# Helm values (full reference)

Complete, generated list of every chart value with its type and default. For the curated, task-oriented view, see the [Helm values reference](/deploy/helm/values-reference).

## crypto-vault

![Version: 0.1.18](https://img.shields.io/badge/Version-0.1.18-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v0.1.15](https://img.shields.io/badge/AppVersion-v0.1.15-informational?style=flat-square)

Crypto-vault E2E environment with orchestrator, policy-server, MPC key stores, and supporting services

### Requirements

| Repository | Name | Version |
|------------|------|---------|
| file://../crypto-vault-common | crypto-vault-common | 0.1.1 |
| https://nats-io.github.io/k8s/helm/charts/ | nats | 2.14.2 |
| oci://repo.sodot.dev/sodot-helm-charts | relay | 3.5.0 |

### Values

| Key | Type | Default | Description |
|-----|------|---------|-------------|
| autoscaling.enabled | bool | `false` |  |
| autoscaling.maxReplicas | int | `6` |  |
| autoscaling.minReplicas | int | `2` |  |
| autoscaling.targetCPUUtilizationPercentage | int | `70` |  |
| autoscaling.targetMemoryUtilizationPercentage | string | `nil` |  |
| aws.nitroEnclave.cpuAdvertisement | bool | `true` |  |
| aws.nitroEnclave.credentialFetcher.image.repository | string | `"amazon/aws-cli"` |  |
| aws.nitroEnclave.credentialFetcher.image.tag | string | `"2.35.16"` |  |
| aws.nitroEnclave.credentialFetcher.pullPolicy | string | `"IfNotPresent"` |  |
| aws.nitroEnclave.credentialFetcher.resources.limits.cpu | string | `"200m"` |  |
| aws.nitroEnclave.credentialFetcher.resources.limits.memory | string | `"128Mi"` |  |
| aws.nitroEnclave.credentialFetcher.resources.requests.cpu | string | `"50m"` |  |
| aws.nitroEnclave.credentialFetcher.resources.requests.memory | string | `"64Mi"` |  |
| aws.nitroEnclave.credentialRefreshIntervalSeconds | int | `21600` |  |
| aws.nitroEnclave.enclave.cid | string | `"16"` |  |
| aws.nitroEnclave.enclave.cpuCount | string | `"2"` |  |
| aws.nitroEnclave.enclave.debug | string | `"false"` |  |
| aws.nitroEnclave.enclave.dns.options | string | `""` |  |
| aws.nitroEnclave.enclave.dns.search | string | `""` |  |
| aws.nitroEnclave.enclave.dns.servers | string | `""` |  |
| aws.nitroEnclave.enclave.image | string | `""` |  |
| aws.nitroEnclave.enclave.memoryMiB | string | `"2048"` |  |
| aws.nitroEnclave.enclaver.image.digest | string | `""` |  |
| aws.nitroEnclave.enclaver.image.repository | string | `"repo.sodot.dev/sodot-docker-oci/enclaver"` |  |
| aws.nitroEnclave.enclaver.image.tag | string | `"v0.1.15"` |  |
| aws.nitroEnclave.enclaver.pullPolicy | string | `"IfNotPresent"` |  |
| aws.nitroEnclave.enclaver.resources.limits.cpu | string | `"500m"` |  |
| aws.nitroEnclave.enclaver.resources.limits.memory | string | `"256Mi"` |  |
| aws.nitroEnclave.enclaver.resources.requests.cpu | string | `"100m"` |  |
| aws.nitroEnclave.enclaver.resources.requests.memory | string | `"128Mi"` |  |
| aws.nitroEnclave.hugepages.size | string | `"1Gi"` |  |
| aws.nitroEnclave.nodeSelector.aws-nitro-enclaves-k8s-dp | string | `"enabled"` |  |
| aws.nitroEnclave.otlpExporter.bindTimeoutSecs | int | `120` |  |
| aws.nitroEnclave.otlpExporter.downstream.basicAuthSecret.key | string | `""` |  |
| aws.nitroEnclave.otlpExporter.downstream.basicAuthSecret.name | string | `""` |  |
| aws.nitroEnclave.otlpExporter.downstream.otlpEndpoint | string | `""` |  |
| aws.nitroEnclave.otlpExporter.downstream.otlpQueueBytes | int | `67108864` |  |
| aws.nitroEnclave.otlpExporter.downstream.otlpQueueCapacity | int | `2048` |  |
| aws.nitroEnclave.otlpExporter.downstream.otlpTimeoutSecs | int | `5` |  |
| aws.nitroEnclave.otlpExporter.downstream.protocol | string | `"http"` |  |
| aws.nitroEnclave.otlpExporter.enabled | bool | `true` |  |
| aws.nitroEnclave.otlpExporter.format | string | `"json"` |  |
| aws.nitroEnclave.otlpExporter.grpcIngress | bool | `true` |  |
| aws.nitroEnclave.otlpExporter.image.repository | string | `"repo.sodot.dev/sodot-docker-oci/enclave-otlp-exporter"` |  |
| aws.nitroEnclave.otlpExporter.image.tag | string | `"v0.1.15"` |  |
| aws.nitroEnclave.otlpExporter.pullPolicy | string | `"IfNotPresent"` |  |
| aws.nitroEnclave.otlpExporter.resources.limits.memory | string | `"512Mi"` |  |
| aws.nitroEnclave.otlpExporter.resources.requests.cpu | string | `"25m"` |  |
| aws.nitroEnclave.otlpExporter.resources.requests.memory | string | `"64Mi"` |  |
| aws.nitroEnclave.otlpExporter.threads | int | `4` |  |
| aws.nitroEnclave.prebuiltEif.eifDirectory | string | `"/eif"` |  |
| aws.nitroEnclave.prebuiltEif.eifRef | string | `"repo.sodot.dev/sodot-docker-oci/mpc-key-store-eif:v0.1.15"` |  |
| aws.nitroEnclave.prebuiltEif.enabled | bool | `true` |  |
| aws.nitroEnclave.prebuiltEif.orasImage.pullPolicy | string | `"IfNotPresent"` |  |
| aws.nitroEnclave.prebuiltEif.orasImage.repository | string | `"ghcr.io/oras-project/oras"` |  |
| aws.nitroEnclave.prebuiltEif.orasImage.tag | string | `"v1.3.3"` |  |
| aws.nitroEnclave.registrySecret.name | string | `"artifactory-credentials"` |  |
| aws.nitroEnclave.registrySecret.passwordKey | string | `"password"` |  |
| aws.nitroEnclave.registrySecret.userKey | string | `"username"` |  |
| aws.nitroEnclave.resourceServer.image.repository | string | `"repo.sodot.dev/sodot-docker-oci/enclave-resource-server"` |  |
| aws.nitroEnclave.resourceServer.image.tag | string | `"v0.1.15"` |  |
| aws.nitroEnclave.resourceServer.pullPolicy | string | `"IfNotPresent"` |  |
| aws.nitroEnclave.resourceServer.resources.limits.cpu | string | `"200m"` |  |
| aws.nitroEnclave.resourceServer.resources.limits.memory | string | `"128Mi"` |  |
| aws.nitroEnclave.resourceServer.resources.requests.cpu | string | `"50m"` |  |
| aws.nitroEnclave.resourceServer.resources.requests.memory | string | `"64Mi"` |  |
| aws.nitroEnclave.resources."aws.ec2.nitro/nitro\_enclaves" | string | `"1"` |  |
| aws.nitroEnclave.runner.image.repository | string | `"repo.sodot.dev/sodot-docker-oci/enclave-runner"` |  |
| aws.nitroEnclave.runner.image.tag | string | `"v0.1.15"` |  |
| aws.nitroEnclave.runner.pullPolicy | string | `"IfNotPresent"` |  |
| aws.nitroEnclave.runner.resources.limits.cpu | string | `"2"` |  |
| aws.nitroEnclave.runner.resources.limits.memory | string | `"2Gi"` |  |
| aws.nitroEnclave.runner.resources.requests.cpu | string | `"250m"` |  |
| aws.nitroEnclave.runner.resources.requests.memory | string | `"512Mi"` |  |
| aws.nitroEnclave.tunHostAddr | string | `"192.168.255.2"` |  |
| aws.nitroEnclave.tunMtu | int | `1400` |  |
| aws.region | string | `""` |  |
| azureAuth.clientId | string | `""` |  |
| azureAuth.tenantId | string | `""` |  |
| cloudProvider | string | `"aws"` |  |
| containerSecurityContext.allowPrivilegeEscalation | bool | `false` |  |
| containerSecurityContext.capabilities.drop\[0] | string | `"ALL"` |  |
| containerSecurityContext.readOnlyRootFilesystem | bool | `true` |  |
| googleAuth.adminEmails | list | `[]` |  |
| googleAuth.clientId | string | `""` |  |
| imagePullPolicy | string | `"IfNotPresent"` |  |
| initImage.repository | string | `"postgres"` |  |
| initImage.tag | string | `"18"` |  |
| initResources.limits.cpu | string | `"100m"` |  |
| initResources.limits.memory | string | `"64Mi"` |  |
| initResources.requests.cpu | string | `"10m"` |  |
| initResources.requests.memory | string | `"32Mi"` |  |
| keyStore.replicas | int | `2` |  |
| keyStore.rustLog | string | `"info"` |  |
| keyStore.storageEncryptor.awsKms.keyId | string | `""` |  |
| keyStore.storageEncryptor.awsKms.region | string | `""` |  |
| keyStore.storageEncryptor.azureKeyVault.keyName | string | `""` |  |
| keyStore.storageEncryptor.azureKeyVault.vaultUrl | string | `""` |  |
| keyStore.storageEncryptor.gcpKms.key | string | `""` |  |
| keyStore.storageEncryptor.gcpKms.keyring | string | `""` |  |
| keyStore.storageEncryptor.gcpKms.location | string | `""` |  |
| keyStore.storageEncryptor.gcpKms.project | string | `""` |  |
| keyStore.storageEncryptor.type | string | `"aws_kms"` |  |
| migrations.required | list | `[]` |  |
| mpcKeyStoreImage.repository | string | `"repo.sodot.dev/sodot-docker-oci/mpc-key-store-aws-nitro"` |  |
| mpcKeyStoreImage.tag | string | `"v0.1.15"` |  |
| mpcKeyStoreServiceAccount.annotations | object | `{}` |  |
| mpcKeyStoreServiceAccount.automountServiceAccountToken | bool | `false` |  |
| mpcKeyStoreServiceAccount.aws.roleArn | string | `""` |  |
| mpcKeyStoreServiceAccount.azure.clientId | string | `""` |  |
| mpcKeyStoreServiceAccount.azure.useWorkloadIdentity | bool | `false` |  |
| mpcKeyStoreServiceAccount.gcp.serviceAccountEmail | string | `""` |  |
| mpcKeyStores\[0].backupEncryptorPublicKey | string | `""` |  |
| mpcKeyStores\[0].dbHost | string | `"mpc-ks-0-db"` |  |
| mpcKeyStores\[0].dbName | string | `"mpc_ks_db"` |  |
| mpcKeyStores\[0].dbPort | int | `5432` |  |
| mpcKeyStores\[0].importedKeyEncryptorPem | string | `""` |  |
| mpcKeyStores\[0].importedKeyEncryptorPemSecret.existingSecret | string | `""` |  |
| mpcKeyStores\[0].importedKeyEncryptorPemSecret.key | string | `"imported-key-pem"` |  |
| mpcKeyStores\[0].name | string | `"mpc-key-store-0"` |  |
| mpcKeyStores\[1].backupEncryptorPublicKey | string | `""` |  |
| mpcKeyStores\[1].dbHost | string | `"mpc-ks-1-db"` |  |
| mpcKeyStores\[1].dbName | string | `"mpc_ks_db"` |  |
| mpcKeyStores\[1].dbPort | int | `5432` |  |
| mpcKeyStores\[1].importedKeyEncryptorPem | string | `""` |  |
| mpcKeyStores\[1].importedKeyEncryptorPemSecret.existingSecret | string | `""` |  |
| mpcKeyStores\[1].importedKeyEncryptorPemSecret.key | string | `"imported-key-pem"` |  |
| mpcKeyStores\[1].name | string | `"mpc-key-store-1"` |  |
| mpcKeyStores\[2].backupEncryptorPublicKey | string | `""` |  |
| mpcKeyStores\[2].dbHost | string | `"mpc-ks-2-db"` |  |
| mpcKeyStores\[2].dbName | string | `"mpc_ks_db"` |  |
| mpcKeyStores\[2].dbPort | int | `5432` |  |
| mpcKeyStores\[2].importedKeyEncryptorPem | string | `""` |  |
| mpcKeyStores\[2].importedKeyEncryptorPemSecret.existingSecret | string | `""` |  |
| mpcKeyStores\[2].importedKeyEncryptorPemSecret.key | string | `"imported-key-pem"` |  |
| mpcKeyStores\[2].name | string | `"mpc-key-store-2"` |  |
| nats.config.cluster.enabled | bool | `true` |  |
| nats.config.cluster.replicas | int | `3` |  |
| nats.config.jetstream.enabled | bool | `true` |  |
| nats.container.merge.securityContext.allowPrivilegeEscalation | bool | `false` |  |
| nats.container.resources.limits.cpu | string | `"1"` |  |
| nats.container.resources.limits.memory | string | `"512Mi"` |  |
| nats.container.resources.requests.cpu | string | `"50m"` |  |
| nats.container.resources.requests.memory | string | `"128Mi"` |  |
| nats.fullnameOverride | string | `"nats"` |  |
| nats.hub.url | string | `""` |  |
| nats.internalLoadBalancer.annotations | object | `{}` |  |
| nats.internalLoadBalancer.enabled | bool | `false` |  |
| nats.internalLoadBalancer.loadBalancerIP | string | `""` |  |
| nats.natsBox.container.resources.limits.cpu | string | `"50m"` |  |
| nats.natsBox.container.resources.limits.memory | string | `"64Mi"` |  |
| nats.natsBox.container.resources.requests.cpu | string | `"10m"` |  |
| nats.natsBox.container.resources.requests.memory | string | `"16Mi"` |  |
| nats.natsBox.enabled | bool | `false` |  |
| nats.podTemplate.merge.spec.securityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
| nats.podTemplate.topologySpreadConstraints."kubernetes.io/hostname".maxSkew | int | `1` |  |
| nats.podTemplate.topologySpreadConstraints."kubernetes.io/hostname".whenUnsatisfiable | string | `"ScheduleAnyway"` |  |
| nats.podTemplate.topologySpreadConstraints."topology.kubernetes.io/zone".maxSkew | int | `1` |  |
| nats.podTemplate.topologySpreadConstraints."topology.kubernetes.io/zone".whenUnsatisfiable | string | `"ScheduleAnyway"` |  |
| nats.reloader.merge.resources.limits.cpu | string | `"50m"` |  |
| nats.reloader.merge.resources.limits.memory | string | `"64Mi"` |  |
| nats.reloader.merge.resources.requests.cpu | string | `"10m"` |  |
| nats.reloader.merge.resources.requests.memory | string | `"16Mi"` |  |
| nats.reloader.merge.securityContext.allowPrivilegeEscalation | bool | `false` |  |
| nats.streamReplication.credentialsKey | string | `"nats.creds"` |  |
| nats.streamReplication.credentialsSecret | string | `""` |  |
| nats.streamReplication.enabled | bool | `true` |  |
| nats.streamReplication.image.repository | string | `"natsio/nats-box"` |  |
| nats.streamReplication.image.tag | string | `"0.19.7"` |  |
| nats.streamReplication.replicas | string | `nil` |  |
| nats.streamReplication.resources.limits.cpu | string | `"100m"` |  |
| nats.streamReplication.resources.limits.memory | string | `"64Mi"` |  |
| nats.streamReplication.resources.requests.cpu | string | `"25m"` |  |
| nats.streamReplication.resources.requests.memory | string | `"32Mi"` |  |
| networkPolicies.enabled | bool | `true` |  |
| networkPolicies.extraIngressCidrs | list | `[]` |  |
| observability.consoleColor | bool | `false` |  |
| observability.otlp.console | bool | `true` |  |
| observability.otlp.endpoint | string | `""` |  |
| observability.otlp.headersSecret.key | string | `""` |  |
| observability.otlp.headersSecret.name | string | `""` |  |
| observability.otlp.logFilter | string | `""` |  |
| observability.otlp.protocol | string | `"grpc"` |  |
| observability.otlp.resourceAttributes | string | `""` |  |
| observability.otlp.timeout | string | `""` |  |
| orchestrator.db.host | string | `"orchestrator-db"` |  |
| orchestrator.db.name | string | `"orchestrator_db"` |  |
| orchestrator.db.port | int | `5432` |  |
| orchestrator.extraEnv | list | `[]` |  |
| orchestrator.image.repository | string | `"repo.sodot.dev/sodot-docker-oci/orchestrator"` |  |
| orchestrator.image.tag | string | `"v0.1.15"` |  |
| orchestrator.ingress.annotations | object | `{}` |  |
| orchestrator.ingress.className | string | `""` |  |
| orchestrator.ingress.enabled | bool | `false` |  |
| orchestrator.ingress.host | string | `"crypto-vault-api.example.com"` |  |
| orchestrator.ingress.tls.enabled | bool | `false` |  |
| orchestrator.ingress.tls.secretName | string | `""` |  |
| orchestrator.internalLoadBalancer.annotations | object | `{}` |  |
| orchestrator.internalLoadBalancer.enabled | bool | `false` |  |
| orchestrator.maxConnections | int | `500` |  |
| orchestrator.nodeAffinity | object | `{}` |  |
| orchestrator.nodeSelector | object | `{}` |  |
| orchestrator.port | int | `8080` |  |
| orchestrator.replicas | int | `2` |  |
| orchestrator.resources.limits.cpu | string | `"2"` |  |
| orchestrator.resources.limits.memory | string | `"512Mi"` |  |
| orchestrator.resources.requests.cpu | string | `"1"` |  |
| orchestrator.resources.requests.memory | string | `"256Mi"` |  |
| orchestrator.rustLog | string | `"info"` |  |
| orchestrator.service.port | int | `8080` |  |
| orchestrator.service.type | string | `"ClusterIP"` |  |
| orchestrator.tolerations | list | `[]` |  |
| podDisruptionBudgets.enabled | bool | `true` |  |
| podDisruptionBudgets.maxUnavailable | int | `1` |  |
| podSecurityContext.fsGroup | int | `1000` |  |
| podSecurityContext.runAsNonRoot | bool | `true` |  |
| podSecurityContext.runAsUser | int | `1000` |  |
| podSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
| policyServer.approvalThreshold | int | `1` |  |
| policyServer.db.maxConnections | int | `10` |  |
| policyServer.extraEnv | list | `[]` |  |
| policyServer.initialAdmins\[0].cloudProvider | string | `"azure"` |  |
| policyServer.initialAdmins\[0].email | string | `"placeholder-admin@example.com"` |  |
| policyServer.initialAdmins\[0].id | string | `"dddddddd-dddd-dddd-dddd-dddddddddddd"` |  |
| policyServer.initialAdmins\[0].name | string | `"placeholder-admin"` |  |
| policyServer.initialAdmins\[0].publicKey | string | `"placeholder-not-a-real-verifying-key"` |  |
| policyServer.initialAdmins\[0].type | string | `"human"` |  |
| policyServer.nodeAffinity | object | `{}` |  |
| policyServer.nodeSelector | object | `{}` |  |
| policyServer.port | int | `3001` |  |
| policyServer.readerImage.repository | string | `"repo.sodot.dev/sodot-docker-oci/policy-server"` |  |
| policyServer.readerImage.tag | string | `"v0.1.15"` |  |
| policyServer.readerRustLog | string | `"info"` |  |
| policyServer.replicas | int | `2` |  |
| policyServer.resources.limits.cpu | string | `"2"` |  |
| policyServer.resources.limits.memory | string | `"512Mi"` |  |
| policyServer.resources.requests.cpu | string | `"250m"` |  |
| policyServer.resources.requests.memory | string | `"256Mi"` |  |
| policyServer.service.port | int | `3001` |  |
| policyServer.service.type | string | `"ClusterIP"` |  |
| policyServer.tolerations | list | `[]` |  |
| policyServer.writerImage.repository | string | `"repo.sodot.dev/sodot-docker-oci/policy-server"` |  |
| policyServer.writerImage.tag | string | `"v0.1.15"` |  |
| policyServer.writerRustLog | string | `"info"` |  |
| policyServers\[0].db.host | string | `"policy-db-0"` |  |
| policyServers\[0].db.name | string | `"policy_db_0"` |  |
| policyServers\[0].db.port | int | `5432` |  |
| policyServers\[0].externalRuleServerSigningKey | string | `""` |  |
| policyServers\[0].externalRuleServerSigningKeySecret.existingSecret | string | `""` |  |
| policyServers\[0].externalRuleServerSigningKeySecret.key | string | `"signing-key"` |  |
| policyServers\[0].readerName | string | `"policy-server-0-reader"` |  |
| policyServers\[0].writerName | string | `"policy-server-0-writer"` |  |
| policyServers\[1].db.host | string | `"policy-db-1"` |  |
| policyServers\[1].db.name | string | `"policy_db_1"` |  |
| policyServers\[1].db.port | int | `5432` |  |
| policyServers\[1].externalRuleServerSigningKey | string | `""` |  |
| policyServers\[1].externalRuleServerSigningKeySecret.existingSecret | string | `""` |  |
| policyServers\[1].externalRuleServerSigningKeySecret.key | string | `"signing-key"` |  |
| policyServers\[1].readerName | string | `"policy-server-1-reader"` |  |
| policyServers\[1].writerName | string | `"policy-server-1-writer"` |  |
| policyServers\[2].db.host | string | `"policy-db-2"` |  |
| policyServers\[2].db.name | string | `"policy_db_2"` |  |
| policyServers\[2].db.port | int | `5432` |  |
| policyServers\[2].externalRuleServerSigningKey | string | `""` |  |
| policyServers\[2].externalRuleServerSigningKeySecret.existingSecret | string | `""` |  |
| policyServers\[2].externalRuleServerSigningKeySecret.key | string | `"signing-key"` |  |
| policyServers\[2].readerName | string | `"policy-server-2-reader"` |  |
| policyServers\[2].writerName | string | `"policy-server-2-writer"` |  |
| postgresql.credentials.existingSecret | string | `""` |  |
| postgresql.credentials.password | string | `""` |  |
| postgresql.credentials.passwordKey | string | `"password"` |  |
| postgresql.credentials.username | string | `"postgres"` |  |
| postgresql.credentials.usernameKey | string | `"username"` |  |
| postgresql.sslMode | string | `""` |  |
| relay.address | string | `"http://relay-router:80"` |  |
| relay.apiKey | string | `""` |  |
| relay.apiKeySecret.existingSecret | string | `""` |  |
| relay.apiKeySecret.key | string | `"relay-api-key"` |  |
| relay.cloudProvider | string | `"aws"` |  |
| relay.hpa.replicas.max | int | `10` |  |
| relay.hpa.replicas.min | int | `2` |  |
| relay.imagePullSecrets\[0].name | string | `"artifactory-dockerconfig"` |  |
| relay.pdb.enabled | bool | `true` |  |
| relay.pdb.relay.maxUnavailable | int | `1` |  |
| relay.pdb.relay.minAvailable | string | `nil` |  |
| relay.pdb.router.maxUnavailable | int | `1` |  |
| relay.pdb.router.minAvailable | string | `nil` |  |
| relay.relay.apiKey | string | `""` |  |
| relay.relay.cpu.limits | string | `"2"` |  |
| relay.relay.cpu.requests | string | `"500m"` |  |
| relay.relay.image.pullPolicy | string | `"IfNotPresent"` |  |
| relay.relay.memory.limits | string | `"512Mi"` |  |
| relay.relay.memory.requests | string | `"256Mi"` |  |
| relay.relayRouter.cpu.limits | string | `"2"` |  |
| relay.relayRouter.cpu.requests | string | `"500m"` |  |
| relay.relayRouter.hpa.replicas.max | int | `10` |  |
| relay.relayRouter.hpa.replicas.min | int | `2` |  |
| relay.relayRouter.image.pullPolicy | string | `"IfNotPresent"` |  |
| relay.relayRouter.memory.limits | string | `"512Mi"` |  |
| relay.relayRouter.memory.requests | string | `"256Mi"` |  |
| remoteMpcKeyStores | list | `[]` |  |
| remotePolicyServers | list | `[]` |  |
| rollingUpdate.maxSurge | int | `1` |  |
| rollingUpdate.maxUnavailable | int | `0` |  |
| services.keyStore.enabled | bool | `true` |  |
| services.nats.enabled | bool | `true` |  |
| services.orchestrator.enabled | bool | `true` |  |
| services.policyServer.enabled | bool | `true` |  |
| services.relay.enabled | bool | `true` |  |
| services.vaultUi.enabled | bool | `true` |  |
| tests.enabled | bool | `true` |  |
| tests.image.repository | string | `"curlimages/curl"` |  |
| tests.image.tag | string | `"8.21.0"` |  |
| ui.clientSecretRef | string | `""` |  |
| ui.extraEnv | list | `[]` |  |
| ui.googleLogin | string | `"true"` |  |
| ui.image.repository | string | `"repo.sodot.dev/sodot-docker-oci/vault-ui"` |  |
| ui.image.tag | string | `"0.1.5"` |  |
| ui.ingress.annotations | object | `{}` |  |
| ui.ingress.className | string | `""` |  |
| ui.ingress.enabled | bool | `false` |  |
| ui.ingress.host | string | `"crypto-vault.example.com"` |  |
| ui.ingress.tls.enabled | bool | `false` |  |
| ui.ingress.tls.secretName | string | `""` |  |
| ui.loadBalancer.annotations | object | `{}` |  |
| ui.loadBalancer.certificateArn | string | `""` |  |
| ui.loadBalancer.enabled | bool | `false` |  |
| ui.loadBalancer.host | string | `""` |  |
| ui.loadBalancer.scheme | string | `"internal"` |  |
| ui.nextPublicFeatureAddressBook | string | `"true"` |  |
| ui.nextPublicFeatureAdminPolicy | string | `"true"` |  |
| ui.nextPublicFeatureApproval | string | `"true"` |  |
| ui.nextPublicFeatureAuditLogs | string | `"true"` |  |
| ui.nextPublicFeatureKeys | string | `"true"` |  |
| ui.nextPublicFeatureRiskPolicy | string | `"true"` |  |
| ui.nextPublicFeatureSettings | string | `"true"` |  |
| ui.nextPublicFeatureUserManagement | string | `"true"` |  |
| ui.nextPublicFeatureVaults | string | `"true"` |  |
| ui.nextPublicIsDemo | string | `"false"` |  |
| ui.nodeAffinity | object | `{}` |  |
| ui.nodeSelector | object | `{}` |  |
| ui.port | int | `3000` |  |
| ui.redirectUri | string | `"http://localhost:3000/auth/callback"` |  |
| ui.replicas | int | `2` |  |
| ui.resources.limits.cpu | string | `"1"` |  |
| ui.resources.limits.memory | string | `"256Mi"` |  |
| ui.resources.requests.cpu | string | `"100m"` |  |
| ui.resources.requests.memory | string | `"160Mi"` |  |
| ui.service.port | int | `3000` |  |
| ui.service.type | string | `"ClusterIP"` |  |
| ui.tolerations | list | `[]` |  |