global:
  registryHostname: "terra.k8c.ru"       # Переопределяется при миграции
  namespace: "terraform-registry"

registry:
  image:
    repository: "naeel/terraform-registry-server"  # → Harbor при миграции
    tag: "latest"
    pullPolicy: IfNotPresent
  replicas: 1                             # → 2 в prod
  resources:
    requests:
      cpu: 100m
      memory: 128Mi
    limits:
      cpu: 500m
      memory: 256Mi
  service:
    port: 80
    targetPort: 8080
  healthcheck:
    enabled: true
    path: /healthz
    port: 8080

operator:
  image:
    repository: "naeel/terraform-registry-operator"
    tag: "latest"
  replicas: 1
  resources:
    requests:
      cpu: 50m
      memory: 64Mi
    limits:
      cpu: 500m
      memory: 128Mi

docs:
  enabled: false
  image:
    repository: "naeel/terraform-registry-server"
    tag: "docs-dev-fixed"
    pullPolicy: IfNotPresent

ingress:
  enabled: true
  className: "nginx"
  host: "terra.k8c.ru"                   # Переопределяется
  tls:
    enabled: true
    issuer: "letsencrypt-prod"           # НЕ ТРОГАТЬ LetsEncrypt issuer!
    secretName: "registry-tls"
  annotations:
    nginx.ingress.kubernetes.io/proxy-body-size: "100m"

s3:
  endpoint: "s3.msk-1.ngcloud.ru"
  bucket: "terraform-registry"
  useSSL: true
  # credentials через existingSecret
  existingSecret: "s3-credentials"
  accessKeyField: "access-key"
  secretKeyField: "secret-key"

pdb:
  enabled: false                          # → true в prod
  minAvailable: 1

networkPolicy:
  enabled: false                          # → true при миграции