Skip to content

vaultwarden values

Every value of chart vaultwarden 0.1.3, read from values.yaml and values.schema.json. A map is listed with its keys; a map without a description of its own is listed by its keys only. Every value has a default: the chart installs with none given.

Value Type Default Description
image.repository string docker.io/vaultwarden/server
image.tag string "" empty: the appVersion of the chart
resources.requests.cpu string 50m
resources.requests.memory string 128Mi
resources.limits.cpu string 1
resources.limits.memory string 512Mi
persistence object SQLite database, attachments and keys live on this volume
persistence.size string 5Gi
persistence.storageClassName string "" empty: the default StorageClass of the cluster
route.hostname string "" empty: OpenShift assigns a host under the default application domain
route.annotations object used when a hostname is set; certificate issued by cert-manager
route.annotations.cert-manager.io/issuer-kind string ClusterIssuer
route.annotations.cert-manager.io/issuer-name string letsencrypt
signups.allowed boolean false false: only addresses invited on the admin page can register
signups.domains string "" comma separated mail domains that may always register; empty: none
smtp object outgoing mail; empty host: no mail, invitations work without it
smtp.host string "" Leave empty to run without mail
smtp.port integer 587
smtp.security string starttls starttls, force_tls or off One of: starttls, force_tls, off.
smtp.from string ""
smtp.fromName string Vaultwarden
smtp.username string ""
extraEnv array [] further settings of Vaultwarden as environment variables
secrets.type string kubernetes kubernetes: Secret from the values below. externalSecret: from a secret store One of: kubernetes, externalSecret.
secrets.adminToken string "" token of the /admin page, plain or an Argon2 PHC string; empty: generated
secrets.smtpPassword string "" password of the smtp user; only used when smtp.host is set
secrets.externalSecret.storeKind string ClusterSecretStore
secrets.externalSecret.storeName string ""
secrets.externalSecret.refreshInterval string 1h
secrets.externalSecret.items object vault item per key; the value is read from the item's password
secrets.externalSecret.items.admin-token string vaultwarden-admin-token
secrets.externalSecret.items.smtp-password string vaultwarden-smtp