values.yaml

# -- Provide a name in place of `syncstorage-rs`
nameOverride: ""

# -- String to fully override `"syncstorage-rs.fullname"`
fullnameOverride: ""

# -- Number of replicas
replicaCount: 1

# -- The number of old ReplicaSets to retain
revisionHistoryLimit: 0

image:
  # -- image registry
  registry: ghcr.io
  # -- image repository
  repository: porelli/firefox-sync
  # -- image pull policy
  pullPolicy: Always
  # -- Overrides the image tag
  tag: "syncstorage-rs-mysql-0.18.2"

# -- If defined, uses a Secret to pull an image from a private Docker registry or repository.
imagePullSecrets: []

serviceAccount:
  # -- Specifies whether a service account should be created
  create: true
  # -- Annotations to add to the service account
  annotations: {}
  # -- The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

# -- Annotations to be added to exporter pods
podAnnotations: {}

# -- pod-level security context
podSecurityContext: {}
  # fsGroup: 2000

# -- container-level security context
securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

service:
  # -- Kubernetes service type
  type: ClusterIP
  # -- Kubernetes port where service is exposed
  port: 80

ingress:
  enabled: false
  className: ""
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
    - host: chart-example.local
      paths:
        - path: /
          pathType: ImplementationSpecific
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - chart-example.local

# BETA: Configure the gateway routes for the chart here.
# More routes can be added by adding a dictionary key like the 'main' route.
# Being BETA this can/will change in the future without notice, do not use unless you want to take that risk
# [[ref]](https://gateway-api.sigs.k8s.io/references/spec/#gateway.networking.k8s.io%2fv1alpha2)
route:
  main:
    # -- Enables or disables the route
    enabled: false

    # -- Set the route apiVersion, e.g. gateway.networking.k8s.io/v1 or gateway.networking.k8s.io/v1alpha2
    apiVersion: gateway.networking.k8s.io/v1

    # -- Set the route kind
    # Valid options are GRPCRoute, HTTPRoute, TCPRoute, TLSRoute, UDPRoute
    kind: HTTPRoute

    # -- Add annotations to the route
    annotations: {}

    # -- Add labels to the route
    labels: {}

    # -- Hostnames to be matched
    hostnames: []
    # - my-filter.example.com

    # -- Parent references (Gateway)
    parentRefs: []
    # - name: acme-gw

    # -- define conditions used for matching the rule against incoming HTTP requests.
    # @default -- see [values.yaml](./values.yaml)
    matches:
      - path:
          type: PathPrefix
          value: /

    # -- Filters define the filters that are applied to requests that match this rule.
    filters: []

    # -- Additional custom rules that can be added to the route
    additionalRules: []

    # -- adds a filter for redirecting to https (HTTP 301 Moved Permanently). To redirect HTTP traffic to HTTPS, you need to have a Gateway with both HTTP and HTTPS listeners. Matches and filters do not take effect if enabled. Ref. https://gateway-api.sigs.k8s.io/guides/http-redirect-rewrite/
    httpsRedirect: false

    # -- defines the timeouts that can be configured for an HTTP request
    timeouts: {}

# -- Resource limits and requests for the controller pods.
resources: {}
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

livenessProbe:
  # -- Enable the livenessProbe
  enabled: true
  # -- Failure threshold for livenessProbe
  failureThreshold: 6
  # -- Initial delay seconds for livenessProbe
  initialDelaySeconds: 10
  # -- Period seconds for livenessProbe
  periodSeconds: 10
  # -- Success threshold for livenessProbe
  successThreshold: 1
  # -- Timeout in seconds for livenessProbe
  timeoutSeconds: 2

readinessProbe:
  # -- Enable the readinessProbe
  enabled: true
  # -- Failure threshold for readinessProbe
  failureThreshold: 6
  # -- Initial delay seconds for readinessProbe
  initialDelaySeconds: 10
  # -- Period seconds for readinessProbe
  periodSeconds: 10
  # -- Success threshold for readinessProbe
  successThreshold: 1
  # -- Timeout in seconds for readinessProbe
  timeoutSeconds: 2

# -- Node labels for pod assignment
nodeSelector: {}

# -- Toleration labels for pod assignment
tolerations: []

# -- Affinity settings for pod assignment
affinity: {}

# -- additional environment variables to be added to the pods
extraEnv: []

syncstorage:
  config:
    # -- host to listen for connections
    host: "0.0.0.0"
    # -- The minimum Rust error logging level. Valid values: debug, info, warn, error.
    logLevel: info
    # -- connection port
    port: 8000
    # -- run migrations for the tokenserver database
    runTokenserverDbMigrations: true
  masterKey:
    # -- Use existing secret for the sync master key (`syncstorage.masterKey.value` will be ignored and picked up from this secret). The secret has to contain the key `master-key`.
    existingSecret: ""
    # -- The sync master key value
    value: ""
  syncserver-db:
    auth:
      # -- The database name to be used when using an external database for the Syncserver. Will be ignored when you activate the integrated database with syncserver-db.enabled.
      database: ""
      # -- Use existing secret for connection url. The secret has to contain the key `database-url`.
      existingSecret: ""
      # -- The password credential to be used when using an external database driver. Will be ignored when you activate the integrated database with syncserver-db.enabled.
      password: ""
      # -- The username credential to be used when using an external database driver. Will be ignored when you activate the integrated database with syncserver-db.enabled.
      username: ""
    # -- The host name of the database server when using an external database driver. Will be ignored when you activate the integrated database with syncserver-db.enabled.
    host: ""
    # -- The port in which the database service is running when using an external database driver. Will be ignored when you activate the integrated database with syncserver-db.enabled.
    port: 3306
  tokenserver-db:
    auth:
      # -- The database name to be used when using an external database for the Tokenserver. Will be ignored when you activate the integrated database with tokenserver-db.enabled.
      database: ""
      # -- Use existing secret for connection url. The secret has to contain the keys `database-password` and `database-url`.
      existingSecret: ""
      # -- The password credential to be used when using an external database driver. Will be ignored when you activate the integrated database with tokenserver-db.enabled.
      password: ""
      # -- The username credential to be used when using an external database driver. Will be ignored when you activate the integrated database with tokenserver-db.enabled.
      username: ""
    # -- The host name of the database server when using an external database driver. Will be ignored when you activate the integrated database with tokenserver-db.enabled.
    host: ""
    # -- The port in which the database service is running when using an external database driver. Will be ignored when you activate the integrated database with tokenserver-db.enabled.
    port: 3306
  tokenserver-db-lock:
    # -- enable an init container that locks the tokenserver db from accepting new users if the maximum number of users are registered already
    enabled: false
    config:
      # -- maximum number of users that are allowed to user your server
      maxUsers: 1
    image:
      # -- image registry
      registry: ghcr.io
      # -- image repository
      repository: porelli/firefox-sync
      # -- image pull policy
      pullPolicy: Always
      # -- Overrides the image tag
      tag: "syncstorage-rs-mysql-init-0.18.2"

syncserver-db:
  # -- enable integrated MariaDB™ subchart from Bitnami for the Syncserver database
  enabled: true
  auth:
    # -- The database name to be used when using the integrated MariaDB database.
    database: syncserver
    # -- The password credential to be used when using the integrated MariaDB database.
    password: syncserver
    # -- The username credential to be used when using the integrated MariaDB database.
    username: syncserver

tokenserver-db:
  # -- enable integrated MariaDB™ subchart from Bitnami for the Tokenserver database
  enabled: true
  auth:
    # -- The database name to be used when using the integrated MariaDB database.
    database: tokenserver
    # -- The password credential to be used when using the integrated MariaDB database.
    password: tokenserver
    # -- The username credential to be used when using the integrated MariaDB database.
    username: tokenserver