> ## Documentation Index
> Fetch the complete documentation index at: https://docs.eigenpal.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Helm values reference

> Chart settings and defaults for your installation.

Use existing Secrets for production credentials. Empty values can mean omitted settings or Secret references; arrays replace the default array. Pin release images and configure model entries for your installation.

Start with [Install on Kubernetes](https://docs.eigenpal.com/self-hosting/kubernetes.md) for the required values.

## nameOverride

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `nameOverride` | string | "" |

## fullnameOverride

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `fullnameOverride` | string | "" |

## image

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `image.registry` | string | "quay.io/eigenpal" |
> | `image.app.repository` | string | "eigenpal-app" |
> | `image.app.tag` | string | "" |
> | `image.worker.repository` | string | "eigenpal-worker" |
> | `image.worker.tag` | string | "" |
> | `image.pullPolicy` | string | "IfNotPresent" |
> | `image.pullSecrets` | array | \[] |

## tenant

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `tenant.mode` | string | "single-tenant" |
> | `tenant.id` | string | "" |

## agents

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `agents.enabled` | boolean | false |

## telemetry

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `telemetry.enabled` | boolean | false |

## webhooks

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `webhooks.allowPrivateDestinations` | string | "" |
> | `webhooks.requestTimeoutMs` | string | "" |
> | `webhooks.retrySchedule` | string | "" |

## podSecurityContext

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `podSecurityContext.runAsNonRoot` | boolean | true |
> | `podSecurityContext.runAsUser` | number | 10001 |
> | `podSecurityContext.fsGroup` | number | 10001 |
> | `podSecurityContext.seccompProfile.type` | string | "RuntimeDefault" |

## containerSecurityContext

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `containerSecurityContext.allowPrivilegeEscalation` | boolean | false |
> | `containerSecurityContext.capabilities.drop` | array | \["ALL"] |
> | `containerSecurityContext.readOnlyRootFilesystem` | boolean | false |

## serviceAccount

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `serviceAccount.create` | boolean | true |
> | `serviceAccount.name` | string | "" |
> | `serviceAccount.annotations` | object | \{} |

## secrets

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `secrets.create` | boolean | false |
> | `secrets.database.existingSecret` | string | "eigenpal-db" |
> | `secrets.s3.existingSecret` | string | "eigenpal-s3" |
> | `secrets.ai.existingSecret` | string | "eigenpal-ai" |
> | `secrets.admin.existingSecret` | string | "eigenpal-admin" |
> | `secrets.auth.existingSecret` | string | "eigenpal-db" |
> | `secrets.auth.secretKey` | string | "BETTER\_AUTH\_SECRET" |
> | `secrets.cron.existingSecret` | string | "" |
> | `secrets.cron.secretKey` | string | "CRON\_SECRET" |
> | `secrets.secretsWrappingKey.existingSecret` | string | "" |
> | `secrets.secretsWrappingKey.secretKey` | string | "EIGENPAL\_SECRETS\_WRAPPING\_KEY" |
> | `secrets.values.database.user` | string | evaluation-only input |
> | `secrets.values.database.password` | string | evaluation-only input |
> | `secrets.values.database.db` | string | evaluation-only input |
> | `secrets.values.database.url` | string | evaluation-only input |
> | `secrets.values.s3.accessKey` | string | evaluation-only input |
> | `secrets.values.s3.secretKey` | string | evaluation-only input |
> | `secrets.values.s3.endpoint` | string | evaluation-only input |
> | `secrets.values.s3.bucket` | string | evaluation-only input |
> | `secrets.values.s3.region` | string | evaluation-only input |
> | `secrets.values.ai.openaiApiKey` | string | evaluation-only input |
> | `secrets.values.ai.azureDocIntelEndpoint` | string | evaluation-only input |
> | `secrets.values.ai.azureDocIntelApiKey` | string | evaluation-only input |
> | `secrets.values.admin.email` | string | evaluation-only input |
> | `secrets.values.admin.password` | string | evaluation-only input |
> | `secrets.values.admin.name` | string | evaluation-only input |
> | `secrets.values.auth.betterAuthSecret` | string | evaluation-only input |
> | `secrets.values.secretsWrappingKey` | string | evaluation-only input |
> | `secrets.values.cronSecret` | string | evaluation-only input |

## sandboxStorage

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `sandboxStorage.stsRoleArn` | string | "" |
> | `sandboxStorage.r2AccountId` | string | "" |
> | `sandboxStorage.r2ApiTokenSecret.existingSecret` | string | "" |
> | `sandboxStorage.r2ApiTokenSecret.secretKey` | string | "SANDBOX\_STORAGE\_R2\_API\_TOKEN" |
> | `sandboxStorage.credentialTtlSeconds` | number | 3600 |

## config

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `config.deployment.multipartMaxBytes` | null | null |
> | `config.deployment.archiveMaxBytes` | number | 5368709120 |
> | `config.models` | array | configure for your installation |

## configEnv

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `configEnv` | array | \[] |

## trustedCA

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `trustedCA.secretName` | string | "" |
> | `trustedCA.configMapName` | string | "" |
> | `trustedCA.key` | string | "ca.crt" |

## app

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `app.replicaCount` | number | 2 |
> | `app.pdb.enabled` | boolean | false |
> | `app.pdb.minAvailable` | number | 1 |
> | `app.resources.requests.cpu` | string | "250m" |
> | `app.resources.requests.memory` | string | "1Gi" |
> | `app.resources.limits.cpu` | string | "1" |
> | `app.resources.limits.memory` | string | "2Gi" |
> | `app.podAnnotations` | object | \{} |
> | `app.nodeSelector` | object | \{} |
> | `app.tolerations` | array | \[] |
> | `app.affinity` | object | \{} |
> | `app.extraEnv` | array | \[] |

## worker

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `worker.replicaCount` | number | 2 |
> | `worker.pdb.enabled` | boolean | false |
> | `worker.pdb.minAvailable` | number | 1 |
> | `worker.concurrency.pool` | string | "4" |
> | `worker.concurrency.maxBatch` | string | "" |
> | `worker.concurrency.maxTenant` | string | "" |
> | `worker.concurrency.maxTenantAgent` | string | "" |
> | `worker.concurrency.maxTenantWorkflow` | string | "" |
> | `worker.resources.requests.cpu` | string | "500m" |
> | `worker.resources.requests.memory` | string | "512Mi" |
> | `worker.resources.limits.cpu` | string | "2" |
> | `worker.resources.limits.memory` | string | "2Gi" |
> | `worker.podAnnotations` | object | \{} |
> | `worker.nodeSelector` | object | \{} |
> | `worker.tolerations` | array | \[] |
> | `worker.affinity` | object | \{} |
> | `worker.extraEnv` | array | \[] |

## promotion

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `promotion.enabled` | boolean | false |
> | `promotion.environment` | string | "" |
> | `promotion.environments` | array | configure for your installation |
> | `promotion.git.provider` | string | "github" |
> | `promotion.git.apiUrl` | string | "" |
> | `promotion.git.repository` | string | "" |
> | `promotion.git.branch` | string | "main" |
> | `promotion.git.app.id` | string | "" |
> | `promotion.git.app.privateKeySecret.existingSecret` | string | "" |
> | `promotion.git.app.privateKeySecret.key` | string | "private-key" |
> | `promotion.git.tokenSecret.existingSecret` | string | "" |
> | `promotion.git.tokenSecret.key` | string | "token" |
> | `promotion.artifactStore` | object | \{} |
> | `promotion.pullSchedule` | string | "\*/15 \* \* \* \*" |
> | `promotion.notifications.enabled` | boolean | false |
> | `promotion.notifications.secret.existingSecret` | string | "" |
> | `promotion.notifications.secret.key` | string | "secret" |

## maintenance

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `maintenance.enabled` | boolean | true |
> | `maintenance.schedule` | string | "\*/15 \* \* \* \*" |
> | `maintenance.image` | string | "busybox:1.36" |
> | `maintenance.resources.requests.cpu` | string | "10m" |
> | `maintenance.resources.requests.memory` | string | "16Mi" |
> | `maintenance.resources.limits.cpu` | string | "100m" |
> | `maintenance.resources.limits.memory` | string | "64Mi" |
> | `maintenance.nodeSelector` | object | \{} |
> | `maintenance.tolerations` | array | \[] |
> | `maintenance.affinity` | object | \{} |

## migrate

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `migrate.enabled` | boolean | true |
> | `migrate.hook` | boolean | true |
> | `migrate.blob` | boolean | true |
> | `migrate.scripts` | boolean | false |
> | `migrate.extraEnv` | array | \[] |
> | `migrate.resources.requests.cpu` | string | "100m" |
> | `migrate.resources.requests.memory` | string | "256Mi" |
> | `migrate.resources.limits.cpu` | string | "1" |
> | `migrate.resources.limits.memory` | string | "512Mi" |

## service

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `service.port` | number | 3000 |

## ingress

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `ingress.enabled` | boolean | true |
> | `ingress.className` | string | "nginx" |
> | `ingress.host` | string | installation-specific |
> | `ingress.annotations.nginx.ingress.kubernetes.io/proxy-read-timeout` | string | "1800" |
> | `ingress.annotations.nginx.ingress.kubernetes.io/proxy-send-timeout` | string | "1800" |
> | `ingress.annotations.nginx.ingress.kubernetes.io/proxy-body-size` | string | "500m" |
> | `ingress.tls` | array | \[] |

## openshift

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `openshift.route.enabled` | boolean | false |
> | `openshift.route.host` | string | installation-specific |

## networkPolicy

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `networkPolicy.enabled` | boolean | false |

## postgres

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `postgres.enabled` | boolean | false |
> | `postgres.image` | string | "postgres:16-alpine" |
> | `postgres.storage` | string | "10Gi" |
> | `postgres.resources.requests.cpu` | string | "250m" |
> | `postgres.resources.requests.memory` | string | "256Mi" |
> | `postgres.resources.limits.cpu` | string | "1" |
> | `postgres.resources.limits.memory` | string | "1Gi" |

## minio

> [accordion] Show settings
>
> | Setting | Type | Default |
> | - | - | - |
> | `minio.enabled` | boolean | false |
> | `minio.image` | string | "" |
> | `minio.mcImage` | string | "" |
> | `minio.storage` | string | "20Gi" |
> | `minio.resources.requests.cpu` | string | "250m" |
> | `minio.resources.requests.memory` | string | "256Mi" |
> | `minio.resources.limits.cpu` | string | "1" |
> | `minio.resources.limits.memory` | string | "1Gi" |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.