add dark and light mode icon

Merge pull request #28 from kerberos-io/public-release-1739963582
A new public release - 1739963586
2026-10-27 18:58:25 +00:00 · 2025-02-19 14:42:09 +01:00 · 2025-02-19 14:40:29 +01:00 · 2025-02-19 11:13:06 +00:00 · 2025-02-12 22:21:03 +01:00 · 2025-02-12 21:19:18 +00:00
31 changed files with 1175 additions and 226 deletions
@@ -0,0 +1,42 @@
+name: Deploy on Kind
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        kind: [v0.21.0, v0.22.0, v0.23.0, v0.24.0]
+    steps:
+      - name: Create k8s Kind Cluster
+        uses: helm/kind-action@v1
+        with:
+          version: ${{ matrix.kind }}
+      - name: Print Kubernetes Version
+        run: |
+          kubectl version
+      - name: Test Kubernetes Cluster
+        run: |
+          kubectl get no
+          kubectl get pods -A -o wide
+          kubectl get sc
+      - name: Checkout repository
+        uses: actions/checkout@v2
+      - name: Install Prometheus operator
+        id: install-prometheus-operator
+        run: |
+          kubectl apply -f https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.48.1/bundle.yaml
+          echo "Sleeping for 30 seconds, give time for the operator to create the CRDs" && sleep 30
+          kubectl get crd
+          kubectl get po -A -o wide
+      - name: Install Kerberos Hub helm chart
+        id: install-kerberos-hub
+        run: |
+          kubectl create namespace kerberos-hub
+          helm install hub ./charts/hub --values charts/hub/values.yaml -n kerberos-hub --create-namespace
+          echo "Sleeping for 300 seconds, give time for the helm chart to create the pods" && sleep 300
+          kubectl get pods -A -o wide
+          kubectl get pods -A -o wide | grep hub-frontend | awk '{print $3}' | grep -q '1/1' && echo "hub-frontend pod is running with status 1/1" || (echo "kerberos-hub pod is not running with status 1/1" && exit 1)
@@ -0,0 +1,43 @@
+name: Deploy on Microk8s
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  deploy:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-20.04, ubuntu-22.04, ubuntu-24.04]
+    name: MicroK8s
+    steps:
+      - uses: balchua/microk8s-actions@v0.4.3
+        with:
+          channel: "1.30/stable"
+          addons: '["dns", "dashboard", "hostpath-storage", "nvidia"]'
+      - name: Set permissions
+        run: |
+          sudo chown -f -R $USER $HOME/.kube $HOME/.config
+      - name: Test MicroK8s
+        id: list-pods
+        run: |
+          kubectl get no
+          kubectl get pods -A -o wide
+      - name: Checkout repository
+        uses: actions/checkout@v2
+      - name: Install Prometheus operator
+        id: install-prometheus-operator
+        run: |
+          kubectl apply -f https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.48.1/bundle.yaml
+          echo "Sleeping for 30 seconds, give time for the operator to create the CRDs" && sleep 30
+          kubectl get crd
+          kubectl get po -A -o wide
+      - name: Install Kerberos Hub helm chart
+        id: install-kerberos-hub
+        run: |
+          kubectl create namespace kerberos-hub
+          helm install hub ./charts/hub --values charts/hub/values.yaml -n kerberos-hub --create-namespace
+          echo "Sleeping for 300 seconds, give time for the helm chart to create the pods" && sleep 300
+          kubectl get pods -A -o wide
+          kubectl get pods -A -o wide | grep hub-frontend | awk '{print $3}' | grep -q '1/1' && echo "hub-frontend pod is running with status 1/1" || (echo "kerberos-hub pod is not running with status 1/1" && exit 1)
@@ -0,0 +1,19 @@
+name: Autofill PR description
+
+on: pull_request
+
+jobs:
+  openai-pr-description:
+    runs-on: ubuntu-22.04
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Autofill PR description if empty using OpenAI
+        uses: cedricve/azureopenai-pr-description@master
+        with:
+          github_token: ${{ secrets.TOKEN }}
+          openai_api_key: ${{ secrets.OPENAI_API_KEY }}
+          azure_openai_api_key: ${{ secrets.AZURE_OPENAI_API_KEY }}
+          azure_openai_endpoint: ${{ secrets.AZURE_OPENAI_ENDPOINT }}
+          azure_openai_version: ${{ secrets.AZURE_OPENAI_VERSION }}
+          overwrite_description: true
@@ -2,7 +2,7 @@

 Kerberos.io ecosystem can be deployed through Helm charts. Use one of the following charts to boost the installation:

- [Hub](https://github.com/kerberos-io/helm-charts/tree/main/charts/hub) chart
+- [Hub](https://github.com/kerberos-io/helm-charts/tree/main/charts/hub)

 ## Prerequisite

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: hub
-description: A Helm chart for install Kerberos Hub in Kubernetes
+description: A Helm chart to install Kerberos Hub in Kubernetes
 icon: https://doc.kerberos.io/images/kerberos-logo.svg

 # A chart can be either an 'application' or a 'library' chart.
@@ -16,10 +16,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.48.0
+version: 0.77.0

 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "3.0.0"
+appVersion: "1.3.0"
@@ -410,6 +410,12 @@
    <path fill-rule="evenodd" clip-rule="evenodd" d="M9 7C9.55228 7 10 6.55228 10 6C10 5.44772 9.55228 5 9 5C8.44772 5 8 5.44772 8 6C8 6.55228 8.44772 7 9 7Z" fill="currentColor"/>
  </svg>`

+  /* IO (Navigation menu) */
+  window["env"]["svg"]["io"] = `<svg class="icon icon-io" width="18" height="18" viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
+    <path fill-rule="evenodd" clip-rule="evenodd" d="M9 2C5.13401 2 2 5.13401 2 9C2 12.866 5.13401 16 9 16C12.866 16 16 12.866 16 9C16 5.13401 12.866 2 9 2ZM0 9C0 4.02944 4.02944 0 9 0C13.9706 0 18 4.02944 18 9C18 13.9706 13.9706 18 9 18C4.02944 18 0 13.9706 0 9Z" fill="currentColor"/>
+    <path d="M5.81481 12V6.54545H7.10032V12H5.81481ZM6.46112 5.77131C6.25752 5.77131 6.08233 5.70384 5.93555 5.56889C5.78877 5.43158 5.71538 5.26705 5.71538 5.07528C5.71538 4.88116 5.78877 4.71662 5.93555 4.58168C6.08233 4.44437 6.25752 4.37571 6.46112 4.37571C6.66708 4.37571 6.84227 4.44437 6.98668 4.58168C7.13346 4.71662 7.20685 4.88116 7.20685 5.07528C7.20685 5.26705 7.13346 5.43158 6.98668 5.56889C6.84227 5.70384 6.66708 5.77131 6.46112 5.77131ZM10.8015 12.1065C10.2688 12.1065 9.80717 11.9893 9.41655 11.755C9.02592 11.5206 8.72289 11.1927 8.50746 10.7713C8.29439 10.3499 8.18786 9.85748 8.18786 9.29403C8.18786 8.73059 8.29439 8.23698 8.50746 7.81321C8.72289 7.38944 9.02592 7.06037 9.41655 6.82599C9.80717 6.59162 10.2688 6.47443 10.8015 6.47443C11.3342 6.47443 11.7958 6.59162 12.1864 6.82599C12.5771 7.06037 12.8789 7.38944 13.092 7.81321C13.3074 8.23698 13.4151 8.73059 13.4151 9.29403C13.4151 9.85748 13.3074 10.3499 13.092 10.7713C12.8789 11.1927 12.5771 11.5206 12.1864 11.755C11.7958 11.9893 11.3342 12.1065 10.8015 12.1065ZM10.8086 11.0767C11.0974 11.0767 11.3389 10.9974 11.533 10.8388C11.7272 10.6778 11.8716 10.4624 11.9663 10.1925C12.0633 9.92259 12.1119 9.62192 12.1119 9.29048C12.1119 8.95668 12.0633 8.65483 11.9663 8.38494C11.8716 8.11269 11.7272 7.89607 11.533 7.73509C11.3389 7.5741 11.0974 7.49361 10.8086 7.49361C10.5127 7.49361 10.2665 7.5741 10.07 7.73509C9.87583 7.89607 9.73023 8.11269 9.63317 8.38494C9.53847 8.65483 9.49112 8.95668 9.49112 9.29048C9.49112 9.62192 9.53847 9.92259 9.63317 10.1925C9.73023 10.4624 9.87583 10.6778 10.07 10.8388C10.2665 10.9974 10.5127 11.0767 10.8086 11.0767Z" fill="currentColor"/>
+  </svg>`
+
  /* Key (Profile > Change password) */
  window["env"]["svg"]["key"] = `<svg class="icon icon-key" width="18" height="18" viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
    <path fill-rule="evenodd" clip-rule="evenodd" d="M15.809 0.0183059C15.6199 0.0549176 15.4393 0.146447 15.2929 0.292894L10.2929 5.29289L6.89574 8.69005C6.20201 8.25291 5.38054 8 4.5 8C2.01472 8 0 10.0147 0 12.5C0 14.9853 2.01472 17 4.5 17C6.98528 17 9 14.9853 9 12.5C9 11.6195 8.74709 10.798 8.30995 10.1043L11 7.41421L12.2929 8.70711C12.6834 9.09763 13.3166 9.09763 13.7071 8.70711C14.0976 8.31658 14.0976 7.68342 13.7071 7.29289L12.4142 6L13.5 4.91421L15.2929 6.70711C15.6834 7.09763 16.3166 7.09763 16.7071 6.70711C17.0976 6.31658 17.0976 5.68342 16.7071 5.29289L14.9142 3.5L16 2.41421L16.2929 2.70711C16.6834 3.09763 17.3166 3.09763 17.7071 2.70711C18.0976 2.31658 18.0976 1.68342 17.7071 1.29289L16.7071 0.292894C16.509 0.0948186 16.2485 -0.00279238 15.9889 6.07713e-05C15.9286 0.000723416 15.8684 0.00680511 15.809 0.0183059ZM2 12.5C2 11.1193 3.11929 10 4.5 10C5.88071 10 7 11.1193 7 12.5C7 13.8807 5.88071 15 4.5 15C3.11929 15 2 13.8807 2 12.5Z" fill="currentColor"/>
@@ -480,6 +486,14 @@
    <path fill-rule="evenodd" clip-rule="evenodd" d="M9 11C9.55228 11 10 11.4477 10 12V13C10 13.5523 9.55228 14 9 14C8.44772 14 8 13.5523 8 13V12C8 11.4477 8.44772 11 9 11Z" fill="currentColor"/>
  </svg>`

+
+  /* Lock-unlocked (2FA) */
+  window["env"]["svg"]["lock-unlocked"] = `<svg class="icon icon-lock-unlocked" width="18" height="18" viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <path fill-rule="evenodd" clip-rule="evenodd" d="M2 8C2 7.44772 2.44772 7 3 7H15C15.5523 7 16 7.44772 16 8V17C16 17.5523 15.5523 18 15 18H3C2.44772 18 2 17.5523 2 17V8ZM4 9V16H14V9H4Z" fill="currentColor"/>
+  <path fill-rule="evenodd" clip-rule="evenodd" d="M12 9C11.4477 9 11 8.55228 11 8L11 4C11 3.73736 10.9483 3.47728 10.8478 3.23463C10.7473 2.99198 10.5999 2.7715 10.4142 2.58579C10.2285 2.40007 10.008 2.25275 9.76537 2.15224C9.52272 2.05173 9.26264 2 9 2C8.73736 2 8.47728 2.05173 8.23463 2.15224C7.99198 2.25275 7.7715 2.40007 7.58579 2.58579C7.40007 2.7715 7.25275 2.99198 7.15224 3.23463C7.05173 3.47728 7 3.73736 7 4L7 4.5C7 5.05228 6.55228 5.5 6 5.5C5.44772 5.5 5 5.05228 5 4.5L5 4C5 3.47471 5.10346 2.95457 5.30448 2.46927C5.5055 1.98396 5.80014 1.54301 6.17157 1.17157C6.54301 0.800138 6.98396 0.5055 7.46927 0.304481C7.95457 0.103462 8.47471 -3.95613e-07 9 -3.49691e-07C9.52529 -3.03769e-07 10.0454 0.103463 10.5307 0.304481C11.016 0.5055 11.457 0.800138 11.8284 1.17157C12.1999 1.54301 12.4945 1.98396 12.6955 2.46927C12.8965 2.95457 13 3.47471 13 4L13 8C13 8.55228 12.5523 9 12 9Z" fill="currentColor"/>
+  <path fill-rule="evenodd" clip-rule="evenodd" d="M9 11C9.55228 11 10 11.4477 10 12V13C10 13.5523 9.55228 14 9 14C8.44772 14 8 13.5523 8 13V12C8 11.4477 8.44772 11 9 11Z" fill="currentColor"/>
+  </svg>`
+
  /* Login (Profile > Login audit)
  * https://ui.kerberos.io/?path=/story/icons-icon--logout
  * */
@@ -750,6 +764,20 @@
    <rect x="12" y="14" width="5.99999" height="2" rx="1" fill="currentColor"/>
  </svg>`

+  /* Sound on */
+  window["env"]["svg"]["sound-on"] = `<svg class="icon icon-sound-on" width="18" height="18" viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <path d="M3 7.70711V10.7929C3 11.2456 3.17986 11.6799 3.5 12C3.82014 12.3201 4.25435 12.5 4.70711 12.5H5.17157C5.70201 12.5 6.21071 12.7107 6.58579 13.0858L8.79289 15.2929C9.18342 15.6834 9.81658 15.6834 10.2071 15.2929C10.3946 15.1054 10.5 14.851 10.5 14.5858V3.91421C10.5 3.649 10.3946 3.39464 10.2071 3.20711C9.81658 2.81658 9.18342 2.81658 8.79289 3.20711L6.58579 5.41421C6.21071 5.78929 5.70201 6 5.17157 6H4.70711C4.25435 6 3.82014 6.17986 3.5 6.5C3.17986 6.82014 3 7.25435 3 7.70711Z" stroke="currentColor" stroke-width="2"/>
+  <path d="M13 14.5C15.5 13 19.1 8.8 13.5 4" stroke="currentColor" stroke-width="2"/>
+  </svg>`
+
+  /* Sound off */
+  window["env"]["svg"]["sound-off"] = `<svg class="icon icon-sound-off" width="18" height="18" viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <path d="M3 7.70711V10.7929C3 11.2456 3.17986 11.6799 3.5 12C3.82014 12.3201 4.25435 12.5 4.70711 12.5H5.17157C5.70201 12.5 6.21071 12.7107 6.58579 13.0858L8.79289 15.2929C9.18342 15.6834 9.81658 15.6834 10.2071 15.2929C10.3946 15.1054 10.5 14.851 10.5 14.5858V3.91421C10.5 3.649 10.3946 3.39464 10.2071 3.20711C9.81658 2.81658 9.18342 2.81658 8.79289 3.20711L6.58579 5.41421C6.21071 5.78929 5.70201 6 5.17157 6H4.70711C4.25435 6 3.82014 6.17986 3.5 6.5C3.17986 6.82014 3 7.25435 3 7.70711Z" stroke="currentColor" stroke-width="2"/>
+  <path d="M13 14.5C15.5 13 19.1 8.8 13.5 4" stroke="currentColor" stroke-width="2"/>
+  <path d="M4 15.5L15 3" stroke="currentColor"/>
+  <path d="M3.07037 15.0685L14.4038 2.41365" stroke="white"/>
+  </svg>`
+
  /* Star (mark as fav) */
  window["env"]["svg"]["star"] = `<svg class="icon icon-star" width="18" height="18" viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
    <path d="M8.09306 1.95257C8.45148 1.18092 9.54852 1.18092 9.90694 1.95257L11.4346 5.24154C11.5808 5.55636 11.8799 5.77283 12.2246 5.81342L15.8347 6.23847C16.6842 6.33849 17.0241 7.3896 16.3941 7.96815L13.7346 10.4105C13.4772 10.6469 13.3619 11.0005 13.4304 11.3432L14.1379 14.8787C14.3051 15.7147 13.4166 16.3631 12.6714 15.9489L9.48585 14.1782C9.18372 14.0102 8.81628 14.0102 8.51415 14.1782L5.32856 15.9489C4.58338 16.3632 3.69487 15.7147 3.86215 14.8787L4.56955 11.3432C4.63813 11.0005 4.5228 10.6469 4.26538 10.4105L1.60586 7.96815C0.975867 7.3896 1.31584 6.33849 2.16532 6.23847L5.77538 5.81342C6.12012 5.77283 6.41916 5.55636 6.56539 5.24154L8.09306 1.95257Z" stroke="currentColor" stroke-width="2"/>
@@ -858,4 +886,22 @@
    <path fill-rule="evenodd" clip-rule="evenodd" d="M3.9981 11.3995C5.29471 9.88675 7.08937 9 9 9C10.9106 9 12.7053 9.88675 14.0019 11.3995C15.2944 12.9074 16 14.9238 16 17C16 17.5523 15.5523 18 15 18L3 18C2.44772 18 2 17.5523 2 17C2 14.9238 2.70558 12.9074 3.9981 11.3995ZM9 11C7.72803 11 6.47044 11.5882 5.51662 12.701C4.75666 13.5877 4.24797 14.743 4.07017 16L13.9298 16C13.752 14.743 13.2433 13.5877 12.4834 12.701C11.5296 11.5882 10.272 11 9 11Z" fill="currentColor"/>
    </svg>`

+  /* Light mode */
+  window["env"]["svg"]["lightmode"] = `<svg width="18" height="18" viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
+    <path fill="currentColor" d="M8 12C10.2091 12 12 10.2091 12 8C12 5.79086 10.2091 4 8 4C5.79086 4 4 5.79086 4 8C4 10.2091 5.79086 12 8 12Z" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"/>
+    <path fill="currentColor" d="M14.667 8H15.3337" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"/>
+    <path fill="currentColor" d="M8 1.33268V0.666016" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"/>
+    <path fill="currentColor" d="M8 15.3327V14.666" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"/>
+    <path fill="currentColor" d="M13.3337 13.3327L12.667 12.666" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"/>
+    <path fill="currentColor" d="M13.3337 2.66602L12.667 3.33268" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"/>
+    <path fill="currentColor" d="M2.66699 13.3327L3.33366 12.666" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"/>
+    <path fill="currentColor" d="M2.66699 2.66602L3.33366 3.33268" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"/>
+    <path fill="currentColor" d="M0.666992 8H1.33366" stroke="black" stroke-linecap="currentColor" stroke-linejoin="round"/>
+  </svg>`;
+
+  /* Dark mode */
+  window["env"]["svg"]["darkmode"] = `<svg width="18" height="18" viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
+    <path fill="currentColor" d="M2 7.67107C2 11.1665 4.83356 14 8.32893 14C10.8139 14 12.9644 12.5679 14 10.4839C8.32893 10.4839 5.51607 7.67107 5.51607 2C3.43214 3.03563 2 5.1861 2 7.67107Z" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"/>
+  </svg>`;
+  
 })(this);
@@ -0,0 +1,409 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+    <meta
+            name="viewport"
+            content="width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1"
+    />
+    <meta name="description" content="Kerberos.io Mailing">
+    <style type="text/css">
+
+        @font-face {
+            font-family: 'Inter';
+            font-style:  normal;
+            font-weight: 400;
+            font-display: swap;
+            src: url("https://kerberos.io/dist/fonts/Inter-Regular.woff?v=/dist/fonts/Inter-Regular.woff2?v=3.183.18") format("woff2"),
+            url("https://kerberos.io/dist/fonts/Inter-Regular.woff?v=/dist/fonts/Inter-Regular.woff2?v=3.183.18") format("woff");
+        }
+
+        @font-face {
+            font-family: 'Inter';
+            font-style:  normal;
+            font-weight: 500;
+            font-display: swap;
+            src: url("https://kerberos.io/dist/fonts/Inter-Medium.woff2?v=3.18") format("woff2"),
+            url("https://kerberos.io/dist/fonts/Inter-Medium.woff?v=3.18") format("woff");
+        }
+
+        @font-face {
+            font-family: 'Inter';
+            font-style:  normal;
+            font-weight: 600;
+            font-display: swap;
+            src: url("https://kerberos.io/dist/fonts/Inter-SemiBold.woff2?v=3.18") format("woff2"),
+            url("https://kerberos.io/dist/fonts/Inter-SemiBold.woff?v=3.18") format("woff");
+        }
+
+        @font-face {
+            font-family: 'Inter var';
+            font-weight: 100 900;
+            font-display: swap;
+            font-style: normal;
+            font-named-instance: 'Regular';
+            src: url("https://kerberos.io/dist/fonts/Inter-roman.var.woff2?v=3.18") format("woff2");
+        }
+
+        body{
+            background: #E5E5E5;
+            margin-top:0;
+            margin-bottom: 0;
+            margin-right: 0;
+            margin-left: 0;
+            padding-top: 0;
+            padding-left: 0;
+            padding-right: 0;
+            padding-bottom: 0;
+            font-family: 'Inter';
+        }
+        a, a:hover, a:active {
+            color: #262424;
+            text-decoration: none;
+        }
+
+        .corner-td{
+            width: 60px;
+        }
+
+        table {border-collapse:separate;max-width: 850px; margin: 0 auto; width: 100%;}
+        .ExternalClass p, .ExternalClass span, .ExternalClass font, .ExternalClass td {line-height: 100%;}
+        .ExternalClass {width: 100%;}
+        @media screen and (max-width:500px){
+            .tab-td{
+                padding-left: 10px!important;
+            }
+            .tab-td a h4{
+                font-size: 14px!important;
+            }
+            .corner-td{
+                width: 20px!important;
+            }
+            .company-name-td h3{
+                font-size: 16px!important;
+            }
+            table.header-table{
+                padding-top: 8px!important;
+                padding-right: 0px!important;
+                padding-bottom: 24px!important;
+                padding-left: 0px!important;
+            }
+            .colored-card-td  h4{
+                font-size: 14px!important;
+            }
+            .colored-card-td  h2{
+                font-size: 20px!important;
+            }
+            .colored-card-td  a p{
+                font-size: 12px!important;
+                width: 143px!important;
+            }
+            .colored-card-td{
+                padding-top: 24px!important;
+                padding-right: 24px!important;
+                padding-bottom: 24px!important;
+                padding-left: 24px!important;
+            }
+            .colorless-card-td{
+                padding-top: 24px!important;
+                padding-right: 24px!important;
+                padding-bottom: 24px!important;
+                padding-left: 24px!important;
+            }
+            .colorless-card-td h3{
+                font-size: 18px!important;
+            }
+            .colorless-card-td p{
+                font-size: 14px!important;
+            }
+            .colorless-card-table{
+                margin-left: 0px!important;
+                margin-right: 0px!important;
+                margin-top: 24px!important;
+                margin-bottom: 24px!important;
+            }
+            .footer-td{
+                display: table-row!important;
+            }
+        }
+        @media screen and (max-width:600px) {
+            .footer-td{
+                display: table-row!important;
+            }
+        }
+        @media screen and (max-width:650px) {
+            .footer-table{
+                margin-left: 0px!important;
+                margin-right: 0px!important;
+                margin-top: 0px!important;
+                margin-bottom: 36px!important;
+            }
+        }
+    </style>
+</head>
+<body height="100%" width="100%">
+<table border="0" cellpadding="0" cellspacing="0" width="100%" bgcolor="E5E5E5" style="border-collaps:collaps; mso-table-lspace:0pt; mso-table-rspace:0pt;">
+    <tr>
+        <td bgcolor="E5E5E5">
+            <table border="0" cellpadding="0" cellspacing="0" width="100%" height="36" class="header-table" style="padding-top: 36px ;padding-right: 0;padding-bottom: 36px;padding-left: 0;border-collaps:collaps; mso-table-lspace:0pt; mso-table-rspace:0pt;">
+                <tbody>
+                <tr>
+                    <td class="corner-td" align="left"></td>
+                    <td width="48" height="36" align="left"><img alt="Kerberos.io" width="36" height="36"  src="https://kerberos.io/images/email/kerberos.png"/></td>
+                    <td height="36" align="left" class="company-name-td">
+                        <h3  width="36" height="36" style=" font-family: Inter;
+                                        font-size: 20px;
+                                        font-style: normal;
+                                        font-weight: 600;
+                                        line-height: 24px;
+                                        mso-line-height-rule:exactly;
+                                        letter-spacing: 0em;
+                                        text-align: left;
+                                        color: #262424;">Kerberos.io</h3>
+                    </td>
+                    <td  height="36" width="36" style="padding-left: 36px;" class="tab-td" align="right">
+                        <a style="text-decoration: none;color: none;" href={{tab1_href}}>
+                            <h4 style="font-family: Inter;
+                                            font-size: 16px;
+                                            font-style: normal;
+                                            font-weight: 500;
+                                            line-height: 36px;
+                                            mso-line-height-rule:exactly;
+                                            letter-spacing: 0em;
+                                            text-align: right;
+                                            color: #6D6666;">{{tab1_title}}</h4>
+                        </a>
+                    </td>
+                    <td  height="36" width="36" style="padding-left: 36px;" class="tab-td"  align="right" >
+                        <a style="text-decoration: none;color: none;" href={{tab2_href}}>
+                            <h4 style="font-family: Inter;
+                                            font-size: 16px;
+                                            font-style: normal;
+                                            font-weight: 500;
+                                            line-height: 36px;
+                                            mso-line-height-rule:exactly;
+                                            letter-spacing: 0em;
+                                            text-align: right;
+                                            color: #6D6666;">{{tab2_title}}</h4>
+                        </a>
+                    </td>
+                    <td class="corner-td" align="right"></td>
+                </tr>
+                </tbody>
+            </table>
+        </td>
+    </tr>
+</table>
+<table border="0" cellpadding="0" cellspacing="0" width="100%"  bgcolor="E5E5E5"  style="border-collaps:collaps; mso-table-lspace:0pt; mso-table-rspace:0pt;">
+    <tr>
+        <td bgcolor="E5E5E5">
+            <table border="0" cellpadding="0" cellspacing="0" width="100%" style="border-collaps:collaps; mso-table-lspace:0pt; mso-table-rspace:0pt;" >
+                <tbody>
+                <tr>
+                    <td class="corner-td" align="left"></td>
+                    <td class="colored-card-td" bgcolor="#57356B"  style="padding-left: 48px;padding-right: 48px;padding-top: 48px;padding-bottom: 48px;border-radius: 4px;background-color:#57356B;">
+                        <h4 style="font-family: Inter;
+                                        font-size: 16px;
+                                        font-style: normal;
+                                        font-weight: 400;
+                                        line-height: 24px;
+                                        mso-line-height-rule:exactly;
+                                        letter-spacing: 0em;
+                                        text-align: left;
+                                        color:#b09fb9;">Hey, {{assignee}}</h4>
+                        <h2 style=" font-family: Inter;
+                                        font-size: 24px;
+                                        font-style: normal;
+                                        font-weight: 600;
+                                        line-height: 36px;
+                                        mso-line-height-rule:exactly;
+                                        letter-spacing: 0em;
+                                        text-align: left;
+                                        color:#FFFFFF;
+                                        padding-top: 12px;
+                                        padding-bottom: 24px;
+                                        padding-left: 0;
+                                        padding-right: 0;">You have been assigned to a task</h2>
+						<p style="font-family: Inter;
+                                        font-size: 18px;
+                                        font-style: normal;
+                                        font-weight: 600;
+                                        line-height: 24px;
+                                        mso-line-height-rule:exactly;
+                                        letter-spacing: 0em;
+                                        text-align: left;
+                                        color:#FFFFFF;
+                                        padding-top: 0;
+                                        padding-bottom: 0;
+                                        padding-left: 0;
+                                        padding-right: 0;
+						">Task Details:</p>
+						<ul style="font-family: Inter;
+                                        font-size: 14px;
+                                        font-style: normal;
+                                        font-weight: 600;
+                                        line-height: 24px;
+                                        mso-line-height-rule:exactly;
+                                        letter-spacing: 0em;
+                                        text-align: left;
+                                        color:#FFFFFF;
+                                        padding-top: 0;
+                                        padding-bottom: 12px;
+                                        padding-left: 0;
+                                        padding-right: 0;
+                                        margin-left: 12px">
+							<li>Task Name: {{task_name}}</li>
+							<li>Assigned By: {{user}}</li>
+						</ul>
+ 						<a style="text-decoration: none;color: none;" href="{{link}}">
+                            <p style="font-family: Inter;
+                                                font-size: 14px;
+                                                font-style: normal;
+                                                line-height: 20px;
+                                                mso-line-height-rule:exactly;
+                                                letter-spacing: 0em;
+                                                text-align: left;
+                                                color:#FFFFFF;
+                                                background-color: #84559F;
+                                                padding-top: 6px;
+                                                padding-bottom: 6px;
+                                                padding-right: 16px;
+                                                padding-left: 16px;
+                                                width: 166px;
+                                                border-radius: 4px;
+                                                cursor: pointer;">View task on kerberos hub</p>
+                        </a>
+						
+                    </td>
+                    <td class="corner-td" align="right"></td>
+                </tr>
+                </tbody>
+            </table>
+        </td>
+    </tr>
+</table>
+<table border="0" cellpadding="0" cellspacing="0" width="100%"  bgcolor="E5E5E5"  style="border-collaps:collaps; mso-table-lspace:0pt; mso-table-rspace:0pt;">
+    <tr>
+        <td bgcolor="E5E5E5">
+            <table border="0" cellpadding="0" cellspacing="0" width="100%" class="footer-table" style="margin-top: 0;border-collaps:collaps; mso-table-lspace:0pt; mso-table-rspace:0pt;"  >
+                <tbody>
+                <tr>
+                    <td class="corner-td" align="left"></td>
+                    <!--[if mso | IE]>
+                    <table role="presentation" border="0" cellpadding="0" cellspacing="0"><tr><td style="vertical-align:top;display:table-row !important">
+                    <![endif]-->
+                    <td height="146" width="190" class="footer-td" style="margin-bottom: 12px;"  valign="top" align="left">
+                        <table style="border-collaps:collaps; mso-table-lspace:0pt; mso-table-rspace:0pt;">
+                            <tbody>
+                            <tr>
+                                <td>
+                                    <h4 style=" font-family: Inter;
+                                                        font-size: 16px;
+                                                        font-style: normal;
+                                                        font-weight: 600;
+                                                        line-height: 36px;
+                                                        mso-line-height-rule:exactly;
+                                                        letter-spacing: 0em;
+                                                        text-align: left;
+                                                        color:#6D6666;">Get in touch</h4>
+                                    <a style="text-decoration: none;color: none;" href="mailto:support@verstraeten.io">
+                                        <p style=" font-family: Inter;
+                                                            font-size: 14px;
+                                                            font-style: normal;
+                                                            font-weight: 400;
+                                                            line-height: 16px;
+                                                            mso-line-height-rule:exactly;
+                                                            letter-spacing: 0em;
+                                                            text-align: left;
+                                                            color: #A69D9D;">support@kerberos.io</p>
+                                    </a>
+                                    <p style=" font-family: Inter;
+                                                            font-size: 14px;
+                                                            font-style: normal;
+                                                            font-weight: 400;
+                                    line-height: 16px;
+                                    mso-line-height-rule:exactly;
+                                    letter-spacing: 0em;
+                                    text-align: left;
+                                    color: #A69D9D;">9000 Ghent, BE</p>
+
+                                    <a style="text-decoration: none;color: none;" href="https://kerberos.io/">
+                                        <p style=" font-family: Inter;
+                                                            font-size: 14px;
+                                                            font-style: normal;
+                                                            font-weight: 400;
+                                                            line-height: 24px;
+                                                            mso-line-height-rule:exactly;
+                                                            letter-spacing: 0em;
+                                                            text-align: left;
+                                                            color: #A69D9D;">https://kerberos.io</p>
+                                    </a>
+                                </td>
+                            </tr>
+                            </tbody>
+                        </table>
+                    </td>
+                    <!--[if mso | IE]>
+                    <table role="presentation" border="0" cellpadding="0" cellspacing="0"><tr><td style="vertical-align:top;display:table-row !important">
+                    <![endif]-->
+                    <td class="footer-td" style="border-radius: 4px;padding-left: 0;padding-right: 0;padding-top: 0;padding-bottom: 0; margin-bottom: 12px;"  valign="top" align="left">
+                        <table style="border-collaps:collaps; mso-table-lspace:0pt; mso-table-rspace:0pt;">
+                            <tbody>
+                            <tr>
+                                <td>
+                                    <h4 style=" font-family: Inter;
+                                                        font-size: 16px;
+                                                        font-style: normal;
+                                                        font-weight: 600;
+                                                        line-height: 36px;
+                                                        mso-line-height-rule:exactly;
+                                                        letter-spacing: 0em;
+                                                        text-align: left;
+                                                        color:#6D6666;">About Kerberos</h4>
+                                    <p style=" font-family: Inter;
+                                                        font-size: 14px;
+                                                        font-style: normal;
+                                                        font-weight: 400;
+                                                        line-height: 24px;
+                                                        mso-line-height-rule:exactly;
+                                                        letter-spacing: 0em;
+                                                        text-align: left;
+                                                        color: #A69D9D;">Welcome to the revolutionary video analytics and video management platform. Open, modular, and extensible for everyone, anywhere.</p>
+                                                        
+                                    
+                                    <p style="margin-top: 12px;">
+                                        <a href="https://twitter.com/kerberosio" style="text-decoration: none;color: none;">
+                                            <img width="24" height="24" alt="Twitter" src="https://kerberos.io/images/email/twitter.png"/>
+                                        </a>
+                                        <a href="https://reddit.com/r/kerberos_io" style="text-decoration: none;color: none;">
+                                            <img g width="24" height="24" alt="Reddit" src="https://kerberos.io/images/email/reddit.png"/>
+                                        </a>
+                                        <a href="https://www.youtube.com/channel/UCnd9q7iRNNw4W95eQwQuECA" style="text-decoration: none;color: none;">
+                                            <img g width="24" height="24" alt="Youtube" src="https://kerberos.io/images/email/youtube.png"/>
+                                        </a>
+                                        <a href="https://github.com/kerberos-io" style="text-decoration: none;color: none;">
+                                            <img g width="24" height="24" alt="Github" src="https://kerberos.io/images/email/github.png"/>
+                                        </a>
+                                    </p>                
+                                </td>
+                            </tr>
+                            </tbody>
+                        </table>
+                    </td>
+                    <td class="corner-td" align="right"></td>
+                </tr>
+                </tbody>
+            </table>
+            <table style="border-collaps:collaps; mso-table-lspace:0pt; mso-table-rspace:0pt;">
+                <tbody>
+                    <tr style="height: 50px">
+                        <td></td>
+                    </tr>
+                </tbody>
+            </table>
+        </td>
+    </tr>
+</table>
+</body>
+</html>
@@ -0,0 +1,19 @@
+Kerberos.io
+------------
+
+Hey, {{assignee}}
+You have been assigned to a new task on Kerberos Hub.
+Task Details:
+- Task Name: {{task_name}}
+- Assigned By: {{user}}
+- Link: {{link}}
+
+Get in touch
+------------
+support@kerberos.io
+9000 Ghent, BE
+https://kerberos.io
+
+About Kerberos
+------------
+Welcome to the revolutionary video analytics and video management platform. Open, modular, and extensible for everyone, anywhere.
@@ -2,6 +2,7 @@ apiVersion: v1
 kind: Service
 metadata:
  name: hub-api-svc
+  namespace: {{ .Release.Namespace }}
  labels:
    app: hub-api-svc
 spec:
@@ -16,6 +17,7 @@ spec:
      protocol: TCP
  selector:
    app: hub-api
+{{ if ne .Values.ingress "" }}
 ---
 {{ if .Capabilities.APIVersions.Has "networking.k8s.io/v1" }}
 apiVersion: networking.k8s.io/v1
@@ -25,8 +27,8 @@ apiVersion: networking.k8s.io/v1beta1
 kind: Ingress
 metadata:
  name: hub-api-ingress
+  namespace: {{ .Release.Namespace }}
  annotations:
-    kubernetes.io/ingress.class: {{ .Values.ingress }}
    {{- if eq .Values.ingress "nginx" }}
    kubernetes.io/tls-acme: "true"
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
@@ -34,30 +36,13 @@ metadata:
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
    {{- end }}
 spec:
+  ingressClassName: {{ .Values.ingress }}
  {{- with .Values.kerberoshub.api.tls }}
  tls:
    {{- toYaml . | nindent 8 }}
  {{- end }}

-  {{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1beta1" }}
-  rules:
-    - host: "{{ .Values.kerberoshub.api.url }}"
-      http:
-        paths:
-          - path: /
-            backend:
-              serviceName: hub-api-svc
-              servicePort: 8081
-    {{- if .Values.kerberoshub.api.legacyUrl }}
-    - host: "{{ .Values.kerberoshub.api.legacyUrl }}"
-      http:
-        paths:
-          - path: /
-            backend:
-              serviceName: hub-api-svc
-              servicePort: 8081
-    {{- end }}
-  {{- else }}
+  {{ if .Capabilities.APIVersions.Has "networking.k8s.io/v1" }}
  rules:
    - host: "{{ .Values.kerberoshub.api.url }}"
      http:
@@ -91,12 +76,32 @@ spec:
                name: hub-api-svc
                port:
                  number: 80
-  {{- end }}
+  {{ else }}
+    rules:
+    - host: "{{ .Values.kerberoshub.api.url }}"
+      http:
+        paths:
+          - path: /
+            backend:
+              serviceName: hub-api-svc
+              servicePort: 8081
+    {{- if .Values.kerberoshub.api.legacyUrl }}
+    - host: "{{ .Values.kerberoshub.api.legacyUrl }}"
+      http:
+        paths:
+          - path: /
+            backend:
+              serviceName: hub-api-svc
+              servicePort: 8081
+    {{- end }}
+  {{ end }}
+{{- end }}
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: hub-api
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberoshub.api.replicas }}
  selector:
@@ -123,7 +128,7 @@ spec:
      {{- end }}
      containers:
        - name: hub-api
-          image: "{{ .Values.kerberoshub.api.repository }}:{{ .Values.kerberoshub.api.tag }}"
+          image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberoshub.api.repository }}:{{ .Values.kerberoshub.api.tag }}"
          imagePullPolicy: {{ .Values.kerberoshub.api.pullPolicy }}
          {{- with .Values.kerberoshub.api.resources }}
          resources:
@@ -139,6 +144,8 @@ spec:
          env:
            - name: READ_ONLY
              value: "{{ .Values.readonly }}"
+            - name: SUPPORT_ENABLED
+              value: "{{ .Values.kerberoshub.support.enabled }}"
            - name: CLOUD_API_URL
              value: "{{ .Values.kerberoshub.api.url }}"
            - name: API_URL
@@ -172,14 +179,22 @@ spec:
              value: "{{ .Values.kerberoshub.api.jwtSecret }}"
              
            # SSO (OIDC) setup
-            - name: SSO_ISSUER
-              value: "{{ .Values.kerberoshub.api.sso.issuer }}"
-            - name: SSO_CLIENTID
-              value: "{{ .Values.kerberoshub.api.sso.clientId }}"
-            - name: SSO_CLIENTSECRET
-              value: "{{ .Values.kerberoshub.api.sso.clientSecret }}"
-            - name: SSO_REDIRECTURL
-              value: "{{ .Values.kerberoshub.api.schema }}://{{ .Values.kerberoshub.api.url }}{{ .Values.kerberoshub.api.sso.redirectUrl }}"
+            - name: SSO_DOMAINS
+              value:  "{{- range .Values.kerberoshub.api.sso }}{{ .domain }};{{- end }}"
+            - name: SSO_REDIRECTURLS
+              value: "{{- range .Values.kerberoshub.api.sso }}{{ .redirectUrl }};{{- end }}"
+            - name: SSO_CLAIMIDS
+              value:  "{{- range .Values.kerberoshub.api.sso }}{{ .claimId }};{{- end }}"
+            - name: SSO_ISSUERS
+              value:  "{{- range .Values.kerberoshub.api.sso }}{{ .issuer }};{{- end }}"
+            - name: SSO_CLIENTIDS
+              value: "{{- range .Values.kerberoshub.api.sso }}{{ .clientId }};{{- end }}"
+            - name: SSO_CLIENTSECRETS
+              value: "{{- range .Values.kerberoshub.api.sso }}{{ .clientSecret }};{{- end }}"
+            - name: SSO_CLIENTVERIFICATIONIDS
+              value: "{{- range .Values.kerberoshub.api.sso }}{{ .clientVerificationId }};{{- end }}"
+            - name: SSO_FORCE_SSO
+              value: "{{- range .Values.kerberoshub.api.sso }}{{ .forceSSO }};{{- end }}"

            # Kerberos pipeline
            - name: QUEUE_SYSTEM
@@ -251,6 +266,8 @@ spec:
            # Mongodb
            - name: MONGODB_DATABASE_CLOUD
              value: "Kerberos"
+            - name: MONGODB_URI
+              value: "{{ .Values.mongodb.uri }}"
            - name: MONGODB_HOST
              value: "{{ .Values.mongodb.host }}"
            - name: MONGODB_DATABASE_CREDENTIALS
@@ -309,6 +326,10 @@ spec:
              value: "{{ .Values.email.templates.share }}"
            - name: SHARE_TITLE
              value: "{{ .Values.email.templates.shareTitle }}"
+            - name: ASSIGN_TASK_TEMPLATE
+              value: "{{ .Values.email.templates.assignTask }}"
+            - name: ASSIGN_TASK_TITLE
+              value: "{{ .Values.email.templates.assignTaskTitle }}"

            # SMTP
            - name: SMTP_SERVER
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: hub-cleanup
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: 1
  selector:
@@ -24,17 +25,21 @@ spec:
      {{- end }}
      containers:
        - name: hub-cleanup
-          image: "{{ .Values.kerberoshub.cleanup.repository }}:{{ .Values.kerberoshub.cleanup.tag }}"
+          image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberoshub.cleanup.repository }}:{{ .Values.kerberoshub.cleanup.tag }}"
          imagePullPolicy: {{ .Values.kerberoshub.cleanup.pullPolicy }}
          {{- with .Values.kerberoshub.cleanup.resources }}
          resources:
            {{- toYaml . | nindent 12 }}
          {{- end }}
          env:
+            - name: READ_ONLY
+              value: "{{ .Values.readonly }}"
            - name: MAX_DAYS
-              value: "30"
+              value: "{{ .Values.kerberoshub.cleanup.maxDays }}"
            - name: MONGODB_DATABASE_CLOUD
              value: "Kerberos"
+            - name: MONGODB_URI
+              value: "{{ .Values.mongodb.uri }}"
            - name: MONGODB_HOST
              value: "{{ .Values.mongodb.host }}"
            - name: MONGODB_DATABASE_CREDENTIALS
@@ -2,6 +2,7 @@ apiVersion: v1
 kind: Service
 metadata:
  name: hub-frontend-demo-svc
+  namespace: {{ .Release.Namespace }}
  labels:
    app: hub-frontend-demo-svc
 spec:
@@ -12,6 +13,7 @@ spec:
    name: http
  selector:
    app: hub-frontend-demo
+{{ if ne .Values.ingress "" }}
 ---
 {{ if .Capabilities.APIVersions.Has "networking.k8s.io/v1" }}
 apiVersion: networking.k8s.io/v1
@@ -21,30 +23,20 @@ apiVersion: networking.k8s.io/v1beta1
 kind: Ingress
 metadata:
  name: hub-frontend-demo-ingress
+  namespace: {{ .Release.Namespace }}
  annotations:
-    kubernetes.io/ingress.class: {{ .Values.ingress }}
    {{- if eq .Values.ingress "nginx" }}
    kubernetes.io/tls-acme: "true"
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
    {{- end }}
 spec:
-
+  ingressClassName: {{ .Values.ingress }}
  {{- with .Values.kerberoshub.frontend.demoTls }}
  tls:
    {{- toYaml . | nindent 8 }}
  {{- end }}
-
-  {{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1beta1" }}
-  rules:
-    - host: "{{ .Values.kerberoshub.frontend.demoUrl }}"
-      http:
-        paths:
-          - path: /
-            backend:
-              serviceName: hub-frontend-demo-svc
-              servicePort: 80
-  {{- else }}
+  {{ if .Capabilities.APIVersions.Has "networking.k8s.io/v1" }}
  rules:
    - host: "{{ .Values.kerberoshub.frontend.demoUrl }}"
      http:
@@ -56,12 +48,23 @@ spec:
              name: hub-frontend-demo-svc
              port:
                number: 80
-  {{- end }}
+  {{ else }}
+  rules:
+    - host: "{{ .Values.kerberoshub.frontend.demoUrl }}"
+      http:
+        paths:
+          - path: /
+            backend:
+              serviceName: hub-frontend-demo-svc
+              servicePort: 80
+  {{ end }}
+{{ end }}
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: hub-frontend-demo
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberoshub.frontend.replicas }}
  selector:
@@ -88,7 +91,7 @@ spec:
      {{- end }}
      containers:
      - name: hub-frontend-demo
-        image: "{{ .Values.kerberoshub.frontend.repository }}:{{ .Values.kerberoshub.frontend.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberoshub.frontend.repository }}:{{ .Values.kerberoshub.frontend.tag }}"
        imagePullPolicy: {{ .Values.kerberoshub.frontend.pullPolicy }}
        {{- with .Values.kerberoshub.frontend.resources }}
        resources:
@@ -2,6 +2,7 @@ apiVersion: v1
 kind: Service
 metadata:
  name: hub-frontend-svc
+  namespace: {{ .Release.Namespace }}
  labels:
    app: hub-frontend-svc
 spec:
@@ -12,77 +13,137 @@ spec:
    name: http
  selector:
    app: hub-frontend
+{{ if ne .Values.ingress "" }}
 ---
-{{ if .Capabilities.APIVersions.Has "networking.k8s.io/v1" }}
+{{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1" }}
 apiVersion: networking.k8s.io/v1
-{{ else }}
+{{- else }}
 apiVersion: networking.k8s.io/v1beta1
-{{ end }}
+{{- end }}
 kind: Ingress
 metadata:
  name: hub-frontend-ingress
+  namespace: {{ .Release.Namespace }}
  annotations:
-    kubernetes.io/ingress.class: {{ .Values.ingress }}
+    {{- if eq .Values.kerberoshub.oauth2Proxy.enabled true  }}
+    nginx.ingress.kubernetes.io/auth-url: "https://$host/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://$host/oauth2/start?rd=$escaped_request_uri"
+    {{- end }}
    {{- if eq .Values.ingress "nginx" }}
    kubernetes.io/tls-acme: "true"
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
    {{- end }}
 spec:
-
+  ingressClassName: {{ .Values.ingress }}
  {{- with .Values.kerberoshub.frontend.tls }}
  tls:
    {{- toYaml . | nindent 8 }}
  {{- end }}
-
-  {{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1beta1" }}
+  {{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1" }}
  rules:
    - host: "{{ .Values.kerberoshub.frontend.url }}"
      http:
        paths:
-          - path: /
-            backend:
-              serviceName: hub-frontend-svc
-              servicePort: 80
+        - path: /
+          pathType: Prefix
+          backend:
+            service:
+              name: hub-frontend-svc
+              port:
+                number: 80
    {{- if .Values.kerberoshub.frontend.legacyUrl }}
    - host: "{{ .Values.kerberoshub.frontend.legacyUrl }}"
      http:
        paths:
-          - path: /
-            backend:
-              serviceName: hub-frontend-svc
-              servicePort: 80
+        - path: /
+          pathType: Prefix
+          backend:
+            service:
+              name: hub-frontend-svc
+              port:
+                number: 80
    {{- end }}
+    {{- range .Values.kerberoshub.frontend.domains }}
+    - host: "{{ . }}"
+      http:
+        paths:
+        - path: /
+          pathType: Prefix
+          backend:
+            service:
+              name: hub-frontend-svc
+              port:
+                number: 80
+    {{- end }}
+  
  {{- else }}
  rules:
    - host: "{{ .Values.kerberoshub.frontend.url }}"
      http:
        paths:
-        - path: /
-          pathType: Prefix
-          backend:
-            service:
-              name: hub-frontend-svc
-              port:
-                number: 80
+          - path: /
+            backend:
+              serviceName: hub-frontend-svc
+              servicePort: 80
    {{- if .Values.kerberoshub.frontend.legacyUrl }}
    - host: "{{ .Values.kerberoshub.frontend.legacyUrl }}"
      http:
        paths:
-        - path: /
-          pathType: Prefix
-          backend:
-            service:
-              name: hub-frontend-svc
-              port:
-                number: 80
+          - path: /
+            backend:
+              serviceName: hub-frontend-svc
+              servicePort: 80
+    {{- end }}
+    {{- range .Values.kerberoshub.frontend.domains }}
+    - host: "{{ . }}"
+      http:
+        paths:
+          - path: /
+            backend:
+              serviceName: hub-frontend-svc
+              servicePort: 80
    {{- end }}
  {{- end }}
+{{- end }}
+{{- if eq .Values.kerberoshub.oauth2Proxy.enabled true  }}
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: oauth2-proxy-frontend
+  namespace: kube-system
+  annotations:
+    {{- if eq .Values.ingress "nginx" }}
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    kubernetes.io/tls-acme: "true"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/enable-cors: "true"
+    {{- end }}
+spec:
+  ingressClassName: {{ .Values.ingress }}
+  rules:
+    - host: "{{ .Values.kerberoshub.frontend.url }}"
+      http:
+        paths:
+          - path: /oauth2
+            pathType: Prefix
+            backend:
+              service:
+                name: oauth2-proxy
+                port:
+                  number: 4180
+  tls:
+    - hosts:
+        - "{{ .Values.kerberoshub.frontend.url }}"
+      secretName: 
+{{- end }}
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: hub-frontend
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberoshub.frontend.replicas }}
  selector:
@@ -109,7 +170,7 @@ spec:
      {{- end }}
      containers:
      - name: hub-frontend
-        image: "{{ .Values.kerberoshub.frontend.repository }}:{{ .Values.kerberoshub.frontend.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberoshub.frontend.repository }}:{{ .Values.kerberoshub.frontend.tag }}"
        imagePullPolicy: {{ .Values.kerberoshub.frontend.pullPolicy }}
        {{- with .Values.kerberoshub.frontend.resources }}
        resources:
@@ -123,8 +184,12 @@ spec:
          {{- toYaml . | nindent 8 }}
        {{- end }}
        env:
-        - name: SSO_DOMAIN
-          value: "{{ .Values.kerberoshub.frontend.ssoDomain }}"
+        - name: SSO_DOMAINS
+          # get the domain attribute from the list of sso domains
+          value: "{{- range .Values.kerberoshub.api.sso }}{{ .domain }};{{- end }}"
+        - name: SSO_FORCE_DOMAINS
+          # get the domain attribute from the list of sso domains
+          value: "{{- range .Values.kerberoshub.api.sso }}{{ .forceSSO }};{{- end }}"
        - name: TITLE
          value: "{{ .Values.kerberoshub.frontend.title }}"
        - name: LOGO_NAME
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: hub-monitor-device
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: 1
  selector:
@@ -28,7 +29,7 @@ spec:
      {{- end }}
      containers:
        - name: hub-monitor-device
-          image: "{{ .Values.kerberoshub.monitordevice.repository }}:{{ .Values.kerberoshub.monitordevice.tag }}"
+          image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberoshub.monitordevice.repository }}:{{ .Values.kerberoshub.monitordevice.tag }}"
          imagePullPolicy: {{ .Values.kerberoshub.monitordevice.pullPolicy }}
          {{- with .Values.kerberoshub.monitordevice.resources }}
          resources:
@@ -39,9 +40,13 @@ spec:
            {{- toYaml . | nindent 12 }}
          {{- end }}
          env:
+            - name: READ_ONLY
+              value: "{{ .Values.readonly }}"
            # Mongodb
            - name: MONGODB_DATABASE_CLOUD
              value: "Kerberos"
+            - name: MONGODB_URI
+              value: "{{ .Values.mongodb.uri }}"
            - name: MONGODB_HOST
              value: "{{ .Values.mongodb.host }}"
            - name: MONGODB_DATABASE_CREDENTIALS
@@ -0,0 +1,66 @@
+{{- if .Values.kerberoshub.oauth2Proxy.enabled -}}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: oauth2-proxy
+  namespace: kube-system
+  labels:
+    k8s-app: oauth2-proxy
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      k8s-app: oauth2-proxy
+  template:
+    metadata:
+      labels:
+        k8s-app: oauth2-proxy
+    spec:
+      containers:
+        - args:
+            - --provider=github
+            - --email-domain=*
+            - --upstream=file:///dev/null
+            - --http-address=0.0.0.0:4180
+            - --skip-auth-preflight=true
+          env:
+            - name: OAUTH2_PROXY_CLIENT_ID
+              value: "{{ .Values.kerberoshub.oauth2Proxy.github.clientId }}"
+            - name: OAUTH2_PROXY_CLIENT_SECRET
+              value: "{{ .Values.kerberoshub.oauth2Proxy.github.clientSecret }}"
+            - name: OAUTH2_PROXY_COOKIE_SECRET
+              value: "{{ .Values.kerberoshub.oauth2Proxy.github.cookieSecret }}"
+            - name: OAUTH2_PROXY_GITHUB_ORG
+              value: "{{ .Values.kerberoshub.oauth2Proxy.github.organization }}"
+            - name: OAUTH2_PROXY_GITHUB_TEAM
+              value: "{{ .Values.kerberoshub.oauth2Proxy.github.team }}"
+          image: quay.io/oauth2-proxy/oauth2-proxy:latest
+          imagePullPolicy: Always
+          name: oauth2-proxy
+          ports:
+            - containerPort: 4180
+              protocol: TCP
+          resources:
+            limits:
+              cpu: 100m
+              memory: 50Mi
+            requests:
+              cpu: 100m
+              memory: 50Mi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    k8s-app: oauth2-proxy
+  name: oauth2-proxy
+  namespace: kube-system
+spec:
+  ports:
+    - name: http
+      port: 4180
+      protocol: TCP
+      targetPort: 4180
+  selector:
+    k8s-app: oauth2-proxy
+{{- end -}}
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: hub-reactivate-subscription
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: 1
  selector:
@@ -18,13 +19,19 @@ spec:
      labels:
        app: hub-reactivate-subscription
    spec:
+      {{- with .Values.imagePullSecrets }}
      imagePullSecrets:
-        - name: regcred
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
      containers:
        - name: hub-reactivate-subscription
-          image: "{{ .Values.kerberoshub.reactivate.repository }}:{{ .Values.kerberoshub.reactivate.tag }}"
+          image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberoshub.reactivate.repository }}:{{ .Values.kerberoshub.reactivate.tag }}"
          imagePullPolicy: {{ .Values.kerberoshub.reactivate.pullPolicy }}
          env:
+            - name: READ_ONLY
+              value: "{{ .Values.readonly }}"
+            - name: MONGODB_URI
+              value: "{{ .Values.mongodb.uri }}"
            - name: MONGODB_HOST
              value: "{{ .Values.mongodb.host }}"
            - name: MONGODB_DATABASE_CREDENTIALS
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: pipe-analysis
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberospipeline.analysis.replicas }}
  selector:
@@ -24,7 +25,7 @@ spec:
      {{- end }}
      containers:
      - name: pipe-analysis
-        image: "{{ .Values.kerberospipeline.analysis.repository }}:{{ .Values.kerberospipeline.analysis.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.analysis.repository }}:{{ .Values.kerberospipeline.analysis.tag }}"
        imagePullPolicy: {{ .Values.kerberospipeline.analysis.pullPolicy }}
        {{- with .Values.kerberospipeline.analysis.resources }}
        resources:
@@ -37,6 +38,8 @@ spec:
          value: "{{ .Values.queueProvider }}"

        # Database
+        - name: MONGODB_URI
+          value: "{{ .Values.mongodb.uri }}"
        - name: MONGODB_HOST
          value: "{{ .Values.mongodb.host }}"
        - name: MONGODB_DATABASE_CREDENTIALS
@@ -83,10 +86,11 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
+  name: pipe-analysis
+  namespace: {{ .Release.Namespace }}
  labels:
    app: pipe-analysis
    service: pipe
-  name: pipe-analysis
 spec:
  ports:
    - name: hub-metrics
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: pipe-counting
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberospipeline.counting.replicas }}
  selector:
@@ -24,7 +25,7 @@ spec:
      {{- end }}
      containers:
      - name: pipe-counting
-        image: "{{ .Values.kerberospipeline.counting.repository }}:{{ .Values.kerberospipeline.counting.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.counting.repository }}:{{ .Values.kerberospipeline.counting.tag }}"
        imagePullPolicy: {{ .Values.kerberospipeline.counting.pullPolicy }}
        {{- with .Values.kerberospipeline.counting.resources }}
        resources:
@@ -61,10 +62,11 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
+  name: pipe-counting
+  namespace: {{ .Release.Namespace }}
  labels:
    app: pipe-counting
    service: pipe
-  name: pipe-counting
 spec:
  ports:
    - name: hub-metrics
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: pipe-dominantcolor
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberospipeline.dominantColor.replicas }}
  selector:
@@ -24,7 +25,7 @@ spec:
      {{- end }}
      containers:
      - name: pipe-dominantcolor
-        image: "{{ .Values.kerberospipeline.dominantColor.repository }}:{{ .Values.kerberospipeline.dominantColor.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.dominantColor.repository }}:{{ .Values.kerberospipeline.dominantColor.tag }}"
        imagePullPolicy: {{ .Values.kerberospipeline.dominantColor.pullPolicy }}
        {{- with .Values.kerberospipeline.dominantColor.resources }}
        resources:
@@ -61,10 +62,11 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
+  name: pipe-dominantcolor
+  namespace: {{ .Release.Namespace }}
  labels:
    app: pipe-dominantcolor
    service: pipe
-  name: pipe-dominantcolor
 spec:
  ports:
    - name: hub-metrics
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: pipe-event
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberospipeline.event.replicas }}
  selector:
@@ -24,7 +25,7 @@ spec:
      {{- end }}
      containers:
      - name: pipe-event
-        image: "{{ .Values.kerberospipeline.event.repository }}:{{ .Values.kerberospipeline.event.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.event.repository }}:{{ .Values.kerberospipeline.event.tag }}"
        imagePullPolicy: {{ .Values.kerberospipeline.event.pullPolicy }}
        {{- with .Values.kerberospipeline.event.resources }}
        resources:
@@ -33,12 +34,16 @@ spec:
        ports:
          - containerPort: 8080
        env:
+        - name: READ_ONLY
+          value: "{{ .Values.readonly }}"
        - name: CLOUD_PROVIDER
          value: "{{ .Values.cloudProvider }}"
        - name: QUEUE_SYSTEM
          value: "{{ .Values.queueProvider }}"

        # Database
+        - name: MONGODB_URI
+          value: "{{ .Values.mongodb.uri }}"
        - name: MONGODB_HOST
          value: "{{ .Values.mongodb.host }}"
        - name: MONGODB_DATABASE_CREDENTIALS
@@ -73,10 +78,11 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
+  name: pipe-event
+  namespace: {{ .Release.Namespace }}
  labels:
    app: pipe-event
    service: pipe
-  name: pipe-event
 spec:
  ports:
    - name: hub-metrics
@@ -0,0 +1,127 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pipe-export
+  namespace: {{ .Release.Namespace }}
+spec:
+  replicas: {{ .Values.kerberospipeline.export.replicas }}
+  selector:
+    matchLabels:
+      app: pipe-export
+  minReadySeconds: 10
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 1
+      maxSurge: 1
+  template:
+    metadata:
+      labels:
+        app: pipe-export
+    spec:
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      containers:
+      - name: pipe-export
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.export.repository }}:{{ .Values.kerberospipeline.export.tag }}"
+        imagePullPolicy: {{ .Values.kerberospipeline.export.pullPolicy }}
+        {{- with .Values.kerberospipeline.export.resources }}
+        resources:
+          {{- toYaml . | nindent 12 }}
+        {{- end }}
+        env:
+        - name: CLOUD_PROVIDER
+          value: "{{ .Values.cloudProvider }}"
+        - name: QUEUE_SYSTEM
+          value: "{{ .Values.queueProvider }}"
+
+        # Database
+        - name: MONGODB_DATABASE_CLOUD
+          value: "Kerberos"
+        - name: MONGODB_URI
+          value: "{{ .Values.mongodb.uri }}"
+        - name: MONGODB_HOST
+          value: "{{ .Values.mongodb.host }}"
+        - name: MONGODB_DATABASE_CREDENTIALS
+          value: "{{ .Values.mongodb.adminDatabase }}"
+        - name: MONGODB_USERNAME
+          value: "{{ .Values.mongodb.username }}"
+        - name: MONGODB_PASSWORD
+          value: "{{ .Values.mongodb.password }}"
+
+        # Kafka settings
+        - name: KAFKA_BROKER
+          value: "{{ .Values.kafka.broker }}"
+        - name: KAFKA_USERNAME
+          value: "{{ .Values.kafka.username }}"
+        - name: KAFKA_PASSWORD
+          value: "{{ .Values.kafka.password }}"
+        - name: KAFKA_MECHANISM
+          value: "{{ .Values.kafka.mechanism }}"
+        - name: KAFKA_SECURITY
+          value: "{{ .Values.kafka.security }}"
+
+        # RabbitMQ settings
+        - name: RABBITMQ_HOST
+          value: "{{ .Values.rabbitmq.host }}"
+        - name: RABBITMQ_EXCHANGE
+          value: "{{ .Values.rabbitmq.exchange }}"
+        - name: RABBITMQ_USERNAME
+          value: "{{ .Values.rabbitmq.username }}"
+        - name: RABBITMQ_PASSWORD
+          value: "{{ .Values.rabbitmq.password }}"
+          
+        # Kerberos Vault (Main instance, within Kerberos Hub you can assign additional Vaults to sites).
+        - name: STORAGE_URI
+          value: "{{ .Values.kerberosvault.uri }}"
+        - name: STORAGE_ACCESS_KEY
+          value: "{{ .Values.kerberosvault.accesskey }}"
+        - name: STORAGE_SECRET_KEY
+          value: "{{ .Values.kerberosvault.secretkey }}"
+
+        # Kerberos Vault: archiving credentials. When creating a task, the underlying recording will be
+        # copied to this storage provider, using the specific account credentials, for deletion/retention.
+        - name: STORAGE_ARCHIVE_PROVIDER
+          value: "{{ .Values.kerberosvault.archive.provider }}"
+        - name: STORAGE_ARCHIVE_ACCESS_KEY
+          value: "{{ .Values.kerberosvault.archive.accesskey }}"
+        - name: STORAGE_ARCHIVE_SECRET_KEY
+          value: "{{ .Values.kerberosvault.archive.secretkey }}"
+
+        # Sprites
+        - name: SPRITE_ENABLED
+          value: "{{ .Values.kerberospipeline.sprite.enabled }}"
+        - name: VAULT_SPRITE_PROVIDER
+          value: "{{ .Values.kerberosvault.sprite.provider }}"
+        - name: VAULT_SPRITE_ACCESS_KEY
+          value: "{{ .Values.kerberosvault.sprite.accessKey }}"
+        - name: VAULT_SPRITE_SECRET_KEY
+          value: "{{ .Values.kerberosvault.sprite.secretKey }}"
+        # Thumbnails
+        - name: THUMBNAIL_VAULT_ENABLED
+          value: "{{ .Values.kerberospipeline.thumbnail.kerberosvault.enabled }}"
+        - name: VAULT_THUMBNAIL_PROVIDER
+          value: "{{ .Values.kerberosvault.thumbnail.provider }}"
+        - name: VAULT_THUMBNAIL_ACCESS_KEY
+          value: "{{ .Values.kerberosvault.thumbnail.accessKey }}"
+        - name: VAULT_THUMBNAIL_SECRET_KEY
+          value: "{{ .Values.kerberosvault.thumbnail.secretKey }}"
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: pipe-export
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app: pipe-export
+    service: pipe
+spec:
+  ports:
+    - name: hub-metrics
+      port: 8080
+      targetPort: 8080
+      protocol: TCP
+  selector:
+    app: pipe-export
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: pipe-monitor
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberospipeline.monitor.replicas }}
  selector:
@@ -24,7 +25,7 @@ spec:
      {{- end }}
      containers:
      - name: pipe-monitor
-        image: "{{ .Values.kerberospipeline.monitor.repository }}:{{ .Values.kerberospipeline.monitor.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.monitor.repository }}:{{ .Values.kerberospipeline.monitor.tag }}"
        imagePullPolicy: {{ .Values.kerberospipeline.monitor.pullPolicy }}
        {{- with .Values.kerberospipeline.monitor.resources }}
        resources:
@@ -32,6 +33,8 @@ spec:
        {{- end }}
        env:
        # Database
+        - name: MONGODB_URI
+          value: "{{ .Values.mongodb.uri }}"
        - name: MONGODB_HOST
          value: "{{ .Values.mongodb.host }}"
        - name: MONGODB_DATABASE_CREDENTIALS
@@ -94,10 +97,11 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
+  name: pipe-monitor
+  namespace: {{ .Release.Namespace }}
  labels:
    app: pipe-monitor
    service: pipe
-  name: pipe-monitor
 spec:
  ports:
    - name: hub-metrics
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: pipe-notify-test
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberospipeline.notifyTest.replicas }}
  selector:
@@ -28,7 +29,7 @@ spec:
      {{- end }}
      containers:
      - name: pipe-notify-test
-        image: "{{ .Values.kerberospipeline.notifyTest.repository }}:{{ .Values.kerberospipeline.notifyTest.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.notifyTest.repository }}:{{ .Values.kerberospipeline.notifyTest.tag }}"
        imagePullPolicy: {{ .Values.kerberospipeline.notifyTest.pullPolicy }}
        {{- with .Values.kerberospipeline.notifyTest.resources }}
        resources:
@@ -43,6 +44,8 @@ spec:
          value: "{{ .Values.queueProvider }}"

        # Database
+        - name: MONGODB_URI
+          value: "{{ .Values.mongodb.uri }}"
        - name: MONGODB_HOST
          value: "{{ .Values.mongodb.host }}"
        - name: MONGODB_DATABASE_CREDENTIALS
@@ -107,10 +110,11 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
+  name: pipe-notify-test
+  namespace: {{ .Release.Namespace }}
  labels:
    app: pipe-notify-test
    service: pipe
-  name: pipe-notify-test
 spec:
  ports:
    - name: hub-metrics
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: pipe-notify
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberospipeline.notify.replicas }}
  selector:
@@ -28,7 +29,7 @@ spec:
      {{- end }}
      containers:
      - name: pipe-notify
-        image: "{{ .Values.kerberospipeline.notify.repository }}:{{ .Values.kerberospipeline.notify.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.notify.repository }}:{{ .Values.kerberospipeline.notify.tag }}"
        imagePullPolicy: {{ .Values.kerberospipeline.notify.pullPolicy }}
        {{- with .Values.kerberospipeline.notify.resources }}
        resources:
@@ -40,6 +41,8 @@ spec:
        {{- end }}
        env:
        # Database
+        - name: MONGODB_URI
+          value: "{{ .Values.mongodb.uri }}"
        - name: MONGODB_HOST
          value: "{{ .Values.mongodb.host }}"
        - name: MONGODB_DATABASE_CREDENTIALS
@@ -137,10 +140,11 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
+  name: pipe-notify
+  namespace: {{ .Release.Namespace }}
  labels:
    app: pipe-notify
    service: pipe
-  name: pipe-notify
 spec:
  ports:
    - name: hub-metrics
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: pipe-sequence
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberospipeline.sequence.replicas }}
  selector:
@@ -24,7 +25,7 @@ spec:
      {{- end }}
      containers:
      - name: pipe-sequence
-        image: "{{ .Values.kerberospipeline.sequence.repository }}:{{ .Values.kerberospipeline.sequence.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.sequence.repository }}:{{ .Values.kerberospipeline.sequence.tag }}"
        imagePullPolicy: {{ .Values.kerberospipeline.sequence.pullPolicy }}
        {{- with .Values.kerberospipeline.sequence.resources }}
        resources:
@@ -37,6 +38,8 @@ spec:
          value: "{{ .Values.queueProvider }}"

        # Database
+        - name: MONGODB_URI
+          value: "{{ .Values.mongodb.uri }}"
        - name: MONGODB_HOST
          value: "{{ .Values.mongodb.host }}"
        - name: MONGODB_DATABASE_CREDENTIALS
@@ -71,10 +74,11 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
+  name: pipe-sequence
+  namespace: {{ .Release.Namespace }}
  labels:
    app: pipe-sequence
    service: pipe
-  name: pipe-sequence
 spec:
  ports:
    - name: hub-metrics
@@ -3,6 +3,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: pipe-sprite
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberospipeline.sprite.replicas }}
  selector:
@@ -25,7 +26,7 @@ spec:
      {{- end }}
      containers:
      - name: pipe-sprite
-        image: "{{ .Values.kerberospipeline.sprite.repository }}:{{ .Values.kerberospipeline.sprite.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.sprite.repository }}:{{ .Values.kerberospipeline.sprite.tag }}"
        imagePullPolicy: {{ .Values.kerberospipeline.sprite.pullPolicy }}        
        {{- with .Values.kerberospipeline.sprite.resources }}
        resources:
@@ -85,10 +86,11 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
+  name: pipe-sprite
+  namespace: {{ .Release.Namespace }}
  labels:
    app: pipe-sprite
    service: pipe
-  name: pipe-sprite
 spec:
  ports:
    - name: hub-metrics
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: pipe-throttler
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberospipeline.throttler.replicas }}
  selector:
@@ -24,7 +25,7 @@ spec:
      {{- end }}
      containers:
      - name: pipe-throttler
-        image: "{{ .Values.kerberospipeline.throttler.repository }}:{{ .Values.kerberospipeline.throttler.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.throttler.repository }}:{{ .Values.kerberospipeline.throttler.tag }}"
        imagePullPolicy: {{ .Values.kerberospipeline.throttler.pullPolicy }}
        {{- with .Values.kerberospipeline.throttler.resources }}
        resources:
@@ -37,6 +38,8 @@ spec:
          value: "{{ .Values.queueProvider }}"

        # Database
+        - name: MONGODB_URI
+          value: "{{ .Values.mongodb.uri }}"
        - name: MONGODB_HOST
          value: "{{ .Values.mongodb.host }}"
        - name: MONGODB_DATABASE_CREDENTIALS
@@ -71,10 +74,11 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
+  name: pipe-throttler
+  namespace: {{ .Release.Namespace }}
  labels:
    app: pipe-throttler
    service: pipe
-  name: pipe-throttler
 spec:
  ports:
    - name: hub-metrics
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: pipe-thumbnail
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: {{ .Values.kerberospipeline.thumbnail.replicas }}
  selector:
@@ -24,7 +25,7 @@ spec:
      {{- end }}
      containers:
      - name: pipe-thumbnail
-        image: "{{ .Values.kerberospipeline.thumbnail.repository }}:{{ .Values.kerberospipeline.thumbnail.tag }}"
+        image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberospipeline.thumbnail.repository }}:{{ .Values.kerberospipeline.thumbnail.tag }}"
        imagePullPolicy: {{ .Values.kerberospipeline.thumbnail.pullPolicy }}
        {{- with .Values.kerberospipeline.thumbnail.resources }}
        resources:
@@ -87,10 +88,11 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
+  name: pipe-thumbnail
+  namespace: {{ .Release.Namespace }}
  labels:
    app: pipe-thumbnail
    service: pipe
-  name: pipe-thumbnail
 spec:
  ports:
    - name: hub-metrics
@@ -2,6 +2,7 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
  name: hub-metrics-servicemonitor
+  namespace: {{ .Release.Namespace }}
  labels:
    service: pipe
    release: prometheus
@@ -1,7 +1,10 @@
+# If .Values.kerberoshub.forwarder.enabled is set to true 
+{{- if .Values.kerberoshub.forwarder.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: vault-forwarder
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: 1
  selector:
@@ -24,7 +27,7 @@ spec:
      {{- end }}
      containers:
        - name: vault-forwarder
-          image: "{{ .Values.kerberoshub.forwarder.repository }}:{{ .Values.kerberoshub.forwarder.tag }}"
+          image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberoshub.forwarder.repository }}:{{ .Values.kerberoshub.forwarder.tag }}"
          imagePullPolicy: {{ .Values.kerberoshub.forwarder.pullPolicy }}
          resources:
            requests:
@@ -36,6 +39,8 @@ spec:
            - name: BUFFER_TIME
              value: "3"
            # Mongodb
+            - name: MONGODB_URI
+              value: "{{ .Values.mongodb.uri }}"
            - name: MONGODB_DATABASE_CLOUD
              value: "Kerberos"
            - name: MONGODB_HOST
@@ -54,3 +59,4 @@ spec:
              value: "{{ .Values.mqtt.username }}"
            - name: MQTT_PASSWORD
              value: "{{ .Values.mqtt.password }}"
+{{- end }}
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  name: vault-proxy
+  namespace: {{ .Release.Namespace }}
 spec:
  replicas: 3
  selector:
@@ -18,11 +19,13 @@ spec:
      labels:
        app: vault-proxy
    spec:
+      {{- with .Values.imagePullSecrets }}
      imagePullSecrets:
-        - name: regcred
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
      containers:
        - name: vault-proxy
-          image: "{{ .Values.kerberoshub.proxy.repository }}:{{ .Values.kerberoshub.proxy.tag }}"
+          image: "{{ .Values.global.imageRegistry }}{{ .Values.kerberoshub.proxy.repository }}:{{ .Values.kerberoshub.proxy.tag }}"
          imagePullPolicy: {{ .Values.kerberoshub.proxy.pullPolicy }}
          ports:
            - containerPort: 8080
@@ -45,6 +48,7 @@ apiVersion: v1
 kind: Service
 metadata:
  name: vault-proxy-svc
+  namespace: {{ .Release.Namespace }}
  labels:
    app: vault-proxy-svc
 spec:
@@ -6,42 +6,46 @@
 # LICENSING information: you will a license to run Kerberos Hub.
 # ----
 # Get your license from support@kerberos.io
-license: "---ENTER-YOUR-LICENSE-HERE---"
+#license: "---ENTER-YOUR-LICENSE-HERE---"
+# License for 8 cameras (for more cameras, please contact us for a private license)
+license: "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"
 licenseServer:
  url: "https://license.kerberos.io/verify"
  token: "214%ˆ#ddfsf@#3rfdsgl_)23sffeqasSwefDSFNBM" # do not change otherwise Kerberos Hub will not work.
-  
+global:
+  imageRegistry: "docker.io/"
 # Private Docker Registry: The registry secret is required if you have your Docker images behind a private registry.
 # By default it will pull from Docker hub (https://hub.docker.com/r/kerberos).
-imagePullSecrets:
-  - name: regcred
-  
-# Environment: set to 'production', 'develop', 'demo', 'staging' or 'acceptance'.
-# Set to 'true' if this is a private deployment.
-environment: 'production'
+#imagePullSecrets:
+#  - name: regcred

+# Environment: set to 'production', 'develop', 'demo', 'staging' or 'acceptance'.
+# Change the environment to 'staging' or 'acceptance' will add a banner on the 
+# front-end, to indicate the environment.
+environment: "production"
 # Set to 'true' if this is a private deployment.
 isPrivate: true
-
 # If you plan a migration or doing maintenance, you can enable readonly.
 # This will stop any write process to mongodb or any processing done in the Kerberos Hub pipeline.
 readOnly: false
-
 # Which network ingress you are using in your Kubernetes Cluster
 ingress: "nginx" # or "traefik"
-
-# A mongodb instance is required to store all the relevant metadata.
+# A mongodb instance is required to store all the relevant metadata (this can be standalone or in a cluster).
 mongodb:
+  # MongoDB URI (for example for a SaaS service like MongoDB Atlas)
+  # If uri is set, the below properties are not used (host, adminDatabase, username, password)
+  #uri: "mongodb+srv://xx:xx@kerberos-hub.xxx.mongodb.net/?retryWrites=true&w=majority&appName=xxx"
+
+  # Self-hosted mongodb, you could also use the uri property above.
  host: mongodb.mongodb
-  #host: "mongodb-0.mongodb-headless.mongodb:27017,mongodb-1.mongodb-headless.mongodb:27017"
  adminDatabase: admin
  username: yourusername
  password: "yourpassword"
-
-# A MQTT broker (vernemq) is used to have a bi-directional
-# communication between enterprise agents and kerberos hub.
+# A MQTT broker (vernemq or other like mosquitto) is used to have a bi-directional
+# communication between Kerberos Agents and Kerberos Hub.
+# we recommend to use vernemq (as part of this installation), but a stand-alone mosquitto broker is also possible.
 mqtt:
-  host: "mqtt.yourdomain.com"
+  host: "mqtt.yourdomain.com" # this needs to be a public accessible DNS name (it's used to communicate between Kerberos Agents and Kerberos Hub)
  port: "8443"
  protocol: "wss"
  username: "yourusername"
@@ -49,45 +53,45 @@ mqtt:
  legacy:
    host: ""
    port: ""
-
 # We are using a pipeline that is orchestrated through Kafka topics or RabbitMQ queues
 # Events are send back and forth until the processing is done.
-queueProvider: "KAFKA" # or "RABBITMQ"
+queueProvider: "RABBITMQ" # or "KAFKA"
 queueName: "kcloud-event-queue" # This is the topic to which all events are send.
-
+# RabbitMQ can be installed in the same cluster using a helm chart, or you can
+# use a service on  cloud provider like AWS, GCP, Azure, etc.
+rabbitmq:
+  host: "rabbitmq.rabbitmq:5672" # can be internal dns name or external
+  #host: "amqps://b-xxx-xxx-xxx-xxx-xxx.mq.eu-central-1.amazonaws.com:5671"
+  username: "yourusername"
+  password: "yourpassword"
+  exchange: ""
+# If you already have a Kafka cluster you might use this instead of RabbitMQ.
 kafka:
-  broker: "kafka1.yourdomain.com:9094,kafka2.yourdomain.com:9094"
+  broker: "kafka1.yourdomain.com:9094" # can be internal dns name or external
  username: "yourusername"
  password: "yourpassword"
  mechanism: "PLAIN"
  security: "SASL_PLAINTEXT"
-
-rabbitmq:
-  host: "rabbitmq.yourdomain.com:5671"
-  username: "yourusername"
-  password: "yourpassword"
-  exchange: ""
-
 # For allowing WEBRTC a STUN and TURN server is required.
+# You might want to install coturn in a seperate VM.
+# -> https://help.hcltechsw.com/sametime/11.6/admin/turnserver_ubuntu.html
 turn:
-  host: "turn:turn.yourdomain.com:8443"
+  host: "turn:turn.yourdomain.com:8443" # this needs to be a public accessible DNS name.
  username: "username1"
  password: "password1"
-
-# OpenAI integration, used for semantic search
+# (optional) OpenAI integration, used for semantic search
+# Langchain is used to translate text to a filter on the media page
 openai:
  enabled: false
  apikey: "xxx"
-
 # We have a kerberos vault component installed which contains all the
 # recordings. Kerberos vault is queried to retrieve the recordings
 # from the appropriate provider.
 kerberosvault:
-  uri: "https://api.vault.yourdomain.com"
+  uri: "https://api.vault.yourdomain.com" # this needs to be a public accessible DNS name.
  provider: "a-provider"
  accesskey: "xxx"
  secretkey: "xxx"
-
  # Archiving is used when creating a task. The underlying recording of the task will be copied from its
  # existing provider to the below archived provider. Seperate credentials are used, as it makes possible to
  # specify another retention period.
@@ -103,7 +107,6 @@ kerberosvault:
    provider: "a-sprite-provider"
    accessKey: "xxx"
    secretKey: "xxx"
-
 email:
  provider: "mailgun"
  from: "support@yourdomain.com"
@@ -125,21 +128,21 @@ email:
    forgotTitle: "Password reset Kerberos Hub. You forgot your password"
    share: "share"
    shareTitle: "[Action] You received a recording from Kerberos Hub"
+    assignTask: "assign_task"
+    assignTaskTitle: "[Action] You've been assigned to a task"
    detection: "detection"
    disabled: "disabled"
    highupload: "highupload"
    device: "device"
    alertTitle: "[Alert] Kerberos Hub detected something an event"
    deviceTitle: "[Device] A Kerberos Agent's status has been changed"
-
 # Following are all the different deployments needed to make
 # Kerberos hub properly working.
-
 kerberoshub:
  api:
-    repository: kerberos/hub-api
+    repository: uugai/hub-api
    pullPolicy: IfNotPresent
-    tag: "1.0.1065879492"
+    tag: "v1.0.19"
    replicas: 2
    jwtSecret: "this-is-a-secret-please-change-to-random-string" # change to a random value, this is for generating JWT tokens.
    schema: "https"
@@ -148,7 +151,6 @@ kerberoshub:
      requests:
        memory: 100Mi
        cpu: 250m
-
    # E-mail templates
    #volumeMounts:
    #  - name: custom-email-templates
@@ -162,12 +164,10 @@ kerberoshub:
    #legacyUrl: "api.legacy.yourdomain.com"

    # MFA issuer name
-    mfaIssuer: "Kerberos.io"
-    
+    mfaIssuer: "yourdomain.com"
    # Admin API's are made available for automation of Kerberos Hub.
    # To access those API's (e.g. creation of owner users), an API key needs to be provided.
    apiKey: "a-random-admin-api-key"
-
    ## Certificates
    tls:
      - hosts:
@@ -203,14 +203,26 @@ kerberoshub:
      username: ""
      password: ""
    sso: # OIDC settings for allowing SSO.
-      issuer: "" #"https://accounts.google.com"
-      clientId: "" # 4294xxxxsk4no3.apps.googleusercontent.com"
-      clientSecret: "" # UksvZ-QKGdB1W2mOu5l_Jg3R"
-      redirectUrl: "/sso/response"
+      - domain: "uug.ai"
+        redirectUrl: "https://api.cloud.kerberos.io/sso/callback/uug.ai"
+        forceSSO: "false"
+        issuer: "https://xxx.eu.auth0.com/"
+        claimId: "email" # claim which is used to identify the user
+        clientId: "xxx"
+        clientSecret: "xxx"
+        clientVerificationId: "" # This is only required for SSO chaining.
+      - domain: "kerberos.io"
+        redirectUrl: "https://api.cloud.kerberos.io/sso/callback/kerberos.io"
+        forceSSO: "false"
+        issuer: "https://accounts.google.com"
+        claimId: "email" # claim which is used to identify the user
+        clientId: "xxx"
+        clientSecret: "xxx"
+        clientVerificationId: "" # This is only required for SSO chaining.
  frontend:
-    repository: kerberos/hub-frontend
+    repository: uugai/hub-frontend
    pullPolicy: IfNotPresent
-    tag: "1.0.1068219611"
+    tag: "v1.0.39"
    replicas: 2
    schema: "https"
    url: "yourdomain.com"
@@ -218,12 +230,10 @@ kerberoshub:
      requests:
        memory: 50Mi
        cpu: 50m
-    
    # The front-end but in read-only mode
    #demoUrl: "demo.yourdomain.com"
    # When migrating to another url, this might help migrating.
    #legacyUrl: "legacy.yourdomain.com"
-
    tls:
      - hosts:
          - "yourdomain.com"
@@ -235,7 +245,6 @@ kerberoshub:
    #  - hosts:
    #      - "demo.yourdomain.com"
    #    secretName: kerberoshub-demo
-    ssoDomain: "@yourdomain.com"
    mixpanel: # We can keep track logging in Mixpanel as well
      apikey: "xxx"
    sentry: # We can trace errors in Sentry
@@ -249,22 +258,18 @@ kerberoshub:
    posthog: # Posthog is used for auditing and user interaction logging
      key: "xxx"
      url: "https://posthog.domain.com"
-
-
    # You can disable the Kerberos agent buttons, this make sense
    # in a white-label setup, or where you are managing the Kerberos Agents for your customers.
    hideAddAgent: "false"
-
    # Multi tenancy (domains)
    # By default the Kerberos Hub allows multi-tenancy through the concept
    # of accounts and subaccounts. However through the concept of domains, you
    # take it a step further. Within a domain, user accounts are unique, and are prefixed by a (domain\).
    #multiTenant: true
-    #tenantBaseDomain: "yourdomain.com" # this would resolve in following sub domain "https://domain.kerberos.io" 
+    #tenantBaseDomain: "yourdomain.com" # this would resolve in following sub domain "https://domain.kerberos.io"

    # Page title (browser)
    title: "Kerberos Hub - Video surveillance as it should be"
-
    # You can style Kerberos hub as you wish.
    # 1. we do the styling on our side and bake it in the Docker image (change the logo attribute to your company name)
    # 2. you bring your own logo (set logo to 'custom'), and mount the css file and favicons.
@@ -308,7 +313,6 @@ kerberoshub:
    framesPerSecondDescription: ""
    mlaUtilizationDescription: ""
    objectsDetectedDescription: ""
-
    # You can add custom links to the navigation bar.
    navigationLinkTitle1: ""
    navigationLinkUrl1: ""
@@ -320,11 +324,21 @@ kerberoshub:
    navigationLinkUrl4: ""
    navigationLinkTitle5: ""
    navigationLinkUrl5: ""
-
+  support:
+    enabled: false
+  oauth2Proxy:
+    enabled: false
+    github:
+      clientId: "github-client-id"
+      clientSecret: "github-client-secret"
+      cookieSecret: "generate-a-random-cookie-secret"
+      organization: "github-organization"
+      team: "github-team"
  cleanup:
    repository: kerberos/hub-cleanup
    pullPolicy: IfNotPresent
-    tag: "1.0.5360016926"
+    tag: "1.0.6436406806"
+    maxDays: "365" # The maximum number of days to keep orphaned recordings.
    resources:
      requests:
        memory: 10Mi
@@ -332,35 +346,36 @@ kerberoshub:
  monitordevice:
    repository: kerberos/hub-monitor-device
    pullPolicy: IfNotPresent
-    tag: "1.0.2818471126"
+    tag: "1.0.6256190978"
    resources:
      requests:
        memory: 10Mi
        cpu: 10m
-    # E-mail templates
-    #volumeMounts:
-    #  - name: custom-email-templates
-    #    mountPath: /mail
-    #volumes:
-    #  - name: custom-email-templates
-    #    persistentVolumeClaim:
-    #      claimName: custom-layout-claim
+        # E-mail templates
+        #volumeMounts:
+        #  - name: custom-email-templates
+        #    mountPath: /mail
+        #volumes:
+        #  - name: custom-email-templates
+        #    persistentVolumeClaim:
+        #      claimName: custom-layout-claim
  reactivate:
    repository: kerberos/hub-reactivate
    pullPolicy: IfNotPresent
-    tag: "1.0.2732384534"
+    tag: "1.0.6256184527"
    resources:
      requests:
        memory: 10Mi
        cpu: 10m
  forwarder:
-    repository: kerberos/vault-forwarder
-    pullPolicy: IfNotPresent
-    tag: "1.0.2732389692"
-    resources:
-      requests:
-        memory: 10Mi
-        cpu: 10m
+    enabled: false
+    #repository: kerberos/vault-forwarder
+    #pullPolicy: IfNotPresent
+    #tag: "1.0.2732389692"
+    #resources:
+    #  requests:
+    #    memory: 10Mi
+    #    cpu: 10m
  # This proxy is legacy for the old agent, will be migrated in the new Hub API.
  proxy:
    repository: kerberos/vault-proxy
@@ -370,30 +385,29 @@ kerberoshub:
      requests:
        memory: 10Mi
        cpu: 10m
-
 kerberospipeline:
  event:
    repository: kerberos/pipe-event
    pullPolicy: IfNotPresent
-    tag: "1.0.4061811730"
+    tag: "1.0.6256042211"
    replicas: 1
    resources:
      requests:
        memory: 10Mi
        cpu: 10m
  monitor:
-    repository: kerberos/pipe-monitor
+    repository: uugai/hub-pipeline-monitor
    pullPolicy: IfNotPresent
-    tag: "1.0.5199995278"
+    tag: "v1.1.0"
    replicas: 1
    resources:
      requests:
        memory: 10Mi
        cpu: 10m
  sequence:
-    repository: kerberos/pipe-sequence
+    repository: uugai/hub-pipeline-sequence
    pullPolicy: IfNotPresent
-    tag: "1.0.4092937753"
+    tag: "v1.0.1"
    replicas: 1
    resources:
      requests:
@@ -402,50 +416,50 @@ kerberospipeline:
  throttler:
    repository: kerberos/pipe-throttler
    pullPolicy: IfNotPresent
-    tag: "1.0.4041064593"
+    tag: "1.0.6256059962"
    replicas: 1
    resources:
      requests:
        memory: 10Mi
        cpu: 10m
  notify:
-    repository: kerberos/pipe-notify
+    repository: uugai/hub-pipeline-notification
    pullPolicy: IfNotPresent
-    tag: "1.0.4826924937"
+    tag: "v1.0.11"
    replicas: 1
    resources:
      requests:
        memory: 10Mi
        cpu: 10m
-    # E-mail templates
-    #volumeMounts:
-    #  - name: custom-email-templates
-    #    mountPath: /mail
-    #volumes:
-    #  - name: custom-email-templates
-    #    persistentVolumeClaim:
-    #      claimName: custom-layout-claim
+        # E-mail templates
+        #volumeMounts:
+        #  - name: custom-email-templates
+        #    mountPath: /mail
+        #volumes:
+        #  - name: custom-email-templates
+        #    persistentVolumeClaim:
+        #      claimName: custom-layout-claim
  notifyTest:
    repository: kerberos/pipe-notify-test
    pullPolicy: IfNotPresent
-    tag: "1.0.4421831666"
+    tag: "1.0.6256094666"
    replicas: 1
    resources:
      requests:
        memory: 10Mi
        cpu: 10m
-    # E-mail templates
-    #volumeMounts:
-    #  - name: custom-email-templates
-    #    mountPath: /mail
-    #volumes:
-    #  - name: custom-email-templates
-    #    persistentVolumeClaim:
-    #      claimName: custom-layout-claim
+        # E-mail templates
+        #volumeMounts:
+        #  - name: custom-email-templates
+        #    mountPath: /mail
+        #volumes:
+        #  - name: custom-email-templates
+        #    persistentVolumeClaim:
+        #      claimName: custom-layout-claim
  analysis:
-    repository: kerberos/pipe-analysis
+    repository: uugai/hub-pipeline-analysis
    pullPolicy: IfNotPresent
-    tag: "1.0.4421858000"
+    tag: "v1.0.1"
    replicas: 1
    resources:
      requests:
@@ -454,7 +468,7 @@ kerberospipeline:
  dominantColor:
    repository: kerberos/pipe-dominantcolor
    pullPolicy: IfNotPresent
-    tag: "1.0.4304099905"
+    tag: "1.0.6971463620"
    replicas: 3
    resources:
      requests:
@@ -466,13 +480,13 @@ kerberospipeline:
  thumbnail:
    repository: kerberos/pipe-thumbnail
    pullPolicy: IfNotPresent
-    tag: "1.0.5413452408"
-    replicas: 3
-    quality: "70"
+    tag: "1.0.6962799851"
+    replicas: 2
+    quality: "1" # 1 (best) - 31 (worst)
    width: "600"
-    height: "600"
+    height: "-1"
    kerberosvault:
-      enabled: false # If you want to use Kerberos Vault to store the thumbnails
+      enabled: true # If you want to use Kerberos Vault to store the thumbnails
    resources:
      requests:
        memory: 512Mi
@@ -483,7 +497,7 @@ kerberospipeline:
  counting:
    repository: kerberos/pipe-counting
    pullPolicy: IfNotPresent
-    tag: "1.0.4311489363"
+    tag: "1.0.6251572994"
    replicas: 1
    resources:
      requests:
@@ -491,9 +505,9 @@ kerberospipeline:
        cpu: 10m
  sprite:
    enabled: false # Enable or disable the sprite generation 'true' or 'false
-    repository: kerberos/pipe-sprite
+    repository: uugai/hub-pipeline-sprite
    pullPolicy: IfNotPresent
-    tag: "1.0.5413452673"
+    tag: "v1.0.4"
    replicas: 5
    interval: "1" # Number of secondes between each thumbnail in the sprite
    width: "240" # Should not be changed for the moment (hard coded in UI)
@@ -504,4 +518,13 @@ kerberospipeline:
        cpu: 500m
      limits:
        memory: 2Gi
-        cpu: 1000m
+        cpu: 1000m
+  export:
+    repository: kerberos/pipe-export
+    pullPolicy: IfNotPresent
+    tag: "1.0.6437127898"
+    replicas: 2
+    resources:
+      requests:
+        memory: 10Mi
+        cpu: 10m
Author	SHA1	Message	Date
Cédric Verstraeten	ba5d74e719	add dark and light mode icon	2025-02-19 14:42:09 +01:00
Cédric Verstraeten	2c10d6eace	Merge pull request #28 from kerberos-io/public-release-1739963582 A new public release - 1739963586	2025-02-19 14:40:29 +01:00
uug4ai	b19aa8af9f	A new public release - 1739963586	2025-02-19 11:13:06 +00:00
Cédric Verstraeten	17fb252380	Merge pull request #27 from kerberos-io/public-release-1739395154 A new public release - 1739395158	2025-02-12 22:21:03 +01:00
uug4ai	794f424fe2	A new public release - 1739395158	2025-02-12 21:19:18 +00:00
Cédric Verstraeten	9ba5d83501	Merge pull request #26 from kerberos-io/fix/make-orphaned-deletion-configurable Allow editing of orphaned day limit	2024-12-02 12:56:56 +01:00
Cedric Verstraeten	1f089fba28	Update Chart.yaml	2024-12-02 12:56:42 +01:00
Cedric Verstraeten	a07ddeb0e4	allow editing of orphaned day limit	2024-12-02 12:45:34 +01:00
Cédric Verstraeten	df4d848105	Merge pull request #25 from kerberos-io/feature/inject-namespace-required-for-kustomize Improvement / Missed some namespaces on several resources	2024-12-02 11:42:10 +01:00
Cedric Verstraeten	054d3d6079	Update Chart.yaml	2024-12-02 11:33:08 +01:00
Cedric Verstraeten	bdd07d3936	missed some namespaces	2024-12-02 11:33:00 +01:00
Cédric Verstraeten	4a774420c2	Merge pull request #24 from kerberos-io/feature/inject-namespace-required-for-kustomize Feature/inject namespace required for kustomize	2024-12-02 11:22:53 +01:00
Cédric Verstraeten	121ea686a2	Merge pull request #23 from kerberos-io/cedricve-patch-1 set kerberosvault to true (thumbnails)	2024-12-02 11:22:41 +01:00
Cedric Verstraeten	e7f90babc2	use spec.ingressClassName instead of kubernetes.io/ingress.class	2024-12-02 11:13:30 +01:00
Cedric Verstraeten	e6cbe866fd	Update servicemonitor.yaml	2024-12-02 11:06:44 +01:00
Cedric Verstraeten	eb75a46972	replace with other variable (official helm variable)	2024-12-02 11:02:56 +01:00
Cedric Verstraeten	24ef6047f8	Update README.md	2024-12-02 10:56:13 +01:00
Cedric Verstraeten	d93a5d228c	change templates to include namespace	2024-12-02 10:54:19 +01:00
Cédric Verstraeten	8b016ca2f8	set kerberosvault to true (thumbnails)	2024-11-29 13:42:08 +01:00
Cédric Verstraeten	d8a29e37ec	Merge pull request #22 from kerberos-io/feature/turn-on-off-ingress-add-workflows Add possibility to turn on/off ingress	2024-11-27 14:24:38 +01:00
Cedric Verstraeten	14c6737f5c	Update values.yaml	2024-11-27 14:06:12 +01:00
Cedric Verstraeten	c71eadd28a	add prometheus	2024-11-27 13:49:46 +01:00
Cedric Verstraeten	90c892eb12	update chart reference	2024-11-27 13:31:19 +01:00
Cedric Verstraeten	19399a01ca	update references helm chart values.yaml	2024-11-27 13:28:58 +01:00
Cedric Verstraeten	a75358affb	change values.yaml file.	2024-11-27 13:26:40 +01:00
Cedric Verstraeten	9b8050a7f6	add files	2024-11-27 13:24:15 +01:00
Cédric Verstraeten	99b6f71971	Merge pull request #21 from kerberos-io/feature/add-assign-task-template Add asign task template	2024-11-27 11:14:38 +01:00
Cedric Verstraeten	39bb5a5f60	add assign_task templates	2024-11-27 11:11:25 +01:00
Cédric Verstraeten	3a68cf38d5	Merge pull request #20 from kerberos-io/feature/add-assign-task-template Add Assign Task details	2024-11-26 16:54:17 +01:00
Cedric Verstraeten	84d40e805e	add assign_task parameters	2024-11-26 16:52:33 +01:00
Cédric Verstraeten	98daf4eb31	Merge pull request #19 from kerberos-io/cedricve-patch-1 Update license	2024-11-22 14:41:45 +01:00
Cédric Verstraeten	f6817864ba	Update values.yaml	2024-11-22 14:39:54 +01:00
Cédric Verstraeten	b62360f72f	Merge pull request #18 from kerberos-io/feature/add-global-image-registry Add image registry option	2024-11-20 15:15:17 +01:00
Cedric Verstraeten	465b6d91b2	add image registry	2024-11-20 15:12:41 +01:00
Cédric Verstraeten	db96c2a203	Merge pull request #16 from kerberos-io/public-release-1731600351 A new public release - 1731600354	2024-11-14 17:06:48 +01:00
uug4ai	1a816be11e	A new public release - 1731600354	2024-11-14 16:05:54 +00:00
Cédric Verstraeten	41957b69d6	Merge pull request #15 from kerberos-io/public-release-1730577950 A new public release - 1730577953	2024-11-02 21:15:25 +01:00
uug4ai	b19eb7f640	A new public release - 1730577953	2024-11-02 20:05:53 +00:00
Cédric Verstraeten	d3390d519d	Merge pull request #14 from kerberos-io/feature/add-oauth-to-api revert oauth to frontend + upgrade 0.71.0	2024-10-31 16:42:36 +01:00
Cedric Verstraeten	aa73e9585c	revert oauth to frontend + upgrade 0.71.0	2024-10-31 16:40:01 +01:00
Cédric Verstraeten	c70cf7f222	Merge pull request #13 from kerberos-io/feature/add-oauth-to-api try out --skip-auth-preflight=true	2024-10-31 16:01:10 +01:00
Cedric Verstraeten	d30b7446c0	try out --skip-auth-preflight=true	2024-10-31 16:00:18 +01:00
Cédric Verstraeten	d816910742	Merge pull request #12 from kerberos-io/feature/add-oauth-to-api preflight cors fix	2024-10-31 12:56:49 +01:00
Cedric Verstraeten	7a3fde3b4c	preflight cors fix	2024-10-31 12:53:12 +01:00
Cédric Verstraeten	19d3f0c448	Merge pull request #11 from kerberos-io/feature/add-oauth-to-api upgrade to 0.68.0	2024-10-30 22:31:28 +01:00
Cedric Verstraeten	a935bed9e4	upgrade to 0.68.0	2024-10-30 22:30:42 +01:00
Cédric Verstraeten	d72e7aecf5	Merge pull request #10 from kerberos-io/feature/add-oauth-to-api convert to string + upgrade to 0.67.0	2024-10-30 22:22:51 +01:00
Cedric Verstraeten	4dfad6497e	convert to string + upgrade to 0.67.0	2024-10-30 22:21:32 +01:00
Cédric Verstraeten	93ba207017	Merge pull request #9 from kerberos-io/feature/add-oauth-to-api add cors to ingress + upgrade to 0.66.0	2024-10-30 22:16:50 +01:00
Cedric Verstraeten	bebfc33aa5	add cors to ingress + upgrade to 0.66.0	2024-10-30 22:15:53 +01:00
Cédric Verstraeten	fb9c0d1a03	Merge pull request #8 from kerberos-io/feature/add-oauth-to-api oauth for api + upgrade to 0.65.0	2024-10-30 22:05:32 +01:00
Cedric Verstraeten	95a431f46d	oauth for api + upgrade to 0.65.0	2024-10-30 22:01:12 +01:00
Cédric Verstraeten	7631b10aeb	Merge pull request #7 from kerberos-io/feature/add-oauth-to-api update to 0.64.0 + change ingress names	2024-10-30 21:47:14 +01:00
Cedric Verstraeten	2ef457d2da	update to 0.64.0 + change ingress names	2024-10-30 21:46:06 +01:00
Cédric Verstraeten	60f5eb7b0d	Merge pull request #6 from kerberos-io/feature/add-oauth-to-api upgrade to 0.63.0 - missing ingress	2024-10-30 21:43:25 +01:00
Cedric Verstraeten	a48d866036	upgrade to 0.63.0 - missing ingress	2024-10-30 21:42:25 +01:00
Cédric Verstraeten	4da81e158f	Merge pull request #5 from kerberos-io/feature/add-oauth-to-api Enable oauth on hub api as well	2024-10-30 21:26:28 +01:00
Cedric Verstraeten	6d542eadef	enable oauth on hub api as well	2024-10-30 21:24:36 +01:00
Cédric Verstraeten	ecfaf23499	Merge pull request #4 from kerberos-io/public-release-1728500577 A new public release - 1728500581	2024-10-09 21:03:46 +02:00
uug4ai	e6449b761f	A new public release - 1728500581	2024-10-09 19:03:01 +00:00
Cédric Verstraeten	90cf8a2f36	Merge pull request #3 from kerberos-io/public-release-1728491349 A new public release - 1728491354	2024-10-09 18:31:12 +02:00
uug4ai	f0c88c6b62	A new public release - 1728491354	2024-10-09 16:29:14 +00:00
Cedric Verstraeten	aebd16d510	upgrade to 0.61.0	2024-10-04 22:37:01 +02:00
Cedric Verstraeten	79faf46156	align attributes	2024-10-04 21:12:21 +02:00
Cédric Verstraeten	d23dd5fa42	Merge pull request #2 from kerberos-io/feature/add-support-for-oauth2-proxy Upgrade to 0.58.0	2024-10-04 19:54:11 +02:00
Cedric Verstraeten	f65a75ae33	upgrade to 0.58.0	2024-10-04 19:52:05 +02:00
Cédric Verstraeten	5a506cfe6a	Merge pull request #1 from kerberos-io/feature/add-support-for-oauth2-proxy Feature/add support for oauth2 proxy	2024-10-04 14:26:04 +02:00
Cedric Verstraeten	ea3c96b4f9	Update Chart.yaml	2024-10-04 14:24:58 +02:00
Cedric Verstraeten	95ca1689dc	Create pr-description.yml	2024-10-04 08:58:59 +02:00
Cedric Verstraeten	601147a3d5	add support for oauth2-proxy	2024-10-04 08:53:01 +02:00
Cedric Verstraeten	3478d42681	possibility to enable support mode on the api	2024-10-03 09:40:05 +02:00
Cedric Verstraeten	a88c2253e7	fix for ingress (beta)	2024-09-14 22:35:40 +02:00
Cedric Verstraeten	3de5ef6936	add trial license go up to 8 cameras	2024-09-07 18:13:48 +02:00
Cedric Verstraeten	11172c1e44	upgrade to 0.54.3	2024-07-23 12:50:21 +02:00
Cedric Verstraeten	10e0adddca	add videowall role permissions + fix loading videowalls from non-owner users	2024-07-23 12:48:28 +02:00
Cedric Verstraeten	89630528e4	hotfix: create videowall issue	2024-07-03 12:51:58 +02:00
Cedric Verstraeten	8373a1df86	upgrade helmchart	2024-07-02 16:54:58 +02:00
Cedric Verstraeten	178f509ecf	Update values.yaml	2024-07-02 16:51:38 +02:00
Cedric Verstraeten	e1b19b47cd	Update Chart.yaml	2024-06-11 10:28:22 +02:00
Cedric Verstraeten	6a836bc9b4	upgrade chart to app version 1.3.0	2024-06-11 10:27:27 +02:00
Cedric Verstraeten	90fba44e8a	add first version videowall + optimisations for sprite and thumbnails	2024-06-11 10:26:04 +02:00
Cedric Verstraeten	96549fa58c	upgrade helm chart to 0.54.0	2024-05-15 16:13:48 +02:00
Cedric Verstraeten	c72902bacd	support for forcing SSO on domain	2024-05-15 10:00:56 +02:00
Cedric Verstraeten	b3d7c61108	fix	2024-05-14 16:47:47 +02:00
Cedric Verstraeten	127887b374	add claim support for sso	2024-04-24 16:02:51 +02:00
Cedric Verstraeten	0242a5c657	hotfix: removal mfa secrets + ui fixes	2024-03-21 14:19:26 +01:00
Cedric Verstraeten	f765361e2e	hot fix: internal dns	2024-03-20 14:23:27 +01:00
Cedric Verstraeten	0ab642f766	upgrade: export image	2024-03-20 12:05:13 +01:00
Cedric Verstraeten	1deab0d3b9	hotfix: creating export task through sub account	2024-03-20 08:42:51 +01:00
Cedric Verstraeten	c3cb5b4ea9	add export feature + force mfa + and more fixes	2024-03-19 21:39:29 +01:00
Cedric Verstraeten	fb1c40e930	renewed the license verification + you might need to request a new license	2024-02-29 13:58:34 +01:00
Cedric Verstraeten	62c95a7dbe	support for mongodb 6.x and beyond + added readonly attribute	2024-02-28 19:31:12 +01:00
Cedric Verstraeten	59815dcd71	feature: allow AMQPS for rabbitmq (now supporting AWS rabbitmq service)	2024-02-25 19:35:42 +01:00
Cedric Verstraeten	9151cc6344	upgrade helm chart 0.50	2024-02-12 01:24:01 +01:00
Cedric Verstraeten	d4da31233f	feature: allow multiple OIDC providers and different domains	2024-01-30 23:40:55 +01:00
Cédric Verstraeten	372f129355	Update values.yaml	2024-01-26 20:54:36 +01:00
Cedric Verstraeten	1549f5f365	hot-fix: replace pullsecrets with variable	2024-01-26 20:52:31 +01:00
Cedric Verstraeten	2ee475ca3d	hot fix: openai disabled, media filter broken	2023-11-13 12:33:54 +01:00