values.yaml

global:
  ci: false
  dynamic:
    includes:
      - "dynamic-plugins.default.yaml"
    plugins:
      ##### Disable upstream lightspeed (replaced by custom DCR builds) #####
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-lightspeed:bs_1.49.4__2.8.5
        disabled: true
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-lightspeed-backend:bs_1.49.4__2.8.5
        disabled: true

      ##### OAuth2 consent page plugin (required for DCR) #####
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth:pr_2498__0.1.6
        disabled: false
        pluginConfig:
          dynamicPlugins:
            frontend:
              backstage.plugin-auth:
                dynamicRoutes:
                  - path: /oauth2
                    importName: Router
                    module: PluginRoot

      ##### Custom sign in page plugin #####
      - package: oci://quay.io/redhat-ai-dev/rolling-demo-customized-sign-in-page:v0.1.1
        disabled: false
        pluginConfig:
          dynamicPlugins:
            frontend:
              red-hat-developer-hub.backstage-plugin-rolling-demo-customized-sign-in-page:
                signInPage:
                  importName: RollingDemoCustomizedSignInPage

      ##### Red Hat Plugins without wrappers #####
      # Plugin for backstage auth
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth:bs_1.49.4__0.1.6
        disabled: false
        pluginConfig:
          dynamicPlugins:
            frontend:
              backstage.plugin-auth:
                dynamicRoutes:
                  - path: /oauth2/*
                    importName: Router
      # Plugins for ArgoCD integration
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-community-plugin-argocd:bs_1.49.4__2.8.0
        pluginConfig:
          dynamicPlugins:
            frontend:
              backstage-community.plugin-redhat-argocd:
                mountPoints:
                  - mountPoint: entity.page.overview/cards
                    importName: ArgocdDeploymentSummary
                    config:
                      layout:
                        gridColumnEnd:
                          lg: "span 8"
                          xs: "span 12"
                      if:
                        allOf:
                          - isArgocdConfigured
                  - mountPoint: entity.page.cd/cards
                    importName: ArgocdDeploymentLifecycle
                    config:
                      layout:
                        gridColumn: '1 / -1'
                      if:
                        allOf:
                          - isArgocdConfigured
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/roadiehq-backstage-plugin-argo-cd-backend:bs_1.49.4__4.8.0
        disabled: false
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/roadiehq-scaffolder-backend-argocd:bs_1.49.4__1.8.1
        disabled: false

      # MCP Actions plugins
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-mcp-actions-backend:bs_1.49.4__0.1.11
        disabled: false
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-software-catalog-mcp-extras:bs_1.49.4__0.2.2
        disabled: false
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-techdocs-mcp-extras:bs_1.49.4__0.2.3
        disabled: false
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-scaffolder-mcp-extras:bs_1.49.4__0.4.1
        disabled: false

      # Model Catalog Plugins
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-catalog-backend-module-model-catalog:bs_1.49.4__0.9.0
        disabled: false
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-catalog-techdoc-url-reader-backend:bs_1.49.4__0.5.0
        disabled: false

      # Tekton Pipelines Plugins
      # Tekton CI Plugins
      - package: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-community-plugin-tekton:bs_1.49.4__3.37.0
        disabled: false
        pluginConfig:
          dynamicPlugins:
            frontend:
              backstage-community.plugin-tekton:
                mountPoints:
                  - config:
                      if:
                        allOf:
                          - isTektonCIAvailable
                      layout:
                        gridColumn: 1 / -1
                        gridRowStart: 1
                    importName: TektonCI
                    mountPoint: entity.page.ci/cards

      ##### Default Backstage Dynamic Plugins #####
      # Plugin for global header customization
      # We follow the default plugins setup with a slight diff
      # on the application-launcher dropdown items
      - package: ./dynamic-plugins/dist/red-hat-developer-hub-backstage-plugin-global-header
        disabled: false
        pluginConfig:
          app:
            sidebar:
              search: false
              settings: false
              logo: false
          dynamicPlugins:
            frontend:
              default.main-menu-items:
                menuItems:
                  default.create:
                    title: ''
                  default.admin:
                    title: Administration
                    textKey: menuItem.administration
                    icon: admin
                  default.help:
                    title: RHDH Guide
                    icon: techdocs
                    priority: 5
                    to: /catalog/default/system/rhdh-getting-started/docs
                    enabled: true
              red-hat-developer-hub.backstage-plugin-global-header:
                translationResources:
                - importName: globalHeaderTranslations
                  ref: globalHeaderTranslationRef
                mountPoints:
                - mountPoint: application/header
                  importName: GlobalHeader
                  config:
                    position: above-sidebar
                - mountPoint: global.header/component
                  importName: CompanyLogo
                  config:
                    priority: 200
                    props:
                      to: /
                - mountPoint: global.header/component
                  importName: SearchComponent
                  config:
                    priority: 100
                - mountPoint: global.header/component
                  importName: Spacer
                  config:
                    priority: 99
                    props:
                      growFactor: 0
                - mountPoint: global.header/component
                  importName: HeaderIconButton
                  config:
                    priority: 90
                    props:
                      title: Self-service
                      titleKey: create.title
                      icon: add
                      to: create
                - mountPoint: global.header/component
                  importName: StarredDropdown
                  config:
                    priority: 85
                - mountPoint: global.header/component
                  importName: ApplicationLauncherDropdown
                  config:
                    priority: 82
                - mountPoint: global.header/application-launcher
                  importName: MenuItemLink
                  config:
                    section: Documentation
                    priority: 300
                    props:
                      title: Developer Hub
                      icon: https://upload.wikimedia.org/wikipedia/commons/d/d8/Red_Hat_logo.svg
                      link: https://docs.redhat.com/en/documentation/red_hat_developer_hub

                - mountPoint: global.header/application-launcher
                  importName: MenuItemLink
                  config:
                    section: Documentation
                    priority: 290
                    props:
                      title: Openshift AI Docs
                      icon: https://upload.wikimedia.org/wikipedia/commons/d/d8/Red_Hat_logo.svg
                      link: https://docs.redhat.com/en/documentation/red_hat_openshift_ai_self-managed

                - mountPoint: global.header/application-launcher
                  importName: MenuItemLink
                  config:
                    section: Developer Tools
                    priority: 200
                    props:
                      title: RHDH Local
                      icon: https://upload.wikimedia.org/wikipedia/commons/d/d8/Red_Hat_logo.svg
                      link: https://github.com/redhat-developer/rhdh-local

                - mountPoint: global.header/application-launcher
                  importName: MenuItemLink
                  config:
                    section: Developer Tools
                    priority: 190
                    props:
                      title: RHDH Dynamic Plugin Factory
                      icon: https://upload.wikimedia.org/wikipedia/commons/d/d8/Red_Hat_logo.svg
                      link: https://github.com/redhat-developer/rhdh-plugins

                - mountPoint: global.header/application-launcher
                  importName: MenuItemLink
                  config:
                    section: Developer Tools
                    priority: 180
                    props:
                      title: RHDH CLI
                      icon: https://upload.wikimedia.org/wikipedia/commons/d/d8/Red_Hat_logo.svg
                      link: https://github.com/redhat-developer/rhdh-cli

                - mountPoint: global.header/application-launcher
                  importName: MenuItemLink
                  config:
                    section: Quick Links
                    priority: 150
                    props:
                      title: MCP Tools Guide
                      icon: https://upload.wikimedia.org/wikipedia/commons/0/01/Google_Docs_logo_%282014-2020%29.svg
                      link: https://docs.google.com/document/d/1o9qRYCAszGzTwW2mRjC4c9wFwJIx8J3XF1kGPFy5F1s/edit?tab=t.0

                - mountPoint: global.header/application-launcher
                  importName: MenuItemLink
                  config:
                    section: Quick Links
                    priority: 140
                    props:
                      title: Openshift AI
                      icon: https://upload.wikimedia.org/wikipedia/commons/d/d8/Red_Hat_logo.svg
                      link: https://data-science-gateway.apps.rosa.redhat-ai-dev.m6no.p3.openshiftapps.com/

                - mountPoint: global.header/application-launcher
                  importName: MenuItemLink
                  config:
                    section: Quick Links
                    priority: 139
                    props:
                      title: RHDH AI Rolling Demo Monitoring
                      icon: https://upload.wikimedia.org/wikipedia/commons/a/a1/Grafana_logo.svg
                      link: https://grafana-route-devcluster-monitoring.apps.rosa.redhat-ai-dev.m6no.p3.openshiftapps.com/

                - mountPoint: global.header/component
                  importName: HelpDropdown
                  config:
                    priority: 80
                - mountPoint: global.header/help
                  importName: SupportButton
                  config:
                    priority: 10
                - mountPoint: global.header/component
                  importName: NotificationButton
                  config:
                    priority: 70
                - mountPoint: global.header/component
                  importName: Divider
                  config:
                    priority: 50
                - mountPoint: global.header/component
                  importName: ProfileDropdown
                  config:
                    priority: 10
                - mountPoint: global.header/profile
                  importName: MenuItemLink
                  config:
                    priority: 100
                    props:
                      title: Settings
                      titleKey: profile.settings
                      link: /settings
                      icon: manageAccounts
                - mountPoint: global.header/profile
                  importName: MenuItemLink
                  config:
                    priority: 90
                    props:
                      title: My profile
                      titleKey: profile.myProfile
                      type: myProfile
                      icon: account
                - mountPoint: global.header/profile
                  importName: LogoutButton
                  config:
                    priority: 10

      # Plugins for Kubernetes integration
      - package: ./dynamic-plugins/dist/backstage-plugin-kubernetes-backend-dynamic
        disabled: false
      - package: ./dynamic-plugins/dist/backstage-plugin-kubernetes
        disabled: false
      - package: ./dynamic-plugins/dist/backstage-community-plugin-topology
        disabled: false

      # Catalog plugins
      - package: ./dynamic-plugins/dist/backstage-community-plugin-catalog-backend-module-keycloak-dynamic
        disabled: false

      # TechDocs plugins
      - package: ./dynamic-plugins/dist/backstage-plugin-techdocs-backend-dynamic
        disabled: false        
      - package: ./dynamic-plugins/dist/backstage-plugin-techdocs
        disabled: false

      # Gitlab Plugins
      - package: ./dynamic-plugins/dist/backstage-plugin-catalog-backend-module-github-dynamic
        disabled: false
      - package: ./dynamic-plugins/dist/backstage-plugin-scaffolder-backend-module-gitlab-dynamic
        disabled: false
      - package: ./dynamic-plugins/dist/backstage-plugin-catalog-backend-module-gitlab-dynamic
        disabled: true
      - package: ./dynamic-plugins/dist/backstage-plugin-catalog-backend-module-gitlab-org-dynamic
        disabled: true
        
      # Github Plugins
      - package: ./dynamic-plugins/dist/backstage-plugin-catalog-backend-module-github-org-dynamic
        disabled: false
      - package: ./dynamic-plugins/dist/backstage-plugin-scaffolder-backend-module-github-dynamic
        disabled: false

  clusterRouterBase: apps.rosa.redhat-ai-dev.m6no.p3.openshiftapps.com
  host: ""
  auth:
    backend:
      enabled: true
      existingSecret: ""
      value: ""

  # Configure lightspeed post GA
  lightspeed:
    enabled: true
    plugins:
      - package: oci://quay.io/maysunfaisal/rhdh-plugin-lightspeed:dcr-0.6.0!red-hat-developer-hub-backstage-plugin-lightspeed
        disabled: false
        pluginConfig:
          dynamicPlugins:
            frontend:
              red-hat-developer-hub.backstage-plugin-lightspeed:
                translationResources:
                  - importName: lightspeedTranslations
                    module: Alpha
                    ref: lightspeedTranslationRef
                dynamicRoutes:
                  - path: /intelligent-assistant
                    importName: LightspeedPage
                mountPoints:
                  - mountPoint: application/listener
                    importName: LightspeedFAB
                  - mountPoint: application/provider
                    importName: LightspeedDrawerProvider
                  - mountPoint: application/internal/drawer-state
                    importName: LightspeedDrawerStateExposer
                    config:
                      id: lightspeed
                  - mountPoint: application/internal/drawer-content
                    importName: LightspeedChatContainer
                    config:
                      id: lightspeed
                      priority: 100
      - package: oci://quay.io/maysunfaisal/rhdh-plugin-lightspeed-backend:dcr-0.6.0!red-hat-developer-hub-backstage-plugin-lightspeed-backend
        disabled: false
    secret:
      create: false
      name: "llama-stack-secrets"
    sidecar:
      image: quay.io/lightspeed-core/lightspeed-stack:dev-20260610-be591ad
    configMaps:
      - name: stack
        create: true
        mountPath: /app-root/lightspeed-stack.yaml
        subPath: lightspeed-stack.yaml
        sourceFile: lightspeed-stack.yaml
        optional: false
      # override llama-stack-config to keep the gpt allowed models customization
      - name: config
        create: false
        nameOverride: "llama-stack-config"
        mountPath: /app-root/config.yaml
        subPath: config.yaml
        sourceFile: config.yaml
        optional: false
      - name: rhdh-profile
        create: false
        nameOverride: "rhdh-profile"
        mountPath: /app-root/rhdh-profile.py
        subPath: rhdh-profile.py
        sourceFile: rhdh-profile.py
        optional: false

backstage:
  # override the default name to stay in the context
  # of the same deployment resource (e.g. rolling-demo-backstage)
  # where the latest rhdh-chart introduces rolling-demo-developer-hub
  nameOverride: backstage
  upstream:
    nameOverride: backstage
    backstage:
      image:
        registry: quay.io
        repository: rhdh/rhdh-hub-rhel9
        tag: "1.10-139"
        pullSecrets:
          - quay-pull-secret
      command: []
      appConfig:
        app:
          title: AI Rolling Demo Developer Hub
          baseUrl: "${RHDH_BASE_URL}"
          analytics:
            adoptionInsights:
              maxBufferSize: 20
              flushInterval: 5000
              debug: false
              licensedUsers: 50
        auth:
          environment: production
          # Enable experimental features for OIDC auth
          experimentalClientIdMetadataDocuments:
            enabled: true
          experimentalRefreshToken:
            enabled: true
          experimentalDynamicClientRegistration:
            enabled: true
            allowedRedirectUriPatterns:
              - '*'
          session:
            secret: "${BACKEND_SECRET}"
          providers:
            oidc:
              production:
                metadataUrl: "${KEYCLOAK_METADATA_URL}"
                clientId: "${KEYCLOAK_CLIENT_ID}"
                clientSecret: "${KEYCLOAK_CLIENT_SECRET}"
                callbackUrl: "${RHDH_CALLBACK_URL}"
                prompt: auto
                signIn:
                  resolvers:
                    - resolver: preferredUsernameMatchingUserEntityName
              development:
                metadataUrl: "${KEYCLOAK_METADATA_URL}"
                clientId: "${KEYCLOAK_CLIENT_ID}"
                clientSecret: "${KEYCLOAK_CLIENT_SECRET}"
                callbackUrl: "${RHDH_CALLBACK_URL}"
                prompt: auto
                signIn:
                  resolvers:
                    - resolver: preferredUsernameMatchingUserEntityName
        backend:
          actions:
            pluginSources:
              - 'software-catalog-mcp-extras'
              - 'techdocs-mcp-extras'
              - 'scaffolder-mcp-extras'
          auth:
            externalAccess:
              - type: static
                options:
                  token: ${ADMIN_TOKEN}
                  subject: admin-curl-access
              - type: static
                options:
                  token: ${MCP_TOKEN}
                  subject: mcp-clients
            keys:
              - secret: "${BACKEND_SECRET}"
          baseUrl: "${RHDH_BASE_URL}"
          database:
            connection:
              password: ${POSTGRESQL_ADMIN_PASSWORD}
              user: postgres
          cors:
            origin: "${RHDH_BASE_URL}"
          csp:
            upgrade-insecure-requests: false
            img-src:
              - "'self'"
              - "data:"
              - https://img.freepik.com
              - https://cdn.dribbble.com
              - https://upload.wikimedia.org
              - https://podman-desktop.io
              - https://argo-cd.readthedocs.io
              - https://instructlab.ai
              - https://quay.io
              - https://news.mit.edu
            script-src:
              - "'self'"
              - "'unsafe-eval'"
              - https://cdn.jsdelivr.net
          reading:
            allow:
              - host: example.com
              - host: '*.mozilla.org'
              - host: '*.openshift.com'
              - host: '*.openshiftapps.com'
              - host: '10.*:9090'
              - host: '127.0.0.1:9090'
              - host: '127.0.0.1:8888'
              - host: '127.0.0.1:7070'
              - host: 'localhost:9090'
              - host: 'localhost:8888'
              - host: 'localhost:7070'
        signInPage: oidc
        catalog:
          rules:
            - allow: [User, Group, System, Domain, Component, Resource, Location, Template, API]
          locations:
            - target: https://github.com/benwilcock/rhdh-techdocs/blob/main/rhdh-catalog-info.yaml
              rules:
                - allow: [Component, System]
              type: url
            - target: https://github.com/redhat-ai-dev/ai-lab-template/blob/ai-rolling-demo-1_10/all.yaml
              type: url
              rules:
                - allow: [Component, Location, Template]
            - target: https://github.com/redhat-ai-dev/llama-stack-agentic-sample/blob/ai-rolling-demo-1_10/all.yaml
              type: url
              rules:
                - allow: [Component, Location, Template]
            - target: https://github.com/redhat-ai-dev/ai-rolling-demo-gitops/blob/development/catalog-info.yaml
              type: url
              rules:
                - allow: [Component, System]
          providers:
            modelCatalog:
              development:
                baseUrl: http://localhost:9090
            github:
              providerId:
                organization: "${GITOPS_GIT_ORG}"
                schedule:
                  frequency:
                    minutes: 15
                  initialDelay:
                    seconds: 15
                  timeout:
                    minutes: 15
            githubOrg:
              githubUrl: https://github.com
              orgs: ["${GITOPS_GIT_ORG}"]
              schedule:
                frequency:
                  minutes: 15
                initialDelay:
                  seconds: 15
                timeout:
                  minutes: 15
            keycloakOrg:
              default:
                baseUrl: "${KEYCLOAK_BASE_URL}"
                loginRealm: "${KEYCLOAK_REALM}"
                realm: "${KEYCLOAK_REALM}"
                clientId: "${KEYCLOAK_CLIENT_ID}"
                clientSecret: "${KEYCLOAK_CLIENT_SECRET}"
                schedule:
                  frequency: { minutes: 1 }
                  timeout: { minutes: 1 }
                  initialDelay: { seconds: 15 }
                signIn:
                  resolvers:
                    - resolver: emailMatchingUserEntityProfileEmail
        lightspeed:
          notebooks:
            enabled: false
            queryDefaults:
              model: "${NOTEBOOKS_QUERY_MODEL}"
              provider_id: "${NOTEBOOKS_QUERY_PROVIDER_ID}"
          mcpServers:
            - name: mcp-integration-tools
              auth: dcr
        mcpActions:
          namespacedToolNames: false
        permission:
          enabled: true
          rbac:
            policies-csv-file: /opt/app-root/src/rbac-policy.csv
            admin:
              users:
                - name: user:default/mfaisal
        integrations:
          github:
            - apps:
                - appId: ${GITHUB_APP_APP_ID}
                  clientId: ${GITHUB_APP_CLIENT_ID}
                  clientSecret: ${GITHUB_APP_CLIENT_SECRET}
                  webhookUrl: ${GITHUB_APP_WEBHOOK_URL}
                  webhookSecret: ${GITHUB_APP_WEBHOOK_SECRET}
                  privateKey: |
                    ${GITHUB_APP_PRIVATE_KEY}
              host: github.com
        kubernetes:
          clusterLocatorMethods:
            - clusters:
                - authProvider: serviceAccount
                  name: default
                  serviceAccountToken: ${K8S_CLUSTER_TOKEN}
                  skipTLSVerify: true
                  url: https://kubernetes.default.svc
              type: config
          customResources:
            - apiVersion: v1beta1
              group: tekton.dev
              plural: pipelines
            - apiVersion: v1beta1
              group: tekton.dev
              plural: pipelineruns
            - apiVersion: v1beta1
              group: tekton.dev
              plural: taskruns
            - apiVersion: v1
              group: route.openshift.io
              plural: routes
          serviceLocatorMethod:
            type: multiTenant
        argocd:
          username: ${ARGOCD_USER}
          password: ${ARGOCD_PASSWORD}
          waitCycles: 25
          appLocatorMethods:
          - type: 'config'
            instances:
              - name: default
                url: https://${ARGOCD_HOSTNAME}
                token: ${ARGOCD_API_TOKEN}
        i18n:
          locales:
            - en
            - it
            - ja
            - fr
        proxy:
          endpoints:
            "/developer-hub":
              target: https://raw.githubusercontent.com
              pathRewrite:
                "^/api/proxy/developer-hub/learning-paths": "/redhat-developer/rhdh-plugins/refs/heads/main/workspaces/ai-integrations/plugins/ai-experience/src/learning-paths/data.json"
              changeOrigin: true
              secure: false
            "/ai-rssfeed":
              target: "https://news.mit.edu/topic/mitartificial-intelligence2-rss.xml"
              changeOrigin: true
              followRedirects: true
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthcheck
          port: 7007
          scheme: HTTP
        initialDelaySeconds: 30
        periodSeconds: 10
        successThreshold: 2
        timeoutSeconds: 2
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthcheck
          port: 7007
          scheme: HTTP
        initialDelaySeconds: 60
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 2
      extraEnvVars:
        - name: POSTGRESQL_ADMIN_PASSWORD
          valueFrom:
            secretKeyRef:
              key: postgres-password
              name: "{{ .Release.Name }}-postgresql"
        # Only for demo purposes: Remove in production
        - name: NODE_TLS_REJECT_UNAUTHORIZED
          value: "0"
      extraEnvVarsSecrets:
        - github-secrets
        - kubernetes-secrets
        - rhdh-secrets
        - keycloak-secrets
        - argocd-secrets
        - lightspeed-secrets
        - llama-stack-secrets
      args:
        - "--config"
        - dynamic-plugins-root/app-config.dynamic-plugins.yaml
      extraVolumeMounts:
        - name: dynamic-plugins-root
          mountPath: /opt/app-root/src/dynamic-plugins-root
        - name: rbac-policy
          mountPath: /opt/app-root/src/rbac-policy.csv
          subPath: rbac-policy.csv
          readOnly: true
        # tmp backstage volume for scaffolder tasks
        - name: backstage-tmp
          mountPath: /tmp
        - name: extensions-catalog
          mountPath: /extensions
      extraVolumes:
        - name: dynamic-plugins-root
          ephemeral:
            volumeClaimTemplate:
              spec:
                accessModes:
                  - ReadWriteOnce
                resources:
                  requests:
                    storage: 2Gi
        - name: dynamic-plugins
          configMap:
            defaultMode: 420
            name: "{{ .Release.Name }}-dynamic-plugins"
            optional: true
        - name: dynamic-plugins-npmrc
          secret:
            defaultMode: 420
            optional: true
            secretName: dynamic-plugins-npmrc
        # tmp backstage volume for scaffolder tasks
        - name: backstage-tmp
          emptyDir: {}
        - name: extensions-catalog
          emptyDir: {}
        - name: rbac-policy
          configMap:
            name: rbac-policy
      initContainers:
        - name: install-dynamic-plugins
          image: '{{ include "backstage.image" . }}'
          command:
            - ./install-dynamic-plugins.sh
            - /dynamic-plugins-root
          env:
            - name: NPM_CONFIG_USERCONFIG
              value: /opt/app-root/src/.npmrc.dynamic-plugins
            - name: CATALOG_INDEX_IMAGE
              value: '{{ .Values.global.catalogIndex.image.registry }}/{{ .Values.global.catalogIndex.image.repository }}:{{ .Values.global.catalogIndex.image.tag }}'
            - name: CATALOG_ENTITIES_EXTRACT_DIR
              value: '/extensions'
          imagePullPolicy: Always
          volumeMounts:
            - mountPath: /dynamic-plugins-root
              name: dynamic-plugins-root
            - mountPath: /opt/app-root/src/dynamic-plugins.yaml
              name: dynamic-plugins
              readOnly: true
              subPath: dynamic-plugins.yaml
            - mountPath: /opt/app-root/src/.npmrc.dynamic-plugins
              name: dynamic-plugins-npmrc
              readOnly: true
              subPath: .npmrc
            - mountPath: /extensions
              name: extensions-catalog
      installDir: /opt/app-root/src
      podAnnotations:
        checksum/dynamic-plugins: >-
          {{- include "common.tplvalues.render" ( dict "value"
          .Values.global.dynamic "context" $) | sha256sum }}
    ingress:
      host: "{{ .Values.global.host }}"
    postgresql:
      enabled: true
      postgresqlDataDir: /var/lib/pgsql/data/userdata
      image:
        registry: registry.redhat.io
        repository: rhel9/postgresql-15
        tag: latest
      auth:
        username: postgres
        existingSecret: "{{ .Release.Name }}-postgresql"
        secretKeys:
          adminPasswordKey: postgres-password
      primary:
        podSecurityContext:
          enabled: false
        containerSecurityContext:
          enabled: false
        persistence:
          enabled: true
          size: 1Gi
          mountPath: /var/lib/pgsql/data
        extraEnvVars:
          - name: POSTGRESQL_ADMIN_PASSWORD
            valueFrom:
              secretKeyRef:
                key: postgres-password
                name: "{{ .Release.Name }}-postgresql"
  route:
    annotations: {}
    enabled: true
    host: "{{ .Values.global.host }}"
    path: "/"
    wildcardPolicy: None
    tls:
      enabled: true
      termination: "edge"
      certificate: ""
      key: ""
      caCertificate: ""
      destinationCACertificate: ""
      insecureEdgeTerminationPolicy: "Redirect"
rhoai:
  enabled: true