Helm values reference

Use existing Secrets for production credentials. Empty values can mean omitted settings or Secret references; arrays replace the default array. Pin release images and configure model entries for your installation. Start with Install on Kubernetes for the required values.

nameOverride

Show settings

Setting	Type	Default
`nameOverride`	string	""

fullnameOverride

Show settings

Setting	Type	Default
`fullnameOverride`	string	""

image

Show settings

Setting	Type	Default
`image.registry`	string	”quay.io/eigenpal”
`image.app.repository`	string	”eigenpal-app”
`image.app.tag`	string	""
`image.worker.repository`	string	”eigenpal-worker”
`image.worker.tag`	string	""
`image.pullPolicy`	string	”IfNotPresent”
`image.pullSecrets`	array	[]

tenant

Show settings

Setting	Type	Default
`tenant.mode`	string	”single-tenant”
`tenant.id`	string	""

agents

Show settings

Setting	Type	Default
`agents.enabled`	boolean	false

telemetry

Show settings

Setting	Type	Default
`telemetry.enabled`	boolean	false

webhooks

Show settings

Setting	Type	Default
`webhooks.allowPrivateDestinations`	string	""
`webhooks.requestTimeoutMs`	string	""
`webhooks.retrySchedule`	string	""

podSecurityContext

Show settings

Setting	Type	Default
`podSecurityContext.runAsNonRoot`	boolean	true
`podSecurityContext.runAsUser`	number	10001
`podSecurityContext.fsGroup`	number	10001
`podSecurityContext.seccompProfile.type`	string	”RuntimeDefault”

containerSecurityContext

Show settings

Setting	Type	Default
`containerSecurityContext.allowPrivilegeEscalation`	boolean	false
`containerSecurityContext.capabilities.drop`	array	[“ALL”]
`containerSecurityContext.readOnlyRootFilesystem`	boolean	false

serviceAccount

Show settings

Setting	Type	Default
`serviceAccount.create`	boolean	true
`serviceAccount.name`	string	""
`serviceAccount.annotations`	object	{}

secrets

Show settings

Setting	Type	Default
`secrets.create`	boolean	false
`secrets.database.existingSecret`	string	”eigenpal-db”
`secrets.s3.existingSecret`	string	”eigenpal-s3”
`secrets.ai.existingSecret`	string	”eigenpal-ai”
`secrets.admin.existingSecret`	string	”eigenpal-admin”
`secrets.auth.existingSecret`	string	”eigenpal-db”
`secrets.auth.secretKey`	string	”BETTER_AUTH_SECRET”
`secrets.cron.existingSecret`	string	""
`secrets.cron.secretKey`	string	”CRON_SECRET”
`secrets.secretsWrappingKey.existingSecret`	string	""
`secrets.secretsWrappingKey.secretKey`	string	”EIGENPAL_SECRETS_WRAPPING_KEY”
`secrets.values.database.user`	string	evaluation-only input
`secrets.values.database.password`	string	evaluation-only input
`secrets.values.database.db`	string	evaluation-only input
`secrets.values.database.url`	string	evaluation-only input
`secrets.values.s3.accessKey`	string	evaluation-only input
`secrets.values.s3.secretKey`	string	evaluation-only input
`secrets.values.s3.endpoint`	string	evaluation-only input
`secrets.values.s3.bucket`	string	evaluation-only input
`secrets.values.s3.region`	string	evaluation-only input
`secrets.values.ai.openaiApiKey`	string	evaluation-only input
`secrets.values.ai.azureDocIntelEndpoint`	string	evaluation-only input
`secrets.values.ai.azureDocIntelApiKey`	string	evaluation-only input
`secrets.values.admin.email`	string	evaluation-only input
`secrets.values.admin.password`	string	evaluation-only input
`secrets.values.admin.name`	string	evaluation-only input
`secrets.values.auth.betterAuthSecret`	string	evaluation-only input
`secrets.values.secretsWrappingKey`	string	evaluation-only input
`secrets.values.cronSecret`	string	evaluation-only input

sandboxStorage

Show settings

Setting	Type	Default
`sandboxStorage.stsRoleArn`	string	""
`sandboxStorage.r2AccountId`	string	""
`sandboxStorage.r2ApiTokenSecret.existingSecret`	string	""
`sandboxStorage.r2ApiTokenSecret.secretKey`	string	”SANDBOX_STORAGE_R2_API_TOKEN”
`sandboxStorage.credentialTtlSeconds`	number	3600

config

Show settings

Setting	Type	Default
`config.deployment.multipartMaxBytes`	null	null
`config.deployment.archiveMaxBytes`	number	5368709120
`config.models`	array	configure for your installation

configEnv

Show settings

Setting	Type	Default
`configEnv`	array	[]

trustedCA

Show settings

Setting	Type	Default
`trustedCA.secretName`	string	""
`trustedCA.configMapName`	string	""
`trustedCA.key`	string	”ca.crt”

app

Show settings

Setting	Type	Default
`app.replicaCount`	number	2
`app.pdb.enabled`	boolean	false
`app.pdb.minAvailable`	number	1
`app.resources.requests.cpu`	string	”250m”
`app.resources.requests.memory`	string	”1Gi”
`app.resources.limits.cpu`	string	”1”
`app.resources.limits.memory`	string	”2Gi”
`app.podAnnotations`	object	{}
`app.nodeSelector`	object	{}
`app.tolerations`	array	[]
`app.affinity`	object	{}
`app.extraEnv`	array	[]

worker

Show settings

Setting	Type	Default
`worker.replicaCount`	number	2
`worker.pdb.enabled`	boolean	false
`worker.pdb.minAvailable`	number	1
`worker.concurrency.pool`	string	”4”
`worker.concurrency.maxBatch`	string	""
`worker.concurrency.maxTenant`	string	""
`worker.concurrency.maxTenantAgent`	string	""
`worker.concurrency.maxTenantWorkflow`	string	""
`worker.resources.requests.cpu`	string	”500m”
`worker.resources.requests.memory`	string	”512Mi”
`worker.resources.limits.cpu`	string	”2”
`worker.resources.limits.memory`	string	”2Gi”
`worker.podAnnotations`	object	{}
`worker.nodeSelector`	object	{}
`worker.tolerations`	array	[]
`worker.affinity`	object	{}
`worker.extraEnv`	array	[]

promotion

Show settings

Setting	Type	Default
`promotion.enabled`	boolean	false
`promotion.environment`	string	""
`promotion.environments`	array	configure for your installation
`promotion.git.provider`	string	”github”
`promotion.git.apiUrl`	string	""
`promotion.git.repository`	string	""
`promotion.git.branch`	string	”main”
`promotion.git.app.id`	string	""
`promotion.git.app.privateKeySecret.existingSecret`	string	""
`promotion.git.app.privateKeySecret.key`	string	”private-key”
`promotion.git.tokenSecret.existingSecret`	string	""
`promotion.git.tokenSecret.key`	string	”token”
`promotion.artifactStore`	object	{}
`promotion.pullSchedule`	string	”/15 * * *“
`promotion.notifications.enabled`	boolean	false
`promotion.notifications.secret.existingSecret`	string	""
`promotion.notifications.secret.key`	string	”secret”

maintenance

Show settings

Setting	Type	Default
`maintenance.enabled`	boolean	true
`maintenance.schedule`	string	”/15 * * *“
`maintenance.image`	string	”busybox:1.36”
`maintenance.resources.requests.cpu`	string	”10m”
`maintenance.resources.requests.memory`	string	”16Mi”
`maintenance.resources.limits.cpu`	string	”100m”
`maintenance.resources.limits.memory`	string	”64Mi”
`maintenance.nodeSelector`	object	{}
`maintenance.tolerations`	array	[]
`maintenance.affinity`	object	{}

migrate

Show settings

Setting	Type	Default
`migrate.enabled`	boolean	true
`migrate.hook`	boolean	true
`migrate.blob`	boolean	true
`migrate.scripts`	boolean	false
`migrate.extraEnv`	array	[]
`migrate.resources.requests.cpu`	string	”100m”
`migrate.resources.requests.memory`	string	”256Mi”
`migrate.resources.limits.cpu`	string	”1”
`migrate.resources.limits.memory`	string	”512Mi”

service

Show settings

Setting	Type	Default
`service.port`	number	3000

ingress

Show settings

Setting	Type	Default
`ingress.enabled`	boolean	true
`ingress.className`	string	”nginx”
`ingress.host`	string	installation-specific
`ingress.annotations.nginx.ingress.kubernetes.io/proxy-read-timeout`	string	”1800”
`ingress.annotations.nginx.ingress.kubernetes.io/proxy-send-timeout`	string	”1800”
`ingress.annotations.nginx.ingress.kubernetes.io/proxy-body-size`	string	”500m”
`ingress.tls`	array	[]

openshift

Show settings

Setting	Type	Default
`openshift.route.enabled`	boolean	false
`openshift.route.host`	string	installation-specific

networkPolicy

Show settings

Setting	Type	Default
`networkPolicy.enabled`	boolean	false

postgres

Show settings

Setting	Type	Default
`postgres.enabled`	boolean	false
`postgres.image`	string	”postgres:16-alpine”
`postgres.storage`	string	”10Gi”
`postgres.resources.requests.cpu`	string	”250m”
`postgres.resources.requests.memory`	string	”256Mi”
`postgres.resources.limits.cpu`	string	”1”
`postgres.resources.limits.memory`	string	”1Gi”

minio

Show settings

Setting	Type	Default
`minio.enabled`	boolean	false
`minio.image`	string	""
`minio.mcImage`	string	""
`minio.storage`	string	”20Gi”
`minio.resources.requests.cpu`	string	”250m”
`minio.resources.requests.memory`	string	”256Mi”
`minio.resources.limits.cpu`	string	”1”
`minio.resources.limits.memory`	string	”1Gi”

Get started

Concepts

Workflow steps

Guides & tutorials

Self-hosting

Changelog

nameOverride

fullnameOverride

image

tenant

agents

telemetry

webhooks

podSecurityContext

containerSecurityContext

serviceAccount

secrets

sandboxStorage

config

configEnv

trustedCA

app

worker

promotion

maintenance

migrate

service

ingress

openshift

networkPolicy

postgres

minio

​nameOverride

​fullnameOverride

​image

​tenant

​agents

​telemetry

​webhooks

​podSecurityContext

​containerSecurityContext

​serviceAccount

​secrets

​sandboxStorage

​config

​configEnv

​trustedCA

​app

​worker

​promotion

​maintenance

​migrate

​service

​ingress

​openshift

​networkPolicy

​postgres

​minio

nameOverride

fullnameOverride

image

tenant

agents

telemetry

webhooks

podSecurityContext

containerSecurityContext

serviceAccount

secrets

sandboxStorage

config

configEnv

trustedCA

app

worker

promotion

maintenance

migrate

service

ingress

openshift

networkPolicy

postgres

minio