ingress-caddy/minikube-values.yaml at main · brdelphus/ingress-caddy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
## minikube dev overrides — not for production
image:
  pullPolicy: IfNotPresent

# Single-pod Deployment; DaemonSet hostPorts don't work with docker driver
workloadType: Deployment
replicaCount: 1

hostPorts:
  enabled: false

# NodePort service — access via minikube ip + nodePort
service:
  enabled: true
  type: NodePort

# No cert-manager in minikube — disable CSI
tls:
  certManagerCSI:
    enabled: false
  existingSecret: ""

# Coraza WAF in detection-only is fine, keep it on
plugins:
  coraza:
    enabled: true
    ruleEngine: DetectionOnly

# Minikube pod CIDR is 10.244.0.0/16 by default
realIP:
  trustedProxies:
    - 10.244.0.0/16
    - 127.0.0.1/32

# No Prometheus Operator in minikube
metrics:
  serviceMonitor:
    enabled: false

# PDB needs >=2 pods; irrelevant for single-replica dev
podDisruptionBudget:
  enabled: false

# Make caddy the default IngressClass for easy testing
k8sIngress:
  isDefaultClass: true