Skip to main content

​
Kubernetes Helm Values

This page list all the supported helm values for OpenMetadata Helm Charts.

​
Openmetadata Config Chart Values

KeyTypeDefaultEnvironment Variable from openmetadata.yaml
openmetadata.config.authentication.enabledbooltrue
openmetadata.config.authentication.clientTypestringpublicAUTHENTICATION_CLIENT_TYPE
openmetadata.config.authentication.providerstringbasicAUTHENTICATION_PROVIDER
openmetadata.config.authentication.publicKeyslist[http://openmetadata:8585/api/v1/system/config/jwks]AUTHENTICATION_PUBLIC_KEYS
openmetadata.config.authentication.authoritystringhttps://accounts.google.comAUTHENTICATION_AUTHORITY
openmetadata.config.authentication.clientIdstringEmpty StringAUTHENTICATION_CLIENT_ID
openmetadata.config.authentication.callbackUrlstringEmpty StringAUTHENTICATION_CALLBACK_URL
openmetadata.config.authentication.enableSelfSignupbooltrueAUTHENTICATION_ENABLE_SELF_SIGNUP
openmetadata.config.authentication.jwtPrincipalClaimslist[email,preferred_username,sub]AUTHENTICATION_JWT_PRINCIPAL_CLAIMS
openmetadata.config.authentication.ldapConfiguration.hoststringlocalhostAUTHENTICATION_LDAP_HOST
openmetadata.config.authentication.ldapConfiguration.portint10636AUTHENTICATION_LDAP_PORT
openmetadata.config.authentication.ldapConfiguration.dnAdminPrincipalstringcn=admin,dc=example,dc=comAUTHENTICATION_LOOKUP_ADMIN_DN
openmetadata.config.authentication.ldapConfiguration.dnAdminPassword.secretRefstringldap-secretAUTHENTICATION_LOOKUP_ADMIN_PWD
openmetadata.config.authentication.ldapConfiguration.dnAdminPassword.secretKeystringopenmetadata-ldap-secretAUTHENTICATION_LOOKUP_ADMIN_PWD
openmetadata.config.authentication.ldapConfiguration.userBaseDNstringou=people,dc=example,dc=comAUTHENTICATION_USER_LOOKUP_BASEDN
openmetadata.config.authentication.ldapConfiguration.groupBaseDNstringEmpty StringAUTHENTICATION_GROUP_LOOKUP_BASEDN
openmetadata.config.authentication.ldapConfiguration.roleAdminNamestringEmpty StringAUTHENTICATION_USER_ROLE_ADMIN_NAME
openmetadata.config.authentication.ldapConfiguration.allAttributeNamestringEmpty StringAUTHENTICATION_USER_ALL_ATTR
openmetadata.config.authentication.ldapConfiguration.usernameAttributeNamestringEmpty StringAUTHENTICATION_USER_NAME_ATTR
openmetadata.config.authentication.ldapConfiguration.groupAttributeNamestringEmpty StringAUTHENTICATION_USER_GROUP_ATTR
openmetadata.config.authentication.ldapConfiguration.groupAttributeValuestringEmpty StringAUTHENTICATION_USER_GROUP_ATTR_VALUE
openmetadata.config.authentication.ldapConfiguration.groupMemberAttributeNamestringEmpty StringAUTHENTICATION_USER_GROUP_MEMBER_ATTR
openmetadata.config.authentication.ldapConfiguration.authRolesMappingstringEmpty StringAUTH_ROLES_MAPPING
openmetadata.config.authentication.ldapConfiguration.authReassignRolesstringEmpty StringAUTH_REASSIGN_ROLES
openmetadata.config.authentication.ldapConfiguration.mailAttributeNamestringemailAUTHENTICATION_USER_MAIL_ATTR
openmetadata.config.authentication.ldapConfiguration.maxPoolSizeint3AUTHENTICATION_LDAP_POOL_SIZE
openmetadata.config.authentication.ldapConfiguration.sslEnabledbooltrueAUTHENTICATION_LDAP_SSL_ENABLED
openmetadata.config.authentication.ldapConfiguration.truststoreConfigTypestringTrustAllAUTHENTICATION_LDAP_TRUSTSTORE_TYPE
openmetadata.config.authentication.ldapConfiguration.trustStoreConfig.customTrustManagerConfig.trustStoreFilePathstringEmpty StringAUTHENTICATION_LDAP_TRUSTSTORE_PATH
openmetadata.config.authentication.ldapConfiguration.trustStoreConfig.customTrustManagerConfig.trustStoreFilePassword.secretRefstringEmpty StringAUTHENTICATION_LDAP_KEYSTORE_PASSWORD
openmetadata.config.authentication.ldapConfiguration.trustStoreConfig.customTrustManagerConfig.trustStoreFilePassword.secretKeystringEmpty StringAUTHENTICATION_LDAP_KEYSTORE_PASSWORD
openmetadata.config.authentication.ldapConfiguration.trustStoreConfig.customTrustManagerConfig.trustStoreFileFormatstringEmpty StringAUTHENTICATION_LDAP_SSL_KEY_FORMAT
openmetadata.config.authentication.ldapConfiguration.trustStoreConfig.customTrustManagerConfig.verifyHostnamestringEmpty StringAUTHENTICATION_LDAP_SSL_VERIFY_CERT_HOST
openmetadata.config.authentication.ldapConfiguration.trustStoreConfig.customTrustManagerConfig.examineValidityDatebooltrueAUTHENTICATION_LDAP_EXAMINE_VALIDITY_DATES
openmetadata.config.authentication.ldapConfiguration.trustStoreConfig.hostNameConfig.allowWildCardsboolfalseAUTHENTICATION_LDAP_ALLOW_WILDCARDS
openmetadata.config.authentication.ldapConfiguration.trustStoreConfig.hostNameConfig.acceptableHostNamesstring[Empty String]AUTHENTICATION_LDAP_ALLOWED_HOSTNAMES
openmetadata.config.authentication.ldapConfiguration.trustStoreConfig.jvmDefaultConfig.verifyHostnamestringEmpty StringAUTHENTICATION_LDAP_SSL_VERIFY_CERT_HOST
openmetadata.config.authentication.ldapConfiguration.trustStoreConfig.trustAllConfig.examineValidityDatesbooltrueAUTHENTICATION_LDAP_EXAMINE_VALIDITY_DATES
openmetadata.config.authentication.oidcConfiguration.callbackUrlstringhttp://openmetadata:8585/callbackOIDC_CALLBACK
openmetadata.config.authentication.oidcConfiguration.clientAuthenticationMethodstringclient_secret_postOIDC_CLIENT_AUTH_METHOD
openmetadata.config.authentication.oidcConfiguration.clientId.secretKeystringopenmetadata-oidc-client-idOIDC_CLIENT_ID
openmetadata.config.authentication.oidcConfiguration.clientId.secretRefstringoidc-secretsOIDC_CLIENT_ID
openmetadata.config.authentication.oidcConfiguration.clientSecret.secretKeystringopenmetadata-oidc-client-secretOIDC_CLIENT_SECRET
openmetadata.config.authentication.oidcConfiguration.clientSecret.secretRefstringoidc-secretsOIDC_CLIENT_SECRET
openmetadata.config.authentication.oidcConfiguration.customParamsstringEmptyOIDC_CUSTOM_PARAMS
openmetadata.config.authentication.oidcConfiguration.disablePkcebooltrueOIDC_DISABLE_PKCE
openmetadata.config.authentication.oidcConfiguration.discoveryUristringEmptyOIDC_DISCOVERY_URI
openmetadata.config.authentication.oidcConfiguration.enabledboolfalse
openmetadata.config.authentication.oidcConfiguration.maxClockSkewstringEmptyOIDC_MAX_CLOCK_SKEW
openmetadata.config.authentication.oidcConfiguration.oidcTypestringEmptyOIDC_TYPE
openmetadata.config.authentication.oidcConfiguration.preferredJwsAlgorithmstringRS256OIDC_PREFERRED_JWS
openmetadata.config.authentication.oidcConfiguration.responseTypestringcodeOIDC_RESPONSE_TYPE
openmetadata.config.authentication.oidcConfiguration.scopestringopenid email profileOIDC_SCOPE
openmetadata.config.authentication.oidcConfiguration.serverUrlstringhttp://openmetadata:8585OIDC_SERVER_URL
openmetadata.config.authentication.oidcConfiguration.tenantstringEmptyOIDC_TENANT
openmetadata.config.authentication.oidcConfiguration.useNoncebooltrueOIDC_USE_NONCE
openmetadata.config.authentication.saml.debugModeboolfalseSAML_DEBUG_MODE
openmetadata.config.authentication.saml.idp.entityIdstringEmptySAML_IDP_ENTITY_ID
openmetadata.config.authentication.saml.idp.ssoLoginUrlstringEmptySAML_IDP_SSO_LOGIN_URL
openmetadata.config.authentication.saml.idp.idpX509Certificate.secretRefstringEmptySAML_IDP_CERTIFICATE
openmetadata.config.authentication.saml.idp.idpX509Certificate.secretKeystringEmptySAML_IDP_CERTIFICATE
openmetadata.config.authentication.saml.idp.authorityUrlstringhttp://openmetadata:8585/api/v1/saml/loginSAML_AUTHORITY_URL
openmetadata.config.authentication.saml.idp.nameIdstringurn:oasis:names:tc:SAML:2.0:nameid-format:emailAddressSAML_IDP_NAME_ID
openmetadata.config.authentication.saml.sp.entityIdstringhttp://openmetadata:8585/api/v1/saml/acsSAML_SP_ENTITY_ID
openmetadata.config.authentication.saml.sp.acsstringhttp://openmetadata:8585/api/v1/saml/acsSAML_SP_ACS
openmetadata.config.authentication.saml.sp.spX509Certificate.secretRefstringEmptySAML_SP_CERTIFICATE
openmetadata.config.authentication.saml.sp.spX509Certificate.secretKeystringEmptySAML_SP_CERTIFICATE
openmetadata.config.authentication.saml.sp.callbackstringhttp://openmetadata:8585/saml/callbackSAML_SP_CALLBACK
openmetadata.config.authentication.saml.security.strictModeboolfalseSAML_STRICT_MODE
openmetadata.config.authentication.saml.security.tokenValidityint3600SAML_SP_TOKEN_VALIDITY
openmetadata.config.authentication.saml.security.sendEncryptedNameIdboolfalseSAML_SEND_ENCRYPTED_NAME_ID
openmetadata.config.authentication.saml.security.sendSignedAuthRequestboolfalseSAML_SEND_SIGNED_AUTH_REQUEST
openmetadata.config.authentication.saml.security.signSpMetadataboolfalseSAML_SIGNED_SP_METADATA
openmetadata.config.authentication.saml.security.wantMessagesSignedboolfalseSAML_WANT_MESSAGE_SIGNED
openmetadata.config.authentication.saml.security.wantAssertionsSignedboolfalseSAML_WANT_ASSERTION_SIGNED
openmetadata.config.authentication.saml.security.wantAssertionEncryptedboolfalseSAML_WANT_ASSERTION_ENCRYPTED
openmetadata.config.authentication.saml.security.wantNameIdEncryptedboolfalseSAML_WANT_NAME_ID_ENCRYPTED
openmetadata.config.authentication.saml.security.keyStoreFilePathstringEmptySAML_KEYSTORE_FILE_PATH
openmetadata.config.authentication.saml.security.keyStoreAlias.secretRefstringEmptySAML_KEYSTORE_ALIAS
openmetadata.config.authentication.saml.security.keyStoreAlias.secretKeystringEmptySAML_KEYSTORE_ALIAS
openmetadata.config.authentication.saml.security.keyStorePassword.secretRefstringEmptySAML_KEYSTORE_PASSWORD
openmetadata.config.authentication.saml.security.keyStorePassword.secretKeystringEmptySAML_KEYSTORE_PASSWORD
openmetadata.config.authorizer.enabledbooltrue
openmetadata.config.authorizer.allowedEmailRegistrationDomainslist[all]AUTHORIZER_ALLOWED_REGISTRATION_DOMAIN
openmetadata.config.authorizer.classNamestringorg.openmetadata.service.security.DefaultAuthorizerAUTHORIZER_CLASS_NAME
openmetadata.config.authorizer.containerRequestFilterstringorg.openmetadata.service.security.JwtFilterAUTHORIZER_REQUEST_FILTER
openmetadata.config.authorizer.enforcePrincipalDomainboolfalseAUTHORIZER_ENFORCE_PRINCIPAL_DOMAIN
openmetadata.config.authorizer.enableSecureSocketConnectionboolfalseAUTHORIZER_ENABLE_SECURE_SOCKET
openmetadata.config.authorizer.initialAdminslist[admin]AUTHORIZER_ADMIN_PRINCIPALS
openmetadata.config.authorizer.principalDomainstringopen-metadata.orgAUTHORIZER_PRINCIPAL_DOMAIN
openmetadata.config.airflow.auth.password.secretRefstringairflow-secretsAIRFLOW_PASSWORD
openmetadata.config.airflow.auth.password.secretKeystringopenmetadata-airflow-passwordAIRFLOW_PASSWORD
openmetadata.config.airflow.auth.usernamestringadminAIRFLOW_USERNAME
openmetadata.config.airflow.enabledbooltrue
openmetadata.config.airflow.hoststringhttp://openmetadata-dependencies-web:8080PIPELINE_SERVICE_CLIENT_ENDPOINT
openmetadata.config.airflow.openmetadata.serverHostApiUrlstringhttp://openmetadata:8585/apiSERVER_HOST_API_URL
openmetadata.config.airflow.sslCertificatePathstring/no/pathPIPELINE_SERVICE_CLIENT_SSL_CERT_PATH
openmetadata.config.airflow.verifySslstringno-sslPIPELINE_SERVICE_CLIENT_VERIFY_SSL
openmetadata.config.clusterNamestringopenmetadataOPENMETADATA_CLUSTER_NAME
openmetadata.config.database.enabledbooltrue
openmetadata.config.database.auth.password.secretRefstringmysql-secretsDB_USER_PASSWORD
openmetadata.config.database.auth.password.secretKeystringopenmetadata-mysql-passwordDB_USER_PASSWORD
openmetadata.config.database.auth.usernamestringopenmetadata_userDB_USER
openmetadata.config.database.databaseNamestringopenmetadata_dbOM_DATABASE
openmetadata.config.database.dbParamsstringallowPublicKeyRetrieval=true&useSSL=false&serverTimezone=UTCDB_PARAMS
openmetadata.config.database.dbSchemestringmysqlDB_SCHEME
openmetadata.config.database.driverClassstringcom.mysql.cj.jdbc.DriverDB_DRIVER_CLASS
openmetadata.config.database.hoststringmysqlDB_HOST
openmetadata.config.database.portint3306DB_PORT
openmetadata.config.elasticsearch.enabledbooltrue
openmetadata.config.elasticsearch.auth.enabledboolfalse
openmetadata.config.elasticsearch.auth.usernamestringelasticsearchELASTICSEARCH_USER
openmetadata.config.elasticsearch.auth.password.secretRefstringelasticsearch-secretsELASTICSEARCH_PASSWORD
openmetadata.config.elasticsearch.auth.password.secretKeystringopenmetadata-elasticsearch-passwordELASTICSEARCH_PASSWORD
openmetadata.config.elasticsearch.hoststringopensearchELASTICSEARCH_HOST
openmetadata.config.elasticsearch.keepAliveTimeoutSecsint600ELASTICSEARCH_KEEP_ALIVE_TIMEOUT_SECS
openmetadata.config.elasticsearch.portint9200ELASTICSEARCH_PORT
openmetadata.config.elasticsearch.searchTypestringopensearchSEARCH_TYPE
openmetadata.config.elasticsearch.schemestringhttpELASTICSEARCH_SCHEME
openmetadata.config.elasticsearch.clusterAliasstringEmpty StringELASTICSEARCH_CLUSTER_ALIAS
openmetadata.config.elasticsearch.searchIndexMappingLanguagestringENELASTICSEARCH_INDEX_MAPPING_LANG
openmetadata.config.elasticsearch.trustStore.enabledboolfalse
openmetadata.config.elasticsearch.trustStore.pathstringEmpty StringELASTICSEARCH_TRUST_STORE_PATH
openmetadata.config.elasticsearch.trustStore.password.secretRefstringelasticsearch-truststore-secretsELASTICSEARCH_TRUST_STORE_PASSWORD
openmetadata.config.elasticsearch.trustStore.password.secretKeystringopenmetadata-elasticsearch-truststore-passwordELASTICSEARCH_TRUST_STORE_PASSWORD
openmetadata.config.eventMonitor.enabledbooltrue
openmetadata.config.eventMonitor.typestringprometheusEVENT_MONITOR
openmetadata.config.eventMonitor.batchSizeint10EVENT_MONITOR_BATCH_SIZE
openmetadata.config.eventMonitor.pathPatternlist[/api/v1/tables/*,/api/v1/health-check]EVENT_MONITOR_PATH_PATTERN
openmetadata.config.eventMonitor.latencylist[]EVENT_MONITOR_LATENCY
openmetadata.config.fernetkey.valuestringjJ/9sz0g0OHxsfxOoSfdFdmk3ysNmPRnH3TUAbz3IHA=FERNET_KEY
openmetadata.config.fernetkey.secretRefstring“FERNET_KEY
openmetadata.config.fernetkey.secretKefstring“FERNET_KEY
openmetadata.config.jwtTokenConfiguration.enabledbooltrue
openmetadata.config.jwtTokenConfiguration.rsapublicKeyFilePathstring./conf/public_key.derRSA_PUBLIC_KEY_FILE_PATH
openmetadata.config.jwtTokenConfiguration.rsaprivateKeyFilePathstring./conf/private_key.derRSA_PRIVATE_KEY_FILE_PATH
openmetadata.config.jwtTokenConfiguration.jwtissuerstringopen-metadata.orgJWT_ISSUER
openmetadata.config.jwtTokenConfiguration.keyIdstringGb389a-9f76-gdjs-a92j-0242bk94356JWT_KEY_ID
openmetadata.config.logLevelstringINFOLOG_LEVEL
openmetadata.config.openmetadata.adminPortint8586SERVER_ADMIN_PORT
openmetadata.config.openmetadata.hoststringopenmetadataOPENMETADATA_SERVER_URL
openmetadata.config.openmetadata.portint8585SERVER_PORT
openmetadata.config.pipelineServiceClientConfig.auth.password.secretRefstringairflow-secretsAIRFLOW_PASSWORD
openmetadata.config.pipelineServiceClientConfig.auth.password.secretKeystringopenmetadata-airflow-passwordAIRFLOW_PASSWORD
openmetadata.config.pipelineServiceClientConfig.auth.usernamestringadminAIRFLOW_USERNAME
openmetadata.config.pipelineServiceClientConfig.auth.trustStorePathstring“AIRFLOW_TRUST_STORE_PATH
openmetadata.config.pipelineServiceClientConfig.auth.trustStorePassword.secretRefstring“AIRFLOW_TRUST_STORE_PASSWORD
openmetadata.config.pipelineServiceClientConfig.auth.trustStorePassword.secretKeystring“AIRFLOW_TRUST_STORE_PASSWORD
openmetadata.config.pipelineServiceClientConfig.apiEndpointstringhttp://openmetadata-dependencies-web:8080PIPELINE_SERVICE_CLIENT_ENDPOINT
openmetadata.config.pipelineServiceClientConfig.classNamestringorg.openmetadata.service.clients.pipeline.airflow.AirflowRESTClientPIPELINE_SERVICE_CLIENT_CLASS_NAME
openmetadata.config.pipelineServiceClientConfig.enabledbooltruePIPELINE_SERVICE_CLIENT_ENABLED
openmetadata.config.pipelineServiceClientConfig.healthCheckIntervalint300PIPELINE_SERVICE_CLIENT_HEALTH_CHECK_INTERVAL
openmetadata.config.pipelineServiceClientConfig.ingestionIpInfoEnabledboolfalsePIPELINE_SERVICE_IP_INFO_ENABLED
openmetadata.config.pipelineServiceClientConfig.metadataApiEndpointstringhttp://openmetadata:8585/apiSERVER_HOST_API_URL
openmetadata.config.pipelineServiceClientConfig.sslCertificatePathstring/no/pathPIPELINE_SERVICE_CLIENT_SSL_CERT_PATH
openmetadata.config.pipelineServiceClientConfig.verifySslstringno-sslPIPELINE_SERVICE_CLIENT_VERIFY_SSL
openmetadata.config.pipelineServiceClientConfig.hostIpstringEmptyPIPELINE_SERVICE_CLIENT_HOST_IP
openmetadata.config.pipelineServiceClientConfig.typestringairflowOrchestrator type: airflow or k8s

​
Kubernetes Native Orchestrator Values

The following values are used when pipelineServiceClientConfig.type is set to k8s. See the Kubernetes Orchestrator guide for full documentation.
KeyTypeDefaultDescription
openmetadata.config.pipelineServiceClientConfig.k8s.classNamestringorg.openmetadata.service.clients.pipeline.k8s.K8sPipelineClientK8s client class
openmetadata.config.pipelineServiceClientConfig.k8s.ingestionImagestringdocker.getcollate.io/openmetadata/ingestion-base:latestIngestion container image
openmetadata.config.pipelineServiceClientConfig.k8s.imagePullPolicystringIfNotPresentImage pull policy
openmetadata.config.pipelineServiceClientConfig.k8s.imagePullSecretsstring“Comma-separated image pull secrets
openmetadata.config.pipelineServiceClientConfig.k8s.serviceAccountNamestringopenmetadata-ingestionService account for ingestion jobs
openmetadata.config.pipelineServiceClientConfig.k8s.ttlSecondsAfterFinishedint86400Time to keep completed jobs (seconds)
openmetadata.config.pipelineServiceClientConfig.k8s.activeDeadlineSecondsint7200Maximum job runtime (seconds)
openmetadata.config.pipelineServiceClientConfig.k8s.backoffLimitint3Maximum retry attempts
openmetadata.config.pipelineServiceClientConfig.k8s.successfulJobsHistoryLimitint3Successful jobs to retain
openmetadata.config.pipelineServiceClientConfig.k8s.failedJobsHistoryLimitint3Failed jobs to retain
openmetadata.config.pipelineServiceClientConfig.k8s.nodeSelectorstring“Node selector (comma-separated key=value)
openmetadata.config.pipelineServiceClientConfig.k8s.securityContext.runAsUserint1000Run as user ID
openmetadata.config.pipelineServiceClientConfig.k8s.securityContext.runAsGroupint1000Run as group ID
openmetadata.config.pipelineServiceClientConfig.k8s.securityContext.fsGroupint1000Filesystem group ID
openmetadata.config.pipelineServiceClientConfig.k8s.securityContext.runAsNonRootbooltrueRequire non-root
openmetadata.config.pipelineServiceClientConfig.k8s.resources.limits.cpustring2CPU limit
openmetadata.config.pipelineServiceClientConfig.k8s.resources.limits.memorystring4GiMemory limit
openmetadata.config.pipelineServiceClientConfig.k8s.resources.requests.cpustring500mCPU request
openmetadata.config.pipelineServiceClientConfig.k8s.resources.requests.memorystring1GiMemory request
openmetadata.config.pipelineServiceClientConfig.k8s.podAnnotationsstring“Pod annotations (comma-separated key=value)
openmetadata.config.pipelineServiceClientConfig.k8s.extraEnvVarslist[]Extra environment variables
openmetadata.config.pipelineServiceClientConfig.k8s.enableFailureDiagnosticsbooltrueEnable failure diagnostics
openmetadata.config.pipelineServiceClientConfig.k8s.useOMJobOperatorboolfalseUse OMJob operator for exit handlers
openmetadata.config.pipelineServiceClientConfig.k8s.rbac.enabledbooltrueCreate RBAC resources

​
OMJob Operator Values

The OMJob Operator provides guaranteed exit handler execution. Required when k8s.useOMJobOperator: true.
KeyTypeDefaultDescription
omjobOperator.enabledboolfalseInstall OMJob CRD and operator
omjobOperator.image.repositorystringdocker.getcollate.io/openmetadata/omjob-operatorOperator image
omjobOperator.image.tagstring1.12.0-SNAPSHOTOperator image tag
omjobOperator.image.pullPolicystringIfNotPresentImage pull policy
omjobOperator.resources.requests.cpustring100mCPU request
omjobOperator.resources.requests.memorystring128MiMemory request
omjobOperator.resources.limits.cpustring500mCPU limit
omjobOperator.resources.limits.memorystring256MiMemory limit
omjobOperator.env.logLevelstringINFOLog level
omjobOperator.env.reconciliationThreadsstring5Reconciliation threads
omjobOperator.env.healthCheckPortstring8080Health check port
omjobOperator.env.metricsPortstring8081Metrics port
omjobOperator.env.pollingIntervalSecondsstring10Pod status polling interval
omjobOperator.env.requeueDelaySecondsstring30Requeue delay after errors
omjobOperator.env.watchNamespacesstring“Namespaces to watch (comma-separated, or “ALL”)
| openmetadata.config.secretsManager.enabled | bool | true | | | openmetadata.config.secretsManager.provider | string | Empty String | SECRET_MANAGER | | openmetadata.config.secretsManager.prefix | string | Empty String | SECRET_MANAGER_PREFIX | | openmetadata.config.secretsManager.tags | list | [] | SECRET_MANAGER_TAGS | | openmetadata.config.secretsManager.additionalParameters.enabled | bool | false | | | openmetadata.config.secretsManager.additionalParameters.accessKeyId.secretRef | string | aws-access-key-secret | OM_SM_ACCESS_KEY_ID | | openmetadata.config.secretsManager.additionalParameters.accessKeyId.secretKey | string | aws-key-secret | OM_SM_ACCESS_KEY_ID | | openmetadata.config.secretsManager.additionalParameters.clientId.secretRef | string | azure-client-id-secret | OM_SM_CLIENT_ID | | openmetadata.config.secretsManager.additionalParameters.clientId.secretKey | string | azure-key-secret | OM_SM_CLIENT_ID | | openmetadata.config.secretsManager.additionalParameters.clientSecret.secretRef | string | azure-client-secret | OM_SM_CLIENT_SECRET | | openmetadata.config.secretsManager.additionalParameters.clientSecret.secretKey | string | azure-key-secret | OM_SM_CLIENT_SECRET | | openmetadata.config.secretsManager.additionalParameters.tenantId.secretRef | string | azure-tenant-id-secret | OM_SM_TENANT_ID | | openmetadata.config.secretsManager.additionalParameters.tenantId.secretKey | string | azure-key-secret | OM_SM_TENANT_ID | | openmetadata.config.secretsManager.additionalParameters.vaultName.secretRef | string | azure-vault-name-secret | OM_SM_VAULT_NAME | | openmetadata.config.secretsManager.additionalParameters.vaultName.secretKey | string | azure-key-secret | OM_SM_VAULT_NAME | | openmetadata.config.secretsManager.additionalParameters.region | string | Empty String | OM_SM_REGION | | openmetadata.config.secretsManager.additionalParameters.secretAccessKey.secretRef | string | aws-secret-access-key-secret | OM_SM_ACCESS_KEY | | openmetadata.config.secretsManager.additionalParameters.secretAccessKey.secretKey | string | aws-key-secret | OM_SM_ACCESS_KEY | | openmetadata.config.smtpConfig.enableSmtpServer | bool | false | AUTHORIZER_ENABLE_SMTP | | openmetadata.config.smtpConfig.emailingEntity | string | OpenMetadata | OM_EMAIL_ENTITY | | openmetadata.config.smtpConfig.openMetadataUrl | string | Empty String | OPENMETADATA_SERVER_URL | | openmetadata.config.smtpConfig.password.secretKey | string | Empty String | SMTP_SERVER_PWD | | openmetadata.config.smtpConfig.password.secretRef | string | Empty String | SMTP_SERVER_PWD | | openmetadata.config.smtpConfig.serverEndpoint | string | Empty String | SMTP_SERVER_ENDPOINT | | openmetadata.config.smtpConfig.serverPort | string | Empty String | SMTP_SERVER_PORT | | openmetadata.config.smtpConfig.supportUrl | string | https://slack.open-metadata.org | OM_SUPPORT_URL | | openmetadata.config.smtpConfig.transportationStrategy | string | SMTP_TLS | SMTP_SERVER_STRATEGY | | openmetadata.config.smtpConfig.username | string | Empty String | SMTP_SERVER_USERNAME | | openmetadata.config.upgradeMigrationConfigs.debug | bool | false | | | openmetadata.config.upgradeMigrationConfigs.additionalArgs | string | Empty String | | | openmetadata.config.web.enabled | bool | true | | | openmetadata.config.web.contentTypeOptions.enabled | bool | false | WEB_CONF_CONTENT_TYPE_OPTIONS_ENABLED | | openmetadata.config.web.csp.enabled | bool | false | WEB_CONF_XSS_CSP_ENABLED | | openmetadata.config.web.csp.policy | string | default-src 'self | WEB_CONF_XSS_CSP_POLICY | | openmetadata.config.web.csp.reportOnlyPolicy | string | Empty String | WEB_CONF_XSS_CSP_REPORT_ONLY_POLICY | | openmetadata.config.web.frameOptions.enabled | bool | false | WEB_CONF_FRAME_OPTION_ENABLED | | openmetadata.config.web.frameOptions.option | string | SAMEORIGIN | WEB_CONF_FRAME_OPTION | | openmetadata.config.web.frameOptions.origin | string | Empty String | WEB_CONF_FRAME_ORIGIN | | openmetadata.config.web.hsts.enabled | bool | false | WEB_CONF_HSTS_ENABLED | | openmetadata.config.web.hsts.includeSubDomains | bool | true | WEB_CONF_HSTS_INCLUDE_SUBDOMAINS | | openmetadata.config.web.hsts.maxAge | string | 365 days | WEB_CONF_HSTS_MAX_AGE | | openmetadata.config.web.hsts.preload | bool | true | WEB_CONF_HSTS_PRELOAD | | openmetadata.config.web.uriPath | string | /api | WEB_CONF_URI_PATH | | openmetadata.config.web.xssProtection.block | bool | true | WEB_CONF_XSS_PROTECTION_BLOCK | | openmetadata.config.web.xssProtection.enabled | bool | false | WEB_CONF_XSS_PROTECTION_ENABLED | | openmetadata.config.web.xssProtection.onXss | bool | true | WEB_CONF_XSS_PROTECTION_ON | | openmetadata.config.web.referrer-policy.enabled | bool | false | WEB_CONF_REFERRER_POLICY_ENABLED | | openmetadata.config.web.referrer-policy.option | string | SAME_ORIGIN' | WEB_CONF_REFERRER_POLICY_OPTION | | openmetadata.config.web.permission-policy.enabled | bool | false | WEB_CONF_PERMISSION_POLICY_ENABLED | | openmetadata.config.web.permission-policy.option | string | Empty String | WEB_CONF_PERMISSION_POLICY_OPTION |

​
Chart Values

KeyTypeDefault
affinityobject{}
commonLabelsobject{}
extraEnvsExtra [environment variables][] which will be appended to the env: definition for the container[]
extraInitContainersTemplatable string of additional initContainers to be passed to tpl function[]
extraVolumesTemplatable string of additional volumes to be passed to the tpl function[]
extraVolumeMountsTemplatable string of additional volumeMounts to be passed to the tpl function[]
fullnameOverridestring"openmetadata"
image.pullPolicystring"Always"
image.repositorystring"docker.open-metadata.org/openmetadata/server"
image.tagstring1.3.4
imagePullSecretslist[]
ingress.annotationsobject{}
ingress.classNamestring""
ingress.enabledboolfalse
ingress.hosts[0].hoststring"open-metadata.local"
ingress.hosts[0].paths[0].pathstring"/"
ingress.hosts[0].paths[0].pathTypestring"ImplementationSpecific"
ingress.tlslist[]
livenessProbe.initialDelaySecondsint60
livenessProbe.periodSecondsint30
livenessProbe.failureThresholdint5
livenessProbe.httpGet.pathstring/healthcheck
livenessProbe.httpGet.portstringhttp-admin
nameOverridestring""
nodeSelectorobject{}
podAnnotationsobject{}
podSecurityContextobject{}
readinessProbe.initialDelaySecondsint60
readinessProbe.periodSecondsint30
readinessProbe.failureThresholdint5
readinessProbe.httpGet.pathstring/
readinessProbe.httpGet.portstringhttp
replicaCountint1
resourcesobject{}
securityContextobject{}
service.adminPortstring8586
service.annotationsobject{}
service.portint8585
service.typestring"ClusterIP"
serviceAccount.annotationsobject{}
serviceAccount.createbooltrue
serviceAccount.namestringnil
automountServiceAccountTokenbooltrue
serviceMonitor.annotationsobject{}
serviceMonitor.enabledboolfalse
serviceMonitor.intervalstring30s
serviceMonitor.labelsobject{}
sidecarslist[]
startupProbe.periodSecondsint60
startupProbe.failureThresholdint5
startupProbe.httpGet.pathstring/healthcheck
startupProbe.httpGet.portstringhttp-admin
startupProbe.successThresholdint1
tolerationslist[]
networkPolicy.enabledboolfalse
podDisruptionBudget.enabledboolfalse
podDisruptionBudget.config.maxUnavailableString1
podDisruptionBudget.config.minAvailableString1