Skip to main content

PhariaAI Helm Chart

Version: 1.251100.1

This document provides an overview of the chart dependencies and configurable Helm chart values for PhariaAI. It covers global configurations, detailed dependency settings, image pull credentials, PostgreSQL settings, and resource management options, offering a comprehensive guide for deploying and customizing PhariaAI.

Requirements

RepositoryNameVersion
oci://alephalpha.jfrog.io/helm/assistantpharia-assistant0.28.3
oci://alephalpha.jfrog.io/helm/assistantpharia-assistant-api0.43.0
oci://alephalpha.jfrog.io/helm/assistantpharia-chat0.42.6
oci://alephalpha.jfrog.io/helm/assistantpharia-translation-service0.23.3
oci://alephalpha.jfrog.io/helmcreance0.1.41
oci://alephalpha.jfrog.io/helmdocument-index0.28.11
oci://alephalpha.jfrog.io/helmpharia-document-index-mcp(document-index-mcp)0.8.12
oci://alephalpha.jfrog.io/helminference-api0.15.111
oci://alephalpha.jfrog.io/helminference-api-proxy0.5.38
oci://alephalpha.jfrog.io/helminference-worker0.22.18
oci://alephalpha.jfrog.io/helmmcp-code-sandbox0.9.5
oci://alephalpha.jfrog.io/helmmcp-firecrawl0.11.7
oci://alephalpha.jfrog.io/helm/pharia-catchpharia-catch-api0.0.118
oci://alephalpha.jfrog.io/helm/pharia-catchpharia-catch-ui0.0.71
oci://alephalpha.jfrog.io/helmpharia-common0.2.50
oci://alephalpha.jfrog.io/helmpharia-conductor0.7.12
oci://alephalpha.jfrog.io/helmpharia-data-api0.67.2
oci://alephalpha.jfrog.io/helmpharia-finetuning0.7.33
oci://alephalpha.jfrog.io/helmpharia-iam0.14.110
oci://alephalpha.jfrog.io/helmpharia-kernel0.3.21
oci://alephalpha.jfrog.io/helmpharia-numinous0.52.0
oci://alephalpha.jfrog.io/helmpharia-oauth-gateway1.4.2
oci://alephalpha.jfrog.io/helmpharia-reloader0.1.6
oci://alephalpha.jfrog.io/helm/pharia-studiopharia-studio-api0.17.61
oci://alephalpha.jfrog.io/helm/pharia-studiopharia-studio-ui0.15.79
oci://alephalpha.jfrog.io/helmpharia-temporal0.1.7
oci://alephalpha.jfrog.io/helmpharia-transcribe0.3.5
oci://alephalpha.jfrog.io/helmpharia-translate0.5.5
oci://alephalpha.jfrog.io/helm/phariaosfeature-flags0.10.1
oci://alephalpha.jfrog.io/helm/phariaosphariaos-manager0.55.8
oci://alephalpha.jfrog.io/helm/phariaosphariaos-ui0.64.19

Values

Global

KeyTypeDefaultDescription
global.imagePullOpaqueSecretNamestring

"aleph-alpha-oci-registry-opaque"

Default PhariaAI Secret name as an Opaque secret. Override name for existing image pull secret if required

global.imagePullSecretNamestring

"aleph-alpha-oci-registry"

Default PhariaAI Secret name to pull images from Aleph Alpha artifactory. Override name for existing image pull secret if required

global.inference.enabledbool

true

Activate deployment of Pharia AA inference stack (inference-api, inference-worker)

global.inferenceApiServicesSecretRefstring

"inference-api-services"

Secret to be used to authenticate inference api services. See inferenceApiServices for more info.

global.ingressobject

{"additionalAnnotations":{},"ingressClassName":"nginx","ingressDomain":"pharia-ai.local"}

Global config for all ingress resources

global.ingress.ingressClassNamestring

"nginx"

The ingressClassName globally defined for all ingress resources ref: https://kubernetes.io/docs/concepts/services-networking/ingress/#the-ingress-resource Override possible on sub-chart level: .ingress.ingressClassName overrides global.ingress.ingressClassName

global.ingress.ingressDomainstring

"pharia-ai.local"

Domain for external access / ingress to services via . Override possible on sub-chart level: .ingress.ingressDomain overrides global.ingress.ingressDomain

global.openTelemetryobject

{"enabled":false,"environment":"","grpcEndpoint":"http://opentelemetry-collector.tracing:4317","httpEndpoint":"http://opentelemetry-collector.tracing:4318","sampler":"always_on","samplingRatio":"1.0"}

Global OpenTelemetry configuration that applies to all services

global.openTelemetry.enabledbool

false

Enable OpenTelemetry tracing for all services

global.openTelemetry.environmentstring

""

Deployment environment for service identification and tracing This field is REQUIRED - deployment will fail if not specified Used for service.environment resource attribute and as default for X-Scope-OrgID header

global.openTelemetry.grpcEndpointstring

"http://opentelemetry-collector.tracing:4317"

OpenTelemetry collector endpoint for gRPC (OTLP/gRPC) Example: "http://opentelemetry-collector.tracing:4317" Services that use gRPC: inference-api, inference-worker, most backend services

global.openTelemetry.httpEndpointstring

"http://opentelemetry-collector.tracing:4318"

OpenTelemetry collector endpoint for HTTP (OTLP/HTTP) Example: "http://opentelemetry-collector.tracing:4318" Services that use HTTP: frontend applications, some lightweight services

global.openTelemetry.samplerstring

"always_on"

OpenTelemetry sampler type Options: "always_on", "always_off", "traceidratio", "parentbased_traceidratio" - always_on: Sample all traces (100%) - always_off: Sample no traces (0%) - traceidratio: Sample based on samplingRatio (consistent across services)

global.openTelemetry.samplingRatiostring

"1.0"

OpenTelemetry sampling ratio (0.0 to 1.0) Only used when sampler is "traceidratio" or "parentbased_traceidratio" 0.0 = no sampling, 1.0 = sample all traces

global.permissionModelobject

{"AssistantUser":[{"permission":"ExecuteJobs"},{"permission":"ExecuteTextJobs"},{"permission":"KernelAccess"},{"model":null,"permission":"AccessModel"},{"namespace":"Assistant","permission":"AccessNamespace"},{"permission":"AccessDataPlatform"},{"permission":"AccessAssistant"},{"permission":"OsReadUsecase"},{"permission":"AccessSearchStore"},{"permission":"ReadUser"},{"permission":"ReadGroup"}],"CatchAdminUser":[{"permission":"CatchAccess"},{"permission":"CatchAdminAccess"},{"permission":"ReadUser"}],"CatchUser":[{"permission":"CatchAccess"},{"permission":"ReadUser"}],"ChatServiceUser":[{"permission":"ExecuteJobs"},{"permission":"ExecuteTextJobs"},{"permission":"KernelAccess"},{"model":null,"permission":"AccessModel"},{"namespace":"Assistant","permission":"AccessNamespace"},{"permission":"AccessDataPlatform"},{"permission":"AccessAssistant"},{"permission":"OsReadUsecase"},{"permission":"OsReadConfigurations"}],"Client":[{"permission":"ExecuteJobs"},{"model":null,"permission":"AccessModel"}],"DocumentIndexServiceUser":[{"permission":"OwnsResource","resource":"document_index_namespace"}],"EtlServiceUser":[{"namespace":"Studio","permission":"AccessNamespace"},{"namespace":"Assistant","permission":"AccessNamespace"},{"permission":"AccessDataPlatform"},{"permission":"ImportProjectRepositoryRelation"},{"permission":"OwnsResource","resource":"stage"},{"permission":"OwnsResource","resource":"file"},{"permission":"OwnsResource","resource":"search_store"},{"permission":"AccessSearchStore"}],"FinetuningServiceUser":[{"permission":"ImportProjectRepositoryRelation"}],"InferenceAdminUser":[{"permission":"AdministrateSystem"},{"permission":"ExecuteJobs"},{"permission":"ExecuteTextJobs"},{"permission":"CreateSteeringConcepts"},{"permission":"ReadSteeringConcepts"},{"permission":"DeleteSteeringConcepts"},{"model":null,"permission":"AccessModel"}],"InferenceServiceUser":[{"permission":"ExecuteJobs"},{"permission":"ExecuteTextJobs"},{"permission":"CreateSteeringConcepts"},{"permission":"ReadSteeringConcepts"},{"permission":"DeleteSteeringConcepts"},{"model":null,"permission":"AccessModel"}],"OAuthGatewayConnectionsServiceUser":[{"permission":"OAuthGatewayConnectionAdmin"}],"OAuthGatewayIntegrationsServiceUser":[{"permission":"OAuthGatewayIntegrationWrite"}],"OsServiceUser":[{"permission":"OwnsResource","resource":"application"},{"permission":"OwnsResource","resource":"project"},{"permission":"OwnsResource","resource":"stage"},{"permission":"ProjectAccess"}],"OsUser":[{"permission":"OsReadUsecase"},{"permission":"OsWriteUsecase"},{"permission":"OsReadHardware"},{"permission":"OsReadModels"},{"permission":"OsWriteModels"},{"permission":"ReadGroup"},{"permission":"KernelAccess"}],"StudioServiceUser":[{"permission":"ExecuteJobs"},{"permission":"KernelAccess"},{"model":null,"permission":"AccessModel"},{"namespace":"Studio","permission":"AccessNamespace"},{"permission":"AccessDataPlatform"},{"permission":"AccessStudio"},{"permission":"AccessFinetuning"},{"permission":"OsReadUsecase"},{"permission":"OsWriteUsecase"},{"permission":"ProjectAccess"},{"permission":"ReadUser"},{"permission":"ReadGroup"},{"permission":"OwnsResource","resource":"project"},{"permission":"OwnsResource","resource":"application"}],"StudioUser":[{"permission":"ExecuteJobs"},{"permission":"KernelAccess"},{"model":null,"permission":"AccessModel"},{"namespace":"Studio","permission":"AccessNamespace"},{"permission":"AccessDataPlatform"},{"permission":"AccessStudio"},{"permission":"AccessFinetuning"},{"permission":"OsReadUsecase"},{"permission":"OsWriteUsecase"},{"permission":"OsReadModels"},{"permission":"OsWriteModels"},{"permission":"ProjectAccess"},{"permission":"ReadUser"},{"permission":"ReadGroup"},{"permission":"AccessSearchStore"}],"UseCaseServiceUser":[{"permission":"ExecuteJobs"},{"model":null,"permission":"AccessModel"},{"namespace":"Studio","permission":"AccessNamespace"},{"namespace":"Assistant","permission":"AccessNamespace"},{"permission":"KernelAccess"}]}

Permission model (Roles to Permissions) used in the PhariaAI stack

global.permissionSchemaConfigMapNamestring

"pharia-ai-permissions"

Default PhariaAI Config Map for setting permission model

global.phariaAIConfigMapstring

"pharia-ai-config"

Default PhariaAI ConfigMap for setting environment variables

global.phariaAiEditionstring

""

Default PhariaAI edition <-- Will be dropped soon once we have coordinated with all customers @schema type: string minLength: 1 @schema

global.phariaAiEnvironmentstring

"on-premise"

Default PhariaAI environment

global.phariaAiFeatureSetstring

"251100"

Default PhariaAI feature set

global.phariaAiInfraIdstring

"pharia-01"

PhariaAI infrastructure ID. This is used to identify the infrastructure in the PhariaAI system.

global.phariaAiInfraNamestring

"pharia-ai"

PhariaAI infrastructure name. This is used to identify the infrastructure in the PhariaAI system.

global.searchStoresEnabledbool

true

Enable search stores functionality

General

KeyTypeDefaultDescription
apiGatewayobject

{"ingress":{"annotations":{},"enabled":true,"hostname":"api","tls":{"enabled":true,"secretName":"pharia-api-gateway-tls"}}}

Ingress configuration for API Gateway

apiGateway.ingress.annotationsobject

{}

Annotations for the ingress-resource. This can be used to add ingress controller specific annotations.

apiGateway.ingress.enabledbool

true

Enabled ingress creation

apiGateway.ingress.hostnamestring

"api"

Hostname for the Ingress (without domain). The domain is read from global.ingressDomain. This needs to be changed, if multiple instances are deployed to the same cluster using the same domain

apiGateway.ingress.tlsobject

{"enabled":true,"secretName":"pharia-api-gateway-tls"}

Configure TLS for this Ingress

apiGateway.ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

apiGateway.ingress.tls.secretNamestring

"pharia-api-gateway-tls"

The name of the secret containing the TLS certificate. See also: https://kubernetes.io/docs/concepts/services-networking/ingress/#tls

imagePullCredentials.passwordstring

""

Password to login into artifactory registry

imagePullCredentials.registrystring

"alephalpha.jfrog.io"

Aleph Alpha artifactory registry

imagePullCredentials.usernamestring

""

Username to login into artifactory registry

pharia-document-index-mcp.enabledbool

true

pharia-document-index-mcp.fullnameOverridestring

"pharia-document-index-mcp"

pharia-document-index-mcp.ingress.enabledbool

false

Sub charts

pharia-assistant

KeyTypeDefaultDescription
pharia-assistant-api.databaseConfig.externalobject

{"existingSecret":""}

Provide an existing database if you want to use an external database

pharia-assistant-api.databaseConfig.external.existingSecretstring

""

Set this value if a k8s Secret with PostgreSQL values already exists. Make sure that the all the databaseConfig.secretKeys exists in the secret with a valid value.

pharia-assistant-api.databaseConfig.secretKeys.databaseNameKeystring

"databaseName"

The key in the secret that contains the database name

pharia-assistant-api.databaseConfig.secretKeys.hostKeystring

"host"

The key in the secret that contains the host of the database

pharia-assistant-api.databaseConfig.secretKeys.passwordKeystring

"password"

The key in the secret that contains the password of the database

pharia-assistant-api.databaseConfig.secretKeys.portKeystring

"port"

The key in the secret that contains the port of the database

pharia-assistant-api.databaseConfig.secretKeys.userKeystring

"user"

The key in the secret that contains the user of the database

pharia-assistant-api.enabledbool

true

Set this to true to install the pharia-assistant-api subchart as a dependency

pharia-assistant-api.env.APPLICATION_NAMEstring

"PhariaAssistant"

Name of the application to be displayed in the frontend's top bar @schema deprecated: true type: string minLength: 1 @schema

pharia-assistant-api.env.DOCUMENT_INDEX_FILE_UPLOAD_NAMESPACEstring

"Assistant"

DEPRECATED: Use pharia-chat.env.values.PHARIA_CHAT_DOCUMENT_INDEX_FILE_UPLOAD_NAMESPACE instead @schema deprecated: true type: string minLength: 1 @schema

pharia-assistant-api.env.GENERATE_MODEL_NAMEstring

"llama-3.3-70b-instruct"

Model name for generate feature @schema enum: ["llama-3.1-8b-instruct", "llama-3.1-70b-instruct", "llama-3.3-70b-instruct"] @schema

pharia-assistant-api.env.MAX_FILE_UPLOAD_SIZE_MBfloat

20

Frontend maximum file upload size in MB @schema type: number exclusiveMinimum: 0 @schema

pharia-assistant-api.env.PERSIST_TRACESbool

true

Enable/disable persisting traces in the Assistant's database @schema type: boolean @schema

pharia-assistant-api.env.QA_MODEL_NAMEstring

"llama-3.3-70b-instruct"

Model used for generating Agents @schema deprecated: true enum: ["llama-3.1-8b-instruct", "llama-3.1-70b-instruct", "llama-3.3-70b-instruct"] @schema

pharia-assistant-api.env.REQUEST_TIMEOUT_IN_SECONDSint

180

Frontend request timeout in seconds @schema type: integer minimum: 1 @schema

pharia-assistant-api.env.SUMMARY_MODEL_NAMEstring

"llama-3.3-70b-instruct"

Model name for summarization subtasks in chat and NLS features @schema enum: ["llama-3.1-8b-instruct", "llama-3.1-70b-instruct", "llama-3.3-70b-instruct"] @schema

pharia-assistant-api.env.TRANSLATE_MODEL_NAMEstring

"pharia-1-mt-translation"

Model name for translation feature @schema enum: ["pharia-1-mt-translation"] @schema

pharia-assistant-api.env.TRANSLATION_CACHE_MAX_SIZEint

10000

Maximum size for the translation cache @schema type: integer minimum: 1 @schema

pharia-assistant-api.env.TRANSLATION_CACHE_TTLint

3600

Time-to-live for the translation cache in seconds @schema type: integer minimum: 1 @schema

pharia-assistant-api.faviconobject

{"png":"","svg":"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"}

The favicon used in the Assistant frontend can be customized by providing the contents of a logo.svg or logo.png file as a base64 encoded string. This can be created by executing cat favicon.svg \| base64 in a terminal. The svg value takes precedence over the png value. @schema deprecated: true type: object anyOf: - required: - svg properties: svg: type: string minLength: 1 - required: - png properties: png: type: string minLength: 1 @schema

pharia-assistant-api.favicon.pngstring

""

The base64 encoded favicon.png

pharia-assistant-api.favicon.svgstring

"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"

The base64 encoded favicon.svg

pharia-assistant-api.featureFlagsobject

{"enableAutoSidebarResize":false,"enableChat":true,"enableCollections":true,"enableExtensibleGenerate":true,"enableExtensibleSummarize":true,"enableHomepage":true,"enableNls":true,"enablePersonalAgents":true,"enableTranslate":true}

Feature flags for pharia-assistant-api

pharia-assistant-api.featureFlags.enableAutoSidebarResizebool

false

Enable automatic sidebar resizing @schema type: boolean @schema

pharia-assistant-api.featureFlags.enableChatbool

true

Enable inbuilt chat feature @schema type: boolean @schema

pharia-assistant-api.featureFlags.enableCollectionsbool

true

Enable collections @schema type: boolean @schema

pharia-assistant-api.featureFlags.enableExtensibleGeneratebool

true

Enable extensible generate feature @schema type: boolean @schema

pharia-assistant-api.featureFlags.enableExtensibleSummarizebool

true

Enable extensible summarize feature @schema type: boolean @schema

pharia-assistant-api.featureFlags.enableHomepagebool

true

Enable homepage @schema type: boolean @schema

pharia-assistant-api.featureFlags.enableNlsbool

true

Enable NLS feature @schema type: boolean @schema

pharia-assistant-api.featureFlags.enablePersonalAgentsbool

true

Enable personal agents @schema type: boolean @schema

pharia-assistant-api.featureFlags.enableTranslatebool

true

Enable inbuilt translate feature @schema type: boolean @schema

pharia-assistant-api.fullnameOverridestring

"pharia-assistant-api"

Override for the full name of pharia-assistant-api

pharia-assistant-api.logoobject

{"png":"","svg":"PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIGhlaWdodD0iNzgiIHdpZHRoPSI3OCIgdmlld0JveD0iMjQgMjQgMTAyIDEwMiI+CiAgPHJlY3Qgd2lkdGg9IjIwMCIgaGVpZ2h0PSIyMDAiIGZpbGw9IndoaXRlIiAvPgogIDxwYXRoIGQ9Im0zNC42NyAxMDYuNDMtNS41NS0xMy41NUExOS4xNCAxOS4xNCAwIDAgMCAyOSA1Ny40Mmw1LjQ3LTEzLjU5YTMzLjc4IDMzLjc4IDAgMCAxIC4yIDYyLjZabTIyLjkzIDE3LjEyLTguNjgtMTEuOGE0NS4yOCA0NS4yOCAwIDAgMCA4LjYxLTguMjdMNjkgMTEyLjYyYTU5LjgyIDU5LjgyIDAgMCAxLTExLjQgMTAuOTNaIiAvPgogIDxwYXRoIGQ9Ik04Mi4yMyA3NS4xN2E2MC4zNyA2MC4zNyAwIDAgMC0yNC42NC00OC4zOWwtOC42OCAxMS44MWE0NS42MyA0NS42MyAwIDAgMSAxOC42OCAzNi41OCA2MC4yOCA2MC4yOCAwIDAgMCAyNC40OCA0OC4zOGw4LjY4LTExLjhhNDUuNiA0NS42IDAgMCAxLTE4LjUyLTM2LjU4Wm05Ljg1LTI4LjIzLTExLjQ3LTkuMTJhNjAuMTQgNjAuMTQgMCAwIDEgMTEuOTQtMTEuMzdsOC41NiAxMS44OGE0NS41IDQ1LjUgMCAwIDAtOS4wMyA4LjYxWk0xMTUgMTA2LjUyYTM0LjMyIDM0LjMyIDAgMCAxLS4yOS02Mi41Mmw2LjEgMTMuMzJhMTkuNjggMTkuNjggMCAwIDAgLjE5IDM1LjgzWiIgLz4KPC9zdmc+Cg=="}

The logo used in the Assistant frontend can be customized by providing the contents of a logo.svg or logo.png file as a base64 encoded string. This can be created by executing cat logo.svg \| base64 in a terminal. The svg value takes precedence over the png value. @schema deprecated: true type: object anyOf: - required: - svg properties: svg: type: string minLength: 1 - required: - png properties: png: type: string minLength: 1 @schema

pharia-assistant-api.logo.pngstring

""

The base64 encoded logo.png

pharia-assistant-api.logo.svgstring

"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"

The base64 encoded logo.svg

pharia-assistant-api.postgresql.auth.existingSecretstring

""

pharia-assistant-api.postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

pharia-assistant-api.postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

pharia-assistant-api.privacyPolicyNoticelist

[{"link_title":"Privacy Policy","link_url":"https://docs.aleph-alpha.com/docs/privacy-policy-de/","locale":"en","text":"Please do not enter any personal, sensitive or classified data in this tool, as it is a test system. You can find more information on how we process personal data in our"},{"link_title":"Datenschutzrichtlinie","link_url":"https://docs.aleph-alpha.com/docs/privacy-policy-de/","locale":"de","text":"Bitte geben Sie keine persönlichen, sensiblen oder geheimen Daten in dieses Tool ein, da es sich um ein Testsystem handelt. Weitere Informationen darüber, wie wir personenbezogene Daten verarbeiten, finden Sie in unserer"}]

If a locale is missing or no customization is provided at all, the frontend has an inbuilt default with the same values as those below. @schema deprecated: true type: array items: type: object properties: locale: enum: ["en", "de"] minLength: 1 text: type: string minLength: 1 link_url: type: string minLength: 1 link_title: type: string minLength: 1 required: - locale - text - link_url - link_title @schema

pharia-assistant-api.redis.auth.passwordstring

""

If internal Redis is used, a dedicated password has to be provided for setup of application authentication

pharia-assistant-api.redis.enabledbool

true

This is used to indicate whether the internal Redis should be used or not.

pharia-assistant-api.redisConfig.databases.centralCacheint

0

The database to be used as central cache for pharia-assistant-api

pharia-assistant-api.redisConfig.external.existingSecretstring

""

Provide connection details if you want to use an existing external Redis instance

pharia-assistant-api.redisConfig.secretKeys.hostKeystring

"host"

The key in the secret that contains the Redis host

pharia-assistant-api.redisConfig.secretKeys.passwordKeystring

"password"

The key in the secret that contains the Redis password

pharia-assistant-api.redisConfig.secretKeys.portKeystring

"port"

The key in the secret that contains the Redis port

pharia-assistant-api.redisConfig.secretKeys.usernameKeystring

"username"

The key in the secret that contains the Redis user

pharia-assistant-api.redisConfig.tls.enabledbool

false

Indicates whether TLS is enabled for the Redis connection (only for external Redis)

pharia-assistant-api.resources.limits.cpustring

"1"

pharia-assistant-api.resources.limits.memorystring

"4Gi"

pharia-assistant-api.resources.requests.cpustring

"100m"

pharia-assistant-api.resources.requests.memorystring

"4Gi"

pharia-assistant-api.secretobject

{"serviceUserToken":""}

Allows to populate the secret identified by 'pharia-assistant-api.serviceUserSecret' through this helm-chart. The secret must contain the field apiToken. See 'pharia-assistant-api.serviceUserSecret' for more information.

pharia-assistant-api.serviceUserSecretstring

"pharia-iam-service-user-pharia-assistant-api"

The name of a secret containing the service user token used by the pharia-assistant-api for sending requests to the inference. This allows to connect the pharia-assistant-api to an externally running inference. The secret must contain the field apiToken. It can either be pre-existing or the chart creates it for you with the value defined in 'pharia-assistant-api.secret'.

defaultRoutestring

"/apps"

Set the default route when visiting Assistant

enabledbool

true

Set this to true to install the pharia-assistant subchart as a dependency

faroPublicApiKeystring

""

Set the public API Key for Faro.

faroTelemetryFallbackUrlstring

""

Set the fallback Faro endpoint to send telemetry.

faroTelemetryUrlstring

""

Set the Faro endpoint to send telemetry. Empty value disables the Faro plugin altogether.

fullnameOverridestring

"pharia-assistant"

Override for the full name of pharia-assistant

ingress.enabledbool

true

Enabled ingress creation

ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

posthogApiHoststring

""

Set the PostHog API host.

posthogTokenstring

""

Set the PostHog token. empty value disables PostHog integration

posthogUiHoststring

""

Set the PostHog UI host.

resources.limits.cpustring

"500m"

resources.limits.memorystring

"256Mi"

resources.requests.cpustring

"100m"

resources.requests.memorystring

"256Mi"

pharia-assistant-api

KeyTypeDefaultDescription
databaseConfig.externalobject

{"existingSecret":""}

Provide an existing database if you want to use an external database

databaseConfig.external.existingSecretstring

""

Set this value if a k8s Secret with PostgreSQL values already exists. Make sure that the all the databaseConfig.secretKeys exists in the secret with a valid value.

databaseConfig.secretKeys.databaseNameKeystring

"databaseName"

The key in the secret that contains the database name

databaseConfig.secretKeys.hostKeystring

"host"

The key in the secret that contains the host of the database

databaseConfig.secretKeys.passwordKeystring

"password"

The key in the secret that contains the password of the database

databaseConfig.secretKeys.portKeystring

"port"

The key in the secret that contains the port of the database

databaseConfig.secretKeys.userKeystring

"user"

The key in the secret that contains the user of the database

enabledbool

true

Set this to true to install the pharia-assistant-api subchart as a dependency

env.APPLICATION_NAMEstring

"PhariaAssistant"

Name of the application to be displayed in the frontend's top bar @schema deprecated: true type: string minLength: 1 @schema

env.DOCUMENT_INDEX_FILE_UPLOAD_NAMESPACEstring

"Assistant"

DEPRECATED: Use pharia-chat.env.values.PHARIA_CHAT_DOCUMENT_INDEX_FILE_UPLOAD_NAMESPACE instead @schema deprecated: true type: string minLength: 1 @schema

env.GENERATE_MODEL_NAMEstring

"llama-3.3-70b-instruct"

Model name for generate feature @schema enum: ["llama-3.1-8b-instruct", "llama-3.1-70b-instruct", "llama-3.3-70b-instruct"] @schema

env.MAX_FILE_UPLOAD_SIZE_MBfloat

20

Frontend maximum file upload size in MB @schema type: number exclusiveMinimum: 0 @schema

env.PERSIST_TRACESbool

true

Enable/disable persisting traces in the Assistant's database @schema type: boolean @schema

env.QA_MODEL_NAMEstring

"llama-3.3-70b-instruct"

Model used for generating Agents @schema deprecated: true enum: ["llama-3.1-8b-instruct", "llama-3.1-70b-instruct", "llama-3.3-70b-instruct"] @schema

env.REQUEST_TIMEOUT_IN_SECONDSint

180

Frontend request timeout in seconds @schema type: integer minimum: 1 @schema

env.SUMMARY_MODEL_NAMEstring

"llama-3.3-70b-instruct"

Model name for summarization subtasks in chat and NLS features @schema enum: ["llama-3.1-8b-instruct", "llama-3.1-70b-instruct", "llama-3.3-70b-instruct"] @schema

env.TRANSLATE_MODEL_NAMEstring

"pharia-1-mt-translation"

Model name for translation feature @schema enum: ["pharia-1-mt-translation"] @schema

env.TRANSLATION_CACHE_MAX_SIZEint

10000

Maximum size for the translation cache @schema type: integer minimum: 1 @schema

env.TRANSLATION_CACHE_TTLint

3600

Time-to-live for the translation cache in seconds @schema type: integer minimum: 1 @schema

faviconobject

{"png":"","svg":"PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIGhlaWdodD0iNzgiIHdpZHRoPSI3OCIgdmlld0JveD0iMjQgMjQgMTAyIDEwMiI+CiAgPHJlY3Qgd2lkdGg9IjIwMCIgaGVpZ2h0PSIyMDAiIGZpbGw9IndoaXRlIiAvPgogIDxwYXRoIGQ9Im0zNC42NyAxMDYuNDMtNS41NS0xMy41NUExOS4xNCAxOS4xNCAwIDAgMCAyOSA1Ny40Mmw1LjQ3LTEzLjU5YTMzLjc4IDMzLjc4IDAgMCAxIC4yIDYyLjZabTIyLjkzIDE3LjEyLTguNjgtMTEuOGE0NS4yOCA0NS4yOCAwIDAgMCA4LjYxLTguMjdMNjkgMTEyLjYyYTU5LjgyIDU5LjgyIDAgMCAxLTExLjQgMTAuOTNaIiAvPgogIDxwYXRoIGQ9Ik04Mi4yMyA3NS4xN2E2MC4zNyA2MC4zNyAwIDAgMC0yNC42NC00OC4zOWwtOC42OCAxMS44MWE0NS42MyA0NS42MyAwIDAgMSAxOC42OCAzNi41OCA2MC4yOCA2MC4yOCAwIDAgMCAyNC40OCA0OC4zOGw4LjY4LTExLjhhNDUuNiA0NS42IDAgMCAxLTE4LjUyLTM2LjU4Wm05Ljg1LTI4LjIzLTExLjQ3LTkuMTJhNjAuMTQgNjAuMTQgMCAwIDEgMTEuOTQtMTEuMzdsOC41NiAxMS44OGE0NS41IDQ1LjUgMCAwIDAtOS4wMyA4LjYxWk0xMTUgMTA2LjUyYTM0LjMyIDM0LjMyIDAgMCAxLS4yOS02Mi41Mmw2LjEgMTMuMzJhMTkuNjggMTkuNjggMCAwIDAgLjE5IDM1LjgzWiIgLz4KPC9zdmc+Cg=="}

The favicon used in the Assistant frontend can be customized by providing the contents of a logo.svg or logo.png file as a base64 encoded string. This can be created by executing cat favicon.svg \| base64 in a terminal. The svg value takes precedence over the png value. @schema deprecated: true type: object anyOf: - required: - svg properties: svg: type: string minLength: 1 - required: - png properties: png: type: string minLength: 1 @schema

favicon.pngstring

""

The base64 encoded favicon.png

favicon.svgstring

"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"

The base64 encoded favicon.svg

featureFlagsobject

{"enableAutoSidebarResize":false,"enableChat":true,"enableCollections":true,"enableExtensibleGenerate":true,"enableExtensibleSummarize":true,"enableHomepage":true,"enableNls":true,"enablePersonalAgents":true,"enableTranslate":true}

Feature flags for pharia-assistant-api

featureFlags.enableAutoSidebarResizebool

false

Enable automatic sidebar resizing @schema type: boolean @schema

featureFlags.enableChatbool

true

Enable inbuilt chat feature @schema type: boolean @schema

featureFlags.enableCollectionsbool

true

Enable collections @schema type: boolean @schema

featureFlags.enableExtensibleGeneratebool

true

Enable extensible generate feature @schema type: boolean @schema

featureFlags.enableExtensibleSummarizebool

true

Enable extensible summarize feature @schema type: boolean @schema

featureFlags.enableHomepagebool

true

Enable homepage @schema type: boolean @schema

featureFlags.enableNlsbool

true

Enable NLS feature @schema type: boolean @schema

featureFlags.enablePersonalAgentsbool

true

Enable personal agents @schema type: boolean @schema

featureFlags.enableTranslatebool

true

Enable inbuilt translate feature @schema type: boolean @schema

fullnameOverridestring

"pharia-assistant-api"

Override for the full name of pharia-assistant-api

logoobject

{"png":"","svg":"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"}

The logo used in the Assistant frontend can be customized by providing the contents of a logo.svg or logo.png file as a base64 encoded string. This can be created by executing cat logo.svg \| base64 in a terminal. The svg value takes precedence over the png value. @schema deprecated: true type: object anyOf: - required: - svg properties: svg: type: string minLength: 1 - required: - png properties: png: type: string minLength: 1 @schema

logo.pngstring

""

The base64 encoded logo.png

logo.svgstring

"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"

The base64 encoded logo.svg

postgresql.auth.existingSecretstring

""

postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

privacyPolicyNoticelist

[{"link_title":"Privacy Policy","link_url":"https://docs.aleph-alpha.com/docs/privacy-policy-de/","locale":"en","text":"Please do not enter any personal, sensitive or classified data in this tool, as it is a test system. You can find more information on how we process personal data in our"},{"link_title":"Datenschutzrichtlinie","link_url":"https://docs.aleph-alpha.com/docs/privacy-policy-de/","locale":"de","text":"Bitte geben Sie keine persönlichen, sensiblen oder geheimen Daten in dieses Tool ein, da es sich um ein Testsystem handelt. Weitere Informationen darüber, wie wir personenbezogene Daten verarbeiten, finden Sie in unserer"}]

If a locale is missing or no customization is provided at all, the frontend has an inbuilt default with the same values as those below. @schema deprecated: true type: array items: type: object properties: locale: enum: ["en", "de"] minLength: 1 text: type: string minLength: 1 link_url: type: string minLength: 1 link_title: type: string minLength: 1 required: - locale - text - link_url - link_title @schema

redis.auth.passwordstring

""

If internal Redis is used, a dedicated password has to be provided for setup of application authentication

redis.enabledbool

true

This is used to indicate whether the internal Redis should be used or not.

redisConfig.databases.centralCacheint

0

The database to be used as central cache for pharia-assistant-api

redisConfig.external.existingSecretstring

""

Provide connection details if you want to use an existing external Redis instance

redisConfig.secretKeys.hostKeystring

"host"

The key in the secret that contains the Redis host

redisConfig.secretKeys.passwordKeystring

"password"

The key in the secret that contains the Redis password

redisConfig.secretKeys.portKeystring

"port"

The key in the secret that contains the Redis port

redisConfig.secretKeys.usernameKeystring

"username"

The key in the secret that contains the Redis user

redisConfig.tls.enabledbool

false

Indicates whether TLS is enabled for the Redis connection (only for external Redis)

resources.limits.cpustring

"1"

resources.limits.memorystring

"4Gi"

resources.requests.cpustring

"100m"

resources.requests.memorystring

"4Gi"

secretobject

{"serviceUserToken":""}

Allows to populate the secret identified by 'pharia-assistant-api.serviceUserSecret' through this helm-chart. The secret must contain the field apiToken. See 'pharia-assistant-api.serviceUserSecret' for more information.

serviceUserSecretstring

"pharia-iam-service-user-pharia-assistant-api"

The name of a secret containing the service user token used by the pharia-assistant-api for sending requests to the inference. This allows to connect the pharia-assistant-api to an externally running inference. The secret must contain the field apiToken. It can either be pre-existing or the chart creates it for you with the value defined in 'pharia-assistant-api.secret'.

pharia-chat

KeyTypeDefaultDescription
databaseConfig.pool.hasPgBouncerbool

false

databaseConfig.pool.recycleSecint

300

databaseConfig.pool.sizeint

30

databaseConfig.pool.timeoutSecint

5

enabledbool

true

Set this to true to install the pharia-chat subchart as a dependency.

env.values.PHARIA_CHAT_DEFAULT_MODELstring

"llama-3.3-70b-instruct"

DEPRECATED @schema enum: ["llama-3.1-8b-instruct", "llama-3.1-70b-instruct", "llama-3.3-70b-instruct"] @schema

env.values.PHARIA_CHAT_DOCUMENT_INDEX_FILE_UPLOAD_NAMESPACEstring

"Assistant"

Document-Index namespace for file uploads in the default chat @schema type: string minLength: 1 @schema

env.values.PHARIA_CHAT_PERSIST_DEFAULT_CHAT_TRACESbool

true

Enable/disable persisting traces in the pharia-chat database for the default chat @schema type: boolean @schema

env.values.PHARIA_CHAT_REASONING_MODELstring

"llama-3.3-70b-instruct"

Model name for agentic chat @schema type: string @schema

env.values.PHARIA_CHAT_RETRIEVER_QA_INDEX_NAMEstring

"Assistant-Index"

Document-Index index name for the collections used in the default chat @schema type: string minLength: 1 @schema

fullnameOverridestring

"pharia-chat"

Set this to override the fully qualified name for Pharia Chat

ingress.enabledbool

false

ingress.tls.enabledbool

true

jobInitMcpRegistry.enabledbool

true

jobInitMcpRegistry.env.configmap.MCP_CODE_SANDBOX_URL.keystring

"MCP_CODE_SANDBOX_URL"

jobInitMcpRegistry.env.configmap.MCP_CODE_SANDBOX_URL.namestring

"{{ .Values.global.phariaAIConfigMap }}"

jobInitMcpRegistry.env.configmap.MCP_CODE_SANDBOX_URL.optionalbool

true

jobInitMcpRegistry.env.configmap.MCP_FIRECRAWL_URL.keystring

"MCP_FIRECRAWL_URL"

jobInitMcpRegistry.env.configmap.MCP_FIRECRAWL_URL.namestring

"{{ .Values.global.phariaAIConfigMap }}"

jobInitMcpRegistry.env.configmap.MCP_FIRECRAWL_URL.optionalbool

true

jobInitMcpRegistry.env.configmap.PHARIA_CONDUCTOR_URL.keystring

"PHARIA_CONDUCTOR_URL"

jobInitMcpRegistry.env.configmap.PHARIA_CONDUCTOR_URL.namestring

"{{ .Values.global.phariaAIConfigMap }}"

jobInitMcpRegistry.env.configmap.PHARIA_CONDUCTOR_URL.optionalbool

true

jobInitMcpRegistry.env.configmap.PHARIA_DOCUMENT_INDEX_MCP_URL.keystring

"PHARIA_DOCUMENT_INDEX_MCP_URL"

jobInitMcpRegistry.env.configmap.PHARIA_DOCUMENT_INDEX_MCP_URL.namestring

"{{ .Values.global.phariaAIConfigMap }}"

jobInitMcpRegistry.env.configmap.PHARIA_DOCUMENT_INDEX_MCP_URL.optionalbool

true

jobInitMcpRegistry.env.configmap.PHARIA_TRANSLATION_SERVICE_HOST.keystring

"PHARIA_TRANSLATION_SERVICE_HOST"

jobInitMcpRegistry.env.configmap.PHARIA_TRANSLATION_SERVICE_HOST.namestring

"{{ .Values.global.phariaAIConfigMap }}"

jobInitMcpRegistry.env.configmap.PHARIA_TRANSLATION_SERVICE_HOST.optionalbool

true

jobInitMcpRegistry.extraVolumes[0].configMap.defaultModeint

493

jobInitMcpRegistry.extraVolumes[0].configMap.namestring

"{{ include \"pharia-common.names.fullname.root\" . }}-scripts"

jobInitMcpRegistry.extraVolumes[0].namestring

"mcp-server-registration-script-volume"

jobInitMcpRegistry.mcpServersobject

{"document-index-mcp":{"base_url":"${PHARIA_DOCUMENT_INDEX_MCP_URL}","description":"Document Index MCP server","enabled":true,"icon":"i-material-symbols-database-search","path":"/api/v1/mcp","scope":"system","transport":"streamable-http"},"mcp-agent-builder":{"base_url":"${PHARIA_CONDUCTOR_URL}","description":"Agent Builder MCP server","enabled":true,"icon":"i-material-symbols-robot-2-outline-rounded","path":"/mcp","scope":"selectable","transport":"streamable-http"},"mcp-code-sandbox":{"base_url":"${MCP_CODE_SANDBOX_URL}","description":"Code Sandbox MCP server","enabled":true,"icon":"i-material-symbols-code","path":"/mcp","scope":"system","transport":"streamable-http"},"mcp-firecrawl":{"base_url":"${MCP_FIRECRAWL_URL}","description":"Firecrawl MCP server","enabled":false,"icon":"i-material-symbols-language","path":"/mcp","scope":"selectable","transport":"streamable-http"},"mcp-translation":{"base_url":"${PHARIA_TRANSLATION_SERVICE_HOST}","description":"Translation MCP server","enabled":false,"icon":"i-material-symbols-translate","path":"/mcp","scope":"selectable","transport":"streamable-http"}}

MCP servers configuration @schema type: object additionalProperties: type: object properties: enabled: type: boolean description: type: string base_url: type: string path: type: string minLength: 1 scope: type: string enum: - system - selectable transport: type: string enum: - streamable-http - sse icon: type: string required: - path - description - scope - transport @schema

postgresql.auth.existingSecretstring

""

postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

secretobject

{"serviceUserToken":""}

Allows to populate the secret identified by 'pharia-chat.serviceUserSecret' through this helm-chart. The secret must contain the field apiToken. See 'pharia-chat.serviceUserSecret' for more information.

serviceUserSecretstring

"pharia-iam-service-user-pharia-chat"

The name of a secret containing the service user token used by the pharia-chat for sending embedding requests to the inference. This allows to connect the pharia-chat to an externally running inference. The secret must contain the field token. It can either be pre-existing or the chart creates it for you with the value defined in 'pharia-chat.secret.serviceUserToken'. This can be left undefined if the pharia-chat is connected to the internal inference (deployed through this helm-chart). In that case use this auto-generated secret.

pharia-translation-service

KeyTypeDefaultDescription
enabledbool

false

Set this to true to install the pharia-translation-service subchart as a dependency

env.values.TRANSLATE_MODEL_NAMEstring

"pharia-1-mt-translation"

Model name for translation feature @schema enum: ["pharia-1-mt-translation"] @schema

fullnameOverridestring

"pharia-translation-service"

Override for the full name of pharia-translation-service

resources.limits.cpustring

"1"

resources.limits.memorystring

"4Gi"

resources.requests.cpustring

"100m"

resources.requests.memorystring

"4Gi"

creance

KeyTypeDefaultDescription
databaseConfigobject

{"external":{"existingSecretName":""},"secretKeys":{"databaseNameKey":"databaseName","hostKey":"host","passwordKey":"password","portKey":"port","userKey":"user"}}

"app user"

databaseConfig.externalobject

{"existingSecretName":""}

"os.pharia.ai/allowed-usecases": '["Creance"]'

databaseConfig.secretKeys.databaseNameKeystring

"databaseName"

The key in the secret that contains the database name

databaseConfig.secretKeys.hostKeystring

"host"

The key in the secret that contains the host of the database

databaseConfig.secretKeys.passwordKeystring

"password"

The key in the secret that contains the password of the database

databaseConfig.secretKeys.portKeystring

"port"

The key in the secret that contains the port of the database

databaseConfig.secretKeys.userKeystring

"user"

The key in the secret that contains the user of the database

enabledbool

false

available in the assistant

fullnameOverridestring

"creance"

inference.secretKeys.baseUrlstring

""

The base URL of the inference API

inference.secretKeys.tokenstring

""

The inference token

inference.secretNamestring

""

"os.pharia.ai/allowed-usecases": '["Creance"]'

storageConfig.externalobject

{"existingSecret":""}

"os.pharia.ai/allowed-usecases": '["Creance"]'

storageConfig.secretKeys.bucketNameKeystring

""

The name of the storage bucket

storageConfig.secretKeys.bucketPasswordKeystring

""

The Secret Access Key for the object storage

storageConfig.secretKeys.bucketUserKeystring

""

The Access Key ID

storageUrlstring

""

The host of the S3 compatible object storage

unleash.secretKeys.tokenstring

""

The API token for Unleash

unleash.secretNamestring

""

with default values

document-index

KeyTypeDefaultDescription
databaseConfigobject

{"external":{"existingSecret":""},"secretKeys":{"databaseNameKey":"databaseName","databaseUrlKey":"databaseUrl","hostKey":"host","passwordKey":"password","portKey":"port","userKey":"user"}}

Config for database access; not required if postgresql dependency deployment is used

databaseConfig.externalobject

{"existingSecret":""}

Config for external database access provided via Helm values

databaseConfig.external.existingSecretstring

""

Set this value if a k8s Secret with PostgreSQL values already exists. Make sure that the all the databaseConfig.secretKeys exists in the secret with a valid value.

databaseConfig.secretKeysobject

{"databaseNameKey":"databaseName","databaseUrlKey":"databaseUrl","hostKey":"host","passwordKey":"password","portKey":"port","userKey":"user"}

Keys in K8s Secret for database config values

enabledbool

true

Set this to true to install the document-index subchart as a dependency

fullnameOverridestring

"document-index"

ingress.enabledbool

true

Enabled ingress creation

ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

postgresql.auth.existingSecretstring

""

postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

postgresql.persistence.sizestring

"128Gi"

postgresql.resources.limits.cpustring

"4"

postgresql.resources.limits.memorystring

"2Gi"

postgresql.resources.requests.cpustring

"2"

postgresql.resources.requests.memorystring

"1Gi"

qdrant.requests.cpustring

"2"

qdrant.requests.memorystring

"32Gi"

qdrant.resources.limits.cpustring

"4"

qdrant.resources.limits.memorystring

"32Gi"

resources.limits.cpustring

"4"

resources.limits.memorystring

"2Gi"

resources.requests.cpustring

"4"

resources.requests.memorystring

"2Gi"

secretobject

{"serviceUserToken":""}

Allows to populate the secret identified by 'document-index.serviceUserSecret' through this helm-chart. The secret must contain the field apiToken. See 'document-index.serviceUserSecret' for more information.

serviceUserSecretstring

"pharia-iam-service-user-document-index"

The name of a secret containing the service user token used by the document-index for sending embedding requests to the inference. This allows to connect the document-index to an externally running inference. The secret must contain the field token. It can either be pre-existing or the chart creates it for you with the value defined in 'document-index.secret.serviceUserToken'. This can be left undefined if the document-index is connected to the internal inference (deployed through this helm-chart). In that case use this auto-generated secret.

sparse-embedding-service.defaultLanguagestring

"english"

The language to default to if language detection fails.

sparse-embedding-service.languageDetectorsstring

"english,german"

The language detectors to load. Set this to the languages you want to support. Supported values: "arabic,basque,catalan,danish,dutch,english,finnish,french,german, greek,hungarian,indonesian,italian,norwegian,portuguese,romanian,russian,spanish, swedish,turkish"

sparse-embedding-service.resources.limits.cpustring

"1"

sparse-embedding-service.resources.limits.memorystring

"512Mi"

sparse-embedding-service.resources.requests.cpustring

"1"

sparse-embedding-service.resources.requests.memorystring

"512Mi"

document-index-mcp

KeyTypeDefaultDescription

inference-api

KeyTypeDefaultDescription
inference-api-proxy.enabledbool

false

inference-api-proxy.fullnameOverridestring

"inference-api-proxy"

inference-api-proxy.ingress.enabledbool

true

Enabled ingress creation

inference-api-proxy.ingress.ingressSubdomainstring

"inference-api"

inference-api-proxy.ingress.tls.enabledbool

true

inference-api-proxy.ingress.tls.secretNamestring

"inference-api-proxy-tls"

admin.emailstring

"tools@aleph-alpha.com"

Email of the admin user to create on startup

admin.emailKeystring

"email"

The email key in the secret

admin.existingSecretstring

""

Existing secret to use instead of email/password.

admin.passwordstring

""

Initial password of the admin user. If no existing external secret is provided via admin.existingSecret, a password value has to be applied during installation

admin.passwordKeystring

"password"

The password key in the secret

databaseConfigobject

{"external":{"existingSecret":""},"secretKeys":{"databaseNameKey":"databaseName","databaseUrlKey":"databaseUrl","hostKey":"host","passwordKey":"password","portKey":"port","userKey":"user"}}

Config for database access; not required if postgresql dependency deployment is used

databaseConfig.externalobject

{"existingSecret":""}

Config for external database access provided via Helm values

databaseConfig.external.existingSecretstring

""

Set this value if a k8s Secret with PostgreSQL values already exists. Make sure that the all the databaseConfig.secretKeys exists in the secret with a valid value.

databaseConfig.secretKeysobject

{"databaseNameKey":"databaseName","databaseUrlKey":"databaseUrl","hostKey":"host","passwordKey":"password","portKey":"port","userKey":"user"}

Keys in K8s Secret for database config values

enableUnauthenticatedAccessbool

false

Set this to true to disable all token validation in the inference api

fullnameOverridestring

"inference-api"

inferenceApiServices.existingSecretstring

""

Name of an existing inferenceApiServices secret. If you want to provide your own secret, set this to the name of your secret. Keep in mind to set global.inferenceApiServicesSecretRef to the same name if an existing secret is used. The secret is expected to have a key-value-pair with key secret.

inferenceApiServices.secretstring

""

Manually added services secret If no existing external secret is provided via inferenceApiServices.existingSecret, a secret value has to be applied during installation

ingress.enabledbool

true

Enabled ingress creation

ingress.ingressSubdomainstring

"inference-api"

ingress.tls.enabledbool

true

ingress.tls.secretNamestring

"inference-api-tls"

jwt.existingSecretstring

""

Name of an existing jwt secret to use The secret is expected to have a key-value-pair with key secret.

jwt.secretstring

""

Manually added jwt secret If no existing external secret is provided via jwt.existingSecret, a secret value has to be applied during installation

postgresql.auth.existingSecretstring

""

postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

resources.limits.cpustring

"1"

resources.limits.memorystring

"8Gi"

resources.requests.cpustring

"1"

resources.requests.memorystring

"1Gi"

inference-api-proxy

KeyTypeDefaultDescription
enabledbool

false

fullnameOverridestring

"inference-api-proxy"

ingress.enabledbool

true

Enabled ingress creation

ingress.ingressSubdomainstring

"inference-api"

ingress.tls.enabledbool

true

ingress.tls.secretNamestring

"inference-api-proxy-tls"

inference-worker

KeyTypeDefaultDescription
checkpoints[0].generator.pipeline_parallel_sizeint

1

checkpoints[0].generator.tensor_parallel_sizeint

1

checkpoints[0].generator.tokenizer_pathstring

"luminous-base-2022-04/alpha-001-128k.json"

checkpoints[0].generator.typestring

"luminous"

checkpoints[0].generator.weight_set_directories[0]string

"luminous-base-2022-04"

checkpoints[0].modelVolumeClaimstring

"models-luminous-base"

checkpoints[0].models.luminous-base.adapter_namestring

nil

checkpoints[0].models.luminous-base.alignedbool

false

checkpoints[0].models.luminous-base.bias_namestring

nil

checkpoints[0].models.luminous-base.chat_templatestring

nil

checkpoints[0].models.luminous-base.completion_typestring

"full"

checkpoints[0].models.luminous-base.descriptionstring

"Multilingual model trained on English, German, French, Spanish and Italian"

checkpoints[0].models.luminous-base.embedding_typestring

"semantic"

checkpoints[0].models.luminous-base.experimentalbool

false

checkpoints[0].models.luminous-base.maximum_completion_tokensint

8192

checkpoints[0].models.luminous-base.multimodal_enabledbool

true

checkpoints[0].models.luminous-base.prompt_templatestring

"{% promptrange instruction %}{{instruction}}{% endpromptrange %}\n{% if input %}\n{% promptrange input %}{{input}}{% endpromptrange %}\n{% endif %}"

checkpoints[0].models.luminous-base.semantic_embedding_enabledbool

true

checkpoints[0].models.luminous-base.softprompt_namestring

nil

checkpoints[0].models.luminous-base.worker_typestring

"luminous"

checkpoints[0].queuestring

"luminous-base"

checkpoints[0].replicasint

1

checkpoints[0].versionint

0

checkpoints[1].generator.pipeline_parallel_sizeint

1

checkpoints[1].generator.steering.default_in_context_vectors_strengthfloat

0.062

checkpoints[1].generator.tensor_parallel_sizeint

1

checkpoints[1].generator.tokenizer_pathstring

"llama-3.1-8b-instruct/tokenizer.json"

checkpoints[1].generator.typestring

"luminous"

checkpoints[1].generator.weight_set_directories[0]string

"llama-3.1-8b-instruct"

checkpoints[1].modelVolumeClaimstring

"models-llama-3.1-8b-instruct"

checkpoints[1].models."llama-3.1-8b-instruct".adapter_namestring

nil

checkpoints[1].models."llama-3.1-8b-instruct".alignedbool

true

checkpoints[1].models."llama-3.1-8b-instruct".bias_namestring

nil

checkpoints[1].models."llama-3.1-8b-instruct".chat_template.bos_tokenstring

"<\|begin_of_text\|>"

checkpoints[1].models."llama-3.1-8b-instruct".chat_template.eos_tokenstring

"<\|end_of_text\|>"

checkpoints[1].models."llama-3.1-8b-instruct".chat_template.templatestring

"{% set loop_messages = messages %}{% for message in loop_messages %}{% set content = '<\|start_header_id\|>' + message['role'] + '<\|end_header_id\|>\n\n'+ message['content'] \| trim + '<\|eot_id\|>' %}{% if loop.index0 == 0 %}{% set content = bos_token + content %}{% endif %}{{ content }}{% endfor %}{{ '<\|start_header_id\|>assistant<\|end_header_id\|>\n\n' }}"

checkpoints[1].models."llama-3.1-8b-instruct".completion_typestring

"full"

checkpoints[1].models."llama-3.1-8b-instruct".descriptionstring

"🦙 Llama 3.1 8B instruct version. The maximum number of completion tokens is limited to 8192 tokens."

checkpoints[1].models."llama-3.1-8b-instruct".embedding_typestring

"raw"

checkpoints[1].models."llama-3.1-8b-instruct".experimentalbool

false

checkpoints[1].models."llama-3.1-8b-instruct".maximum_completion_tokensint

8192

checkpoints[1].models."llama-3.1-8b-instruct".multimodal_enabledbool

false

checkpoints[1].models."llama-3.1-8b-instruct".prompt_templatestring

"<\|begin_of_text\|>{% for message in messages %}<\|start_header_id\|>{{message.role}}<\|end_header_id\|>\n\n{% promptrange instruction %}{{message.content}}{% endpromptrange %}<\|eot_id\|>{% endfor %}<\|start_header_id\|>assistant<\|end_header_id\|>\n\n{% if response_prefix %}{{response_prefix}}{% endif %}"

checkpoints[1].models."llama-3.1-8b-instruct".softprompt_namestring

nil

checkpoints[1].models."llama-3.1-8b-instruct".worker_typestring

"luminous"

checkpoints[1].queuestring

"llama-3.1-8b-instruct"

checkpoints[1].replicasint

1

checkpoints[1].versionint

1

checkpoints[2].generator.pipeline_parallel_sizeint

1

checkpoints[2].generator.tensor_parallel_sizeint

4

checkpoints[2].generator.tokenizer_pathstring

"llama-3.3-70b-instruct/tokenizer.json"

checkpoints[2].generator.typestring

"luminous"

checkpoints[2].generator.weight_set_directories[0]string

"llama-3.3-70b-instruct"

checkpoints[2].modelVolumeClaimstring

"models-llama-3.3-70b-instruct"

checkpoints[2].models."llama-3.3-70b-instruct".adapter_namestring

nil

checkpoints[2].models."llama-3.3-70b-instruct".alignedbool

true

checkpoints[2].models."llama-3.3-70b-instruct".bias_namestring

nil

checkpoints[2].models."llama-3.3-70b-instruct".chat_template.bos_tokenstring

"<\|begin_of_text\|>"

checkpoints[2].models."llama-3.3-70b-instruct".chat_template.eos_tokenstring

"<\|end_of_text\|>"

checkpoints[2].models."llama-3.3-70b-instruct".chat_template.templatestring

"{% set loop_messages = messages %}{% for message in loop_messages %}{% set content = '<\|start_header_id\|>' + message['role'] + '<\|end_header_id\|>\n\n'+ message['content'] \| trim + '<\|eot_id\|>' %}{% if loop.index0 == 0 %}{% set content = bos_token + content %}{% endif %}{{ content }}{% endfor %}{{ '<\|start_header_id\|>assistant<\|end_header_id\|>\n\n' }}"

checkpoints[2].models."llama-3.3-70b-instruct".completion_typestring

"full"

checkpoints[2].models."llama-3.3-70b-instruct".descriptionstring

"🦙 Llama 3.3 70B instruct version. The maximum number of completion tokens is limited to 8192 tokens."

checkpoints[2].models."llama-3.3-70b-instruct".embedding_typestring

"raw"

checkpoints[2].models."llama-3.3-70b-instruct".experimentalbool

false

checkpoints[2].models."llama-3.3-70b-instruct".maximum_completion_tokensint

8192

checkpoints[2].models."llama-3.3-70b-instruct".multimodal_enabledbool

false

checkpoints[2].models."llama-3.3-70b-instruct".prompt_templatestring

"<\|begin_of_text\|>{% for message in messages %}<\|start_header_id\|>{{message.role}}<\|end_header_id\|>\n\n{% promptrange instruction %}{{message.content}}{% endpromptrange %}<\|eot_id\|>{% endfor %}<\|start_header_id\|>assistant<\|end_header_id\|>\n\n{% if response_prefix %}{{response_prefix}}{% endif %}"

checkpoints[2].models."llama-3.3-70b-instruct".softprompt_namestring

nil

checkpoints[2].models."llama-3.3-70b-instruct".worker_typestring

"luminous"

checkpoints[2].queuestring

"llama-3.3-70b-instruct"

checkpoints[2].replicasint

1

checkpoints[2].resources.limits.memorystring

"256Gi"

checkpoints[2].resources.requests.memorystring

"128Gi"

checkpoints[2].startupProbe.failureThresholdint

720

checkpoints[2].startupProbe.periodSecondsint

10

checkpoints[2].versionint

0

checkpoints[3].generator.pipeline_parallel_sizeint

1

checkpoints[3].generator.tensor_parallel_sizeint

1

checkpoints[3].generator.tokenizer_pathstring

"llama-guard-3-8b/tokenizer.json"

checkpoints[3].generator.typestring

"luminous"

checkpoints[3].generator.weight_set_directories[0]string

"llama-guard-3-8b"

checkpoints[3].modelVolumeClaimstring

"models-llama-guard-3-8b"

checkpoints[3].models.llama-guard-3-8b.adapter_namestring

nil

checkpoints[3].models.llama-guard-3-8b.alignedbool

true

checkpoints[3].models.llama-guard-3-8b.bias_namestring

nil

checkpoints[3].models.llama-guard-3-8b.chat_template.bos_tokenstring

"<\|begin_of_text\|>"

checkpoints[3].models.llama-guard-3-8b.chat_template.eos_tokenstring

"<\|end_of_text\|>"

checkpoints[3].models.llama-guard-3-8b.chat_template.templatestring

"{% set loop_messages = messages %}{% for message in loop_messages %}{% set content = '<\|start_header_id\|>' + message['role'] + '<\|end_header_id\|>\n\n'+ message['content'] \| trim + '<\|eot_id\|>' %}{% if loop.index0 == 0 %}{% set content = bos_token + content %}{% endif %}{{ content }}{% endfor %}{{ '<\|start_header_id\|>assistant<\|end_header_id\|>\n\n' }}"

checkpoints[3].models.llama-guard-3-8b.completion_typestring

"full"

checkpoints[3].models.llama-guard-3-8b.descriptionstring

"🦙 Llama-Guard-3-8B. The maximum number of completion tokens is limited to 8192 tokens."

checkpoints[3].models.llama-guard-3-8b.embedding_typestring

"raw"

checkpoints[3].models.llama-guard-3-8b.experimentalbool

false

checkpoints[3].models.llama-guard-3-8b.maximum_completion_tokensint

8192

checkpoints[3].models.llama-guard-3-8b.multimodal_enabledbool

false

checkpoints[3].models.llama-guard-3-8b.prompt_templatestring

"<\|begin_of_text\|>{% for message in messages %}<\|start_header_id\|>{{message.role}}<\|end_header_id\|>\n\n{% promptrange instruction %}{{message.content}}{% endpromptrange %}<\|eot_id\|>{% endfor %}<\|start_header_id\|>assistant<\|end_header_id\|>\n\n{% if response_prefix %}{{response_prefix}}{% endif %}"

checkpoints[3].models.llama-guard-3-8b.softprompt_namestring

nil

checkpoints[3].models.llama-guard-3-8b.worker_typestring

"luminous"

checkpoints[3].queuestring

"llama-guard-3-8b"

checkpoints[3].replicasint

1

checkpoints[3].versionint

0

fullnameOverridestring

"inference-worker"

resources.limits.cpustring

"4"

resources.limits.memorystring

"8Gi"

resources.requests.cpustring

"1"

resources.requests.memorystring

"4Gi"

tolerationslist

[]

mcp-code-sandbox

KeyTypeDefaultDescription
enabledbool

true

Set this to true to install the mcp-code-sandbox subchart as a dependency providing code execution capabilities

fullnameOverridestring

"mcp-code-sandbox"

mcp-firecrawl

KeyTypeDefaultDescription
enabledbool

false

Requires an environment variable called FIRECRAWL_API_KEY

fullnameOverridestring

"mcp-firecrawl"

pharia-catch-api

KeyTypeDefaultDescription
enabledbool

true

Set this to true to install the pharia-catch-api subchart as a dependency.

fullnameOverridestring

"pharia-catch-api"

Set this to override the fully qualified name for Pharia Catch API

ingress.enabledbool

false

ingress.tls.enabledbool

true

postgresql.auth.existingSecretstring

""

postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

secretobject

{"serviceUserToken":""}

Allows to populate the secret identified by 'pharia-catch-api.serviceUserSecret' through this helm-chart. The secret must contain the field apiToken. See 'pharia-catch.serviceUserSecret' for more information.

serviceUserSecretstring

"pharia-iam-service-user-pharia-catch-api"

The name of a secret containing the service user token used by the pharia-chat for sending embedding requests to the inference. This allows to connect the pharia-chat to an externally running inference. The secret must contain the field token. It can either be pre-existing or the chart creates it for you with the value defined in 'pharia-catch-api.secret.serviceUserToken'. This can be left undefined if the pharia-catch-api is connected to the internal inference (deployed through this helm-chart). In that case use this auto-generated secret.

pharia-catch-ui

KeyTypeDefaultDescription
enabledbool

true

Set this to true to install the pharia-catch-ui subchart as a dependency.

fullnameOverridestring

"pharia-catch-ui"

Set this to override the fully qualified name for Pharia Catch UI

ingress.enabledbool

true

ingress.ingressSubdomainstring

"pharia-catch"

ingress.tls.enabledbool

true

secretobject

{"serviceUserToken":""}

Allows to populate the secret identified by 'pharia-catch-ui.serviceUserSecret' through this helm-chart. The secret must contain the field apiToken. See 'pharia-catch-ui.serviceUserSecret' for more information.

serviceUserSecretstring

"pharia-iam-service-user-pharia-catch-ui"

The name of a secret containing the service user token used by the pharia-chat for sending embedding requests to the inference. This allows to connect the pharia-catch-ui to an externally running inference. The secret must contain the field token. It can either be pre-existing or the chart creates it for you with the value defined in 'pharia-catch-ui.secret.serviceUserToken'. This can be left undefined if the pharia-catch-ui is connected to the internal inference (deployed through this helm-chart). In that case use this auto-generated secret.

pharia-common

KeyTypeDefaultDescription

pharia-conductor

KeyTypeDefaultDescription
agentUrlPrefixstring

""

Set this to provide the agent URL prefix that will be used to compose the messages from the MCP server.

enabledbool

true

Set this to true to install the pharia-conductor subchart as a dependency.

env.configmap.PHARIA_CONDUCTOR_AGENT_URL_PREFIX.keystring

"PHARIA_ASSISTANT_AGENTS_URL"

env.configmap.PHARIA_CONDUCTOR_AGENT_URL_PREFIX.namestring

"{{ .Values.global.phariaAIConfigMap }}"

env.configmap.PHARIA_CONDUCTOR_AGENT_URL_PREFIX.optionalbool

true

fullnameOverridestring

"pharia-conductor"

Set this to override the fully qualified name for PhariaConductor

ingress.enabledbool

false

ingress.tls.enabledbool

true

postgresql.auth.existingSecretstring

""

postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

pharia-data-api

KeyTypeDefaultDescription
cronJob.enabledbool

true

databaseConfigobject

{"external":{"existingSecret":""},"secretKeys":{"databaseNameKey":"databaseName","databaseUrlKey":"databaseUrl","hostKey":"host","passwordKey":"password","portKey":"port","userKey":"user"}}

Config for database access; not required if postgresql dependency deployment is used

databaseConfig.externalobject

{"existingSecret":""}

Config for external database access provided via Helm values

databaseConfig.external.existingSecretstring

""

Set this value if a k8s Secret with PostgreSQL values already exists. Make sure that the all the databaseConfig.secretKeys exists in the secret with a valid value.

databaseConfig.secretKeysobject

{"databaseNameKey":"databaseName","databaseUrlKey":"databaseUrl","hostKey":"host","passwordKey":"password","portKey":"port","userKey":"user"}

Keys in K8s Secret for database config values

enabledbool

true

Set this to true to install the pharia-data-api subchart as a dependency

etl.enabledbool

true

etlSelectorstring

"v1"

externalTemporalConfig.accountIdstring

""

externalTemporalConfig.apiKeySecretKeystring

""

externalTemporalConfig.apiKeySecretNamestring

""

externalTemporalConfig.hoststring

""

externalTemporalConfig.namespacestring

""

externalTemporalConfig.portstring

""

externalTemporalConfig.sslEnablestring

""

fullnameOverridestring

"pharia-data-api"

inbox.enabledbool

true

ingress.enabledbool

true

Enabled ingress creation locally

ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

minio.enabledbool

true

phariadataorchestrator.enabledbool

false

phariadataorchestrator.server.config.persistence.default.sql.existingSecretstring

""

When using a secret, set the password to "" and use the following fields

phariadataorchestrator.server.config.persistence.default.sql.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret and secretName, has to be provided for setup of orchestrator database authentication

phariadataorchestrator.server.config.persistence.default.sql.secretNamestring

""

phariadataorchestrator.server.config.persistence.visibility.sql.existingSecretstring

""

When using a secret, set the password to "" and use the following fields

phariadataorchestrator.server.config.persistence.visibility.sql.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret and secretName, has to be provided for setup of orchestrator database authentication

phariadataorchestrator.server.config.persistence.visibility.sql.secretNamestring

""

postgresql.auth.existingSecretstring

""

postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

rabbitmq.auth.passwordstring

""

rabbitmq.auth.usernamestring

"user"

rabbitmq.enabledbool

true

rabbitmq.loadDefinition.enabledbool

false

rabbitmq.loadDefinition.existingSecretstring

"pharia-data-api-rabbitmq-load-definitions-secret"

rabbitmqConfig.defaultLoadDefinitionsSecretstring

"pharia-data-api-rabbitmq-load-definitions-secret"

The load definitions secret must hold the RabbitMQ topology configuration.

rabbitmqConfig.defaultSecretstring

"pharia-data-api-rabbitmq-secret"

Default secret name is used to create a secret if external.existingSecret is not provided.

rabbitmqConfig.external.existingSecretstring

""

Set this value if a k8s Secret with RabbitMQ values already exists. Make sure that the all the keys exists in the secret with a valid value.

rabbitmqConfig.external.loadDefinitionsSecretstring

""

The load definitions secret name

rabbitmqConfig.external.rabbitmqUserstring

""

The user of the RabbitMQ

rabbitmqConfig.external.rabbitmqUserPasswordstring

""

The password of the user of RabbitMQ

rabbitmqConfig.secretKeys.hostKeystring

"rabbitmq-host"

The key in the secret that contains the host of the RabbitMQ

rabbitmqConfig.secretKeys.portKeystring

"rabbitmq-port"

The key in the secret that contains the port of the RabbitMQ

rabbitmqConfig.secretKeys.userKeystring

"rabbitmq-username"

The key in the secret that contains the user of the RabbitMQ

rabbitmqConfig.secretKeys.userPasswordKeystring

"rabbitmq-password"

The key in the secret that contains the password of the RabbitMQ

secret.serviceUserTokenstring

""

serviceUserSecretstring

"pharia-iam-service-user-pharia-data-etl"

serviceUserSecretKeystring

""

storageConfig.externalBucket.defaultSecretstring

"pharia-data-api-external-storage-secret"

Default secret name is used to create a secret if external.existingSecret is not provided.

storageConfig.externalBucket.external.existingSecretstring

"pharia-data-api-internal-storage-secret"

storageConfig.externalBucket.external.existingSecretstring

""

Set this value if a k8s Secret with storage values already exists. Make sure that all the keys exist in the secret with a valid value.

storageConfig.externalBucket.secretKeys.bucketNameKeystring

"bucketName"

storageConfig.externalBucket.secretKeys.bucketNameKeystring

"bucketName"

The key in the secret that contains the bucket name

storageConfig.externalBucket.secretKeys.bucketPasswordKeystring

"bucketPassword"

The key in the secret that contains the bucket password

storageConfig.externalBucket.secretKeys.bucketPasswordKeystring

"bucketPassword"

storageConfig.externalBucket.secretKeys.bucketUserKeystring

"bucketUser"

storageConfig.externalBucket.secretKeys.bucketUserKeystring

"bucketUser"

The key in the secret that contains the bucket user

storageConfig.internalBucket.defaultSecretstring

"pharia-data-api-internal-storage-secret"

Default secret name is used to create a secret if external.existingSecret is not provided.

storageConfig.internalBucket.external.existingSecretstring

"pharia-data-api-external-storage-secret"

storageConfig.internalBucket.external.existingSecretstring

""

Set this value if a k8s Secret with storage values already exists. Make sure that all the keys exist in the secret with a valid value.

storageConfig.internalBucket.secretKeys.bucketNameKeystring

"bucketName"

The key in the secret that contains the bucket name

storageConfig.internalBucket.secretKeys.bucketNameKeystring

"bucketName"

storageConfig.internalBucket.secretKeys.bucketPasswordKeystring

"bucketPassword"

storageConfig.internalBucket.secretKeys.bucketPasswordKeystring

"bucketPassword"

The key in the secret that contains the bucket password

storageConfig.internalBucket.secretKeys.bucketUserKeystring

"bucketUser"

The key in the secret that contains the bucket user

storageConfig.internalBucket.secretKeys.bucketUserKeystring

"bucketUser"

storageUrlstring

""

The storageUrl is used to configure the internal and external storages. If the storageUrl is not provided, the internal storage will be used.

storageUrlstring

""

pharia-finetuning

KeyTypeDefaultDescription
enabledbool

true

Set this to true to install the pharia-finetuning subchart as a dependency.

fullnameOverridestring

"pharia-finetuning"

Set this to override the fully qualified name for Pharia Finetuning

ingressobject

{"annotations":{},"enabled":true,"ingressSubdomain":"pharia-finetuning-api","tls":{"enabled":true,"existingSecret":"pharia-finetuning-api-tls"}}

Configure external access to Pharia finetuning API

ingress.annotationsobject

{}

Annotations for the Ingress resource. This can be used to add ingress controller specific annotations

ingress.enabledbool

true

Set this to true to set up an Ingress for Pharia finetuning API

ingress.ingressSubdomainstring

"pharia-finetuning-api"

Hostname for the Ingress (without domain). The domain is read from global.ingressDomain. This needs to be changed, if multiple instances are deployed to the same cluster using the same domain

ingress.tlsobject

{"enabled":true,"existingSecret":"pharia-finetuning-api-tls"}

Configure TLS for this Ingress

ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

ingress.tls.existingSecretstring

"pharia-finetuning-api-tls"

The name of the secret containing the TLS certificate. See also: https://kubernetes.io/docs/concepts/services-networking/ingress/#tls

kuberay-operatorobject

{}

Configuration of kuberay operator. See https://github.com/ray-project/kuberay/blob/master/helm-chart/kuberay-operator/values.yaml for available values.

minioobject

{"enabled":true,"fullnameOverride":"pharia-finetuning-minio","nameOverride":"pharia-finetuning-minio","persistence":{"size":"1Ti"}}

Configuration of built-in S3 storage. It is recommended to disable the built-in storage for production installations and connect to an external S3 storage instead.

minio.enabledbool

true

Set to false to disable built-in storage

minio.persistence.sizestring

"1Ti"

Disk space allocated to storage

mlflowobject

{"externalDatabase":{"database":"mlflow","dialectDriver":"postgresql","existingSecret":"","existingSecretPasswordKey":"db-password","host":"","port":5432,"user":"postgres"},"externalS3":{"bucket":"pharia-finetuning","existingSecret":"pharia-finetuning-internal-storage-secret","existingSecretAccessKeyIDKey":"bucketUser","existingSecretKeySecretKey":"bucketPassword","host":"pharia-finetuning-minio","port":9000,"protocol":"https"},"minio":{"enabled":false},"postgresql":{"enabled":true}}

Configuration of the MLFlow server used for experiment tracking.

mlflow.externalDatabaseobject

{"database":"mlflow","dialectDriver":"postgresql","existingSecret":"","existingSecretPasswordKey":"db-password","host":"","port":5432,"user":"postgres"}

Configuration of external database

mlflow.externalDatabase.databasestring

"mlflow"

Database name

mlflow.externalDatabase.dialectDriverstring

"postgresql"

Database Dialect(+Driver)

mlflow.externalDatabase.existingSecretstring

""

Name of an existing secret resource containing the database credentials.

mlflow.externalDatabase.existingSecretPasswordKeystring

"db-password"

Name of an existing secret key containing the database credentials

mlflow.externalDatabase.hoststring

""

Database host

mlflow.externalDatabase.portint

5432

Database port

mlflow.externalDatabase.userstring

"postgres"

Database user

mlflow.externalS3object

{"bucket":"pharia-finetuning","existingSecret":"pharia-finetuning-internal-storage-secret","existingSecretAccessKeyIDKey":"bucketUser","existingSecretKeySecretKey":"bucketPassword","host":"pharia-finetuning-minio","port":9000,"protocol":"https"}

Configuration of external object store

mlflow.externalS3.bucketstring

"pharia-finetuning"

S3 bucket

mlflow.externalS3.existingSecretstring

"pharia-finetuning-internal-storage-secret"

Name of an existing secret resource containing the S3 credentials

mlflow.externalS3.existingSecretAccessKeyIDKeystring

"bucketUser"

Name of an existing secret key containing the S3 access key ID

mlflow.externalS3.existingSecretKeySecretKeystring

"bucketPassword"

Name of an existing secret key containing the S3 access key secret

mlflow.externalS3.hoststring

"pharia-finetuning-minio"

S3 host

mlflow.externalS3.portint

9000

S3 port

mlflow.externalS3.protocolstring

"https"

S3 protocol

mlflow.minioobject

{"enabled":false}

Configuration of sandbox object store. Not recommended for production environments.

mlflow.minio.enabledbool

false

Set to false for production environments and configure externalS3 instead

mlflow.postgresqlobject

{"enabled":true}

Configuration of sandbox postgres database. Not recommended for production environments.

mlflow.postgresql.enabledbool

true

Set to false for production environments and configure externalDatabase instead

rayClusterobject

{"workerGroups":{"cpu-group":{"maxReplicas":4,"nodeSelector":{},"tolerations":[]},"gpu-group":{"maxReplicas":4,"nodeSelector":{},"tolerations":[]}}}

Configuration of the distributed training framework

storageConfigobject

{"fromSecret":{"secretKeys":{"bucketNameKey":"bucketName","endpointUrlKey":"endpointUrl","passwordKey":"bucketPassword","userKey":"bucketUser"},"secretName":""},"fromValues":{"bucketName":"","endpointUrl":"","password":"","region":"","user":""}}

Configuration of S3 storage used to store base model weights and finetuning artifacts like checkpoints. When using the built-in storage, this configuration can stay untouched.

storageConfig.fromSecretobject

{"secretKeys":{"bucketNameKey":"bucketName","endpointUrlKey":"endpointUrl","passwordKey":"bucketPassword","userKey":"bucketUser"},"secretName":""}

Provide credentials as a k8s secret for access to external S3 storage. When providing credentails in plaintext, this section can stay untouched and fromValues should be adjusted.

storageConfig.fromSecret.secretKeysobject

{"bucketNameKey":"bucketName","endpointUrlKey":"endpointUrl","passwordKey":"bucketPassword","userKey":"bucketUser"}

Provide the keys within the k8s secret under which to find bucket name, username, password, endoint URL and region

storageConfig.fromSecret.secretNamestring

""

Name of the k8s secret that holds the S3 credentials. This secret is expected to exist when this helm chart is installed.

storageConfig.fromValuesobject

{"bucketName":"","endpointUrl":"","password":"","region":"","user":""}

Provide credentials to external S3 storage in plaintext. When providing credentials via a k8s secret, this section can stay untouched and fromSecret should be adjusted.

pharia-iam

KeyTypeDefaultDescription
apiobject

{"ingress":{"annotations":{},"enabled":true,"tls":{"enabled":true,"secretName":"pharia-iam-api-tls"}}}

Internal API configuration

api.ingress.annotationsobject

{}

Annotations for the ingress-resource. This can be used to add ingress controller specific annotations.

api.ingress.enabledbool

true

Enabled ingress creation

api.ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

api.ingress.tls.secretNamestring

"pharia-iam-api-tls"

The name of the secret containing the TLS certificate. See also: https://kubernetes.io/docs/concepts/services-networking/ingress/#tls

configobject

{"adminEmail":"admin@localhost","adminEnableDirectUserManagement":false,"adminEnableZitadelManagement":false,"adminPassword":null,"adminUserName":"admin","defaultRolesForLogin":["AssistantUser"],"serviceUsers":{"document-index":{"description":"Initial service user for the Document Index","name":"Document Index","roles":["DocumentIndexServiceUser","InferenceServiceUser"]},"pharia-assistant-api":{"description":"Initial service user for the Pharia Assistant API","name":"Pharia Assistant API","roles":["AssistantUser","OsUser"]},"pharia-catch-api":{"description":"Service user for the Catch API","name":"Pharia Catch API","roles":["CatchUser","EtlServiceUser"]},"pharia-chat":{"description":"Initial service user for Pharia Chat","name":"Pharia Chat","roles":["ChatServiceUser"]},"pharia-data-etl":{"description":"Initial service user for the Pharia Data ETL","name":"Pharia Data ETL","roles":["EtlServiceUser","InferenceServiceUser","OAuthGatewayConnectionsServiceUser"]},"pharia-finetuning":{"description":"Initial service user for Pharia Finetuning","name":"Pharia Finetuning","roles":["FinetuningServiceUser"]},"pharia-numinous":{"description":"Initial service user for Pharia Numinous","name":"Pharia Numinous","roles":["AssistantUser"]},"pharia-oauth-gateway":{"description":"Service user for the OAuth Gateway","name":"Pharia OAuth Gateway","roles":["OAuthGatewayConnectionsServiceUser","OAuthGatewayIntegrationsServiceUser"]},"pharia-os-manager":{"description":"Initial service user for Pharia OS Manager","name":"Pharia OS Manager","roles":["OsServiceUser","InferenceServiceUser"],"useKubernetesOnly":true},"pharia-studio":{"description":"Service user for studio to upload relations and check privileges","name":"Pharia Studio","roles":["StudioServiceUser"]},"use-cases":{"description":"One service user for all use cases as intermediate solution until authentication can be dynamically generated.","name":"Use Case Service User","roles":["UseCaseServiceUser"]}}}

IAM configuration

config.adminEmailstring

"admin@localhost"

Email of initial user

config.adminEnableDirectUserManagementbool

false

Enable direct access to user management console for initial admin account. Enable if PhariaOs console is not used, but user management is needed.

config.adminEnableZitadelManagementbool

false

Enable direct access to internal identity provider - only needed to configure advanced features such as self-signup or user federation

config.adminPasswordstring

nil

Init password of initial user. To be valid it requires to have 10-70 characters, including at least one uppercase letter, one lowercase letter, and one digit. User will need to change this password on the first login. @schema type: - string - null @schema

config.adminUserNamestring

"admin"

initial user name

config.defaultRolesForLoginlist

["AssistantUser"]

Configure the default roles for a user that registers via SSO or self sign up

enabledbool

true

Set this to true to install the pharia-iam subchart as a dependency

externallyManagedGroupslist

[]

Example: [ "group1", "group2" ]

imageobject

{"repository":"alephalpha.jfrog.io/pharia-iam/pharia-iam","tag":""}

Image of API and configuration job

ingressobject

{"annotations":{},"enabled":true,"tls":{"enabled":true,"secretName":"pharia-iam-tls"}}

Ingress configuration for Zitadel (including login endpoints)

ingress.annotationsobject

{}

Annotations for the ingress-resource. This can be used to add ingress controller specific annotations.

ingress.enabledbool

true

Enabled ingress creation

ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

ingress.tls.secretNamestring

"pharia-iam-tls"

The name of the secret containing the TLS certificate. See also: https://kubernetes.io/docs/concepts/services-networking/ingress/#tls

openFgaDatabaseConfig.defaultSecretstring

"pharia-iam-openfga-postgres-secret"

openFgaDatabaseConfig.external.existingSecretstring

""

A postgres connection URI for the secret to create. This overwrites all other values, if set. Otherwise, the uri is build from the above values.

openFgaDatabaseConfig.external.uristring

""

openFgaDatabaseConfig.secretKeys.passwordKeystring

"password"

openFgaDatabaseConfig.secretKeys.uriKeystring

"uri"

openFgaPostgresql.auth.passwordstring

""

If internal PostgreSQL is used a dedicated password has to be provided for setup of application authentication

openFgaPostgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

openfgaobject

{"datastore":{"migrations":{"resources":{}},"uriSecret":"pharia-iam-openfga-postgres-secret"},"resources":{}}

OpenFGA Service Configuration

openfga.datastore.migrations.resourcesobject

{}

Specify resources for the migration job

openfga.datastore.uriSecretstring

"pharia-iam-openfga-postgres-secret"

Secret with key "uri" containing the connection string to the database connection string for OpenFGA. Format: postgres://user:password@host:port/database?flags. This name must be overwritten if an existing secret is used!

openfga.resourcesobject

{}

Specify resources for the openfga service

zitadelDatabaseConfig.externalobject

{"databaseName":"","databaseUrl":"","existingSecret":"","host":"","password":"","port":"","user":""}

Provide an existing database if you want to use an external database

zitadelDatabaseConfig.external.databaseNamestring

""

The name of the database

zitadelDatabaseConfig.external.existingSecretstring

""

Set this value if a k8s Secret with PostgreSQL values already exists. Make sure that the all the databaseConfig.secretKeys exists in the secret with a valid value.

zitadelDatabaseConfig.external.hoststring

""

The host of the database

zitadelDatabaseConfig.external.passwordstring

""

The password of the database

zitadelDatabaseConfig.external.portstring

""

The port of the database

zitadelDatabaseConfig.external.userstring

""

The user of the database

zitadelDatabaseConfig.secretKeys.databaseNameKeystring

"databaseName"

The key in the secret that contains the database name

zitadelDatabaseConfig.secretKeys.hostKeystring

"host"

The key in the secret that contains the host of the database

zitadelDatabaseConfig.secretKeys.passwordKeystring

"password"

The key in the secret that contains the password of the database

zitadelDatabaseConfig.secretKeys.portKeystring

"port"

The key in the secret that contains the port of the database

zitadelDatabaseConfig.secretKeys.userKeystring

"user"

The key in the secret that contains the user of the database

zitadelPostgresql.auth.passwordstring

""

If internal PostgreSQL is used a dedicated password has to be provided for setup of application authentication

zitadelPostgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

pharia-kernel

KeyTypeDefaultDescription
enabledbool

true

Set this to true to install the pharia-kernel subchart as a dependency.

envVarsobject

{"configmap":{"NAMESPACES__ASSISTANT__CONFIG_URL":{"key":"NAMESPACES__ASSISTANT__CONFIG_URL","name":"{{ .Values.global.phariaAIConfigMap }}"}},"secret":{"NAMESPACES__ASSISTANT__REGISTRY_PASSWORD":{"key":"registryPassword","name":"{{ .Values.global.imagePullOpaqueSecretName }}"},"NAMESPACES__ASSISTANT__REGISTRY_USER":{"key":"registryUser","name":"{{ .Values.global.imagePullOpaqueSecretName }}"}},"values":{"NAMESPACES__ASSISTANT__BASE_REPOSITORY":"assistant-kernel-skills","NAMESPACES__ASSISTANT__REGISTRY":"alephalpha.jfrog.io"}}

Define additional environment variables. Use env for additional environment variables, which has higher precedence over envVars. While they follow the same schema, envVars is intended for default values only. The default namespace assistant is configured via the environment variables to ensure higher precedence over the namespaces defined in pharia-kernel.namespaces.

fullnameOverridestring

"pharia-kernel"

Set this to override the fully qualified name for PhariaKernel

ingressobject

{"annotations":{},"enabled":true,"ingressSubdomain":"pharia-kernel","tls":{"enabled":true,"existingSecret":"pharia-kernel-tls"}}

Configure external access to PhariaKernel

ingress.annotationsobject

{}

Annotations for the Ingress resource. This can be used to add ingress controller specific annotations

ingress.enabledbool

true

Set this to true to set up an Ingress for PhariaKernel

ingress.ingressSubdomainstring

"pharia-kernel"

Hostname for the Ingress (without domain). The domain is read from global.ingressDomain. This needs to be changed, if multiple instances are deployed to the same cluster using the same domain

ingress.tlsobject

{"enabled":true,"existingSecret":"pharia-kernel-tls"}

Configure TLS for this Ingress

ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

ingress.tls.existingSecretstring

"pharia-kernel-tls"

The name of the secret containing the TLS certificate. See also: https://kubernetes.io/docs/concepts/services-networking/ingress/#tls

logLevelstring

"info"

Set the log level for PhariaKernel. This does not affect other targets, where errors are always logged. The options are:

  • error
  • warn
  • info
  • debug
  • trace
  • off
namespacesobject

{}

Configure the namespaces for PhariaKernel. Each namespace needs to be explicitly defined. The name of each namespace can be specified in camelCase, and is converted to kebab-case when deployed.

Example:

# The Namespace name
playground:
# The URL to the corresponding namespace configuration TOML file
configUrl: "https://gitlab.aleph-alpha.de/api/v4/projects/123/repository/files/namespace.toml/raw?ref=main"
# The Container Registry that backs the skill registry for this namespace
registry: "registry.gitlab.aleph-alpha.de"
# The base repository in `registry` that backs the skill registry for this namespace
# This composes the final repository for each skill e.g. ${baseRepository}/${skillName}
baseRepository: "engineering/pharia-kernel-playground/skills"

Each of the value can alternatively be provided as environment variables, which is highly encouraged for providing the credentials:

  # The access token for `configUrl`
NAMESPACES__PLAYGROUND__CONFIG_ACCESS_TOKEN
# The user name for accessing `registry`
NAMESPACES__PLAYGROUND__REGISTRY_USER
# The password or access token for accessing `registry`
NAMESPACES__PLAYGROUND__REGISTRY_PASSWORD
openTelemetryEndpointstring

""

OpenTelemetry endpoint for sending traces. This field provides fallback support for backward compatibility. When global.openTelemetry.endpoint is not set, this value will be used instead. For new deployments, use global.openTelemetry.endpoint instead.

openTelemetrySamplingRatiostring

""

OpenTelemetry sampling ratio for trace collection. This field provides fallback support for backward compatibility. When global.openTelemetry.samplingRatio is not set, this value will be used instead. For new deployments, use global.openTelemetry.samplingRatio instead.

resourcesobject

{"limits":{"cpu":"4","ephemeral-storage":"8Gi","memory":"8Gi"},"requests":{"cpu":"2","ephemeral-storage":"4Gi","memory":"4Gi"}}

Specify how much of each resource PhariaKernel needs. The recommended resources are set as the default. As the requirements are highly usage-dependent, adjust them as necessary. Schema: https://github.com/yannh/kubernetes-json-schema/blob/master/master-standalone-strict/resourcerequirements.json See also: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/

serviceMonitorobject

{"enabled":false}

Enable the ServiceMonitor that targets PhariaKernel

pharia-numinous

KeyTypeDefaultDescription
enabledbool

false

Set this to true to install the pharia-numinous subchart as a dependency.

fullnameOverridestring

"pharia-numinous"

Set this to override the fully qualified name for Pharia Catch API

ingress.enabledbool

false

ingress.tls.enabledbool

true

postgresql.auth.existingSecretstring

""

postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

secretobject

{"serviceUserToken":""}

Allows to populate the secret identified by 'pharia-numinous.serviceUserSecret' through this helm-chart. The secret must contain the field apiToken. See 'pharia-numinous.serviceUserSecret' for more information.

serviceUserSecretstring

"pharia-iam-service-user-pharia-numinous"

The name of a secret containing the service user token used by the pharia-numinous for sending embedding requests to the inference. This allows to connect the pharia-numinous to an externally running inference. The secret must contain the field token. It can either be pre-existing or the chart creates it for you with the value defined in 'pharia-numinous.secret.serviceUserToken'. This can be left undefined if the pharia-numinous is connected to the internal inference (deployed through this helm-chart). In that case use this auto-generated secret.

pharia-oauth-gateway

KeyTypeDefaultDescription
databaseConfigobject

{"external":{"existingSecret":""},"secretKeys":{"databaseNameKey":"databaseName","hostKey":"host","passwordKey":"password","portKey":"port","userKey":"user"}}

Default database configuration for the pharia-oauth-gaetway service access postgres database

databaseConfig.externalobject

{"existingSecret":""}

Provide an existing database if you want to use an external database

databaseConfig.external.existingSecretstring

""

Set this value if a k8s Secret with PostgreSQL values already exists. Make sure that the all the databaseConfig.secretKeys exists in the secret with a valid value.

enabledbool

true

Set this to true to install the pharia-oauth-gateway subchart as a dependency

fullnameOverridestring

"pharia-oauth-gateway"

Default nameOverride of the application

ingress.enabledbool

true

Enabled ingress creation

ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

postgresql.auth.existingSecretstring

""

postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

resources.limits.cpustring

"500m"

resources.limits.memorystring

"512Mi"

resources.requests.cpustring

"100m"

resources.requests.memorystring

"512Mi"

pharia-reloader

KeyTypeDefaultDescription
pharia-reloaderobject

{"enabled":true}

Set this to true to install the pharia-reloader subchart as a dependency. This is used to watch for changes in the configmap and restart the pods if necessary. It uses stakater/reloader to this end. If you already have reloader deployed in your cluster, you can set this to false and rely on your existing reloader deployment.

pharia-studio-api

KeyTypeDefaultDescription
databaseConfigobject

{"external":{"existingSecret":""},"secretKeys":{"databaseNameKey":"databaseName","hostKey":"host","passwordKey":"password","portKey":"port","userKey":"user"}}

Default database configuration for the pharia-studio-api service access postgres database

databaseConfig.externalobject

{"existingSecret":""}

Provide an existing database if you want to use an external database

databaseConfig.external.existingSecretstring

""

Set this value if a k8s Secret with PostgreSQL values already exists. Make sure that the all the databaseConfig.secretKeys exists in the secret with a valid value.

enabledbool

true

Set this to true to install the pharia-studio-api subchart as a dependency

fullnameOverridestring

"pharia-studio-api"

Default nameOverride of the application

ingress.enabledbool

true

Enabled ingress creation

ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

postgresql.auth.existingSecretstring

""

postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

resources.limits.cpustring

"1"

resources.limits.memorystring

"1Gi"

resources.requests.cpustring

"500m"

resources.requests.memorystring

"1Gi"

serviceUserSecretstring

"pharia-iam-service-user-pharia-studio"

Needed for creation of relations in IAM

pharia-studio-ui

KeyTypeDefaultDescription
enabledbool

true

fullnameOverridestring

"pharia-studio"

ingress.annotationsobject

{}

Annotations for the ingress-resource. This can be used to add ingress controller specific annotations.

ingress.enabledbool

true

Enabled ingress creation

ingress.hostnamestring

"pharia-studio"

Hostname for the ingress (without domain). The domain is read from global.ingress.ingressDomain. This needs to be changed, if multiple instances are deployed to the same cluster using the same domain.

ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

ingress.tls.secretNamestring

"pharia-studio-tls"

The name of the secret containing the TLS certificate. See also: https://kubernetes.io/docs/concepts/services-networking/ingress/#tls

phariaStudioAPISchemastring

"http"

Internal cluster communication with pharia-studio-api. This is the default value. https can be set if the internal communication is over https.

resources.limits.cpustring

"100m"

resources.limits.memorystring

"256Mi"

resources.requests.cpustring

"50m"

resources.requests.memorystring

"256Mi"

pharia-temporal

KeyTypeDefaultDescription
pharia-temporalobject

{"enabled":false,"temporal":{"fullnameOverride":"pharia-temporal","ingress":{"enabled":false},"server":{"config":{"namespaces":{"create":true,"namespace":[{"name":"pharia-data","retention":"90d"},{"name":"pharia-numinous","retention":"90d"},{"name":"pharia-oauth-gateway","retention":"90d"}]},"numHistoryShards":1024,"persistence":{"default":{"driver":"sql","sql":{"database":"","driver":"postgres12","existingSecret":"","host":"","maxConnLifetime":"1h","maxConns":20,"maxIdleConns":20,"password":"","port":5432,"user":""}},"visibility":{"driver":"sql","sql":{"database":"","driver":"postgres12","existingSecret":"","host":"","maxConnLifetime":"1h","maxConns":20,"maxIdleConns":20,"password":"","port":5432,"secretName":"","user":""}}}}},"web":{"ingress":{"enabled":false}}}}

Temporal is a workflow orchestration platform that manages long-running business processes. It provides durable execution, fault tolerance, and observability for distributed systems.

enabledbool

false

Set this to true to install the pharia-temporal subchart as a dependency.

temporalobject

{"fullnameOverride":"pharia-temporal","ingress":{"enabled":false},"server":{"config":{"namespaces":{"create":true,"namespace":[{"name":"pharia-data","retention":"90d"},{"name":"pharia-numinous","retention":"90d"},{"name":"pharia-oauth-gateway","retention":"90d"}]},"numHistoryShards":1024,"persistence":{"default":{"driver":"sql","sql":{"database":"","driver":"postgres12","existingSecret":"","host":"","maxConnLifetime":"1h","maxConns":20,"maxIdleConns":20,"password":"","port":5432,"user":""}},"visibility":{"driver":"sql","sql":{"database":"","driver":"postgres12","existingSecret":"","host":"","maxConnLifetime":"1h","maxConns":20,"maxIdleConns":20,"password":"","port":5432,"secretName":"","user":""}}}}},"web":{"ingress":{"enabled":false}}}

Set this to override the fully qualified name for Pharia Temporal UI

temporal.ingressobject

{"enabled":false}

Ingress configuration for the Temporal server

temporal.ingress.enabledbool

false

Enable ingress creation for the Temporal server API This exposes the Temporal gRPC and HTTP APIs externally

temporal.serverobject

{"config":{"namespaces":{"create":true,"namespace":[{"name":"pharia-data","retention":"90d"},{"name":"pharia-numinous","retention":"90d"},{"name":"pharia-oauth-gateway","retention":"90d"}]},"numHistoryShards":1024,"persistence":{"default":{"driver":"sql","sql":{"database":"","driver":"postgres12","existingSecret":"","host":"","maxConnLifetime":"1h","maxConns":20,"maxIdleConns":20,"password":"","port":5432,"user":""}},"visibility":{"driver":"sql","sql":{"database":"","driver":"postgres12","existingSecret":"","host":"","maxConnLifetime":"1h","maxConns":20,"maxIdleConns":20,"password":"","port":5432,"secretName":"","user":""}}}}}

Temporal server configuration

temporal.server.config.namespacesobject

{"create":true,"namespace":[{"name":"pharia-data","retention":"90d"},{"name":"pharia-numinous","retention":"90d"},{"name":"pharia-oauth-gateway","retention":"90d"}]}

Temporal namespace configuration

temporal.server.config.namespaces.createbool

true

Whether to create namespaces automatically

temporal.server.config.namespaces.namespacelist

[{"name":"pharia-data","retention":"90d"},{"name":"pharia-numinous","retention":"90d"},{"name":"pharia-oauth-gateway","retention":"90d"}]

List of namespaces to create

temporal.server.config.namespaces.namespace[0]object

{"name":"pharia-data","retention":"90d"}

Pharia Data namespace for ETL workflows

temporal.server.config.namespaces.namespace[0].retentionstring

"90d"

Data retention period for this namespace After this period, completed workflows are automatically deleted

temporal.server.config.namespaces.namespace[1]object

{"name":"pharia-numinous","retention":"90d"}

Pharia Numinous namespace for AI workflows

temporal.server.config.namespaces.namespace[1].retentionstring

"90d"

Data retention period for this namespace

temporal.server.config.namespaces.namespace[2]object

{"name":"pharia-oauth-gateway","retention":"90d"}

Pharia OAuth Gateway namespace for authentication workflows

temporal.server.config.namespaces.namespace[2].retentionstring

"90d"

Data retention period for this namespace

temporal.server.config.numHistoryShardsint

1024

Number of history shards for Temporal This determines the parallelism for history operations. Higher values provide better performance but require more resources. Must be a power of 2. Default is 1024 for production workloads.

temporal.server.config.persistenceobject

{"default":{"driver":"sql","sql":{"database":"","driver":"postgres12","existingSecret":"","host":"","maxConnLifetime":"1h","maxConns":20,"maxIdleConns":20,"password":"","port":5432,"user":""}},"visibility":{"driver":"sql","sql":{"database":"","driver":"postgres12","existingSecret":"","host":"","maxConnLifetime":"1h","maxConns":20,"maxIdleConns":20,"password":"","port":5432,"secretName":"","user":""}}}

Persistence configuration for Temporal data storage

temporal.server.config.persistence.defaultobject

{"driver":"sql","sql":{"database":"","driver":"postgres12","existingSecret":"","host":"","maxConnLifetime":"1h","maxConns":20,"maxIdleConns":20,"password":"","port":5432,"user":""}}

Default store configuration for Temporal's main data

temporal.server.config.persistence.default.driverstring

"sql"

Storage driver type (sql, cassandra, etc.)

temporal.server.config.persistence.default.sql.databasestring

""

Database name for Temporal's main data

temporal.server.config.persistence.default.sql.driverstring

"postgres12"

PostgreSQL driver version

temporal.server.config.persistence.default.sql.existingSecretstring

""

Existing secret containing database credentials If provided, the secret should contain keys: username, password

temporal.server.config.persistence.default.sql.hoststring

""

Database host

temporal.server.config.persistence.default.sql.maxConnLifetimestring

"1h"

Maximum lifetime of a database connection

temporal.server.config.persistence.default.sql.maxConnsint

20

Maximum number of database connections in the pool

temporal.server.config.persistence.default.sql.maxIdleConnsint

20

Maximum number of idle connections in the pool

temporal.server.config.persistence.default.sql.passwordstring

""

Database password Leave empty to use the existingSecret password

temporal.server.config.persistence.default.sql.portint

5432

Database port

temporal.server.config.persistence.default.sql.userstring

""

Database username Leave empty to use the existingSecret username

temporal.server.config.persistence.visibilityobject

{"driver":"sql","sql":{"database":"","driver":"postgres12","existingSecret":"","host":"","maxConnLifetime":"1h","maxConns":20,"maxIdleConns":20,"password":"","port":5432,"secretName":"","user":""}}

Visibility store configuration for Temporal's visibility data This store is used for workflow and execution visibility queries

temporal.server.config.persistence.visibility.driverstring

"sql"

Storage driver type (sql, cassandra, etc.)

temporal.server.config.persistence.visibility.sql.databasestring

""

Database name for Temporal's visibility data

temporal.server.config.persistence.visibility.sql.driverstring

"postgres12"

PostgreSQL driver version

temporal.server.config.persistence.visibility.sql.existingSecretstring

""

Existing secret containing database credentials If provided, the secret should contain keys: username, password

temporal.server.config.persistence.visibility.sql.hoststring

""

Database host

temporal.server.config.persistence.visibility.sql.maxConnLifetimestring

"1h"

Maximum lifetime of a database connection

temporal.server.config.persistence.visibility.sql.maxConnsint

20

Maximum number of database connections in the pool

temporal.server.config.persistence.visibility.sql.maxIdleConnsint

20

Maximum number of idle connections in the pool

temporal.server.config.persistence.visibility.sql.passwordstring

""

Database password Leave empty to use the existingSecret password

temporal.server.config.persistence.visibility.sql.portint

5432

Database port

temporal.server.config.persistence.visibility.sql.secretNamestring

""

Alternative secret name for visibility store Use this if you need different credentials for the visibility store

temporal.server.config.persistence.visibility.sql.userstring

""

Database username Leave empty to use the existingSecret username

temporal.webobject

{"ingress":{"enabled":false}}

Web UI configuration for Temporal

temporal.web.ingress.enabledbool

false

Enable ingress creation for the Temporal Web UI This provides a web interface to monitor and manage workflows

pharia-transcribe

KeyTypeDefaultDescription
enabledbool

false

Set this to true to install the pharia-transcribe subchart as a dependency

fullnameOverridestring

"pharia-transcribe"

pharia-translate

KeyTypeDefaultDescription
enabledbool

true

Set this to true to install the pharia-translate subchart as a dependency

fullnameOverridestring

"pharia-translate"

resources.limits.cpustring

"1"

resources.limits.memorystring

"1Gi"

resources.requests.cpustring

"100m"

resources.requests.memorystring

"1Gi"

server.resources.limits."nvidia.com/gpu"int

1

server.resources.limits.cpustring

"1"

server.resources.limits.memorystring

"64Gi"

server.resources.requests.cpustring

"100m"

server.resources.requests.memorystring

"64Gi"

server.tolerationslist

[]

tolerationslist

[]

feature-flags

KeyTypeDefaultDescription
enabledbool

true

Set this to true to install the feature-flags subchart as a dependency

fullnameOverridestring

"feature-flags"

provider.local.existingConfigMapstring

""

Provide an existing ConfigMap with the key "feature-flags.json".

phariaos-manager

KeyTypeDefaultDescription
applicationsProxy.additionalAllowedOriginslist

[]

Environment variables for the applications proxy.

applicationsProxy.enabledbool

true

Enable usecases (applications) proxy server. It is responsible for redirecting requests into the targeted usecases.

applicationsProxy.ingress.annotationsobject

{}

Annotations for the ingress-resource. This can be used to add ingress controller specific annotations. Some ingress classes limits body size allowed in requests. Therefore, override the annotations value if the application requires large files to be uploaded. Example for nginx ingress class: nginx.ingress.kubernetes.io/proxy-body-size: 20m Some ingress classes limit the timeout for proxy read requests. Therefore, override the annotations value if long-lived requests are required. Example for nginx ingress class: nginx.ingress.kubernetes.io/proxy-read-timeout: "300"

applicationsProxy.ingress.enabledbool

true

Enable ingress creation

applicationsProxy.ingress.ingressSubdomainstring

"pharia-os-applications"

Hostname for the ingress (without domain). The domain is read from global.ingress.ingressDomain. This needs to be changed, if multiple instances are deployed to the same cluster using the same domain.

applicationsProxy.ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

clusterRole.enabledbool

true

Enable cluster role creation for phariaos-manager. When enabled, the chart will create the necessary ClusterRole and ClusterRoleBinding for hardware discovery and model management. Set to false if you want to use your own cluster role(s). Note: The cluster role(s) must be bound to the phariaos-manager and kserve-controller-manager ServiceAccounts to grant cluster-wide permissions.

clusterRole.enabledbool

true

Enable cluster role creation for phariaos-manager. When enabled, the chart will create the necessary ClusterRole and ClusterRoleBinding for hardware discovery and model management. Set to false if you want to use your own cluster role(s). Note: The cluster role(s) must be bound to the phariaos-manager and kserve-controller-manager ServiceAccounts to grant cluster-wide permissions. See cluster role binding files in charts/phariaos-manager/templates/ and charts/phariaos-manager/charts/kserve/templates/ for required permissions.

databaseConfig.externalobject

{"existingSecret":""}

Provide an existing database if you want to use an external database

databaseConfig.external.existingSecretstring

""

Set this value if a k8s Secret with PostgreSQL values already exists. Make sure that the all the databaseConfig.secretKeys exists in the secret with a valid value.

databaseConfig.secretKeys.databaseNameKeystring

"databaseName"

The key in the secret that contains the database name

databaseConfig.secretKeys.hostKeystring

"host"

The key in the secret that contains the host of the database

databaseConfig.secretKeys.passwordKeystring

"password"

The key in the secret that contains the password of the database

databaseConfig.secretKeys.portKeystring

"port"

The key in the secret that contains the port of the database

databaseConfig.secretKeys.userKeystring

"user"

The key in the secret that contains the user of the database

enabledbool

true

Set this to true to install the phariaos-manager subchart as a dependency

fullnameOverridestring

"pharia-os-manager"

Set this to override the full name of the phariaos-manager

ingress.annotationsobject

{}

Annotations for the ingress-resource. This can be used to add ingress controller specific annotations.

ingress.enabledbool

true

Enabled ingress creation

ingress.ingressSubdomainstring

"pharia-os-manager"

Hostname for the ingress (without domain). The domain is read from global.ingress.ingressDomain. This needs to be changed, if multiple instances are deployed to the same cluster using the same domain.

kserve.clusterRoleobject

{"enabled":true}

Cluster role configuration for KServe (references phariaos-manager.clusterRole).

kserve.clusterRole.enabledbool

true

Enable cluster role creation for phariaos-manager. When enabled, the chart will create the necessary ClusterRole and ClusterRoleBinding for hardware discovery and model management. Set to false if you want to use your own cluster role(s). Note: The cluster role(s) must be bound to the phariaos-manager and kserve-controller-manager ServiceAccounts to grant cluster-wide permissions. See cluster role binding files in charts/phariaos-manager/templates/ and charts/phariaos-manager/charts/kserve/templates/ for required permissions.

kserve.controller.serviceAccount.createbool

true

Specifies whether a service account should be created

kserve.controller.serviceAccount.namestring

""

The name of the service account to use. If not set and create is true, a name is generated using the fullname template

kserve.enabledbool

true

Enable Dynamic Model Management. Model deployment is done using KServe.

kserve.storageobject

{"http":{"existingSecret":"","secretKeys":{"httpToken":"http-token"},"token":""},"huggingFace":{"enabled":false,"existingSecret":"","secretKeys":{"huggingFaceToken":"huggingface-token"},"token":""},"s3":{"accessKeyId":"","enabled":false,"endpoint":"","existingSecret":"","region":"","secretAccessKey":"","secretKeys":{"accessKeyId":"access-key-id","endpoint":"endpoint","region":"region","secretAccessKey":"secret-access-key"}}}

Model weights downloading configuration for model deployment.

kserve.storage.httpobject

{"existingSecret":"","secretKeys":{"httpToken":"http-token"},"token":""}

HTTP storage configuration to download Aleph Alpha model weights from Aleph Alpha artifactory.

kserve.storage.http.existingSecretstring

""

Existing secret to use for HTTP storage.

kserve.storage.http.secretKeysobject

{"httpToken":"http-token"}

Secret keys for HTTP storage.

kserve.storage.http.tokenstring

""

If not using existing secret, provide token for HTTP storage.

kserve.storage.huggingFaceobject

{"enabled":false,"existingSecret":"","secretKeys":{"huggingFaceToken":"huggingface-token"},"token":""}

HuggingFace storage configuration for model weights downloading.

kserve.storage.huggingFace.enabledbool

false

Enable HuggingFace storage configuration for model weights downloading.

kserve.storage.huggingFace.existingSecretstring

""

Existing secret to use for HuggingFace storage.

kserve.storage.huggingFace.secretKeysobject

{"huggingFaceToken":"huggingface-token"}

Secret keys for HuggingFace storage.

kserve.storage.huggingFace.tokenstring

""

If not using existing secret, provide token for HuggingFace storage.

kserve.storage.s3.accessKeyIdstring

""

If not using existing secret, provide access key id for S3 storage.

kserve.storage.s3.enabledbool

false

Enable S3 storage configuration for model weights downloading.

kserve.storage.s3.endpointstring

""

If not using existing secret, provide endpoint for S3 storage.

kserve.storage.s3.existingSecretstring

""

Existing secret to use for S3 storage.

kserve.storage.s3.regionstring

""

If not using existing secret, provide region for S3 storage.

kserve.storage.s3.secretAccessKeystring

""

If not using existing secret, provide secret access key for S3 storage.

kserve.storage.s3.secretKeysobject

{"accessKeyId":"access-key-id","endpoint":"endpoint","region":"region","secretAccessKey":"secret-access-key"}

Secret keys for S3 storage.

kserve.storage.s3.secretKeys.accessKeyIdstring

"access-key-id"

The secret key for access key id of the S3 storage.

kserve.storage.s3.secretKeys.endpointstring

"endpoint"

The secret key for endpoint of the S3 storage.

kserve.storage.s3.secretKeys.regionstring

"region"

The secret key for region of the S3 storage.

kserve.storage.s3.secretKeys.secretAccessKeystring

"secret-access-key"

The secret key for secret access key of the S3 storage.

postgresql.auth.existingSecretstring

""

postgresql.auth.passwordstring

""

If internal PostgreSQL is used, either password or existingSecret, has to be provided for setup of application authentication

postgresql.enabledbool

true

This is used to indicate whether the internal PostgreSQL should be used or not.

serviceAccount.createbool

true

Specifies whether a service account should be created

serviceAccount.namestring

""

The name of the service account to use. If not set and create is true, a name is generated using the fullname template

serviceMonitor.enabledbool

false

Enable Prometheus service monitor for phariaos-manager

usecase.annotationsobject

{}

Annotations for the Deployment resource.

usecase.containerobject

{"securityContext":{"readOnlyRootFilesystem":false},"volumeMounts":[]}

Security context for the usecase container.

usecase.container.volumeMountslist

[]

Custom volume mounts for usecase container

usecase.enabledbool

true

Enable usecases creation and deployment in phariaos-manager API.

usecase.imagePullSecretNamestring

""

DEPRECATED: Use imagePullSecrets instead. This will be removed in a future release.

usecase.imagePullSecretslist

[]

Secrets to authenticate container registry to pull/verify usecase images. Make sure the secrets are in the Release namespace!

usecase.podobject

{"securityContext":{"runAsGroup":2024,"runAsUser":2024},"volumes":[]}

Security context for the usecase pod.

usecase.pod.securityContext.runAsGroupint

2024

Run as group with provided gid

usecase.pod.securityContext.runAsUserint

2024

Run as user with provided uid

usecase.pod.volumeslist

[]

Custom volumes for usecase pods

usecase.serviceMonitor.enabledbool

false

Enable Prometheus service monitor for usecases deployed by phariaos-manager

phariaos-ui

KeyTypeDefaultDescription
app.enableCredentialManagementbool

true

Set this to enable API Credential Management

enabledbool

true

Set this to true to install the phariaos-ui subchart as a dependency

fullnameOverridestring

"pharia-os"

Set this to override the full name of the phariaos-ui

ingress.annotationsobject

{}

Annotations for the ingress-resource. This can be used to add ingress controller specific annotations.

ingress.enabledbool

true

Enabled ingress creation

ingress.ingressSubdomainstring

"pharia-os"

Hostname for the ingress (without domain). The domain is read from global.ingress.ingressDomain. This needs to be changed, if multiple instances are deployed to the same cluster using the same domain.

ingress.tls.enabledbool

true

Enable TLS configuration for this Ingress

ingress.tls.secretNamestring

"pharia-os-tls"

The name of the secret containing the TLS certificate. See also: https://kubernetes.io/docs/concepts/services-networking/ingress/#tls

Maintainers

NameEmailUrl
PhariaAIphariaai@aleph-alpha.com