---
apiVersion: v1
kind: ConfigMap
metadata:
  name: chartmuseum-3.9.0-d2iq-defaults
  namespace: ${releaseNamespace}
data:
  values.yaml: |
    env:
      existingSecret: ${chartmuseumAdminCredentialsSecret}
      existingSecretMappings:
        BASIC_AUTH_USER: username
        BASIC_AUTH_PASS: password
      open:
        STORAGE: local
        DISABLE_API: false
        AUTH_ANONYMOUS_GET: true
    persistence:
      enabled: true
      existingClaim: chartmuseum
    service:
      servicename: chartmuseum
      annotations:
        traefik.ingress.kubernetes.io/service.serversscheme: https
    deployment:
      extraVolumeMounts:
        - name: tls
          mountPath: "/tls/"
          readOnly: true
      extraVolumes:
        - name: tls
          secret:
            secretName: chartmuseum-tls
      annotations:
        secret.reloader.stakater.com/reload: chartmuseum-tls
    strategy:
      type: Recreate
    extraArgs:
      - --tls-cert=/tls/tls.crt
      - --tls-key=/tls/tls.key
    probes:
      livenessHttpGetConfig:
        scheme: HTTPS
      readinessHttpGetConfig:
        scheme: HTTPS