values.yaml

# Default values for grader-api.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: containers.renci.org/helxplatform/grader-api
  pullPolicy: Always
  # Overrides the image tag whose default is the chart appVersion.
  tag: latest

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

service:
  type: ClusterIP
  port: 8000

ingress:
  enabled: false
  className: ""
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
    - host: chart-example.local
      paths:
        - path: /
          pathType: ImplementationSpecific
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - chart-example.local

resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

nodeSelector: {}

tolerations: []

affinity: {}

config:
  enabled: true
  data:
    DEV_PHASE: dev
    GITEA_SSH_URL: ssh://git@<my-gitea-ssh-svc>:2222
    GITEA_ASSIST_API_URL: <change-me>
    POSTGRES_PORT: "5432"
    POSTGRES_DB: postgres
    POSTGRES_USER: postgres
    STUDENT_APPSTORE_HOST: "http://my-student-appstore-service:8000"
    INSTRUCTOR_APPSTORE_HOST: "http://my-instructor-appstore-service:8000"
    LDAP_HOST: ldap.unc.edu
    LDAP_PORT: "636"
    LDAP_SERVICE_ACCOUNT_BIND_DN: "cn=unc:app:renci:eduhelx,ou=Applications,dc=unc,dc=edu"
    LDAP_TIMEOUT_SECONDS: "5"
    NUM_WORKERS: "4"
  secretData:
    # -- # E.g. run `secrets.token_urlsafe(64)` in a Python 3 shell to generate this value.
    # The JWT secret key is a private key used to sign/verify that a JWT is issued by the server.
    JWT_SECRET_KEY: "<change-me>"
    # The bearer token used to authenticate with Gitea Assist. The value is encoded in Gitea Assist's
    # credential secret (`config.secrets.creds` in the gitea-assist chart values)
    GITEA_ASSIST_AUTH_TOKEN: "<change-me>"
    # -- The account password for the LDAP service
    LDAP_SERVICE_ACCOUNT_PASSWORD: "<change-me>"

livenessProbe:
  initialDelaySeconds: 30
  periodSeconds: 30
readinessProbe:
  initialDelaySeconds: 30
  periodSeconds: 10

postgresql:
  enabled: true
  auth:
    existingSecret: grader-api-postgresql