JetBrains Space Help

Values File

The values.yaml file lets you override the default configuration values when installing Space on-premises using a Helm chart.

Global settings

Name

Description

Default Value

global.deployment

Target platform. Set it to any supported managed Kubernetes service or leave

custom

global.externalDomain

URL of the Space application. Space must know its external URL for configuration purposes.

lvh.me

global.externalPort

Port used by the Space application. Typically, 80 for http, 443 for https.

80

global.externalProtocol

Protocol used by the Space application (http/https).

http

global.ingress

Specifies whether this chart should create the Ingress resource to route inbound traffic

true

global.certManager

CertManager. Specify only if a CertManager already exists in the target cluster.

""

global.storageClass

Storage class that should be used to generate PersistentVolumeClaims for all stateful workloads

hostpath

global.postgresql

Configure the Kubernetes secret. Space will use it to get database credentials.

global.postgresql.postgresqlDatabase

Database name. If the database doesn't exist, Space will create it.

spacedb

global.postgresql.existingSecret

Kubernetes Secret resource name. Space will get credentials from this resource.

space-db-credentials

global.postgresql.postgresqlUsername

Database username.

space

global.postgresql.passwordPath

Path to the key in global.postgresql.existingSecret that contains the password.

postgresql-password

global.minio

Object storage settings. You can use MinIO or another S3-compatible storage.

global.minio.name

Name of the service that will be used for templates and secrets generation in case of local minio installation.

minio

global.minio.existingSecret

Kubernetes Secret resource name. Space will get credentials from this resource.

space-storage-credentials

global.minio.accessKeyPath

Path to the key in global.minio.existingSecret that contains ACCESS_KEY_ID.

access-key

global.minio.secretKeyPath

Path to the key in global.minio.existingSecret that contains SECRET_ACCESS_KEY.

secret-key

global.space.serviceName

The resulting space service name will consist of .Release.Name

space

global.langservice.serviceName

The resulting langservice service name will consist of .Release.Name

langservice

global.vcs.serviceName

The resulting vcs service name will consist of .Release.Name

vcs

global.vcs.externalPort

The port that Space will use to generate git links for users.

32222

global.packages.serviceName

The resulting packages service name will consist of .Release.Name

packages

global.redis.type

Type of Redis. Can be "single" or "clustered".

single

global.externalServicesHosts

Hostnames and ports of external services. Specify only for those services

global.externalServicesHosts.elasticsearch.host

Elasticsearch hostname or IP address. Must be reachable from the cluster network.

elasticsearch.example.com

global.externalServicesHosts.elasticsearch.port

Elasticsearch port.

9200

global.externalServicesHosts.redis.host

Redis hostname or IP address. Must be reachable from the cluster network.

redis.example.com

global.externalServicesHosts.redis.port

Redis port.

6379

global.externalServicesHosts.postgresql.host

PostgreSQL hostname or IP address. Must be reachable from the cluster network.

postgresql.example.com

global.externalServicesHosts.postgresql.port

PostgreSQL port.

5432

global.externalServicesHosts.minio

Use it to configure not only minio but any S3-compatible object storage.

global.externalServicesHosts.minio.region

Region where the bucket is located. Relevant for AWS S3 only.

""

global.externalServicesHosts.minio.host

Storage hostname or IP address. Must be reachable from the cluster network.

minio.example.com

global.externalServicesHosts.minio.port

Storage port.

9005

global.logFormat

Space applications logs format: plaintext or json. If you use a Kibana-style log reader, json is recommended.

plaintext

organization.name

Name of your organization

Space on-premise

organization.slogan

Marketing slogan of your organization

The drive to develop

Space service settings

Name

Description

Default Value

space.image

Docker image of Space.

SPACE_DOCKER_REGISTRY_PLACEHOLDER/space

space.replicas

Number of Space pods.

1

space.port

External port of the Space service. Space will listen to external requests on this port.

80

space.internalPort

Internal port of the Space service. Other services must be able to connect to it inside the namespace.

9084

space.bucket

S3-compatible/MinIO Object Storage bucket for storing Space objects.

space-local

space.resources.limits.cpu

CPU resource limit for a Space pod.

1000m

space.resources.limits.memory

Memory resource limit for a Space pod.

2000Mi

space.resources.requests.cpu

CPU resource request for a Space pod.

1000m

space.resources.requests.memory

Memory resource request for a Space pod.

200Mi

space.dbPoolMinIdle

Minimal number of idle database connections the application must keep alive.

12

space.masterSecret

256-bit encryption key for general sensitive values in the database.

""

space.auth

Space can use reCAPTCHA v2 to enforce authentication.

space.auth.recaptchav2Sitekey

Site key for recaptcha v2. If you keep the site key blank, Recaptcha will be disabled.

""

space.auth.recaptchav2Secretkey

Secret key for recaptcha v2. If you keep the secret key blank, Recaptcha will be disabled.

""

space.preload.admin.firstName

First name of the pre-created administrator profile. It is used only during the installation and ignored during updates.

""

space.preload.admin.lastName

Last name of the pre-created administrator profile. It is used only during the installation and ignored during updates.

""

space.preload.admin.username

Username of the pre-created administrator profile. It is used only during the installation and ignored during updates.

""

space.preload.admin.password

Password of the pre-created administrator profile. It is used only during the installation and ignored during updates.

""

space.preload.admin.email

Email of the pre-created administrator profile. It is used only during the installation and ignored during updates.

""

space.oauth

Space acts as an OAuth 2.0 authentication server.

space.oauth.accesstokenRsaPublic

X.509-encoded public key for issuing access tokens by the OAuth 2.0 authentication server.

""

space.oauth.accesstokenRsaPrivate

PKCS#8-encoded 4096-bit private key for issuing access tokens by the OAuth 2.0 authentication server.

""

space.oauth.messageEncodingKey

128-bit key.

""

space.oauth.encodingKey2fa

128-bit key.

""

space.oauth.encodingKey

128-bit key.

""

space.oauth.messageSigningRsaPublic

X.509-encoded public key for signing/verifying outgoing messages to external applications.

""

space.oauth.messageSigningRsaPrivate

PKCS#8-encoded 4096-bit private key for signing/verifying outgoing messages to external applications.

""

space.mail

Mail server settings Space requires a mail server to send email, e.g. new user invitations, notifications, and so on.

space.mail.enabled

Enables/disables outgoing mail from Space.

false

space.mail.fromAddress

Email address. Space will use it to send email.

space@space.example.com

space.mail.host

SMTP server hostname

mail.example.com

space.mail.port

SMTP server port. Typically, 25 or 2525.

2525

space.mail.login

Username of the SMTP server account that will be used to send email.

space

space.mail.password

Password of the SMTP server account that will be used to send email.

password

space.webhookKey

256-bit encryption key for webhook authentication data.

""

space.automationExecutionWorkerImage

Docker image of Space Automation workers

public.registry.jetbrains.space/p/space/containers/space-automation-worker

space.automationExecutionWorkerDockerBuilderImage

Docker image of a helper container that builds Docker images inside Space Automation workers

public.registry.jetbrains.space/p/space/containers/space-automation-docker-builder

space.automationExecutionWorkerDslCompileImage

Docker image of a helper container that compiles user scripts written in Space Automation DSL

public.registry.jetbrains.space/p/space/containers/space-automation-dsl-compile

Langservice service settings

Name

Description

Default Value

langservice.image

Docker image for Langservice.

SPACE_DOCKER_REGISTRY_PLACEHOLDER/langservice

langservice.replicas

Number of the Langservice pods.

1

langservice.port

Internal port of the Langservice service. The Space service must be able to connect to it inside the namespace.

8095

langservice.resources.limits.cpu

CPU limit for a Langservice pod.

500m

langservice.resources.limits.memory

Memory limit for a Langservice pod.

500Mi

langservice.resources.requests.cpu

CPU resource request for a Langservice pod.

50m

langservice.resources.requests.memory

Memory resource request for a Langservice pod.

500Mi

langservice.additionalJavaOpts

Java Options values you want to pass to the Langservice application.

""

VCS Hosting (Git) service settings

Name

Description

Default Value

vcs.image

Docker image for VCS Hosting.

SPACE_DOCKER_REGISTRY_PLACEHOLDER/vcs-hosting

vcs.replicas

Number of VCS Hosting pods. As for now, the only supported number is 1.

1

vcs.port

Internal port of the VCS Hosting service. The Space service must be able to connect to it inside the namespace.

19777

vcs.hostingCircletKey

Symmetric 256-bit key that the Space and VCS Hosting applications will use to communicate with each other.

""

vcs.storageModeS3Bucket

S3-compatible/MinIO Object Storage bucket for storing Git repo objects. Must be the same as the one used for Space.

space-local

vcs.resources.limits.cpu

CPU resource limit for a VCS Hosting pod.

1000m

vcs.resources.limits.memory

Memory resource limit for a VCS Hosting pod.

1000Mi

vcs.resources.requests.cpu

CPU resource request for a VCS Hosting pod.

1000m

vcs.resources.requests.memory

CPU resource request for a VCS Hosting pod.

200Mi

vcs.additionalJavaOpts

Java Options values you want to pass to the VCS Hosting application.

""

vcs.sshServerKeyRSABase64

Base64-encoded private RSA key VCS Hosting will use to respond on the SSH port.

""

Packages service settings

Name

Description

Default Value

packages.image

Docker image for Packages

SPACE_DOCKER_REGISTRY_PLACEHOLDER/packages

packages.replicas

Number of Packages pods.

1

packages.port

External port of the Packages service. The Space service must be able to connect to it inside the namespace.

9390

packages.internalPort

Internal port of the Packages service. The Space service must be able to connect to it inside the namespace.

8390

packages.resources.limits.cpu

CPU resource limit for a Packages pod

1000m

packages.resources.limits.memory

Memory resource limit for a Packages pod

2000Mi

packages.resources.requests.cpu

CPU resource request for a Packages pod

1000m

packages.resources.requests.memory

CPU resource request for a Packages pod

200Mi

packages.oauth.clientId

Name of the oAuth client that the Space and Packages applications will use to communicate with each other.

space-to-packages-client

packages.oauth.clientSecret

Symmetric 256-bit string the Space and Packages applications will use to communicate with each other.

""

packages.additionalJavaOpts

Java Options values you want to pass to the Packages application.

""

Last modified: 01 July 2022