loading-summaries settings
What loading-summaries needs from you before it installs. It goes in one small file, loading-summaries.yaml, which you pass to
helm install and helm upgrade after site.yaml, as Install shows.
Starter file
loading-summaries.yaml holds every setting on this page with its description. Save it, replace each
<PLACEHOLDER> and remove the optional lines you don't need.
loading-summaries.schema.json describes the file to editors that check YAML against a JSON schema.
Secret settings
Passwords, keys and other values to keep private.
| Name | Required | Description |
|---|---|---|
AZURE_AD_CLIENT_ID | Yes | The application (client) ID of the app registration schedulers sign in to loading-summaries with at Microsoft Entra ID |
AZURE_AD_CLIENT_SECRET | Yes | The client secret of the app registration schedulers sign in to loading-summaries with at Microsoft Entra ID |
AZURE_AD_TENANT_ID | Yes | Your Microsoft Entra tenant's ID |
Give them in one of two ways, never both.
In production, in a Secret of your own. A values file with passwords in it tends to end up in git, and Helm
keeps a copy of the values you pass in its release record in the cluster. Write the values to a file,
loading-summaries.env, one NAME=value per line with each value as it is, without quotes, then create the Secret and delete
the file:
kubectl create secret generic loading-summaries-settings --namespace rft-app-loading-summaries --from-env-file=loading-summaries.env
rm loading-summaries.envIn loading-summaries.yaml, give only the Secret's name:
secrets:
existingSecret: loading-summaries-settingsTo keep the Secret in git or a secret store instead, create it with External Secrets Operator, SOPS or Sealed Secrets, with the same keys.
The Secret needs a key for every required name above. When one is missing, the product's pods don't start:
kubectl --namespace rft-app-loading-summaries get pods shows CreateContainerConfigError or Init:CreateContainerConfigError, and
kubectl --namespace rft-app-loading-summaries describe pods names the missing key. Add it and the pods start by themselves.
After you change a value in the Secret, restart the product with
kubectl --namespace rft-app-loading-summaries rollout restart deployment.
To get started, in the values file. Under secrets in loading-summaries.yaml, as the starter file has them. The chart
keeps them in the Secret loading-summaries-env.
Made for you
The platform makes these once and keeps them in the Secret loading-summaries-generated. There is nothing to set.
NEXTAUTH_SECRET
In site.yaml
loading-summaries answers on loading-summaries.<domain>, under your global.rigfab.domain. To give it another name, set
global.rigfab.hosts.loading-summaries to the full host name.
Check before you install
Once the base chart is installed, and before you install or upgrade this product:
rft check --chart oci://registry.rigfab.com/rft/apps/loading-summaries/charts/loading-summaries --version <VERSION> --release loading-summaries --namespace rft-app-loading-summaries --values site.yaml --values loading-summaries.yamlIt renders the chart with your files and asks the cluster whether it would accept the result, and changes
nothing. A setting that is missing or misspelt in your files stops it with a message that names the setting. It
doesn't look inside a Secret of your own. A misspelt name under global.rigfab is the base chart's to refuse, so
check site.yaml with the base chart after every change to it, as Install shows.