IBM MAS BAS Config¤

Helm chart link: 130-ibm-mas-bas-config

Contains a post-delete hook (postdelete-delete-cr.yaml) that will ensure the config CR is deleted when the ArgoCD application managing this chart is deleted (this will not happen by default as the config CR is asserted to be owned by the Suite CR by the MAS entity managers).

Resources Created¤

Resource Type	Resource Name	Namespace	Condition	Installed By
Secret	DRO API token secret	MAS core namespace	Always	application_admin_role
BasCfg	MAS BAS configuration CR	MAS core namespace	Always	application_admin_role
Job	Post-delete BAS configuration cleanup job	MAS core namespace	When use_postdelete_hooks is enabled	application_admin_role

Configuration¤

This chart accepts the following configuration values in the ArgoCD Application values:

mas_config_name: string
mas_config_chart: string
mas_config_scope: string
mas_workspace_id: string
mas_application_id: string
mas_config_kind: string
mas_config_api_version: string
use_postdelete_hooks: boolean

dro_api_token: string (secret reference)
dro_endpoint_url: string (secret reference)
mas_segment_key: string (secret reference, optional)

# Pod Templates (optional)
mas_bascfg_pod_templates:
  key: value

dro_contact:
  email: string
  first_name: string
  last_name: string

dro_ca:
  crt: string (multiline)

Note: Values marked with "(secret reference)" should use the format <path:secrets/path:key> to reference secrets stored in the Secrets Vault. This chart does not use a top-level key wrapper.

Base Instance Values¤

This chart inherits common instance configuration values. The most frequently used base values are:

account:
  id: string                    # Account identifier
  name: string                  # Account name

region:
  id: string                    # Region identifier
  name: string                  # Region name

cluster:
  id: string                    # Cluster identifier
  name: string                  # Cluster name

instance:
  id: string                    # MAS instance identifier

sm:                             # Secrets Manager configuration
  aws_secret_region: string
  aws_access_key_id: string (secret reference)
  aws_secret_access_key: string (secret reference)

For complete documentation of all base instance values including optional fields like custom_labels, argocluster_instance, application_admin_service_account, mas_wipe_mongo_data, allow_list, additional_vpn, application_configuration, use_postdelete_hooks, additional_resources, extensions, enhanced_dr, and cli_image_repo, see the Instance Base Values Reference.