values.yaml

# Default values for did-auth-proxy-helm.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: 098061033856.dkr.ecr.us-west-2.amazonaws.com/did-auth-proxy
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: "latest"

imagePullSecrets: 
  - name: regcred
nameOverride: "did-auth-proxy-helm"
fullnameOverride: "did-auth-proxy-helm"

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

service:
  type: ClusterIP
  port: 80
  
#example with influx as a backend service

ingress:
  enabled: false
  className: ""
  annotations:
    kubernetes.io/ingress.class: nginx
  hosts:
    - host: did-auth-proxy-sandbox.energyweb.org
      paths:
      - path: /
        pathType: Prefix

  tls:
      - secretName: did-auth-proxy-secret
        hosts:
          - did-auth-proxy-sandbox.energyweb.org

config:
  enabled: false
  secretRefName: {}
  configRefName: {}

#for now dummy configs
appValues:
  PORT: 80

opsValues:
  REDIS_PORT: 6379

resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

nodeSelector: {}

tolerations: []

affinity: {}

sealedSecret:
  enabled: false
  annotations: {}
  encryptedData: {}

########
# Redis

redis:
  enabled: true
  auth:
    password: redis

########
# nginx

nginx:
  fullnameOverride: "did-auth-proxy-nginx"
  service:
    type: ClusterIP
  # ngxin config for ngxin service
  serverBlock: |-
    server {
      listen 0.0.0.0:8080;
      server_name  _;
      location ~ ^/(backend-docs|backend-health) {
          proxy_pass http://backend-server.namespace.svc.cluster.local;
      }
      location ~ ^/auth {
          proxy_pass http://did-auth-proxy-helm.namespace.svc.cluster.local;
      }
      location ~ / {
          auth_request /token_introspection;
          proxy_pass http://backend-server.namespace.svc.cluster.local;
      }
      location = /token_introspection {
            internal;
            proxy_method      GET;
            proxy_set_header  Authorization "$http_authorization";
            proxy_set_header  Content-Length "";
            proxy_pass        http://did-auth-proxy-helm.namespace.svc.cluster.local/auth/token-introspection;
      }
    }

  ingress:
    enabled: false
    annotations: 
      kubernetes.io/ingress.class: azure/application-gateway
      appgw.ingress.kubernetes.io/ssl-redirect: "true"
    hostname: ddhub-dev.energyweb.org
    pathType: Prefix
    path: /
    tls: false
    extraTls:
      - hosts:
        - ddhub-dev.energyweb.org
        secretName: dsb-tls-secret

  livenessProbe:
    enabled: false

  readinessProbe:
    enabled: false

  customLivenessProbe:
    httpGet:
      path: /auth
      port: http

  customReadinessProbe:
    httpGet:
      path: /auth
      port: http