values.yaml

#####################################################
## OpsMx Enterprise for Spinnaker configuration
#####################################################
# Default values for OES chart.
## This is a YAML-formatted file.
## Declare variables to be passed into your templates.

## Name of the secret for pulling image from docker registry.
## Change it only if you want to create a secret with
## different name.
##
imagePullSecret: opsmxdev-secret

## Docker registry credentials to create imagePullSecret
##
imageCredentials:
  registry: https://index.docker.io/v1/
  username: dockerID  # Docker hub username
  password: dockerPassword # Docker hub password
  email: info@opsmx.com   # email corresponding to docker hub ID

rbac:
  create: true

## Set to true to expose spinnaker and deck services over ingress
##
createIngress: false

## Option to skip installation of OpsMx Spinnaker
## Setting this to true, will ensure custom ubi8 images of Spinnaker
installSpinnaker: true

## Installation mode
## Available installation modes OES-AP, OES, AP, None
##
installationMode: OES-AP

## OES UI & Gate service type
##
k8sServiceType: LoadBalancer

####################################################
## Redis configuration
####################################################
## Install a seperate Redis for OES if installSpinnaker is set to false
## If Spinnaker is being installed, redis installed by spinnaker chart can
## be re-used
##
installRedis: false

###############################################################################
## Details of redis-master image for OES
##
redis:

  ## Redis endpoint that is used by oes-gate and oes-platform for caching;
  ## Change this to custom URL if installRedis is set to false
  ## url: redis://{{ .Release.Name }}-redis-master:6379
  ##
  url: redis://:password@{{ .Release.Name }}-redis-master:6379
  password: password
  cluster:
    enabled: false

###############################################################################
##
## Values of OES Database
##
db:
  ## Set it to false if any external database is to be used
  ##
  enabled: true

  ## Change the default configuration when above option is set to false
  ## Below url and credentials are used by Autopilot & Sapor
  url: jdbc:postgresql://oes-db:5432
  username: postgres
  password: networks123

  ## Image specific details
  ##
  image:
    registry: opsmxdev
    repository: ubi8-autopilot-db
    tag: v1.6
    pullPolicy: IfNotPresent

  ## Strategy to rollout statefulset pods
  ##
  podManagementPolicy: OrderedReady

  ## Default group to which the default user of a pod belongs
  ##
  securityContext:
    fsGroup: 1000

  ## storageMountSize is the size with which a PVC is to be created
  ##
  storageMountSize: 8Gi

###############################################################################
##
## Values of OES Autopilot
##
autopilot:
  ## Image specific details
  ##
  image:
    registry: opsmxdev
    repository: ubi8-oes-autopilot
    tag: v3.3.3-202012161333
    pullPolicy: IfNotPresent

  requests:
    memory: 2Gi
    cpu: 1
  limits:
    memory: 8Gi
    cpu: 2


  config:
    ## Build Analysis
    ##
    buildAnalysis:
      enabled: false

    ## DB configuration; change it any other external DB is to be used
    ## Refer it above, under DB configuration section
    ##

    ## SSL configuration
    ##
    ssl:
      enabled: false  # Set it to true if SSL is to be enabled
      keyStore: keystore.p12
      keyStorePassword: dummypwd # Provide keystore password
      keyStoreType: PKCS12
      keyAlias: tomcat
###############################################################################
##
## Values of OES Dashboard
##
dashboard:
  ## Image specific details
  ##
  image:
    registry: opsmxdev
    repository: ubi8-oes-dashboard
    tag: v3.3.2-202012141845
    pullPolicy: IfNotPresent

  requests:
    memory: 500Mi
    cpu: 500m
  limits:
    memory: 1000Mi
    cpu: 1500m

  config:
    ## Installation mode
    ## OES supports three modes of installation,
    ## Uses the mode configured above, under Installation mode
    ##

###############################################################################
##
## Values of OES Gate
##
gate:
  ## Image specific details
  ##
  image:
    registry: opsmxdev
    repository: ubi8-oes-gate
    tag: v3.3.2-202012141845
    pullPolicy: IfNotPresent

  requests:
    memory: 500Mi
    cpu: 500m
  limits:
    memory: 1500Mi
    cpu: 1500m

  config:
    ## LDAP Configuration
    ## Refer above, under LDAP configuration section
    ##

    ## Redis Endpoint
    ## Uses the URL specified under redis.url above,
    ## under Redis Configuration section
    ##

    ## Regex of OES-UI URL to allow cross origin requests
    oesUIcors: ^https?://(?:localhost|OES_UI_LOADBALANCER_IP|opsmx.com)(?::[1-9]\d*)?/?

    ## Set it to true to disable LDAP authentication and enable file based authentication
    ## Reach out over support@opsmx.com for pre-configured user credentials
    fileBasedAuthentication:
      enabled: false

###############################################################################
##
## Values of OES Platform
##
platform:
  ## Image specific details
  ##
  image:
    registry: opsmxdev
    repository: ubi8-oes-platform
    tag: v3.3.2-202012141845
    pullPolicy: IfNotPresent

  requests:
    memory: 500Mi
    cpu: 500m
  limits:
    memory: 1500Mi
    cpu: 1500m
    
  config:
    ## DB configuration; change it any other external DB is to be used
    ## Refer it above, under DB configuration section
    ##

    ## RBAC Configuration
    ## Refer the RBAC create option at the top
    ##

    ## Admin Groups available in ldap
    ##
    adminGroups: admin, Administrators

    ## Source of Users for authorization
    ## Supported sources:- ldap, file
    userSource: ldap

    ## LDAP Configuration will be used if above userSource is set to ldap
    ## Refer above, under LDAP configuration section
    ##

    ## Redis Endpoint
    ## Uses the URL specified under redis.url above,
    ## under Redis Configuration section
    ##

    ## List of features to be supported by OES
    ##
    supportedFeatures:
      - deployment_verification
      - sapor
      - visibility

###############################################################################
##
## Values of OES Sapor (Security Audit Policy Onboarding & Release)
##
sapor:
  ## Image specific details
  ##
  image:
    registry: opsmxdev
    repository: ubi8-oes-sapor
    tag: v3.3.2-202012141846
    pullPolicy: IfNotPresent

  requests:
    memory: 100Mi
    cpu: 500m
  limits:
    memory: 2000Mi
    cpu: 1500m

  config:
    ## RBAC Configuration
    ## Refer the RBAC create option at the top
    ##

    datasources:
      platform: false
    
    spinnaker:
      ## Spinnaker configuration
      ## Necessary details needed by Sapor to
      ## integrate with Spinnaker
      ##
      ## Set it to true if authentication is enabled in Spinnaker
      ##
      authnEnabled: true

      ## URL of Spinnaker Gate
      ## FQDN of spin-gate if Spinnaker is installed in same K8s cluster, else
      ## set the url with the external IP address of spin-gate
      ## Note: Don't put a trailing /
      ##
      spinGateURL: http://spin-gate:8084

      ## Set the external IP address of spin-gate, this is used to redirect to
      ## the spinnaker pipelines from OES-UI.
      ## Note: Trailing / is not required
      ##
      spinExternalGateURL: http://spin-gate:8084

      ## Spinnaker user credentials
      ##
      spinuser: admin
      spinpasswd: opsmxadmin123

      ## Spinnaker admin credentials
      ## When provided, will override above credentials and operate spinnaker
      ## as an admin user
      ##
      spinAdminLoginEnabled: false
      spinAdminUsername: admin
      spinAdminPassword: admin

    ## Set the below field to true if default java cacert is to be overriden
    ##
    caCerts:
      override: false

###############################################################################
##
## Values of OES UI
##
ui:
  ## Image specific details
  ##
  image:
    registry: opsmxdev
    repository: ubi8-oes-ui
    tag: v3.3.3-202012161332
    pullPolicy: IfNotPresent

  config:
    ## Endpoint of oes-gate to be used by oes-ui
    ##
    oesGateURL: http://OES_GATE_IP:8084/

    ## Interval at which UI refreshes application dashboard
    setApplicationRefreshInterval: 300000

###################################################################################
##
#
## Values of OES Visibility
##
visibility:
  ## Image specific details
  ##
  image:
    registry: opsmxdev
    repository: ubi8-oes-visibility
    tag: v3.3.2-202012141846
    pullPolicy: IfNotPresent

  requests:
    memory: 500Mi
    cpu: 500m
  limits:
    memory: 1000Mi
    cpu: 1500m

  config:
    ## DB configuration; change it any other external DB is to be used
    ## Refer it above, under DB configuration section
    ##

    ## Autopilot integration options
    configuredConnectors: JIRA,GIT,AUTOPILOT,SONARQUBE,JENKINS

    ## Logger level
    logLevel: ERROR

###############################################################################
## This option enables OES to be configured automatically
## Load Balancer IPs will be automatically replaced in the
## configuration files of oes-gate, oes-ui
autoConfiguration:
  # Set it to false if OES is being installed on restricted evnironment;
  # Autoconfiguration assumes Load Balancer is available for oes-gate, oes-ui
  # and spind-deck and configures accordingly
  enabled: true

  initContainer:
    # Image for init container to automatically configure oes components
    # during startup
    image: opsmxdev/oes-init:v3
    pullPolicy: IfNotPresent

    # Max time(in secs) that an init container of oes-ui should wait
    # to fetch External Load Balancer IP of oes-gate and vice versa
    externalIpCheckDelay: 180

#####################################################
## OPA configuration
#####################################################
opa:
  enabled: true
  image:
    repository: openpolicyagent/opa
    tag: latest
    pullPolicy: IfNotPresent

####################################################
## LDAP configuration
####################################################
## Set it to false if own LDAP is to be configured
##
installOpenLdap: true
## OpenLDAP custom configuration; will override default configuration of
## openldap helm chart
##
openldap:
  # Password for the admin user; by default it is set to admin
  adminPassword: opsmxadmin123
  configPassword: opsmxconfig123
  omitClusterIP: true
  persistence:
    enabled: true
  env:
    LDAP_REMOVE_CONFIG_AFTER_SETUP: "false"

  customLdifFiles:
    01-memberof.ldif: |-
      dn: cn=module,cn=config
      cn: module
      objectClass: olcModuleList
      olcModuleLoad: memberof.la
      olcModulePath: /usr/lib/ldap

      dn: olcOverlay={0}memberof,olcDatabase={1}hdb,cn=config
      objectClass: olcConfig
      objectClass: olcMemberOf
      objectClass: olcOverlayConfig
      objectClass: top
      olcOverlay: memberof
      olcMemberOfDangling: ignore
      olcMemberOfRefInt: TRUE
      olcMemberOfGroupOC: groupOfNames
      olcMemberOfMemberAD: member
      olcMemberOfMemberOfAD: memberOf
    02-refint1.ldif: |-
      dn: cn=module{1},cn=config
      changetype: modify
      add: olcmoduleload
      olcmoduleload: refint.la
    03-refint2.ldif: |-
      dn: olcOverlay={1}refint,olcDatabase={1}hdb,cn=config
      objectClass: olcConfig
      objectClass: olcOverlayConfig
      objectClass: olcRefintConfig
      objectClass: top
      olcOverlay: {1}refint
      olcRefintAttribute: memberof member manager owner
    04-add_ou.ldif: |-
      dn: ou=groups,dc=example,dc=org
      objectClass: organizationalUnit
      ou: Groups
    05-admin.ldif: |-
      dn: cn=admin,ou=groups,dc=example,dc=org
      objectClass: groupofnames
      cn: admin
      description: read write and execute group
      member: cn=admin,dc=example,dc=org
    06-developer.ldif: |-
      dn: cn=developers,ou=groups,dc=example,dc=org
      objectClass: groupofnames
      cn: developers
      description: read only users
      member: cn=admin,dc=example,dc=org
      member: cn=developer,dc=example,dc=org
    07-qa.ldif: |-
      dn: cn=QA,ou=groups,dc=example,dc=org
      objectClass: groupofnames
      cn: QA
      description: read only users
      member: cn=admin,dc=example,dc=org
      member: cn=qa,dc=example,dc=org
    08-manager.ldif: |-
      dn: cn=managers,ou=groups,dc=example,dc=org
      objectClass: groupofnames
      cn: managers
      description: read and execute group
      member: cn=admin,dc=example,dc=org
      member: cn=manager,dc=example,dc=org
    09-IT-manager.ldif: |-
      dn: cn=ITManagers,ou=groups,dc=example,dc=org
      objectClass: groupofnames
      cn: ITManagers
      description: read and execute group
      member: cn=admin,dc=example,dc=org
      member: cn=ITManager,dc=example,dc=org


## ldap configuration used in oes-gate & oes-platform for authentication
## and authorization
ldap:
  enabled: true
  url: ldap://{{ .Release.Name }}-openldap:389
  managerDn: cn=admin,dc=example,dc=org
  managerPassword: opsmxadmin123
  groupSearchBase: ou=groups,dc=example,dc=org
  groupSearchFilter: member={0}
  groupRoleAttributes: cn
  userDnPattern: cn={0},dc=example,dc=org

#####################################################
# Centralized Logging Configuration
#####################################################
enableCentralLogging: false
elasticsearch:
  replicas: 1
  minimumMasterNodes: 1
  resources:
    requests:
      cpu: "100m"
      memory: "1Gi"

kibana:
  service:
    type: LoadBalancer
  resources:
    requests:
      cpu: "100m"
      memory: "250Mi"
  lifecycle:
    postStart:
      exec:
        command:
          - bash
          - -c
          - >
            until curl localhost:5601; do echo "Waiting for Kibana to be available..."; sleep 5; done;
            until curl elasticsearch-master:9200; do echo "Waiting for Elasticsearch to be available..."; sleep 5; done;
            sleep 60;
            curl https://raw.githubusercontent.com/OpsMx/enterprise-spinnaker/master/scripts/kibana/kibana_objects.ndjson > /tmp/kibana_objects.ndjson;
            curl -X POST "localhost:5601/api/saved_objects/_import?overwrite=true" -H "kbn-xsrf: true" --form file=@/tmp/kibana_objects.ndjson 2>&1 1> /tmp/postStart.out;

#####################################################
# Spinnaker instance configuration
#####################################################
spinnaker:
  halyard:
    spinnakerVersion: 1.20.5
    image:
      repository: docker.io/devopsmx/ubi8-oes-operator-halyard
      tag: 1.20.5
    # Set to false to disable persistence data volume for halyard
    persistence:
      enabled: true
    # Provide a config map with Hal commands that will be run the core config (storage)
    # The config map should contain a script in the config.sh key
    additionalScripts:
      enabled: false
      configMapName: my-halyard-config
      configMapKey: config.sh
      # If you'd rather do an inline script, set create to true and put the content in the data dict like you would a configmap
      # The content will be passed through `tpl`, so value interpolation is supported.
      create: false
      data: {}
    additionalSecrets:
      create: false
      data: {}
      ## Uncomment if you want to use a pre-created secret rather than feeding data in via helm.
      # name:
    additionalConfigMaps:
      create: false
      data: {}
      ## Uncomment if you want to use a pre-created ConfigMap rather than feeding data in via helm.
      # name:
    additionalProfileConfigMaps:
      data:
        ## if you're running spinnaker behind a reverse proxy such as a GCE ingress
        ## you may need the following profile settings for the gate profile.
        ## see https://github.com/spinnaker/spinnaker/issues/1630
        ## otherwise its harmless and will likely become default behavior in the future
        ## According to the linked github issue.
        gate-local.yml:
          server:
            tomcat:
              protocolHeader: X-Forwarded-Proto
              remoteIpHeader: X-Forwarded-For
              internalProxies: .*
              httpsServerPort: X-Forwarded-Port

    ## Define custom settings for Spinnaker services. Read more for details:
    ## https://www.spinnaker.io/reference/halyard/custom/#custom-service-settings
    ## You can use it to add annotations for pods, override the image, etc.
    additionalServiceSettings:
    ## artifactId to override Spinnaker components images with OpsMx custom images
      gate.yml:
        healthEndpoint: /health
        kubernetes:
          useExecHealthCheck: false
        artifactId: docker.io/devopsmx/ubi8-oes-gate:1.16.1
      deck.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-deck:3.3.0
      clouddriver.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-clouddriver:6.9.2
      clouddriver-caching.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-clouddriver:6.9.2
      clouddriver-rw.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-clouddriver:6.9.2
      clouddriver-ro.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-clouddriver:6.9.2
      clouddriver-ro-deck.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-clouddriver:6.9.2
      echo.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-echo:version-2.12.1
      echo-scheduler.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-echo:version-2.12.1
      echo-worker.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-echo:version-2.12.1
      fiat.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-fiat:1.11.0
      front50.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-front50:0.24.0
      igor.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-igor:1.10.0
      kayenta.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-kayenta:0.15.1
      orca.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-orca:2.14.2-mj2
      rosco.yml:
        artifactId: docker.io/opsmxdev/ubi8-oes-rosco:0.19.0
    ## Uncomment if you want to add extra commands to the init script
    ## run by the init container before halyard is started.
    ## The content will be passed through `tpl`, so value interpolation is supported.
    # additionalInitScript: |-

    ## Uncomment if you want to add annotations on halyard and install-using-hal pods
    # annotations:
    #   iam.amazonaws.com/role: <role_arn>

    ## Uncomment the following resources definitions to control the cpu and memory
    # resources allocated for the halyard pod
    resources: {}
      # requests:
      #   memory: "1Gi"
      #   cpu: "100m"
      # limits:
      #   memory: "2Gi"
      #   cpu: "200m"

    ## Uncomment if you want to set environment variables on the Halyard pod.
    # env:
    #   - name: JAVA_OPTS
    #     value: -Dhttp.proxyHost=proxy.example.com
    customCerts:
      ## Enable to override the default cacerts with your own one
      enabled: false
      secretName: custom-cacerts

  # Define which registries and repositories you want available in your
  # Spinnaker pipeline definitions
  # For more info visit:
  #   https://www.spinnaker.io/setup/providers/docker-registry/

  # Configure your Docker registries here
  dockerRegistries:
  - name: dockerhub
    address: index.docker.io
    repositories:
      - library/alpine
      - library/ubuntu
      - library/centos
      - library/nginx
  # - name: gcr
  #   address: https://gcr.io
  #   username: _json_key
  #   password: '<INSERT YOUR SERVICE ACCOUNT JSON HERE>'
  #   email: 1234@5678.com

  # If you don't want to put your passwords into a values file
  # you can use a pre-created secret instead of putting passwords
  # (specify secret name in below `dockerRegistryAccountSecret`)
  # per account above with data in the format:
  # <name>: <password>

  # dockerRegistryAccountSecret: myregistry-secrets

  kubeConfig:
    # Use this when you want to register arbitrary clusters with Spinnaker
    # Upload your ~/kube/.config to a secret
    enabled: false
    secretName: my-kubeconfig
    secretKey: config
    # List of contexts from the kubeconfig to make available to Spinnaker
    contexts:
    - default
    deploymentContext: default
    omittedNameSpaces:
    - kube-system
    - kube-public
    onlySpinnakerManaged:
      enabled: true

  # Change this if youd like to expose Spinnaker outside the cluster
  ingress:
    enabled: false
    # host: spinnaker.example.org
    # annotations:
      # ingress.kubernetes.io/ssl-redirect: 'true'
      # kubernetes.io/ingress.class: nginx
      # kubernetes.io/tls-acme: "true"
    # tls:
    #  - secretName: -tls
    #    hosts:
    #      - domain.com

  ingressGate:
    enabled: false
    # host: gate.spinnaker.example.org
    # annotations:
      # ingress.kubernetes.io/ssl-redirect: 'true'
      # kubernetes.io/ingress.class: nginx
      # kubernetes.io/tls-acme: "true"
    # tls:
    #  - secretName: -tls
    #    hosts:
    #      - domain.com

  # spinnakerFeatureFlags is a list of Spinnaker feature flags to enable
  # Ref: https://www.spinnaker.io/reference/halyard/commands/#hal-config-features-edit
  # spinnakerFeatureFlags:
  #   - artifacts
  #   - pipeline-templates
  spinnakerFeatureFlags:
    - artifacts
    - pipeline-templates
    - managed-pipeline-templates-v2-ui

  # Node labels for pod assignment
  # Ref: https://kubernetes.io/docs/user-guide/node-selection/
  # nodeSelector to provide to each of the Spinnaker components
  nodeSelector: {}

  # Redis password to use for the in-cluster redis service
  # Enable redis to use in-cluster redis
  redis:
    enabled: true
    # External Redis option will be enabled if in-cluster redis is disabled
    external:
      host: "<EXTERNAL-REDIS-HOST-NAME>"
      port: 6379
      # password: ""
    password: password
    nodeSelector: {}
    cluster:
      enabled: false

    # Use ubi8 custom images
    #image:
    #  registry: docker.io
    #  repository: devopsmx/ubi8-oes-redis
    #  tag: 4.0.14
  # Uncomment if you don't want to create a PVC for redis
  #  master:
  #    persistence:
  #      enabled: false

  # Minio access/secret keys for the in-cluster S3 usage
  # Minio is not exposed publically
  minio:
    enabled: true
    imageTag: RELEASE.2019-02-13T19-48-27Z
    serviceType: ClusterIP
    accessKey: spinnakeradmin
    secretKey: spinnakeradmin
    bucket: "spinnaker"
    nodeSelector: {}
    persistence:
      enabled: true
      size: 10Gi
    # Use ubi8 custom images
    #image:
    #  repository: devopsmx/ubi8-oes-minio
    #  tag: RELEASE.2019-09-18T21-55-05Z
    #  pullPolicy: IfNotPresent

  # Google Cloud Storage
  gcs:
    enabled: false
    project: my-project-name
    bucket: "<GCS-BUCKET-NAME>"
    ## if jsonKey is set, will create a secret containing it
    jsonKey: '<INSERT CLOUD STORAGE JSON HERE>'
    ## override the name of the secret to use for jsonKey, if `jsonKey`
    ## is empty, it will not create a secret assuming you are creating one
    ## external to the chart. the key for that secret should be `key.json`.
    secretName:

  # AWS Simple Storage Service
  s3:
    enabled: false
    bucket: "<S3-BUCKET-NAME>"
    # rootFolder: "front50"
    # region: "us-east-1"
    # endpoint: ""
    # accessKey: ""
    # secretKey: ""

  # Azure Storage Account
  azs:
    enabled: false
  #   storageAccountName: ""
  #   accessKey: ""
  #   containerName: "spinnaker"

  rbac:
    # Specifies whether RBAC resources should be created
    create: true

  serviceAccount:
    # Specifies whether a ServiceAccount should be created
    create: true
    # The name of the ServiceAccounts to use.
    # If left blank it is auto-generated from the fullname of the release
    halyardName:
    spinnakerName:
  securityContext:
    # Specifies permissions to write for user/group
    runAsUser: 1000
    fsGroup: 1000

  ## Option to enable HA in Spinnaker; Enabled by default
  enableHA: true

  ## Centralized Monitoring enable for Prometheus
  enableCentralMonitoring: false

  # Initialize gitOps style Halyard
  gitopsHalyard:
    enabled: false
    mTLS:
      enabled: false   # Enable mTLS for Spinnaker Services and SSL for Deck and Gate
      deckIngressHost: spindeck.{{ .Release.Name }}.domain.com  # Used by OES to create ingress for deck
      gateIngressHost: spingate.{{ .Release.Name }}.domain.com  # Used by OES to create ingress for gate
    repo-type: git # git, S3, vault, only git support at this point
    secretName: opsmx-gitops-auth
    # Max time(in secs) that an init container of halyard should wait
    # to fetch External Load Balancer IP of spin-deck and spin-gate
    spinnakerLBCheckDelay: 180
    # Promote applications and pipelines from one environment to another environment
      ## x509 authentication for Spinnaker Gate
    gatex509:
      enabled: false
      host: spingate-x509.domain.com
    pipelinePromotion:
      enabled: false
      ## Namespace in which pipeline promotion job need to run
      # TODO: Implementation pending; currently default namespace is hardcoded
      executionNamespace: default
      ## Spinnaker kubernetes account to use for job execution
      # TODO: Implementation pending; currently default namespace is hardcoded
      executionAccountName: default