# Default values for gitops-status-server
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

# Number of replicas for the deployment
replicaCount: 1

# Container image configuration
image:
  # Use nginx-unprivileged for better security (runs as non-root)
  repository: nginxinc/nginx-unprivileged
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion
  tag: "1.25-alpine"

# API backend container configuration (handles POST requests)
api:
  image:
    # Python Flask API for handling status updates
    repository: python
    pullPolicy: IfNotPresent
    tag: "3.11-alpine"
  # Pre-install Flask via pip before running the app
  pip_packages: "Flask==2.3.2"

# Image pull secrets for private registries
imagePullSecrets: []

# Override the name of the chart
nameOverride: ""
fullnameOverride: ""

# Service configuration
service:
  # Service type - ClusterIP for internal-only access
  type: ClusterIP
  # Port where the service will be exposed
  port: 80
  # Target port on the container (nginx default)
  targetPort: 8080
  # Annotations to add to the service
  annotations: {}

# Resource limits and requests
resources:
  limits:
    cpu: 100m
    memory: 64Mi
  requests:
    cpu: 50m
    memory: 32Mi

# Node selector for pod assignment
nodeSelector: {}

# Tolerations for pod assignment
tolerations: []

# Affinity rules for pod assignment
affinity: {}

# Security context for the pod
podSecurityContext:
  runAsNonRoot: true
  runAsUser: 101
  fsGroup: 101

# Security context for the container
securityContext:
  allowPrivilegeEscalation: false
  capabilities:
    drop:
    - ALL
  readOnlyRootFilesystem: true

# Status JSON content
# This can be overridden in your values to customize the status information
statusJson:
  repo: "rsyslog"
  server: "rsyslog-lab"
  sync_status: "UNKNOWN"
  drift_count: 0
  files: []
  last_check: ""

# Labels to add to all resources
labels: {}

# Annotations to add to all resources
annotations: {}

# Pod annotations
podAnnotations: {}

# Service account configuration
serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""