Google Cloud Marketplace deployment parameters
This table documents every customer-facing or Marketplace-managed property in the Trinetra 5.5.3 deployment schema. Values shown as generated are created by Google Cloud Marketplace. Sensitive values must never be committed to source control, copied into tickets, or included in evidence.
| Field | Requirement | Expected format | Default | Example | Sensitive |
|---|---|---|---|---|---|
image.repository |
Marketplace-managed | Container Registry repository | Supplied by Marketplace | gcr.io/lnp-technologies-public/trinetra-byol |
No |
image.tag |
Marketplace-managed | Release tag supplied by Marketplace | Supplied by Marketplace | 5.5.3 |
No |
name |
Required | Kubernetes-compatible application/release name | trinetra |
trinetra |
No |
namespace |
Required | Existing or new Kubernetes namespace | trinetra-system |
trinetra-system |
No |
applicationUid |
Generated | Marketplace Application resource UID | Generated | 3c730a62-… |
No |
controller.serviceAccountName |
Required | Kubernetes service-account name selected in Marketplace | None | trinetra-controller |
No |
ui.serviceAccountName |
Required | Kubernetes service-account name selected in Marketplace | None | trinetra-ui |
No |
probe.serviceAccountName |
Required | Kubernetes service-account name selected in Marketplace | None | trinetra-probe |
No |
gcp.project |
Required | Google Cloud project ID matching ^[a-z][a-z0-9-]{4,28}[a-z0-9]$ |
None | customer-prod-01 |
No |
gcp.region |
Optional | Google Cloud region name | us-central1 |
asia-south1 |
No |
storage.gcs.bucket |
Required | Existing Cloud Storage bucket name without gs:// |
None | customer-trinetra-evidence |
No |
ui.auth.adminEmail |
Required | Valid administrator email address | None | trinetra-admin@example.com |
Personal data |
ui.auth.adminPassword |
Required/generated | 24-character generated password including symbols | Generated | Generated by Marketplace | Yes |
ui.auth.proxySecret |
Required/generated | 48-character generated proxy secret | Generated | Generated by Marketplace | Yes |
license.activationToken |
Optional at deployment | LNP-issued BYOL activation token; blank permits post-deployment activation | Empty | Leave blank until issued | Yes |
ui.service.type |
Optional | ClusterIP or LoadBalancer |
ClusterIP |
ClusterIP |
No |
Parameters with chart defaults but not exposed in the Marketplace form
The Marketplace deployment fixes additional operational defaults in the approved chart, including evidence prefix reports, evidence retention 400 days, controller concurrency 4, controller observation timeout 600 seconds, controller API timeout 30 seconds, discovery cache 60 seconds, licence validation interval 3600 seconds, offline grace 7 days, near-expiry warning 14 days, and resource-unenrolment cooldown 24 hours.
These values are not customer input fields in the 5.5.3 Marketplace form. Do not represent them as configurable through Producer Portal.
Safe handling
- Prefer Workload Identity Federation over service-account JSON keys.
- Leave the optional activation token empty when the installation ID is required for licence issuance.
- Store generated credentials in the customer's approved secret manager.
- Change the temporary administrator password at first sign-in.
- Keep
ui.service.type=ClusterIPunless the customer has approved a temporary load balancer or a managed HTTPS ingress.