n8n-helm-install.yaml

# helm upgrade --install n8n oci://8gears.container-registry.com/library/n8n -n n8n --create-namespace -f helm-n8n.yaml

log:
  level: warn

image:
  tag: next


global:
  valkey:
    password: "useAVeryImportantSecret"

main:
  resources:
    requests:
      cpu: 100m
      memory: 128Mi
    limits:
      cpu: 512m
      memory: 512Mi
  persistence:
    enabled: true
    type: dynamic 
    size: 1Gi
    storageClass: "openebs-hostpath"

  extraVolumes:
     - name: extra-ca
       configMap:
         name: custom-ca
         items:
           - key: root-certs.pem
             path: root-certs.pem

  extraVolumeMounts:
  - name: extra-ca
    mountPath: /etc/ssl/certs/ca-certificates.crt
    subPath: root-certs.pem
    readOnly: true

  config:
    n8n:
      encryption_key: "useAVeryImportantSecret"
      port: "5678"
      metrics: "true"
      health:
        check:
          active: true
      runners:
        enabled: true
      redis:
        password: "useAVeryImportantSecret"
    webhook:
      url: "https://you.url/n8n-webhook"
    node:
      function_allow_builtin: "*"
      extra:
        ca_certs: "/etc/ssl/certs/ca-certificates.crt"
    queue:
      health:
        check:
          active: true
      bull:
        redis:
          host: "n8n-valkey-primary"
          port: 6379
          password: "useAVeryImportantSecret"
    executions:
      mode: "queue"
  livenessProbe:
    httpGet:
      path: /healthz
      port: http
    initialDelaySeconds: 10
    periodSeconds: 10
    timeoutSeconds: 5
    failureThreshold: 10
    successThreshold: 1

scaling:
  enabled: false
  webhook:
    enabled: true

worker:
  enabled: true
  mode: queue
  config:
    port: "5678"
  # commandArgs:
  #   - "worker"
  #   - "--concurrency=10"

  persistence:
    size: 100Mi
    storageClass: "openebs-hostpath"
    
  resources:
    requests:
      cpu: 10m
      memory: 250Mi
    limits:
      cpu: 2000m
      memory: 2Gi



webhook:
  enabled: true
  mode: queue
    
  autoscaling:
    enabled: false

  waitMainNodeReady:
    enabled: false

  resources:
    requests:
      cpu: 10m
      memory: 128Mi
    limits:
      cpu: 512m
      memory: 512Mi

ingress:
  enabled: true
  annotations:
    kubernetes.io/ingress.class: traefik
    cert-manager.io/cluster-issuer: ca-issuer
    traefik.ingress.kubernetes.io/router.tls: "true"

  hosts:
    - host: n8n.your.lan
      paths: 
        - /
  tls:
    - hosts:
        - n8n.your.lan
      secretName: host-domain-cert

valkey:
  enabled: true
  architecture: standalone

  primary:
    persistence:
      enabled: true
      type: dynamic 
      size: 1Gi
      storageClass: "openebs-hostpath"