---
# -- Override the name
nameOverride: ""

# -- Override the fullname
fullnameOverride: ""

# -- Replicas for the deployment
replicaCount: 1

config:
  # -- List of environment variables to forward into the application environment.
  # Modify this list if additional environment variables need to be accessible.
  forwarded_env_vars: []

image:
  # -- Image repository used by deployment
  repository: semaphoreui/semaphore

  # -- Optional tag for the repository, defaults to app version
  tag: ""

  # -- Image pull policy
  pullPolicy: IfNotPresent

  # -- Optional name of pull secret if using a private registry
  pullSecrets: []

serviceAccount:
  # -- Create a new service account
  create: true

  # -- Optional name for an existing service account
  name: ""

  # -- Define annotations for the service account
  annotations: {}

# -- Defines dnsConfig for the deployment
# dnsConfig:
# nameservers:      # List of IPs
#   - 1.1.1.1
# searches:         # Search domains
#   - ns1.svc.cluster.local
# options:          # Resolver options
#   - name: ndots
#     value: "2"

# -- Update strategy for deployment
updateStrategy:
  type: Recreate

# -- Define additional labels
labels: {}

# -- Define additional annotations
annotations: {}

# -- Security context for the deployment
securityContext:
  fsGroup: 1001

# -- Security context for the pod
podSecurityContext: {}

# -- List of extra init containers
extraInitContainers: []

# -- List of extra sidecar containers
extraSidecarContainers: []

# -- List of extra volumes
extraVolumes: []
  # - name: extra
  #   emptyDir: {}

# -- List of extra volume mounts
extraVolumeMounts: []
  # - name: extra
  #   mountPath: /usr/local/share
  #   readOnly: true

service:
  # -- Type of the service
  type: ClusterIP

  # -- (int) Port of the service
  port: 3000

  # -- (int) Internal port of the service
  internalPort: 3000

  # -- Additional annotations for the service
  annotations: {}

  # -- Additional labels for the service
  labels: {}

ingress:
  # -- Enable ingress
  enabled: false

  # -- (string) Class name for the ingress resource
  className:

  # -- Host definition for ingress
  hosts:
    - host: example.local
      paths:
        - path: /
          pathType: Prefix

  # -- Optional TLS configuration for ingress
  tls: []

  # -- Additional annotations for the ingress
  annotations: {}

  # -- Additional labels for the ingress
  labels: {}

persistence:
  # -- Enable persistence for workdir
  enabled: true

  # -- Size for boltdb volume
  size: 10G

  # -- Storage class used for workdir volume
  storageClass:

  # -- Access modes used for workdir volume
  accessModes:
    - ReadWriteOnce

  # -- Name of an already existing claim
  existingClaim:

secrets:
  # -- Cookie hash secret, generated if not present
  cookieHash:

  # -- Key used within secret for cookieHash
  cookieHashKey: cookieHash

  # -- Cookie encryption secret, generated if not present
  cookieEncryption:

  # -- Key used within secret for cookieEncryption
  cookieEncryptionKey: cookieEncryption

  # -- Access key encryption secret, generated if not present
  accesskeyEncryption:

  # -- Key used within secret for accesskeyEncryption
  accesskeyEncryptionKey: accesskeyEncryption

  # -- Existing secret to use for secrets
  existingSecret:

customCertificates:
  # -- Enable appending custom CA bundle into ca-certificates.crt for outbound TLS (e.g. on-prem git)
  enabled: false

  # -- Existing secret containing the CA bundle (required if enabled and no configmap)
  existingSecret:

  # -- Existing configmap containing the CA bundle (required if enabled and no secret)
  existingConfigMap:

  # -- Key in secret/configmap that holds the CA bundle
  key: ca.crt

  # -- Path where the combined CA bundle is mounted (ca-certificates.crt)
  mountPath: /etc/ssl/certs/ca-certificates.crt

general:
  # -- Host to access Semaphore
  host:

  # -- Use Git client implementation
  gitClient: cmd_git

  # -- Working directory for Semaphore
  tmpPath: /tmp/semaphore

  # -- Maximum parallel tasks
  maxParallelTasks: 0

  # -- Disable password login
  passwordLoginDisable: false

  # -- Allow non-admins to create projects
  nonAdminCanCreateProject: false

  # -- Enable usage of remote runners
  useRemoteRunner: false

  # -- Path to SSH config
  sshConfigPath:

  # -- Additional Python packages
  additionalPythonPackages: []

database:
  # -- Type of database backend
  type: bolt

  # -- Read username from secret
  usernameFromSecret: true

  # -- Username for database
  username: semaphore

  # -- Key used within secret for username
  usernameKey: username

  # -- Password for database
  password:

  # -- Key used within secret for password
  passwordKey: password

  # -- Existing secret to use for credentials
  existingSecret:

  # -- Host for database connection
  host:

  # -- Port for database connection
  port:

  # -- Name of the used database
  name: semaphore

  # -- Options for database connection
  options: {}

  # -- Path for the boltdb
  path: /var/lib/semaphore/database.boltdb

  persistence:
    # -- Enable persistence for boltdb
    enabled: true

    # -- Size for boltdb volume
    size: 5G

    # -- Storage class used for boltdb volume
    storageClass:

    # -- Access modes used for boltdb volume
    accessModes:
      - ReadWriteOnce

    # -- Name of an already existing claim
    existingClaim:

ldap:
  # -- Enable LDAP authentication
  enable: false

  # -- Address of LDAP server
  server:

  # -- Enable TLS connection to LDAP
  needtls: false

  # Search DN for LDAP
  searchdn:

  # -- Search filter for LDAP
  filter:

  # -- BindDN for LDAP authentication
  binddn:

  # -- Key used within secret for username
  binddnKey: username

  # -- Password for LDAP authentication
  password:

  # -- Key used within secret for username
  passwordKey: password

  # -- Existing secret to use for ldap
  existingSecret:

  # -- Mapping for LDAP attributes
  mappings:
    dn: dn
    mail: mail
    uid: uid
    cn: cn

oidc:
  # -- Enable oidc authentication
  enable: false

  # -- Dictionary of oidc providers
  providers: {}

email:
  # -- Enable email alerting
  alert: false

  # -- Sender for email alerting
  sender:

  # -- Host of the SMTP server
  host:

  # -- Port of the SMTP server
  port:

  # -- Enable a secure connection
  secure: false

  # -- Username for SMTP server
  username:

  # -- Key used within secret for username
  usernameKey: username

  # -- Password for SMTP server
  password:

  # -- Key used within secret for password
  passwordKey: password

  # -- Existing secret to use for email
  existingSecret:

telegram:
  # -- Enable telegram alerting
  alert: false

  # -- Chat used for telegram
  chat:

  # -- Key used within secret for chat
  chatKey: chat

  # -- Token used for telegram
  token:

  # -- Key used within secret for token
  tokenKey: token

  # -- Existing secret to use for telegram
  existingSecret:

slack:
  # -- Enable slack alerting
  alert: false

  # -- URL used for slack
  url:

  # -- Key used within secret for url
  urlKey: url

  # -- Existing secret to use for slack
  existingSecret:

runner:
  # -- Runner registration token
  token:

  # -- Key used within secret for token
  tokenKey: token

  # -- Existing secret to use for runner
  existingSecret:

admin:
  # -- Create an local admin user
  create: false

  # -- Fullname for local admin
  fullname: Admin

  # -- Key used within secret for fullname
  fullnameKey: fullname

  # -- Username for local admin
  username: admin

  # -- Key used within secret for username
  usernameKey: username

  # -- Password for local admin
  password:

  # -- Key used within secret for password
  passwordKey: password

  # -- Email for local admin
  email: admin@localhost

  # -- Key used within secret for email
  emailKey: email

  # -- Existing secret to use for admin
  existingSecret:

# -- Resources for the deployment
resources:
  limits: {}
  requests:
    cpu: 100m
    memory: 64Mi

# -- Node selector for the deployment
nodeSelector: {}

# -- Affinity for the deployment
affinity: {}

# -- Tolerations for the deployment
tolerations: []

# -- List of environment variables from existing secrets
envFromSecrets: []

# -- List of environment variables from existing configmaps
envFromConfigMaps: []

# -- Extra environment variables from mapping
extraEnvVariables: {}

# -- Extra environment variables from secrets
extraEnvSecrets: {}

mariadb:
  # -- Enable mariadb dependency
  enabled: false

  # -- Override fullname of mariadb dependency
  fullnameOverride: mariadb

  # -- Architecture for mariadb
  architecture: standalone

  auth:
    # -- Database created for semaphore
    database: semaphore

    # -- Username for semaphore database
    username: semaphore

    # -- Password for semaphore database
    password:

  serviceAccount:
    # -- Create service account for mariadb
    create: true

  metrics:
    # -- Enable metrics for mariadb
    enabled: true

    serviceMonitor:
      # -- Enable service monitor for mariadb
      enabled: false

postgresql:
  # -- Enable postgresql dependency
  enabled: false

  # -- Override fullname of postgresql dependency
  fullnameOverride: postgresql

  # -- Architecture for postgresql
  architecture: standalone

  auth:
    # -- Database created for semaphore
    database: semaphore

    # -- Username for semaphore database
    username: semaphore

    # -- Password for semaphore database
    password:

  serviceAccount:
    # -- Create service account for postgresql
    create: true

  metrics:
    # -- Enable metrics for postgresql
    enabled: true

    serviceMonitor:
      # -- Enable service monitor for postgresql
      enabled: false
...