|
2 | 2 | # SPDX-License-Identifier: Apache-2.0 |
3 | 3 |
|
4 | 4 | manager: |
5 | | - enabled: true |
| 5 | + enabled: false |
6 | 6 | image: |
7 | 7 | repository: ghcr.io/cloudoperators/repo-guard |
8 | 8 | resources: |
@@ -74,85 +74,87 @@ monitoring: |
74 | 74 | # - user2 |
75 | 75 |
|
76 | 76 | # githubs: |
77 | | -# enterprise: |
78 | | -# webURL: |
79 | | -# v3APIURL: |
80 | | -# integrationID: |
81 | | -# clientID: |
82 | | -# clientSecret: |
83 | | -# privateKey: |
84 | | -# |
85 | | -# githubAccountLinks: |
86 | | -# - userID: |
87 | | -# githubUsername: |
88 | | -# githubID: |
89 | | - |
90 | | -# organizations: |
91 | | -# - organization: |
92 | | -# installationID: |
93 | | -# # TTL overrides applied to this organization and all its teams |
94 | | -# # If omitted, chart-wide defaults in .Values.ttl are used. |
95 | | -# ttl: |
96 | | -# failed: 24h # overrides ttl.team.failed and ttl.organization.failed where applicable |
97 | | -# notfound: 24h # overrides ttl.team.notfound |
98 | | -# completed: 72h # overrides ttl.team.completed and ttl.organization.completed where applicable |
99 | | -# addTeam: |
100 | | -# removeTeam: |
101 | | -# addOrganizationOwner: |
102 | | -# removeOrganizationOwner: |
103 | | -# addRepositoryTeam: |
104 | | -# removeRepositoryTeam: |
105 | | -# dryRun: |
106 | | -# disableInternalUsernames: |
107 | | -# # GithubAccountLink email verification settings applied to all GALs |
108 | | -# # associated with this GitHub (organization-level policy). |
109 | | -# # When set, the Helm chart will populate a JSON annotation on each |
110 | | -# # GithubAccountLink containing per-organization config entries: |
111 | | -# # repoguard.sap/email-check-config: '{ "<org>": {"domain": "example.com", "enabled": true, "ttl": "1h" } }' |
112 | | -# # The controller will write results into: |
113 | | -# # repoguard.sap/email-check-results: '{ "<org>": {"domain":"example.com","status":"verified|not-part-of-org|no","timestamp":"..."} }' |
114 | | -# githubAccountLinkEmailCheck: |
115 | | -# # Domain to require for verified email, e.g., example.com |
116 | | -# domain: "" |
117 | | -# # Whether to actively check email verification status |
118 | | -# enabled: false |
119 | | -# # Optional TTL for re-checking email status |
120 | | -# ttl: "" |
121 | | - |
122 | | -# defaultPublicRepositoryTeams: |
123 | | -# - team: |
124 | | -# permission: |
125 | | -# |
126 | | -# defaultPrivateRepositoryTeams: |
127 | | -# - team: |
128 | | -# permission: |
129 | | -# |
130 | | -# organizationOwnerTeams: |
131 | | -# - |
| 77 | +# - name: enterprise |
| 78 | +# webURL: |
| 79 | +# v3APIURL: |
| 80 | +# integrationID: |
| 81 | +# clientID: |
| 82 | +# clientSecret: |
| 83 | +# privateKey: |
132 | 84 |
|
133 | | -# teams: |
134 | | -# - name: |
135 | | -# greenhouseTeam: |
136 | | -# # ldap group example referencing top-level ldap provider name: |
137 | | -# # ldapGroup: cn=my-group,ou=groups,dc=example,dc=org |
138 | | -# # ldap object example allowing provider and kind override: |
139 | | -# # ldap: |
140 | | -# # provider: corp-ldap # defaults to .Values.ldaps[0].name if omitted |
141 | | -# # kind: ClusterLDAPGroupProvider # optional, auto-populated if provider matches an entry in .Values.ldaps |
142 | | -# # group: cn=my-group,ou=groups,dc=example,dc=org |
143 | | -# # generic http example: |
144 | | -# # genericHTTP: |
145 | | -# # provider: my-http-provider # must match an entry in genericExternalMemberProviders.name |
146 | | -# # kind: ClusterGenericExternalMemberProvider # optional, auto-populated if provider matches an entry in .Values.genericExternalMemberProviders |
147 | | -# # group: engineers |
148 | | -# # static example: |
149 | | -# # static: |
150 | | -# # provider: my-static-provider # must match an entry in staticMemberProviders.name |
151 | | -# # kind: ClusterStaticMemberProvider # optional, auto-populated if provider matches an entry in .Values.staticMemberProviders |
152 | | -# # group: team-a |
| 85 | +# githubAccountLinks: |
| 86 | +# - github: enterprise |
| 87 | +# userID: |
| 88 | +# githubUsername: |
| 89 | +# githubID: |
153 | 90 |
|
154 | | -# teamRepositoryAssignments: |
155 | | -# - team: |
156 | | -# repositories: |
157 | | -# - |
158 | | -# permission: |
| 91 | +# githubOrganizations: |
| 92 | +# - github: enterprise |
| 93 | +# organization: |
| 94 | +# installationID: |
| 95 | +# # TTL overrides applied to this organization and all its teams |
| 96 | +# # If omitted, chart-wide defaults in .Values.ttl are used. |
| 97 | +# ttl: |
| 98 | +# failed: 24h # overrides ttl.team.failed and ttl.organization.failed where applicable |
| 99 | +# notfound: 24h # overrides ttl.team.notfound |
| 100 | +# completed: 72h # overrides ttl.team.completed and ttl.organization.completed where applicable |
| 101 | +# addTeam: |
| 102 | +# removeTeam: |
| 103 | +# addOrganizationOwner: |
| 104 | +# removeOrganizationOwner: |
| 105 | +# addRepositoryTeam: |
| 106 | +# removeRepositoryTeam: |
| 107 | +# dryRun: |
| 108 | +# disableInternalUsernames: |
| 109 | +# # GithubAccountLink email verification settings applied to all GALs |
| 110 | +# # associated with this GitHub (organization-level policy). |
| 111 | +# # When set, the Helm chart will populate a JSON annotation on each |
| 112 | +# # GithubAccountLink containing per-organization config entries: |
| 113 | +# # repoguard.sap/email-check-config: '{ "<org>": {"domain": "example.com", "enabled": true, "ttl": "1h" } }' |
| 114 | +# # The controller will write results into: |
| 115 | +# # repoguard.sap/email-check-results: '{ "<org>": {"domain":"example.com","status":"verified|not-part-of-org|no","timestamp":"..."} }' |
| 116 | +# githubAccountLinkEmailCheck: |
| 117 | +# # Domain to require for verified email, e.g., example.com |
| 118 | +# domain: "" |
| 119 | +# # Whether to actively check email verification status |
| 120 | +# enabled: false |
| 121 | +# # Optional TTL for re-checking email status |
| 122 | +# ttl: "" |
| 123 | +# |
| 124 | +# defaultPublicRepositoryTeams: |
| 125 | +# - team: |
| 126 | +# permission: |
| 127 | +# |
| 128 | +# defaultPrivateRepositoryTeams: |
| 129 | +# - team: |
| 130 | +# permission: |
| 131 | +# |
| 132 | +# organizationOwnerTeams: |
| 133 | +# - |
| 134 | +# |
| 135 | +# teams: |
| 136 | +# - name: |
| 137 | +# greenhouseTeam: |
| 138 | +# # ldap group example referencing top-level ldap provider name: |
| 139 | +# # ldapGroup: cn=my-group,ou=groups,dc=example,dc=org |
| 140 | +# # ldap object example allowing provider and kind override: |
| 141 | +# # ldap: |
| 142 | +# # provider: corp-ldap # defaults to .Values.ldaps[0].name if omitted |
| 143 | +# # kind: ClusterLDAPGroupProvider # optional, auto-populated if provider matches an entry in .Values.ldaps |
| 144 | +# # group: cn=my-group,ou=groups,dc=example,dc=org |
| 145 | +# # generic http example: |
| 146 | +# # genericHTTP: |
| 147 | +# # provider: my-http-provider # must match an entry in genericExternalMemberProviders.name |
| 148 | +# # kind: ClusterGenericExternalMemberProvider # optional, auto-populated if provider matches an entry in .Values.genericExternalMemberProviders |
| 149 | +# # group: engineers |
| 150 | +# # static example: |
| 151 | +# # static: |
| 152 | +# # provider: my-static-provider # must match an entry in staticMemberProviders.name |
| 153 | +# # kind: ClusterStaticMemberProvider # optional, auto-populated if provider matches an entry in .Values.staticMemberProviders |
| 154 | +# # group: team-a |
| 155 | +# |
| 156 | +# teamRepositoryAssignments: |
| 157 | +# - team: |
| 158 | +# repositories: |
| 159 | +# - |
| 160 | +# permission: |
0 commit comments