helm-release.yml

---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: sure
spec:
  interval: 1h
  chart:
    spec:
      chart: charts/sure
      version: 0.7.1-alpha.5
      interval: 30m
      reconcileStrategy: Revision
      sourceRef:
        kind: GitRepository
        name: sure
        namespace: sure
  values:
    image:
      repository: ghcr.io/we-promise/sure
      tag: 0.7.3-alpha.4@sha256:5c2bddd2956bb6f4ad8e3c1e7ddb3908cc8e198cd1736cd5575a245aa17a2f3a
      pullPolicy: IfNotPresent
    rails:
      env: production
      encryptionEnv:
        enabled: true
      existingSecret: "sure"
      extraEnvVars:
        - name: DB_HOST
          valueFrom:
            secretKeyRef:
              name: sure-pguser-sure
              key: host
        - name: DB_PORT
          valueFrom:
            secretKeyRef:
              name: sure-pguser-sure
              key: port
        - name: POSTGRES_DB
          valueFrom:
            secretKeyRef:
              name: sure-pguser-sure
              key: dbname
        - name: POSTGRES_USER
          valueFrom:
            secretKeyRef:
              name: sure-pguser-sure
              key: user
        - name: POSTGRES_PASSWORD
          valueFrom:
            secretKeyRef:
              name: sure-pguser-sure
              key: password
      secret:
        enabled: false
      settings:
        SELF_HOSTED: "true"
        ONBOARDING_STATE: "open"
        AI_DEBUG_MODE: "false"
        OPENAI_URI_BASE: http://ai-inference-01.chkpwd.com:8080
        OPENAI_MODEL: gemma3:4b
        RAILS_FORCE_SSL: "false"
        RAILS_ASSUME_SSL: "false"
    cnpg:
      enabled: false
      cluster:
        enabled: false
    redisOperator:
      enabled: false
      managed:
        enabled: false
    redisSimple:
      enabled: true
      image:
        repository: docker.io/redis
        tag: "8.8"
        pullPolicy: IfNotPresent
      service:
        port: 6379
      auth:
        enabled: true
        existingSecret: "sure"
        passwordKey: "REDIS_PASSWORD"
      persistence:
        enabled: false
      resources:
        requests:
          cpu: "100m"
          memory: "256Mi"
        limits:
          memory: "512Mi"
    service:
      type: ClusterIP
      port: 80
    serviceMonitor:
      enabled: false
      interval: 30s
      scrapeTimeout: 10s
      path: /metrics
      portName: http
      additionalLabels: {}
    web:
      enabled: true
      replicas: 1
      revisionHistoryLimit: 3
      strategy:
        rollingUpdate:
          maxUnavailable: 1
          maxSurge: 0
      resources:
        requests:
          cpu: 100m
          memory: 256Mi
        limits: {}
      livenessProbe:
        httpGet:
          path: /up
          port: http
        initialDelaySeconds: 20
        periodSeconds: 10
        timeoutSeconds: 2
        failureThreshold: 6
      readinessProbe:
        httpGet:
          path: /up
          port: http
        initialDelaySeconds: 10
        periodSeconds: 5
        timeoutSeconds: 2
        failureThreshold: 6
      startupProbe:
        httpGet:
          path: /up
          port: http
        failureThreshold: 30
        periodSeconds: 5
    worker:
      enabled: true
      replicas: 1
      queues: "default"
      strategy:
        rollingUpdate:
          maxUnavailable: 1
          maxSurge: 0
      resources:
        requests:
          cpu: 100m
          memory: 256Mi
        limits:
          memory: 512Mi
    migrations:
      strategy: job
      job:
        backoffLimit: 3
        ttlSecondsAfterFinished: 600
        command: ["bash", "-lc"]
        args: |
          DB_HOST=$(echo "$DATABASE_URL" | sed 's/.*@//; s/:.*//')
          until pg_isready -h "$DB_HOST" -p 5432; do echo "Waiting for DB..."; sleep 5; done
          echo "Preparing database (db:prepare)" && \
          DISABLE_DATABASE_ENVIRONMENT_CHECK=1 bundle exec rake db:prepare
    simplefin:
      encryption:
        backfill:
          command: ["bash", "-lc"]
          args: |
            if [ -n "$DB_PASSWORD" ]; then
              export DATABASE_URL="${DATABASE_URL//\$(DB_PASSWORD)/$DB_PASSWORD}"
            fi
            DB_HOST=$(echo "$DATABASE_URL" | sed 's/.*@//; s/:.*//')
              until pg_isready -h "$DB_HOST" -p 5432; do echo "Waiting for DB..."; sleep 5; done
              echo "Running SimpleFin encrypt_access_urls backfill (dry_run=$DRY_RUN)" && \
              bundle exec rake "sure:simplefin:encrypt_access_urls[dry_run=$DRY_RUN]"
    podSecurityContext:
      runAsNonRoot: true
      runAsUser: 1000
      runAsGroup: 1000
      fsGroup: 1000
      fsGroupChangePolicy: OnRootMismatch
    securityContext:
      allowPrivilegeEscalation: false
      readOnlyRootFilesystem: true
      capabilities:
        drop:
          - ALL
    writableTmp:
      enabled: true
    pipelock:
      enabled: true
      image:
        repository: ghcr.io/luckypipewrench/pipelock
        tag: 3.0.0
        pullPolicy: IfNotPresent
      replicas: 1
      # Pipelock run mode: strict, balanced, audit
      mode: balanced
      trustedDomains: ["*.chkpwd.com", "*.sure.svc.cluster.local"] # SSRF scanning allows requests to these domains without blocking
      forwardProxy:
        enabled: true
        port: 8888
        maxTunnelSeconds: 300
        idleTimeoutSeconds: 60
      mcpProxy:
        port: 8889
      # WebSocket proxy: bidirectional frame scanning for ws/wss connections.
      # Runs on the same listener as the forward proxy at /ws?url=<ws-url>.
      websocketProxy:
        enabled: true
        maxMessageBytes: 1048576 # 1MB per message
        maxConcurrentConnections: 128
        scanTextFrames: true # DLP + injection scanning on text frames
        allowBinaryFrames: false # block binary frames by default
        forwardCookies: false
        maxConnectionSeconds: 3600 # 1 hour max connection lifetime
        idleTimeoutSeconds: 300 # 5 min idle timeout
        originPolicy: rewrite # rewrite, forward, or strip
      # MCP tool policy: pre-execution rules for tool calls (shell obfuscation, etc.)
      mcpToolPolicy:
        enabled: true
        action: warn
        # Redirect profiles: route matched tool calls to audited handler programs instead
        # of blocking. The handler returns a synthetic MCP response. Fail-closed on error.
        # Example:
        #   redirectProfiles:
        #     safe-fetch:
        #       exec: ["/pipelock", "internal-redirect", "fetch-proxy"]
        #       reason: "Route fetch calls through audited proxy"
        redirectProfiles: {}
      # MCP session binding: pins tool inventory on first tools/list, detects injection
      mcpSessionBinding:
        enabled: true
        unknownToolAction: warn
      # Tool call chain detection: detects multi-step attack patterns (recon, exfil, etc.)
      toolChainDetection:
        enabled: true
        action: warn
        windowSize: 20
        maxGap: 3
      service:
        type: ClusterIP
      resources:
        requests:
          cpu: 50m
          memory: 64Mi
        limits:
          memory: 128Mi
      serviceMonitor:
        enabled: true
        interval: 30s
        scrapeTimeout: 10s
        path: /metrics
        portName: proxy
        additionalLabels: {}
      requireForExternalAssistant: true