Configuration Settings
This page lists Kaptain configuration properties that can be adjusted during the initial installation or by updating the existing instance of Kaptain. These parameters are typically set in values.yaml
.
For the properties that require user credentials, ensure that the admin or a person with sufficient administrative rights has modified the initial or default user passwords.
Kaptain Chart Values
Key | Type | Default | Description |
---|---|---|---|
global.clusterDomainName | string |
| Kubernetes cluster domain name |
global.userIdHeader | string |
| Name of the HTTP header containing the information about authenticated user |
global.userIdPrefix | string |
| Prefix for the ‘userIdHeader’ header value |
global.workspace | string |
| |
ingress.enabled | bool |
| Enable ingress |
ingress.enableSecretRotation | bool |
| Enable cronjob for automatic rotation of certificate secrets |
ingress.externalDexClientId | string |
| Dex client ID to use when authenticating with external cluster |
ingress.externalDexClientSecret | string |
| Dex client secret to use when authenticating with external cluster |
ingress.oidcGroupsAllowList | string |
| List of groups that are allowed to pass authorization |
ingress.oidcProviderEndpoint | string |
| External OIDC provider endpoint URL |
ingress.oidcProviderBase64CaBundle | string |
| CA bundle of the OIDC provider endpoint URL encoded in base64 |
ingress.kubeflowIngressGatewayServiceAnnotations | object |
| Additional annotations for Kaptain’s default gateway |
ingress.customDomainName | string |
| Custom domain name used to access Kaptain, for example, kaptain.mycluster.company.com |
ingress.base64CustomCertificate | string |
| base64-encoded contents of a custom certificate file (.crt) to use with the provided custom domain name |
ingress.base64CustomCertificateKey | string |
| base64-encoded contents of a custom certificate private key file (.key) to use with the provided custom domain name |
ingress.namespace | string |
| Namespace to install Kaptain Ingress resources |
ingress.kommanderClusterObjectName | string |
| The name of the KommanderCluster object |
ingress.kommanderTraefikCertificateName | string |
| The name of the Kommander Traefik certificate |
ingress.secretRotationSchedule | string |
| Schedule for triggering the secret rotation cronjob |
core.enabled | bool |
| |
core.namespace | string |
| |
core.notebook.defaultImage | string |
| Default image to use when creating a new notebook server |
core.notebook.images[0] | string |
| JupyterLab with Tensorflow and Spark pre-installed |
core.notebook.images[1] | string |
| JupyterLab with Tensorflow, CUDA and Spark pre-installed with GPU support |
core.notebook.images[2] | string |
| JupyterLab with Pytorch and Spark pre-installed |
core.notebook.images[3] | string |
| JupyterLab with Pytorch, CUDA and Spark pre-installed with GPU support |
core.notebook.images[4] | string |
| JupyterLab with MXNet and Spark pre-installed |
core.notebook.images[5] | string |
| JupyterLab with MXNet, CUDA and Spark pre-installed with GPU support |
core.notebook.tolerationGroups | list |
| Pod toleration group configurations for Notebook servers |
core.notebook.affinityConfig | list |
| Pod affinity configurations for Notebook servers |
core.notebook.enableCulling | bool |
| Enables scale down idling notebooks to freeing up the allocated resources. |
core.notebook.idleTimeMinutes | int |
| Period of time a notebook can stay idle before it gets culled (scaled down) |
core.notebook.cullingCheckPeriodMinutes | int |
| Notebook status check period |
core.disableAntiAffinity | bool |
| Enables single-node installation. DO NOT USE IN PRODUCTION ENVIRONMENTS! Disabling anti-affinity allows installing Kaptain on a smaller number of nodes (less than 3) or on a single node. This installation mode must be used for evaluation purposes only. No data integrity guarantees in case of a hardware failure! |
core.registrationFlow | bool |
| Enables automatic profile creation |
core.tensorboardImage | string |
| Image to use for a Tensorboard in Kubeflow |
core.dashboard.uriPathPrefix | string |
| |
core.dashboard.prometheusPort | int |
| |
core.dashboard.refreshIntervalSeconds | int |
| |
core.dashboard.gunicornWorkers | int |
| |
core.dashboard.gunicornThreads | int |
| |
core.dashboard.logLevel | string |
| |
core.workflows.executorImage | string |
| |
core.workflows.containerRuntimeExecutor | string |
| Argo Workflows Executor |
core.workflows.artifactRepository.bucket | string |
| Bucket to store artifacts |
core.workflows.artifactRepository.keyPrefix | string |
| Bucket prefix |
core.workflows.artifactRepository.endpoint | string |
| S3-compatible storage endpoint |
core.workflows.artifactRepository.insecure | bool |
| Disable SSL |
core.workflows.artifactRepository.accessKeySecretName | string |
| |
core.workflows.artifactRepository.accessKeySecretKey | string |
| |
core.workflows.artifactRepository.secretKeySecretName | string |
| |
core.workflows.artifactRepository.secretKeySecretKey | string |
| |
core.db.user | string |
| MySQL Username |
core.db.password | string | MySQL Password | |
core.db.port | int |
| MySQL Port |
core.db.host | string |
| MySQL Service name in the cluster |
core.db.nodes.count | int |
| Number of MySQL nodes in the HA MySQL cluster |
core.db.nodes.diskSize | string |
| Disk size of a single database node in the MySQL cluster |
core.db.nodes.memory | string |
| Memory per single database node in the MySQL cluster |
core.db.nodes.cpu | int |
| CPU per single database node in the MySQL cluster |
core.db.proxy.count | int |
| Number of proxy instances for the HA MySQL cluster |
core.db.proxy.memory | string |
| Memory per single proxy instance in the MySQL cluster |
core.db.proxy.cpu | int |
| CPU per single proxy instance in the MySQL cluster |
core.db.backup.enabled | bool |
| Enables backup for the MySQL cluster |
core.db.backup.bucket | string |
| Backup bucket name for the MySQL cluster |
core.db.backup.region | string |
| Backup bucket region name for the MySQL cluster |
core.db.backup.secretName | string |
| Name of the secret with access credentials for the MySQL cluster backup bucket |
core.db.backup.endpointUrl | string |
| Custom endpoint URL for the MySQL cluster backup bucket |
core.minio.servers | int |
| Number of MinIO server pods to deploy in the pool; 4 is the minimum allowed |
core.minio.volumesPerServer | int |
| Number of Persistent Volume Claims to generate for each MinIO server pod in the pool |
core.minio.storageCapacity | string |
| Capacity of a single volume in MinIO server pool |
core.minio.volumeStorageClass | string |
| StorageClass name to be used for PVCs in MinIO server pool |
core.pipelines.bucketName | string |
| |
core.pipelines.cacheDb | string |
| |
core.pipelines.dbConMaxLifeTimeSec | string |
| |
core.pipelines.mlmdDB | string |
| |
core.pipelines.pipelineDB | string |
| |
core.pipelines.defaultPipelineRunnerServiceAccount | string |
| |
core.pipelines.objectStoreHost | string |
| |
core.pipelines.objectStorePort | int |
| |
core.pipelines.workflowsTTLSecondsAfterFinish | int |
| The TTL for Argo Workflow (a single run of a pipeline) to persist after completion (default: 24 hours) |
core.pipelines.enableMultiUserSupport | bool |
| Enables multi-user support for Pipelines |
core.mlflow.bucketName | string |
| |
core.mlflow.bucketPrefix | string |
| |
core.mlflow.objectStoreHost | string |
| |
core.mlflow.objectStorePort | int |
| |
core.mlflow.objectStoreProtocol | string |
| |
core.mlflow.dbName | string |
| |
core.redis.enabled | bool |
| Enabled Redis cluster |
core.redis.clientPort | int |
| Redis TCP port used to serve clients |
core.redis.clusterBusPort | int |
| Redis cluster bus port |
core.redis.password | string | <hidden> | base64-encoded Redis password |
core.redis.replicas | int |
| Number of replicas in the Redis cluster (minimum required: 6). |
core.redis.replicaVolumeSize | string |
| Volume size of a single Redis replica |
kserve.enabled | bool |
| Enables KServe |
kserve.namespace | string |
| |
kserve.agent.image | string |
| |
kserve.storage.image | string |
| |
kserve.storage.s3.accessKeyIdName | string |
| |
kserve.storage.s3.secretAccessKeyName | string |
| |
kserve.controller.deploymentMode | string |
| |
kserve.controller.gateway.domain | string |
| |
kserve.controller.gateway.localGateway.gateway | string |
| |
kserve.controller.gateway.localGateway.gatewayService | string |
| |
kserve.controller.gateway.ingressGateway.gateway | string |
| |
kserve.controller.gateway.ingressClassName | string |
| |
kserve.controller.gateway.ingressGateway. | string |
| |
kserve.controller.image | string |
| |
kserve.controller.resources.limits.cpu | string |
| |
kserve.controller.resources.limits.memory | string |
| |
kserve.controller.resources.requests.cpu | string |
| |
kserve.controller.resources.requests.memory | string |
| |
kserve.servingruntime.modelNamePlaceholder | string |
| |
kserve.servingruntime.tensorflow.image | string |
| |
kserve.servingruntime.tensorflow.tag | string |
| |
kserve.servingruntime.mlserver.image | string |
| |
kserve.servingruntime.mlserver.tag | string |
| |
kserve.servingruntime.mlserver.modelClassPlaceholder | string |
| |
kserve.servingruntime.sklearnserver.image | string |
| |
kserve.servingruntime.sklearnserver.tag | string |
| |
kserve.servingruntime.xgbserver.image | string |
| |
kserve.servingruntime.xgbserver.tag | string |
| |
kserve.servingruntime.tritonserver.image | string |
| |
kserve.servingruntime.tritonserver.tag | string |
| |
kserve.servingruntime.pmmlserver.image | string |
| |
kserve.servingruntime.pmmlserver.tag | string |
| |
kserve.servingruntime.paddleserver.image | string |
| |
kserve.servingruntime.paddleserver.tag | string |
| |
kserve.servingruntime.lgbserver.image | string |
| |
kserve.servingruntime.lgbserver.tag | string |
| |
kserve.servingruntime.torchserve.image | string |
| |
kserve.servingruntime.torchserve.tag | string |
| |
kserve.servingruntime.torchserve.serviceEnvelopePlaceholder | string |
| |
kserve.servingruntime.alibi.image | string |
| |
kserve.servingruntime.alibi.defaultVersion | string |
| |
kserve.servingruntime.art.image | string |
| |
kserve.servingruntime.art.defaultVersion | string |
|
For a full list of attributed 3rd party software, see http://d2iq.com/legal/3rd