infra-controller/helm/examples/values-minimal.yaml at main · NVIDIA/infra-controller · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
## =============================================================================
## Minimal Values — NICo Bare Metal Manager
## =============================================================================
## This is the minimum configuration required to deploy NICo.
## You MUST set global.image.repository and global.image.tag.
## See PREREQUISITES.md for required Secrets, ConfigMaps, and operators.
##
## Install with: helm install nico ./helm -n nico-system --create-namespace -f values-minimal.yaml
## =============================================================================

global:
  ## REQUIRED: Set your container image repository and tag
  image:
    repository: ""   # e.g. your-registry.example.com/nico-core
    tag: ""          # e.g. v2025.12.30

## ---------------------------------------------------------------------------
## All core services enabled by default — disable any you don't need
## ---------------------------------------------------------------------------

## nico-api: Core API requires site config at minimum
nico-api:
  enabled: true
  hostname: "nico.example.com"
  siteConfig:
    enabled: true
    nicoApiSiteConfig: |
      dhcp_servers = ["nico-dhcp.nico-system.svc.cluster.local:67"]
      # route_servers = ["FRR_ROUTING_0_EXTERNAL_IP"]
      enable_route_servers = true
      initial_domain_name = "site.example.com"
      sitename = "site"
      attestation_enabled = false
      bypass_rbac = true  # set false in production

      # Resource pools are required — nico-api exits at startup without them.
      # Adjust ranges to match your site's address plan.
      [pools.lo-ip]
      type = "ipv4"
      ranges = [{ start = "10.0.0.0", end = "10.0.1.0" }]

      [pools.vlan-id]
      type = "integer"
      ranges = [{ start = "100", end = "501" }]

      [pools.vni]
      type = "integer"
      ranges = [{ start = "1024500", end = "1024800" }]

      [pools.vpc-vni]
      type = "integer"
      ranges = [{ start = "0", end = "100" }]

## nico-dhcp: Configure subnets and IPs for your environment
nico-dhcp:
  enabled: true

## nico-dns: Authoritative DNS for managed machines
nico-dns:
  enabled: true

## nico-dsx-exchange-consumer: DSX telemetry consumer
nico-dsx-exchange-consumer:
  enabled: true

## nico-hardware-health: Hardware health metrics
nico-hardware-health:
  enabled: true

## nico-pxe: PXE boot server
nico-pxe:
  enabled: true

## nico-ssh-console-rs: SSH console proxy
nico-ssh-console-rs:
  enabled: true
  ## Loki log collector sidecar — disabled by default.
  ## Enable if you have a Loki instance at http://loki.loki.svc.cluster.local:3100.
  # lokiLogCollector:
  #   enabled: true
  #   image:
  #     repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector-contrib
  #     tag: "0.81.0"

## unbound: Recursive DNS resolver (disabled by default)
## Enable if your environment does not already provide a recursive DNS
## resolver with forwarding rules for NICo internal domains.
# unbound:
#   enabled: true
  image:
    repository: ""   # e.g. your-registry.example.com/unbound
    tag: ""
  exporterImage:
    repository: ""   # e.g. your-registry.example.com/unbound-exporter
    tag: ""
  localConfig:
    forwarders.conf: |
      forward-zone:
        name: "."
        forward-addr: 8.8.8.8
        forward-addr: 8.8.4.4