provider-service/ops/chart/values.yaml

controllers:
  main:
    enabled: true
    type: deployment
    replicas: 1
    initContainers:
      migrate:
        image:
          repository: gitea.corredorconect.com/software-engineering/provider-service
          tag: '{{ $.Chart.AppVersion }}'
        command:
          - "/bin/provider_service"
        args:
          - "eval"
          - "ProviderService.Release.migrate"
        env:
          MIX_ENV: prod
          SECRET_KEY_BASE:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-secrets'
                key: secretKeyBase
          RELEASE_COOKIE:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-secrets'
                key: cookie
          DATABASE_URL:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-cluster-pg-app'
                key: uri
    containers:
      main:
        image:
          repository: gitea.corredorconect.com/software-engineering/provider-service
          tag: '{{ $.Chart.AppVersion }}'
        env:
          LOG_LEVEL: debug
          MIX_ENV: prod
          PORT: "8080"
          CORS_ORIGIN:
            value: "*"
          PHX_HOST: "0.0.0.0"
          PHX_SERVER: "true"
          RELEASE_COOKIE:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-secrets'
                key: cookie
          SECRET_KEY_BASE:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-secrets'
                key: secretKeyBase
          DATABASE_URL:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-cluster-pg-app'
                key: uri

          # Zitadel Configuration
          ZITADEL_ISSUER:
            value: "https://id.corredorconect.com"
          ZITADEL_CLIENT_ID:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-apiapp-client-secret'
                key: clientId
          ZITADEL_CLIENT_SECRET:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-apiapp-client-secret'
                key: clientSecret
          ZITADEL_PROJECT_ID:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-apiapp-client-secret'
                key: projectId
        probes:
          liveness:
            enabled: true
            custom: true
            spec:
              httpGet:
                path: /health
                port: 8080
              initialDelaySeconds: 30
              periodSeconds: 10
          readiness:
            enabled: true
            custom: true
            spec:
              httpGet:
                path: /health/ready
                port: 8080
              initialDelaySeconds: 5
              periodSeconds: 5
        resources:
          requests:
            cpu: 100m
            memory: 256Mi
          limits:
            cpu: 500m
            memory: 512Mi

service:
  main:
    controller: main
    type: ClusterIP
    ports:
      http:
        port: 8080
        protocol: HTTP

rawResources:
  password-generator:
    enabled: true
    apiVersion: generators.external-secrets.io/v1alpha1
    kind: Password
    suffix: password-generator 
    spec:
      spec:
        length: 32
        noUpper: false
        allowRepeat: true
        secretKeys:
          - cookie
          - secretKeyBase

  external-secret:
    enabled: true
    apiVersion: external-secrets.io/v1
    kind: ExternalSecret
    suffix: secrets
    spec:
      spec:
        refreshInterval: 0s
        secretStoreRef:
          name: cluster-secrets-store
          kind: ClusterSecretStore
        target:
          name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-secrets'
          creationPolicy: Owner
        dataFrom:
          - sourceRef:
              generatorRef:
                apiVersion: generators.external-secrets.io/v1alpha1
                kind: Password
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-password-generator'

  cluster:
    enabled: true
    apiVersion: postgresql.cnpg.io/v1
    kind: Cluster
    suffix: pg
    spec:
      spec:
        description: "PostgreSQL cluster for provider-service"
        instances: 1
        bootstrap:
          initdb:
            database: provider_service
            owner: provider_service
        storage:
          size: 5Gi

  database:
    enabled: true
    apiVersion: postgresql.cnpg.io/v1
    kind: Database
    suffix: database
    spec:
      spec:
        name: provider_service
        owner: provider_service
        cluster:
          name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-cluster-pg'
        schemas:
          - name: eventstore
            owner: provider_service

  apiapp:
    enabled: true
    apiVersion: zitadel.github.com/v1alpha1
    kind: APIApp
    suffix: apiapp
    spec:
      spec:
        projectRef:
          name: provider-service-dev
          namespace: zitadel-resources-operator
        apiAppName: provider-service
        authMethodType: API_AUTH_METHOD_TYPE_BASIC