provider-service/ops/chart/values.yaml

controllers:
  main:
    enabled: true
    type: deployment
    replicas: 1
    containers:
      main:
        image:
          repository: gitea.corredorconect.com/software-engineering/provider-service
          tag: '{{ $.Chart.AppVersion }}'
        env:
          LOG_LEVEL: debug
          MIX_ENV: prod
          PORT: "8080"
          PHX_HOST: "0.0.0.0"
          PHX_SERVER: "true"
          S3_HOST:
            value: "dev.s3.corredorconect.com"
          S3_BUCKET:
            value: "provider-service"
          AWS_REGION:
            value: "us-east-1"
          AWS_ACCESS_KEY_ID:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-s3-credentials'
                key: rootAccessKeyId
          AWS_SECRET_ACCESS_KEY:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-s3-credentials'
                key: rootSecretAccessKey
          RELEASE_COOKIE:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-secrets'
                key: cookie
          SECRET_KEY_BASE:
            valueFrom:
              secretKeyRef:
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-secrets'
                key: secretKeyBase
          DATABASE_URL:
            valueFrom:
              secretKeyRef:
                name: provider-service-cluster-pg-app
                key: uri
        probes:
          liveness:
            enabled: true
            custom: true
            spec:
              httpGet:
                path: /health
                port: 8080
              initialDelaySeconds: 30
              periodSeconds: 10
          readiness:
            enabled: true
            custom: true
            spec:
              httpGet:
                path: /health/ready
                port: 8080
              initialDelaySeconds: 5
              periodSeconds: 5
        resources:
          requests:
            cpu: 100m
            memory: 256Mi
          limits:
            cpu: 500m
            memory: 512Mi

service:
  main:
    controller: main
    type: ClusterIP
    ports:
      http:
        port: 8080
        protocol: HTTP

rawResources:
  password-generator:
    enabled: true
    apiVersion: generators.external-secrets.io/v1alpha1
    kind: Password
    suffix: password-generator 
    spec:
      spec:
        length: 32
        noUpper: false
        allowRepeat: true
        secretKeys:
          - cookie
          - secretKeyBase

  s3-credentials:
    enabled: true
    apiVersion: external-secrets.io/v1
    kind: ExternalSecret
    suffix: s3-credentials
    spec:
      spec:
        refreshInterval: 0s
        secretStoreRef:
          name: cluster-secrets-store
          kind: ClusterSecretStore
        target:
          name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-s3-credentials'
          creationPolicy: Owner
        data:
          - secretKey: rootAccessKeyId
            remoteRef:
              key: versitygw/versitygw-external-secret-secrets
              property: rootAccessKeyId
          - secretKey: rootSecretAccessKey
            remoteRef:
              key: versitygw/versitygw-external-secret-secrets
              property: rootSecretAccessKey

  external-secret:
    enabled: true
    apiVersion: external-secrets.io/v1
    kind: ExternalSecret
    suffix: secrets
    spec:
      spec:
        refreshInterval: 0s
        secretStoreRef:
          name: cluster-secrets-store
          kind: ClusterSecretStore
        target:
          name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-secrets'
          creationPolicy: Owner
        dataFrom:
          - sourceRef:
              generatorRef:
                apiVersion: generators.external-secrets.io/v1alpha1
                kind: Password
                name: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}-password-generator'

  cluster:
    enabled: true
    apiVersion: postgresql.cnpg.io/v1
    kind: Cluster
    suffix: pg
    spec:
      spec:
        description: "PostgreSQL cluster for provider-service"
        instances: 1
        bootstrap:
          initdb:
            database: provider_service
            owner: provider_service
        storage:
          size: 5Gi