# Example: public Ingress + Let's Encrypt (cert-manager) + Hub image.
#
# WARNING: Laboratory / demo template. Always override weak secrets:
#   --set secret.ticketSigningKey="$(openssl rand -hex 32)"
#   --set postgresql.auth.password="$(openssl rand -hex 16)"
# Do not expose a public Ingress with the placeholder values below.
#
#   helm upgrade --install pve-sim ./helm/proxmox-api-simulator \
#     -n proxmox-sim --create-namespace \
#     -f helm/proxmox-api-simulator/values-ingress-example.yaml \
#     --set certManager.email=you@example.com \
#     --set 'ingress.hosts[0].host=proxmox.devops.org.ru' \
#     --set 'ingress.tls[0].hosts[0]=proxmox.devops.org.ru' \
#     --set secret.ticketSigningKey="$(openssl rand -hex 32)" \
#     --set postgresql.auth.password="$(openssl rand -hex 16)"

image:
  repository: inecs/proxmox-api-simulator
  tag: "0.1.0"
  pullPolicy: IfNotPresent

secret:
  create: true
  ticketSigningKey: "replace-me"

postgresql:
  enabled: true
  auth:
    username: proxmox
    password: "replace-me-db-password"
    database: proxmox_simulator

seed:
  enabled: true
  profile: small

ingress:
  enabled: true
  className: nginx
  # Keep API JSON bodies (404/405/401). Cluster-wide custom-http-errors HTML
  # pages must not rewrite simulator error responses.
  annotations:
    nginx.ingress.kubernetes.io/proxy-intercept-errors: "false"
    # If the controller still injects branded HTML for 404/405, narrow or clear
    # custom-http-errors on this Ingress (overrides controller defaults):
    nginx.ingress.kubernetes.io/custom-http-errors: "502,503"
  hosts:
    - host: proxmox.devops.org.ru
      paths:
        - path: /
          pathType: Prefix
  tls:
    - secretName: proxmox-api-simulator-tls
      hosts:
        - proxmox.devops.org.ru

certManager:
  enabled: true
  createClusterIssuer: true
  createStagingIssuer: true
  email: you@example.com
  issuerName: letsencrypt-prod
  stagingIssuerName: letsencrypt-staging
  # Set true first to validate HTTP-01 against Let's Encrypt staging.
  useStaging: false
  solverIngressClassName: nginx
