Mi
    limits:
      cpu: "0.5"
      memory: 512Mi

metadata:
  resources:
    requests:
      cpu: "0.1"
      memory: 64Mi
    limits:
      cpu: "0.3"
      memory: 256Mi

# --- Disable non-essential services (core data commons only) ---
hatchery:
  enabled: false

wts:
  enabled: false

audit:
  enabled: false

manifestservice:
  enabled: false