---
#
# IMPORTANT NOTE
#
# This chart inherits from our common library chart. You can check the default values/options here:
# https://github.com/bjw-s/helm-charts/blob/main/charts/library/common/values.yaml
#

controllers:
  main:
    # -- Controller type
    type: deployment
    containers:
      app:
        image:
          # -- Image repository
          repository: ghcr.io/corentinth/it-tools
          # -- Image pull policy
          pullPolicy: IfNotPresent
          # -- Image tag
          tag: 2024.5.13-a0bc346

        # -- Environment variables
        # @default -- See [values.yaml](./values.yaml)
        env: {}
          # TZ: UTC

        securityContext:
          # -- Mount the container's root filesystem as read-only
          readOnlyRootFilesystem: true
          # -- Disable privilege escalations
          allowPrivilegeEscalation: false
          # -- Drop all capabilities
          capabilities:
            drop:
              - ALL

    pod:
      securityContext:
        # -- Run container as a non-root user
        runAsNonRoot: true
        # -- Run as `nobody` user
        runAsUser: 65534
        # -- Run as `nobody` group
        runAsGroup: 65534
        # -- Volume binds will be granted to `nobody` group
        fsGroup: 65534

    # -- Set the resource requests / limits for the container.
    resources: {}
      # limits:
      #   cpu: 100m
      #   memory: 128Mi
      # requests:
      #   cpu: 100m
      #   memory: 128Mi

# -- Configure the services for the chart here.
# @default -- See [values.yaml](./values.yaml)
service:
  main:
    controller: main
    ports:
      http:
        port: 80

# -- Configure persistence for the chart under this key.
# @default -- See [values.yaml](./values.yaml)
persistence:
  data:
    enabled: false
    retain: true
    # storageClass: ""
    # accessMode: ReadWriteOnce
    # size: 1Gi

ingress:
  # -- Enable and configure ingress settings for the chart under this key.
  # @default -- See [values.yaml](./values.yaml)
  main:
    enabled: false
    # className: ""
    # annotations: {}
    # hosts:
    #   - host: &host-main "chart-example.local"
    #     paths:
    #       - path: /
    #         pathType: Prefix
    #         service:
    #           identifier: main
    #           port: http
    # tls:
    #   - secretName: chart-example-tls
    #     hosts:
    #       - *host-main