# Jitsu Dev Helm Chart Values
# This chart deploys services using local binaries mounted via hostPath

# Path to the project root on the host machine, mounted into containers.
# Required — no default. dev-deploy.sh sets it automatically; for direct
# helm invocations pass --set projectRoot=<absolute path to your checkout>.
projectRoot: ""

# Optional syncctl-only source mount, for testing a worktree without replacing
# the checkout used by the other development services.
syncctlProjectRoot: ""

# Existing ConfigMap containing ca.crt: additional trusted CA certificates for
# syncctl and Reverse ETL runners (e.g. portless local HTTPS). Empty keeps defaults.
syncctlExtraCAConfigMap: ""

# Reverse ETL jobs use a separately built retl-runner image, not the host checkout.
# Provision the runtime Secret and cloud IAM before enabling. See README.md.
reverseEtl:
  enabled: false
  runnerImage: "" # Required when enabled; use a version tag or digest from this rollout.
  runtimeSecret: "" # Existing Secret in this release's namespace; no credentials in values.
  # Optional controller-only credentials (e.g. SYNCCTL_DATABASE_URL and auth tokens).
  controllerSecret: ""
  serviceAccount:
    create: true
    name: "" # Defaults to <release>-retl-runner; required if create=false.
    annotations: {} # GKE Workload Identity / EKS IRSA; never applied to sync-pod.
  resources:
    requests:
      cpu: "100m"
      memory: "256Mi"
      ephemeral-storage: "1Gi"
    limits:
      cpu: "1"
      memory: "8Gi"
      ephemeral-storage: "4Gi"
  scratchSizeLimit: "2Gi" # Disk-backed /tmp emptyDir, <= ephemeral-storage limit.

# Additional controller-only Secret/ConfigMap env sources, after chart defaults.
# Useful when syncctl uses a Mac-hosted console and a separate development DB.
syncctlExtraEnvFrom: []

# Environment variables
env:
  # Common to all services
  common:
    LOG_FORMAT: "text"
  # Per-service overrides — a key set here wins over env.common, computed
  # URLs (CONSOLE_URL, REPOSITORY_URL, ...) and chart defaults for that service
  ingest: {}
  bulker: {}
  rotor: {}
  profiles: {}
  syncctl: {}
  operator:
    FUNCTIONS_SERVER_IMAGE: jitsucom/functions-server:beta
  console:
    NEXTAUTH_URL: "http://localhost:3000"
    ENABLE_CREDENTIALS_LOGIN: true
    SEED_USER_EMAIL: admin@example.com
    SEED_USER_PASSWORD: changeme
    JITSU_PUBLIC_URL: "http://localhost:3000"
    JWT_SECRET: "dev-jwt-secret-change-in-production"
    SYNCS_ENABLED: true

# Dependencies (Kafka, PostgreSQL, ClickHouse, MongoDB) are deployed by the
# separate ../helm-deps chart — dev-deploy.sh installs it first and waits for
# it to become healthy before deploying this chart. Their connection URLs
# reach the services through the `jitsu-deps-urls` Secret (envFrom); to use an
# external instance, disable it in helm-deps/values.yaml and set the matching
# env.common.KAFKA_BOOTSTRAP_SERVERS / DATABASE_URL / CLICKHOUSE_URL /
# MONGODB_URL here (explicit env wins over envFrom).

# Service scaling (set replicas to 0 to disable)
scaling:
  ingest:
    replicas: 1
  bulker:
    replicas: 1
  rotor:
    replicas: 1
  profiles:
    replicas: 1
  syncctl:
    replicas: 1
  operator:
    replicas: 1
  console:
    replicas: 1