Skip to main content
Version: main 🚧
Auto-generated

This page is auto-generated from the Helm chart source. Do not edit directly. Regenerate with make docs-helm-charts.

ai-platform-engineering

Parent chart to deploy CAIPE — dynamic agents, per-agent MCP servers, RBAC, and the UI

Version0.5.68
Typeapplication

Quick Start​

# Add and install the chart
helm install ai-platform-engineering oci://ghcr.io/cnoe-io/charts/ai-platform-engineering --version 0.5.68

# Upgrade an existing release
helm upgrade ai-platform-engineering oci://ghcr.io/cnoe-io/charts/ai-platform-engineering --version 0.5.68

Customizing Values​

Override default values using --set flags or a custom values file:

# Override individual values
helm install ai-platform-engineering oci://ghcr.io/cnoe-io/charts/ai-platform-engineering --version 0.5.68 \
  --set replicaCount=2

# Use a custom values file
helm install ai-platform-engineering oci://ghcr.io/cnoe-io/charts/ai-platform-engineering --version 0.5.68 \
  -f custom-values.yaml

# Show all configurable values
helm show values oci://ghcr.io/cnoe-io/charts/ai-platform-engineering --version 0.5.68

Reading the Values Table​

ColumnMeaning
KeyDot-separated path into values.yaml (e.g. image.repository)
TypeGo/Helm data type (string, int, bool, object, list)
DefaultValue used when not overridden
DescriptionWhat the parameter controls

Values​

KeyTypeDefaultDescription
agentgateway.enabledbooltrue
agentgateway.extraEnvlist[]
agentgateway.extraEnvFromlist[]
agentgateway.image.pullPolicystring"IfNotPresent"
agentgateway.image.repositorystring"cr.agentgateway.dev/agentgateway"
agentgateway.image.tagstring"v1.1.0"
agentgateway.skillScanner.enabledboolfalse
caipe-ui.config.APP_NAMEstring"CAIPE"
caipe-ui.config.CAIPE_CREDENTIALS_ENABLEDstring"false"
caipe-ui.config.CAIPE_ORG_DISPLAY_NAMEstring"CAIPE"
caipe-ui.config.CAIPE_ORG_KEYstring"caipe"
caipe-ui.config.CAIPE_UNSAFE_RBAC_BYPASSstring"false"
caipe-ui.config.CREDENTIAL_BOOTSTRAP_OAUTH_CONNECTORSstring"false"
caipe-ui.config.CREDENTIAL_KEY_PROVIDERstring"local-cmk"
caipe-ui.config.CREDENTIAL_KMS_CMK_IDstring""
caipe-ui.config.CREDENTIAL_KMS_REGIONstring""
caipe-ui.config.CREDENTIAL_SERVICE_AUDIENCEstring"caipe-credential-service"
caipe-ui.config.CREDENTIAL_STORE_BACKENDstring"mongodb-envelope"
caipe-ui.config.DEFAULT_AGENT_IDstring""
caipe-ui.config.DESCRIPTIONstring"Where Humans and AI agents collaborate to deliver high quality outcomes."
caipe-ui.config.ENABLE_SUBAGENT_CARDSstring"true"
caipe-ui.config.ENV_BADGEstring""
caipe-ui.config.IDENTITY_SYNC_LOGIN_AUTO_CREATE_TEAMSstring"false"
caipe-ui.config.IDENTITY_SYNC_LOGIN_CLAIMS_ENABLEDstring"false"
caipe-ui.config.KEYCLOAK_REALMstring"caipe"
caipe-ui.config.KEYCLOAK_RESOURCE_SERVER_IDstring"caipe-platform"
caipe-ui.config.KEYCLOAK_URLstring""
caipe-ui.config.LOGO_STYLEstring"default"
caipe-ui.config.LOGO_URLstring"/logo.svg"
caipe-ui.config.MONGODB_DATABASEstring"caipe"
caipe-ui.config.NEXTAUTH_URLstring"http://localhost:3000"
caipe-ui.config.NODE_ENVstring"production"
caipe-ui.config.OPENFGA_HTTPstring""
caipe-ui.config.OPENFGA_RECONCILE_ENABLEDstring"true"
caipe-ui.config.OPENFGA_STORE_NAMEstring"caipe-openfga"
caipe-ui.config.SCHEDULER_URLstring"http://caipe-scheduler:8080"
caipe-ui.config.SHOW_POWERED_BYstring"false"
caipe-ui.config.SKILLS_DIRstring"/app/data/skills"
caipe-ui.config.SKILLS_HELPER_FILEstring"/app/data/skills-live-skills/caipe-skills.py"
caipe-ui.config.SKILLS_HOOK_FILEstring"/app/data/skills-live-skills/caipe-catalog.sh"
caipe-ui.config.SKILLS_LIVE_SKILLS_FILEstring"/app/data/skills-live-skills/live-skills.md"
caipe-ui.config.SKILLS_UPDATE_SKILLS_FILEstring"/app/data/skills-live-skills/update-skills.md"
caipe-ui.config.SKILL_SCANNER_URLstring""
caipe-ui.config.SLACK_BOT_ADMIN_AUDIENCEstring"caipe-slack-bot-admin"
caipe-ui.config.SLACK_BOT_ADMIN_URLstring""
caipe-ui.config.SLACK_DEFAULT_AGENT_IDstring""
caipe-ui.config.SLACK_DEFAULT_TEAM_SLUGstring""
caipe-ui.config.SLACK_WORKSPACE_ALIASstring"CAIPE"
caipe-ui.config.SSO_ENABLEDstring"false"
caipe-ui.config.TAGLINEstring"Multi-Agent Workflow Automation"
caipe-ui.config.WEBEX_BOT_ADMIN_AUDIENCEstring"caipe-webex-bot-admin"
caipe-ui.config.WEBEX_BOT_ADMIN_CLIENT_IDstring"caipe-ui"
caipe-ui.config.WEBEX_BOT_ADMIN_URLstring""
caipe-ui.config.WEBEX_THREAD_CONTEXT_ENABLEDstring"true"
caipe-ui.config.WEBEX_THREAD_CONTEXT_MAX_CHARSstring"4000"
caipe-ui.config.WEBEX_THREAD_CONTEXT_MAX_MESSAGESstring"10"
caipe-ui.existingSecretstring""
caipe-ui.externalSecrets.apiVersionstring"v1beta1"
caipe-ui.externalSecrets.datalist[]
caipe-ui.externalSecrets.enabledboolfalse
caipe-ui.externalSecrets.secretStoreRef.kindstring"ClusterSecretStore"
caipe-ui.externalSecrets.secretStoreRef.namestring"vault"
caipe-ui.image.pullPolicystring"IfNotPresent"
caipe-ui.image.repositorystring"ghcr.io/cnoe-io/caipe-ui"
caipe-ui.image.tagstring""
caipe-ui.ingress.annotationsobject{}
caipe-ui.ingress.classNamestring"nginx"
caipe-ui.ingress.enabledboolfalse
caipe-ui.ingress.hosts[0].hoststring"caipe-ui.local"
caipe-ui.ingress.hosts[0].paths[0].pathstring"/"
caipe-ui.ingress.hosts[0].paths[0].pathTypestring"Prefix"
caipe-ui.ingress.tlslist[]
caipe-ui.keycloakAdminClient.clientIdstring"caipe-platform"
caipe-ui.keycloakAdminClient.secretKeystring"OIDC_CLIENT_SECRET"
caipe-ui.keycloakAdminClient.secretNamestring"caipe-platform-secret"
caipe-ui.mongodb.auth.databasestring"caipe"
caipe-ui.mongodb.auth.rootPasswordstring"changeme"
caipe-ui.mongodb.auth.rootUsernamestring"admin"
caipe-ui.mongodb.enabledboolfalse
caipe-ui.mongodb.externalSecrets.apiVersionstring"v1beta1"
caipe-ui.mongodb.externalSecrets.datalist[]
caipe-ui.mongodb.externalSecrets.enabledboolfalse
caipe-ui.mongodb.externalSecrets.secretStoreRef.kindstring"ClusterSecretStore"
caipe-ui.mongodb.externalSecrets.secretStoreRef.namestring"vault"
caipe-ui.mongodb.image.pullPolicystring"IfNotPresent"
caipe-ui.mongodb.image.repositorystring"mongo"
caipe-ui.mongodb.image.tagstring"7.0"
caipe-ui.mongodb.nameOverridestring"mongodb"
caipe-ui.mongodb.persistence.enabledbooltrue
caipe-ui.mongodb.persistence.sizestring"10Gi"
caipe-ui.mongodb.persistence.storageClassstring""
caipe-ui.mongodb.service.portint27017
caipe-ui.mongodb.strictPasswordsboolfalse
caipe-ui.nameOverridestring"caipe-ui"
caipe-ui.oauthConnectorslist[]
caipe-ui.oktaSync.enabledboolfalse
caipe-ui.oktaSync.oauth.clientIdstring""
caipe-ui.oktaSync.oauth.keyIdstring""
caipe-ui.oktaSync.orgUrlstring""
caipe-ui.schedulerRunnerClient.clientIdstring"caipe-scheduler-runner"
caipe-ui.schedulerRunnerClient.secretKeystring"KC_SCHEDULER_CLIENT_SECRET"
caipe-ui.schedulerRunnerClient.secretNamestring""
caipe-ui.service.portint3000
caipe-ui.skills.enabledbooltrue
caipe-ui.volumeMounts[0].mountPathstring"/app/data/skills"
caipe-ui.volumeMounts[0].namestring"skill-templates"
caipe-ui.volumeMounts[0].readOnlybooltrue
caipe-ui.volumeMounts[1].mountPathstring"/app/data/skills-live-skills"
caipe-ui.volumeMounts[1].namestring"skills-live-skills"
caipe-ui.volumeMounts[1].readOnlybooltrue
caipe-ui.volumes[0].configMap.namestring"skill-templates"
caipe-ui.volumes[0].namestring"skill-templates"
caipe-ui.volumes[1].configMap.namestring"skills-live-skills"
caipe-ui.volumes[1].configMap.optionalbooltrue
caipe-ui.volumes[1].namestring"skills-live-skills"
dynamic-agents.agentContext.existingSecret.keystring"CAIPE_AGENT_CONTEXT_HMAC_SECRET"
dynamic-agents.agentContext.existingSecret.namestring""
dynamic-agents.config.AGENT_GATEWAY_MCP_SERVER_IDSstring"all"
dynamic-agents.config.CAIPE_API_URLstring""
dynamic-agents.config.CAIPE_CREDENTIALS_ENABLEDstring"false"
dynamic-agents.config.CREDENTIAL_API_URLstring""
dynamic-agents.config.CREDENTIAL_SERVICE_AUDIENCEstring"caipe-credential-service"
dynamic-agents.config.KEYCLOAK_URLstring""
dynamic-agents.config.MONGODB_DATABASEstring"caipe"
dynamic-agents.config.OIDC_ISSUERstring""
dynamic-agents.config.OPENFGA_HTTPstring""
dynamic-agents.config.OPENFGA_STORE_NAMEstring"caipe-openfga"
dynamic-agents.config.USE_IMPERSONATION_TOKENSstring"false"
dynamic-agents.externalSecrets.apiVersionstring"v1beta1"
dynamic-agents.externalSecrets.datalist[]
dynamic-agents.externalSecrets.enabledboolfalse
dynamic-agents.externalSecrets.secretStoreRef.kindstring"ClusterSecretStore"
dynamic-agents.externalSecrets.secretStoreRef.namestring"vault"
dynamic-agents.image.pullPolicystring"IfNotPresent"
dynamic-agents.image.repositorystring"ghcr.io/cnoe-io/caipe-dynamic-agents"
dynamic-agents.image.tagstring""
dynamic-agents.nameOverridestring"dynamic-agents"
dynamic-agents.service.metricsPortint0
dynamic-agents.service.portint8001
extraDeploylist[]
global.agentgateway.enabledbooltrue
global.agentgateway.extAuth.enabledboolfalse
global.agentgateway.extAuth.portint9100
global.agentgateway.extAuth.serviceNamestring""
global.agentgateway.extAuth.serviceNamespacestring""
global.agentgateway.extAuth.timeoutstring"10s"
global.agentgateway.extraMcpTargetslist[]
global.agentgateway.githubMcpServer.enabledboolfalse
global.agentgateway.githubMcpServer.existingSecret.keystring"GITHUB_PERSONAL_ACCESS_TOKEN"
global.agentgateway.githubMcpServer.existingSecret.namestring""
global.agentgateway.githubMcpServer.image.pullPolicystring"IfNotPresent"
global.agentgateway.githubMcpServer.image.repositorystring"ghcr.io/github/github-mcp-server"
global.agentgateway.githubMcpServer.image.tagstring"latest@sha256:5c83359327a0bacc3d34db730bea6557d39d341cee0bf6c58c9a896e33150e80"
global.agentgateway.githubMcpServer.pathPrefixstring"/mcp/github-mcp-server"
global.agentgateway.githubMcpServer.portint8082
global.agentgateway.installIstioCrdsboolfalse
global.agentgateway.knowledgeBaseTarget.enabledbooltrue
global.agentgateway.knowledgeBaseTarget.hoststring"rag-server.{{ .Release.Namespace }}.svc.cluster.local"
global.agentgateway.knowledgeBaseTarget.pathPrefixstring"/mcp/knowledge-base"
global.agentgateway.knowledgeBaseTarget.portint9446
global.agentgateway.knowledgeBaseTarget.protocolstring"StreamableHTTP"
global.agentgateway.knowledgeBaseTarget.providerTokenAuthbooltrue
global.agentgateway.proxyPortint8080
global.agentgateway.routingModestring"static"
global.agentgateway.static.configBridge.authzHoststring""
global.agentgateway.static.configBridge.enabledbooltrue
global.agentgateway.static.configBridge.extraEnvlist[]
global.agentgateway.static.configBridge.image.pullPolicystring"IfNotPresent"
global.agentgateway.static.configBridge.image.repositorystring"ghcr.io/cnoe-io/agentgateway-config-bridge"
global.agentgateway.static.configBridge.image.tagstring""
global.agentgateway.static.configBridge.pollSecondsint5
global.agentgateway.static.configBridge.ui.existingSecret.keystring"AGENTGATEWAY_TARGETS_TOKEN"
global.agentgateway.static.configBridge.ui.existingSecret.namestring""
global.agentgateway.static.configBridge.ui.externalSecret.datalist[]
global.agentgateway.static.configBridge.ui.externalSecret.enabledboolfalse
global.agentgateway.static.configBridge.ui.urlstring""
global.agentgateway.static.jwtAuth.audienceslist[]
global.agentgateway.static.jwtAuth.enabledboolfalse
global.agentgateway.static.jwtAuth.issuerstring""
global.agentgateway.static.jwtAuth.jwksUrlstring""
global.createLlmSecretboolfalse
global.externalSecrets.apiVersionstring"v1beta1"
global.externalSecrets.enabledboolfalse
global.imageobject{"channel":"","tag":""}Global image tag override. When set, overrides the default appVersion-based image tag for ALL subcharts (MCP servers, dynamic agents, UI, etc.) in a single place. Individual subchart image.tag values still take highest precedence.
global.image.channelstring""Image repository channel for maintained CAIPE images. Empty means auto: rc/hotfix/dev chart appVersions use pre-release/, final release appVersions use the root published image repositories. Set to pre-release or release to force either repository channel.
global.llmSecrets.createboolfalse
global.llmSecrets.secretNamestring"llm-secret"
global.mcp.vpa.controlledResources[0]string"cpu"
global.mcp.vpa.controlledResources[1]string"memory"
global.mcp.vpa.controlledValuesstring"RequestsAndLimits"
global.mcp.vpa.enabledboolfalse
global.mcp.vpa.maxAllowedobject{}
global.mcp.vpa.minAllowed.cpustring"50m"
global.mcp.vpa.minAllowed.memorystring"128Mi"
global.mcp.vpa.updateModestring"InPlaceOrRecreate"
global.metrics.enabledbooltrue
global.openfga.httpUrlstring""
global.openfga.storeNamestring"caipe-openfga"
global.rag.enableGraphRagbooltrue
global.rag.ingestorOidc.clientIdstring"caipe-platform"
global.rag.ingestorOidc.clientSecretRef.keystring"OIDC_CLIENT_SECRET"
global.rag.ingestorOidc.clientSecretRef.namestring"caipe-platform-secret"
global.rag.ingestorOidc.discoveryUrlstring"http://{{ .Release.Name }}-keycloak:8080/realms/caipe/.well-known/openid-configuration"
global.rag.ingestorOidc.issuerstring""
global.rag.ingestorOidc.jwksUrlstring"http://{{ .Release.Name }}-keycloak:8080/realms/caipe/protocol/openid-connect/certs"
global.rag.ingestorOidc.scopestring""
global.rag.openfga.httpUrlstring""
global.scheduler.enabledboolfalse
global.scheduler.serviceTokenSecretKeystring"token"
global.scheduler.serviceTokenSecretNamestring"caipe-scheduler-service-token"
global.storageobject{"s3":{"bucket":"","endpointUrl":"","region":""}}Shared object storage for CAIPE. Set the bucket ONCE here and every subchart that needs durable object storage derives from it: * audit-service writes audit logs under its audit prefix * dynamic-agents writes multimodal attachment blobs under attachments Same bucket/region, ambient (IRSA) credentials via each subchart's serviceAccount role-arn. A subchart's own storage value still wins when set.
global.vpa.controlledResources[0]string"cpu"
global.vpa.controlledResources[1]string"memory"
global.vpa.controlledValuesstring"RequestsAndLimits"
global.vpa.enabledboolfalse
global.vpa.maxAllowedobject{}
global.vpa.minAllowed.cpustring"50m"
global.vpa.minAllowed.memorystring"128Mi"
global.vpa.updateModestring"InPlaceOrRecreate"
keycloak.admin.passwordstring""
keycloak.admin.secretRefstring""
keycloak.admin.usernamestring"admin"
keycloak.externalSecrets.apiVersionstring"v1beta1"
keycloak.externalSecrets.datalist[]
keycloak.externalSecrets.enabledboolfalse
keycloak.externalSecrets.secretStoreRef.kindstring"ClusterSecretStore"
keycloak.externalSecrets.secretStoreRef.namestring"vault"
keycloak.features.adminFineGrainedAuthzbooltrue
keycloak.features.tokenExchangebooltrue
keycloak.idp.accessGroupstring""
keycloak.idp.adminGroupstring""
keycloak.idp.aliasstring""
keycloak.idp.clientIdstring""
keycloak.idp.displayNamestring""
keycloak.idp.enabledboolfalse
keycloak.idp.issuerstring""
keycloak.idp.secretRefstring""
keycloak.image.pullPolicystring"IfNotPresent"
keycloak.image.repositorystring"quay.io/keycloak/keycloak"
keycloak.image.tagstring"26.3"
keycloak.platformClient.secretRefstring"caipe-platform-secret"
keycloak.realm.namestring"caipe"
keycloak.realm.sslRequiredstring"external"
keycloak.resources.limits.cpustring"1"
keycloak.resources.limits.memorystring"1Gi"
keycloak.resources.requests.cpustring"250m"
keycloak.resources.requests.memorystring"512Mi"
keycloak.schedulerTokenExchange.botClientIdstring"caipe-scheduler-runner"
keycloak.schedulerTokenExchange.enabledbooltrue
keycloak.schedulerTokenExchange.secretRefstring""
keycloak.service.portint8080
keycloak.service.typestring"ClusterIP"
keycloak.tokenExchange.botClientIdstring"caipe-slack-bot"
keycloak.tokenExchange.enabledbooltrue
keycloak.webexTokenExchange.botClientIdstring"caipe-webex-bot"
keycloak.webexTokenExchange.enabledbooltrue
litellmMcp.affinityobject{}
litellmMcp.config.LITELLM_API_TIMEOUTstring"120"
litellmMcp.config.LITELLM_API_URLstring""
litellmMcp.config.LITELLM_VERIFY_SSLstring"true"
litellmMcp.config.SERVER_NAMEstring"LITELLM"
litellmMcp.enabledboolfalse
litellmMcp.existingSecretstring""
litellmMcp.externalSecrets.apiVersionstring"v1beta1"
litellmMcp.externalSecrets.datalist[]
litellmMcp.externalSecrets.enabledboolfalse
litellmMcp.externalSecrets.refreshIntervalstring"1h"
litellmMcp.externalSecrets.secretStoreRef.kindstring"ClusterSecretStore"
litellmMcp.externalSecrets.secretStoreRef.namestring"vault"
litellmMcp.fullnameOverridestring""
litellmMcp.image.pullPolicystring"IfNotPresent"
litellmMcp.image.repositorystring"ghcr.io/cnoe-io/mcp-litellm"
litellmMcp.image.tagstring""
litellmMcp.imagePullSecretslist[]
litellmMcp.livenessProbe.failureThresholdint3
litellmMcp.livenessProbe.initialDelaySecondsint30
litellmMcp.livenessProbe.periodSecondsint10
litellmMcp.livenessProbe.tcpSocket.portstring"http"
litellmMcp.livenessProbe.timeoutSecondsint5
litellmMcp.nameOverridestring"litellm-mcp"
litellmMcp.nodeSelectorobject{}
litellmMcp.podAnnotationsobject{}
litellmMcp.podLabelsobject{}
litellmMcp.podSecurityContextobject{}
litellmMcp.readinessProbe.failureThresholdint3
litellmMcp.readinessProbe.initialDelaySecondsint5
litellmMcp.readinessProbe.periodSecondsint5
litellmMcp.readinessProbe.tcpSocket.portstring"http"
litellmMcp.readinessProbe.timeoutSecondsint3
litellmMcp.replicaCountint1
litellmMcp.resourcesobject{}
litellmMcp.revisionHistoryLimitint3
litellmMcp.secret.createboolfalse
litellmMcp.secret.dataobject{}
litellmMcp.secret.namestring""
litellmMcp.securityContextobject{}
litellmMcp.service.portint8000
litellmMcp.service.typestring"ClusterIP"
litellmMcp.tolerationslist[]
mcp-argocd.image.pullPolicystring"IfNotPresent"
mcp-argocd.image.repositorystring"ghcr.io/cnoe-io/mcp-argocd"
mcp-argocd.mcp.agentgateway.enabledboolfalse
mcp-argocd.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-argocd.mcp.image.pullPolicystring"IfNotPresent"
mcp-argocd.mcp.image.repositorystring"ghcr.io/cnoe-io/mcp-argocd"
mcp-argocd.mcp.image.tagstring""
mcp-argocd.mcp.modestring"http"
mcp-argocd.mcp.portint8000
mcp-argocd.nameOverridestring"mcp-argocd"
mcp-aws.env.RESTRICT_KUBECTL_ATTACHstring"false"Block kubectl attach (attach to a running process inside a pod). Defaults to false (off).
mcp-aws.env.RESTRICT_KUBECTL_CPstring"false"Block kubectl cp (copy files out of pods). Defaults to false (off).
mcp-aws.env.RESTRICT_KUBECTL_EXECstring"false"Block kubectl exec (shell access inside pods). Defaults to false (off); enable for stricter environments.
mcp-aws.env.RESTRICT_KUBECTL_PORT_FORWARDstring"false"Block kubectl port-forward (tunnel internal services). Defaults to false (off).
mcp-aws.env.RESTRICT_KUBECTL_PROXYstring"true"Block kubectl proxy, which exposes the entire Kubernetes API server. Defaults to true (on).
mcp-aws.env.RESTRICT_KUBECTL_SECRETSstring"true"Block kubectl get/describe secret(s) and redact Secret data from output. Defaults to true (on).
mcp-aws.image.pullPolicystring"IfNotPresent"
mcp-aws.image.repositorystring"ghcr.io/cnoe-io/agent-aws"
mcp-aws.mcp.agentgateway.enabledboolfalse
mcp-aws.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-aws.mcp.image.pullPolicystring"IfNotPresent"
mcp-aws.mcp.image.repositorystring"ghcr.io/cnoe-io/mcp-aws"
mcp-aws.mcp.image.tagstring""
mcp-aws.mcp.modestring"http"
mcp-aws.mcp.portint8000
mcp-aws.nameOverridestring"mcp-aws"
mcp-backstage.image.pullPolicystring"IfNotPresent"
mcp-backstage.image.repositorystring"ghcr.io/cnoe-io/agent-backstage"
mcp-backstage.mcp.agentgateway.enabledboolfalse
mcp-backstage.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-backstage.mcp.image.pullPolicystring"IfNotPresent"
mcp-backstage.mcp.image.repositorystring"ghcr.io/cnoe-io/mcp-backstage"
mcp-backstage.mcp.image.tagstring""
mcp-backstage.mcp.modestring"http"
mcp-backstage.mcp.portint8000
mcp-backstage.nameOverridestring"mcp-backstage"
mcp-confluence.image.pullPolicystring"IfNotPresent"
mcp-confluence.image.repositorystring"ghcr.io/cnoe-io/agent-confluence"
mcp-confluence.mcp.agentgateway.enabledboolfalse
mcp-confluence.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-confluence.mcp.env.TRANSPORTstring"streamable-http"
mcp-confluence.mcp.image.pullPolicystring"IfNotPresent"
mcp-confluence.mcp.image.repositorystring"ghcr.io/sooperset/mcp-atlassian"
mcp-confluence.mcp.image.tagstring"0.23.0"
mcp-confluence.mcp.modestring"http"
mcp-confluence.mcp.portint8000
mcp-confluence.nameOverridestring"mcp-confluence"
mcp-github.image.pullPolicystring"IfNotPresent"
mcp-github.image.repositorystring"ghcr.io/cnoe-io/mcp-github"
mcp-github.mcp.agentgateway.enabledboolfalse
mcp-github.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-github.mcp.agentgateway.providerTokenAuthbooltrue
mcp-github.mcp.modestring"stdio"
mcp-github.mcp.useRemoteMcpServerboolfalse
mcp-github.nameOverridestring"mcp-github"
mcp-gitlab.env.GIT_AUTHOR_EMAILstring"ai-agent@cnoe.io"
mcp-gitlab.env.GIT_AUTHOR_NAMEstring"AI Agent"
mcp-gitlab.env.GIT_COMMITTER_EMAILstring"ai-agent@cnoe.io"
mcp-gitlab.env.GIT_COMMITTER_NAMEstring"AI Agent"
mcp-gitlab.image.pullPolicystring"IfNotPresent"
mcp-gitlab.image.repositorystring"ghcr.io/cnoe-io/agent-gitlab"
mcp-gitlab.mcp.agentgateway.enabledboolfalse
mcp-gitlab.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-gitlab.mcp.agentgateway.providerTokenAuthbooltrue
mcp-gitlab.mcp.env.GITLAB_READ_ONLY_MODEstring"true"
mcp-gitlab.mcp.env.HOSTstring"0.0.0.0"
mcp-gitlab.mcp.env.MAX_REQUESTS_PER_MINUTEstring"60"
mcp-gitlab.mcp.env.MAX_SESSIONSstring"1000"
mcp-gitlab.mcp.env.PORTstring"8000"
mcp-gitlab.mcp.env.STREAMABLE_HTTPstring"true"
mcp-gitlab.mcp.env.USE_PIPELINEstring"true"
mcp-gitlab.mcp.image.pullPolicystring"IfNotPresent"
mcp-gitlab.mcp.image.repositorystring"zereight050/gitlab-mcp"
mcp-gitlab.mcp.image.tagstring"2.1.46"
mcp-gitlab.mcp.modestring"http"
mcp-gitlab.mcp.portint8000
mcp-gitlab.nameOverridestring"mcp-gitlab"
mcp-jira.image.pullPolicystring"IfNotPresent"
mcp-jira.image.repositorystring"ghcr.io/cnoe-io/agent-jira"
mcp-jira.mcp.agentgateway.enabledboolfalse
mcp-jira.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-jira.mcp.image.pullPolicystring"IfNotPresent"
mcp-jira.mcp.image.repositorystring"ghcr.io/cnoe-io/mcp-jira"
mcp-jira.mcp.image.tagstring""
mcp-jira.mcp.modestring"http"
mcp-jira.mcp.portint8000
mcp-jira.nameOverridestring"mcp-jira"
mcp-komodor.image.pullPolicystring"IfNotPresent"
mcp-komodor.image.repositorystring"ghcr.io/cnoe-io/agent-komodor"
mcp-komodor.mcp.agentgateway.enabledboolfalse
mcp-komodor.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-komodor.mcp.image.pullPolicystring"IfNotPresent"
mcp-komodor.mcp.image.repositorystring"ghcr.io/cnoe-io/mcp-komodor"
mcp-komodor.mcp.image.tagstring""
mcp-komodor.mcp.modestring"http"
mcp-komodor.mcp.portint8000
mcp-komodor.nameOverridestring"mcp-komodor"
mcp-netutils.agentSecrets.requiresSecretboolfalse
mcp-netutils.image.pullPolicystring"IfNotPresent"
mcp-netutils.image.repositorystring"ghcr.io/cnoe-io/agent-netutils"
mcp-netutils.mcp.agentgateway.enabledboolfalse
mcp-netutils.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-netutils.mcp.image.pullPolicystring"IfNotPresent"
mcp-netutils.mcp.image.repositorystring"ghcr.io/cnoe-io/mcp-netutils"
mcp-netutils.mcp.image.tagstring""
mcp-netutils.mcp.modestring"http"
mcp-netutils.mcp.portint8000
mcp-netutils.nameOverridestring"mcp-netutils"
mcp-pagerduty.image.pullPolicystring"IfNotPresent"
mcp-pagerduty.image.repositorystring"ghcr.io/cnoe-io/agent-pagerduty"
mcp-pagerduty.mcp.agentgateway.enabledboolfalse
mcp-pagerduty.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-pagerduty.mcp.image.pullPolicystring"IfNotPresent"
mcp-pagerduty.mcp.image.repositorystring"ghcr.io/cnoe-io/mcp-pagerduty"
mcp-pagerduty.mcp.image.tagstring""
mcp-pagerduty.mcp.modestring"http"
mcp-pagerduty.mcp.portint8000
mcp-pagerduty.nameOverridestring"mcp-pagerduty"
mcp-slack.image.pullPolicystring"IfNotPresent"
mcp-slack.image.repositorystring"ghcr.io/cnoe-io/agent-slack"
mcp-slack.mcp.agentgateway.enabledboolfalse
mcp-slack.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-slack.mcp.command[0]string"--transport"
mcp-slack.mcp.command[1]string"http"
mcp-slack.mcp.env.SLACK_MCP_HOSTstring"0.0.0.0"
mcp-slack.mcp.env.SLACK_MCP_PORTstring"3001"
mcp-slack.mcp.image.pullPolicystring"IfNotPresent"
mcp-slack.mcp.image.repositorystring"ghcr.io/korotovsky/slack-mcp-server"
mcp-slack.mcp.image.tagstring"v1.2.3"
mcp-slack.mcp.modestring"http"
mcp-slack.mcp.portint3001
mcp-slack.nameOverridestring"mcp-slack"
mcp-splunk.image.pullPolicystring"IfNotPresent"
mcp-splunk.image.repositorystring"ghcr.io/cnoe-io/agent-splunk"
mcp-splunk.mcp.agentgateway.enabledboolfalse
mcp-splunk.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-splunk.mcp.image.pullPolicystring"IfNotPresent"
mcp-splunk.mcp.image.repositorystring"ghcr.io/cnoe-io/mcp-splunk"
mcp-splunk.mcp.image.tagstring""
mcp-splunk.mcp.modestring"http"
mcp-splunk.mcp.portint8000
mcp-splunk.nameOverridestring"mcp-splunk"
mcp-victorops.image.pullPolicystring"IfNotPresent"
mcp-victorops.image.repositorystring"ghcr.io/cnoe-io/agent-victorops"
mcp-victorops.mcp.agentgateway.enabledboolfalse
mcp-victorops.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-victorops.mcp.image.pullPolicystring"IfNotPresent"
mcp-victorops.mcp.image.repositorystring"ghcr.io/cnoe-io/mcp-victorops"
mcp-victorops.mcp.image.tagstring""
mcp-victorops.mcp.modestring"http"
mcp-victorops.mcp.portint8000
mcp-victorops.nameOverridestring"mcp-victorops"
mcp-webex-meetings.mcp.agentgateway.credential_sources[0].kindstring"provider_connection"
mcp-webex-meetings.mcp.agentgateway.credential_sources[0].namestring"X-CAIPE-Provider-Token"
mcp-webex-meetings.mcp.agentgateway.credential_sources[0].providerstring"webex"
mcp-webex-meetings.mcp.agentgateway.credential_sources[0].targetstring"header"
mcp-webex-meetings.mcp.agentgateway.enabledbooltrue
mcp-webex-meetings.mcp.agentgateway.idstring"webex_meetings"
mcp-webex-meetings.mcp.agentgateway.pathPrefixstring"/mcp/webex_meetings"
mcp-webex-meetings.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-webex-meetings.mcp.image.pullPolicystring"IfNotPresent"
mcp-webex-meetings.mcp.image.repositorystring"ghcr.io/cnoe-io/mcp-webex-meetings"
mcp-webex-meetings.mcp.image.tagstring""
mcp-webex-meetings.mcp.modestring"http"
mcp-webex-meetings.mcp.portint8000
mcp-webex-meetings.mcpSecrets.requiresSecretboolfalse
mcp-webex-meetings.nameOverridestring"mcp-webex-meetings"
mcp-webex.image.pullPolicystring"IfNotPresent"
mcp-webex.image.repositorystring"ghcr.io/cnoe-io/agent-webex"
mcp-webex.mcp.agentgateway.enabledboolfalse
mcp-webex.mcp.agentgateway.protocolstring"StreamableHTTP"
mcp-webex.mcp.image.pullPolicystring"IfNotPresent"
mcp-webex.mcp.image.repositorystring"ghcr.io/cnoe-io/mcp-webex"
mcp-webex.mcp.image.tagstring""
mcp-webex.mcp.modestring"http"
mcp-webex.mcp.portint8000
mcp-webex.nameOverridestring"mcp-webex"
metrics.grafanaDashboard.enabledbooltrue
metrics.grafanaDashboard.labels.grafana_dashboardstring"1"
metrics.pathstring"/metrics"
metrics.serviceMonitor.annotationsobject{}
metrics.serviceMonitor.enabledboolfalse
metrics.serviceMonitor.intervalstring"30s"
metrics.serviceMonitor.labelsobject{}
metrics.serviceMonitor.metricRelabelingslist[]
metrics.serviceMonitor.relabelingslist[]
metrics.serviceMonitor.scrapeTimeoutstring"10s"
openfga-authz-bridge.agentContext.existingSecret.keystring"CAIPE_AGENT_CONTEXT_HMAC_SECRET"
openfga-authz-bridge.agentContext.existingSecret.namestring""
openfga-authz-bridge.audit.enabledbooltrue
openfga-authz-bridge.audit.serviceUrlstring""
openfga-authz-bridge.audit.subjectSaltstring"caipe-098-audit"
openfga-authz-bridge.audit.tenantIdstring"default"
openfga-authz-bridge.image.pullPolicystring"IfNotPresent"
openfga-authz-bridge.image.repositorystring"ghcr.io/cnoe-io/openfga-authz-bridge"
openfga-authz-bridge.image.tagstring""
openfga-authz-bridge.openfga.httpUrlstring""
openfga-authz-bridge.openfga.objectstring"mcp_gateway:list"
openfga-authz-bridge.openfga.relationstring"can_call"
openfga-authz-bridge.openfga.storeNamestring"caipe-openfga"
openfga-authz-bridge.organizationKeystring"caipe"
openfga-authz-bridge.restrictedMcpServerslist[]
openfga-authz-bridge.tokenValidation.algorithms[0]string"RS256"
openfga-authz-bridge.tokenValidation.audienceslist[]
openfga-authz-bridge.tokenValidation.issuerstring""
openfga-authz-bridge.tokenValidation.jwksUrlstring""
openfga.datastore.enginestring"memory"
openfga.datastore.uriSecretRef.keystring"OPENFGA_DATASTORE_URI"
openfga.datastore.uriSecretRef.namestring""
openfga.enabledboolfalse
openfga.image.pullPolicystring"IfNotPresent"
openfga.image.repositorystring"openfga/openfga"
openfga.image.tagstring"v1.15.1"
openfga.init.enabledbooltrue
openfga.init.seedTupleslist[]
openfga.init.storeNamestring"caipe-openfga"
openfga.migrate.enabledbooltrue
openfgaAuthzBridge.enabledboolfalse
rag-stackstringnil
rag-stack.agent-ontology.enabledbooltrue
rag-stack.agent-rag.enabledbooltrue
rag-stack.agent-rag.image.pullPolicystring"IfNotPresent"
rag-stack.agent-rag.image.repositorystring"ghcr.io/cnoe-io/caipe-rag-agent-rag"
rag-stack.agent-rag.image.tagstring""
rag-stack.milvus.enabledbooltrue
rag-stack.neo4j.enabledbooltrue
rag-stack.rag-redis.enabledbooltrue
rag-stack.rag-redis.image.pullPolicystring"IfNotPresent"
rag-stack.rag-redis.image.repositorystring"redis"
rag-stack.rag-redis.image.tagstring"7.2-alpine"
rag-stack.rag-redis.persistence.enabledboolfalse
rag-stack.rag-server.enabledbooltrue
rag-stack.rag-server.env.CAIPE_UNSAFE_RBAC_BYPASSstring"false"
rag-stack.rag-server.env.OPENFGA_STORE_NAMEstring"caipe-openfga"
rag-stack.rag-server.image.pullPolicystring"IfNotPresent"
rag-stack.rag-server.image.repositorystring"ghcr.io/cnoe-io/caipe-rag-server"
rag-stack.rag-server.image.tagstring""
scheduler.argslist[]
scheduler.caipe.apiUrlstring"http://{{ .Release.Name }}-caipe-ui:3000"
scheduler.caipe.chatPathstring"/api/v1/chat/invoke"
scheduler.commandlist[]
scheduler.cronRunner.image.pullPolicystring"IfNotPresent"
scheduler.cronRunner.image.repositorystring"ghcr.io/cnoe-io/caipe-cron-runner"
scheduler.cronRunner.image.tagstring""
scheduler.fullnameOverridestring"caipe-scheduler"
scheduler.image.pullPolicystring"IfNotPresent"
scheduler.image.repositorystring"ghcr.io/cnoe-io/caipe-scheduler"
scheduler.image.tagstring""
scheduler.mongo.databasestring"caipe"
scheduler.mongo.existingSecretstring""
scheduler.mongo.existingSecretKeystring"uri"
scheduler.mongo.uristring""
scheduler.serviceToken.existingSecretstring""
scheduler.serviceToken.existingSecretKeystring"token"
scheduler.serviceToken.valuestring""
schedulerMcp.auth.audiencestring"caipe-platform"
schedulerMcp.auth.issuerstring""
schedulerMcp.auth.jwksUristring""
schedulerMcp.auth.modestring"none"
schedulerMcp.command[0]string"mcp-server-scheduler"
schedulerMcp.enabledbooltrue
schedulerMcp.env.MCP_HOSTstring"0.0.0.0"
schedulerMcp.env.MCP_MODEstring"streamable-http"
schedulerMcp.env.MCP_PORTstring"8000"
schedulerMcp.env.SCHEDULER_URLstring"http://caipe-scheduler:8080"
schedulerMcp.image.pullPolicystring"IfNotPresent"
schedulerMcp.image.repositorystring"ghcr.io/cnoe-io/mcp-scheduler"
schedulerMcp.image.tagstring""
schedulerMcp.nameOverridestring"mcp-scheduler"
schedulerMcp.resourcesobject{}
schedulerMcp.service.portint8000
skillsLiveSkillsstring""
skillsLiveSkillsNamestring""-------------------------------------------------------------------------
slack-bot.botConfigobject{}Per-channel configuration rendered as YAML and volume-mounted at /etc/caipe/bot-config.yaml. Only mounted when non-empty.
slack-bot.configobject{"APP_NAME":"CAIPE","CAIPE_API_URL":"","SLACK_ADMIN_ALLOWED_CLIENT_IDS":"caipe-ui","SLACK_ADMIN_API_ENABLED":"true","SLACK_ADMIN_API_HOST":"0.0.0.0","SLACK_ADMIN_API_PORT":"3001","SLACK_ADMIN_JWT_AUDIENCE":"caipe-slack-bot-admin","SLACK_ADMIN_JWT_ISSUER":"","SLACK_AGENT_ROUTES_MODE":"db_prefer","SLACK_AUTO_ASSIGN_UNMAPPED_CHANNELS":"false","SLACK_BOT_MODE":"socket","SLACK_DEFAULT_AGENT_ID":"","SLACK_DEFAULT_TEAM_SLUG":"","SLACK_WORKSPACE_ALIAS":"CAIPE"}Flat key-value map of environment variables. Each key-value pair is injected as a flat environment variable via ConfigMap (envFrom → configMapRef). All non-sensitive env vars go here.
slack-bot.existingSecretstring"slack-bot-secrets"Reference to a pre-existing Kubernetes Secret. Should contain: SLACK_BOT_TOKEN, SLACK_APP_TOKEN, SLACK_SIGNING_SECRET, and optionally OAUTH2_CLIENT_SECRET.
slack-bot.externalSecretsobject{"apiVersion":"v1beta1","data":[],"enabled":false,"secretStoreRef":{"kind":"ClusterSecretStore","name":"vault"}}External Secrets configuration for sensitive data
slack-bot.image.pullPolicystring"IfNotPresent"
slack-bot.image.repositorystring"ghcr.io/cnoe-io/caipe-slack-bot"
slack-bot.image.tagstring""
slack-bot.resources.limits.cpustring"500m"
slack-bot.resources.limits.memorystring"512Mi"
slack-bot.resources.requests.cpustring"100m"
slack-bot.resources.requests.memorystring"256Mi"
tags.basicboolfalse
tags.caipe-uiboolfalse
tags.completeboolfalse
tags.dynamic-agentsboolfalse
tags.keycloakboolfalse
tags.mcp-argocdboolfalse
tags.mcp-awsboolfalse
tags.mcp-backstageboolfalse
tags.mcp-confluenceboolfalse
tags.mcp-githubboolfalse
tags.mcp-gitlabboolfalse
tags.mcp-jiraboolfalse
tags.mcp-komodorboolfalse
tags.mcp-netutilsboolfalse
tags.mcp-pagerdutyboolfalse
tags.mcp-slackboolfalse
tags.mcp-splunkboolfalse
tags.mcp-victoropsboolfalse
tags.mcp-webexboolfalse
tags.mcp-webex-meetingsboolfalse
tags.rag-stackboolfalse
tags.slack-botboolfalse
tags.webex-botboolfalse
webex-bot.botConfigobject{}
webex-bot.botslist[]
webex-bot.config.APP_NAMEstring"CAIPE"
webex-bot.config.CAIPE_API_URLstring""
webex-bot.config.KEYCLOAK_REALMstring"caipe"
webex-bot.config.KEYCLOAK_URLstring""
webex-bot.config.OPENFGA_HTTPstring""
webex-bot.config.OPENFGA_STORE_NAMEstring"caipe-openfga"
webex-bot.config.WEBEX_ADMIN_ALLOWED_CLIENT_IDSstring"caipe-ui"
webex-bot.config.WEBEX_ADMIN_API_ENABLEDstring"false"
webex-bot.config.WEBEX_ADMIN_API_HOSTstring"0.0.0.0"
webex-bot.config.WEBEX_ADMIN_API_PORTstring"3002"
webex-bot.config.WEBEX_ADMIN_JWKS_URLstring""
webex-bot.config.WEBEX_ADMIN_JWT_AUDIENCEstring"caipe-webex-bot-admin"
webex-bot.config.WEBEX_ADMIN_JWT_ISSUERstring""
webex-bot.config.WEBEX_AGENT_ROUTES_MODEstring"db_prefer"
webex-bot.config.WEBEX_THREAD_CONTEXT_ENABLEDstring"true"
webex-bot.config.WEBEX_THREAD_CONTEXT_MAX_CHARSstring"4000"
webex-bot.config.WEBEX_THREAD_CONTEXT_MAX_MESSAGESstring"10"
webex-bot.config.WEBEX_WORKSPACE_ALIASstring"CAIPE-WEBEX"
webex-bot.existingSecretstring"webex-bot-secrets"
webex-bot.externalSecrets.apiVersionstring"v1beta1"
webex-bot.externalSecrets.datalist[]
webex-bot.externalSecrets.enabledboolfalse
webex-bot.externalSecrets.secretStoreRef.kindstring"ClusterSecretStore"
webex-bot.externalSecrets.secretStoreRef.namestring"vault"
webex-bot.image.pullPolicystring"IfNotPresent"
webex-bot.image.repositorystring"ghcr.io/cnoe-io/caipe-webex-bot"
webex-bot.image.tagstring""
webex-bot.keycloakBot.clientSecretFromSecret.keystring"KC_WEBEX_BOT_CLIENT_SECRET"
webex-bot.keycloakBot.clientSecretFromSecret.namestring""
webex-bot.resources.limits.cpustring"500m"
webex-bot.resources.limits.memorystring"512Mi"
webex-bot.resources.requests.cpustring"100m"
webex-bot.resources.requests.memorystring"256Mi"

Dependencies​

NameVersionCondition / Tags
mcp-argocd (mcp-server)0.5.68tags: mcp-argocd, basic, complete
mcp-aws (mcp-server)0.5.68tags: mcp-aws, complete
mcp-backstage (mcp-server)0.5.68tags: mcp-backstage, basic, complete
mcp-confluence (mcp-server)0.5.68tags: mcp-confluence, complete
mcp-github (mcp-server)0.5.68tags: mcp-github, basic, complete
mcp-gitlab (mcp-server)0.5.68tags: mcp-gitlab, complete
mcp-jira (mcp-server)0.5.68tags: mcp-jira, complete
mcp-komodor (mcp-server)0.5.68tags: mcp-komodor, complete
mcp-pagerduty (mcp-server)0.5.68tags: mcp-pagerduty, complete
mcp-slack (mcp-server)0.5.68tags: mcp-slack, complete
mcp-splunk (mcp-server)0.5.68tags: mcp-splunk, complete
mcp-victorops (mcp-server)0.5.68tags: mcp-victorops
mcp-webex (mcp-server)0.5.68tags: mcp-webex, complete
mcp-webex-meetings (mcp-server)0.5.68tags: mcp-webex-meetings, complete
mcp-netutils (mcp-server)0.5.68tags: mcp-netutils, complete
rag-stack0.5.68tags: rag-stack, complete
caipe-ui0.5.68tags: caipe-ui
audit-service0.5.68
dynamic-agents0.5.68tags: dynamic-agents
scheduler0.5.68global.scheduler.enabled
mongodb (caipe-ui-mongodb)0.5.68caipe-ui.mongodb.enabled
skill-scanner0.5.68global.skillScanner.enabled
slack-bot0.5.68tags: slack-bot
webex-bot0.5.68tags: webex-bot
keycloak0.5.68tags: keycloak
openfga0.5.68openfga.enabled
openfga-authz-bridge0.5.68openfgaAuthzBridge.enabled
agentgateway0.5.68agentgateway.enabled