################################################### # Global Defaults ################################################### global: hostname: example.com # Taint tolerations for nodes tolerations: - key: "taints.tradelocker.com/ops-workers" operator: "Exists" effect: "NoSchedule" # Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods. affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: workers.tradelocker.com/ops-workers operator: Exists - key: kubernetes.io/arch operator: In values: - amd64 - arm64 ################################################### # Worker Deployment Configuration ################################################### worker: enabled: true # Image of the app container image: repository: 418295681559.dkr.ecr.us-east-1.amazonaws.com/docker-hub/posthog/posthog@sha256 tag: "becb6edf97b93e6be79cb2432afeb18833ad8b967de3d6e42f287bde26d72a57" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent command: ["/bin/sh", "-c"] args: ["./bin/docker-worker-celery --with-scheduler"] replicas: 2 strategy: type: RollingUpdate envFrom: env: OTEL_SDK_DISABLED: "true" DISABLE_SECURE_SSL_REDIRECT: "true" IS_BEHIND_PROXY: "true" DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" CLICKHOUSE_HOST: "clickhouse" CLICKHOUSE_DATABASE: "posthog" CLICKHOUSE_CLUSTER: "posthog" CLICKHOUSE_SECURE: "false" CLICKHOUSE_VERIFY: "false" CLICKHOUSE_API_USER: "api" CLICKHOUSE_API_PASSWORD: "apipass" CLICKHOUSE_APP_USER: "app" CLICKHOUSE_APP_PASSWORD: "apppass" CLICKHOUSE_LOGS_CLUSTER_HOST: "clickhouse" CLICKHOUSE_LOGS_CLUSTER_PORT: "9000" API_QUERIES_PER_TEAM: '{"1": 100}' KAFKA_HOSTS: "kafka" KAFKA_SECURITY_PROTOCOL: SSL REDIS_URL: "redis://redis7:6379/" PGHOST: db PGUSER: posthog PGPASSWORD: posthog DEPLOYMENT: hobby CDP_API_URL: "http://plugins:6738" FLAGS_REDIS_ENABLED: true SITE_URL: https://$DOMAIN SECRET_KEY: $POSTHOG_SECRET OBJECT_STORAGE_ENABLED: true OBJECT_STORAGE_REGION: us-east-1 OBJECT_STORAGE_BUCKET: posthog_bucket SESSION_RECORDING_V2_S3_ENABLED: true SESSION_RECORDING_V2_S3_REGION: us-east-1 SESSION_RECORDING_V2_S3_BUCKET: posthog_bucket SESSION_RECORDING_V2_S3_ENDPOINT: "s3_endpoint" SESSION_RECORDING_V2_S3_ACCESS_KEY_ID: "" SESSION_RECORDING_V2_S3_SECRET_ACCESS_KEY: "" RECORDING_API_URL: http://plugins:6738 ENCRYPTION_SALT_KEYS: $ENCRYPTION_SALT_KEYS POSTHOG_SKIP_MIGRATION_CHECKS: "1" volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m ports: pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 3 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Web Deployment Configuration ################################################### web: enabled: true # Image of the app container image: repository: 418295681559.dkr.ecr.us-east-1.amazonaws.com/docker-hub/posthog/posthog@sha256 tag: "becb6edf97b93e6be79cb2432afeb18833ad8b967de3d6e42f287bde26d72a57" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent strategy: type: RollingUpdate replicas: 2 envFrom: env: OTEL_SDK_DISABLED: "true" DISABLE_SECURE_SSL_REDIRECT: "true" IS_BEHIND_PROXY: "true" DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" CLICKHOUSE_HOST: "clickhouse" CLICKHOUSE_DATABASE: "posthog" CLICKHOUSE_CLUSTER: "posthog" CLICKHOUSE_SECURE: "false" CLICKHOUSE_VERIFY: "false" CLICKHOUSE_API_USER: "api" CLICKHOUSE_API_PASSWORD: "apipass" CLICKHOUSE_APP_USER: "app" CLICKHOUSE_APP_PASSWORD: "apppass" CLICKHOUSE_LOGS_CLUSTER_HOST: "clickhouse" CLICKHOUSE_LOGS_CLUSTER_PORT: "9000" CLICKHOUSE_LOGS_CLUSTER_USER: user CLICKHOUSE_LOGS_CLUSTER_PASSWORD: pass CLICKHOUSE_LOGS_CLUSTER_DATABASE: "posthog" CLICKHOUSE_LOGS_CLUSTER_SECURE: "false" API_QUERIES_PER_TEAM: '{"1": 100}' KAFKA_HOSTS: "kafka" KAFKA_SECURITY_PROTOCOL: SSL REDIS_URL: "redis://redis7:6379/" PGHOST: db PGUSER: posthog PGPASSWORD: posthog DEPLOYMENT: hobby CDP_API_URL: "http://plugins:6738" FLAGS_REDIS_ENABLED: true SITE_URL: https://$DOMAIN LIVESTREAM_HOST: "https://${DOMAIN}/livestream" SECRET_KEY: $POSTHOG_SECRET OBJECT_STORAGE_ENABLED: true OBJECT_STORAGE_REGION: us-east-1 OBJECT_STORAGE_BUCKET: posthog_bucket SESSION_RECORDING_V2_S3_ENABLED: true SESSION_RECORDING_V2_S3_REGION: us-east-1 SESSION_RECORDING_V2_S3_BUCKET: posthog_bucket SESSION_RECORDING_V2_S3_ENDPOINT: "s3_endpoint" SESSION_RECORDING_V2_S3_ACCESS_KEY_ID: "" SESSION_RECORDING_V2_S3_SECRET_ACCESS_KEY: "" RECORDING_API_URL: http://plugins:6738 ENCRYPTION_SALT_KEYS: $ENCRYPTION_SALT_KEYS OTEL_SERVICE_NAME: "posthog" OTEL_EXPORTER_OTLP_ENDPOINT: "" USE_GRANIAN: "true" GRANIAN_WORKERS: "1" OPT_OUT_CAPTURE: false volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 startupProbe: enabled: false readinessProbe: enabled: true failureThreshold: 3 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 initialDelaySeconds: 10 httpGet: path: /_health port: 8000 exec: {} tcpSocket: {} livenessProbe: enabled: true failureThreshold: 10 periodSeconds: 30 successThreshold: 1 timeoutSeconds: 1 initialDelaySeconds: 30 # Must specify either one of the following field when enabled httpGet: path: /_health port: 8000 exec: {} tcpSocket: {} # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # Security Context for the pod securityContext: # fsGroup: 2000 command: ["/bin/sh", "-c"] args: - | python ${DEBUG:+ -m debugpy --listen 127.0.0.1:5678} -m granian \ --interface asgi \ posthog.asgi:application \ --host 0.0.0.0 \ --log-level debug \ --workers $GRANIAN_WORKERS # List of ports for the primary container ports: - containerPort: 8000 name: http protocol: TCP service: type: ClusterIP ports: - port: 80 name: http protocol: TCP targetPort: http pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 3 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Plugins Deployment Configuration ################################################### plugins: enabled: true strategy: type: RollingUpdate replicas: 2 envFrom: env: DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" PERSONS_DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" BEHAVIORAL_COHORTS_DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" KAFKA_HOSTS: "kafka:9092" KAFKA_PRODUCER_METADATA_BROKER_LIST: "kafka:9092" KAFKA_PRODUCER_SECURITY_PROTOCOL: ssl KAFKA_CONSUMER_METADATA_BROKER_LIST: "kafka:9092" KAFKA_CONSUMER_SECURITY_PROTOCOL: ssl KAFKA_CDP_PRODUCER_METADATA_BROKER_LIST: "kafka:9092" KAFKA_CDP_PRODUCER_SECURITY_PROTOCOL: ssl KAFKA_WAREHOUSE_PRODUCER_METADATA_BROKER_LIST: "kafka:9092" KAFKA_WAREHOUSE_PRODUCER_SECURITY_PROTOCOL: ssl KAFKA_METRICS_PRODUCER_METADATA_BROKER_LIST: "kafka:9092" KAFKA_METRICS_PRODUCER_SECURITY_PROTOCOL: ssl KAFKA_WARPSTREAM_PRODUCER_METADATA_BROKER_LIST: "kafka:9092" KAFKA_WARPSTREAM_PRODUCER_SECURITY_PROTOCOL: ssl REDIS_URL: "redis://redis7:6379/" CLICKHOUSE_HOST: "clickhouse" CLICKHOUSE_DATABASE: "posthog" CLICKHOUSE_CLUSTER: "posthog" CLICKHOUSE_SECURE: "false" CLICKHOUSE_VERIFY: "false" COOKIELESS_REDIS_HOST: redis7 COOKIELESS_REDIS_PORT: 6379 SESSION_RECORDING_API_REDIS_HOST: redis7 SESSION_RECORDING_API_REDIS_PORT: 6379 SITE_URL: https://$DOMAIN SECRET_KEY: $POSTHOG_SECRET OBJECT_STORAGE_ENABLED: true OBJECT_STORAGE_REGION: us-east-1 OBJECT_STORAGE_BUCKET: posthog_bucket SESSION_RECORDING_V2_S3_ENABLED: true SESSION_RECORDING_V2_S3_REGION: us-east-1 SESSION_RECORDING_V2_S3_BUCKET: posthog_bucket SESSION_RECORDING_V2_S3_ENDPOINT: "s3_endpoint" SESSION_RECORDING_V2_S3_ACCESS_KEY_ID: "" SESSION_RECORDING_V2_S3_SECRET_ACCESS_KEY: "" CDP_REDIS_HOST: redis7 CDP_REDIS_PORT: 6379 LOGS_REDIS_HOST: redis7 LOGS_REDIS_PORT: 6379 LOGS_REDIS_TLS: "false" ENCRYPTION_SALT_KEYS: $ENCRYPTION_SALT_KEYS CYCLOTRON_DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" OTEL_EXPORTER_OTLP_ENDPOINT: "" volumes: volumeMounts: revisionHistoryLimit: 5 # Image of the app container image: repository: 418295681559.dkr.ecr.us-east-1.amazonaws.com/docker-hub/posthog/posthog-node@sha256 tag: "ae3e336a0b5bb91202915b8bc62dc4f20136fd5dbe1d6ca79a4e2e18dac16527" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent # Startup, Readiness and Liveness probes startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # Security Context for the pod securityContext: # fsGroup: 2000 # Command for primary container command: ["node", "nodejs/dist/index.js"] # Args for primary contaner args: [] # List of ports for the primary container ports: - containerPort: 6738 name: http protocol: TCP service: type: ClusterIP ports: - port: 80 name: http protocol: TCP targetPort: http pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 3 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Livestream Deployment Configuration ################################################### livestream: enabled: true # Image of the app container image: repository: ghcr.io/posthog/posthog/livestream@sha256 tag: "9a0bf9bdf08e6cce8249f4bfacf0f49f00025a5a73396a9a73685021cb83d76c" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent strategy: type: RollingUpdate # Replicas to be created replicas: 2 imagePullSecrets: "" envFrom: env: LIVESTREAM_JWT_SECRET: ${POSTHOG_SECRET} LIVESTREAM_KAFKA_BROKERS: "kafka:9094" LIVESTREAM_KAFKA_TOPIC: events_plugin_ingestion LIVESTREAM_KAFKA_GROUP_ID: livestream LIVESTREAM_KAFKA_SECURITY_PROTOCOL: SSL LIVESTREAM_KAFKA_SESSION_RECORDING_SECURITY_PROTOCOL: SSL LIVESTREAM_MMDB_PATH: /GeoLite2-City.mmdb LIVESTREAM_REDIS_ADDRESS: redis7 LIVESTREAM_REDIS_PORT: 6379 volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # Security Context for the pod securityContext: # fsGroup: 2000 # Command for primary container command: [] # Args for primary contaner args: [] # List of ports for the primary container ports: - containerPort: 8080 name: http protocol: TCP service: type: ClusterIP ports: - port: 80 name: http protocol: TCP targetPort: http pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 3 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Fetaure flags Deployment Configuration ################################################### featureFlags: enabled: true # Image of the app container image: repository: ghcr.io/posthog/posthog/feature-flags@sha256 tag: "bc2b75b8c8233bfba2e5c8927204cb8b5ca329a40d2a1b44a777754431f27824" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent strategy: type: RollingUpdate # Replicas to be created replicas: 2 imagePullSecrets: "" envFrom: env: WRITE_DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" READ_DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" PERSONS_WRITE_DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" PERSONS_READ_DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" MAXMIND_DB_PATH: "/app/share/GeoLite2-City.mmdb" # Shared Redis for non-critical path (analytics, billing, cookieless) REDIS_URL: "redis://redis7:6379/" # Optional: Use separate Redis URL for read replicas # REDIS_READER_URL: 'redis://redis-replica:6379/' # Optional: Increase Redis timeout (default is 100ms) # REDIS_TIMEOUT_MS: 200 # Dedicated Redis database for critical path (team cache + flags cache) # Hobby deployments start in Mode 1 (shared-only). Developers override in docker-compose.dev.yml for Mode 2. # FLAGS_REDIS_URL: 'redis://redis7:6379/1' # Optional: Use separate Flags Redis URL for read replicas # FLAGS_REDIS_READER_URL: 'redis://redis-replica:6379/1' ADDRESS: "0.0.0.0:3001" RUST_LOG: "info" OBJECT_STORAGE_BUCKET: bucket COOKIELESS_REDIS_HOST: redis7 COOKIELESS_REDIS_PORT: 6379 volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # Security Context for the pod securityContext: # fsGroup: 2000 # Command for primary container command: [] # Args for primary contaner args: [] # List of ports for the primary container ports: - containerPort: 3001 name: http protocol: TCP service: type: ClusterIP ports: - port: 80 name: http protocol: TCP targetPort: http pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 3 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Replay capture Deployment Configuration ################################################### replayCapture: enabled: true # Image of the app container image: repository: ghcr.io/posthog/posthog/capture@sha256 tag: "e8a9057993db58b47049cd38418d2555ea6343be449b25dcd1300e8b1938e956" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent strategy: type: RollingUpdate # Replicas to be created replicas: 2 imagePullSecrets: "" envFrom: env: ADDRESS: "0.0.0.0:3000" KAFKA_TOPIC: "session_recording_snapshot_item_events" KAFKA_HOSTS: "kafka:9092" KAFKA_TLS: true REDIS_URL: "redis://redis7:6379/" CAPTURE_MODE: recordings volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # Security Context for the pod securityContext: # fsGroup: 2000 # Command for primary container command: [] # Args for primary contaner args: [] # List of ports for the primary container ports: - containerPort: 3000 name: http protocol: TCP service: type: ClusterIP ports: - port: 80 name: http protocol: TCP targetPort: http pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 3 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Capture Deployment Configuration ################################################### capture: enabled: true # Image of the app container image: repository: ghcr.io/posthog/posthog/capture@sha256 tag: "e8a9057993db58b47049cd38418d2555ea6343be449b25dcd1300e8b1938e956" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent strategy: type: RollingUpdate # Replicas to be created replicas: 2 imagePullSecrets: "" envFrom: env: ADDRESS: "0.0.0.0:3000" KAFKA_TOPIC: "events_plugin_ingestion" KAFKA_HOSTS: "kafka:9092" KAFKA_TLS: true REDIS_URL: "redis://redis7:6379/" CAPTURE_MODE: events RUST_LOG: "info,rdkafka=warn" volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # Security Context for the pod securityContext: # fsGroup: 2000 # Command for primary container command: [] # Args for primary contaner args: [] # List of ports for the primary container ports: - containerPort: 3000 name: http protocol: TCP service: type: ClusterIP ports: - port: 80 name: http protocol: TCP targetPort: http pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 3 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Capture AI Deployment Configuration ################################################### captureAi: enabled: true # Image of the app container image: repository: ghcr.io/posthog/posthog/capture@sha256 tag: "e8a9057993db58b47049cd38418d2555ea6343be449b25dcd1300e8b1938e956" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent strategy: type: RollingUpdate # Replicas to be created replicas: 2 imagePullSecrets: "" envFrom: env: ADDRESS: "0.0.0.0:3000" KAFKA_TOPIC: "events_plugin_ingestion" KAFKA_HOSTS: "kafka:9092" KAFKA_TLS: true REDIS_URL: "redis://redis7:6379/" CAPTURE_MODE: events RUST_LOG: "info,rdkafka=warn" # AI endpoint S3 blob storage (MinIO) AI_S3_BUCKET: posthog AI_S3_PREFIX: "llma/" AI_S3_REGION: us-east-1 volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # Security Context for the pod securityContext: # fsGroup: 2000 # Command for primary container command: [] # Args for primary contaner args: [] # List of ports for the primary container ports: - containerPort: 3000 name: http protocol: TCP service: type: ClusterIP ports: - port: 80 name: http protocol: TCP targetPort: http pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 3 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Capture logs Deployment Configuration ################################################### captureLogs: enabled: true # Image of the app container image: repository: ghcr.io/posthog/posthog/capture-logs@sha256 tag: "e976f03b2c3262f15f568eeb2c2e9e5c4ee118f09cd60f5bbacfc8e060993371" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent strategy: type: RollingUpdate # Replicas to be created replicas: 2 imagePullSecrets: "" envFrom: env: BIND_HOST: "0.0.0.0" BIND_PORT: "4318" RUST_LOG: info,rdkafka=warn RUST_BACKTRACE: "1" KAFKA_HOSTS: kafka:9092 KAFKA_TOPIC: logs_ingestion KAFKA_TLS: true volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # Security Context for the pod securityContext: # fsGroup: 2000 # Command for primary container command: [] # Args for primary contaner args: [] # List of ports for the primary container ports: - containerPort: 4318 name: http protocol: TCP service: type: ClusterIP ports: - port: 80 name: http protocol: TCP targetPort: http pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 3 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Property Definitions Deployment Configuration ################################################### propertyDefs: enabled: true # Image of the app container image: repository: ghcr.io/posthog/posthog/property-defs-rs@sha256 tag: "83266e9227ae87e9f030804b1a8c14b841a08bf983650abd7a51764c3843fc1d" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent strategy: type: RollingUpdate replicas: 2 envFrom: env: DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" KAFKA_HOSTS: "kafka:9092" KAFKA_TLS: true SKIP_WRITES: "false" SKIP_READS: "false" FILTER_MODE: "opt-out" volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m command: [] args: [] ports: pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 3 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Cyclotron Janitor Deployment Configuration ################################################### cyclotronJanitor: enabled: true strategy: type: RollingUpdate replicas: 2 envFrom: env: DATABASE_URL: "postgres://posthog:posthog@db:5432/cyclotron" KAFKA_HOSTS: "kafka:9092" KAFKA_TOPIC: "clickhouse_app_metrics2" volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 # Image of the app container image: repository: ghcr.io/posthog/posthog/cyclotron-janitor@sha256 tag: "63dd211bccf8a1f975daeb1a443487faec5246bf53ebaff86b76b1becb5b144b" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m command: [] args: [] ports: pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 2 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Cymbal Deployment Configuration ################################################### cymbal: enabled: true strategy: type: RollingUpdate # Replicas to be created replicas: 2 imagePullSecrets: "" envFrom: env: KAFKA_HOSTS: "kafka:9092" KAFKA_TLS: true KAFKA_CONSUMER_GROUP: cymbal KAFKA_CONSUMER_TOPIC: exceptions_ingestion OBJECT_STORAGE_BUCKET: posthog OBJECT_STORAGE_ENDPOINT: "http://seaweedfs:8333" OBJECT_STORAGE_FORCE_PATH_STYLE: "true" BIND_HOST: "0.0.0.0" BIND_PORT: "3302" DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" PERSONS_URL: "postgres://posthog:posthog@db:5432/posthog" MAXMIND_DB_PATH: "/share/GeoLite2-City.mmdb" REDIS_URL: "redis://redis7:6379/" ISSUE_BUCKETS_REDIS_URL: "redis://redis7:6379/" RUST_LOG: "info" volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 # Image of the app container image: repository: ghcr.io/posthog/posthog/cymbal@sha256 tag: "694e0199feb4b7a441baccc1758381594beb05301aa88a7c95f9fa2b55e0918c" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # Security Context for the pod securityContext: # fsGroup: 2000 # Command for primary container command: [] # Args for primary contaner args: [] # List of ports for the primary container ports: - containerPort: 3302 name: http protocol: TCP service: type: ClusterIP ports: - port: 80 name: http protocol: TCP targetPort: http pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 2 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Temporal Deployment Configuration ################################################### temporal: enabled: true strategy: type: RollingUpdate # Replicas to be created replicas: 2 imagePullSecrets: "" envFrom: env: DB: postgresql DB_PORT: 5432 POSTGRES_USER: posthog POSTGRES_PWD: posthog POSTGRES_SEEDS: db DYNAMIC_CONFIG_FILE_PATH: config/dynamicconfig/development-sql.yaml ENABLE_ES: true ES_SEEDS: elasticsearch ES_VERSION: v7 volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 # Image of the app container image: repository: 418295681559.dkr.ecr.us-east-1.amazonaws.com/docker-hub/temporalio/auto-setup tag: "1.20.0" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # Security Context for the pod securityContext: # fsGroup: 2000 # Command for primary container command: [] # Args for primary contaner args: [] # List of ports for the primary container ports: - containerPort: 7233 name: grpc protocol: TCP service: type: ClusterIP ports: - port: 7233 name: grpc protocol: TCP targetPort: grpc pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 2 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Temporal UI Deployment Configuration ################################################### temporalUi: enabled: true strategy: type: RollingUpdate # Replicas to be created replicas: 2 imagePullSecrets: "" envFrom: env: TEMPORAL_ADDRESS: temporal:7233 TEMPORAL_CORS_ORIGINS: http://localhost:3000 TEMPORAL_CSRF_COOKIE_INSECURE: true TEMPORAL_CODEC_ENDPOINT: http://localhost:8000 volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 # Image of the app container image: repository: 418295681559.dkr.ecr.us-east-1.amazonaws.com/docker-hub/temporalio/ui tag: "2.31.2" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # Security Context for the pod securityContext: # fsGroup: 2000 # Command for primary container command: [] # Args for primary contaner args: [] # List of ports for the primary container ports: - containerPort: 8080 name: http protocol: TCP service: type: ClusterIP ports: - port: 80 name: http protocol: TCP targetPort: http pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 2 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Temporal Admin Tools Deployment Configuration ################################################### temporalAdminTools: enabled: true strategy: type: RollingUpdate replicas: 2 envFrom: env: TEMPORAL_CLI_ADDRESS: temporal:7233 volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 # Image of the app container image: repository: 418295681559.dkr.ecr.us-east-1.amazonaws.com/docker-hub/temporalio/admin-tools tag: "1.20.0" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m command: [] args: [] ports: pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 2 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Temporal Django Worker Deployment Configuration ################################################### temporalDjangoWorker: enabled: true strategy: type: RollingUpdate replicas: 2 envFrom: env: OTEL_SDK_DISABLED: "true" DISABLE_SECURE_SSL_REDIRECT: "true" IS_BEHIND_PROXY: "true" DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" CLICKHOUSE_HOST: "clickhouse" CLICKHOUSE_DATABASE: "posthog" CLICKHOUSE_SECURE: "false" CLICKHOUSE_VERIFY: "false" CLICKHOUSE_API_USER: "api" CLICKHOUSE_API_PASSWORD: "apipass" CLICKHOUSE_APP_USER: "app" CLICKHOUSE_APP_PASSWORD: "apppass" API_QUERIES_PER_TEAM: '{"1": 100}' KAFKA_HOSTS: "kafka" REDIS_URL: "redis://redis7:6379/" PGHOST: db PGUSER: posthog PGPASSWORD: posthog DEPLOYMENT: hobby CDP_API_URL: "http://plugins:6738" FLAGS_REDIS_ENABLED: false TEMPORAL_HOST: temporal SITE_URL: https://$DOMAIN SECRET_KEY: $POSTHOG_SECRET volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 # Image of the app container image: repository: 418295681559.dkr.ecr.us-east-1.amazonaws.com/docker-hub/posthog/posthog tag: "posthog/posthog:release-1.43.1" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m command: [] args: [] ports: pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 2 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: ################################################### # Elasticsearch Deployment Configuration ################################################### elasticsearch: enabled: true strategy: type: RollingUpdate # Replicas to be created replicas: 2 imagePullSecrets: "" envFrom: env: cluster.routing.allocation.disk.threshold_enabled: true cluster.routing.allocation.disk.watermark.low: 512mb cluster.routing.allocation.disk.watermark.high: 256mb cluster.routing.allocation.disk.watermark.flood_stage: 128mb discovery.type: single-node ES_JAVA_OPTS: -Xms256m -Xmx256m xpack.security.enabled: false volumes: volumeMounts: # Number of ReplicaSet versions to retain revisionHistoryLimit: 5 # Image of the app container image: repository: 418295681559.dkr.ecr.us-east-1.amazonaws.com/docker-hub/library/elasticsearch tag: "7.17.28" digest: "" # if set to a non empty value, digest takes precedence on the tag pullPolicy: IfNotPresent startupProbe: enabled: false readinessProbe: enabled: false livenessProbe: enabled: false # Resources to be defined for pod resources: limits: memory: 128Mi cpu: 100m requests: memory: 128Mi cpu: 100m # List of ports for the primary container ports: - containerPort: 9200 name: http protocol: TCP service: type: ClusterIP ports: - port: 80 name: http protocol: TCP targetPort: http pdb: enabled: true maxUnavailable: 25% autoscaling: enabled: false minReplicas: 2 maxReplicas: 9 metrics: - type: Resource resource: name: cpu target: type: Utilization averageUtilization: 80 keda: enabled: false # Graceful termination timeout terminationGracePeriodSeconds: migrateJob: enabled: true image: repository: 418295681559.dkr.ecr.us-east-1.amazonaws.com/docker-hub/posthog/posthog@sha256 tag: "becb6edf97b93e6be79cb2432afeb18833ad8b967de3d6e42f287bde26d72a57" pullPolicy: IfNotPresent # annotations: # "helm.sh/hook": pre-install,pre-upgrade # "helm.sh/hook-weight": "-5" # "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded command: ["/bin/sh", "-c"] args: - | python manage.py migrate && \ python manage.py migrate_clickhouse && \ python manage.py run_async_migrations env: OTEL_SDK_DISABLED: "true" DISABLE_SECURE_SSL_REDIRECT: "true" IS_BEHIND_PROXY: "true" DATABASE_URL: "postgres://posthog:posthog@db:5432/posthog" CLICKHOUSE_HOST: "clickhouse" CLICKHOUSE_DATABASE: "posthog" CLICKHOUSE_CLUSTER: "posthog" CLICKHOUSE_SECURE: "false" CLICKHOUSE_VERIFY: "false" CLICKHOUSE_API_USER: "api" CLICKHOUSE_API_PASSWORD: "apipass" CLICKHOUSE_APP_USER: "app" CLICKHOUSE_APP_PASSWORD: "apppass" API_QUERIES_PER_TEAM: '{"1": 100}' KAFKA_HOSTS: "kafka" KAFKA_SECURITY_PROTOCOL: SSL REDIS_URL: "redis://redis7:6379/" PGHOST: db PGUSER: posthog PGPASSWORD: posthog DEPLOYMENT: hobby CDP_API_URL: "http://plugins:6738" FLAGS_REDIS_ENABLED: false SKIP_ASYNC_MIGRATIONS_SETUP: "0" resources: {} serviceAccount: create: false name: "" # Additional Labels on service account additionalLabels: # key: value # Annotations on service account annotations: # key: value ingress: enabled: true className: "" annotations: {} hosts: - host: "{{ .Values.global.hostname }}" paths: - path: /s pathType: Prefix service: replay-capture port: 80 - path: /i/v0/ai pathType: Prefix service: capture-ai port: 80 - path: /e pathType: Prefix service: capture port: 80 - path: /i/v0 pathType: Prefix service: capture port: 80 - path: /batch pathType: Prefix service: capture port: 80 - path: /capture pathType: Prefix service: capture port: 80 - path: /i/v1/logs pathType: Prefix service: capture-logs port: 80 - path: /flags pathType: Prefix service: feature-flags port: 80 - path: /public/webhooks pathType: Prefix service: plugins port: 80 - path: /public/m pathType: Prefix service: plugins port: 80 - path: /livestream pathType: Prefix service: livestream port: 80 - path: / pathType: Prefix service: web port: 80 tls: [] clickhouse: image: repository: bitnami/clickhouse tag: 25.12.5-debian-12-r0 global: imageRegistry: public.ecr.aws security: allowInsecureImages: true defaultStorageClass: "gp3-ret-enc" resources: requests: cpu: 1 memory: 2Gi limits: memory: 2Gi shards: 1 replicaCount: 1 extraOverrides: | 1 1 1 1 1000 custom_ persistence: size: "100Gi" auth: existingSecret: "clickhouse-credentials" existingSecretKey: "admin-password" podAnnotations: karpenter.sh/do-not-disrupt: "true" affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - weight: 40 podAffinityTerm: topologyKey: topology.kubernetes.io/zone labelSelector: matchLabels: app.kubernetes.io/name: "clickhouse" requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: app.kubernetes.io/name operator: In values: - clickhouse topologyKey: kubernetes.io/hostname nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: workers.tradelocker.com/ops-workers operator: Exists - key: kubernetes.io/arch operator: In values: - amd64 tolerations: - key: "taints.tradelocker.com/ops-workers-critical" operator: "Exists" effect: "NoSchedule" metrics: enabled: true serviceMonitor: enabled: true zookeeper: resources: requests: cpu: 100m memory: 450Mi ephemeral-storage: 50Mi limits: memory: 450Mi ephemeral-storage: 1Gi affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: app.kubernetes.io/name operator: In values: - zookeeper topologyKey: "kubernetes.io/hostname" nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: workers.tradelocker.com/ops-workers operator: Exists - key: kubernetes.io/arch operator: In values: - amd64 tolerations: - key: "taints.tradelocker.com/ops-workers" operator: "Exists" effect: "NoSchedule"