# =============================================================================

# OpenFrame Helm Values — example (oss-tenant)

# =============================================================================

# Reference for `openframe-helm-values.yaml`, the file `openframe` reads from the

# working directory (interactively, or as-is with --non-interactive).

#

# This mirrors the flattened app-of-apps schema of openframe-oss-tenant:

# - top-level `repository.*` (not deployment.oss.repository.*)

# - `deployment.ingress.*` (not deployment.oss.ingress.*)

# - per-tier / per-app `.enabled` (not a single deployment.oss.enabled)

# Only the OSS single-tenant deployment is supported.

# =============================================================================

# ── Ingress ──────────────────────────────────────────────────────────────────

# Enable exactly one of localhost (nginx) or ngrok (external access).

deployment:

ingress:

localhost:

enabled: true # localhost HTTPS via ingress-nginx

# TLS is injected by the CLI from local mkcert certs (openframe writes

# deployment.ingress.localhost.tls.cert/key via --set-file at install);

# set here only if you manage the certs yourself.

tls: {}

ngrok:

enabled: false # external access via ngrok

url: "example.ngrok.app"

allowedIPs: [] # empty = allow all; add CIDRs to restrict

credentials:

apiKey: ""

authtoken: ""

# ── Source repository (app-of-apps) ──────────────────────────────────────────

# `branch` is what the CLI pins with --github-branch/--ref.

repository:

baseDir: manifests

URL: https://github.com/flamingo-stack/openframe-oss-tenant.git

branch: main

# ── Platform tier ────────────────────────────────────────────────────────────

# One ArgoCD Application per platform.apps entry (manifests/platform/<name>).

# ngrok-operator / ingress-nginx also follow deployment.ingress above:

# localhost.enabled skips ngrok-operator; ngrok.enabled skips ingress-nginx.

platform:

enabled: true

namespace: platform

project: platform

apps:

namespace-platform:

enabled: true

syncWave: "-1"

namespace: default # creates the (cluster-scoped) platform ns

ngrok-operator:

enabled: false

ingress-nginx:

enabled: true

dev-tools:

enabled: true

openframe-config:

enabled: true

# ── Datasources tier ─────────────────────────────────────────────────────────

# One Application per datasources.apps entry (manifests/datasources/<name>).

datasources:

enabled: true

namespace: datasources

project: datasources

apps:

namespace-datasources:

enabled: true

syncWave: "-1"

namespace: default

cassandra:

enabled: true

debezium-connect:

enabled: true

kafka:

enabled: true

mongodb:

enabled: true

mongodb-meshcentral:

enabled: true

mysql-fleetmdm:

enabled: true

nats:

enabled: true

pinot:

enabled: true

redis-cluster:

enabled: true

zookeeper:

enabled: true

# ── Tenant tier ──────────────────────────────────────────────────────────────

# ONE Application sourcing the manifests/tenant umbrella (fleet, meshcentral and

# the openframe services). OSS is single-tenant, so this is a plain Application,

# not the fleet-driven ApplicationSet used on SaaS.

tenant:

enabled: true

id: "tenant-XXX-X-X"

uuid: ""

namespace: tenant

project: tenant

syncWave: "1"

# Extra values deep-merged over the tenant umbrella (tenant.values wins per

# key). CI sets per-service image tags here, e.g.:

# values:

# openframe-saas:

# api:

# image:

# tag: <commit-sha>

values: {}