> ## Documentation Index
> Fetch the complete documentation index at: https://astronomer.io/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Astronomer Helm chart configuration reference

Astronomer Software uses a Helm chart to define the behavior and functionality of your specific installation in a `values.yaml` file. You can customize the behavior of your Software implementation by [applying a platform configuration change](/docs/astro-private-cloud/v-0-36/apply-platform-config) for the different [system components](/docs/astro-private-cloud/v-0-36/system-components).

This document contains all the different possible configuration settings, grouped by the component they apply to.

## Astronomer Astro UI resources

| Parameter                                      | Type   | Description                                                                            | Default    |
| ---------------------------------------------- | ------ | -------------------------------------------------------------------------------------- | ---------- |
| `astronomer.astroUI.resources.limits.cpu`      | string | Specifies the maximum amount of CPU resources that the Astro UI component can consume. | `"500m"`   |
| `astronomer.astroUI.resources.limits.memory`   | string | Defines the maximum amount of memory that the Astro UI component is allowed to use.    | `"1024Mi"` |
| `astronomer.astroUI.resources.requests.cpu`    | string | Indicates the minimum amount of CPU resources guaranteed for the Astro UI component.   | `"100m"`   |
| `astronomer.astroUI.resources.requests.memory` | string | Sets the minimum amount of memory guaranteed for the Astro UI component.               | `"256Mi"`  |

## Astronomer Commander resources

| Parameter                                        | Type   | Description                                                                             | Default  |
| ------------------------------------------------ | ------ | --------------------------------------------------------------------------------------- | -------- |
| `astronomer.commander.resources.limits.cpu`      | string | Specifies the maximum amount of CPU resources that the Commander component can consume. | `"500m"` |
| `astronomer.commander.resources.limits.memory`   | string | Defines the maximum amount of memory that the Commander component is allowed to use.    | `"2Gi"`  |
| `astronomer.commander.resources.requests.cpu`    | string | Indicates the minimum amount of CPU resources guaranteed for the Commander component.   | `"250m"` |
| `astronomer.commander.resources.requests.memory` | string | Sets the minimum amount of memory guaranteed for the Commander component.               | `"1Gi"`  |

## Extra objects

| Parameter                 | Type | Description                                                                                                                | Default |
| ------------------------- | ---- | -------------------------------------------------------------------------------------------------------------------------- | ------- |
| `astronomer.extraObjects` | list | Specifies additional Kubernetes objects to deploy alongside Astronomer components. For example, `ConfigMaps` or `secrets`. | `[]`    |

## Houston

| Parameter                                      | Type   | Description                                                   | Default    |
| ---------------------------------------------- | ------ | ------------------------------------------------------------- | ---------- |
| `astronomer.houston.resources.limits.cpu`      | string | Maximum CPU resources allocated to the Houston API service.   | `"1000m"`  |
| `astronomer.houston.resources.limits.memory`   | string | Maximum memory allocated to the Houston API service.          | `"2048Mi"` |
| `astronomer.houston.resources.requests.cpu`    | string | Minimum guaranteed CPU resources for the Houston API service. | `"500m"`   |
| `astronomer.houston.resources.requests.memory` | string | Minimum guaranteed memory for the Houston API service.        | `"1024Mi"` |

## Install

| Parameter                                      | Type   | Description                                                               | Default    |
| ---------------------------------------------- | ------ | ------------------------------------------------------------------------- | ---------- |
| `astronomer.install.resources.limits.cpu`      | string | Maximum CPU resources for the Astronomer installation service.            | `"500m"`   |
| `astronomer.install.resources.limits.memory`   | string | Maximum memory for the Astronomer installation service.                   | `"1024Mi"` |
| `astronomer.install.resources.requests.cpu`    | string | Minimum guaranteed CPU resources for the Astronomer installation service. | `"100m"`   |
| `astronomer.install.resources.requests.memory` | string | Minimum guaranteed memory for the Astronomer installation service.        | `"256Mi"`  |

## Registry

| Parameter                                       | Type   | Description                                                             | Default    |
| ----------------------------------------------- | ------ | ----------------------------------------------------------------------- | ---------- |
| `astronomer.registry.persistence.enabled`       | bool   | Enables or disables persistent storage for the Astronomer registry.     | `true`     |
| `astronomer.registry.persistence.size`          | string | Defines the size of the persistent storage for the Astronomer registry. | `"100Gi"`  |
| `astronomer.registry.resources.limits.cpu`      | string | Maximum CPU resources allocated to the Astronomer registry service.     | `"500m"`   |
| `astronomer.registry.resources.limits.memory`   | string | Maximum memory allocated to the Astronomer registry service.            | `"1024Mi"` |
| `astronomer.registry.resources.requests.cpu`    | string | Minimum guaranteed CPU resources for the Astronomer registry service.   | `"250m"`   |
| `astronomer.registry.resources.requests.memory` | string | Minimum guaranteed memory for the Astronomer registry service.          | `"512Mi"`  |

## Elasticsearch

| Parameter                                            | Type    | Description                                                                    | Default   |
| ---------------------------------------------------- | ------- | ------------------------------------------------------------------------------ | --------- |
| `elasticsearch.client.heapMemory`                    | string  | Heap memory size allocated for Elasticsearch client nodes.                     | `"2g"`    |
| `elasticsearch.client.initResources.limits.cpu`      | string  | Maximum CPU resources for client node initialization.                          | `"120m"`  |
| `elasticsearch.client.initResources.limits.memory`   | string  | Maximum memory for Elasticsearch client node initialization.                   | `"100Mi"` |
| `elasticsearch.client.initResources.requests.cpu`    | string  | Minimum guaranteed CPU resources for Elasticsearch client node initialization. | `"100m"`  |
| `elasticsearch.client.initResources.requests.memory` | string  | Minimum guaranteed memory for Elasticsearch client node initialization.        | `"80Mi"`  |
| `elasticsearch.client.resources.limits.cpu`          | string  | Maximum CPU resources allocated to the client nodes.                           | `"2"`     |
| `elasticsearch.client.resources.limits.memory`       | string  | Maximum memory allocated to the client nodes.                                  | `"4Gi"`   |
| `elasticsearch.client.resources.requests.cpu`        | string  | Minimum guaranteed CPU resources for the client nodes.                         | `"1"`     |
| `elasticsearch.client.resources.requests.memory`     | string  | Minimum guaranteed memory for the client nodes.                                | `"2Gi"`   |
| `elasticsearch.common.persistence.enabled`           | boolean | Enables or disables persistent storage for Elasticsearch nodes.                | `true`    |
| `elasticsearch.data.heapMemory`                      | string  | Heap memory size allocated for Elasticsearch data nodes.                       | `"2g"`    |
| `elasticsearch.data.initResources.limits.cpu`        | string  | Maximum CPU resources for data node initialization.                            | `"120m"`  |
| `elasticsearch.data.initResources.limits.memory`     | string  | Maximum memory for data node initialization.                                   | `"100Mi"` |
| `elasticsearch.data.initResources.requests.cpu`      | string  | Minimum guaranteed CPU resources for data node initialization.                 | `"100m"`  |
| `elasticsearch.data.initResources.requests.memory`   | string  | Minimum guaranteed memory for data node initialization.                        | `"80Mi"`  |
| `elasticsearch.data.persistence.size`                | string  | Size of persistent storage for Elasticsearch data nodes.                       | `"100Gi"` |
| `elasticsearch.data.resources.limits.cpu`            | string  | Maximum CPU resources allocated to the data nodes.                             | `"2"`     |
| `elasticsearch.data.resources.limits.memory`         | string  | Maximum memory allocated to the data nodes.                                    | `"4Gi"`   |
| `elasticsearch.data.resources.requests.cpu`          | string  | Minimum guaranteed CPU resources for the data nodes.                           | `"1"`     |
| `elasticsearch.data.resources.requests.memory`       | string  | Minimum guaranteed memory for the data nodes.                                  | `"2Gi"`   |
| `elasticsearch.exporter.resources.limits.cpu`        | string  | Maximum CPU resources allocated to the Elasticsearch exporter.                 | `"200m"`  |
| `elasticsearch.exporter.resources.limits.memory`     | string  | Maximum memory allocated to the Elasticsearch exporter.                        | `"128Mi"` |
| `elasticsearch.exporter.resources.requests.cpu`      | string  | Minimum guaranteed CPU resources for the Elasticsearch exporter.               | `"100m"`  |
| `elasticsearch.exporter.resources.requests.memory`   | string  | Minimum guaranteed memory for the Elasticsearch exporter.                      | `"100Mi"` |
| `elasticsearch.master.heapMemory`                    | string  | Heap memory size allocated for Elasticsearch master nodes.                     | `"2g"`    |
| `elasticsearch.master.initResources.limits.cpu`      | string  | Maximum CPU resources for master node initialization.                          | `"120m"`  |
| `elasticsearch.master.initResources.limits.memory`   | string  | Maximum memory for master node initialization.                                 | `"100Mi"` |
| `elasticsearch.master.initResources.requests.cpu`    | string  | Minimum guaranteed CPU resources for master node initialization.               | `"100m"`  |
| `elasticsearch.master.initResources.requests.memory` | string  | Minimum guaranteed memory for master node initialization.                      | `"80Mi"`  |
| `elasticsearch.master.persistence.size`              | string  | Size of persistent storage for Elasticsearch master nodes.                     | `"20Gi"`  |
| `elasticsearch.master.resources.limits.cpu`          | string  | Maximum CPU resources allocated to the master nodes.                           | `"2"`     |
| `elasticsearch.master.resources.limits.memory`       | string  | Maximum memory allocated to the master nodes.                                  | `"4Gi"`   |
| `elasticsearch.master.resources.requests.cpu`        | string  | Minimum guaranteed CPU resources for the master nodes.                         | `"1"`     |
| `elasticsearch.master.resources.requests.memory`     | string  | Minimum guaranteed memory for the master nodes.                                | `"2Gi"`   |
| `elasticsearch.nginx.resources.limits.cpu`           | string  | Maximum CPU resources allocated to the Elasticsearch NGINX service.            | `"100m"`  |
| `elasticsearch.nginx.resources.limits.memory`        | string  | Maximum memory allocated to the Elasticsearch NGINX service.                   | `"256Mi"` |
| `elasticsearch.nginx.resources.requests.cpu`         | string  | Minimum guaranteed CPU resources for the Elasticsearch NGINX service.          | `"80m"`   |
| `elasticsearch.nginx.resources.requests.memory`      | string  | Minimum guaranteed memory for the Elasticsearch NGINX service.                 | `"128Mi"` |

## Fluentd

| Parameter                           | Type   | Description                                               | Default    |
| ----------------------------------- | ------ | --------------------------------------------------------- | ---------- |
| `fluentd.resources.limits.cpu`      | string | Maximum CPU resources allocated to the Fluentd service.   | `"1000m"`  |
| `fluentd.resources.limits.memory`   | string | Maximum memory allocated to the Fluentd service.          | `"1024Mi"` |
| `fluentd.resources.requests.cpu`    | string | Minimum guaranteed CPU resources for the Fluentd service. | `"250m"`   |
| `fluentd.resources.requests.memory` | string | Minimum guaranteed memory for the Fluentd service.        | `"512Mi"`  |

## Global

| Parameter                                                 | Type   | Description                                                                                                                                                                                                        | Default                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| --------------------------------------------------------- | ------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `global.acme`                                             | bool   | Configuration for the ACME protocol to manage SSL/TLS certificates.                                                                                                                                                | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.authSidecar.default_nginx_settings`               | string | Default settings for the NGINX configuration in the auth sidecar.                                                                                                                                                  | `"internal;\nproxy_pass_request_body     off;\nproxy_set_header            Content-Length          \"\";\nproxy_set_header            X-Forwarded-Proto       \"\";\nproxy_set_header            X-Original-URL          https://$http_host$request_uri;\nproxy_set_header            X-Original-Method       $request_method;\nproxy_set_header            X-Real-IP               $remote_addr;\nproxy_set_header            X-Forwarded-For         $remote_addr;\nproxy_set_header            X-Auth-Request-Redirect $request_uri;\nproxy_buffering             off;\nproxy_buffer_size           4k;\nproxy_buffers               4 4k;\nproxy_request_buffering     on;\nproxy_http_version          1.1;\nproxy_ssl_server_name       on;\nproxy_pass_request_headers  on;\nclient_max_body_size        1024m;\n"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| `global.authSidecar.default_nginx_settings_location`      | string | Default location for the NGINX configuration in the auth sidecar.                                                                                                                                                  | `"auth_request     /auth;\nauth_request_set $auth_status $upstream_status;\nauth_request_set $auth_cookie $upstream_http_set_cookie;\nadd_header       Set-Cookie $auth_cookie;\nauth_request_set $authHeader0 $upstream_http_authorization;\nproxy_set_header 'authorization' $authHeader0;\nauth_request_set $authHeader1 $upstream_http_username;\nproxy_set_header 'username' $authHeader1;\nauth_request_set $authHeader2 $upstream_http_email;\nproxy_set_header 'email' $authHeader2;\nerror_page 401 = @401_auth_error;\nproxy_set_header Upgrade $http_upgrade;\nproxy_set_header Connection 'connection_upgrade';\nproxy_set_header X-Real-IP              $remote_addr;\nproxy_set_header X-Forwarded-For        $remote_addr;\nproxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\nproxy_cache_bypass $http_upgrade;\nproxy_set_header X-Original-Forwarded-For $http_x_forwarded_for;\nproxy_connect_timeout                   15s;\nproxy_send_timeout                      600s;\nproxy_read_timeout                      600s;\nproxy_buffering                         off;\nproxy_buffer_size                       4k;\nproxy_buffers                           4 4k;\nproxy_max_temp_file_size                1024m;\nproxy_request_buffering                 on;\nproxy_http_version                      1.1;\nproxy_cookie_domain                     off;\nproxy_cookie_path                       off;\nproxy_redirect                          off;\n"` |
| `global.authSidecar.enabled`                              | bool   | Enables or disables the auth sidecar component.                                                                                                                                                                    | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.authSidecar.port`                                 | int    | Port used by the auth sidecar.                                                                                                                                                                                     | `8084`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.authSidecar.pullPolicy`                           | string | Image pull policy for the auth sidecar container.                                                                                                                                                                  | `"IfNotPresent"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| `global.authSidecar.repository`                           | string | Container image repository for the auth sidecar.                                                                                                                                                                   | `"quay.io/astronomer/ap-auth-sidecar"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.authSidecar.resources.limits.cpu`                 | string | Maximum CPU resources for the auth sidecar.                                                                                                                                                                        | `"1000m"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| `global.authSidecar.resources.limits.memory`              | string | Maximum memory for the auth sidecar.                                                                                                                                                                               | `"1024Mi"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| `global.authSidecar.resources.requests.cpu`               | string | Minimum guaranteed CPU resources for the auth sidecar.                                                                                                                                                             | `"500m"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| `global.authSidecar.resources.requests.memory`            | string | Minimum guaranteed memory for the auth sidecar.                                                                                                                                                                    | `"512Mi"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| `global.authSidecar.securityContext`                      | object | Security context settings for the auth sidecar.                                                                                                                                                                    | `{}`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.authSidecar.tag`                                  | string | Version tag for the auth sidecar container image.                                                                                                                                                                  | `"1.27.2"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| `global.azure.enabled`                                    | bool   | Enables or disables Azure-specific configurations.                                                                                                                                                                 | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.baseDomain`                                       | string | Specifies the base domain for the platform.                                                                                                                                                                        | `nil`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| `global.clusterRoles`                                     | bool   | Configures cluster-wide roles.                                                                                                                                                                                     | `true`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.customLogging.enabled`                            | bool   | Enables or disables custom logging configurations.                                                                                                                                                                 | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.customLogging.extraEnv`                           | list   | Additional environment variables for custom logging.                                                                                                                                                               | `[]`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.customLogging.host`                               | string | Host address for the custom logging service.                                                                                                                                                                       | `""`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.customLogging.port`                               | string | Port for the custom logging service.                                                                                                                                                                               | `""`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.customLogging.scheme`                             | string | Connection scheme (e.g., HTTP/HTTPS) for the custom logging service.                                                                                                                                               | `"https"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| `global.customLogging.secret`                             | string | Secret used for authenticating the custom logging service.                                                                                                                                                         | `""`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.dagOnlyDeployment.enabled`                        | bool   | Enables or disables deployment of DAGs only.                                                                                                                                                                       | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.dagOnlyDeployment.persistence`                    | object | Persistence configuration for the DAG-only deployment.                                                                                                                                                             | `{}`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.dagOnlyDeployment.repository`                     | string | Repository used for the DAG-only deployment.                                                                                                                                                                       | `"quay.io/astronomer/ap-dag-deploy"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.dagOnlyDeployment.resources`                      | object | Resource allocation settings for the DAG-only deployment.                                                                                                                                                          | `{}`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.dagOnlyDeployment.securityContexts.pod.fsGroup`   | int    | Filesystem group ID for the DAG-only deployment pods.                                                                                                                                                              | `50000`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.dagOnlyDeployment.serviceAccount.create`          | bool   | Enable or disable creation of service account and rolebindings for the `dag-deploy` server. Default set to `true`, so that a service account and rolebinding is created for the Pod that handles dag-only deploys. | `true`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.dagOnlyDeployment.tag`                            | string | Version tag for the DAG-only deployment container image.                                                                                                                                                           | `"0.6.3"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| `global.defaultDenyNetworkPolicy`                         | bool   | Enables or disables the default deny-all network policy.                                                                                                                                                           | `true`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.deployRollbackEnabled`                            | bool   | Enables or disables rollback during deployment failures.                                                                                                                                                           | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.disableManageClusterScopedResources`              | bool   | Disables management of cluster-scoped resources by the platform.                                                                                                                                                   | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.enableArgoCDAnnotation`                           | bool   | Enables ArgoCD annotations for platform components.                                                                                                                                                                | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.enableHoustonInternalAuthorization`               | bool   | Enables internal authorization for Houston API.                                                                                                                                                                    | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.enablePerHostIngress`                             | bool   | Enables per-host ingress rules.                                                                                                                                                                                    | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.extraAnnotations`                                 | object | Additional Kubernetes annotations for resources.                                                                                                                                                                   | `{}`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.features.namespacePools.createRbac`               | bool   | Creates RBAC for namespace pools.                                                                                                                                                                                  | `true`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.features.namespacePools.enabled`                  | bool   | Enables or disables namespace pooling.                                                                                                                                                                             | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.features.namespacePools.namespaces.create`        | bool   | Automatically creates namespaces for the namespace pool.                                                                                                                                                           | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.features.namespacePools.namespaces.names`         | list   | Names of the namespaces to include in the namespace pool.                                                                                                                                                          | `[]`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.helmRepo`                                         | string | Helm chart repository for the platform.                                                                                                                                                                            | `"https://helm.astronomer.io"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| `global.istio.enabled`                                    | bool   | Enables or disables Istio integration.                                                                                                                                                                             | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.istio.rootNamespace`                              | string | Root namespace for Istio resources.                                                                                                                                                                                | `"istio-config"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| `global.logging.indexNamePrefix`                          | string | Prefix for logging index names.                                                                                                                                                                                    | `nil`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| `global.loggingSidecar.customConfig`                      | bool   | Custom configuration for the logging sidecar.                                                                                                                                                                      | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.loggingSidecar.enabled`                           | bool   | Enables or disables the logging sidecar.                                                                                                                                                                           | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.loggingSidecar.extraEnv`                          | list   | Additional environment variables for the logging sidecar.                                                                                                                                                          | `[]`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.loggingSidecar.indexPattern`                      | string | Index pattern for logs collected by the logging sidecar.                                                                                                                                                           | `nil`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| `global.loggingSidecar.name`                              | string | Name of the logging sidecar container.                                                                                                                                                                             | `"sidecar-log-consumer"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| `global.loggingSidecar.repository`                        | string | Repository for the logging sidecar container image.                                                                                                                                                                | `"quay.io/astronomer/ap-vector"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| `global.loggingSidecar.resources`                         | object | Resource allocation settings for the logging sidecar.                                                                                                                                                              | `{}`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.loggingSidecar.securityContext`                   | object | Security context settings for the logging sidecar.                                                                                                                                                                 | `{}`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.loggingSidecar.tag`                               | string | Version tag for the logging sidecar container image.                                                                                                                                                               | `"0.42.0"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| `global.manualNamespaceNamesEnabled`                      | bool   | Allows manual naming of namespaces instead of auto-generated names.                                                                                                                                                | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.namespaceFreeFormEntry`                           | bool   | Enables freeform entry of namespace names.                                                                                                                                                                         | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.nats.enabled`                                     | bool   | Enables or disables the NATS messaging system.                                                                                                                                                                     | `true`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.nats.jetStream.enabled`                           | bool   | Enables JetStream functionality for NATS.                                                                                                                                                                          | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.nats.jetStream.tls`                               | bool   | Configures TLS for JetStream connections.                                                                                                                                                                          | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.nats.replicas`                                    | int    | Specifies the number of replicas for NATS.                                                                                                                                                                         | `3`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| `global.networkNSLabels`                                  | bool   | Custom labels for network namespace resources.                                                                                                                                                                     | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.networkPolicy.enabled`                            | bool   | Enables or disables network policies for the platform.                                                                                                                                                             | `true`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.nodeExporterSccEnabled`                           | bool   | Enables the SCC (Security Context Constraints) for the node exporter in OpenShift.                                                                                                                                 | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.openshiftEnabled`                                 | bool   | Enables compatibility with OpenShift environments.                                                                                                                                                                 | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.pgbouncer.enabled`                                | bool   | Enables or disables the PgBouncer connection pooling service.                                                                                                                                                      | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.pgbouncer.extraEnv`                               | list   | Additional environment variables for PgBouncer.                                                                                                                                                                    | `[]`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.pgbouncer.extraLabels`                            | list   | Extra labels for PgBouncer resources.                                                                                                                                                                              | `[]`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.pgbouncer.gssSupport`                             | bool   | Enables GSS (Generic Security Services) support in PgBouncer.                                                                                                                                                      | `true`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.pgbouncer.krb5ConfSecretName`                     | string | Specifies the secret name for the Kerberos configuration file for PgBouncer.                                                                                                                                       | `"krb5.conf"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| `global.pgbouncer.password`                               | string | Configures the password for connecting to PgBouncer.                                                                                                                                                               | `"postgres"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
| `global.pgbouncer.servicePort`                            | string | Specifies the service port for PgBouncer.                                                                                                                                                                          | `"5432"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| `global.pgbouncer.username`                               | string | Configures the username for connecting to PgBouncer.                                                                                                                                                               | `"postgres"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
| `global.platformNodePool.affinity`                        | object | Affinity rules for scheduling platform node pool resources.                                                                                                                                                        | `{}`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.platformNodePool.nodeSelector`                    | object | Node selector for assigning platform node pool resources.                                                                                                                                                          | `{}`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.platformNodePool.tolerations`                     | list   | Tolerations for scheduling platform node pool resources on tainted nodes.                                                                                                                                          | `[]`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.podAnnotations`                                   | object | Additional annotations for all platform pods.                                                                                                                                                                      | `{}`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.podDisruptionBudgetsEnabled`                      | bool   | Enables Pod Disruption Budgets to manage voluntary disruptions to platform pods.                                                                                                                                   | `true`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.postgresqlEnabled`                                | bool   | Enables or disables the integrated PostgreSQL database.                                                                                                                                                            | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.privateCaCerts`                                   | list   | Configures private CA (Certificate Authority) certificates for the platform.                                                                                                                                       | `[]`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.privateCaCertsAddToHost.addToContainerd`          | bool   | Adds private CA certificates to containerd.                                                                                                                                                                        | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.privateCaCertsAddToHost.addToDockerd`             | bool   | Adds private CA certificates to Docker daemon.                                                                                                                                                                     | `true`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.privateCaCertsAddToHost.certCopier.pullPolicy`    | string | Image pull policy for the cert copier container used for private CA certificates.                                                                                                                                  | `"IfNotPresent"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| `global.privateCaCertsAddToHost.certCopier.repository`    | string | Repository URL for the cert copier container used for private CA certificates.                                                                                                                                     | `"quay.io/astronomer/ap-base"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| `global.privateCaCertsAddToHost.certCopier.tag`           | string | Tag for the cert copier container image.                                                                                                                                                                           | `"3.18.9"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| `global.privateCaCertsAddToHost.containerdCertConfigPath` | string | Configuration path for containerd private CA certificates.                                                                                                                                                         | `"/etc/containerd/certs.d"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| `global.privateCaCertsAddToHost.containerdConfigToml`     | string | TOML configuration file for containerd CA setup.                                                                                                                                                                   | `nil`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| `global.privateCaCertsAddToHost.containerdHostPath`       | string | Host path for the containerd configuration files.                                                                                                                                                                  | `"/etc/containerd"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| `global.privateCaCertsAddToHost.containerdTolerations`    | list   | Tolerations for the cert copier container in containerd environments.                                                                                                                                              | `[]`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.privateCaCertsAddToHost.containerdnodeAffinitys`  | list   | Node affinity rules for containerd cert copier.                                                                                                                                                                    | `[]`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| `global.privateCaCertsAddToHost.enabled`                  | bool   | Enables the setup of private CA certificates for the host.                                                                                                                                                         | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.privateCaCertsAddToHost.hostDirectory`            | string | Directory on the host to store private CA certificates.                                                                                                                                                            | `"/etc/docker/certs.d"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.privateCaCertsAddToHost.priorityClassName`        | string | Priority class name for the cert copier container.                                                                                                                                                                 | `nil`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| `global.privateRegistry.enabled`                          | bool   | Enables or disables the use of a private Docker registry.                                                                                                                                                          | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.privateRegistry.repository`                       | string | Specifies the repository URL for the private Docker registry.                                                                                                                                                      | `nil`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| `global.privateRegistry.secretName`                       | string | Kubernetes secret name for accessing the private registry.                                                                                                                                                         | `nil`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| `global.prometheusPostgresExporterEnabled`                | bool   | Enables or disables the Prometheus Postgres Exporter.                                                                                                                                                              | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.rbacEnabled`                                      | bool   | Enables Role-Based Access Control (RBAC) for the platform.                                                                                                                                                         | `true`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.sccEnabled`                                       | bool   | Enables Security Context Constraints (SCC) for OpenShift environments.                                                                                                                                             | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.singleNamespace`                                  | bool   | Configures the platform to operate within a single namespace.                                                                                                                                                      | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.ssl.enabled`                                      | bool   | Enables SSL for platform communication.                                                                                                                                                                            | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.ssl.grafana.sslmode`                              | string | SSL mode configuration for Grafana.                                                                                                                                                                                | `"require"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| `global.ssl.mode`                                         | string | Global SSL mode configuration for the platform.                                                                                                                                                                    | `"prefer"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| `global.stan.enabled`                                     | bool   | Enables or disables the STAN (NATS Streaming) service.                                                                                                                                                             | `true`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `global.stan.replicas`                                    | int    | Number of replicas for the STAN service.                                                                                                                                                                           | `3`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| `global.taskUsageMetricsEnabled`                          | bool   | Enables task usage metrics collection for the platform.                                                                                                                                                            | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| `global.tlsSecret`                                        | string | Specifies the Kubernetes secret for TLS certificates.                                                                                                                                                              | `"astronomer-tls"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| `global.veleroEnabled`                                    | bool   | Enables or disables Velero for backups and restores.                                                                                                                                                               | `false`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |

## Grafana

| Parameter                           | Type   | Description                              | Default    |
| ----------------------------------- | ------ | ---------------------------------------- | ---------- |
| `grafana.dashboards`                | object | Preconfigured dashboards for Grafana.    | `{}`       |
| `grafana.extraEnvVars`              | list   | Extra environment variables for Grafana. | `[]`       |
| `grafana.resources.limits.cpu`      | string | CPU resource limit for Grafana.          | `"500m"`   |
| `grafana.resources.limits.memory`   | string | Memory resource limit for Grafana.       | `"1024Mi"` |
| `grafana.resources.requests.cpu`    | string | CPU resource request for Grafana.        | `"250m"`   |
| `grafana.resources.requests.memory` | string | Memory resource request for Grafana.     | `"512Mi"`  |

## Kibana

| Parameter                          | Type   | Description                         | Default    |
| ---------------------------------- | ------ | ----------------------------------- | ---------- |
| `kibana.resources.limits.cpu`      | string | CPU resource limit for Kibana.      | `"500m"`   |
| `kibana.resources.limits.memory`   | string | Memory resource limit for Kibana.   | `"1024Mi"` |
| `kibana.resources.requests.cpu`    | string | CPU resource request for Kibana.    | `"250m"`   |
| `kibana.resources.requests.memory` | string | Memory resource request for Kibana. | `"512Mi"`  |

## Kube-state

| Parameter                              | Type   | Description                                     | Default    |
| -------------------------------------- | ------ | ----------------------------------------------- | ---------- |
| `kube-state.resources.limits.cpu`      | string | CPU resource limit for Kube State Metrics.      | `"500m"`   |
| `kube-state.resources.limits.memory`   | string | Memory resource limit for Kube State Metrics.   | `"1024Mi"` |
| `kube-state.resources.requests.cpu`    | string | CPU resource request for Kube State Metrics.    | `"250m"`   |
| `kube-state.resources.requests.memory` | string | Memory resource request for Kube State Metrics. | `"512Mi"`  |

## NATS

| Parameter                             | Type   | Description                                                | Default   |
| ------------------------------------- | ------ | ---------------------------------------------------------- | --------- |
| `nats.affinity.<<`                    | object | Affinity rules for scheduling NATS pods on specific nodes. | `{}`      |
| `nats.nats.resources.limits.cpu`      | string | CPU resource limit for the NATS service.                   | `"250m"`  |
| `nats.nats.resources.limits.memory`   | string | Memory resource limit for the NATS service.                | `"100Mi"` |
| `nats.nats.resources.requests.cpu`    | string | CPU resource request for the NATS service.                 | `"75m"`   |
| `nats.nats.resources.requests.memory` | string | Memory resource request for the NATS service.              | `"30Mi"`  |
| `nats.nodeSelector.<<`                | object | Node selector for scheduling NATS pods.                    | `{}`      |
| `nats.tolerations`                    | list   | Tolerations for scheduling NATS pods on tainted nodes.     | `[]`      |

## nginx

| Parameter                                        | Type   | Description                                                        | Default    |
| ------------------------------------------------ | ------ | ------------------------------------------------------------------ | ---------- |
| `nginx.defaultBackend.resources.limits.cpu`      | string | CPU resource limit for the NGINX default backend.                  | `"120m"`   |
| `nginx.defaultBackend.resources.limits.memory`   | string | Memory resource limit for the NGINX default backend.               | `"100Mi"`  |
| `nginx.defaultBackend.resources.requests.cpu`    | string | CPU resource request for the NGINX default backend.                | `"100m"`   |
| `nginx.defaultBackend.resources.requests.memory` | string | Memory resource request for the NGINX default backend.             | `"50Mi"`   |
| `nginx.ingressAnnotations`                       | object | Custom annotations to apply to NGINX ingress resources.            | `{}`       |
| `nginx.loadBalancerIP`                           | string | Specifies a static IP for the NGINX load balancer.                 | `nil`      |
| `nginx.loadBalancerSourceRanges`                 | list   | Restricts access to the NGINX load balancer to specific IP ranges. | `[]`       |
| `nginx.resources.limits.cpu`                     | string | CPU resource limit for the NGINX controller.                       | `"1"`      |
| `nginx.resources.limits.memory`                  | string | Memory resource limit for the NGINX controller.                    | `"2048Mi"` |
| `nginx.resources.requests.cpu`                   | string | CPU resource request for the NGINX controller.                     | `"500m"`   |
| `nginx.resources.requests.memory`                | string | Memory resource request for the NGINX controller.                  | `"1024Mi"` |

## Prometheus

| Parameter                                                          | Type   | Description                                                                          | Default   |
| ------------------------------------------------------------------ | ------ | ------------------------------------------------------------------------------------ | --------- |
| `prometheus-blackbox-exporter.astroServices.commander.enabled`     | bool   | Enables monitoring for the Commander service using Prometheus Blackbox Exporter.     | `true`    |
| `prometheus-blackbox-exporter.astroServices.elasticsearch.enabled` | bool   | Enables monitoring for the Elasticsearch service using Prometheus Blackbox Exporter. | `true`    |
| `prometheus-blackbox-exporter.astroServices.grafana.enabled`       | bool   | Enables monitoring for the Grafana service using Prometheus Blackbox Exporter.       | `true`    |
| `prometheus-blackbox-exporter.astroServices.houston.enabled`       | bool   | Enables monitoring for the Houston service using Prometheus Blackbox Exporter.       | `true`    |
| `prometheus-blackbox-exporter.astroServices.kibana.enabled`        | bool   | Enables monitoring for the Kibana service using Prometheus Blackbox Exporter.        | `true`    |
| `prometheus-blackbox-exporter.astroServices.registry.enabled`      | bool   | Enables monitoring for the Registry service using Prometheus Blackbox Exporter.      | `true`    |
| `prometheus-blackbox-exporter.resources.limits.cpu`                | string | CPU resource limit for Prometheus Blackbox Exporter.                                 | `"100m"`  |
| `prometheus-blackbox-exporter.resources.limits.memory`             | string | Memory resource limit for Prometheus Blackbox Exporter.                              | `"200Mi"` |
| `prometheus-blackbox-exporter.resources.requests.cpu`              | string | CPU resource request for Prometheus Blackbox Exporter.                               | `"50m"`   |
| `prometheus-blackbox-exporter.resources.requests.memory`           | string | Memory resource request for Prometheus Blackbox Exporter.                            | `"70Mi"`  |
| `prometheus.configMapReloader.resources.limits.cpu`                | string | CPU resource limit for Prometheus ConfigMap Reloader.                                | `"100m"`  |
| `prometheus.configMapReloader.resources.limits.memory`             | string | Memory resource limit for Prometheus ConfigMap Reloader.                             | \`"25Mi"  |
| `prometheus.configMapReloader.`resources.requests.cpu\`\`          | string | CPU resource request for Prometheus ConfigMap Reloader.                              | `"100m"`  |
| `prometheus.configMapReloader.`resources.requests.memory\`\`       | string | Memory resource request for Prometheus ConfigMap Reloader.                           | `"25Mi"`  |
| `prometheus.persistence.enabled`                                   | bool   | Enables or disables persistence for Prometheus data.                                 | `true`    |
| `prometheus.persistence.size`                                      | string | Size of the persistent volume for Prometheus.                                        | `"150Gi"` |
| `prometheus.podLabels`                                             | object | Custom labels to apply to Prometheus pods.                                           | `{}`      |
| `prometheus.resources.limits.cpu`                                  | string | CPU resource limit for Prometheus.                                                   | `"2000m"` |
| `prometheus.resources.limits.memory`                               | string | Memory resource limit for Prometheus.                                                | `"8Gi"`   |
| `prometheus.resources.requests.cpu`                                | string | CPU resource request for Prometheus.                                                 | `"1000m"` |
| `prometheus.resources.requests.memory`                             | string | Memory resource request for Prometheus.                                              | `"4Gi"`   |
| `prometheus.retention`                                             | string | Data retention period for Prometheus metrics.                                        | `"15d"`   |

## STAN

| Parameter                             | Type   | Description                                                     | Default   |
| ------------------------------------- | ------ | --------------------------------------------------------------- | --------- |
| `stan.affinity.<<`                    | object | Affinity rules for scheduling STAN pods on specific nodes.      | `{}`      |
| `stan.init.resources.limits.cpu`      | string | CPU resource limit for the STAN initialization containers.      | `"250m"`  |
| `stan.init.resources.limits.memory`   | string | Memory resource limit for the STAN initialization containers.   | `"100Mi"` |
| `stan.init.resources.requests.cpu`    | string | CPU resource request for the STAN initialization containers.    | `"75m"`   |
| `stan.init.resources.requests.memory` | string | Memory resource request for the STAN initialization containers. | `"30Mi"`  |
| `stan.nodeSelector.<<`                | object | Node selector for scheduling STAN pods on specific nodes.       | `{}`      |
| `stan.stan.resources.limits.cpu`      | string | CPU resource limit for the primary STAN service.                | `"250m"`  |
| `stan.stan.resources.limits.memory`   | string | Memory resource limit for the primary STAN service.             | `"100Mi"` |
| `stan.stan.resources.requests.cpu`    | string | CPU resource request for the primary STAN service.              | `"75m"`   |
| `stan.stan.resources.requests.memory` | string | Memory resource request for the primary STAN service.           | `"30Mi"`  |
| `stan.tolerations`                    | list   | Tolerations for scheduling STAN pods on tainted nodes.          | `[]`      |

## Tags

| Parameter         | Type | Description                                                                       | Default |
| ----------------- | ---- | --------------------------------------------------------------------------------- | ------- |
| `tags.logging`    | bool | Tag used for resources related to logging functionality.                          | `true`  |
| `tags.monitoring` | bool | Tag used for resources related to monitoring functionality.                       | `true`  |
| `tags.platform`   | bool | Tag used for resources related to platform-level configuration or infrastructure. | `true`  |
| `tags.stan`       | bool | Tag used for resources related to the STAN service.                               | `true`  |
