image:
  # One image per role: <repository>-enqueue and <repository>-deliver. Not
  # published yet: point it at a registry your cluster can pull from.
  repository: ghcr.io/janbjorge/stafett
  # Both images share it. Defaults to the chart's appVersion.
  tag: ""
  pullPolicy: IfNotPresent

# For a private registry, e.g. [{name: regcred}].
imagePullSecrets: []

# DATABASE_URL, and STAFETT_SIGNING_SECRET to sign deliveries. Prefer an
# existing Secret with those keys; inline values end up in the release,
# base64 only. DATABASE_URL must be a direct connection, not a pooler.
# Without a signing secret, deliver sends no signature headers.
secret:
  existingSecret: ""
  databaseUrl: ""
  # Changing an inline secret rolls the pods.
  signingSecret: ""

enqueue:
  replicas: 1
  # Extra environment variables, name: value. Any setting from
  # https://stafett.dev/docs/configuration except STAFETT_PORT: the probes
  # expect port 8000.
  env: {}
  # A namespace with a ResourceQuota on CPU limits also needs limits.cpu,
  # here and under deliver and setup.
  resources:
    requests: {cpu: 50m, memory: 128Mi}
    limits: {memory: 256Mi}
  # No Ingress: the API has no auth (ADR 0004). Keep it in-cluster.
  service:
    type: ClusterIP
    port: 8000

deliver:
  replicas: 1
  # Extra environment, e.g. STAFETT_CONCURRENCY or the retry settings.
  env: {}
  resources:
    requests: {cpu: 50m, memory: 128Mi}
    limits: {memory: 256Mi}
  # Keep it above STAFETT_DELIVERY_TIMEOUT_SECONDS (30s default), so
  # deliveries in flight finish on SIGTERM instead of being sent twice.
  terminationGracePeriodSeconds: 60

# The init container that installs or upgrades schema "stafett" before each
# pod starts. Namespaces with a ResourceQuota refuse pods whose containers,
# init containers included, set no requests and limits.
setup:
  resources:
    requests: {cpu: 50m, memory: 128Mi}
    limits: {memory: 256Mi}

# Both apply to enqueue and deliver.
nodeSelector: {}
tolerations: []